← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
CAPE Sandbox - Dropped Files are Unacceptable
WHITE msudosos 2026-05-12 Modified: 2026-05-12
1141
IOCs
HIGH VOLUME
these files were "dropped" to me pcchecking-main/Ultra scan script
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (102 / 1141 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 IPv4 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
URL http://4.0.0.0 — 2026-05-12
URL http://1.0.0.0 — 2026-05-12
URL http://131.107.255.255 — 2026-05-12
URL http://3.0.0.0 — 2026-05-12
URL http://disallowedcertstl.cab?cabf9187791a130f — 2026-05-12
URL http://disallowedcertstl.cab?de79fa776085c5ed — 2026-05-12
URL http://discord.gg/redlotus — 2026-05-12
URL http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?cabf9187791a130f — 2026-05-12
URL http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?de79fa776085c5ed — 2026-05-12
URL http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/pinrulesstl.cab?2bfa587738300ae5 — 2026-05-12
URL http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D — 2026-05-12
URL http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D — 2026-05-12
URL https://adraxor-92eba.firebaseapp.com/ — 2026-05-12
URL https://api.github.com/repos/$Owner/$Repo/releases/tags/$TagName — 2026-05-12
URL https://github.com/tasfik222/pcchecking/archive/refs/heads/main.zip — 2026-05-12
URL https://github.com/tasfik222/pcchecking/releases/tag/tool — 2026-05-12
URL https://raw.githubusercontent.com/tasfik222/pcchecking/main/Basic_Check.ps1 — 2026-05-12
URL https://raw.githubusercontent.com/tasfik222/pcchecking/main/Services_besic_check.ps1 — 2026-05-12
URL https://raw.githubusercontent.com/tasfik222/pcchecking/main/TamperedSignature.ps1' — 2026-05-12
URL https://raw.githubusercontent.com/tasfik222/pcchecking/main/download-tool.ps1 — 2026-05-12
URL https://raw.githubusercontent.com/tasfik222/pcchecking/main/downloadallfile.ps1 — 2026-05-12
URL https://raw.githubusercontent.com/tasfik222/pcchecking/main/redbam.ps1 — 2026-05-12
URL https://www.hybrid-analysis.com/api/v2/overview/$FileHash — 2026-05-12
URL https://www.hybrid-analysis.com/sample/$fileHash — 2026-05-12
URL https://www.virustotal.com/api/v3/files/$FileHash — 2026-05-12
URL https://www.virustotal.com/api/v3/files/$Sha256 — 2026-05-12
URL https://www.virustotal.com/api/v3/files/$hash — 2026-05-12
URL https://www.virustotal.com/gui/file/$fileHash — 2026-05-12
URL http://pinrulesstl.cab?2bfa587738300ae5 — 2026-05-12
URL https://raw.githubusercontent.com/tasfik222/pcchecking/main/TamperedSignature.ps1 — 2026-05-12
URL https://www.virustotal.com/gui/join-us — 2026-05-12
URL https://2io2uhsppx2hddh6pvxrj4t3wamm6opi.sj6jp7cik74aarm66rea.1.0.p4k2tc6cvgecoqwyvv47eb46sq.ivwssta.dns0.org — 2026-05-12
URL https://5esi2qx56yvouwo7lpjd6y753idbb7oq.jkemjxy5el6rvc7jgkvq.1.0.cajunscgcfmub5gui7vcr6y4um.2aczlku.dns0.org — 2026-05-12
URL http://ax-0003.ax-msedge.net — 2026-05-12
URL http://int1-msn-com.ax-0003.ax-msedge.net/ — 2026-05-12
URL http://ntlkv3dn5nsmn2jec3mlzyqrbe.1.0.e2h5h5ph4dkkyjkfbsoqnk6h2q.mx2dm1m.dns0.org — 2026-05-12
URL http://ppe-api-msn-com.ax-0003.ax-msedge.net — 2026-05-12
URL http://ppe-api-msn-com.ax-0003.ax-msedge.net/ — 2026-05-12
URL http://ud2u2g33ava2mqx4krkyf5yxbq.1.0.lvj2phznfzh6wtvhy3zgf46k6u.6p891il.dns0.org/ — 2026-05-12
URL https://api-msn-com.ax-0003.ax-msedge.net — 2026-05-12
URL https://ax-0003.ax-msedge.net — 2026-05-12
URL https://ud2u2g33ava2mqx4krkyf5yxbq.1.0.lvj2phznfzh6wtvhy3zgf46k6u.6p891il.dns0.org — 2026-05-12
URL https://ud2u2g33ava2mqx4krkyf5yxbq.1.0.lvj2phznfzh6wtvhy3zgf46k6u.6p891il.dns0.org/ — 2026-05-12
URL http://ntp.airvantage.net/ — 2026-05-12
URL http://ntp.lingyiitech.com/ — 2026-05-12
URL http://ntp3.whitelist.camect.com/ — 2026-05-12
URL http://tick.katestech.com — 2026-05-12
URL http://time.allworx.net — 2026-05-12
URL http://time.allworx.net/ — 2026-05-12
URL http://time.altisource.com — 2026-05-12
URL http://time.altisource.com/ — 2026-05-12
URL http://time.robosoft.co.in — 2026-05-12
URL http://time.servers.securevrs.com — 2026-05-12
URL http://time.vitesco.com — 2026-05-12
URL http://time1.watchfireignite.com — 2026-05-12
