Slightly different time and I was using some methods that made it more difficult to determine it waa a VM. Purely guessing - but based on timing it seemed like I wasnt over a threshold - so manual review was used and that wasn't as fast or frequent.