Ghidra Analyzer Extension, finds where Malware might detected a VM, and shows alternative Behaviours for Host and VM - View it on GitHub