labf.blogg.se

"" wrote 52 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 632)įound malicious artifacts related to "220.181.105.177" (ASN:, Owner: ). "" wrote 32 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 632) "" wrote 4 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 632) "" wrote 1500 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 632) "" wrote 52 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 684) "" wrote 32 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 684) "" wrote 4 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 684) "" wrote 1500 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 684)

"" wrote 4 bytes to a remote process "C:\Program Files\Internet Explorer\iexplore.exe" (Handle: 1080) "" wrote 52 bytes to a remote process "C:\Program Files\Internet Explorer\iexplore.exe" (Handle: 1080) "" wrote 32 bytes to a remote process "%PROGRAMFILES%\Internet Explorer\iexplore.exe" (Handle: 1080)