DiamondFox Analysisinfo

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Language

en	828
de	44
ru	38
zh	30
es	16

Country

US: USA	578
RU: Russia	134
CA: Canada	68
CN: China	54
FR: France	14

Actors

DiamondFox	12
Cobalt Strike	7
RedLine Stealer	6
Remcos	5
Quasar RAT	3

Activities

Interest

Timeline

Type

Not Defined	346
Operating System	64
Programming Language Software	60
Content Management System	48
Router Operating System	30

Vendor

Not Defined	234
Oracle	46
Apple	46
Cisco	24
Microsoft	22

Product

Apple Mac OS X	36
Oracle Java SE	26
Linux Kernel	18
Comcast DPC3939	14
Netgear R7000P	10

Vulnerabilities

These are the vulnerabilities that we have identified as researched, approached, or attacked.

#	Vulnerability	Base	Temp	0day	Today	Exp	Cou	KEV	EPSS	CTI	CVE
1	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure	5.3	5.2	$5k-$25k	Calculating	High	Workaround	possible	0.02956	0.00	CVE-2007-1192
2	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official fix		0.00970	0.30	CVE-2010-0966
3	Pligg cloud.php sql injection	6.3	6.3	$0-$5k	$0-$5k	Not defined	Not defined		0.00000	0.47
4	Tiki TikiWiki tiki-editpage.php input validation	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official fix		0.01200	0.34	CVE-2004-1386
5	Microsoft IIS uncpath cross site scripting	5.2	5.0	$5k-$25k	$0-$5k	Proof-of-Concept	Official fix		0.01387	0.09	CVE-2017-0055
6	LogicBoard CMS away.php redirect	6.3	6.1	$0-$5k	$0-$5k	Not defined	Unavailable		0.00000	0.69
7	nginx request smuggling	6.9	6.9	$0-$5k	$0-$5k	Not defined	Not defined		0.00000	0.34	CVE-2020-12440
8	vsftpd deny_file	3.7	3.6	$0-$5k	$0-$5k	Not defined	Official fix		0.35290	0.17	CVE-2015-1419
9	Microsoft IIS IP/Domain Restriction access control	6.5	5.7	$25k-$100k	$0-$5k	Unproven	Official fix		0.09610	0.00	CVE-2014-4078
10	Linux Kernel FXSAVE x87 Register cryptographic issues	4.3	3.9	$5k-$25k	$0-$5k	Proof-of-Concept	Official fix		0.00078	0.00	CVE-2006-1056
11	Cisco IOS/IOS XE Cluster Management Protocol input validation	9.8	9.7	$100k and more	$0-$5k	High	Workaround	verified	0.94117	0.08	CVE-2017-3881
12	Phpsugar PHP Melody Cookie watch.php sql injection	8.5	7.7	$0-$5k	$0-$5k	Proof-of-Concept	Official fix		0.00397	0.00	CVE-2017-15579
13	HP Storage Data Protector memory corruption	10.0	10.0	$5k-$25k	$0-$5k	High	Not defined	expected	0.89835	0.08	CVE-2014-2623
14	Oracle Java JRE MidiDevice.Info race condition	7.5	7.1	$5k-$25k	$0-$5k	Proof-of-Concept	Not defined		0.00000	0.00
15	OAuth/OpenID privileges management	5.3	4.7	$0-$5k	Calculating	Unproven	Unavailable		0.00000	0.03
16	eSyndicat Directory Software suggest-listing.php cross site scripting	3.5	3.5	$0-$5k	$0-$5k	Not defined	Not defined		0.00000	0.52
17	Guangzhou 1GE ONU/V2804RGW formPing os command injection	5.9	5.9	$0-$5k	$0-$5k	Not defined	Not defined	expected	0.84912	0.09	CVE-2020-8958
18	FLDS redir.php sql injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	possible	0.00505	0.00	CVE-2008-5928
19	MGB OpenSource Guestbook email.php sql injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	possible	0.01686	0.08	CVE-2007-0354
20	Sprecher SPRECON-E Configuration File command injection	6.0	5.7	$0-$5k	$0-$5k	Not defined	Official fix		0.00129	0.00	CVE-2020-11496

