Detected presence of files containing URLs that reside in regions with export restrictions by the European Union. (x4)

Detected presence of files containing URLs that link to raw files on GitHub. (x1)

Detected presence of files containing URLs related to IP querying services. (x1)

Detected presence of files containing URLs that use suspicious top-level domains. (x9)

Detected presence of files containing URLs that use non-standard ports. (x4)