RCE then run an exploit to break out VM. If it's success, then you are on VM.