| ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

| ZeroBOX

b.exe "C:\Users\test22\AppData\Local\Temp\b.exe"
2648
- cmd.exe C:\Windows\system32\cmd.exe /C net stop WinService
  1756
  - net.exe net stop WinService
    1304
    - net1.exe C:\Windows\system32\net1 stop WinService
      2876
- cmd.exe C:\Windows\system32\cmd.exe /C Sc delete WinService
  2856
  - sc.exe Sc delete WinService
    2696
- cmd.exe C:\Windows\system32\cmd.exe /C Sc create WinService binpath= C:\Windows\winspl.exe start= auto DisplayName= WinService
  2540
  - sc.exe Sc create WinService binpath= C:\Windows\winspl.exe start= auto DisplayName= WinService
    2036
- cmd.exe C:\Windows\system32\cmd.exe /C sc description WinService ServiceManagerForWin
  2660
  - sc.exe sc description WinService ServiceManagerForWin
    1292
- cmd.exe C:\Windows\system32\cmd.exe /C net start WinService
  1116
  - net.exe net start WinService
    2764
    - net1.exe C:\Windows\system32\net1 start WinService
      2744

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf