Ngioweb Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (823)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	756
zh	20
de	14
es	10
fr	10

Country

us	318
la	150
ws	138
lt	26
ru	16

Actors

Cobalt Strike	13
Ngioweb	7
RedLine Stealer	7
AsyncRAT	4
RecordBreaker	4

Activities

Interest

Timeline

Type

Not Defined	328
Content Management System	48
Operating System	32
WordPress Plugin	24
Web Server	20

Vendor

Not Defined	264
Microsoft	42
Cisco	26
Apache	22
Google	22

Product

Microsoft Windows	12
Google Chrome	12
Linux Kernel	10
Google Android	10
Microsoft Office	10

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	CTI	EPSS	CVE
1	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.04	0.01847	CVE-2007-1192
2	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	1.76	0.00954	CVE-2010-0966
3	Ecommerce Online Store Kit shop.php sql injection	9.8	9.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	0.03763	CVE-2004-0300
4	Tiki Admin Password tiki-login.php improper authentication	8.0	7.7	$0-$5k	$0-$5k	Not Defined	Official Fix	4.66	0.00786	CVE-2020-15906
5	Liferay Portal/DXP Layout module cross-site request forgery	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	0.00062	CVE-2021-33338
6	Microsoft IIS cross site scripting	5.2	4.7	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.44	0.00400	CVE-2017-0055
7	WordPress WP_Query class-wp-query.php sql injection	8.5	8.4	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	0.00318	CVE-2017-5611
8	TRENDnet TV-IP422W/TV-IP422WN UltraCamX.ocx memory corruption	7.3	6.2	$0-$5k	$0-$5k	Proof-of-Concept	Workaround	0.07	0.32495	CVE-2014-10011
9	TikiWiki tiki-register.php input validation	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	10.00	0.00922	CVE-2006-6168
10	nginx request smuggling	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	4.50	0.00000	CVE-2020-12440
11	Basilix Webmail login.php3 command injection	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.07	0.00000
12	Esri ArcGIS Server sql injection	8.1	8.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.07	0.00123	CVE-2021-29114
13	Apache HTTP Server mod_rewrite redirect	6.7	6.7	$25k-$100k	$5k-$25k	Not Defined	Not Defined	0.03	0.00138	CVE-2020-1927
14	Phpsugar PHP Melody Cookie watch.php sql injection	8.5	7.7	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.04	0.00156	CVE-2017-15579
15	FS Thumbtack Clone browse-category.php sql injection	8.5	8.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.06	0.00288	CVE-2017-17589
16	Papercut MF/NG Application Server input validation	8.5	8.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	0.03442	CVE-2019-12135
17	Maran PHP Shop prod.php sql injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.19	0.00127	CVE-2008-4879
18	Basti2web Book Panel books.php sql injection	7.3	7.0	$0-$5k	$0-$5k	High	Official Fix	0.06	0.00064	CVE-2009-4889
19	Gempar Script Toko Online shop_display_products.php sql injection	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.06	0.00093	CVE-2009-0296
20	Itechscripts iTechBids detail.php sql injection	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.04	0.00100	CVE-2008-0776

IOC - Indicator of Compromise (12)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	31.14.40.107		Ngioweb	08/10/2022	verified	High
2	79.141.168.119		Ngioweb	08/10/2022	verified	High
3	88.218.16.12	wrwpraises.com	Ngioweb	08/10/2022	verified	High
4	XX.XXX.XX.XX	xx-xxxxxxx-xxx-xxxxxxxxxx.xxx	Xxxxxxx	08/10/2022	verified	High
5	XX.XXX.XX.XXX		Xxxxxxx	08/10/2022	verified	High
6	XX.XXX.XX.XXX		Xxxxxxx	08/10/2022	verified	High
7	XX.XXX.XX.X		Xxxxxxx	08/10/2022	verified	High
8	XXX.XXX.X.XXX		Xxxxxxx	08/10/2022	verified	High
9	XXX.XX.XXX.XXX	xxxxxxx.xxxxx.xx	Xxxxxxx	08/10/2022	verified	High
10	XXX.XXX.XXX.XXX	xxx.xxx.xxx.xxx.xxxxxx.xxxxxxxxx.xxx	Xxxxxxx	08/10/2022	verified	High
11	XXX.XX.XX.XXX	xxxxxx-xx.xxxxxx.xx	Xxxxxxx	08/10/2022	verified	High
12	XXX.XX.XX.XXX	xxxxxx-xx.xxxxxx.xx	Xxxxxxx	08/10/2022	verified	High

