AveMaria Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	722
es	166
de	26
pt	22
fr	18

Country

us	444
es	168
br	52
gb	44
io	34

Actors

Ave Maria	17
RedLine Stealer	13
AsyncRAT	12
Nanocore RAT	12
Remcos	11

Activities

Interest

Timeline

Type

Not Defined	302
Content Management System	66
Operating System	48
Programming Language Software	42
WordPress Plugin	32

Vendor

Not Defined	276
Cisco	50
Apple	48
Microsoft	46
Apache	32

Product

Microsoft Windows	24
Apple iTunes	20
Apache HTTP Server	18
phpMyAdmin	12
Linux Kernel	12

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	Microsoft IIS cross site scripting	5.2	4.7	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00548	0.08	CVE-2017-0055
2	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.50	CVE-2010-0966
3	Esoftpro Online Guestbook Pro ogp_show.php sql injection	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00108	0.29	CVE-2009-4935
4	Gempar Script Toko Online shop_display_products.php sql injection	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00100	0.02	CVE-2009-0296
5	PHP Scripts Mall Online Lottery PHP Readymade Script Edit Profile cross-site request forgery	6.5	6.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00112	0.03	CVE-2019-9604
6	Heartland Payment Systems Payment Gateway PHP SDK hps heartland-php Reflected cross site scripting	5.2	5.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00072	0.00	CVE-2017-7992
7	MGB OpenSource Guestbook email.php sql injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.01302	1.18	CVE-2007-0354
8	Check point Firewall-1/VPN-1 IKE Aggressive Mode missing encryption	5.3	5.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00409	0.04	CVE-2002-1623
9	vBulletin moderation.php sql injection	7.3	7.0	$0-$5k	$0-$5k	High	Official Fix	0.00284	0.00	CVE-2016-6195
10	MantisBT Cloning bug_report_page.php input validation	5.4	5.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00061	0.00	CVE-2018-9839
11	Cisco Prime Infrastructure Virtual Domain System access control	5.7	5.6	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00080	0.00	CVE-2019-1906
12	Microsoft Windows Support Diagnostic Tool Follina Remote Code Execution	7.3	7.1	$25k-$100k	$0-$5k	High	Workaround	0.97175	0.08	CVE-2022-30190
13	PRTG Network Monitor login.htm access control	8.5	8.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00288	0.04	CVE-2018-19410
14	Microsoft Windows Remote Desktop/Terminal Services Web Connection improper authentication	6.3	6.2	$25k-$100k	$0-$5k	Not Defined	Workaround	0.00000	0.02
15	OpenSSH Authentication Username information disclosure	5.3	4.8	$5k-$25k	$0-$5k	High	Official Fix	0.10737	0.34	CVE-2016-6210
16	Gravity Forms Plugin common.php Password information disclosure	6.4	6.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00178	0.07	CVE-2020-13764
17	Basti2web Book Panel books.php sql injection	7.3	7.0	$0-$5k	$0-$5k	High	Official Fix	0.00064	0.05	CVE-2009-4889
18	MidiCart PHP Shopping Cart item_show.php sql injection	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	0.05
19	WooCommerce Checkout Manager Plugin access control	7.0	6.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00101	0.03	CVE-2019-11807
20	Hindu Matrimonial Script payment.php privileges management	7.1	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00167	0.04	CVE-2017-20075

Campaigns (1)

These are the campaigns that can be associated with the actor:

AveMaria

IOC - Indicator of Compromise (31)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Campaigns	Identified	Type	Confidence
1	2.56.56.88	nutir.top	AveMaria		10/05/2022	verified	High
2	2.56.57.85		AveMaria		10/05/2022	verified	High
3	5.2.68.67		AveMaria		05/18/2022	verified	High
4	20.7.14.99		AveMaria		04/06/2023	verified	High
5	31.210.20.231		AveMaria		07/06/2022	verified	High
6	37.0.14.204		AveMaria		10/05/2022	verified	High
7	37.0.14.206		AveMaria		10/05/2022	verified	High
8	XX.XX.XXX.XX		Xxxxxxxx		04/06/2023	verified	High
9	XX.XXX.XXX.XXX		Xxxxxxxx		10/05/2022	verified	High
10	XX.XX.XXX.XXX	xxx-xx-xx-xxx-xxx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxx	Xxxxxxxx		10/05/2022	verified	Medium
11	XX.X.XX.XXX	xxx-xx-x-xx.xxxxxx.xxx	Xxxxxxxx		10/05/2022	verified	High
12	XX.XXX.XXX.XX		Xxxxxxxx		10/05/2022	verified	High
13	XX.XX.XX.XXX		Xxxxxxxx		10/05/2022	verified	High
14	XX.XX.XX.XX		Xxxxxxxx		04/06/2023	verified	High
15	XX.XX.XX.XXX		Xxxxxxxx		04/06/2023	verified	High
16	XX.XXX.XXX.XX	xx-xxx-xxx-xx.xxxxxx.xxx-xxxxxxx.xxx	Xxxx	Xxxxxxxx	12/17/2020	verified	High
17	XXX.XXX.XXX.XX		Xxxxxxxx		10/05/2022	verified	High
18	XXX.XXX.XXX.XXX		Xxxxxxxx		10/05/2022	verified	High
19	XXX.XXX.XX.XXX	xxx-xxxx-x-xxxxxx.xxx.xxx.xx	Xxxx	Xxxxxxxx	12/17/2020	verified	High
20	XXX.XXX.XX.XXX		Xxxxxxxx		07/06/2022	verified	High
21	XXX.XX.XX.XX		Xxxxxxxx		04/06/2023	verified	High
22	XXX.XX.XXX.XXX		Xxxxxxxx		07/06/2022	verified	High
23	XXX.XX.XXX.XXX	xxxxxx-xx.xxxxxxxxxxx.xx	Xxxx	Xxxxxxxx	12/17/2020	verified	High
24	XXX.XXX.XX.XXX		Xxxxxxxx		05/18/2022	verified	High
25	XXX.XXX.XXX.XX	xxxxxxxx.xxxxxxxxxxxxxxx.xxx	Xxxx	Xxxxxxxx	12/17/2020	verified	High
26	XXX.XXX.XX.XXX		Xxxxxxxx		05/18/2022	verified	High
27	XXX.X.XX.XXX		Xxxxxxxx		05/12/2022	verified	High
28	XXX.X.XX.XXX		Xxxxxxxx		10/05/2022	verified	High
29	XXX.XXX.XXX.XXX		Xxxxxxxx		10/05/2022	verified	High
30	XXX.X.XXX.XXX	xxx-x-xxx-xxx.xxxxxx-xx-xxxxxxxxxxx.xxx	Xxxx	Xxxxxxxx	12/17/2020	verified	High
31	XXX.XXX.XX.XXX		Xxxxxxxx		07/06/2022	verified	High

TTP - Tactics, Techniques, Procedures (25)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-21, CWE-22, CWE-23, CWE-24	Path Traversal	predictive	High
2	T1040	CAPEC-102	CWE-294, CWE-319	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	High
4	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	High
5	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	High
6	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
7	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	High
8	TXXXX	CAPEC-150	CWE-XXX	Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxx	predictive	High
9	TXXXX.XXX	CAPEC-191	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
10	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx-xxx Xxxx Xxxxxxx Xxxx	predictive	High
11	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
12	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
13	TXXXX	CAPEC-	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	High
14	TXXXX	CAPEC-1	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
15	TXXXX	CAPEC-108	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	High
16	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
17	TXXXX	CAPEC-102	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
18	TXXXX	CAPEC-38	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
19	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
20	TXXXX.XXX	CAPEC-133	CWE-XXX	Xxxxxxxx	predictive	High
21	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
22	TXXXX.XXX	CAPEC-	CWE-XX	Xxxxxxxxxxxxx	predictive	High
23	TXXXX	CAPEC-157	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High
24	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
25	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High

