Anomalous binary characteristics Show sources
| static_pe_timestamp | Timestamp on binary predates the release date of the OS version it requires by at least a year |
| static_pe_anomaly | Actual checksum does not match that reported in PE header |
HTTP traffic contains suspicious features which may be indicative of malware related traffic Show sources
| network_anomaly | HTTP traffic contains a POST request with no referer header |
| network_anomaly | http://ocsp.digicert.com/ |
| network_anomaly | http://ocsp.int-x3.letsencrypt.org/ |
| network_anomaly | http://ocsp.pki.goog/GTSGIAG3 |
| network_anomaly | http://ocsp.comodoca.com/ |
Performs some HTTP requests Show sources
| network_url | http://ocsp.digicert.com/ |
| network_url | http://ocsp.int-x3.letsencrypt.org/ |
| network_url | http://ocsp.pki.goog/GTSGIAG3 |
| network_url | http://ocsp.comodoca.com/ |