IOC - Indicator of Compromise (34)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	37.187.56.97	ns3228103.ip-37-187-56.eu	DiamondFox	07/28/2023	verified	High
2	51.254.240.44		DiamondFox	07/28/2023	verified	High
3	63.249.144.71		DiamondFox	07/28/2023	verified	High
4	63.249.148.70		DiamondFox	07/28/2023	verified	High
5	63.249.149.70		DiamondFox	07/28/2023	verified	High
6	64.182.19.61		DiamondFox	07/28/2023	verified	High
7	64.182.21.64		DiamondFox	07/28/2023	verified	High
8	XX.XXX.XXX.XX		Xxxxxxxxxx	07/28/2023	verified	High
9	XX.XXX.XXX.XXX		Xxxxxxxxxx	07/28/2023	verified	High
10	XX.XXX.XX.XXX	xxxx-x.xxxxxxx.xxx.xx	Xxxxxxxxxx	07/28/2023	verified	High
11	XX.XXX.XX.XX	xxxxxxxxx.xx	Xxxxxxxxxx	07/28/2023	verified	High
12	XX.XXX.XX.XXX		Xxxxxxxxxx	07/28/2023	verified	High
13	XX.XXX.XXX.XXX		Xxxxxxxxxx	07/28/2023	verified	High
14	XX.XX.XXX.XXX	xxxxxxxxx.xxxxxx.xx.xxxx.xx	Xxxxxxxxxx	07/28/2023	verified	High
15	XX.XXX.XXX.XXX		Xxxxxxxxxx	07/28/2023	verified	High
16	XXX.XXX.XX.XX		Xxxxxxxxxx	07/28/2023	verified	High
17	XXX.XXX.XXX.XX	xxxxxxxxxxxx.xxxxxxxxx.xxxxxx.xx	Xxxxxxxxxx	07/28/2023	verified	High
18	XXX.XX.XX.XXX	xxx.xx-xxx-xx-xx.xxx	Xxxxxxxxxx	07/28/2023	verified	High
19	XXX.XX.XXX.XXX	xxxxxxxxxx.xxxxxxxxx.xxx	Xxxxxxxxxx	07/28/2023	verified	High
20	XXX.XXX.XXX.XXX	xxx-xxx-xxx-xxx.xxxxxxxxxxxx.xxx	Xxxxxxxxxx	07/28/2023	verified	High
21	XXX.XXX.XXX.XX		Xxxxxxxxxx	07/28/2023	verified	High
22	XXX.XX.XX.XXX	xxxx-xx.xxxxx.xxx	Xxxxxxxxxx	07/28/2023	verified	High
23	XXX.XXX.XXX.XX	xxxxxxxxxx.xx	Xxxxxxxxxx	07/28/2023	verified	High
24	XXX.XXX.XXX.XXX	xxx.xxxxxxxx.xx	Xxxxxxxxxx	07/28/2023	verified	High
25	XXX.XXX.XXX.XXX	xxxxx-xxxxxx-x.xxx	Xxxxxxxxxx	07/28/2023	verified	High
26	XXX.XXX.XX.XX	xxxxxxxx.xxxxxxx.xxx	Xxxxxxxxxx	07/28/2023	verified	High
27	XXX.X.XXX.XXX	xxxxxxx.xxxx.xxx.xx	Xxxxxxxxxx	07/28/2023	verified	High
28	XXX.XX.XX.XX	xxxxx.xxxxxxxxxx.xxx	Xxxxxxxxxx	07/28/2023	verified	High
29	XXX.XXX.XXX.XXX	xxxx.xxxx-xxxxxxx.xx	Xxxxxxxxxx	07/28/2023	verified	Medium
30	XXX.XX.XX.XX		Xxxxxxxxxx	07/28/2023	verified	High
31	XXX.XX.XXX.X		Xxxxxxxxxx	07/28/2023	verified	High
32	XXX.XX.XXX.XXX	xxx.xxxxxxxxxxx.xx	Xxxxxxxxxx	07/28/2023	verified	Medium
33	XXX.XX.XXX.XXX		Xxxxxxxxxx	07/28/2023	verified	High
34	XXX.XXX.XXX.X	xxx-xxx-xxx-x.xxxx.xxxx.xxxxxxx.xx.xx	Xxxxxxxxxx	07/28/2023	verified	High

TTP - Tactics, Techniques, Procedures (25)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-21, CWE-22	Path Traversal	predictive	High
2	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	High
3	T1059	CAPEC-137	CWE-88, CWE-94	Argument Injection	predictive	High
4	T1059.007	CAPEC-209	CWE-79, CWE-80, CWE-85	Basic Cross Site Scripting	predictive	High
5	T1068	CAPEC-122	CWE-264, CWE-269, CWE-284	Execution with Unnecessary Privileges	predictive	High
6	TXXXX.XXX		CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	High
7	TXXXX	CAPEC-XXX	CWE-XXX	Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxx	predictive	High
8	TXXXX.XXX	CAPEC-XX	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
9	TXXXX	CAPEC-XXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
10	TXXXX.XXX	CAPEC-XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
11	TXXXX		CWE-XXX, CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	High
12	TXXXX	CAPEC-X	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
13	TXXXX.XXX	CAPEC-XXX	CWE-XXXX	Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx	predictive	High
14	TXXXX	CAPEC-XXX	CWE-XX	Xxx Xxxxxxxxx	predictive	High
15	TXXXX.XXX	CAPEC-X	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
16	TXXXX	CAPEC-XXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
17	TXXXX	CAPEC-XXX	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xx Xxx-xxxxxxxx	predictive	High
18	TXXXX	CAPEC-XX	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
19	TXXXX.XXX		CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	High
20	TXXXX.XXX	CAPEC-XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
21	TXXXX.XXX	CAPEC-XXX	CWE-XXX	Xxxxxxxx	predictive	High
22	TXXXX	CAPEC-XXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
23	TXXXX	CAPEC-XXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High
24	TXXXX.XXX	CAPEC-XX	CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
25	TXXXX.XXX	CAPEC-X	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High

IOA - Indicator of Attack (370)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/+CSCOE+/logon.html	predictive	High
2	File	/admin	predictive	Low
3	File	/admin/attendance_action.php	predictive	High
4	File	/admin/content/book	predictive	High
5	File	/admin/pages/	predictive	High
6	File	/admins	predictive	Low
7	File	/ajax/getBasicInfo.php	predictive	High
8	File	/api/admin/system/store/order/list	predictive	High
9	File	/cap.js	predictive	Low
10	File	/cgi-bin/cstecgi.cgi	predictive	High
11	File	/cgi-bin/wapopen	predictive	High
12	File	/cgi-bin/wlogin.cgi	predictive	High
13	File	/clientdetails/admin/regester.php	predictive	High
14	File	/Control/Api/Api.php	predictive	High
15	File	/csms/?page=contact_us	predictive	High
16	File	/ctpms/admin/?page=applications/view_application	predictive	High
17	File	/department_viewmore.php	predictive	High
18	File	/download	predictive	Medium
19	File	/etc/ajenti/config.yml	predictive	High
20	File	/farm/product.php	predictive	High
21	File	/forum/away.php	predictive	High
22	File	/goform/telnet	predictive	High
23	File	/HNAP1	predictive	Low
24	File	/index.php?menu=asterisk_cli	predictive	High
25	File	/manage_block.php	predictive	High
26	File	/menu.html	predictive	Medium
27	File	/modules/profile/index.php	predictive	High
28	File	/out.php	predictive	Medium
29	File	/ptippage.cgi	predictive	High
30	File	/rom-0	predictive	Low
31	File	/slideeditor.php	predictive	High
32	File	/spip.php	predictive	Medium
33	File	/sysmanage/updatelib.php	predictive	High
34	File	/tmp/out	predictive	Medium
35	File	/tmp/phpglibccheck	predictive	High
36	File	/uncpath/	predictive	Medium
37	File	/update-image1.php	predictive	High
38	File	/upload	predictive	Low
39	File	/users.php	predictive	Medium
40	File	/usr/sbin/httpd	predictive	High
41	File	/v1/operador/	predictive	High
42	File	/var/tmp/sess_*	predictive	High
43	File	/view/student_exam_mark_update_form.php	predictive	High
44	File	/xxxxxxxxxx/xxxxxxxxxxxxx	predictive	High
45	File	/xxxxxxxxx/xx-xxxxx/xxxxx.xxx	predictive	High
46	File	xxxxxx.xxx	predictive	Medium
47	File	xxxxxxxxx/xxxxxxxx.xxxx.xxx	predictive	High
48	File	xxxxxxx.xxx	predictive	Medium
49	File	xxx_xxxxxxx.xxx	predictive	High
50	File	xxxxx-xxxx.xxx	predictive	High
51	File	xxxxx.xxxxxxxxx.xxx	predictive	High
52	File	xxxxx/xxxxx.xxx	predictive	High
53	File	xxxxx/xxxx_xxxxx_xxxx.xxx	predictive	High
54	File	xxxxx/xxxxxxx.xxx	predictive	High
55	File	xxxxx/xxxxxxx.xxx	predictive	High
56	File	xxxxx/xxxxx.xxx	predictive	High
57	File	xxxxx/xxxxx.xxx?xx=xxxxx/xxxxxx=xxxx/xxxx_xx=x	predictive	High
58	File	xxxxx/xxx_xxxxxxxx/xxxxx.xxx	predictive	High
59	File	xxxxx_xxxxxxx.xxxx	predictive	High
60	File	xxxxxx.xxx	predictive	Medium
61	File	xxxxx.xxx	predictive	Medium
62	File	xxxxx/xxxx/xxxxxxxxxx/xxxxxxxxxxx.xxx	predictive	High
63	File	xxxx/xxxxxxxxx.xxx	predictive	High
64	File	xxxxx_xxxxxx.xxx	predictive	High
65	File	xxxxxx-xxxx.xxxx	predictive	High
66	File	xxx/xxx/xxxx/xxxx/xxx/xxxxxxx/xxxxxx/xxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxx.xxxx	predictive	High
67	File	xxxxxxxxx-xxxxxxx-xxxxxxx.xxx	predictive	High
68	File	xxxxxxxxxx/xxxxxxxx/xxxx/x	predictive	High
69	File	xxxxxxx/xxxxx/xxxxxxxx	predictive	High
70	File	xxxxx.xxx	predictive	Medium
71	File	xxxx/xxxxxxx/xxxxxxxx	predictive	High
72	File	xxxxxxx/xxxxxxxxxx/xxxxxx_xxxxxx_xxxxxxxx_xxxxx.xx	predictive	High
73	File	x:\xxxxxxx xxxxx (xxx)\xxxxxxxxx\xxxxxxxxx xxxxxxx\xxxxxxxxx_xxxxxx\xxxxxxxxx-xxxxxxx-xxxxxxxx.xxx	predictive	High
74	File	xxxxxxxxxxx/xx/xxxxx	predictive	High
75	File	xxxx_xxx.xxx	predictive	Medium
76	File	xxxxxxxxxxxxxxxxxxx.xxx	predictive	High
77	File	xxxxx.xxxxxxxxxxxx.xxx	predictive	High
78	File	xxxxx/xxxxx_xxxxxx.xxx	predictive	High
79	File	xxxxx.xxx	predictive	Medium
80	File	xxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxx/xxxx_xxxxx.xxxx	predictive	High
81	File	xxx_xxxxxxx_xxxxxxxxx_xxxxxxxxx_xxxxxxxxxxxxxx.xxx	predictive	High
82	File	xxxxxxx.x	predictive	Medium
83	File	xxxx/xxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
84	File	xxxxx/xxxxx/?xxxx=xxxx/xxxxxx_xxxx	predictive	High
85	File	xxx-xxx/xxxxxxxxxxxxx.xxx	predictive	High
86	File	xx_xxxx.x	predictive	Medium
87	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	High
88	File	xxxxxxxxxxxxx/xxxxxx/xxxx.xxx	predictive	High
89	File	xxxxxxxxxxxxxxxx.x	predictive	High
90	File	xxxxxxxx-xxxx.xxx	predictive	High
91	File	x/xxxxxx/xxxxxxxx.xxx	predictive	High
92	File	xxxxxxxxxxxx.xxx	predictive	High
93	File	xxxxxxxx.xxx	predictive	Medium
94	File	xxxx_xxxxxx.xxx	predictive	High
95	File	xxxxx.xxx	predictive	Medium
96	File	xxxxxxx-xxxxxxx/xxxx/xxxxxx/xxxxxxxx/xxx/xxxxxxxxx/xxxxxx.xx	predictive	High
97	File	xxxxx.xxx	predictive	Medium
98	File	xxxxx.xxx	predictive	Medium
99	File	xxxx.xxx	predictive	Medium
100	File	xxx/xxxx/xxxx_xxxxxx.x	predictive	High
101	File	xxx/xxxxxxxx/xxx.x	predictive	High
102	File	xxxxxx/xxx.x	predictive	Medium
103	File	xxxx.xxx	predictive	Medium
104	File	xxxxxxxxxx/xxx.xx	predictive	High
105	File	xxxxxxxxx/xx/xxxxxxxxxxxx.xxx	predictive	High
106	File	xxxxxxxxxxxxxx.xxx	predictive	High
107	File	xxxx.xxx	predictive	Medium
108	File	xxxxxxxxx.xxx	predictive	High
109	File	xxxxxxxxx.xx	predictive	Medium
110	File	xxxxxxxxxx\xxxxxx\xxxxxxxxxxxxx.xxx	predictive	High
111	File	xxxx-xxxxxxx.x	predictive	High
112	File	xxxxxx/xxxxxx	predictive	High
113	File	xxxxxx_xx.x	predictive	Medium
114	File	xxxx-xxxxxx-xxxx-xxxxxxxxx.xxx	predictive	High
115	File	xx/xxx/xxxxx.x	predictive	High
116	File	xxx/xxxxxx.xxx	predictive	High
117	File	xxxxx.xxxx	predictive	Medium
118	File	xxxxx.xxx	predictive	Medium
119	File	xxxxx.xxx?xxx=xxxx&xxx=xxxxxxxx	predictive	High
120	File	xxxxxxxx.xxx	predictive	Medium
121	File	xxxx_xxxx.xxx	predictive	High
122	File	xxxxxxxxxx/xxx/xxxxxx_xxxx.xxx	predictive	High
123	File	xxx/xxxxxxxxxx/xxxxxxxxx.xx	predictive	High
124	File	xxx/xxxxxxxxxxxxxxxxxxxx.xx	predictive	High
125	File	xxxxxx.x	predictive	Medium
126	File	xxxxxxxxx/xxxxxx.xxx.xxx	predictive	High
127	File	xxxxxxxxx/xxxxxxxx.xxx	predictive	High
128	File	xxxxx.xxx.xxx	predictive	High
129	File	xxxxx/xxx/xxxxxxxxx/xx_xxxxxx_xxx.x	predictive	High
130	File	xxxxx.xxxx	predictive	Medium
131	File	xxxxx.xxx	predictive	Medium
132	File	xxxxx.xxx	predictive	Medium
133	File	xxx.x	predictive	Low
134	File	xxxxx_xxxxxxxxxx_xxxx.x	predictive	High
135	File	xxxxxxxxxx.xxxx	predictive	High
136	File	xxxxx/__xxxx_xxxx.xxx	predictive	High
137	File	xxxxxxx.xxx	predictive	Medium
138	File	xxx/xxxxxxxxx/xxxxx_xxxx.x	predictive	High
139	File	xxx/xxxx/xxx_xxxxx.x	predictive	High
140	File	xxx/xxxx/xxxx_xxxxxx.x	predictive	High
141	File	xxx_xxxxxxxx.x	predictive	High
142	File	xxx_xxxx.xxx	predictive	Medium
143	File	xxxx-xxxx_xxxxxxx.xx	predictive	High
144	File	xxx/xxxxxx/xxxxxxxx/xxxxx/xxxxxxxxx.xxxx	predictive	High
145	File	xxxxxx_xxxxxxx.xxx	predictive	High
146	File	xxxxxx.xxx	predictive	Medium
147	File	xxxxxx/xxxxxxx-xxx-xxx	predictive	High
148	File	xxxxxxx.xxx	predictive	Medium
149	File	xxxxxxxxxx.xxx	predictive	High
150	File	xxxxxx/xxxxxxx/xxxxxxxx.xxx	predictive	High
151	File	xxxx_xxxxxxxxxxxxxxx.xxx	predictive	High
152	File	xxxxxxxx-xxxxxx.xxx	predictive	High
153	File	xxxx.xxx	predictive	Medium
154	File	xxxx/xxxxx	predictive	Medium
155	File	xxxxx.xxx	predictive	Medium
156	File	xxxxx.xxx	predictive	Medium
157	File	xxxxxxxxxx.xxx	predictive	High
158	File	xxxxxxxx.xxx	predictive	Medium
159	File	xxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxx	predictive	High
160	File	xxxxxxxxxxxx.xxx	predictive	High
161	File	xxxxxxxx_xxxxxx.xxx	predictive	High
162	File	xxxxxxxx_xxxx.xxx	predictive	High
163	File	xxxxx.xxx	predictive	Medium
164	File	xx_xxxx.x	predictive	Medium
165	File	xxxx/xxxxxxxxxxxxxx/xxxx_xxxxxxx.x	predictive	High
166	File	xxx.x	predictive	Low
167	File	xxxxxx/xxxxxxxx.xxx	predictive	High
168	File	xxxx-xxxxxx.x	predictive	High
169	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	High
170	File	xxx/xxxx/xxxx/xxx/xxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
171	File	xxxxx_xxxxx.xxx	predictive	High
172	File	xxxxxxxxx.xxx	predictive	High
173	File	xxxxxxx-xxxxxxx.xxx	predictive	High
174	File	xxxxxxx_xxxxxxxx.xxx	predictive	High
175	File	xxxxx.x	predictive	Low
176	File	x/xxxxx.xxx	predictive	Medium
177	File	xxxxxxxx.xxxxx.xxx	predictive	High
178	File	xxxx/xxxxxxxx/xxxxxxx/xxxxxxxxxxx/xxxxxxxxxxx.xxxx	predictive	High
179	File	xxx_xxx.x	predictive	Medium
180	File	xxxx-xxxxxxxx.xxx	predictive	High
181	File	xxxx-xxxx_xxxx_xxxxxxx.xxx	predictive	High
182	File	xxxx-xxxxx.xxx	predictive	High
183	File	xxxx-xxxxxxxx.xxx	predictive	High
184	File	xxx.xxx	predictive	Low
185	File	xxxxxx_xxxxxxxx.xxx	predictive	High
186	File	xxxxx/xxxxxxxx.xxx	predictive	High
187	File	xxxxx_xxxxx.xxxx	predictive	High
188	File	xxxx/xxxxxxxx/xxxxxxxx.xxxx	predictive	High
189	File	xxxxxxxxx.xx	predictive	Medium
190	File	xxxxx.xxx	predictive	Medium
191	File	xxx.xxx	predictive	Low
192	File	xxxxxxx/xxxxxx/xxxxx/xxxxxxx/xxx/xxx.xxx	predictive	High
193	File	xx-xxxxxxxx/xxxxx-xx-xxxxx.xxx	predictive	High
194	File	xx-xxxxx.xxx	predictive	Medium
195	File	xx-xxxxx-xxxxxxxx.xxx	predictive	High
196	File	xxx/xx_xxx.xxx	predictive	High
197	File	xxxx.xxx	predictive	Medium
198	File	xxxx_xxxxxx.x	predictive	High
199	File	xxx-xxxxxxxx.x	predictive	High
200	File	\xxxxxxx\xxxxxxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
201	File	~/xxx-xxx-xxxxxx.xxx	predictive	High
202	Library	xxxxxxxx/xxxxxxx/xxxxxxxx/xxx/xxxx/xxxx/xxxxxx/xxx/xxxxxx/xxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxx/xxxxxxxx_xxxxxxxxxxxxxxxx.xxxx	predictive	High
203	Library	xxxxxx[xxxxxx_xxxx	predictive	High
204	Library	xxxxxx.xxx	predictive	Medium
205	Library	xxxxxx.xxx	predictive	Medium
206	Library	xxxxxxx-xxxxxxx/xxx/xxxx/xxxx/xxx/xxxxxxxxxx/xxxxxxx/xxxxxxx/xxxxxxx.xxxx	predictive	High
207	Library	xxxxxxx/xxxxxxxxx/xxxxxx.x	predictive	High
208	Library	xxx/xxxxxx/xxxxxxxx.xx	predictive	High
209	Library	xxx/xxxxxx/xxxxxxx/xxxxx.xx	predictive	High
210	Library	xxx/xxxxxx/xxx/xxxxxxxxxxx_xxxxxxxxx.xx	predictive	High
211	Library	xxx/x.x	predictive	Low
212	Library	xxx/xxxxxxx/xxxxx.xx	predictive	High
213	Library	xxx/xxxxxxx.xx	predictive	High
214	Library	xxxxxxxx.xxx	predictive	Medium
215	Library	xxxxxx/xxxx/xxxxxx/xxxxx.x	predictive	High
216	Library	xxxx.xxx	predictive	Medium
217	Library	xxxxxx.xxx	predictive	Medium
