Spalax Analysis

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en594
zh116
ru58
es48
de48

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

us656
cn136
gb20
jp18
ru14

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Microsoft Windows20
Mozilla Firefox14
Linux Kernel8
PHP8
SourceCodester Library Management System6

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1Pligg cloud.php sql injection6.36.3$0-$5k$0-$5kNot DefinedNot Defined3.990.00000
2DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.760.04187CVE-2010-0966
3AWStats Config awstats.pl cross site scripting4.34.1$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.830.01319CVE-2006-3681
4Lars Ellingsen Guestserver guestbook.cgi cross site scripting4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.280.01055CVE-2005-4222
5LogicBoard CMS away.php redirect6.36.1$0-$5k$0-$5kNot DefinedUnavailable1.560.00000
6jforum User input validation5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.040.04499CVE-2019-7550
7OpenBB read.php sql injection7.37.0$0-$5k$0-$5kNot DefinedOfficial Fix0.320.00986CVE-2005-1612
8Linux Kernel FXSAVE x87 Register cryptographic issues4.33.9$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.060.01547CVE-2006-1056
9MGB OpenSource Guestbook email.php sql injection7.37.3$0-$5k$0-$5kHighUnavailable1.100.02800CVE-2007-0354
10MediaWiki Submission index.php cross site scripting5.85.2$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.080.01319CVE-2012-4378
11Openads adclick.php Remote Code Execution7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.050.01213CVE-2007-2046
12Apple Mac OS X Server Wiki Server cross site scripting4.34.3$5k-$25k$0-$5kNot DefinedNot Defined0.080.01319CVE-2009-2814
13PHP Link Directory Administration Page index.html cross site scripting4.34.3$0-$5k$0-$5kNot DefinedNot Defined1.050.01213CVE-2007-0529
14vBulletin redirector.php6.66.6$0-$5k$0-$5kNot DefinedNot Defined0.140.00885CVE-2018-6200
15Vunet VU Web Visitor Analyst redir.asp sql injection7.37.1$0-$5k$0-$5kHighWorkaround0.770.01139CVE-2010-2338
16Joomla CMS com_easyblog sql injection6.36.1$5k-$25k$5k-$25kNot DefinedNot Defined1.640.00000
17Serendipity exit.php privileges management6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000.00000
18PHP phpinfo cross site scripting4.33.9$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.280.03129CVE-2007-1287
19RedKernel Referrer Tracker rkrt_stats.php Stored cross site scripting4.34.1$0-$5k$0-$5kProof-of-ConceptUnavailable0.070.01917CVE-2006-0317
20Linux Foundation Xen EFLAGS Register SYSENTER input validation6.25.9$5k-$25k$0-$5kNot DefinedOfficial Fix0.050.01282CVE-2013-1917

Campaigns (1)

These are the campaigns that can be associated with the actor:

  • Spalax

IOC - Indicator of Compromise (65)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP addressHostnameActorCampaignsTypeConfidence
1128.90.108.132undefined.hostname.localhostSpalaxSpalaxverifiedHigh
2128.90.108.177undefined.hostname.localhostSpalaxSpalaxverifiedHigh
3128.90.112.34undefined.hostname.localhostSpalaxSpalaxverifiedHigh
4128.90.112.142undefined.hostname.localhostSpalaxSpalaxverifiedHigh
5128.90.115.100undefined.hostname.localhostSpalaxSpalaxverifiedHigh
6128.90.115.244undefined.hostname.localhostSpalaxSpalaxverifiedHigh
7179.14.171.7Dinamic-Tigo-179-14-171-7.tigo.com.coSpalaxSpalaxverifiedHigh
8179.14.173.93Dinamic-Tigo-179-14-173-93.tigo.com.coSpalaxSpalaxverifiedHigh
9181.49.90.193dynamic-ip-1814990193.cable.net.coSpalaxSpalaxverifiedHigh
10181.52.100.157static-ip-cr181520100157.cable.net.coSpalaxSpalaxverifiedHigh
11181.52.102.87static-ip-cr18152010287.cable.net.coSpalaxSpalaxverifiedHigh
12181.52.103.140static-ip-cr181520103140.cable.net.coSpalaxSpalaxverifiedHigh
13181.52.104.2static-ip-cr1815201042.cable.net.coSpalaxSpalaxverifiedHigh
14XXX.XX.XXX.XXxxxxxx-xx-xxxxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
15XXX.XX.XXX.XXxxxxxx-xx-xxxxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
16XXX.XX.XXX.XXXxxxxxx-xx-xxxxxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
17XXX.XX.XXX.XXxxxxxx-xx-xxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
18XXX.XX.XXX.XXxxxxxx-xx-xxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
19XXX.XX.XXX.XXXxxxxxx-xx-xxxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
20XXX.XX.XXX.XXXxxxxxx-xx-xxxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
21XXX.XX.XXX.XXXxxxxxx-xx-xxxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
22XXX.XX.XXX.XXXxxxxxx-xx-xxxxxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
23XXX.XX.XXX.XXxxxxxx-xx-xxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
24XXX.XX.XXX.XXxxxxxx-xx-xxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
25XXX.XX.XXX.XXxxxxxx-xx-xxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
26XXX.XX.XXX.XXxxxxxx-xx-xxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
27XXX.XX.XXX.XXXxxxxxx-xx-xxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
28XXX.XX.X.XXxxxxxxx-xx-xxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
29XXX.XX.XXX.XXXxxxxxxx-xx-xxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
30XXX.XX.XXX.XXXxxxxxxx-xx-xxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
31XXX.XXX.XXX.XXXxxxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
32XXX.XXX.XXX.XXXxxxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
33XXX.XXX.XXX.XXXxxxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
34XXX.XXX.XXX.XXXxxxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
35XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
36XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
37XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
38XXX.XXX.XXX.XXxxx-xxx-xxx-xxx-xx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
39XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
40XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
41XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
42XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
43XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
44XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
45XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
46XXX.XXX.XXX.XXxxx-xxx-xxx-xxx-xx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
47XXX.XXX.XXX.XXxxx-xxx-xxx-xxx-xx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh
48XXX.XX.XXX.Xxxxxxx-xx-xxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
49XXX.XX.XXX.XXXxxxxxxx-xx-xxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
50XXX.XX.XXX.Xxxxxxxx-xx-xxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
51XXX.XX.XX.XXxxxxxx-xx-xxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
52XXX.XX.XX.XXXxxxxxx-xx-xxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
53XXX.XX.XX.XXXxxxxxx-xx-xxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
54XXX.XX.XX.XXXxxxxxx-xx-xxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
55XXX.XX.XX.XXxxxxxx-xx-xxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
56XXX.XX.XX.XXXxxxxxx-xx-xxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
57XXX.XXX.XXX.XXxxxxxxx-xx-xxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
58XXX.XXX.XXX.XXXxxxxxxx-xx-xxxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
59XXX.XXX.XXX.XXXxxxxxxx-xx-xxxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
60XXX.XXX.XXX.XXXxxxxxx-xx-xxxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
61XXX.XXX.XX.XXxxxxxx-xx-xxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
62XXX.XXX.XX.XXXxxxxxx-xx-xxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
63XXX.XXX.XXX.XXXxxxxxxx-xx-xxxxxxxxxxxx.xxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
64XXX.XX.XXX.XXxxxxxxx-xx-xxx-xxx-xx-xxx-xx.xxxxxxx.xxx.xxXxxxxxXxxxxxverifiedHigh
65XXX.XXX.XX.XXXxxxxxxxx-xxx-xx-xxx.xxx.xxx.xxXxxxxxXxxxxxverifiedHigh

TTP - Tactics, Techniques, Procedures (23)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (483)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File.github/workflows/combine-prs.ymlpredictiveHigh
2File.htaccesspredictiveMedium
3File/Admin/add-student.phppredictiveHigh
4File/admin/api/admin/articles/predictiveHigh
5File/admin/conferences/list/predictiveHigh
6File/admin/edit_admin_details.php?id=adminpredictiveHigh
7File/admin/generalsettings.phppredictiveHigh
8File/Admin/login.phppredictiveHigh
9File/admin/payment.phppredictiveHigh
10File/admin/reports.phppredictiveHigh
11File/admin/showbad.phppredictiveHigh
12File/apilog.phppredictiveMedium
13File/cgi-bin/kerbynetpredictiveHigh
14File/cgi-bin/wlogin.cgipredictiveHigh
15File/connectors/index.phppredictiveHigh
16File/dev/block/mmcblk0rpmbpredictiveHigh
17File/dms/admin/reports/daily_collection_report.phppredictiveHigh
18File/DocSystem/Repos/getReposAllUsers.dopredictiveHigh
19File/face-recognition-php/facepay-master/camera.phppredictiveHigh
20File/forum/away.phppredictiveHigh
21File/fos/admin/ajax.php?action=loginpredictiveHigh
22File/fos/admin/index.php?page=menupredictiveHigh
23File/hrm/employeeadd.phppredictiveHigh
24File/hrm/employeeview.phppredictiveHigh
25File/index.phppredictiveMedium
26File/Items/*/RemoteImages/DownloadpredictiveHigh
27File/items/view_item.phppredictiveHigh
28File/jsoa/hntdCustomDesktopActionContentpredictiveHigh
29File/lists/admin/predictiveHigh
30File/lookin/infopredictiveMedium
31File/MagickCore/image.cpredictiveHigh
32File/manager/index.phppredictiveHigh
33File/medical/inventories.phppredictiveHigh
34File/modules/profile/index.phppredictiveHigh
35File/modules/projects/vw_files.phppredictiveHigh
36File/modules/public/calendar.phppredictiveHigh
37File/newsDia.phppredictiveMedium
38File/out.phppredictiveMedium
39File/proxypredictiveLow
40File/public/launchNewWindow.jsppredictiveHigh
41File/Redcock-Farm/farm/category.phppredictiveHigh
42File/reports/rwservletpredictiveHigh
43File/sacco_shield/manage_user.phppredictiveHigh
44File/spip.phppredictiveMedium
45File/sqlitemanager/main.php?dbsel=-1%20or%2072%20=%2072predictiveHigh
46File/staff/bookdetails.phppredictiveHigh
47File/TeleoptiWFM/Administration/GetOneTenantpredictiveHigh
48File/user/update_booking.phppredictiveHigh
49File/WEB-INF/web.xmlpredictiveHigh
50File/Wedding-Management-PHP/admin/photos_add.phppredictiveHigh
51File/Wedding-Management/package_detail.phppredictiveHigh
52File/wordpress/wp-admin/options-general.phppredictiveHigh
53File/wp-content/plugins/woocommerce/templates/emails/plain/predictiveHigh
54File01article.phppredictiveHigh
55FileAbstractScheduleJob.javapredictiveHigh
56Fileactionphp/download.File.phppredictiveHigh
57FileAdClass.phppredictiveMedium
58Fileadclick.phppredictiveMedium
59Fileaddtocart.asppredictiveHigh
60Filexxxxx.xxxpredictiveMedium
61Filexxxxx/xxxx_xxxxx_xxxx.xxxpredictiveHigh
62Filexxxxx/xxxxxx.xxxpredictiveHigh
63Filexxxxx/xxxxxx/xxxxx/xxxxx.xxxxx.xxxx.xxxpredictiveHigh
64Filexxxxx/xxxxxx/xxxxxxxx/xxxxx.xxxxxxxx.xxxpredictiveHigh
65Filexxxxxxx.xxxpredictiveMedium
66Filexxxxxxx/xxxxxx.xxx?xx=xxxxxxxxpredictiveHigh
67FilexxxxxxxxxxxpredictiveMedium
68Filexxxxx/xxxxxxxx/xxxxxxxxx/xxxx.xxxxpredictiveHigh
69Filexxxxxxxx.xxxpredictiveMedium
70Filexxxxxxxxxxx/xxxxxxxxxxx/xxxxxxxxx.xxxpredictiveHigh
71Filexxx\xxxxxx\xxxxxxxxxx\xxxxxxxxxxxxxxxxx.xxxxx.xxxpredictiveHigh
72Filexxxxxxxx.xxxpredictiveMedium
73Filexxxxxxx\xxxxxxx_xxxxxx.xxxpredictiveHigh
74Filexxxx.xxxpredictiveMedium
75Filexxxxx/xxxx_xxx.xpredictiveHigh
76Filexxxxxxx.xxpredictiveMedium
77Filex_xxxxx.xxxpredictiveMedium
78Filexx-xxxxxxx.xxpredictiveHigh
79Filexx_xxxxx_xxxxx.xxxpredictiveHigh
80Filexxxxx_xxxxxxxx.xxxpredictiveHigh
81Filexxxxxxxxxxxx.xxx/xxxxxxxxxxx.xxx/xxxxxxxxxxx.xxx/xxxxxxxxxxx.xxxpredictiveHigh
82Filexxxxx.xxxpredictiveMedium
83Filexxxxxxxx.xxxpredictiveMedium
84Filexxxx_xxxx_xxxxxxx.xxxpredictiveHigh
85Filexxx-xxx/xxxxxxx.xxpredictiveHigh
86Filexxxxxxxxxxx.xxx.xxxpredictiveHigh
87Filexxxxxx/xxxxxxxxxxx/xxxxxxx/xx_xxxxxxx_xxxxxx.xxxpredictiveHigh
88Filexxxxx.xxxxx.xxxpredictiveHigh
89Filexxxxxxxxxx_xxxxx.xxxpredictiveHigh
90Filexxxxx.xxxpredictiveMedium
91Filexx.xxxxxx.xxxx.xxxx.xxxxxxx.xxxxpredictiveHigh
92Filexxxxxxxx_xxxxxxxxxxxxxxxxx.xxxpredictiveHigh
93Filexxxxxx.xxxpredictiveMedium
94Filexxxxxxx.xxxpredictiveMedium
95Filexxxxxx.xxxpredictiveMedium
96Filexxxx.xxpredictiveLow
97Filexxxx/xxxx/xxx.xxxxxxx.xxxxxxx/xxxxxx_xxxxx/xxx.xxxpredictiveHigh
98Filexxxxxxxx.xxxxxxx.xxxpredictiveHigh
99Filexxxxxx/xxxxxxx/xxxxx.xxpredictiveHigh
100Filexxxxxxx.xxxpredictiveMedium
101Filexxxxxx.xxxpredictiveMedium
102Filexxxxx.xpredictiveLow
103Filexxxxxxxx.xxxxpredictiveHigh
104Filexxxxxxxx.xxxpredictiveMedium
105Filexxxxxxxxxxx.xxxpredictiveHigh
106Filexxxxx.xxxpredictiveMedium
107Filexx/xxxxx/xxxxxx_xxxxx.xxxpredictiveHigh
108Filexxxxxxxx/xxxxx/xxxxxxxxx.xxxpredictiveHigh
109Filexxxx.xxxpredictiveMedium
110Filexxxxxxxxxxxxxxxxxxx/xxxxxxx/xxxxxxxxxxxxxxxxxxx.xxxpredictiveHigh
111Filexxxx_xxxxxxxxx.xxxxxpredictiveHigh
112Filexxxxx.xxxpredictiveMedium
113Filexxxxx.xxx?xxx=xxxx&xxxxxx=xxxxxxxxxpredictiveHigh
114Filexxxxx_xxxxxx.xxxpredictiveHigh
115Filexx-xxxxxxx/xxxxxxxxxxxx/xxxxxx/xxxxx.xxxxxxxxxxxx.xxxx.xxxpredictiveHigh
116Filexxxxxxxxx_xxxxxx.xxxpredictiveHigh
117Filexxxxxxx.xxxpredictiveMedium
118Filexxxxxxx.xxxpredictiveMedium
119Filexxxx.xxxpredictiveMedium
120Filexxxxxx.xxxpredictiveMedium
121Filexxxxxxxxx.xxxpredictiveHigh
122Filexxxx-xxxxxxx.xpredictiveHigh
123FilexxpredictiveLow
124Filexxxx.xxxpredictiveMedium
125Filexxxxxx.xxxpredictiveMedium
126Filexxxxxxxxxx\xxxxxxxxxxxx\xxxxxxxxxxxxxxxx.xxxpredictiveHigh
127Filexxxxxxxxx.xxxpredictiveHigh
128Filexxx/xxxxxx.xxxpredictiveHigh
129Filexxx/xxxxxxxx.xxxpredictiveHigh
130Filexxxxxxx/xxxxxxx/xxxxxxxx_xxxxxxxx.xxx.xxxpredictiveHigh
131Filexxxxxxx/xxxxx/xxxxx_xxxx.xxxpredictiveHigh
132Filexxxxxxxx/xxxxxxxxx.xxxpredictiveHigh
133Filexxxxxxxx/xxxxxxxx/xxxxxxxxxxxxxxxx.xxxpredictiveHigh
134Filexxxxx.xxxpredictiveMedium
135Filexxxxx.xxxxpredictiveMedium
136Filexxxxx.xxpredictiveMedium
137Filexxxxx.xxxpredictiveMedium
138Filexxxxx.xxx?xxxx=xxxxxpredictiveHigh
139Filexxxxx_xx.xxxpredictiveMedium
140FilexxxxxxxxpredictiveMedium
141Filexxxxxx.xxxpredictiveMedium
142Filexxxxxxx/xxxxxxxx.xxxpredictiveHigh
143Filexxxxxxxxxx/xxxxx.xxpredictiveHigh
144Filexx/xxxxxxxxxx/xxx_xxxxxx/xxxxxxxx.xxxpredictiveHigh
145Filexxxxxx.xpredictiveMedium
146Filexxx/xxxxxxxx/xxxxxx/xxxxxxx.xxpredictiveHigh
147Filexxx/xxxxxx/xxxx_xx.xxpredictiveHigh
148Filexxxx/xx.xxxpredictiveMedium
149Filexxxxx.xxxpredictiveMedium
150Filexxxxx.xxxpredictiveMedium
151Filexxxxx.xxxpredictiveMedium
152Filexxxxx.xxxxpredictiveMedium
153Filexxxxxx.xxxpredictiveMedium
154Filexxxxxx/xxxxxx_xxxx.xxxpredictiveHigh
155Filexxxxxxxxxxx.xxxpredictiveHigh
156Filexxx/xx/xxxxx.xxxpredictiveHigh
157Filexxxxxxxxxxxxxx/xxxxxxxxxxxx.xxxpredictiveHigh
158Filexxx_xxxxxxxx.xxxpredictiveHigh
159Filexxx_xxxxxxxx.xxxpredictiveHigh
160Filexx-xxxxxxxx.xxxpredictiveHigh
161Filexxxxxxx.xxxpredictiveMedium
162FilexxxxxxxxxxxpredictiveMedium
163Filexxx/xxxxxxxxx/xx_xxxxxxxxx_xxx.xpredictiveHigh
164Filexxx/xxxxxxxxx/xx_xxxxxx_xxx.xpredictiveHigh
165Filexxx/xxxx/xx_xxxx_xxxxx.xpredictiveHigh
166Filexxxxxx.xxxpredictiveMedium
167Filexxxxxxx.xxxpredictiveMedium
168Filexxxxxxxxx.xxxpredictiveHigh
169Filexxx_xxxxxx.xxxpredictiveHigh
170Filexxxxxxx.xxxpredictiveMedium
171Filexxx_xxxx.xxxpredictiveMedium
172Filexxxx/xxx/xxxx/xxxxxx/xxxxx/xxxxxxxx/xxxxxxxxxx/xxxxxxxxx.xxxpredictiveHigh
173Filexxxxxxxx/xxxxxx/xxxxxxxxx/xxxxxx/xxxxxxx_xxxxx.xxxxpredictiveHigh
174Filexxxxx/xxxxx.xxxpredictiveHigh
175Filexxxxxxxx.xxxpredictiveMedium
176Filexxxxxxxx_xxxxxxxx.xxxpredictiveHigh
177Filexxxx/xxxxxxx/xxxxxxxx.xxxpredictiveHigh
178Filexxxxxxxxx.xxx.xxxpredictiveHigh
179Filexxxxxxx.xxxpredictiveMedium
180Filexxxx.xxxpredictiveMedium
181Filexxxxx.xxxpredictiveMedium
182Filexxxxxx/xxxxxxx/xxxxxxxx.xxxpredictiveHigh
183Filexxxx.xxxpredictiveMedium
184Filexxxxxxx/xxxxxxx.xpredictiveHigh
185Filexxxxxxxxx.xxxpredictiveHigh
186Filexxxxxxx.xxxxxxx.xxxxxx.xxxpredictiveHigh
187Filexxxxxxx.xxxpredictiveMedium
188Filexxxxxxxxxxxxxx.xxxpredictiveHigh
189Filexxxx.xxxpredictiveMedium
190Filexxxxxxxx.xxxpredictiveMedium
191Filexxxxxxxxx.xxxxpredictiveHigh
192Filexxxxx.xxxpredictiveMedium
193Filexxxxx.xxxpredictiveMedium
194Filexxxxxxxx.xxpredictiveMedium
195Filexxxxxxxx.xxxpredictiveMedium
196Filexxxxxxxxxx.xxxpredictiveHigh
197Filexxxxx_xxx.xxxpredictiveHigh
198Filexxxxxxxx-x.xxpredictiveHigh
199Filexxxxxxxx.xxxpredictiveMedium
200Filexxxxxxxx.xxpredictiveMedium
201Filexxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxxpredictiveHigh
202Filexxxxxxxx_xxxxxx.xxxpredictiveHigh
203Filexxxxxx_xxxxx.xxxpredictiveHigh
204Filexxxxxxxxxxxxxxxxxx.xxxxpredictiveHigh
205Filexxxx_xxxxx.xxxpredictiveHigh
206Filexxxxx.xxxxpredictiveMedium
207Filexxxxxxx_xxxxxx_xxxxx.xxxpredictiveHigh
208Filexxxxxxx_xxxxxx_xxxxxxxxxx.xxxpredictiveHigh
209Filexxxxxx.xxxpredictiveMedium
210Filexxxxxx_xxx_xxxxxx.xxxpredictiveHigh
211Filexxxxxx.xxpredictiveMedium
212Filexxxx$xx.xxxpredictiveMedium
213Filexxxx.xxxpredictiveMedium
214Filexxxxxxxxxxxxx.xxxpredictiveHigh
215Filexxxxxxxxx.xxxpredictiveHigh
216Filexxxxxxxxxxx.xxxpredictiveHigh
217Filexxxxxxxxxxxx.xxxpredictiveHigh
218Filexxxxxxx.xxxpredictiveMedium
219Filexxxxxxxx.xxx/xxxxxx.xxx/xxxxxxxx.xxxpredictiveHigh
