Detected presence of files containing URLs related to Bitcoin exchange services. (x1)

Detected presence of files containing URLs with suspicious path components. (x1)

Detected presence of files containing URLs that use suspicious top-level domains. (x1)

Detected presence of plaintext credentials within network protocol strings. (x1)

Detected presence of files containing URLs that use non-standard ports. (x1)