IOA - Indicator of Attack (473)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	$SPLUNK_HOME/etc/splunk-launch.conf	predictive	High
2	File	.htaccess	predictive	Medium
3	File	/.ssh/authorized_keys	predictive	High
4	File	/account/details.php	predictive	High
5	File	/admin/academic/studenview_left.php	predictive	High
6	File	/admin/admin.php?module=admin_group_edit&agID	predictive	High
7	File	/admin/contenttemp	predictive	High
8	File	/Admin/login.php	predictive	High
9	File	/admin/payment.php	predictive	High
10	File	/admin/syslog	predictive	High
11	File	/admin/user/manage_user.php	predictive	High
12	File	/advance_push/public/login	predictive	High
13	File	/anony/mjpg.cgi	predictive	High
14	File	/application/index/controller/Databasesource.php	predictive	High
15	File	/application/index/controller/File.php	predictive	High
16	File	/application/plugins/controller/Upload.php	predictive	High
17	File	/assets/components/gallery/connector.php	predictive	High
18	File	/cgi-bin/cstecgi.cgi	predictive	High
19	File	/cgi-bin/wlogin.cgi	predictive	High
20	File	/classes/master.php?f=delete_order	predictive	High
21	File	/course/filterRecords/	predictive	High
22	File	/ctcprotocol/Protocol	predictive	High
23	File	/device/device=140/tab=wifi/view	predictive	High
24	File	/download/image	predictive	High
25	File	/etc/sudoers	predictive	Medium
26	File	/ext/collect/find_text.do	predictive	High
27	File	/Forms/	predictive	Low
28	File	/forum/away.php	predictive	High
29	File	/framework/modules/users/models/user.php	predictive	High
30	File	/ghost/preview	predictive	High
31	File	/HNAP1/SetAccessPointMode	predictive	High
32	File	/index.php	predictive	Medium
33	File	/mcategory.php	predictive	High
34	File	/member/picture/album	predictive	High
35	File	/mysql/api/diags.php	predictive	High
36	File	/nagiosxi/admin/banner_message-ajaxhelper.php	predictive	High
37	File	/ndmComponents.js	predictive	High
38	File	/oauth/idp/.well-known/openid-configuration	predictive	High
39	File	/phpcollab/users/edituser.php	predictive	High
40	File	/plain	predictive	Low
41	File	/products/details.asp	predictive	High
42	File	/product_list.php	predictive	High
43	File	/public/login.htm	predictive	High
44	File	/replication	predictive	Medium
45	File	/service/upload	predictive	High
46	File	/services/details.asp	predictive	High
47	File	/showfile.php	predictive	High
48	File	/trx_addons/v2/get/sc_layout	predictive	High
49	File	/uncpath/	predictive	Medium
50	File	/upload/catalog/controller/account/password.php	predictive	High
51	File	/usr/bin/pkexec	predictive	High
52	File	/var/WEB-GUI/cgi-bin/telnet.cgi	predictive	High
53	File	/wbms/classes/Master.php?f=delete_client	predictive	High
54	File	/web/api/app/Controller/HostController.php	predictive	High
55	File	/xxxxxxxx/xxxxxxx/xxxxxxx	predictive	High
56	File	/xx-xxxxx/xxxxx-xxxx.xxx	predictive	High
57	File	x.xxx.xxx	predictive	Medium
58	File	x.x.x\xxxxxx.xxx	predictive	High
59	File	xxxxxxxxxxxx.xxx	predictive	High
60	File	xxxxxxxxx/xxxxxxxx/xxxxxxx_xxxxxx.xxx	predictive	High
61	File	xxxxxxx.xxx	predictive	Medium
62	File	xxx-xxxxxxxxxxx.xxx	predictive	High
63	File	xxx_xxx.xxx	predictive	Medium
64	File	xxx_xx_xxxx.xxx	predictive	High
65	File	xxxxx-xxxx.xxx	predictive	High
66	File	xxxxx.xxx	predictive	Medium
67	File	xxxxx/xxxxx.xxx	predictive	High
68	File	xxxxx/xxx_xxxxx/xxxxxxxxxx.xxx?xxxxxx=xxxx	predictive	High
69	File	xxxxx/xxxx.xxx	predictive	High
70	File	xxxxx/xxxxxxxxxxxxx.xxx	predictive	High
71	File	xxxxx/xxxxxxx_xxxxxxxx.xxx?xxx=xxxxxx	predictive	High
72	File	xxxxx/xxxxxxxx.xxx?xxxx=xxxxxxxxxx	predictive	High
