| ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

| ZeroBOX

build.exe "C:\Users\test22\AppData\Local\Temp\build.exe"
2428
- build.exe "C:\Users\test22\AppData\Local\Temp\build.exe"
  2084
  - icacls.exe icacls "C:\Users\test22\AppData\Local\21585839-4b77-4562-86c9-65f44326d70f" /deny *S-1-1-0:(OI)(CI)(DE,DC)
    2324
  - build.exe "C:\Users\test22\AppData\Local\Temp\build.exe" --Admin IsNotAutoStart IsNotTask
    1760
    - build.exe "C:\Users\test22\AppData\Local\Temp\build.exe" --Admin IsNotAutoStart IsNotTask
      2420
      - build2.exe "C:\Users\test22\AppData\Local\acb649b3-dd0c-45ef-9056-9ce20693173f\build2.exe"
        2620
        
        build2.exe "C:\Users\test22\AppData\Local\acb649b3-dd0c-45ef-9056-9ce20693173f\build2.exe"
        1868
      - build3.exe "C:\Users\test22\AppData\Local\acb649b3-dd0c-45ef-9056-9ce20693173f\build3.exe"
        2076
        
        build3.exe "C:\Users\test22\AppData\Local\acb649b3-dd0c-45ef-9056-9ce20693173f\build3.exe"
        2236
        
        schtasks.exe /C /create /F /sc minute /mo 1 /tn "Azure-Update-Task" /tr "C:\Users\test22\AppData\Roaming\Microsoft\Network\mstsca.exe"
        3020

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf