Cuckoo Sandbox

aabb6000d5d762939a948b81d3ced9999f704f432befb7a148b537088527aa4e.exe "C:\Users\Administrator\AppData\Local\Temp\aabb6000d5d762939a948b81d3ced9999f704f432befb7a148b537088527aa4e.exe"
1164
- Unicorn-33257.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-33257.exe
  2876
  - Unicorn-6744.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-6744.exe
    2916
    - Unicorn-51041.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-51041.exe
      2664
      - Unicorn-36781.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-36781.exe
        1532
        
        Unicorn-52489.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-52489.exe
        3068
        
        Unicorn-38229.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-38229.exe
        2568
        
        Unicorn-24005.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-24005.exe
        1680
        
        Unicorn-63065.exe C:\Users\Administrator\AppData\Local\Temp\Unicorn-63065.exe
        2976

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default file network process services registry synchronisation iexplore office pdf

Cuckoo

We're processing your submission... This could take a few seconds.