| ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

| ZeroBOX

Explore.exe "C:\Users\test22\AppData\Local\Temp\Explore.exe"
2216
- cmd.exe "cmd.exe" /c REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "explooor" /t REG_SZ /d "C:\Users\test22\AppData\Roaming\explooor.exe"
  1536
  - reg.exe REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "explooor" /t REG_SZ /d "C:\Users\test22\AppData\Roaming\explooor.exe"
    2720
- explooor.exe "C:\Users\test22\AppData\Roaming\explooor.exe"
  1892
  - ammero.exe "C:\Users\test22\AppData\Roaming\ammero.exe"
    2212
  - InstallUtil.exe "C:\Users\test22\AppData\Local\Temp\InstallUtil.exe"
    1972
    - schtasks.exe "schtasks.exe" /create /f /tn "SMTP Host" /xml "C:\Users\test22\AppData\Local\Temp\tmp728.tmp"
      1632
    - schtasks.exe "schtasks.exe" /create /f /tn "SMTP Host Task" /xml "C:\Users\test22\AppData\Local\Temp\tmp871.tmp"
      1812

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf