| ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

| ZeroBOX

eurob.exe "C:\Users\test22\AppData\Local\Temp\eurob.exe"
1440
- Powershell.exe "Powershell" Copy-Item 'C:\Users\test22\AppData\Local\Temp\eurob.exe' 'C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Systemds.exe'
  2556
- RegSvcs.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"
  2612
  - svchost.exe svchost.exe
    2736
    - iexplore.exe "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
      2952
      - iexplore.exe "C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:2952 CREDAT:145409
        3028
      - iexplore.exe "C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:2952 CREDAT:79875
        2640
  - svchost.exe svchost.exe
    1172
  - svchost.exe svchost.exe
    2552
  - svchost.exe svchost.exe
    2596
  - svchost.exe svchost.exe
    2480
  - svchost.exe svchost.exe
    2836

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf