TGViewer
vx-underground vx-underground @vxunderground · 52.2K subscribers
Post #9099 7.06K
I want to give a big shoutout to "WatchBeam.exe". WatchBeam is the LOUDEST malware I've ever seen.

When I say "runs cmd.exe", I mean it creates a new process. So, in the list below, it is literally creating a new process each time. Does this sound suspicious to you?

> run .exe
> runs cmd.exe, checks if running as admin
> runs powershell, checks screen dimensions
> runs cmd.exe, checks screen dimensions (again)
> runs cmd.exe, checks video controller
> runs cmd.exe, checks disk type
> runs cmd.exe, checks if "VBOX" is present
> runs cmd.exe, checks if "VBOX__" is present
> runs cmd.exe, checks if "VBOX" in registry
> runs cmd.exe, checks if "VirtualBox" in registry
> runs cmd.exe, checks if "VBoxGuest" present
> runs cmd.exe, checks if "VmWare" in registry
> runs cmd.exe, checks if "vmmouse" in registry
> runs cmd.exe, checks if "KVM" in registry
> runs cmd.exe, checks computer model
> runs cmd.exe, checks computer name for "Xen"
> runs cmd.exe, checks computer name for "HyperV"
> runs cmd.exe, checks computer name for "Virtual"
> runs cmd.exe, checks computer serial number
> runs cmd.exe, checks mouse position
> runs cmd.exe, checks motherboard serial number
> runs cmd.exe, checks default drive letter
> runs cmd.exe, kills chrome
> runs cmd.exe, kills edge
> runs cmd.exe, kills brave
> runs cmd.exe, kills opera
> runs cmd.exe, kills vivaldi
> runs cmd.exe, kills yandex
> runs cmd.exe, kills orbitum
> runs cmd.exe, kills atom
> runs cmd.exe, kills kometa
> runs cmd.exe, kills torch
> runs cmd.exe, kills amigo
> runs cmd.exe, kills coccoc
> runs cmd.exe, kills uran
> runs cmd.exe, kills slimjet
> runs cmd.exe, kills ivaldi
> runs cmd.exe, kills firefox
> runs cmd.exe, checks computer serial number (again)
> runs cmd.exe, checks computer status
> runs cmd.exe, checks Windows type
> runs cmd.exe, checks if antivirus installed
> runs cmd.exe, checks if Windows Defender on
> runs cmd.exe, checks computer status (again)
> runs cmd.exe, checks if Kaspersky installed
> runs cmd.exe, checks if Norton installed
> runs cmd.exe, checks if McAfee installed
> runs cmd.exe, checks if BitDefender installed
> runs cmd.exe, checks if AVG installed
> runs cmd.exe, checks if Windows Defender on (again)
> if all tests pass, downloads malware

YOU CREATED A NEW CMD.EXE PROCESS 48 TIMES. WHAT THE FUCK ARE YOU DOING?
  • 😁 152
  • 🤣 113
  • ❤ 17
  • 🔥 9
  • 😎 6
  • 🥰 2
  • 🫡 2
  • 😢 1
More from @vxunderground
  1. Sep 25, 2026Write-up which is factually accurate and cool https://studiominus.nl/ppg-september-inciden…
  2. Sep 25, 2026Yeah, so I decided to check out the Steam goop people were DMing me about. Basically there…
  3. Sep 24, 2026My bad, I forgot to attach the upload log thingie https://vx-underground.org/Updates
  4. Sep 24, 2026Big news for malware enthusiasts: I've uploaded an additional 170,000+ malwares to the int…
  5. Sep 24, 2026Hello, Little People Living Inside My Computer, I have made a YouTube account to discuss m…
  6. Sep 23, 2026> "Two sources familiar with the matter ..." Dawg, they defaced the fucking FBIs website a…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →