| ZeroBOX

ujunkwerex.exe "C:\Users\test22\AppData\Local\Temp\ujunkwerex.exe"
4656
- ujunkwerex.exe "C:\Users\test22\AppData\Local\Temp\ujunkwerex.exe"
  7204
  - powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\ujunkwerex.exe" -Force
    6012
  - powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tj85xg1cs.exe" -Force
    3752
  - powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tj85xg1cs.exe" -Force
    6200
  - powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\ujunkwerex.exe" -Force
    4672
  - tj85xg1cs.exe "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tj85xg1cs.exe"
    2268
    - tj85xg1cs.exe "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tj85xg1cs.exe"
      5572
      - powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tj85xg1cs.exe" -Force
        3352
      - powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Resources\Themes\cbMadd8augIa6FPb2b0WT9H3Ncddgaq6QZ2084\svchost.exe" -Force
        4828
      - powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tj85xg1cs.exe" -Force
        296
      - powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Resources\Themes\cbMadd8augIa6FPb2b0WT9H3Ncddgaq6QZ2084\svchost.exe" -Force
        7196
      - cmd.exe "C:\Windows\System32\cmd.exe" /c timeout 1
        2576
        
        timeout.exe timeout 1
        1308
      - tj85xg1cs.exe "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tj85xg1cs.exe"
        532
  - powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Resources\Themes\cbMadd8augIa6FPb2b0WT9H3Ncddgaq6QZ2084\svchost.exe" -Force
    8572
  - powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\ujunkwerex.exe" -Force
    6596
  - powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Resources\Themes\cbMadd8augIa6FPb2b0WT9H3Ncddgaq6QZ2084\svchost.exe" -Force
    5992
  - cmd.exe "C:\Windows\System32\cmd.exe" /c timeout 1
    7352
    - timeout.exe timeout 1
      5988
  - ujunkwerex.exe "C:\Users\test22\AppData\Local\Temp\ujunkwerex.exe"
    2488

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf

Behavioral Analysis

Process tree

Process contents