TTP - Tactics, Techniques, Procedures (24)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CWE-21, CWE-22, CWE-425	Pathname Traversal	predictive	High
2	T1040	CWE-319	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CWE-74	Injection	predictive	High
4	T1059	CWE-88, CWE-94	Cross Site Scripting	predictive	High
5	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	High
6	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	X2xx Xxxxxxxxxxxxxxxx: Xxxx Xxxxxx Xxxxxxxxxxx Xxx Xxx Xxxxxxx	predictive	High
7	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxxxx Xxxxxxxx	predictive	High
8	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxxxxxx	predictive	High
9	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
10	TXXXX	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	High
11	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
12	TXXXX	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	High
13	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
14	TXXXX	CWE-XXX, CWE-XXX	Xxx.xxx Xxxxxxxxxxxxxxxx: Xxxxxxxx Xx Xxxxxxxxxxxxx Xxxx	predictive	High
15	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx	predictive	High
16	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
17	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	High
18	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
19	TXXXX.XXX	CWE-XXX	Xxxxxxxx	predictive	High
20	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx	predictive	High
21	TXXXX.XXX	CWE-XX	Xxxxxxxxxxxxx	predictive	High
22	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	X2xx Xxxxxxxxxxxxxxxx: Xxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxxxx	predictive	High
23	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
24	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx Xxxxxx	predictive	High

IOA - Indicator of Attack (414)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/admin.php/news/admin/topic/save	predictive	High
2	File	/admin.php/user/level_del	predictive	High
3	File	/admin.php?r=admin/AdminBackup/del	predictive	High
4	File	/admin/bookings/view_booking.php	predictive	High
5	File	/admin/dl_sendmail.php	predictive	High
6	File	/admin/friendlylink/list	predictive	High
7	File	/admin/offenses/view_details.php	predictive	High
8	File	/alarm_pi/alarmService.php	predictive	High
9	File	/Ap4RtpAtom.cpp	predictive	High
10	File	/api/v2/cli/commands	predictive	High
11	File	/bcms/admin/?page=sales/view_details	predictive	High
12	File	/categorypage.php	predictive	High
13	File	/cgi-bin/hi3510/param.cgi	predictive	High
14	File	/cgi-bin/user/Config.cgi	predictive	High
15	File	/classes/Master.php?f=delete_student	predictive	High
16	File	/config/php.ini	predictive	High
17	File	/course/api/upload/pic	predictive	High
18	File	/DXR.axd	predictive	Medium
19	File	/forum/away.php	predictive	High
20	File	/htdocs/cgibin	predictive	High
21	File	/icingaweb2/navigation/add	predictive	High
22	File	/mkshop/Men/profile.php	predictive	High
23	File	/module/index.php	predictive	High
24	File	/Monitoring-History.php	predictive	High
25	File	/my_photo_gallery/image.php	predictive	High
26	File	/owa/auth/logon.aspx	predictive	High
27	File	/product.php	predictive	Medium
28	File	/ServletAPI/accounts/login	predictive	High
29	File	/spip.php	predictive	Medium
30	File	/uncpath/	predictive	Medium
31	File	/usr/bin/pkexec	predictive	High
32	File	/usr/local/WowzaStreamingEngine/bin/	predictive	High
33	File	/videotalk	predictive	Medium
34	File	/vloggers_merch/?p=products	predictive	High
35	File	/vloggers_merch/classes/Master.php?f=delete_category	predictive	High
36	File	/vloggers_merch/classes/Master.php?f=delete_product	predictive	High
37	File	/web/MCmsAction.java	predictive	High
38	File	/wp-admin/options.php	predictive	High
39	File	/zm/index.php	predictive	High
40	File	14all.cgi/14all-1.1.cgi/traffic.cgi/mrtg.cgi	predictive	High
41	File	activity_log.php	predictive	High
42	File	adclick.php	predictive	Medium
43	File	adm/systools.asp	predictive	High
44	File	admin.cropcanvas.php	predictive	High
45	File	admin.jcomments.php	predictive	High
46	File	admin/dashboard.php	predictive	High
47	File	admin/departments/manage_department.php	predictive	High
48	File	admin/getparam.cgi	predictive	High
49	File	admin/login.asp	predictive	High
50	File	admin/media/index.php"	predictive	High
51	File	xxxxxxxxx.xxx	predictive	High
52	File	xxxxxxxxxxxxxx/xxxxxxxxxxxxx	predictive	High
53	File	xxxxx_xxx.xxx	predictive	High
54	File	xxxx_xxxxx.xxx	predictive	High
55	File	xxxx_xxxx_xxxxxxxx.xxx	predictive	High
56	File	xxxx_xxx_xxxxxxx.xxx	predictive	High
57	File	xxxxxxxxxxx/xxxxxxx/xxxxx/xxxxx/xxxxxxxxx/xxxxxxxx.xxx	predictive	High
58	File	xxxxxx/xxx/xxxxxxxxx-xxxxxxxx.xxx	predictive	High
59	File	xxxx-xxxxxxx.x	predictive	High
60	File	xxxx/xxxxxxxxxxxx.xxx	predictive	High
61	File	xx-xxxxxx/xxxx/xxxxxx-xxxxxx.xxx	predictive	High
62	File	xxxx.xxx	predictive	Medium
63	File	xxxxx.xxx	predictive	Medium
64	File	xxxxxx-xxxxxxxx.xxx	predictive	High
65	File	xxxxxx.xxx	predictive	Medium
66	File	xx_xxxx_xx_xxxx_xxxx.xxx	predictive	High
67	File	xxxx_xxxxxxx.xxx	predictive	High
68	File	xxx.xxx	predictive	Low
69	File	xxxxxxx.xxx	predictive	Medium
70	File	xxxxxxxxx.xxx	predictive	High
71	File	xxxxxxxx.xxx	predictive	Medium
72	File	xxxxxxxx.xxx	predictive	Medium
73	File	xxx.x	predictive	Low
74	File	xxx-xxx/xxxxxxxxxxxx.xxx	predictive	High
75	File	xxx-xxx/xxxxxx	predictive	High
76	File	xxx.xxx	predictive	Low
77	File	xxx/xxx?xxxx	predictive	Medium
78	File	xxx/xxxxxxx/xxxxxxx	predictive	High
79	File	xxxxxxxxxxxx.xxx	predictive	High
80	File	xxxxxx.xxx	predictive	Medium
81	File	xxxxxx/xxx.x	predictive	Medium
82	File	xxxxx-xxxxxxx.xxx	predictive	High
83	File	xxx/xxxxxxx/xxxxxxx.xxx	predictive	High
84	File	xxxxxxx/xxxx.xxx	predictive	High
85	File	xxxxxxxxx/xxxxxx/xxxxxxx/xxxx/xxxxx.x	predictive	High
86	File	xxxxxxx.xxx	predictive	Medium
87	File	xxxxxxx.xxx	predictive	Medium
88	File	xxxxxxxxxx\xxxx.xxx	predictive	High
89	File	xxxxxxxxx/xxx/xxxxxx/xxxxx/xxxx.xxx	predictive	High
90	File	xxxxxxx/xxxxxxx/xxxxxxx/xxxx/xxxxxxx.xxx	predictive	High
91	File	xxxxxx/xxxx/x_xxx.x	predictive	High
92	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	High
93	File	xxxxxx.xxx	predictive	Medium
94	File	xxxxxx.x/xxxxxx-xxx.x	predictive	High
95	File	xxxx-xxxxxx.xxx	predictive	High
96	File	xxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
97	File	xxxxxxxxxxxxxxx.xxx	predictive	High
98	File	xxxxx_xxxxxxxxxxx.xxx	predictive	High
99	File	xxxxx.xxx	predictive	Medium
100	File	xxxx-xxxxxx.xxx	predictive	High
101	File	xxx/xxxxxxxx/xxxx.x	predictive	High
102	File	xxx/xxxxxxxx/xxxx_xxxxx_xxxxxxx.x	predictive	High
103	File	xxxxxxxxxxx.xxxxx.xxx	predictive	High
104	File	xxxx.xxx	predictive	Medium
105	File	xxxxx_xxxxx_xxx.xxx	predictive	High
106	File	xxxxxxx.xxx	predictive	Medium
107	File	xx/xxxx/xxxxxxx.x	predictive	High
108	File	xx/xxxxxxx.x	predictive	Medium
109	File	xxxxxxxxx_xxx_xxxx.xxx	predictive	High
110	File	xxxx/xxxxx/xxx_xxxxx.xxx	predictive	High
111	File	xxxx.xxx	predictive	Medium
112	File	xxxxx.xxx	predictive	Medium
113	File	xxxxx.xxx	predictive	Medium
114	File	xxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxx	predictive	High
115	File	xxxxxx/xxxxxxxxx	predictive	High
116	File	xxxx.xxx	predictive	Medium
117	File	xxxx_xxxxxxx.xxx.xxx	predictive	High
118	File	xxxxxxxxxx\xxxxxx\xxxxxxxxxxxxx.xxx	predictive	High
119	File	xxxx.xxx	predictive	Medium
120	File	xxxxxxxxxx.xxx	predictive	High
121	File	xxxxxxxxxx\xxxxxxxxxxxx\xxxxxxxxxxxxxxxx.xxx	predictive	High
122	File	xxx/xxxxxx.xxx	predictive	High
123	File	xxxxxxx/xxxxxxx.xxx	predictive	High
124	File	xxxxxxxx/xxxxxxx/xxxxxxxx.xxx.xxx	predictive	High
125	File	xxxxxxxx/xxxxxxx/xxxxxxx.xxxx.xxx	predictive	High
126	File	xxxxxxxx/xxxxx/xxxxxxxx.xxx	predictive	High
127	File	xxxxxxx\xxxxxxx\xxxxxxx_xxxxx.xxx	predictive	High
128	File	xxxxx.xxx	predictive	Medium
129	File	xxxxx.xxx	predictive	Medium
130	File	xxxxx.xxx/xxxxxx.xxx/xxxxxxxxxxxxx.xxx/xxxxxxxx.xxx	predictive	High
131	File	xxxxx.xxx?x=xxxxxxx&x=xxxxxxxx&x=xxxxxxx&xxx_xxxxxx=[xxx	predictive	High
132	File	xxxxx.xxx?x=xxxx&x=xxxx&x=xx_xxx_xxxxxx	predictive	High
133	File	xxxxx.xxx?x=xxxx&x=xxxxxxx&x=xxx	predictive	High
134	File	xxxxxx.xxx	predictive	Medium
135	File	xxxx.xxx	predictive	Medium
136	File	xxxxxx-xxxxxxx.xxx	predictive	High
137	File	xxxxxxx_xx.xxx	predictive	High
138	File	xx/xxxxxxx/xxxxxxxxxxxxxxxx.xxx	predictive	High
139	File	xx/xxxxxx/xxxxx.xxx	predictive	High
140	File	xxxxxxx.x	predictive	Medium
141	File	xxxx_xxxxxxx.xxx	predictive	High
142	File	xxxxxx.x	predictive	Medium
143	File	xxxxxx/xxxxx.xxx	predictive	High
144	File	xxxxxxxx/xxxx_xxxxxxx/xxxx_xxxx_xxxxx.xxx	predictive	High
145	File	xxxxxxxxxxx/xxxxxxxxxxxxx.x	predictive	High
146	File	xxxxxxxxx/xxxx_xxxxxxx/xxxxxxx.xxx	predictive	High
147	File	xxxxxx-xxx.xx	predictive	High
148	File	xxxxx/xxxxx/xxxxxxxx.xxx	predictive	High
149	File	xxxxxx.x	predictive	Medium
150	File	xxx.xxx	predictive	Low
151	File	xxxxx.xxxx	predictive	Medium
152	File	xxxxx.xxx	predictive	Medium
153	File	xxxxx/?xxxxxx=xxxxxxx&xxxx	predictive	High
154	File	xxxx_xxxxx.x	predictive	Medium
155	File	xxxxxxxxxx/xxxx.x	predictive	High
156	File	xxxx.xxx	predictive	Medium
157	File	xxxxxxxx.x	predictive	Medium
158	File	xxxx_xxxxx.xxx	predictive	High
159	File	xx_xxxx.x	predictive	Medium
160	File	xxxx/xxxxxxx_xxxx.x	predictive	High
161	File	xx/xxxxxxxxx.x	predictive	High
162	File	xxxxxxx.xxx	predictive	Medium
163	File	xxx_xxx_xxxxxx.x	predictive	High
164	File	xxxxxxxx.xxx	predictive	Medium
165	File	xxxxxxxx.xxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxxxxxxx	predictive	High
166	File	xxx.x	predictive	Low
167	File	xxx/xxxx/xxxx_xxxxxxxxx.x	predictive	High
168	File	xxx/xxxxx/xxx_xxxxx.x	predictive	High
169	File	xxxxxxx_xxxx.xxx	predictive	High
170	File	xxxx.xxx	predictive	Medium
171	File	xxxxxxx.xxxx	predictive	Medium
172	File	xxx/xxxxxx/xxxxxxxx/xxxxx/xxxxxxxxx.xxxx	predictive	High
173	File	xxx/xxxxx.xxxx	predictive	High
174	File	xxxxxxx_xxxx.xxx	predictive	High
175	File	xxxxxxxxxxxxxxxxx.xxx	predictive	High
176	File	xxxxxxxx.x	predictive	Medium
177	File	xxxxx/xxxxxx.xxx	predictive	High
178	File	xxxxxxxxxxxxxx.xxx	predictive	High
179	File	xxxxxxx.xxx	predictive	Medium
180	File	xxxxxxxxxxxxxx.xxx	predictive	High
181	File	xxx%xx.xxx	predictive	Medium
182	File	xxx-xxxx.xxx	predictive	Medium
183	File	xxxxxxx.xxx	predictive	Medium
184	File	xxxxxxx.xxx	predictive	Medium
185	File	xxxx.xxx	predictive	Medium
186	File	xxxxxxx/xxxxxxx/xxx/xxxxxxxxxx.xxx?xxxxxxxx=xxxx&xxxxxx=xxxxxxxxxx	predictive	High
187	File	xxxx/xxxxxxxxx.xxx	predictive	High
188	File	xxxxxxxxxxx.xxx	predictive	High
189	File	xxxxxxx.xxx	predictive	Medium
190	File	xxxx.xxx	predictive	Medium
191	File	xxxxxxxxxx.xxx	predictive	High
192	File	xxxxxx.xxx	predictive	Medium
193	File	xx-xxxxxxx/xx-xxxxxxx.xxx	predictive	High
194	File	xxxxx.xxx	predictive	Medium
195	File	xxxxx_xxxxx.xxx	predictive	High
196	File	xxxxx_xxxxx.xxx	predictive	High
197	File	xxxxxx.xxx	predictive	Medium
198	File	xxxxxxxxxx_xxxxx.xxxxxx	predictive	High
199	File	xxxxxx.xxx	predictive	Medium
200	File	xxxxxx.xxxx	predictive	Medium
201	File	xxx.xxxxx	predictive	Medium
202	File	xxxxxxxxxxxxxx.xxx	predictive	High
203	File	xxxx_xxxx_xxxxxx.xxx	predictive	High
204	File	xxxx-xxx/xxxxxxxx.xxx?xxxx=xxx_xxxxx.xxx	predictive	High
