Behaviors
List of software behaviors discovered with static code analysis.
Contains URIs related to Symantec security products. (x1)
network
Checks operating system version. (x3)
search
Contains IP addresses. (x10)
network
Enumerates system information. (x7)
search
Contains URLs. (x1)
network
Contains URLs with an unusual number of subdomains. (x8)
network
Contains patterns identifying the constants related to the SHA-256 hash function, from the SHA-2 hash family. (x12)
signature
Contains patterns identifying the constants related to the SHA-1 hash function. (x10)
signature
Contains reference to advapi32.dll which is Advanced Windows 32 Base API. (x7)
execution
Contains a reference to a common dynamic library or an executable file. (x413)
execution