Is it possible to disable reading hosts file by libCurl

Question

There is a detection in VirusTotal: remote System Discovery T1018: Reads the hosts file. For testing I want to get rid of this detection. I suppose that it is libCurl, who reading this file. Is it possible to disable libCurl from reading hosts and what are consequenses of that?

Answer 1

You can set the CURLOPT_RESOLVE option to explicitly specify the IP address of the remote host in the request. This will bypass the need for libCurl to resolve the hostname using the hosts file.