Fareit Analysis

IOB - Indicator of Behavior (224)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en176
ru22
zh18
es4
sv2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

la76
us74
ru46
cn16
gb10

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

WordPress6
Adobe ColdFusion4
Microsoft Windows4
CodeIgniter4
Bitrix Site Manager4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25k$0-$5kHighWorkaround0.040.04187CVE-2007-1192
2DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.430.04187CVE-2010-0966
3Bitrix Site Manager Vote Module Remote Code Execution7.37.0$0-$5k$0-$5kNot DefinedOfficial Fix0.020.01156CVE-2022-27228
4Esri ArcGIS Server sql injection8.18.0$0-$5k$0-$5kNot DefinedOfficial Fix0.000.01055CVE-2021-29114
5Microsoft Office Remote Code Execution7.06.1$5k-$25k$0-$5kUnprovenOfficial Fix0.010.01103CVE-2023-21735
6Bitrix24 server-side request forgery8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.050.00885CVE-2020-13484
7Alt-N MDaemon Worldclient injection4.94.7$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.10855CVE-2021-27182
8CouchCMS mysql2i.func.php Path information disclosure3.33.3$0-$5k$0-$5kNot DefinedNot Defined0.010.00000CVE-2019-1010042
9Fortinet FortiOS/FortiProxy Administrative Interface authentication bypass9.89.7$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.89292CVE-2022-40684
10Apache Tomcat HTTP Digest Authentication Implementation improper authentication8.27.1$5k-$25k$0-$5kUnprovenOfficial Fix0.030.07344CVE-2012-5887
11TEM FLEX-1080/FLEX-1085 Log log.cgi information disclosure5.34.7$0-$5k$0-$5kProof-of-ConceptWorkaround0.020.09029CVE-2022-1077
12F5 BIG-IP iControl REST Authentication bash missing authentication9.89.3$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.060.91244CVE-2022-1388
13Vmware Workspace ONE Access/Identity Manager Template injection9.88.8$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.050.93243CVE-2022-22954
14Rocklobster Contact Form 7 unrestricted upload6.36.3$0-$5k$0-$5kNot DefinedOfficial Fix0.040.69867CVE-2020-35489
15Apache Groovy MethodClosure.java MethodClosure injection8.58.5$5k-$25k$5k-$25kNot DefinedNot Defined0.020.07978CVE-2015-3253
16LightCMS External Image NEditorController.php Privilege Escalation8.08.0$0-$5k$0-$5kNot DefinedNot Defined0.020.01156CVE-2021-27112
17phpPgAds adclick.php unknown vulnerability5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.210.01055CVE-2005-3791
18E-topbiz Viral DX 1 adclick.php sql injection7.37.3$0-$5k$0-$5kHighUnavailable0.020.00986CVE-2008-2867
