XWorm v5.6 main build immediately checks for virtual environments. It will look for:

XWorm 5.6 is a often named XClient3.exe . It functions as a modular toolkit, allowing attackers to customize its capabilities using specialized plugins. XWorm Malware: Analysis, Detection, Removal - Huntress

If the installation is successful, XWorm v5.6 grants the attacker extensive control over the victim's machine. Key capabilities include:

> xworm56main: You already helped. You clicked. The install is at 78%. When it reaches 100%, Meridian will be mine. Doors will lock or open on my command. The air will warm or freeze. The elevators will rise or fall. You cannot stop it.