Behaviors
List of software behaviors discovered with static code analysis.
Retrieves the name of the user associated with the process. (x1)
search
Modifies file/directory permissions. (x1)
permissions
Deletes files in Windows system directories. (x1)
file
Detects VMWare related virtualized environments. (x2)
evasion
Tampers with autorun registry keys. (x1)
autostart
Writes data to the hosts file. (x2)
stealth
Queries the passwd database entry for a given user name. (x1)
steal
Reads data from files containing SSL certificates installed on the system. (x1)
steal
Queries the passwd database entry for a given user ID. (x1)
steal
Decodes data using the Base64 algorithm. (x3)
packer