VMP detects virtualization by using cpuid and some APIs directly called through syscall. Use tiny trace to trace the target program. No syscall calls are recorded, and then the virtual machine is detected. What is the reason for this?
testdemo.zip