19Huawei Toronto-TL10 information disclosure4.44.4$0-$5k$0-$5kNot DefinedNot Defined0.040.00885CVE-2018-7907
20phpMyAdmin common.inc.php substr credentials management8.58.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.00954CVE-2017-18264

IOC - Indicator of Compromise (176)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP addressHostnameActorCampaignsTypeConfidence
12.59.41.199man-spb.ruFareitverifiedHigh
25.77.32.186horwich.eukhosting.netFareitverifiedHigh
317.173.66.181FareitverifiedHigh
420.42.73.29FareitverifiedHigh
520.189.173.22FareitverifiedHigh
623.21.126.66ec2-23-21-126-66.compute-1.amazonaws.comFareitverifiedMedium
723.21.252.4ec2-23-21-252-4.compute-1.amazonaws.comFareitverifiedMedium
823.96.24.107FareitverifiedHigh
923.247.23.36FareitverifiedHigh
1034.117.168.233233.168.117.34.bc.googleusercontent.comFareitverifiedMedium
1134.200.198.80ec2-34-200-198-80.compute-1.amazonaws.comFareitverifiedMedium
1235.171.65.219ec2-35-171-65-219.compute-1.amazonaws.comFareitverifiedMedium
1335.223.217.188188.217.223.35.bc.googleusercontent.comFareitverifiedMedium
1437.10.116.208FareitverifiedHigh
1537.48.104.71FareitverifiedHigh
1637.57.15.77.15.57.37.triolan.netFareitverifiedHigh
1738.18.228.192FareitverifiedHigh
1846.37.195.55.pool-46.37.195.icn.uaFareitverifiedHigh
1946.101.56.69FareitverifiedHigh
2046.101.122.232FareitverifiedHigh
2146.118.147.5446-118-147-54.broadband.kyivstar.netFareitverifiedHigh
2246.211.74.7946-211-74-79.mobile.kyivstar.netFareitverifiedHigh
2346.216.100.4FareitverifiedHigh
2446.250.3.8846.250.3.88.pool.breezein.netFareitverifiedHigh
2550.87.236.23850-87-236-238.unifiedlayer.comFareitverifiedHigh
2650.97.212.250fa.d4.6132.ip4.static.sl-reverse.comFareitverifiedHigh
2751.15.44.251tor-13.dc6jgk.deFareitverifiedHigh
2852.1.79.244ec2-52-1-79-244.compute-1.amazonaws.comFareitverifiedMedium
2952.8.196.60ec2-52-8-196-60.us-west-1.compute.amazonaws.comFareitverifiedMedium
3052.54.24.134ec2-52-54-24-134.compute-1.amazonaws.comFareitverifiedMedium
3152.86.54.255ec2-52-86-54-255.compute-1.amazonaws.comFareitverifiedMedium
3252.182.143.212FareitverifiedHigh
3362.75.224.4prag239.dedicatedpanel.comFareitverifiedHigh
3462.173.140.44itkn.planetahost.ruFareitverifiedHigh
3562.210.204.5562-210-204-55.rev.poneytelecom.euFareitverifiedHigh
3663.141.242.46FareitverifiedHigh
37XX.XXX.XXX.XXXxxxx-xx-xxx-xxx-xxx.xxx.xxxxxx.xxxxxx.xxxXxxxxxverifiedHigh
38XX.XXX.XXX.XXXxx-xxx-xxx-xxx.xxxxxxx.xxxx.xxxXxxxxxverifiedHigh
39XX.XXX.XX.XXXxxxxx-xxx.xxxxxxx.xxxxxx.xxxXxxxxxverifiedHigh
