googleupdate.exe sideloading unsigned DLL and contacting archivetj.com
Detects googleupdate.exe loading an unsigned DLL from a non-standard path, followed by network communication to a known Command and Control (C2) domain or IP address.
Microsoft Sentinel (KQL)
