| ZeroBOX

Ermnnolfu.exe "C:\Users\test22\AppData\Local\Temp\Ermnnolfu.exe"
1000
- vlcdownloader.exe "C:\Users\test22\AppData\Local\Temp\vlcdownloader.exe"
  2084
cmd.exe "C:\Windows\System32\cmd.exe" /c schtasks /create /f /sc onlogon /rl highest /tn "svhost" /tr '"C:\Users\test22\AppData\Roaming\svhost.exe"' & exit
2872
- schtasks.exe schtasks /create /f /sc onlogon /rl highest /tn "svhost" /tr '"C:\Users\test22\AppData\Roaming\svhost.exe"'
  2936
cmd.exe cmd /c ""C:\Users\test22\AppData\Local\Temp\tmp2D99.tmp.bat""
2984
- timeout.exe timeout 3
  3056
- svhost.exe "C:\Users\test22\AppData\Roaming\svhost.exe"
  2220

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf

Behavioral Analysis