1. A network device comprising: a plurality of virtual machines based on one or more software modules stored within a memory storage device; and a hardware controller, operating with a first virtual machine of the plurality of virtual machines to (i) monitor one or more behaviors of at least the first virtual machine, (ii) accelerate one or more activities in the first virtual machine to detect a time-delayed malware that performs one or more operations to avoid detection, the accelerating of the one or more activities comprises (a) intercepting one or more time-sensitive system calls and (b) modifying the one or more time-sensitive system calls or corresponding one or more responses to the one or more of the time-sensitive system calls, (iii) identify at least one behavior of the one or more monitored behaviors as an anomalous behavior, and (iv) detect, based at least in part on the identified at least one anomalous behavior, the time-delayed malware in the first virtual machine.