73	File	xxxxx/xxxxxx_xxxxxxx.xxx	predictive	High
74	File	xxxxx/xxxxxx.xxx	predictive	High
75	File	xxxxx/xxxxxxx/xxxx.xx?xxxxxxxxxxxx=xxxxxxxxxxxx&xxxxxxxx=xxxxxxx/xxxx	predictive	High
76	File	xxxxxxxxxxxxx/xxxxxxxxxx/xxx_xxxxx/xxxxxxx/xxxxx.xxx	predictive	High
77	File	xxxxx_xxx.xxx	predictive	High
78	File	xxxxx_xxxx.xxx	predictive	High
79	File	xxx/xxxxxxx/xxxxxxxx	predictive	High
80	File	xxx/xxxxx/xxxxxxx/xxxx-xxx-xxxxxxx-xxxxxx.xxx	predictive	High
81	File	xxxxxxxxxxx/xxxxx/xxxxxxxxxx/x/xxx.xxx	predictive	High
82	File	xxx\xxxxxxxxxx_xxxxxxxx\xxxxxxxxxx_xxxxxxx_xxxxxxx.xxx	predictive	High
83	File	xxxxxxx.xxx	predictive	Medium
84	File	xxxxxx/xxxx/xxxxxxxxx-xxxxxxx.xxx	predictive	High
85	File	xxxx-xxxx.x	predictive	Medium
86	File	xxxx.xxx.xxx	predictive	Medium
87	File	xxxxxxx.xx	predictive	Medium
88	File	xxxxx.xxx	predictive	Medium
89	File	xxxxxx_xxxxxx.xxx	predictive	High
90	File	xx_xxxx_xx_xxxx_xxxx.xxx	predictive	High
91	File	xxx_xxxxxx_xxxx.xxx	predictive	High
92	File	xxx.xxx	predictive	Low
93	File	x-xxxxxx/xxxxxxx.x	predictive	High
94	File	xxxxxxxx_xxxxxxxxx.xxx	predictive	High
95	File	xxx.xxx	predictive	Low
96	File	xxxxxxx.xxx	predictive	Medium
97	File	xxx-xxx/xxxxxxx.xx	predictive	High
98	File	xxx-xxx/xxx/xxxxxx.xx	predictive	High
99	File	xxx/xxxxxxx.xx	predictive	High
100	File	xxxxx.xx_xxxxxxxxx.xxx	predictive	High
101	File	xxxxx.xxx	predictive	Medium
102	File	xxx.xxx	predictive	Low
103	File	xxxxxx/xxx.x	predictive	Medium
104	File	xxx/xx/xxxxxxxxx/xxxxxxx/xxxxxxxxxxx.xxxx	predictive	High
105	File	xxxxxxxx_xxxxxxxxxxxxxxxxx.xxx	predictive	High
106	File	xxxxxx.xxx	predictive	Medium
107	File	xxxxxx.x	predictive	Medium
108	File	xxxxxx.xxx.xxx	predictive	High
109	File	xxxxxx.xxx	predictive	Medium
110	File	xxxxxxxxx.xxxxxxx.xxx	predictive	High
111	File	xxxxxxx.xxx	predictive	Medium
112	File	xxxxxxxxxx/xxxxx/xxxxxxxxxxxxxxxxx.xxx	predictive	High
113	File	xxxxxxxxxxx/xxxxx.xx	predictive	High
114	File	xxxx/xxxxxx/xxxxxx/xxxxxxxxxxxxxx.xxxx	predictive	High
115	File	xxxxxx_xxxxxxx.xxx	predictive	High
116	File	xxxx/xxxx_xxxx.xxx	predictive	High
117	File	xxxxxxx.xxx	predictive	Medium
118	File	xxxx.xx	predictive	Low
119	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	High
120	File	xxxx/xxx/xxxxxx.xxx	predictive	High
121	File	xxxxx.x	predictive	Low
122	File	xxxxxx.x	predictive	Medium
123	File	xxxx\xx_xx.xxx	predictive	High
124	File	xxxxxxxx.xx	predictive	Medium
125	File	xxxxxxxxxxx/xxxxxxxx/xxx/xxxx_xxxx/xxxxxxx/xx_xxxxxxxx.xxx	predictive	High
126	File	xxxx/xxxxx.xxx	predictive	High
127	File	xxxxxx.xxx	predictive	Medium
128	File	xxxxxxxxx.xxx	predictive	High
129	File	xxxxxxxxxxxxxxxxx.xxx	predictive	High
130	File	xxxxxxxx_xxxxxxxxxx.xxx	predictive	High
131	File	xxxxxxxxxxxxxxxxxx.xxx	predictive	High
132	File	xxxxxx/xxxxxxxxxx/xxxxxxxxxx.xx	predictive	High
133	File	xxxxxxxx.xxx.xxx	predictive	High
134	File	xxxxx.xxx	predictive	Medium
135	File	xxxx.xxx	predictive	Medium
136	File	xxxxxxxxxxxxxxx.xxx	predictive	High
137	File	xxx/xxxx/xxxx.x	predictive	High
138	File	xxx/xxxx/xxxx.x	predictive	High
139	File	xxx/xxxx/xxx.x	predictive	High
140	File	xxxxxxxxxxx/xxxxx.xxx	predictive	High
141	File	xxxx/xxxxx	predictive	Medium
142	File	xxxx.xxx	predictive	Medium
143	File	xxxxxxxx.xx	predictive	Medium
144	File	xxxxxxxxxxx/xxxxxxxx/xxxxxxxxxx.xxx	predictive	High
145	File	xxxxxxx.xxx	predictive	Medium
146	File	xxxxxxxx.x	predictive	Medium
147	File	xxxxxxx/xxxxxx/xxxx_xxxxxx/xxxxxxxxxx/xxxxxx_xxxx.xxx	predictive	High
148	File	xxxxxxxxxxxxx.xxxxx	predictive	High
149	File	xxxx_xxxxxxx.xxx.xxx	predictive	High
150	File	xxxxxxxx/xxxx/xxxx.xx	predictive	High
151	File	xxx/xxxxxxxxx-xxx	predictive	High
152	File	xxx/xxxx.x	predictive	Medium
153	File	xxx.xxx	predictive	Low
154	File	xxx/xxxxxx.xxx	predictive	High
155	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	High
156	File	xxxxxxx.xxx	predictive	Medium
157	File	xxxxxxx/xxxxxx/xxxxxxx/xxxxxx/xxx.xxx	predictive	High
158	File	xxxxxxx/xxxxxxxxxxxxxx.xx	predictive	High
159	File	xxxxxxxx/xxxxxxxxxx/xxxxx-xx-xxxxxxxxx-xxxxxxxx.xxx	predictive	High
160	File	xxxxx.xx	predictive	Medium
161	File	xxxxx.xxx	predictive	Medium
162	File	xxxxx.xxx/xxxx/xxxxx/xxxx/xxxx.xxx	predictive	High
163	File	xxxxx.xxxx	predictive	Medium
164	File	xxxxx.xxx?x=xxxx&x=xxx&x=xxxxxxxx&x=[xxx]&x=[xxx]	predictive	High
165	File	xxxxx.xxx?xxxx=xxxxxxx_xxxxx	predictive	High
166	File	xxxxx.xxx?x=xxxxxxxxxxxx	predictive	High
167	File	xxxxx.xxx?xxxx=xxxx	predictive	High
168	File	xxxxxx.xxx	predictive	Medium
169	File	xxxxx.xxxxxxx.xxx	predictive	High
170	File	xxxxx/xxxxxxxxxxxx/xxxxx	predictive	High
171	File	xxxx_xxxxxxx.xxx	predictive	High
172	File	xxxx_xxxx.xxx	predictive	High
173	File	xxx_xxxxxxxxx.xxx	predictive	High
174	File	xxxxx/xxxxxxxx.x	predictive	High
175	File	xxxxxxxxx.xxx	predictive	High
176	File	xxxxx.xxx	predictive	Medium
177	File	xxxxx/?xxxxxx=xxxxxxx&xxxx	predictive	High
178	File	xxxxx_xxx.xxx	predictive	High
179	File	xxxxxxxxxx_xxxxxxxxxx/xxxx.xxx	predictive	High
180	File	xxxx.xxx	predictive	Medium
181	File	xxxx/xxxxxx/xxxxx_xxxx.xxx	predictive	High
182	File	xxxx_xxxxx.xxx	predictive	High
183	File	xxx.xxx	predictive	Low
184	File	xxxxx/xxxx_xxxxxxx/xxxxxxxxx/xxxx.xxx	predictive	High
185	File	xxxxxx_xxxxx_xxxxxxx.x	predictive	High
186	File	xxxxxxx/xxxxx/xx_xxxxxx.x	predictive	High
187	File	xxxxxxx\xxxxxxxxx\xxxxxxx.xxx	predictive	High
188	File	xxx_xxxxx.xxx	predictive	High
189	File	xxx/xxxx/xxx_xxxxxxx.x	predictive	High
190	File	xxx/xxxxxxxxx/xxxxxxxxx_xxxxx.x	predictive	High
191	File	xxx/xxx_xxxxx/xxxx_xxxxxxxxx.x	predictive	High
192	File	xxxxx.x	predictive	Low
193	File	xxxx.xxx	predictive	Medium
194	File	xxx-xxxx-xxx	predictive	Medium
195	File	xxxxx.xxx	predictive	Medium
196	File	xxx_xxxx.xxx	predictive	Medium
197	File	xx.xx	predictive	Low
198	File	xxxxxx/xxxxxxx-xxx-xxx	predictive	High
199	File	xxx.xx	predictive	Low
200	File	xxxxxxxxx.xxx.xxx	predictive	High
201	File	xxxxxxx.xxx	predictive	Medium
202	File	xxxxxxxxxxxxx.xxx	predictive	High
203	File	xxxxxxx/xxxxxxxxx/xxx.xxx	predictive	High
204	File	xxxxxxxx.xxxxx.xxx	predictive	High
205	File	xxxxxxxx.xxx	predictive	Medium
206	File	xxxxxxx.xxx	predictive	Medium
207	File	xxxxx/xxxxxxx.xxx	predictive	High
208	File	xxxx.xxx	predictive	Medium
209	File	xxxxxxxx.xxx	predictive	Medium
210	File	xxxxxxxxxxxx.xxxxx.xxx	predictive	High
211	File	xxxxxxx_xxxx.xxx	predictive	High
212	File	xxxxxxxx.xxx	predictive	Medium
213	File	xxxxxx/xxxxx/xxxx/xxxxxxx.xxxx	predictive	High
214	File	xxxxxx/xxxxxxx.xxx	predictive	High
215	File	xxxxxxxx.xxx	predictive	Medium
216	File	xxxxx_xxxxxxx.xxx	predictive	High
217	File	xxxxx.xxx	predictive	Medium
218	File	xxxxx-xxxx/xxxxx-xxxxx-xxxx.xxx	predictive	High
219	File	xxxxxxxx.xxx	predictive	Medium
220	File	xxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxx	predictive	High
221	File	xxxxxxxxxxxx_xxxxxxxx.xxx.xxx	predictive	High
222	File	xxxxxxx_xxx_xxxxx_xxxxxx.xxxx	predictive	High
223	File	xxxxx.xxx	predictive	Medium
224	File	xxxxxxxxxx.xxx	predictive	High
225	File	xxxxxxx.xx	predictive	Medium
226	File	xxxxxx.xx	predictive	Medium
227	File	xxxxxx.xxx	predictive	Medium
228	File	xxxx_xxxxxxxxx.xxx	predictive	High
229	File	xxxxxx.xxx	predictive	Medium
230	File	xxxxxxxx-xxxxxx_xxxxx.xxx	predictive	High
231	File	xxxxx.xxx	predictive	Medium
232	File	xxxx-xxxxxx.x	predictive	High
233	File	xxxx.xxx	predictive	Medium
234	File	xxxx/xxxxx_xxxxxx.xxx	predictive	High
235	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	High
236	File	xxxxxxxxxxx.xxx	predictive	High
237	File	xxxxx.xxx	predictive	Medium
238	File	xxxxxxxxxxxxxxxx.xx	predictive	High
239	File	xxxxxx.xxxxxxx.xxx	predictive	High
240	File	xxx/xxxx_xxxxxx.x	predictive	High
241	File	xxx/xxxx/xxxx/xxx/xxxxxxxxx/xxx/xxxxxx/xxxxx/xxxxxx.xxxx	predictive	High
242	File	xxx/xxxx.x	predictive	Medium
243	File	xxxxx_xxxxx.xxx	predictive	High
244	File	xxxxxx_xxxxxxxxxx.xxx	predictive	High
245	File	xxx_xxxxx.x	predictive	Medium
246	File	xxxxx/xxxx/xxxx.xxx	predictive	High
247	File	xxxxxxxxxxxxxxxx.xxx	predictive	High
248	File	xxxxxxx/xxxxxxx.xxx	predictive	High
249	File	xxx_xxxx_xxxxxx.xxx	predictive	High
250	File	xxxxxxxx/xxxxxxxxx.xxxxxxx_xxxxxxxxx.xxx	predictive	High
251	File	xxxx-xxxxxx.xxx	predictive	High
252	File	xxxxx-xxxx.xxx	predictive	High
253	File	xxxxxxx.xxx	predictive	Medium
254	File	xxxx-xxxxxxxx.xxx	predictive	High
255	File	xxx.xxx	predictive	Low
256	File	xxxxxx.xxx	predictive	Medium
257	File	xxxxxx.xxxxxxx.xxxxxxxxxxxxxxxxxxxxxxxx	predictive	High
258	File	xxxx/xxxxxxxxxx.xxx?xxxxxx=xxxx	predictive	High
259	File	xxxxx.xxx	predictive	Medium
260	File	xxxx\xxxxxxxxxx\xxxxxxx_xxxxxxxxx.xxx	predictive	High
261	File	xxxx_xxxx.xxx	predictive	High
262	File	xxx/xxx-xxxxxxxx.xxx	predictive	High
263	File	xxxx/xxx/xxxx-xxxxx.xxx	predictive	High
264	File	xxxxxxx.xxx	predictive	Medium
265	File	xxxxx/xxxxx.xx	predictive	High
266	File	xxxxxxxx.x	predictive	Medium
267	File	xxxxxxxx/xxxxxx.xxxxxxxx	predictive	High
268	File	xx-xxxxx/xxxxx-xxxx.xxx	predictive	High
269	File	xx-xxxxx/xxxxx-xxxx.xxx?xxxxxx=xxxxxx_xxxxxxxxxx_xxxx	predictive	High
270	File	xx-xxxxx/xxxxx-xxxx.xxx?xxxxxx=xxxxxx_xxxxxxx	predictive	High
271	File	xx-xxxxx/xxxxx.xxx?xxxx=xxxxxxxxx-xxxxxxxxx&xxxxxx=xxxx	predictive	High
272	File	xx-xxxxx/xxxxxxx-xxxxxxx.xxx	predictive	High
273	File	xx-xxxxx/xxxxxxx-xxxxxxx.xxx	predictive	High
274	File	xx-xxxx.xxx	predictive	Medium
275	File	xx-xxxxx.xxx	predictive	Medium
276	File	xx-xxxxxxxxxxx.xxx	predictive	High
277	File	xx-xxxxxxxxx.xxx	predictive	High
278	File	xxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
279	File	xxxxxxx.xxx	predictive	Medium
280	File	\xxx\xxxxxxxx\xxxxxxxx\xxxxxxxx.xxx	predictive	High
281	Library	xxx_xxxxxx.xxx	predictive	High
282	Library	xxxxxx[xxxxxx_xxxx	predictive	High
283	Library	xxxxxxxxx/xxx/xxxxxxxxxx/xxxx/xxxxx/xxxxxxx.xxxxx.xxx	predictive	High
284	Library	xxx/xxxxxx/xxxxxxxxx/xxx_xxxxxxx.x	predictive	High
285	Library	xxxxxx.xxx	predictive	Medium
286	Library	xxxx.xxx.xxx	predictive	Medium
287	Library	xxxxxxx.xxx	predictive	Medium
288	Library	xxx/xxxxxxxxxxxxxx/xxxx-xxxxxxxxxx.xxx	predictive	High
289	Library	xxxxxxx/xxxxxx/xxx/xxxxxx_xxxxxx_xxxxx.xxx	predictive	High
290	Library	xxxxxxxx_xxx	predictive	Medium
291	Library	xxxxxxxx/xxxxxxx/xxxxx/xxx.xxx	predictive	High
292	Library	xxxxx/xxxxxx/xxx/xxxxx/xxxxx.xxxxx_xx.xxx	predictive	High
293	Library	xxx/xxx/xxxx/	predictive	High
294	Library	xx-xxxxxxx/xxxxxxx/xxxxxx/xxx_xxxx.xxx	predictive	High
295	Argument	$xxxxxxxx	predictive	Medium
296	Argument	-x	predictive	Low
297	Argument	-xxxxxxxxxxxxx	predictive	High
298	Argument	xx/xx	predictive	Low
299	Argument	xxx_xxx	predictive	Low
300	Argument	xxxxxx_xxxxxx_xxxx	predictive	High
301	Argument	xxxxxxxx	predictive	Medium
302	Argument	xxx_xxx	predictive	Low
303	Argument	xxxxxx	predictive	Low
304	Argument	xxxxxxxx	predictive	Medium
305	Argument	xxxx_xxxx	predictive	Medium
306	Argument	xxxxxx	predictive	Low
307	Argument	xxxxxxx_xx	predictive	Medium
308	Argument	xxx_xxx	predictive	Low
309	Argument	xxx	predictive	Low
310	Argument	xxxxxxxxxx	predictive	Medium
311	Argument	xxxxx	predictive	Low
312	Argument	xxx_xx	predictive	Low
313	Argument	xxx_xxxx	predictive	Medium
314	Argument	xxxx	predictive	Low
315	Argument	xxxx xx	predictive	Low
316	Argument	xxx	predictive	Low
317	Argument	xxxxxxxxxxxxxxx	predictive	High
318	Argument	xxxxxxx_xxx	predictive	Medium
319	Argument	xxxxxxxxx	predictive	Medium
320	Argument	xxxx_xx	predictive	Low
321	Argument	xxxxxxx	predictive	Low
322	Argument	xxxxxxx	predictive	Low
323	Argument	xxxxxx	predictive	Low
324	Argument	xxxxxx[xxxxxx_xxxx]	predictive	High
325	Argument	xxxxxx/xxxxxxx/xxxxxxx/xxxxxxx/xxxxxxx	predictive	High
326	Argument	xxxxxxx	predictive	Low
327	Argument	xxxx/xxxx	predictive	Medium
328	Argument	xxxxxxx_xxxx->xxx($xxxxxxxx)	predictive	High
329	Argument	xxxxxx_xxx	predictive	Medium
330	Argument	xxxxxxx	predictive	Low
331	Argument	xxxxxxxxxxxxx	predictive	High
332	Argument	xxxxxxx	predictive	Low
333	Argument	xxxxxxxxx_xxxxxx_xxxx	predictive	High
334	Argument	xxxxx_xxxxxxx	predictive	High
335	Argument	xx_xxxxx_xx	predictive	Medium
336	Argument	xxxxx	predictive	Low
337	Argument	xxxxxxxx-xxxxxx	predictive	High
338	Argument	xxxx	predictive	Low
339	Argument	xxxxxx	predictive	Low
340	Argument	xxxxxxxxxxxx	predictive	Medium
341	Argument	xxxxxxxxx/xxxxxxxx	predictive	High
342	Argument	xxxxx	predictive	Low
343	Argument	xxxxxxxxx/xxxxxx	predictive	High
344	Argument	xxxx xxxx	predictive	Medium
345	Argument	xxxx_xxxx/xxxx_xxxx/xxxxxxx	predictive	High
346	Argument	xxxxxxx[xx]/xxxxxxx[xxxxx]	predictive	High
347	Argument	xxxxxxxx	predictive	Medium
348	Argument	xxxx	predictive	Low
349	Argument	xxxxxxxx	predictive	Medium
350	Argument	xxxxxxxx	predictive	Medium
351	Argument	xxxx_xxxxxx	predictive	Medium
352	Argument	xxxx_xxxxxxx	predictive	Medium
353	Argument	xx	predictive	Low
354	Argument	xx	predictive	Low
355	Argument	xxxxxxxxx	predictive	Medium
356	Argument	xxx	predictive	Low
357	Argument	xxxxxxxx	predictive	Medium
358	Argument	xxxxxxxx	predictive	Medium
359	Argument	xxx	predictive	Low
360	Argument	xxxxxxxxx	predictive	Medium
361	Argument	xxxxxx	predictive	Low
362	Argument	xxxxxxxxxxxxx	predictive	High
363	Argument	xxxx_xx	predictive	Low
364	Argument	xxxxxxx	predictive	Low
365	Argument	xx-xxxxxx-xxxxxx-xxxx	predictive	High
366	Argument	xxxx	predictive	Low
367	Argument	xxxx_xxx_xx	predictive	Medium
368	Argument	xxxxxx	predictive	Low
369	Argument	xxx_xxxx	predictive	Medium
370	Argument	xxxx_xxxxxx_xx	predictive	High
371	Argument	xxxxxxxxx	predictive	Medium
372	Argument	xxx_xxxxxxx_xxx	predictive	High
373	Argument	xxxxxxx xxxx	predictive	Medium
374	Argument	xxxxxxxxx/xxxxxxxxx	predictive	High
375	Argument	xxxxxx	predictive	Low
376	Argument	xxxx	predictive	Low
377	Argument	xxxxxxxxx_xxxxxxxx_xxxx	predictive	High
378	Argument	xxx_xxxx	predictive	Medium
379	Argument	x_xx	predictive	Low
380	Argument	xxxx	predictive	Low
381	Argument	xxxx/xxxxxxxxxxx	predictive	High
382	Argument	xxxx/xxxxxxxxxxx/xxxxxxxxx	predictive	High
383	Argument	xxxx/xxxxxx	predictive	Medium
384	Argument	xxxxxxxxxxxx	predictive	Medium
385	Argument	xxx_x	predictive	Low
386	Argument	xxxx	predictive	Low
387	Argument	xxxx_xxxx	predictive	Medium
388	Argument	xxxxx	predictive	Low
389	Argument	xxxx_xxxxxx[xxxxxxxx]	predictive	High
390	Argument	xxxxx	predictive	Low
391	Argument	xx	predictive	Low
