Behaviors
List of software behaviors discovered with static code analysis.
Contains URIs related to Symantec security products. (x1)
network
Contains IP addresses. (x6)
network
Contains URLs with an unusual number of subdomains. (x2)
network
Contains URLs. (x1)
network
Contains patterns identifying the constants related to the SHA-256 hash function, from the SHA-2 hash family. (x8)
signature
Contains patterns identifying the constants related to the SHA-1 hash function. (x6)
signature
Contains reference to ntdll.dll which is NT Layer DLL. (x1)
execution
Contains reference to bcrypt.dll which is Windows Cryptographic Primitives Library (Wow64). (x1)
execution
Contains a reference to a common dynamic library or an executable file. (x62)
execution
Contains reference to kernel32.dll which is Windows NT BASE API Client DLL. (x1)
execution