That report means very little. The guy actively admits he doesn't even know what to look for, and ran his tests on a default virtual machine without any anti-an

That report means very little. The guy actively admits he doesn't even know what to look for, and ran his tests on a default virtual machine without any anti-anti-debugging techniques at all. It is extremely common for malware to detect standard virtual machine setups and not activate their payload.