
"irsetup.exe" wrote 32 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\_ir_sf_temp_0\GetMachineSID.exe" (Handle: 916) "irsetup.exe" wrote 8 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\_ir_sf_temp_0\GetMachineSID.exe" (Handle: 916)

"irsetup.exe" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\_ir_sf_temp_0\GetMachineSID.exe" (Handle: 916)

"irsetup.exe" wrote 1500 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\_ir_sf_temp_0\GetMachineSID.exe" (Handle: 916) "" wrote 52 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" (Handle: 644) "" wrote 32 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" (Handle: 644) "" wrote 8 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" (Handle: 644) "" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" (Handle: 644) "" wrote 1500 bytes to a remote process "%TEMP%\_ir_sf_temp_0\irsetup.exe" (Handle: 644)
