Behaviors
List of software behaviors discovered with static code analysis.
Contains URIs related to Symantec security products. (x1)
network
Contains URLs that link to interesting file formats. (x1)
network
Contains IP addresses. (x32)
network
Enumerates system information. (x3)
search
Contains URLs. (x7)
network
Contains URLs with an unusual number of subdomains. (x2)
network
Loads additional .NET assemblies. (x5)
execution
Contains patterns identifying the constants related to the SHA-256 hash function, from the SHA-2 hash family. (x34)
signature
Contains patterns identifying the constants related to the SHA-1 hash function. (x17)
signature
Contains reference to shell32.dll which is Windows Shell Common Dll. (x1)
execution