40XX.XX.X.XXXXxxxxxverifiedHigh
41XX.XXX.XXX.XXXxxxxxxxxxxx.xxxXxxxxxverifiedHigh
42XX.XXX.XXX.XXxx-xxx-xxx-xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxverifiedHigh
43XX.XX.XX.XXXxxxx-xx-xx-xx-xxx.xx.xxx.xx.xxxXxxxxxverifiedHigh
44XX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxverifiedHigh
45XX.XX.XXX.XXXxxxxxx.xxxxxxxxx.xxxXxxxxxverifiedHigh
46XX.XX.XX.XXXxxxx-xxxx.xxxxxx.xxxxx-x.xxxxxx.xxxXxxxxxverifiedHigh
47XX.XXX.XXX.XXxxxxxxxxxxx.xxxxxxxx-xxxx.xxx.xxxXxxxxxverifiedHigh
48XX.XXX.XX.XXxx.xxx.xx.xx.xxx.xxxxx.xxxXxxxxxverifiedHigh
49XX.XXX.XX.Xxx.xxx.xx.x.xxx.xxxxx.xxxXxxxxxverifiedHigh
50XX.XXX.XXX.XXXXxxxxxverifiedHigh
51XX.XX.XX.XXxxxxxx.xx.xx.xx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxverifiedHigh
52XX.XX.XX.XXXxxxxxx.xxx.xx.xx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxverifiedHigh
53XX.XX.XXX.XXXxxxx.xxxxxxxxx.xxXxxxxxverifiedHigh
54XX.XXX.XXX.XXXxxxxxverifiedHigh
55XX.XX.XX.Xxxxxx-xxxx.xx.xxXxxxxxverifiedHigh
56XX.XXX.XX.XXxxxxxx-xx-xxx-xx.xxxxxxxxxxxxxx.xxxxx.xxXxxxxxverifiedHigh
57XX.XX.XX.XXXXxxxxxverifiedHigh
58XX.XX.XX.XXXXxxxxxverifiedHigh
59XX.XXX.XXX.XXxxx.xxxxx.xxXxxxxxverifiedHigh
60XX.XXX.XXX.XXXxxx.xxxxx.xxXxxxxxverifiedHigh
61XX.XXX.XX.XXxxxxxxxxxxxx.xxxxxxxx.xxxxxxxxx.xxXxxxxxverifiedHigh
62XX.XXX.XX.XXxxxxxxxxx.xxxXxxxxxverifiedHigh
63XX.XXX.XXX.XXxx.xxx.xxx.xx.xx.xxxxx.xxXxxxxxverifiedHigh
64XX.XXX.XX.XXXxxxxxverifiedHigh
65XX.XXX.XXX.XXXxxxxxverifiedHigh
66XX.XX.XXX.XXXxxxxxxx.xxxxxxxxx.xxxXxxxxxverifiedHigh
67XX.XX.XXX.XXxxxxxxx.xxxxxxxxx.xxxXxxxxxverifiedHigh
68XX.XX.XXX.XXxxxxxverifiedHigh
69XX.XX.XXX.XXXxxxxxx-xx-xx-xx-xxx-xxx.xxxxxx.xx-xxxx.xxxXxxxxxverifiedHigh
70XX.XXX.XXX.XXXxxxxxx-xxxxxx.xxx.xxxxx.xxXxxxxxverifiedHigh
71XX.XXX.XXX.XXXxx.xxx.xxx.xxx.xxxxxx.xxxxxxxxxxxx.xxxXxxxxxverifiedHigh
72XX.XXX.XX.XXXxxx.xxxxxxxxx.xxXxxxxxverifiedHigh
73XX.XX.XX.XXxxxxxx.xx.xx.xx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxverifiedHigh
74XX.XXX.XX.XXXXxxxxxverifiedHigh
75XX.XXX.XXX.XXXXxxxxxverifiedHigh
76XX.XXX.XXX.XXxxxxx.xxxxxxx.xxxXxxxxxverifiedHigh
77XX.XXX.XX.XXxxxxxxx.xxxxxxxxxx.xxXxxxxxverifiedHigh
78XX.XX.XXX.XXxx.xx.xxx.xx.xxx.xxxxx.xxxXxxxxxverifiedHigh
79XX.XXX.XXX.XXXXxxxxxverifiedHigh
80XX.XXX.XXX.XXXxxxxxverifiedHigh
81XX.XXX.XXX.XXXxxxxxverifiedHigh
82XXX.XX.XX.XXXxxxxxxx.xxxxx.xxXxxxxxverifiedHigh
83XXX.XX.XX.XXXxxxxxxx.xxxxx.xxXxxxxxverifiedHigh
84XXX.XX.XX.XXxxxxxx.xxXxxxxxverifiedHigh
85XXX.XX.XXX.XXXxxx-xx-xxx-xxx.xxxxxxx.xxxXxxxxxverifiedHigh
86XXX.XX.XXX.XXXXxxxxxverifiedHigh