205	File	xxxxxx-xxxxxxx.xxx	predictive	High
206	File	xxxxxx.xxx	predictive	Medium
207	File	xxxx_xxxxxxxx.xxx	predictive	High
208	File	xxxxxxx_xxxxxx.xxx	predictive	High
209	File	xxxx.xxx	predictive	Medium
210	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	High
211	File	xxxx.xxx	predictive	Medium
212	File	xxxxxxxxxxx.xxx	predictive	High
213	File	xxxxxx-xxxxx-xxxxxx.xxx	predictive	High
214	File	xxxxx/xxxxxxxx/xxxxxxxxx.xxx	predictive	High
215	File	xxxxxx_xxxxx_xxxxxxxxxxxxx.xxx	predictive	High
216	File	xxxx_xxxxx.xxxx	predictive	High
217	File	xxx/xxx_xxxxxx.xx	predictive	High
218	File	xxx/xxxx/xxxx/xxx/xxxxxxx/xx/xxxxxxx/xxxxxxxxx/xxxxxxxxxxxxxxx.xxxx	predictive	High
219	File	xxx_xxxxxxxx.x	predictive	High
220	File	xxxxxx.xxx	predictive	Medium
221	File	xxxxx/xxxxx/xxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxx.xxx	predictive	High
222	File	xxxxxx\xxxxxxxx\xx_xxxxx_xxxxxxx.xxx	predictive	High
223	File	xxxxxxx.xxx.xx.xxxxxxxxxxx.xxx	predictive	High
224	File	xxxxxxxxx/xxxxxxxx.xxx	predictive	High
225	File	xxxxxxxxx/xxxx/xxxxxx_xxxxxxxxxx.xxx	predictive	High
226	File	xxxx-xxxxxxxx.xxx	predictive	High
227	File	xxxx-xxxxx.xxx	predictive	High
228	File	xxxx-xxxxxxxx.xxx	predictive	High
229	File	xxx/xxx/xxx_xx.x	predictive	High
230	File	xxxxxxxxx/xxxxxxxxxxxxxxxxxx.xxx	predictive	High
231	File	xxxxxxx/xxx_xxxx_xxx.xxx	predictive	High
232	File	xxxxxxxxx.xxx	predictive	High
233	File	xxxxxx.xxx	predictive	Medium
234	File	xxxx/xxxxx.xxx	predictive	High
235	File	xxxxxxx-xxxxx.xxx	predictive	High
236	File	xxxx/xxx/xxxx-xxxxx.xxx	predictive	High
237	File	xxxx/xxxxxxxx/xxxxxxxx.xxxx	predictive	High
238	File	xxxx.xxx	predictive	Medium
239	File	xxxxxxxx.xxx	predictive	Medium
240	File	xxxxxxxx.xxx	predictive	Medium
241	File	xxxxxxx.xxx	predictive	Medium
242	File	xxxxxxx.xxx	predictive	Medium
243	File	xxxxxxxxxxxx.xxx	predictive	High
244	File	xxxxx.xxx	predictive	Medium
245	File	xxxxxxxx.xxx	predictive	Medium
246	File	xxxxx.xxx	predictive	Medium
247	File	xxxxxxxxxxxxxxxxxx.xxxx	predictive	High
248	File	xxxxxx.xxx	predictive	Medium
249	File	xx-xxxxx/xxxxxxxx/xxxxx-xx-xxxxx-xxxx.xxx	predictive	High
250	File	xx-xxxxx/xxxxxxx-xxxxxxx.xxx?xxxx=xx-xxxxxxxx.xxx	predictive	High
251	File	xx-xxxxx/xxxxxxx-xxxxxxx.xxx?xxxx=xx-xxxx-xxxxxxxxx-xx	predictive	High
252	File	xx-xxxxx/xxxx.xxx	predictive	High
253	File	xx-xxxxx-xxxxxx.xxx	predictive	High
254	File	xx-xxxxxxxx/xxxxx-xx-xxxxx.xxx	predictive	High
255	File	xx-xxxxxxxx/xxxxxxxxx.xxx	predictive	High
256	File	xx-xxxx.xxx	predictive	Medium
257	File	xxx/xxxx.xx	predictive	Medium
258	File	xxxx.xxx	predictive	Medium
259	File	~/xxx/xxxx-xxxxxxxxx.xxx	predictive	High
260	File	~/xxxxxxxx/xxxxx-xx-xxxxxxxxxx-xxxxxxxxx.xxx	predictive	High
261	Library	/xxx/xxx/xxxxxxx/xxxxxxx/xxxxx.xxxxxxx.xxx	predictive	High
262	Library	xxxxxx.xxx	predictive	Medium
263	Library	xxx/xxx/xxxxxxx/xxxxxxx/xxxxx.xxxxxxx.xxx	predictive	High
264	Library	xxxxxxx/xxx.xxx.xxx.xxx	predictive	High
265	Library	xxxxxx	predictive	Low
266	Library	xxxxxxxxx.x.x.xxx.xxx	predictive	High
267	Library	xxxxxx.xxx	predictive	Medium
268	Library	xxxxxx/xxxxxxxxx/xxxxx.xxx	predictive	High
269	Library	xxxxxxxxxxx	predictive	Medium
270	Library	xxxxxxx.xxx/xxxxxx.xxx	predictive	High
271	Argument	$_xxxxx	predictive	Low
272	Argument	xx_xxxxx_xxx_xxxx	predictive	High
273	Argument	xxx_xx	predictive	Low
274	Argument	xxxxxx	predictive	Low
275	Argument	xxxxxxx	predictive	Low
276	Argument	xxx_xxxxx_xxx	predictive	High
277	Argument	xxxxx	predictive	Low
278	Argument	xxx_xxx	predictive	Low
279	Argument	xxxxxxxxx	predictive	Medium
280	Argument	xxxxxxxx	predictive	Medium
281	Argument	xxxx_xxx	predictive	Medium
282	Argument	xxxxxx	predictive	Low
283	Argument	xxx_xxx_xx_xxx_xxxxxxxxxx_x	predictive	High
284	Argument	xxxxx_xxxx	predictive	Medium
285	Argument	xxxx_xxx_xxxx	predictive	High
286	Argument	xxx	predictive	Low
287	Argument	xxxxxxxxxx	predictive	Medium
288	Argument	xxxxx	predictive	Low
289	Argument	xxx_xx	predictive	Low
290	Argument	xxx	predictive	Low
291	Argument	xxx	predictive	Low
292	Argument	xxxxxxxxxxxxxxx	predictive	High
293	Argument	xxxxxxx/xxxxxxxx/xxxx	predictive	High
294	Argument	xxxxxxx	predictive	Low
295	Argument	xxxxxxxxx xxxx	predictive	High
296	Argument	xxxxxxxxxxxx/xxxxxxx/xxxxxxxx	predictive	High
297	Argument	xxxxxxxxxxxx	predictive	Medium
298	Argument	xxxxxxxxxxx	predictive	Medium
299	Argument	xxx	predictive	Low
300	Argument	xxxxxxxxxxxxx	predictive	High
301	Argument	xxxxxx	predictive	Low
302	Argument	xx_xxx_xxx_xxxxxx_xxx_xxxxxx_xxxxxxxxxxx	predictive	High
303	Argument	xxxxx->xxxx	predictive	Medium
304	Argument	xxxxx	predictive	Low
305	Argument	xxxxx	predictive	Low
306	Argument	xxxxxxxxx_xxxxxx	predictive	High
307	Argument	xxxxxxxxx	predictive	Medium
308	Argument	xx_xxxxxxx	predictive	Medium
309	Argument	xxxx	predictive	Low
310	Argument	xxxxxxxx	predictive	Medium
311	Argument	xxxxxxxxx	predictive	Medium
312	Argument	xxxxxxx	predictive	Low
313	Argument	xxxxx_xx	predictive	Medium
314	Argument	xxxxxxxx	predictive	Medium
315	Argument	xxxx_xx	predictive	Low
316	Argument	xx_xx	predictive	Low
317	Argument	xxx	predictive	Low
318	Argument	xxxxxxx[xxxxxxx]	predictive	High
319	Argument	xxxxx	predictive	Low
320	Argument	xxxxxxx/xxxxxxxxxxxx	predictive	High
321	Argument	xxxxxxxxx	predictive	Medium
322	Argument	xxxxx	predictive	Low
323	Argument	xxxx_xxxxxxxxxx_xxx	predictive	High
324	Argument	xxxx	predictive	Low
325	Argument	xxxx	predictive	Low
326	Argument	xxxx	predictive	Low
327	Argument	xx	predictive	Low
328	Argument	xxxxx	predictive	Low
329	Argument	xxxxxxxxxx	predictive	Medium
330	Argument	xxxxx_xx	predictive	Medium
331	Argument	xxxxx	predictive	Low
332	Argument	xxxxxx	predictive	Low
333	Argument	xxxx_xx	predictive	Low
334	Argument	xxxxxxx	predictive	Low
335	Argument	xxxx	predictive	Low
336	Argument	xxxxxxxxxx	predictive	Medium
337	Argument	xx_xxxxxxx_xxxx	predictive	High
338	Argument	xxxx xxxx xxxxxx xxxxx	predictive	High
339	Argument	xxxxxxx_xxxx[xx][xxxxxxxx]	predictive	High
340	Argument	xxx	predictive	Low
341	Argument	xxxxx_xxx_xxx_xxxx_xx_xxxxxxx	predictive	High
342	Argument	xxxx	predictive	Low
343	Argument	xxxx_xxxx	predictive	Medium
344	Argument	xxxxxxx	predictive	Low
345	Argument	xxxxxxxx	predictive	Medium
346	Argument	xxxx	predictive	Low
347	Argument	xxxx	predictive	Low
348	Argument	xxxx	predictive	Low