220Filexxxx_xxxxxxxx.xxxpredictiveHigh
221Filexxxxxx.xxxpredictiveMedium
222Filexxxxxx/xxxxx_xxxx_xxxx/xxxxxxx_xxxxxx_xxxx_xxxxx.xxpredictiveHigh
223Filexxxxxxx.xxxpredictiveMedium
224Filexxx/xxxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxx.xxpredictiveHigh
225Filexxx/xxxxx.xxpredictiveMedium
226Filexxx/xxxx.xxxpredictiveMedium
227Filexxx/xxxx/xxxx/xxx/xxxxxx/xxxxxx/xxx/xxxxxxxxxxxxxxxxxx.xxxxpredictiveHigh
228Filexxx/xxxx/xxxx/xxxxxx/xxxxxxxxxxx.xxxxpredictiveHigh
229Filexxx/xxxx/xxxxxxx.xxxpredictiveHigh
230Filexxx/xxx/xxxxxxx/xxxx.xxxpredictiveHigh
231Filexxx/xxxxx/xxxxx.xxxpredictiveHigh
232Filexxxxx.xpredictiveLow
233Filexxxxx.xxxpredictiveMedium
234Filexxxxxx.xxxpredictiveMedium
235Filexxxxxxx-xxxxxxx.xxxpredictiveHigh
236Filexxxxxxxx.xxxxx.xxxpredictiveHigh
237Filexxxxxxxxx/xxxxx/xxxx/xxx_xxxxxxx/xxxxxxx/xxxxxxx.xxxpredictiveHigh
238Filexxxxxxxxx/xxxxxx.xxxxpredictiveHigh
239Filexxxxxxxxx/xxxxxxxxx/xxxxxx.xxxxxx.xxxpredictiveHigh
240Filexxxxx.xxxpredictiveMedium
241Filexxxxxxx.xxxpredictiveMedium
242Filexxxx-xxxxxxxx.xxxpredictiveHigh
243Filexxxx-xxxxx.xxxpredictiveHigh
244Filexxxx-xxxxxxxx.xxxpredictiveHigh
245Filexxxxx/xxxx-xxxxxx.xpredictiveHigh
246Filexxxxxx.xxxpredictiveMedium
247Filexxx.xxxpredictiveLow
248Filexxxx.xxxpredictiveMedium
249Filexxxxxx/x/xxxxx/xxxxxxx.xxxpredictiveHigh
250Filexxxxxxxx_xxxxx.xxxpredictiveHigh
251Filexxxx.xxxpredictiveMedium
252Filexxxx/xxxxxxxx.xxxpredictiveHigh
253Filexxxxxx_xxxxxxxx.xxxpredictiveHigh
254Filexxxxx.xxxpredictiveMedium
255Filexxxxx/xxxxxxxx.xxxpredictiveHigh
256Filexxxxxxxxx.xxxpredictiveHigh
257Filexxxxxxx.xxxpredictiveMedium
258Filexxxxx/xxxxxxx/xxxx.xxpredictiveHigh
259Filexxxxx/xxxxxxxxx.xxxpredictiveHigh
260Filexxxxxxxx.xxxxpredictiveHigh
261Filexx-xxxxx/xxxxx.xxxpredictiveHigh
262Filexx-xxxxx/xxxxxxx-xxxxxxx.xxxpredictiveHigh
263Filexx-xxxxx-xxxxxx.xxxpredictiveHigh
264Filexx-xxxxxxxx.xxxpredictiveHigh
265Filexx-xxxxxxxxx.xxxpredictiveHigh
266Filexxx xxxxxxxpredictiveMedium
267Filexxxx-xxxxxx.xpredictiveHigh
268Filexxxxxx.xxxpredictiveMedium
269Filexxxxxxxxxxxxx.xxxpredictiveHigh
270File\xxx\xxxxxx\xxxxxxxxxx\xxxxxxxxxxxxxx.xxxxx.xxxpredictiveHigh
271File\xxxxx\xxxxxxxxxxxpredictiveHigh
272File~/xxxxxxxx/xxxxx-xx-xxxxxxxxxx-xxxx.xxxpredictiveHigh
273Library/xxxxxxxxxxxx/xxxxxxxxx_xxxxxx/xxxxxxxxx_xxxxxx_xxxxxxxxxxxx.xxxpredictiveHigh
274Library/_xxx_xxx/xxxxx.xxxpredictiveHigh
275Libraryxxx.xxx/xxxxxxx.xxxxxxx/xxxx.xxx/xxxxxxx.xxxxxxx.xxxxxx.xxxpredictiveHigh
276Libraryxxxxxxxxx.xxxpredictiveHigh
277Libraryxxx/xxxx/xxxxxx.xxpredictiveHigh
278LibraryxxxxxxpredictiveLow
279Libraryxxxx.xxxpredictiveMedium
280Libraryxxxxxxxxxxx.xxxpredictiveHigh
281Libraryxxx/xxxxxxx.xxxxxx.xxx/xxx/xxxxxxxxxxxxx.xxpredictiveHigh
282Libraryxxxxxx.xxxxxpredictiveMedium
283Libraryxxxxxx.xxxxxxx.xxxxxxxpredictiveHigh
284Libraryxxxx.xxxpredictiveMedium
285Libraryxxx/xxx/xxx/xxxxxx/xxxxx/xxxxxxxxx.xxxxx.xxxpredictiveHigh
286Argument$_xxxxxx['xxx_xxxx']predictiveHigh
287Argumentxx/xxpredictiveLow
288Argumentxxxxxxxx_xxxxpredictiveHigh
289ArgumentxxxxxxxpredictiveLow
290ArgumentxxxxxxxxpredictiveMedium
291Argumentxxxxx_xxxxpredictiveMedium
292Argumentxxx_xxxpredictiveLow
293Argumentxxx_xxxpredictiveLow
294ArgumentxxxxxxxxxxpredictiveMedium
295Argumentxxxx_xxpredictiveLow
296ArgumentxxxxxpredictiveLow
297ArgumentxxxxxpredictiveLow
298ArgumentxxxxxpredictiveLow
299ArgumentxxxpredictiveLow
300ArgumentxxxpredictiveLow