87XXX.XX.XX.XXXXxxxxxverifiedHigh
88XXX.XX.XX.XXXXxxxxxverifiedHigh
89XXX.XX.XXX.XXXXxxxxxverifiedHigh
90XXX.XX.XX.XXXXxxxxxverifiedHigh
91XXX.XX.XX.XXXXxxxxxverifiedHigh
92XXX.XXX.XXX.XXXxxxx-xxx-xxx-xxx.xxxxxx.xxxxxx.xxxxxxxxxxxxxxxxxx.xxxXxxxxxverifiedHigh
93XXX.XXX.XX.XXXxxxxxverifiedHigh
94XXX.XXX.XXX.XXXxxxxxverifiedHigh
95XXX.XXX.XXX.XXXxx-xxxxxxxx.xxxxx.xxxXxxxxxverifiedHigh
96XXX.XXX.XXX.XXxxx-xxx-xxx-xx-xxxx.xxxxxxxxxxxx.xxxXxxxxxverifiedHigh
97XXX.XXX.XXX.XXXxxxxxverifiedHigh
98XXX.XX.XX.Xx.xx.xx.xxx.xxxxxxx.xxxXxxxxxverifiedHigh
99XXX.XXX.X.XXxxx-xxx-x-xx.xxxxxxxxx.xxxxxxxx.xxxXxxxxxverifiedHigh
100XXX.XX.XX.XXXXxxxxxverifiedHigh
101XXX.XXX.XXX.XXXxx.xxxxxxxxxxx.xx.xxXxxxxxverifiedHigh
102XXX.XXX.XXX.XXXxxxxxx.xxxxxxxx.xxxXxxxxxverifiedHigh
103XXX.XXX.XXX.XXxxxxxverifiedHigh
104XXX.XX.XX.Xxxxxxxxxx.xxxxxxx.xxXxxxxxverifiedHigh
105XXX.XXX.XXX.XXXXxxxxxverifiedHigh
106XXX.XX.XXX.XXxx-xxx-xx-xxx-xx.xx.xxxxxxxxxxxx.xxxXxxxxxverifiedHigh
107XXX.XX.XXX.XXXxxx.xxxxxxx.xxxXxxxxxverifiedHigh
108XXX.XXX.XX.XXXXxxxxxverifiedHigh
109XXX.XX.XXX.XXXxxxxxverifiedHigh
110XXX.XX.XXX.XXXXxxxxxverifiedHigh
111XXX.XX.XXX.XXXxxxxxverifiedHigh
112XXX.XX.XXX.XXXXxxxxxverifiedHigh
113XXX.XXX.XX.XXxxxxxxxx-xx-xxx.xxxxx.xxxXxxxxxverifiedHigh
114XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxverifiedHigh
115XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxverifiedHigh
116XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxverifiedHigh
117XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxverifiedHigh
118XXX.XXX.XX.Xx.xx.xxxx.xxx.xxxxxx.xx-xxxxxxx.xxxXxxxxxverifiedHigh
119XXX.XXX.XX.XXxx-xx-xxx.xxxxx.xxxXxxxxxverifiedHigh
120XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxverifiedHigh
121XXX.XXX.XXX.XXxx-xx-xxx.xxxxx.xxxXxxxxxverifiedHigh
122XXX.XXX.XXX.XXxx-xx-xxx.xxxxx.xxxXxxxxxverifiedHigh
123XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxverifiedHigh
124XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxverifiedHigh
125XXX.XXX.XXX.XXXxxxxxverifiedHigh
126XXX.XXX.XXX.XXXxxxxxverifiedHigh
127XXX.XXX.XXX.XXXXxxxxxverifiedHigh
128XXX.XXX.XXX.XXXXxxxxxverifiedHigh
129XXX.X.XX.XXXxxx-x-xx-xxx.xxxxxxxxx.xxxxxxxx.xxxXxxxxxverifiedHigh
130XXX.XXX.X.XXxxx-xxx-x-xx.xxxxxxx.xxXxxxxxverifiedHigh
131XXX.XX.XXX.XXXXxxxxxverifiedHigh
132XXX.XXX.XXX.XXXXxxxxxverifiedHigh
133XXX.XXX.XXX.XXxx.xxx.xxx.xxx.xxxxxxx.xxxXxxxxxverifiedHigh
134XXX.XXX.XX.Xx.xx.xxx.xxx.xxxxxxx.xxxXxxxxxverifiedHigh
135XXX.XXX.XXX.XXxx.xxx.xxx.xxx.xxxxxxx.xxxXxxxxxverifiedHigh
136XXX.XXX.XX.XXxxx-xxx-xx-xx-xx.xxxxxx.xxXxxxxxverifiedHigh
137XXX.XXX.XX.XXxxxxx-xxx-xx.xxxxxx.xxXxxxxxverifiedHigh
138XXX.XX.XXX.XXXxxxx-xx-xxx-xxx.xxxxxx.xxxxxx.xxxxxxxxxxxxxxxxxx.xxxXxxxxxverifiedHigh
139XXX.XXX.XXX.XXXxx-xxx-xxx-xxx-xxx.xx.xxxxxxxxxxxx.xxxXxxxxxverifiedHigh
140XXX.XX.XXX.Xxxx.xx.xxx.x.xxxxxxxxx-xxxXxxxxxverifiedHigh
141XXX.XXX.XXX.XXXxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxxxxxx.xxXxxxxxverifiedHigh
142XXX.XXX.XXX.XXXXxxxxxverifiedHigh
143XXX.XXX.XX.XXXxxxxxxxxxx.xx.xxxxxxx.xxxXxxxxxverifiedHigh
144XXX.XXX.XX.XXxxxx-xxx-xxx-xx-xx.xx.xxx.xxXxxxxxverifiedHigh
145XXX.XXX.XXX.XXXxxxxxverifiedHigh
146XXX.XXX.XX.XXXxxxxx-xxx.xxxxxxx.xxxxxx.xxxXxxxxxverifiedHigh
147XXX.XXX.XX.XXxxxxx-xx.xxxxxxx.xxxxxx.xxxXxxxxxverifiedHigh
148XXX.XXX.XXX.XXXXxxxxxverifiedHigh
149XXX.XXX.XXX.XXXxxx.xxxxx.xxxxXxxxxxverifiedHigh
150XXX.XX.XXX.XXXxxxxxxxxxx.xxxxxxx.xxXxxxxxverifiedHigh
151XXX.XX.XX.XXXxxx.xx.xx.xxx.xxxxxx.xxxxxx.xxXxxxxxverifiedHigh
152XXX.XXX.XXX.XXXxxxxxverifiedHigh
153XXX.XX.XXX.XXXXxxxxxverifiedHigh
154XXX.XXX.XXX.XXXxxx.xxxxx.xxxXxxxxxverifiedHigh
155XXX.XXX.XXX.XXXxxxxxx.xxx.xxx.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxverifiedHigh
156XXX.XX.XX.XXXXxxxxxverifiedHigh
157XXX.XX.XX.Xxxxxxx.xxxxxxxxxx.xxxXxxxxxverifiedHigh
158XXX.XX.XXX.XXxxxxxxxxxx-x.xxx-xxxxxxx.xxxXxxxxxverifiedHigh
159XXX.XX.XXX.XXxxxxx-xx.xxxxxxx.xxxxxx.xxxXxxxxxverifiedHigh
160XXX.XXX.XXX.XXXXxxxxxverifiedHigh
161XXX.XXX.XX.XXXxxxxxxxxx.xxxXxxxxxverifiedHigh
162XXX.XX.XXX.XXXx-xxxx.x-xxxxxx.xxxXxxxxxverifiedHigh
163XXX.XXX.XXX.XXxxxxx.xxxxxxxxxx.xxxXxxxxxverifiedHigh
164XXX.XX.XXX.Xxx-xxx.xxxXxxxxxverifiedHigh
165XXX.XX.XXX.XXxx-xx-xxx.xxxxx.xxxXxxxxxverifiedHigh
166XXX.XX.XXX.XXxx-xx-xxx.xxxxx.xxxXxxxxxverifiedHigh
167XXX.XX.XXX.XXxx-xx-xxx.xxxxx.xxxXxxxxxverifiedHigh
168XXX.XXX.XXX.XXXXxxxxxverifiedHigh
169XXX.X.XX.XXXxxxxxxxxxxx-xxxxx.xxxxxxxxx-xxxxx.xxXxxxxxverifiedHigh
170XXX.XXX.XX.XXxxxxxxxx.xxxxx.xxxxxXxxxxxverifiedHigh
171XXX.XXX.XXX.XXXxxx-xxxxxxx.xxxxxxx.xxXxxxxxverifiedHigh
172XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xxxxxxxxxxxx.xxxXxxxxxverifiedHigh
173XXX.XXX.X.XXxxx-xxx-x-xx.xxxxxxx-xxx.xx-x.xxxXxxxxxverifiedHigh
174XXX.XXX.X.XXXxxx-xxx-x-xxx.xxxxxxx-xxx.xx-x.xxxXxxxxxverifiedHigh
175XXX.XXX.XXX.XXxxxxxxxxxxxxx.xxXxxxxxverifiedHigh
176XXX.XX.XXX.XXxxxx-xxx-xx-xxx-xx.xxxxxxx.xxxxxxxxx.xxxXxxxxxverifiedHigh

TTP - Tactics, Techniques, Procedures (18)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (123)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/admin/dl_sendmail.phppredictiveHigh
