Behaviors
List of software behaviors discovered with static code analysis.
Retrieves the name of the user associated with the process. (x1)
search
Modifies file/directory permissions. (x4)
permissions
Deletes files in Windows system directories. (x1)
file
Detects VMWare related virtualized environments. (x2)
evasion
Tampers with autorun registry keys. (x1)
autostart
Decrypts data using SEED cipher. (x1)
packer
Encodes data using the Base64 algorithm. (x22)
packer
Decrypts data using the Windows Cryptography API. (x1)
packer
Decodes data using the Base64 algorithm. (x14)
packer
Decrypts data using Advanced Encryption Standard (AES). (x1)
packer