Last 10 EXE URLs:
| hxxp://ftp.blizzard.com/pub/starcraft/demos/SCDemo.exe | | hxxp://dlce.antivir.com/package/wks_avira/win32/en/pecl/avira_antivir_personal_en.exe | | hxxp://dl.dropbox.com/u/51488/venti.exe | | hxxp://www.partypoker.com/Downloads/en/3256134/PartyPokerSetup.exe | | hxxp://hotgirlchat.100free.com/Gan.exe | | hxxp://downloads.stormpredator.com/downloads/trial/sp-install.exe | | hxxp://buttersmanyparsnips.tumblr.com/post/1061245256/chrisadamgerardlove-bethandbee-silent-exe | | hxxp://www.receita.pb.gov.br/pub/Declaracoes/gim/InstalaPosValid_v2237.exe | | hxxp://www.easy-share.com/1912140672/Crypted.exe | | hxxp://h1.ripway.com/M7arb/D2.exe |
Last 10 Actual (expanded) EXE URLs:
| hxxp://ftp.blizzard.com/pub/starcraft/demos/SCDemo.exe | | hxxp://dlce.antivir.com/package/wks_avira/win32/en/pecl/avira_antivir_personal_en.exe | | hxxp://dl.dropbox.com/u/51488/venti.exe | | hxxp://www.partypoker.com/Downloads/en/3256134/PartyPokerSetup.exe | | hxxp://hotgirlchat.100free.com/Gan.exe | | hxxp://downloads.stormpredator.com/downloads/trial/sp-install.exe | | hxxp://buttersmanyparsnips.tumblr.com/post/1061245256/chrisadamgerardlove-bethandbee-silent-exe | | hxxp://www.receita.pb.gov.br/pub/Declaracoes/gim/InstalaPosValid_v2237.exe | | hxxp://www.easy-share.com/1912140672/Crypted.exe | | hxxp://h1.ripway.com/M7arb/D2.exe |
Last 10 Captured EXE Files:
Hashes linked to VirusTotal results
Domain Stats:
Domain Names linked to URLVoid Dosseirs
|
Top Domains
| Top Real/Expanded Domains |
Top Exe Domains |
|
|
|
|
User Stats:
Usernames linked to Twitter Profiles (WARNING: Some profiles may not be safe)
|
Top Users Tracked
| Top EXE Users Tracked |
Most Recent EXE Users Tracked |
|
|
|
|
Recently Discovered EXE Files:
|
This system is an experimental project by NovCon Solutions, designed to detect and analyze any executable links being distributed by Twitter. The system is running about 10-minutes behind realtime (of the APIs we access). APIs and websites used in this project include backtweets, LongURL, Google Charts, GoogChart, Google Maps, URLVoid, VirusTotal, and of course, Twitter itself.
The system was not designed to be perfect, and there's plenty of ways an EXE URL might not be recorded here. The Non-EXE links tracked here does not mean that we are tracking all links and comparing EXE to every Non-EXE link sent out on Twitter. It just means that we captured and checked a URL that has "EXE" somewhere in it, but turned out not to be an executable.
Executables that can be collected are downloaded and stored. Copies are sent to virustotal for analysis. We hope to bring other vendors online soon, and also to return this information back to you in some useful manner.
This system is a build-in-progress and there will probably be many changes in the near future to improve coverage, accuracy and usefulness. If you have any comments or suggestions, please email us at info@novcon.net.
|