| ZeroBOX

Stubchik.exe "C:\Users\test22\AppData\Local\Temp\Stubchik.exe"
2232
- cmd.exe cmd /c start C:\Users\test22\AppData\Roaming\DriverRealtekHDmaster.exe
  1160
  - DriverRealtekHDmaster.exe C:\Users\test22\AppData\Roaming\DriverRealtekHDmaster.exe
    1768
    - cmd.exe "C:\Windows\System32\cmd.exe" /C "C:\Users\test22\AppData\Local\Temp\3euNESrjJS.bat"
      3052
      - chcp.com chcp 65001
        2140
      - w32tm.exe w32tm /stripchart /computer:localhost /period:5 /dataonly /samples:2
        2160
      - mobsync.exe "C:\Sandbox\test22\DefaultBox\drive\C\Windows\mobsync.exe"
        1048
- cmd.exe cmd /c start C:\Users\test22\AppData\Local\Temp\DriverMaster.exe
  2056
  - DriverMaster.exe C:\Users\test22\AppData\Local\Temp\DriverMaster.exe
    668
    - cmd.exe "C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc onlogon /rl highest /tn "EngineDriverMaster" /tr '"C:\Users\test22\AppData\Local\Temp\EngineDriverMaster.exe"' & exit
      2948
      - schtasks.exe schtasks /create /f /sc onlogon /rl highest /tn "EngineDriverMaster" /tr '"C:\Users\test22\AppData\Local\Temp\EngineDriverMaster.exe"'
        2312
    - EngineDriverMaster.exe "C:\Users\test22\AppData\Local\Temp\EngineDriverMaster.exe"
      1108
      - cmd.exe "C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc onlogon /rl highest /tn "EngineDriverMaster" /tr '"C:\Users\test22\AppData\Local\Temp\EngineDriverMaster.exe"' & exit
        1772
        
        schtasks.exe schtasks /create /f /sc onlogon /rl highest /tn "EngineDriverMaster" /tr '"C:\Users\test22\AppData\Local\Temp\EngineDriverMaster.exe"'
        2420
      - sihost32.exe "C:\Users\test22\AppData\Roaming\Microsoft\Telemetry\sihost32.exe"
        1916

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf

Behavioral Analysis

Process tree

Process contents