392	Argument	xxxxxx_xxxxxx[xxxxxx_xxxx]	predictive	High
393	Argument	xxxx	predictive	Low
394	Argument	xxxxxxx.xxx_xxxxxxxxxx	predictive	High
395	Argument	xxxxx	predictive	Low
396	Argument	xxxxxxx	predictive	Low
397	Argument	xxxxx_xx	predictive	Medium
398	Argument	xxx_xxxxx_xx	predictive	Medium
399	Argument	xxxx	predictive	Low
400	Argument	xxxx_xxxx_xxxxx	predictive	High
401	Argument	xxxxxxxx	predictive	Medium
402	Argument	xxxxxxxx	predictive	Medium
403	Argument	xxxx	predictive	Low
404	Argument	xxxxxxxxxxxxx	predictive	High
405	Argument	xxxxxxxxx	predictive	Medium
406	Argument	xxxxxxxxx	predictive	Medium
407	Argument	xxxxx_xxxx_xxxx	predictive	High
408	Argument	xxx	predictive	Low
409	Argument	xxxxxxxx	predictive	Medium
410	Argument	xxxxxxx	predictive	Low
411	Argument	xxxxxxxxx	predictive	Medium
412	Argument	xxxxxxx_xx	predictive	Medium
413	Argument	xxxxxxx_xx	predictive	Medium
414	Argument	x_xxx_xxx	predictive	Medium
415	Argument	xxxxxxxxxxx	predictive	Medium
416	Argument	xxxx	predictive	Low
417	Argument	xxxxxxxx	predictive	Medium
418	Argument	xxxxxx_xxxxxxx_xxxxx	predictive	High
419	Argument	xxxxxxxx	predictive	Medium
420	Argument	xxxxxx_xxxx	predictive	Medium
421	Argument	xxxxxxxx	predictive	Medium
422	Argument	xxxxxxx_xxxxx_xxxxx_xxxxxxx=xxxxx	predictive	High
423	Argument	xxxxxx	predictive	Low
424	Argument	xx	predictive	Low
425	Argument	xxxxxxx	predictive	Low
426	Argument	xxxxxxxxxx[x][xxxxx]/xxxxxxxxxx[x][xxxxxxxxxxx]/xxxxxxxxxx[x][xxxxxxxxxxx]	predictive	High
427	Argument	xxxxxx_xxxx_xxxx	predictive	High
428	Argument	xxxxxxx_xx	predictive	Medium
429	Argument	xxxxxxxxx	predictive	Medium
430	Argument	xxxx_xxxxxxxx_xxxx_xxxxx	predictive	High
431	Argument	xx	predictive	Low
432	Argument	xx	predictive	Low
433	Argument	xxxxxxx xxxxxxx	predictive	High
434	Argument	xxxxxxxxx	predictive	Medium
435	Argument	xxxxxxxx	predictive	Medium
436	Argument	xxxxxxxxx	predictive	Medium
437	Argument	xxxxx_xxxx/xxxxx_xxxxxx/xxx_xxxx/xxx_xxxxxx/xxxxxxxx	predictive	High
438	Argument	xxxxxxxx_xxx	predictive	Medium
439	Argument	xxxxxxxxx	predictive	Medium
440	Argument	xxxxxx	predictive	Low
441	Argument	xxxxxxx	predictive	Low
442	Argument	x_xx	predictive	Low
443	Argument	xx_xx	predictive	Low
444	Argument	xx_xxxxx_xx	predictive	Medium
445	Argument	xxxxxxxx	predictive	Medium
446	Argument	xxxx	predictive	Low
447	Argument	xxx	predictive	Low
448	Argument	xxxxxxxxxxxxx	predictive	High
449	Argument	xxxxxxxxxxx	predictive	Medium
450	Argument	xxxxxx_xxxx	predictive	Medium
451	Argument	xxx	predictive	Low
452	Argument	xxxx	predictive	Low
453	Argument	xxxxxx	predictive	Low
454	Argument	xxxxxxxx	predictive	Medium
455	Argument	xxxxxxxx	predictive	Medium
456	Argument	xxxxxxxx/xxxxxxxx	predictive	High
457	Argument	xxxxxxx	predictive	Low
458	Argument	xxxx	predictive	Low
459	Argument	xxxx_xxxxxxx_xxxx_xxxx	predictive	High
460	Argument	xxxx->xxxxxxx	predictive	High
461	Argument	xxxxxxx	predictive	Low
462	Input Value	%xxxxxx+-x+x+xx.x.xx.xxx%xx%xx	predictive	High
463	Input Value	../	predictive	Low
464	Input Value	../..	predictive	Low
465	Input Value	../../xxx-xxx/xxx	predictive	High
466	Input Value	x' xxx xxxx=xxxx xxx 'xxxx'='xxxx	predictive	High
467	Input Value	<xxxxxx>xxxxx(xxxxxxxx.xxxxxx)</xxxxxx>	predictive	High
468	Input Value	xxxxx	predictive	Low
469	Network Port	xxxx	predictive	Low
470	Network Port	xx xxxxxxx xxx.xx.xx.xx	predictive	High
471	Network Port	xxx	predictive	Low
472	Network Port	xxx/xxx (xxx)	predictive	High
473	Network Port	xxx xxxxxx xxxx	predictive	High

References (13)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!