| ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

| ZeroBOX

build.exe "C:\Users\test22\AppData\Local\Temp\build.exe"
1460
- build.exe "C:\Users\test22\AppData\Local\Temp\build.exe"
  2108
  - icacls.exe icacls "C:\Users\test22\AppData\Local\75fe9bcd-3a70-4b99-b8ee-8282ac6a5e90" /deny *S-1-1-0:(OI)(CI)(DE,DC)
    2252
  - build.exe "C:\Users\test22\AppData\Local\Temp\build.exe" --Admin IsNotAutoStart IsNotTask
    2312
    - build.exe "C:\Users\test22\AppData\Local\Temp\build.exe" --Admin IsNotAutoStart IsNotTask
      2392
      - build2.exe "C:\Users\test22\AppData\Local\da7eb17b-ad07-4b46-8386-a2dc6d315c48\build2.exe"
        2600
        
        build2.exe "C:\Users\test22\AppData\Local\da7eb17b-ad07-4b46-8386-a2dc6d315c48\build2.exe"
        2668
        
        cmd.exe "C:\Windows\System32\cmd.exe" /c timeout /t 6 & del /f /q "C:\Users\test22\AppData\Local\da7eb17b-ad07-4b46-8386-a2dc6d315c48\build2.exe" & exit
        2340
        
        timeout.exe timeout /t 6
        2404
      - build3.exe "C:\Users\test22\AppData\Local\da7eb17b-ad07-4b46-8386-a2dc6d315c48\build3.exe"
        2848
        
        schtasks.exe /C /create /F /sc minute /mo 1 /tn "Azure-Update-Task" /tr "C:\Users\test22\AppData\Roaming\Microsoft\Network\mstsca.exe"
        2928

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf