| ZeroBOX

minda.exe "C:\Users\test22\AppData\Local\Temp\minda.exe"
2056
- toolspub2.exe "C:\Users\test22\AppData\Local\Temp\toolspub2.exe"
  2140
  - toolspub2.exe "C:\Users\test22\AppData\Local\Temp\toolspub2.exe"
    2680
- 31839b57a4f11171d6abc8bbc4451ee4.exe "C:\Users\test22\AppData\Local\Temp\31839b57a4f11171d6abc8bbc4451ee4.exe"
  2192
- kos1.exe "C:\Users\test22\AppData\Local\Temp\kos1.exe"
  2236
  - kos.exe "C:\Users\test22\AppData\Local\Temp\kos.exe"
    2372
  - set16.exe "C:\Users\test22\AppData\Local\Temp\set16.exe"
    2320
    - is-7M1N6.tmp "C:\Users\test22\AppData\Local\Temp\is-M59F3.tmp\is-7M1N6.tmp" /SL4 $30160 "C:\Users\test22\AppData\Local\Temp\set16.exe" 1232936 52224
      2552
      - net.exe "C:\Windows\system32\net.exe" helpmsg 8
        2648
        
        net1.exe C:\Windows\system32\net1 helpmsg 8
        2912
      - previewer.exe "C:\Program Files (x86)\PA Previewer\previewer.exe" -i
        2732
      - previewer.exe "C:\Program Files (x86)\PA Previewer\previewer.exe" -s
        2240
- Setup.exe "C:\Users\test22\AppData\Local\Temp\Setup.exe"
  2292
  - InstallUtil.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe"
    2084
    - cmd.exe "C:\Windows\system32\cmd.exe" /c timeout /t 5 & del /f /q "C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe" & del "C:\ProgramData\*.dll"" & exit
      2960
      - timeout.exe timeout /t 5
        2640
- latestX.exe "C:\Users\test22\AppData\Local\Temp\latestX.exe"
  2512

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf

Behavioral Analysis

Process tree

Process contents