restlatin.blogg.se

Malicious artifacts seen in the context of a contacted hostįound malicious artifacts related to "198.72.111.203". "" wrote 52 bytes to a remote process "C:\Windows\SysWOW64\regsvr32.exe" (Handle: 700) "" wrote 32 bytes to a remote process "C:\Windows\SysWOW64\regsvr32.exe" (Handle: 700) "" wrote 8 bytes to a remote process "C:\Windows\SysWOW64\regsvr32.exe" (Handle: 700) "" wrote 4 bytes to a remote process "C:\Windows\SysWOW64\regsvr32.exe" (Handle: 700) "" wrote 1500 bytes to a remote process "C:\Windows\SysWOW64\regsvr32.exe" (Handle: 700) "" wrote 52 bytes to a remote process "C:\ProgramData\PDFsam Enhanced 4\Installation\PDFsam_Enhanced_4_Installer.exe" (Handle: 700) "" wrote 32 bytes to a remote process "C:\ProgramData\PDFsam Enhanced 4\Installation\PDFsam_Enhanced_4_Installer.exe" (Handle: 700)

"" wrote 8 bytes to a remote process "C:\ProgramData\PDFsam Enhanced 4\Installation\PDFsam_Enhanced_4_Installer.exe" (Handle: 700) "" wrote 4 bytes to a remote process "C:\ProgramData\PDFsam Enhanced 4\Installation\PDFsam_Enhanced_4_Installer.exe" (Handle: 700) "" wrote 1500 bytes to a remote process "%ALLUSERSPROFILE%\PDFsam Enhanced 4\Installation\PDFsam_Enhanced_4_Installer.exe" (Handle: 700)