URL http://time1.watchfireignite.com/ — 2026-05-12
URL http://itglue.nlab.cloud/ — 2026-05-12
URL https://1www.whm.whm.whm.nmhkvgfb.03-120-55-020.plesk.page/auth/oidc/azure — 2026-05-12
URL https://radmdexternal.ciamlogin.com/ — 2026-05-12
URL http://es-admin.bdo.global/ — 2026-05-12
URL http://legacy.hexagonxalt.com — 2026-05-12
URL http://login.find.com/ — 2026-05-12
URL http://msoid.bestbrowsertoolsonline.com — 2026-05-12
URL http://powershell.com/cs/blogs/tips/archive/2009/02/05/validating — 2026-05-12
URL http://powershell.com/cs/blogs/tips/archive/2011/02/24/sending-magic-packet.aspx — 2026-05-12
URL http://powershell.com/cs/blogs/tips/archive/2015/12/08/detecting — 2026-05-12
URL http://powershell.com/cs/forums/230.aspx — 2026-05-12
URL http://requirement.asset.name/ — 2026-05-12
URL http://this.asset.name/ — 2026-05-12
URL https://086whm.whm.pagelyqxjwww.www.demo.03-120-55-020.plesk.page/auth/oidc/azure — 2026-05-12
URL https://2whm.whm.whm.whm.dratiewen.03-120-55-020.plesk.page/auth/oidc/azure — 2026-05-12
URL https://65whm.www.0whm.hkpgvapi.wwwdev.03-120-55-020.plesk.page/auth/oidc/azure — 2026-05-12
URL https://6whm.whm.pagelyqxjwww.www.demo.03-120-55-020.plesk.page/auth/oidc/azure — 2026-05-12
URL https://catdealer.com/en/cat-resources/training-events/tinaja-hills/Tinaja-Hills-Grandstands-Reveal.html — 2026-05-12
URL https://connectmb.accesscu.ca/content/10408/staff-benefits-access-mastercard — 2026-05-12
URL https://dex.admin.evt-3.int.aws.lightops.cloud.slb-ds.com/ — 2026-05-12
URL https://grafana.admin.p4d-3.p4d.aws.lightops.cloud.slb-ds.com/ — 2026-05-12
URL https://helpdesk.easyice.com/public/tickets/0ab17a38cee505097e619b2df0739848c346903779ad8c188ec802c3264d99cc — 2026-05-12
URL https://host5.bedfordborough.gov.uk/login — 2026-05-12
URL https://intranet-acc.bs-ob.nl/ — 2026-05-12
URL https://mm-property-cop-sccs.onboarding42.com/ — 2026-05-12
URL https://msa-hcm03.ns2cloud.com/learning/user/personal/landOnPortalHome.do — 2026-05-12
URL https://msoid.easyrecipefinder.co — 2026-05-12
URL https://oauth2.admin.use-1.prod.aws.lightops.cloud.slb-ds.com/lightops-auth/callback&response_type=code&scope=openid+email+profile&state=MVVj4uKJZY_di9xfFczQEqURA4FqnmjX9rPsZzjx7lU: — 2026-05-12
URL https://planner.cloud.microsoft/santandernet.onmicros= — 2026-05-12
URL https://powershell.com/cs/ — 2026-05-12
URL https://radmdexternal.ciamlogin.com/jsdisabled — 2026-05-12
URL https://rotorualc.t1cloud.com/T1Default/CiAnywhere/Web/ROTORUALC/LogOn&response_type=code&state=cd5cb694-f34e-42c6-b4ec-04b5622f2b0b&scope=user.read&resource=https:/graph.microsoft.com/ — 2026-05-12
URL https://support.fmglaw.com/helpdesk/tickets/131170 — 2026-05-12
URL https://tracking.boldtalk.click/index.php/campaigns/vd145b7vje122/track-url/yh685269qxce7/7a402b605cdd18608037793b7e52a23764db9065 — 2026-05-12
URL https://weg.geigershops.com/WEG/p-HT2236005BLK — 2026-05-12
URL https://wisereforg.ciamlogin.com/jsdisabled — 2026-05-12
URL https://zz0xvwhm.r0pnn0ljj0hff0dbwhm.whm.wildcardprobe-1777343625519178760.03-120-55-020.plesk.page/auth/oidc/azure — 2026-05-12
URL http://203.92.63.90/data/03fe4496236fb919/4.au.download.windowsupdate.com/ — 2026-05-12
URL http://203.92.63.90/data/03fe4496236fb919/4.au.download.windowsupdate.com/d/ — 2026-05-12
URL http://203.92.63.90/data/03fe4496236fb919/4.au.download.windowsupdate.com/d/msdownload/ — 2026-05-12
URL http://203.92.63.90/data/03fe4496236fb919/4.au.download.windowsupdate.com/d/msdownload/update/ — 2026-05-12
URL http://203.92.63.90/data/03fe4496236fb919/4.au.download.windowsupdate.com/d/msdownload/update/software/ — 2026-05-12
URL http://203.92.63.90/data/03fe4496236fb919/4.au.download.windowsupdate.com/d/msdownload/update/software/uprl/ — 2026-05-12
URL http://203.92.63.90/data/03fe4496236fb919/4.au.download.windowsupdate.com/d/msdownload/update/software/uprl/2026/ — 2026-05-12
URL http://203.92.63.90/data/03fe4496236fb919/4.au.download.windowsupdate.com/d/msdownload/update/software/uprl/2026/04/ — 2026-05-12
URL http://203.92.63.90/data/03fe4496236fb919/4.au.download.windowsupdate.com/d/msdownload/update/software/uprl/2026/04/windows-kb890830-x64-v5.140_19dee999f6761a77fbeedab883c4917fbec78718.exe — 2026-05-12