2File/api/v2/cli/commandspredictiveHigh
3File/app/Http/Controllers/Admin/NEditorController.phppredictiveHigh
4File/mgmt/tm/util/bashpredictiveHigh
5File/mifs/c/i/reg/reg.htmlpredictiveHigh
6File/secure/ViewCollectorspredictiveHigh
7File/spip.phppredictiveMedium
8File/xAdmin/html/cm_doclist_view_uc.jsppredictiveHigh
9Fileadclick.phppredictiveMedium
10Fileadd_comment.phppredictiveHigh
11Fileadmin.jcomments.phppredictiveHigh
12Fileapplication/modules/admin/views/ecommerce/products.phppredictiveHigh
13Filebase/ErrorHandler.phppredictiveHigh
14Fileblog.phppredictiveMedium
15Filecat.phppredictiveLow
16Filexxx-xxx/xxxxxxx.xxpredictiveHigh
17Filexxxxxxxx.xxxpredictiveMedium
18Filexxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxpredictiveHigh
19Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveHigh
20Filexxxxxxx_xxxxx.xxxpredictiveHigh
21Filexxxx-xxxxxx.xxxpredictiveHigh
22Filexxxxx.xxxpredictiveMedium
23Filexxxx_xxxxxxxx.xxxpredictiveHigh
24Filexxxxxxxxx/xxxxx/xxxxxxxxxxxx/xxxxxxxxx.xxxpredictiveHigh
25Filexxxxxxxxxxx.xpredictiveHigh
26Filexxxx.xxxpredictiveMedium
27Filexxxxxxxxx.xxxpredictiveHigh
28Filexxxxxxxxxx\xxxxxx\xxxxxxxxxxxxx.xxxpredictiveHigh
29Filexxx/xxxxxx.xxxpredictiveHigh
30Filexxxxxxxx/xxxxxxx/xxxxxxx.xxxx.xxxpredictiveHigh
31Filexxxxx.xxxpredictiveMedium
32Filexxxxx.xxx/xxxxxx.xxx/xxxxxxxxxxxxx.xxx/xxxxxxxx.xxxpredictiveHigh
33Filexxxxx.xxx/xxxxxxx/xxxxxpredictiveHigh
34Filexxxxx.xxpredictiveMedium
35Filexxxxxxx.xxxpredictiveMedium
36Filexxxx.xxxpredictiveMedium
37Filexxxxxxxxx/xxxxxx.xxx.xxxpredictiveHigh
38Filexxx.xxxpredictiveLow
39Filexxxxx.xxxpredictiveMedium
40Filexx_xxxx.xpredictiveMedium
41Filexxx_xxxxx_xxxx.xpredictiveHigh
42Filexxx/xxxx/xxxx_xxxxxxxxx.xpredictiveHigh
43Filexxxxxxx/xxxxxxx/xxx/xxxxxxxxxx.xxx?xxxxxxxx=xxxx&xxxxxx=xxxxxxxxxxpredictiveHigh
44Filexxxxxxx_xxxxxxx_xxxx.xxxpredictiveHigh
45Filexxx_xxxxxx.xxxxpredictiveHigh
46Filexxxxxxxx.xxxpredictiveMedium
47Filexxxxxxxx.xxxpredictiveMedium
48Filexxxxxxx.xxxpredictiveMedium
49Filexxxxxxx/xxxxxxxxxxxxx.xxxxpredictiveHigh
50Filexxxxxxxxxxxxxxx.xxxpredictiveHigh
51Filexxxxxx.xxpredictiveMedium
52Filexxxxxx_xxxxxxx.xxxpredictiveHigh
53Filexxxxxxxx/xxxx/xxxx.xxx?xxxxxx=xxxxxxxxxxxxxxxxpredictiveHigh
54Filexxxx.xxxpredictiveMedium
55Filexxxx.xxpredictiveLow
56Filexxxxxxxx_xxxx.xxxpredictiveHigh
57Filexxxx_xxxxxxx_xxxxxxxx.xxxpredictiveHigh
58Filexxxx_xxxxx.xxxxpredictiveHigh
59Filexxxxx.xxxpredictiveMedium
60Filexxxxxx\xxxxxxxx\xx_xxxxx_xxxxxxx.xxxpredictiveHigh
