Spawned process "KLMCODEC445.tmp" with commandline "/SL5="$50272 Spawned process "KLMCODEC445.EXE" ( Show Process) "KLMCODEC445.tmp" wrote 52 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 720)Ĭontains ability to reboot/shutdown the operating system "KLMCODEC445.tmp" wrote 32 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 720) "KLMCODEC445.tmp" wrote 4 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 720) "KLMCODEC445.tmp" wrote 1500 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 720) "KLMCODEC445.tmp" wrote 52 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 400) "KLMCODEC445.tmp" wrote 32 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 400) "KLMCODEC445.tmp" wrote 4 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 400) "KLMCODEC445.tmp" wrote 1500 bytes to a remote process "C:\Windows\System32\regsvr32.exe" (Handle: 400) "KLMCODEC445.EXE" wrote 32 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\is-3CP50.tmp\KLMCODEC445.tmp" (Handle: 164)
"KLMCODEC445.EXE" wrote 1500 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\is-3CP50.tmp\KLMCODEC445.tmp" (Handle: 164) "KLMCODEC445.EXE" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\is-3CP50.tmp\KLMCODEC445.tmp" (Handle: 164) "KLMCODEC445.EXE" wrote 52 bytes to a remote process "%TEMP%\is-3CP50.tmp\KLMCODEC445.tmp" (Handle: 164)