turns out for one of the anti debugging techniques . exploit developers uses Win32_TemperatureProbe to check the readings of temperature of hardware . and if no readings came, it was used as vm detection. So cool.
For those who are thinking how to prevent this as a malware analyst. you can use NOPS in memory flow to prevent executing that function and put a breakpoint on it. This will prevent whatever function you want to run, in this case Win32_TemperatureProbe.