301ArgumentxxxpredictiveLow
302ArgumentxxxxxxpredictiveLow
303ArgumentxxxxxxxxxxpredictiveMedium
304Argumentxxxxxxx/xxxxxxpredictiveHigh
305ArgumentxxxxxxxpredictiveLow
306ArgumentxxxxxxxxxxpredictiveMedium
307Argumentxxxxxxxxx[x]predictiveMedium
308ArgumentxxxxxxxxpredictiveMedium
309Argumentx[xxxxx]predictiveMedium
310ArgumentxxxxxpredictiveLow
311ArgumentxxxpredictiveLow
312ArgumentxxxxxxxxxxpredictiveMedium
313ArgumentxxxxpredictiveLow
314ArgumentxxxxxxxxxxxpredictiveMedium
315ArgumentxxxxpredictiveLow
316ArgumentxxxpredictiveLow
317ArgumentxxxxxxxxxpredictiveMedium
318ArgumentxxxxxxxxxxxxpredictiveMedium
319ArgumentxxxxxxxpredictiveLow
320ArgumentxxxxxxxxxxpredictiveMedium
321ArgumentxxxxxxpredictiveLow
322Argumentxxxxxxxx[xxxx_xxx]predictiveHigh
323ArgumentxxxxxxxxxxxxxxxpredictiveHigh
324ArgumentxxxxxpredictiveLow
325Argumentxx_xxxxx_xxpredictiveMedium
326ArgumentxxxxxpredictiveLow
327ArgumentxxxxxpredictiveLow
328Argumentxxx_xxxx_xxxxpredictiveHigh
329Argumentxxxxxxx=xxxxxxxxpredictiveHigh
330ArgumentxxxxpredictiveLow
331ArgumentxxxxxxpredictiveLow
332ArgumentxxxxxxpredictiveLow
333ArgumentxxxxpredictiveLow
334ArgumentxxxxxxxxxxpredictiveMedium
335ArgumentxxxxxxxxpredictiveMedium
336ArgumentxxxpredictiveLow
337Argumentxxxxxxx[xxxxxx]predictiveHigh
338ArgumentxxpredictiveLow
339ArgumentxxxxpredictiveLow
340ArgumentxxxxxxxpredictiveLow
341ArgumentxxpredictiveLow
342ArgumentxxxxxxxxxxxxxxxxpredictiveHigh
343ArgumentxxxxxxxxxpredictiveMedium
344Argumentxx_xxxxxxxxpredictiveMedium
345ArgumentxxxxxpredictiveLow
346ArgumentxxxxxxxxpredictiveMedium
347Argumentxxxxx.xxx?xxxxxx=xxx_xxxxxxx/xxxx=xxxxxxx/xx=x/xxxxxxxx=xxxxxpredictiveHigh
348ArgumentxxxxxxxpredictiveLow
349Argumentxxxxxxx_xxxxpredictiveMedium
350ArgumentxxpredictiveLow
351ArgumentxxxxxpredictiveLow
352ArgumentxxxxpredictiveLow
353ArgumentxxxxxpredictiveLow
354ArgumentxxxpredictiveLow
355Argumentxxxx/xxxxxx_xxxxpredictiveHigh
356ArgumentxxxxpredictiveLow
357Argumentxxxxxxxx_xxxpredictiveMedium
358ArgumentxxxxpredictiveLow
359Argumentxxxx_xxx_xxxxxxxx_xxxpredictiveHigh
360Argumentxxxxxx xxxxxxxpredictiveHigh
361ArgumentxxxxxxxpredictiveLow
362ArgumentxxxxpredictiveLow
363ArgumentxxxxxpredictiveLow
364ArgumentxxxxxxxxxxxxxxxxxxxxxpredictiveHigh
365Argumentxxxxxxxxx_xxxxxxxx_xxxxpredictiveHigh
366Argumentxxxxxxx_xxxxpredictiveMedium
367ArgumentxxxxpredictiveLow
368ArgumentxxxxpredictiveLow
369Argumentxxxx/xxxxxxxxpredictiveHigh
370Argumentxx/xxxxpredictiveLow
371Argumentxxxxxx.xxxxxx.xxxxpredictiveHigh
372Argumentxx_xxxpredictiveLow
373ArgumentxxpredictiveLow
374ArgumentxxpredictiveLow
375Argumentxxxxx/xxxxxxxpredictiveHigh
376ArgumentxxxxpredictiveLow
377ArgumentxxxxxxpredictiveLow
378ArgumentxxxxxpredictiveLow
379ArgumentxxxxxxxxpredictiveMedium
380ArgumentxxxxxxxxpredictiveMedium
381ArgumentxxxxpredictiveLow
382ArgumentxxxxxxxxpredictiveMedium
383Argumentxxxx_xxxxxpredictiveMedium
384Argumentxxxx_xx_xx_xxxpredictiveHigh
385Argumentxxxx_xx_xxxxxxxxpredictiveHigh
386Argumentxxxx_xx_xxxxpredictiveMedium
387ArgumentxxxxxxxxxpredictiveMedium
388Argumentxxxxx_xxxx_xxxxpredictiveHigh
389ArgumentxxxxxpredictiveLow
390ArgumentxxxxxxxxxpredictiveMedium
391ArgumentxxxxxxxxxxpredictiveMedium
392ArgumentxxxxxxxxxxxpredictiveMedium
393Argumentxxxx_xx_xxxx_xxxxxxxpredictiveHigh
394ArgumentxxpredictiveLow
395Argumentxxxxx_xxxxxxpredictiveMedium
396Argumentxxxxx_xxxxxxpredictiveMedium
397ArgumentxxxxxxxxxxpredictiveMedium
398Argumentxxx_xxpredictiveLow
399Argumentx.xxx.xxxxpredictiveMedium
400ArgumentxxxxxxxpredictiveLow
401Argumentxxxxxxx/xxxxxpredictiveHigh
402Argumentxxxxxx_xxxxpredictiveMedium
403Argumentxxxxxxx_xxxxpredictiveMedium
404Argumentxxxxxxx_xxxpredictiveMedium
405ArgumentxxxpredictiveLow
406ArgumentxxxxxxpredictiveLow
407Argumentxxx_xxx_xxxxpredictiveMedium
408ArgumentxxxxxpredictiveLow
409ArgumentxxxxxxpredictiveLow
410ArgumentxxxxxxxxpredictiveMedium
411Argumentxxxxxxxxxx/xxxxxxxpredictiveHigh
412Argumentxxx_xxxxxpredictiveMedium
413Argumentxxxx$xx.xxxpredictiveMedium
414ArgumentxxxpredictiveLow
415Argumentxxxxxxxxx_xxxxxx_xxxpredictiveHigh
416ArgumentxxxxxxxpredictiveLow
417Argumentxxxx_xxxxpredictiveMedium
418ArgumentxxxxpredictiveLow
419Argumentxxxx xxxx xxpredictiveMedium
420ArgumentxxxxxxpredictiveLow
421ArgumentxxxxxxxxxpredictiveMedium
422Argumentxxxx.xxx/xxxx.xxxpredictiveHigh
423ArgumentxxxxxxxxxxxxxxxxxxpredictiveHigh
424ArgumentxxxxpredictiveLow
425ArgumentxxxxxxxpredictiveLow
426Argumentxxx_xxxxxxxxxxpredictiveHigh
427ArgumentxxxxxxxxxxpredictiveMedium
428Argumentxx_xxpredictiveLow
429ArgumentxxxxxxxxpredictiveMedium
430Argumentxxxxxxxx_xxpredictiveMedium
431ArgumentxxxxxxpredictiveLow
432Argumentxxxxx_xxxpredictiveMedium
433Argumentxxx_xxxxxpredictiveMedium
434ArgumentxxxxpredictiveLow
435ArgumentxxxpredictiveLow
436ArgumentxxxxxpredictiveLow
437ArgumentxxxxxpredictiveLow
438Argumentxxxxx_xxpredictiveMedium
439Argumentxxxx_xxxpredictiveMedium
440ArgumentxxxxxxxxxxxpredictiveMedium
441ArgumentxxxpredictiveLow
442ArgumentxxxxpredictiveLow
443ArgumentxxxxxpredictiveLow
444Argumentxxxxx/xxxxx/xxxxxx/xxxx/xxxxxx/xxxxxpredictiveHigh
445ArgumentxxxpredictiveLow
446ArgumentxxxpredictiveLow
447ArgumentxxxxxxxpredictiveLow
448ArgumentxxxxpredictiveLow
449ArgumentxxxxxxpredictiveLow
450ArgumentxxxxxxxxpredictiveMedium
451ArgumentxxxxxxxxpredictiveMedium
452Argumentxxxxxxxx/xxxxpredictiveHigh
453Argumentxxxxxxxx/xxxxxxxxpredictiveHigh
454Argumentxxxxxxxx/xxxxxxxxpredictiveHigh
455Argumentxxxx_xxxxxpredictiveMedium
456Argumentxxxx_xxxxpredictiveMedium
457ArgumentxxxxxpredictiveLow
458Argumentxxxxxxx_xxxxpredictiveMedium
459ArgumentxxxxpredictiveLow
460Argumentxxxx_xxxxpredictiveMedium
461ArgumentxxpredictiveLow
462Argumentx-xxxxxxxxx-xxxpredictiveHigh
463Argumentxxxxx_xxxpredictiveMedium
464Argument_xxxxxx[xxxx_xxxx]predictiveHigh
465Input Value"><xxxxxx>xxxxx(x)</xxxxxx>predictiveHigh
466Input Value%xxxxxx+-x+x+xx.x.xx.xxx%xx%xxpredictiveHigh
467Input Value'xx''='predictiveLow
468Input Value..%xxpredictiveLow
469Input Value../predictiveLow
470Input Value<?xxx xxxxxx($_xxx['x']); ?>predictiveHigh
471Input Valuexxxxx' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx) xxx 'xxxx'='xxxx&xxxxxxxx=xxxxxxxxxxpredictiveHigh
472Input ValuexxxxxxxxpredictiveMedium
473Input Valuexxxx\'\";><xxxxxx>xxxxx(x)</xxxxxx>predictiveHigh
474Input Value\xxx../../../../xxx/xxxxxxpredictiveHigh
475Pattern/xxxxx/xxxxxxxxxxxxx.xxxpredictiveHigh
476PatternxxxpredictiveLow
477PatternxxxxpredictiveLow
478Patternxxxxx-xxxxxxxxxxxxx|xx| xxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxpredictiveHigh
479Patternxxxxxx.xxxxxxxxxpredictiveHigh
480Pattern|xx|xpredictiveLow
481Pattern|xx xx xx|predictiveMedium
482Network Portxxx/xxxx (xx-xxx)predictiveHigh
483Network Portxxx/xxxxpredictiveMedium

References (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you know our Splunk app?

Download it now for free!