![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
(no subject)
2025-07-04 06:38
Who Let The Dogs Out 🐾 wrote the following post Fri, 04 Jul 2025 04:34:26 +0300I made my VM think it has a CPU fan | mindless-area
#virtualization #bios #cooler #fan
https://wbenny.github.io/2025/06/29/i-made-my-vm-think-it-has-a-cpu-fan.html
> ...so the malware would finally shut up and run
Some malware samples are known to do various checks to determine if they are running in a virtual machine. One of the common checks is to look for the presence of certain hardware components that are typically not emulated in virtualized environments. One such component is the CPU fan. One of the observed ways malware checks for the presence of a CPU fan is by looking for the Win32_Fan class in WMI:
`wmic path Win32_Fan get *`
#virtualization #bios #cooler #fan
https://wbenny.github.io/2025/06/29/i-made-my-vm-think-it-has-a-cpu-fan.html
> ...so the malware would finally shut up and run
Some malware samples are known to do various checks to determine if they are running in a virtual machine. One of the common checks is to look for the presence of certain hardware components that are typically not emulated in virtualized environments. One such component is the CPU fan. One of the observed ways malware checks for the presence of a CPU fan is by looking for the Win32_Fan class in WMI:
`wmic path Win32_Fan get *`
Source:
![Screenshot from the movie Independence Day (1996) showing a computer screen containing a window that reads "Uploading Virus" with a skull and crossbones logo and a nearly complete progress bar.](https://s3.masto.ai/media_attachments/files/114/795/137/265/179/935/original/2f405808c9917353.png "Screenshot from the movie Independence Day (1996) showing a computer screen containing a window that reads "Uploading Virus" with a skull and crossbones logo and a nearly complete progress bar.")