mttaggart/wtfbins

Issues

• [New WTFBin]: SenseIR Executes Encoded PowerShell

  #43 opened a year ago by adamcysec
  4

• [New WTFBin]: ekrn.exe

  #59 opened 2 months ago by redblueops
  1

• [New WTFBin]: WTFBIN Here

  #52 opened 2 months ago by ThureinOo
  1

• [New WTFBin]: pdf24-creator-11.20.1-x64.tmp

  #68 opened 2 months ago by redblueops
  0

• [New WTFBin]: capcut.exe

  #67 opened 2 months ago by redblueops
  0

• [New WTFBin]: rfem6.exe

  #66 opened 2 months ago by redblueops
  0

• [New WTFBin]: kaps.exe

  #65 opened 2 months ago by redblueops
  0

• [New WTFBin]: node.exe

  #64 opened 2 months ago by redblueops
  0

• [New WTFBin]: whatsapp.exe

  #63 opened 2 months ago by redblueops
  0

• [New WTFBin]: monad.exe

  #62 opened 2 months ago by redblueops
  0

• [New WTFBin]: pwsh.exe

  #61 opened 2 months ago by redblueops
  0

• [New WTFBin]: Microsoft.Management.Services.CloudManagedDesktop.Agent.exe

  #60 opened 2 months ago by redblueops
  0

• [New WTFBin]: WTFBIN Here

  #53 opened 2 months ago by ThureinOo
  1

• [New WTFBin]: AdobeUpdateService

  #36 opened 2 months ago by joshnck
  1

• [New WTFBin]: SecurityHealthService.exe

  #44 opened 2 months ago by 59e5aaf4
  1

• [New WTFBin]: OpenVAS runs WMIExec

  #54 opened 2 months ago by mttaggart
  1

• [New WTFBin]: IBM Personal Communications pcsnp.exe

  #58 opened 2 months ago by 59e5aaf4
  2

• [New WTFBin]: Teramind dwm.exe

  #55 opened 2 months ago by WizardShotTheFood
  2

• [New WTFBin]: WTFBIN Here

  #57 opened 2 months ago by qaz197727
  0

• [New WTFBin]: Update.exe

  #56 opened 4 months ago by redblueops
  1

• [New WTFBin]: IBM Storage Insights Data Collector Runs Batch Script with WMIC Process Call Create

  #50 opened 9 months ago by mbabinski
  2

• [New WTFBin]: Jetbrains IDE using WMI to query antivirus product

  #51 opened 9 months ago by ThureinOo
  2

• [New WTFBin]: Cisco Jabber outputs system info to files

  #45 opened a year ago by Alex-Walston
  8

• [New WTFBin]: WTFBIN Here

  #49 opened a year ago by 0xDeadcell
  1

• [New WTFBin]: Trojan.exe

  #47 opened a year ago by mvarian
  2

• [New WTFBin]: code.exe spawn cmd.exe

  #48 opened a year ago by ThureinOo
  1

• [New WTFBin]: WTFBIN Here

  #20 opened 2 years ago by dakinedakine99
  6

• [New WTFBin]: Nutanix Guest Tools Runs Encoded Powershell Commands

  #46 opened a year ago by mbabinski
  1

• [New WTFBin]: Guest user tries to login whenever a folder gets shared with "Everyone"

  #40 opened a year ago by ygil1234
  1

• [New WTFBin]: PsExec v2.30

  #25 opened 2 years ago by umairqamar
  4

• [New WTFBin]: WTFBIN Here

  #42 opened 2 years ago by alexvzd
  1

• [New WTFBin]: gc_worker.exe

  #41 opened 2 years ago by rcegan
  1

• [New WTFBin]: iManage Document Protection

  #39 opened 2 years ago by cbecks2
  1

• [New WTFBin]: TrendMicro HostedAgent.exe

  #37 opened 2 years ago by biffalo
  1

• [New WTFBin]: microsoft.todos.systemtrayextension.exe

  #35 opened 2 years ago by redblueops
  1

• [New WTFBin]: Avast Antivirus attempts SSH connections to neighbor hosts

  #38 opened 2 years ago by mttaggart
  1

• [New WTFBin]: WTFBIN Here

  #30 opened 2 years ago by artifex333
  3

• [New WTFBin]: ESET protection suite

  #32 opened 2 years ago by pspacek
  3

• [New WTFBin]: McAfee antivirus

  #33 opened 2 years ago by pspacek
  3

• [New WTFBin]: SCS' PowerView.exe triggers PowerSploit's detection

  #31 opened 2 years ago by Purp1eW0lf
  2

• [New WTFBin]: SentinelOne

  #24 opened 3 years ago by Purp1eW0lf
  4

• [New WTFBin]: Android MobileWips App Makes DNS Query for google[.]com[.]onion

  #27 opened 2 years ago by mbabinski
  3

• [New WTFBin]: logmein.com

  #29 opened 2 years ago by joaociocca
  1

• [New WTFBin]: ArcGIS deploys whoami.exe

  #28 opened 2 years ago by Purp1eW0lf
  1

• [New WTFBin]: Snow Inventory Agent (snowagent.exe) runs PowerShell which resembles shellcode

  #26 opened 2 years ago by lukejjh
  1

• [GetPendingUpdates_vbs.CMD]: GetPendingUpdates_vbs.CMD from Solarwinds

  #19 opened 2 years ago by umairqamar
  2

• Rich text for WTFBin Descriptions

  #23 opened 3 years ago by mttaggart
  2

• [New WTFBin]: Suspicious characters in command line arguments for Ivanti Endpoint Manager logging processes

  #22 opened 3 years ago by mbabinski
  1

• [New WTFBin]: WTFBIN bdbicextractor.exe

  #21 opened 3 years ago by redblueops
  1

• Powershell_ise.exe

  #18 opened 3 years ago by dakkmaddy
  1