| ZeroBOX

zor40.exe "C:\Users\test22\AppData\Local\Temp\zor40.exe"
2548
- v8317197.exe C:\Users\test22\AppData\Local\Temp\IXP000.TMP\v8317197.exe
  2600
  - v1471332.exe C:\Users\test22\AppData\Local\Temp\IXP001.TMP\v1471332.exe
    2680
    - v2169544.exe C:\Users\test22\AppData\Local\Temp\IXP002.TMP\v2169544.exe
      2724
      - v4684579.exe C:\Users\test22\AppData\Local\Temp\IXP003.TMP\v4684579.exe
        2776
        
        v0716684.exe C:\Users\test22\AppData\Local\Temp\IXP004.TMP\v0716684.exe
        2820
        
        a5517070.exe C:\Users\test22\AppData\Local\Temp\IXP005.TMP\a5517070.exe
        2864
        
        AppLaunch.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
        2908
        
        b6422446.exe C:\Users\test22\AppData\Local\Temp\IXP005.TMP\b6422446.exe
        2968
        
        AppLaunch.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
        3068
        
        c2556630.exe C:\Users\test22\AppData\Local\Temp\IXP004.TMP\c2556630.exe
        1384
        
        AppLaunch.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
        196
      - d1059622.exe C:\Users\test22\AppData\Local\Temp\IXP003.TMP\d1059622.exe
        2252
    - e7216491.exe C:\Users\test22\AppData\Local\Temp\IXP002.TMP\e7216491.exe
      2432
  - f8319597.exe C:\Users\test22\AppData\Local\Temp\IXP001.TMP\f8319597.exe
    1120
    - AppLaunch.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
      2972

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf

Behavioral Analysis

Process tree

Process contents