349	Argument	xxxx[xxxxxxxxxxxxxxxxx]	predictive	High
350	Argument	xxxxxx_xxxxxx	predictive	High
351	Argument	xxxxx_xxxx_xxxx	predictive	High
352	Argument	xxxxxxxxx	predictive	Medium
353	Argument	xxxxxxxx-xxxxxxx	predictive	High
354	Argument	xxx	predictive	Low
355	Argument	xxxxxxxxxx[x]	predictive	High
356	Argument	xxxxxxxxx	predictive	Medium
357	Argument	xxxxx	predictive	Low
358	Argument	x_xxxx	predictive	Low
359	Argument	x_xx	predictive	Low
360	Argument	xxx	predictive	Low
361	Argument	xxxxx	predictive	Low
362	Argument	xxxxxxxx_xx	predictive	Medium
363	Argument	xxxxxxxxxxx	predictive	Medium
364	Argument	xxxxxxxx	predictive	Medium
365	Argument	xxxxxxxx_xx	predictive	Medium
366	Argument	xxxxxx_xxxx	predictive	Medium
367	Argument	xxxxxx	predictive	Low
368	Argument	xxxxxxxxxxxxx	predictive	High
369	Argument	xxxxxx_xxxxx	predictive	Medium
370	Argument	xxxxxx	predictive	Low
371	Argument	xxxxxxxx[xxxx]	predictive	High
372	Argument	xxxx_xxxx	predictive	Medium
373	Argument	xxxxxxx	predictive	Low
374	Argument	xxxxxxxxx	predictive	Medium
375	Argument	xxxxx_xxxxxx	predictive	Medium
376	Argument	xxxxxxxx	predictive	Medium
377	Argument	xxxx_xx	predictive	Low
378	Argument	xxxxx	predictive	Low
379	Argument	xxxxx	predictive	Low
380	Argument	xxxxx	predictive	Low
381	Argument	xxxxx	predictive	Low
382	Argument	xxxxx_xxxxx	predictive	Medium
383	Argument	xxxx	predictive	Low
384	Argument	xxx	predictive	Low
385	Argument	xxx	predictive	Low
386	Argument	xxx xxxxxxx xxxx	predictive	High
387	Argument	xxxx	predictive	Low
388	Argument	xxxxxx	predictive	Low
389	Argument	xxxxxx	predictive	Low
390	Argument	xxxxxxxx	predictive	Medium
391	Argument	xxxxxxxx/xxxxxxxx xx/xxxxx	predictive	High
392	Argument	xxxxxxxx:xxxxxxxx	predictive	High
393	Argument	x_xxxx	predictive	Low
394	Argument	xxxx	predictive	Low
395	Argument	xxx_xxxxxxxxxx_xxxxx__xxxx_xxxxxxx	predictive	High
396	Argument	xxxxxxxxxxx	predictive	Medium
397	Argument	xxx_xxxx	predictive	Medium
398	Argument	_xxx_xxxxxxxxxxx_	predictive	High
399	Argument	_xxxxx	predictive	Low
400	Input Value	"><xxx xxx=x xxxxxxx=xxxxxx(x)>	predictive	High
401	Input Value	">[xxxxxx]xxxxx(xxxxxxxx.xxxxxx);[/xxxxxx]<!--	predictive	High
402	Input Value	%xxxxxx+-x+x+xx.x.xx.xxx%xx%xx	predictive	High
403	Input Value	-xxxx%xx%xxxxxxx%xxxxx%xxxxxxxx%xxxxxx,xxxxxxxx(),xxxx(),xxxx,xxxx,xxxx,xxxx--%xx-	predictive	High
404	Input Value	x xxxxx xxx xxxxxx xxxx,xxxx,xxxx,xxxx,xxxxxx(xxxxxxxxxxxx,xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx,xxxxxxxxxxxx)--	predictive	High
405	Input Value	<xxxxxx>xxxxx(x)</xxxxxx>xxx	predictive	High
406	Input Value	xxxxxx=xxx&xxxxxxxx=xxxxxxx.*	predictive	High
407	Input Value	xxxxxxxxx' xxx 'x'='x	predictive	High
408	Input Value	xxxxxxxxx:xxxxxxxx	predictive	High
409	Input Value	xxxxxxxxxx	predictive	Medium
410	Pattern	x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|.\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|x\|xx\|	predictive	High
411	Pattern	\|xx xx xx xx\|	predictive	High
412	Network Port	xxx	predictive	Low
413	Network Port	xxx/xxxx	predictive	Medium
414	Network Port	xxx/xxx (xxxx)	predictive	High

References (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!