| ZeroBOX

rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,AATSwPm
2556
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,AATSwPm
  3060
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,AGjHZEKfwvYHQizmakjUMsYj
2640
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,AGjHZEKfwvYHQizmakjUMsYj
  3052
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,AIkgNtfE
2732
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,AIkgNtfE
  192
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,ANCqFRmb
2820
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,ANCqFRmb
  2216
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,AZsxitJzqgvaKjFJ
2916
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,AZsxitJzqgvaKjFJ
  2568
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,AmtdLjEpbTlXn
3008
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,AmtdLjEpbTlXn
  2632
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,AqBlkYwTBT
1264
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,AqBlkYwTBT
  2700
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,BUSanJRDyEep
2440
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,BUSanJRDyEep
  2964
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,BafKbpzZbMysszdVAvJAdAEpOh
2652
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,BafKbpzZbMysszdVAvJAdAEpOh
  2104
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,BjVXLABFRbMkMdYZrwLDtnqn
2952
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,BjVXLABFRbMkMdYZrwLDtnqn
  2180
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,BjztmnCOIlUskYW
2312
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,BjztmnCOIlUskYW
  2752
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,BtxBvDT
2908
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,BtxBvDT
  2824
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,BwRgjSIzDyXRKprO
2228
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,BwRgjSIzDyXRKprO
  3048
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,CBUlMIORIIpsrIfWWDXzxbFGr
2644
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,CBUlMIORIIpsrIfWWDXzxbFGr
  2424
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,CRbGKhhIIJjeTUbiOVm
2936
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,CRbGKhhIIJjeTUbiOVm
  2320
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,CXBgle
2832
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,CXBgle
  2220
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,ChQBUjDCAdFv
152
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,ChQBUjDCAdFv
  2356
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,CmrMJZTVMTuNDAYU
2272
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,CmrMJZTVMTuNDAYU
  2840
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,DJfXZEhrxVoOnQIaZCzrMlJhl
2992
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,DJfXZEhrxVoOnQIaZCzrMlJhl
  3136
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,DJmVvEPJyUlwpNKhJJllnpGQ
2884
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,DJmVvEPJyUlwpNKhJJllnpGQ
  3176
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,DJvfvhBsJfPKIwwXvjTtNjS
2364
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,DJvfvhBsJfPKIwwXvjTtNjS
  3212
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,DjrueuNsMQZJuGFiKnmOYwj
3084
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,DjrueuNsMQZJuGFiKnmOYwj
  3288
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,DkqOjojSX
3264
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,DkqOjojSX
  3484
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,DllRegisterServer
3456
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,DllRegisterServer
  3720
  - regsvr32.exe C:\Windows\system32\regsvr32.exe "C:\Windows\system32\FQXtG\SnwrhOr.dll"
    4592
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,DopsvUCJzIx
3580
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,DopsvUCJzIx
  3960
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,EIFDbYEwwm
3676
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,EIFDbYEwwm
  3952
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,EIvfoTYJih
3812
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,EIvfoTYJih
  3992
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,ELIxkBrwmT
3900
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,ELIxkBrwmT
  3168
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,EXYyiQcyfbAOQWCbO
3100
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,EXYyiQcyfbAOQWCbO
  3300
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,EYZChLDVnFIPMppUYdViQPoay
2736
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,EYZChLDVnFIPMppUYdViQPoay
  3752
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,EkoCAnWFsC
3536
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,EkoCAnWFsC
  3948
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,FElwVkaTaxRRGN
3604
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,FElwVkaTaxRRGN
  2576
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,FYOwZnlvpzRqxUxbg
3736
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,FYOwZnlvpzRqxUxbg
  3236
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,FlrMSvOcLwUpdeoAD
3932
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,FlrMSvOcLwUpdeoAD
  3620
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,FpYAsWCvpJvuoMUjTjbelniY
3244
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,FpYAsWCvpJvuoMUjTjbelniY
  3640
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,GtzySShWnXfsUb
3432
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,GtzySShWnXfsUb
  3276
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,HLCzeBq
3596
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,HLCzeBq
  3252
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,HUfghoiCWVHtgSglb
3104
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,HUfghoiCWVHtgSglb
  3568
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,HZbFljHYbGFvcmrcYlFWDSU
3732
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,HZbFljHYbGFvcmrcYlFWDSU
  4024
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,HcnrULcPyEhXRswVbpM
3352
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,HcnrULcPyEhXRswVbpM
  3708
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,HjOoqCOimSKUjFjXdFuN
3560
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,HjOoqCOimSKUjFjXdFuN
  3624
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,HolGDbeRm
3080
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,HolGDbeRm
  3692
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,HuIMyUhUZbrzJHjbegGPZC
3612
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,HuIMyUhUZbrzJHjbegGPZC
  4016
explorer.exe C:\Windows\Explorer.EXE
1452
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,IIiyYPEYPggpdERitQOMVsNiQu
3944
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,IIiyYPEYPggpdERitQOMVsNiQu
  3780
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,IXgpndcJKTQb
3916
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,IXgpndcJKTQb
  2684
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,IfAaBpNyODwkDsuzoVkTgbGbo
3304
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,IfAaBpNyODwkDsuzoVkTgbGbo
  4176
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,IrGoJmdvvsJFEUcMmY
4104
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,IrGoJmdvvsJFEUcMmY
  4220
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,IxYXufEXCKlK
4260
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,JdOhJByHqzyrbb
4368
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,JkXECizglqMHumJjvxvc
4464
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,JraCrCTSpf
4576
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,KOzKUBvVThkMW
4768
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,KPYRrwLPTnYqnjWtLbrkMqOtB
4884
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,KipxtvcHXtUzqvx
5008
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,KohLAHgeZferwWcxWZS
5112
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,KwEaxpXhtkvjDUCmIuHNsi
1576
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,LFzXHFSyJVxVEh
452
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,LNPKCpkPSzN
4456
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,MSiJmPuPMOTPyzp
4724
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,MYKrTwtTfQowf
4840
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,MfrFooxDNiYm
5036
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,NMHwOnDVE
4416
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,NbMJSnrcyInVieL
1168
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,NbibPrOUQidT
4932
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,NjxFQaFpOctyBAzDzMc
5104
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,NpXnElbkOhnEfxhNTdIMZkZRC
4304
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,OBGLqOOhnUsQKUfOgM
4528
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,OHYxBWr
4940
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,OOwPwssFsHlDiquC
1512
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\Dop.dll,OXGFEPbP
4624

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf

Behavioral Analysis

Process tree

Process contents