« first day (3927 days earlier)      last day (1112 days later) » 

MechMK1
MechMK1
2:22 PM
89 3
penetration-test web-application appsec cookies ntp
I love that we have a guy called 1488
0
Q: Suspicious wmiutils.dll Loaded

RemRemI have an IIS server and while monitoring the windows logs I encounter an interesting sysmon log. It was an Event ID 7: Image loaded log which showed that w3wp.exe loaded wmiutils.dl. Does anyone know if it's malicious or not? Thanks

windows webserver iis wmi
Fire Quacker
Fire Quacker
2:44 PM
@MechMK1 C'mon, just use your psychic powers...
 
3 hours later…
nobody
nobody
5:24 PM
@MechMK1 I can confirm that the letter did include profanity.
 
3 hours later…
ThoriumBR
ThoriumBR
8:23 PM
gizmodo.com/…
QUX? what the heck is that?
Fire Quacker
Fire Quacker
9:01 PM
In the webdev world, QUX means something like Quality of User eXperience
Like some sort of combination between QA testers and UX testers
ThoriumBR
ThoriumBR
9:24 PM
looks like it's just a random device made by trolls to take money away from MAGA people...
Fire Quacker
Fire Quacker
9:41 PM
As usual, the question is: Are they delusional or scammers, or both?
 
1 hour later…
ThoriumBR
ThoriumBR
10:43 PM
I believe they are scammers...
I don't think someone would honestly develop such an atrocity

« first day (3927 days earlier)      last day (1112 days later) »