Cuckoo Sandbox

641d6e5613e2222e54c403c58d6048e16a49bd2b8a880bd747a7d30acb480f8c.exe "C:\Users\Administrator\AppData\Local\Temp\641d6e5613e2222e54c403c58d6048e16a49bd2b8a880bd747a7d30acb480f8c.exe"
2604
- Unicorn-6064.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-6064.exe
  2836
  - Unicorn-58877.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-58877.exe
    2548
    - Unicorn-24233.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-24233.exe
      2752
      - Unicorn-54741.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-54741.exe
        772
        
        Unicorn-29765.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-29765.exe
        2192
        
        Unicorn-15540.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-15540.exe
        2424
        
        Unicorn-41929.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-41929.exe
        1524
        
        Unicorn-29241.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-29241.exe
        2508

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default file network process services registry synchronisation iexplore office pdf

Cuckoo

We're processing your submission... This could take a few seconds.