I made my VM think it has a CPU fan
Why bother? Some malware samples are known to do various checks to determine if they are running in a virtual machine. One of the common checks is to look for the presence of certain hardware components that are typically not emulated in virtualized environments. One such component is the CPU fan. One of the observed ways malware checks for the presence of a CPU fan is by looking for the Win32_Fan class in WMI: wmic path Win32_Fan get * And the reason they do this is they want to avoid runnin