| ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

| ZeroBOX

1.exe "C:\Users\test22\AppData\Local\Temp\1.exe"
1256
- cmd.exe cmd.exe /c "wmic csproduct get uuid"
  2136
  - WMIC.exe wmic csproduct get uuid
    2204
- WMIC.exe wmic os get Caption
  2316
- cmd.exe cmd /C "wmic path win32_VideoController get name"
  2448
  - WMIC.exe wmic path win32_VideoController get name
    2520
- cmd.exe cmd /C "wmic cpu get name"
  2596
  - WMIC.exe wmic cpu get name
    2656
- cmd.exe cmd "/c " systeminfo
  2732
  - systeminfo.exe systeminfo
    2792
- powershell.exe powershell "" "copy \"C:\Users\test22\AppData\Roaming\Microsoft\Windows\Cookies\" \"C:\Users\test22\AppData\Local\Temp\XVlBzgbaiC\""
  2056

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf