| ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

| ZeroBOX

VXCVNCXVJGKKFD.exe "C:\Users\test22\AppData\Local\Temp\VXCVNCXVJGKKFD.exe"
2564
- Powershell.exe "Powershell" Copy-Item 'C:\Users\test22\AppData\Local\Temp\VXCVNCXVJGKKFD.exe' 'C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SyGHHHFstem.exe'
  2820
- RegSvcs.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"
  2880
  - RegSvcs.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe /stext "C:\Users\test22\AppData\Local\Temp\tpxajjazugpoymnpvtuqnbdnhscmkm"
    1120
  - RegSvcs.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe /stext "C:\Users\test22\AppData\Local\Temp\wsdkkcksiohtbabtmdprqgyehztvlxlry"
    800
  - RegSvcs.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe /stext "C:\Users\test22\AppData\Local\Temp\gmidlu"
    192
  - RegSvcs.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe /stext "C:\Users\test22\AppData\Local\Temp\bbevhbpgkaezxibdxaperuwvb"
    2508
  - RegSvcs.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe /stext "C:\Users\test22\AppData\Local\Temp\ldjnilazyiwezophglcfuhrekxzrg"
    2644
  - RegSvcs.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe /stext "C:\Users\test22\AppData\Local\Temp\oxxyielbmqojkcmtxwphfmlvkejazjdt"
    2696

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf