riskware-object (Network Security on Central Management)

Prev Next
CEF:0|Trellix|CMS|9.0.0.916210|RO|riskware-object|1|rt=Jun 29 2020 07:54:27
UTC start=Jun 29 2020 07:51:34 UTC end=Jun 29 2020 07:54:27 UTC
src=xxx.xx.xx.x dst=xxx.xx.xx.xxx request=xxx.xx.xx.xxx/my_dir/dll_
4b2155811cf0953d447df316472da01b093c55a7b3f2b9dc8d88c3e5a4484cd0 fname=dll_
4b2155811cf0953d447df316472da01b093c55a7b3f2b9dc8d88c3e5a4484cd0 fileType=dll
cs1Label=sname cs1=FE_Adware_Searchbar act=notified dvc=xx.x.x.xx
dvchost=abc.xyz.trellix.com fileHash=30dbe64027e570ada595c1e7b89664db
smac=00:50:56:c0:00:08 dmac=00:0c:29:b8:8e:a1 spt=37420 dpt=80 cn1Label=vlan
cn1=0 requestMethod=GET externalId=83 devicePayloadId=2b48c503-bb98-4990-
bb16-86f7a0268d6e msg=risk ware detected:31 cs3Label=osinfo cs3=Microsoft
WindowsXP 32-bit 5.1 sp3 17.0112 cs4Label=link
cs4=https://abc.xyz.trellix.com/detection/objects?uuid\=2b48c503-bb98-4990-
bb16-86f7a0268d6e flexString1Label=sha256sum
flexString1=4b2155811cf0953d447df316472da01b093c55a7b3f2b9dc8d88c3e5a4484cd0