Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6403_us | Oct. 1, 2021, 9:53 a.m. | Oct. 1, 2021, 9:57 a.m. |
-
EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Office15\EXCEL.EXE" C:\Users\test22\AppData\Local\Temp\Compensation-1192735226.xls
2524-
regsvr32.exe "C:\Windows\System32\regsvr32.exe" C:\Datop\test.test
2784 -
regsvr32.exe "C:\Windows\System32\regsvr32.exe" C:\Datop\test1.test
2796 -
regsvr32.exe "C:\Windows\System32\regsvr32.exe" C:\Datop\test2.test
3000
-
Name | Response | Post-Analysis Lookup |
---|---|---|
safalerp.com | 119.18.54.27 | |
godschildrenaf.org | 50.87.151.118 | |
callgirlsandescortkenya.site | 50.87.151.118 |
Suricata Alerts
Suricata TLS
No Suricata TLS
cmdline | regsvr32 C:\Datop\test.test |
cmdline | "C:\Windows\System32\regsvr32.exe" C:\Datop\test2.test |
cmdline | "C:\Windows\System32\regsvr32.exe" C:\Datop\test1.test |
cmdline | "C:\Windows\System32\regsvr32.exe" C:\Datop\test.test |
cmdline | regsvr32 C:\Datop\test1.test |
cmdline | regsvr32 C:\Datop\test2.test |
parent_process | excel.exe | martian_process | regsvr32 C:\Datop\test.test | ||||||
parent_process | excel.exe | martian_process | "C:\Windows\System32\regsvr32.exe" C:\Datop\test2.test | ||||||
parent_process | excel.exe | martian_process | "C:\Windows\System32\regsvr32.exe" C:\Datop\test1.test | ||||||
parent_process | excel.exe | martian_process | "C:\Windows\System32\regsvr32.exe" C:\Datop\test.test | ||||||
parent_process | excel.exe | martian_process | regsvr32 C:\Datop\test1.test | ||||||
parent_process | excel.exe | martian_process | regsvr32 C:\Datop\test2.test |
file | C:\Windows\System32\regsvr32.exe |