218	Library	xxxxxxxxxx.xxx	predictive	High
219	Library	xxx/xx_xxx.x	predictive	Medium
220	Library	xxxxxx.xxx	predictive	Medium
221	Argument	$xxxxxxx	predictive	Medium
222	Argument	?xxxxxx	predictive	Low
223	Argument	xx/xx	predictive	Low
224	Argument	xxxxxxxxxxxx	predictive	Medium
225	Argument	xx_xxxxx_xxx_xxxx	predictive	High
226	Argument	xxxxxxx	predictive	Low
227	Argument	xxx_xxxx	predictive	Medium
228	Argument	xxxxx_xxx	predictive	Medium
229	Argument	xxxxxx_xxxx_xxx/xxxxxx_xxxx_xxx	predictive	High
230	Argument	xxxxxxxxxx_xx	predictive	High
231	Argument	xxxxxx_xxxx	predictive	Medium
232	Argument	xxxx	predictive	Low
233	Argument	xxxxxxxx	predictive	Medium
234	Argument	xxxx	predictive	Low
235	Argument	xxxxx	predictive	Low
236	Argument	xxxxxx	predictive	Low
237	Argument	xxx	predictive	Low
238	Argument	xxxxxxxxxx	predictive	Medium
239	Argument	xxxxx	predictive	Low
240	Argument	xxx_xx	predictive	Low
241	Argument	xxxx_xx	predictive	Low
242	Argument	xxxxxxx	predictive	Low
243	Argument	xxxxxxx	predictive	Low
244	Argument	xxxxxx/xxxxxxx	predictive	High
245	Argument	xxxxxx[xxxxxx_xxxx]	predictive	High
246	Argument	xxxxxxxxx	predictive	Medium
247	Argument	xxxxxxx	predictive	Low
248	Argument	xxxxxxxxxxxx	predictive	Medium
249	Argument	xxxxxx	predictive	Low
250	Argument	xxxxxx_xx	predictive	Medium
251	Argument	xxxxxxxx	predictive	Medium
252	Argument	xxxxxxxxxxxxxxxx	predictive	High
253	Argument	xxxx_xxx	predictive	Medium
254	Argument	xxxxxxxxxxx	predictive	Medium
255	Argument	xxxxxxxxxxx/xxxxxxx xxxx	predictive	High
256	Argument	xxxxxxxxxxx	predictive	Medium
257	Argument	xxxx xx xxxxxxx	predictive	High
258	Argument	xxx_xxxx	predictive	Medium
259	Argument	xxx_xxxx	predictive	Medium
260	Argument	xxxxxxx	predictive	Low
261	Argument	xxxxx	predictive	Low
262	Argument	xxxxxx	predictive	Low
263	Argument	xxxxxx_xxxx_xxxxxxxx	predictive	High
264	Argument	xxxxxxx	predictive	Low
265	Argument	xxxxxxxxxxxxxx	predictive	High
266	Argument	xxxxx	predictive	Low
267	Argument	xxxxx_xxx	predictive	Medium
268	Argument	xxxxx	predictive	Low
269	Argument	xxxxx_xx	predictive	Medium
270	Argument	xxxx	predictive	Low
271	Argument	xxxxxx	predictive	Low
272	Argument	xxxx	predictive	Low
273	Argument	xxxxxxxxxx	predictive	Medium
274	Argument	xxxx_xxxxxx	predictive	Medium
275	Argument	xxxx xxxx/xxxxxxx/xxxxx/xxxxxxx	predictive	High
276	Argument	xxxxxx	predictive	Low
277	Argument	x_xxxxxxxx	predictive	Medium
278	Argument	xxx-xxx-xxxx	predictive	Medium
279	Argument	xxxx	predictive	Low
280	Argument	xxxxxxxx	predictive	Medium
281	Argument	xxx_xxxxxxxxx	predictive	High
282	Argument	xxx_xxxxxx	predictive	Medium
283	Argument	xx	predictive	Low
284	Argument	xxxxx_xxxx/xxxxxx/xxxxx	predictive	High
285	Argument	xxxxxxxx_xxxxxxx_xxxxxx	predictive	High
286	Argument	xxxxx	predictive	Low
287	Argument	xxxxxxxxxx	predictive	Medium
288	Argument	xxxx_xx	predictive	Low
289	Argument	xxx_xxxxxxxxxxxxx/xxx_xxxxxxxxxxxx	predictive	High
290	Argument	xxx_xxxxxxx	predictive	Medium
291	Argument	xxx	predictive	Low
292	Argument	xxxx/xxxx	predictive	Medium
293	Argument	xxxxxxxxx	predictive	Medium
294	Argument	xxxxxxxx	predictive	Medium
295	Argument	xxxxxx	predictive	Low
296	Argument	xxx	predictive	Low
297	Argument	xxxxxxxxxx	predictive	Medium
298	Argument	xxxxxxxxxxxx_xxxxxx	predictive	High
299	Argument	xxxxxxxxx	predictive	Medium
300	Argument	xxxxxxx	predictive	Low
301	Argument	xxx	predictive	Low
302	Argument	xxxxxx	predictive	Low
303	Argument	xxxxxx	predictive	Low
304	Argument	xxxx	predictive	Low
305	Argument	xxxx	predictive	Low
306	Argument	xxxx/xxxxxxxxxx xxxxx/xxxxx	predictive	High
307	Argument	xxxxxxxxxxxx	predictive	Medium
308	Argument	xxxx	predictive	Low
309	Argument	xxxxx	predictive	Low
310	Argument	xxxxxxx_xxxxx	predictive	High
311	Argument	xxxxxxx_xxxxxx_xx	predictive	High
312	Argument	xxxxxxxxxxxxxxxx	predictive	High
313	Argument	xx	predictive	Low
314	Argument	xxxx	predictive	Low
315	Argument	xxxxxxxx	predictive	Medium
316	Argument	xxxx	predictive	Low
317	Argument	xxxx	predictive	Low
318	Argument	xxxx_xxxx	predictive	Medium
319	Argument	xxxxxxxxx	predictive	Medium
320	Argument	xxxxx_xxxx_xxxx	predictive	High
321	Argument	xxxx_xxxx	predictive	Medium
322	Argument	xxxxxxxx	predictive	Medium
323	Argument	xxxxxxx	predictive	Low
324	Argument	xxxxxxxxxxxx	predictive	Medium
325	Argument	xxxxxxxxxxxxx	predictive	High
326	Argument	xxxxxxx	predictive	Low
327	Argument	xxxxxx	predictive	Low
328	Argument	xxxxxxxx	predictive	Medium
329	Argument	xxxxxxxx	predictive	Medium
330	Argument	xxxxxxx_xx	predictive	Medium
331	Argument	xxxxxxxxxx	predictive	Medium
332	Argument	xxxxxx/xxxxx	predictive	Medium
333	Argument	xxxxxx	predictive	Low
334	Argument	xxxxxxxx	predictive	Medium
335	Argument	xxxxxxxxx_xxxxxx_xxx	predictive	High
336	Argument	xxxxxxx_xxxx_xxx/xxxxxxx_xxxx_xxx	predictive	High
337	Argument	xxxxxxxxx/xxxxxxxxxxx /xxxxxxx/xxxxxxxxx	predictive	High
338	Argument	xxxxxxxxx	predictive	Medium
339	Argument	xxx	predictive	Low
340	Argument	xxxxx	predictive	Low
341	Argument	xxx	predictive	Low
342	Argument	xxxxx	predictive	Low
343	Argument	xxxxxxxxxxx	predictive	Medium
344	Argument	xxxx	predictive	Low
345	Argument	xxx	predictive	Low
346	Argument	xxxx	predictive	Low
347	Argument	xxxxxxxx	predictive	Medium
348	Argument	xxxxxxxx/xxxx	predictive	High
349	Argument	xxxx_xx	predictive	Low
350	Argument	xxxx_xxxxx	predictive	Medium
351	Argument	xxx_xxxx_xxx	predictive	Medium
352	Argument	xxx_xxxx_xxx	predictive	Medium
353	Argument	xxx	predictive	Low
354	Argument	x-xxxxxxxxx-xxx	predictive	High
355	Input Value	"><xxxxxx>xxxxx(x)</xxxxxx>	predictive	High
356	Input Value	../	predictive	Low
357	Input Value	../..	predictive	Low
358	Input Value	/xx *	predictive	Low
359	Input Value	x\"><xxxxxx>xxxxx(x)</xxxxxx>	predictive	High
360	Input Value	xxx@xx.xxx' xx (xxxxxx xxxx xxxx(xxxxxx xxxxx(),xxxxxx(xxxxxxxxxxxx,(xxxxxx (xxx(xxxx=xxxx,x))),xxxxxxxxxxxx,xxxxx(xxxx(x)x))x xxxx xxxxxxxxxxx_xxxxxx.xxxxxxx xxxxx xx x)x)-- xxxx	predictive	High
361	Input Value	<xxxxxxx>xxxxxx</xxxxxxx>	predictive	High
362	Input Value	<xxxxxx>xxxxx(xxxxxxxx.xxxxxx);</xxxxxx>	predictive	High
363	Input Value	xxxxxxxx.+xxx	predictive	High
364	Input Value	…/.	predictive	Low
365	Pattern	x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|-\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|-\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|-\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|-\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|	predictive	High
366	Pattern	\|xx\|xx\|xx\|	predictive	Medium
367	Network Port	xxx/xx (xxxxxx)	predictive	High
368	Network Port	xxx/xxxx	predictive	Medium
369	Network Port	xxx/xxxx	predictive	Medium
370	Network Port	xxx xxxxxx xxxx	predictive	High

References (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

This view requires CTI permissions

Just purchase a CTI license today!