Behaviors
List of software behaviors discovered with static code analysis.
Might contain potentially obfuscated code or data. (x3)
anomaly
Opens URLs during installation or upon launch. (x1)
network
Encodes data using the Base16 algorithm. (x3)
file
Executes files during installation or upon launch. (x1)
execution
Might evaluate code dynamically. (x3)
anomaly
Contains URLs with an unusual number of subdomains. (x2)
network
Calculates the SHA-256 hash of data. (x3)
file
Contains an uninterrupted sequence of Unicode-escaped characters. (x3)
evasion
Queries the value of an environment variable. (x4)
search
Converts binary data to its string representation, commonly used in obfuscation. (x6)
packer