hfiref0x

This article may spark some interest. https://labs.nettitude.com/blog/using-pooltags-to-fingerprint-hosts/ tl;dr; you can built table of specific pool tags used by vm drivers when allocating memory and then use it as vm detection...