> For the complete documentation index, see [llms.txt](https://malfav.gitbook.io/home/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://malfav.gitbook.io/home/os-internals/suspicious-apis/system-information-apis.md).

# System Information API's

List of System Information API's by Malware Dude :)

* **`GetSystemInfo`**: Provides details about the system's hardware, such as processor type and number of processors.
* **`GlobalMemoryStatusEx`**: Retrieves information about the system’s memory, including available physical and virtual memory.
* **`NtQuerySystemInformation`**: Offers detailed information about system processes, memory, and hardware configurations. This function is often used to gather extensive system details.
* **`GetLogicalDrives`**: Returns a bitmask indicating which disk drives are available, helping malware determine available storage locations.
* **`GetDiskFreeSpaceEx`**: Provides details about disk space, including total, free, and available space on a disk volume.
* **`GetEnvironmentVariable`**: Retrieves the value of an environment variable, which can be used to gather information about the system’s configuration or user environment.
* **`GetComputerName`**: Gets the NetBIOS name of the local computer, which can be used to identify the system on a network.
* **`GetUserName`**: Retrieves the name of the currently logged-in user, which can help malware tailor its actions based on the user’s identity.
* **`GetSystemMetrics`**: Provides various system metrics and configuration settings, such as screen resolution or the presence of hardware components.
* **`IsProcessorFeaturePresent`**: Determines if the system supports specific processor features, which can help malware adapt its code based on the processor's capabilities.
* **`GetWindowsVersion`**: Although deprecated, this API provides information about the version of the Windows operating system.