| ZeroBOX

build.exe "C:\Users\test22\AppData\Local\Temp\build.exe"
2584
- icacls.exe icacls "C:\Users\test22\AppData\Local\5b31f130-ec4a-43ad-82c9-3b3f7d683b80" /deny *S-1-1-0:(OI)(CI)(DE,DC)
  2684
build.exe "C:\Users\test22\AppData\Local\Temp\build.exe" --Admin IsNotAutoStart IsNotTask
2896
- build3.exe "C:\Users\test22\AppData\Local\b22273b6-6a69-427a-a3b8-b10592be9460\build3.exe"
  1680
  - build3.exe "C:\Users\test22\AppData\Local\b22273b6-6a69-427a-a3b8-b10592be9460\build3.exe"
    2088
    - schtasks.exe /C /create /F /sc minute /mo 1 /tn "Azure-Update-Task" /tr "C:\Users\test22\AppData\Roaming\Microsoft\Network\mstsca.exe"
      948

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf

Behavioral Analysis