Changes its process name

Reads user data of web browsers

Reads stored browser data which can include saved credentials.

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

Checks CPU configuration

Checks CPU information which indicate if the system is a virtual machine.

Enumerates running processes

Discovers information about currently running processes on the system

Reads CPU attributes