Time & API | Arguments | Status | Return | Repeated |
---|---|---|---|---|
1620808833.10925 GetComputerNameA |
computer_name:
OSKAR-PC
|
success | 1 | 0 |
resource name | None |
suspicious_features | POST method with no referer header | suspicious_request | POST https://update.googleapis.com/service/update2?cup2key=10:2806764611&cup2hreq=1647f2820882d0cc7a2540a13d4d7e03f117c5f01312ed8e8ac084d16cf111d0 |
request | HEAD http://redirector.gvt1.com/edgedl/release2/update2/AIUdiWYcaIvMz1IBNCM0PPo_1.3.36.82/GoogleUpdateSetup.exe |
request | HEAD http://r1---sn-j5o7dn7e.gvt1.com/edgedl/release2/update2/AIUdiWYcaIvMz1IBNCM0PPo_1.3.36.82/GoogleUpdateSetup.exe?cms_redirect=yes&mh=ms&mip=202.100.214.100&mm=28&mn=sn-j5o7dn7e&ms=nvh&mt=1620814105&mv=m&mvi=1&pl=23&shardbypass=yes |
request | HEAD http://r3---sn-j5o7dn7e.gvt1.com/edgedl/release2/update2/AIUdiWYcaIvMz1IBNCM0PPo_1.3.36.82/GoogleUpdateSetup.exe?mh=ms&pl=17&shardbypass=yes&redirect_counter=1&rm=sn-j5ok7e&req_id=bceb41f7e154f047&cms_redirect=yes&ipbypass=yes&mip=59.50.85.19&mm=28&mn=sn-j5o7dn7e&ms=nvh&mt=1620814105&mv=m&mvi=3 |
request | POST https://update.googleapis.com/service/update2?cup2key=10:2806764611&cup2hreq=1647f2820882d0cc7a2540a13d4d7e03f117c5f01312ed8e8ac084d16cf111d0 |
request | POST https://update.googleapis.com/service/update2?cup2key=10:2806764611&cup2hreq=1647f2820882d0cc7a2540a13d4d7e03f117c5f01312ed8e8ac084d16cf111d0 |
Time & API | Arguments | Status | Return | Repeated |
---|---|---|---|---|
1620808833.84325 GetAdaptersAddresses |
flags:
0
family: 0 |
failed | 111 | 0 |
entropy | 6.990463235002245 | section | {'size_of_data': '0x00010000', 'virtual_address': '0x00049000', 'entropy': 6.990463235002245, 'name': '.rsrc', 'virtual_size': '0x0000ffe8'} | description | A section with a high entropy has been found |
process | 957ba0bbde7a995a673ed875265884e4.exe |
host | 172.217.24.14 | |||
host | 185.215.227.107 | |||
host | 51.38.124.206 | |||
host | 203.208.40.34 |