61Filexxxxxxx.xxx.xx.xxxxxxxxxxx.xxxpredictiveHigh
62Filexxxxxxxx.xxxxx.xxxpredictiveHigh
63Filexxxx-xxxxx.xxxpredictiveHigh
64Filexxxxxx.xxxpredictiveMedium
65Filexxxxxxx-xxxxx.xxxpredictiveHigh
66Filexxxxx.xpredictiveLow
67Filexxx-xxx/predictiveMedium
68Filexx-xxxxx-xxxxxx.xxxpredictiveHigh
69Filexx-xxxxxxxxx.xxxpredictiveHigh
70File~/xxx/xxxx-xxxxxxxxx.xxxpredictiveHigh
71File~/xxxxxxxx/xxxxx-xx-xxxxxxxxxx-xxxxxxxxx.xxxpredictiveHigh
72ArgumentxxxxxxpredictiveLow
73ArgumentxxxxxxxxpredictiveMedium
74ArgumentxxxxxxxxpredictiveMedium
75Argumentxxx_xxx_xx_xxx_xxxxxxxxxx_xpredictiveHigh
76Argumentxxxxx_xxxxpredictiveMedium
77ArgumentxxxxxpredictiveLow
78Argumentxxx_xxpredictiveLow
79ArgumentxxxpredictiveLow
80ArgumentxxxxxxxxxxxxxxxpredictiveHigh
81ArgumentxxxxxxpredictiveLow
82Argumentxxxxxxxx_xxxxxx/xxxxxxxx_xxxx/xxxxxxxx_xxxxxxxx/xxxxxxxx_xxxxpredictiveHigh
83ArgumentxxxxpredictiveLow
84ArgumentxxxpredictiveLow
85ArgumentxxxxxxxxxxpredictiveMedium
86ArgumentxxxxxxxpredictiveLow
87Argumentxx_xxxx/xxxxx/xxxpredictiveHigh
88Argumentxxxxxxxxx->xxxxxxxxxpredictiveHigh
89Argumentxxxxxxxxx_xxxxxxpredictiveHigh
90ArgumentxxxxxxxxxpredictiveMedium
91ArgumentxxxxpredictiveLow
92ArgumentxxxxxxxxpredictiveMedium
93Argumentxxxxxx_xxxxx_xxxpredictiveHigh
94Argumentxxxxxxx[xxxxxxx]predictiveHigh
95ArgumentxxxxpredictiveLow
96Argumentxxxx_xxxxxpredictiveMedium
97ArgumentxxpredictiveLow
98ArgumentxxxxxxpredictiveLow
99ArgumentxxxxxxxpredictiveLow
100ArgumentxxxxpredictiveLow
101Argumentxxxxxxx/xxxxxxxxxpredictiveHigh
102ArgumentxxxxpredictiveLow
103Argumentxxxxxx_xxxxxxpredictiveHigh
104Argumentxxxxxxxx_xxpredictiveMedium
105Argumentxxxxxxxx_xxpredictiveMedium
106ArgumentxxxxxxxxxxxxxxxxpredictiveHigh
107ArgumentxxxxxxpredictiveLow
108ArgumentxxxxxxpredictiveLow
109Argumentxxxxxx_xxxxxpredictiveMedium
110ArgumentxxxxxxxpredictiveLow
111Argumentxx_xxpredictiveLow
112ArgumentxxxxxpredictiveLow
113ArgumentxxxpredictiveLow
114ArgumentxxxxxxxxpredictiveMedium
115ArgumentxxpredictiveLow
116ArgumentxxxxxxpredictiveLow
117Argument_xxxxxx[xxxxxxxx_xxxx]predictiveHigh
118Argument_xxx_xxxxxxxxxxx_predictiveHigh
119Input Value/xxxxxx/..%xxpredictiveHigh
120Input Valuexxxxx"][xxxxxx]xxxxx('xxx')[/xxxxxx]predictiveHigh
121Input Valuexxxxxxxxx' xxx 'x'='xpredictiveHigh
122Network PortxxxxpredictiveLow
123Network Portxxx xxxxxx xxxxpredictiveHigh

References (22)

The following list contains external sources which discuss the actor and the associated activities:

Do you know our Splunk app?

Download it now for free!