| ZeroBOX

rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,GetCrashKeyCountImpl
3036
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,IsSandboxedProcess
2220
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,GetHandleVerifier
1784
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,RelaunchChromeBrowserWithNewCommandLineIfNeeded
2424
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_add_cross_origin_whitelist_entry
1596
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_api_hash
1728
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_base64decode
2564
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_base64encode
2820
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_begin_tracing
2932
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_binary_value_create
2188
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_browser_host_create_browser
2380
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_browser_host_create_browser_sync
1196
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_browser_view_create
2124
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_browser_view_get_for_browser
2332
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_clear_cross_origin_whitelist
2996
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_clear_scheme_handler_factories
2336
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_command_line_create
2844
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_command_line_get_global
2576
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_cookie_manager_create_manager
2016
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_cookie_manager_get_global_manager
2524
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_crash_reporting_enabled
2568
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_create_context_shared
1188
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_create_directory
756
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_create_new_temp_directory
236
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_create_temp_directory_in_directory
2772
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_create_url
3108
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_currently_on
3196
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_delete_file
3292
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_dictionary_value_create
3388
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_directory_exists
3484
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_display_get_alls
3584
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_display_get_count
3680
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_display_get_matching_bounds
3772
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_display_get_nearest_point
3864
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_display_get_primary
3968
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_do_message_loop_work
4060
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_drag_data_create
3192
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_enable_highdpi_support
3312
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_end_tracing
3456
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_execute_java_script_with_user_gesture_for_tests
3628
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_execute_process
3764
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_format_url_for_security_display
3908
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_get_current_platform_thread_handle
4040
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_get_current_platform_thread_id
3288
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_get_extensions_for_mime_type
3472
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_get_geolocation
3732
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_get_mime_type
3956
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_get_min_log_level
3240
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_get_path
3640
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_get_temp_directory
3104
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_get_vlog_level
3536
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_image_create
3264
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_initialize
3928
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_is_cert_status_error
3128
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_is_cert_status_minor_error
4168
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_is_web_plugin_unstable
4264
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_label_button_create
4364
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_launch_process
4460
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_list_value_create
4552
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_load_crlsets_file
4644
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_log
4748
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_menu_button_create
4840
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_menu_model_create
4940
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_now_from_system_trace_time
5036
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_panel_create
3416
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_parse_json
4256
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_parse_jsonand_return_error
4396
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_parse_url
4532
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_post_data_create
4720
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_post_data_element_create
4600
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ndldll.txt.exe.dll,cef_post_delayed_task
4572

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf

Behavioral Analysis

Process tree

Process contents