| File name: | 1 (1240) |
| Full analysis: | https://app.any.run/tasks/3639bfa7-034f-4abb-88e9-a32855a3bfba |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 10:31:19 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | AC78747997FE488EE8DA6B4D490162B0 |
| SHA1: | 48940F4D01F9D345E846AE22BEE94A0CD42FFD7D |
| SHA256: | 014DB07862350C274F6B94FCB7146EB61C908B178F223E7D509213A4AF7FD942 |
| SSDEEP: | 6144:a7K8f7IJeDNHA5DlekeM1Afx/tBQlvJGhT/WyeOiFk/8SwjwpyAvEh/Us6m+svda:a+aMaHA55en1BmhSTOyeOiZx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- 1 (1240).exe (PID: 7336)
- Unicorn-15259.exe (PID: 7928)
- Unicorn-45293.exe (PID: 7516)
- Unicorn-56655.exe (PID: 7944)
- Unicorn-13095.exe (PID: 8156)
- Unicorn-50044.exe (PID: 8180)
- Unicorn-52082.exe (PID: 8188)
- Unicorn-31700.exe (PID: 2152)
- Unicorn-52867.exe (PID: 4688)
- Unicorn-44315.exe (PID: 7244)
- Unicorn-39411.exe (PID: 5132)
- Unicorn-20133.exe (PID: 7000)
- Unicorn-60096.exe (PID: 744)
- Unicorn-30178.exe (PID: 8172)
- Unicorn-1139.exe (PID: 4776)
- Unicorn-34558.exe (PID: 2136)
- Unicorn-9307.exe (PID: 7300)
- Unicorn-1907.exe (PID: 5332)
- Unicorn-3177.exe (PID: 7292)
- Unicorn-22712.exe (PID: 1512)
- Unicorn-43132.exe (PID: 3884)
- Unicorn-37002.exe (PID: 1676)
- Unicorn-40479.exe (PID: 5216)
- Unicorn-60080.exe (PID: 1764)
- Unicorn-17673.exe (PID: 5176)
- Unicorn-1907.exe (PID: 1672)
- Unicorn-10267.exe (PID: 5404)
- Unicorn-37630.exe (PID: 7236)
- Unicorn-64107.exe (PID: 7260)
- Unicorn-48368.exe (PID: 4120)
- Unicorn-5306.exe (PID: 6712)
- Unicorn-37424.exe (PID: 4408)
- Unicorn-21450.exe (PID: 5344)
- Unicorn-53568.exe (PID: 1452)
- Unicorn-20512.exe (PID: 680)
- Unicorn-14381.exe (PID: 2244)
- Unicorn-49292.exe (PID: 6744)
- Unicorn-8814.exe (PID: 4380)
- Unicorn-42830.exe (PID: 4892)
- Unicorn-20246.exe (PID: 1072)
- Unicorn-9027.exe (PID: 7500)
- Unicorn-45976.exe (PID: 4428)
- Unicorn-61351.exe (PID: 7492)
- Unicorn-2203.exe (PID: 6132)
- Unicorn-33532.exe (PID: 2148)
- Unicorn-10734.exe (PID: 7776)
- Unicorn-31730.exe (PID: 7744)
- Unicorn-15394.exe (PID: 7668)
- Unicorn-3739.exe (PID: 6456)
- Unicorn-50444.exe (PID: 2600)
- Unicorn-61418.exe (PID: 7816)
- Unicorn-36220.exe (PID: 8068)
- Unicorn-64351.exe (PID: 8092)
- Unicorn-61855.exe (PID: 1244)
- Unicorn-41700.exe (PID: 4920)
- Unicorn-2971.exe (PID: 7868)
- Unicorn-23178.exe (PID: 5380)
- Unicorn-44943.exe (PID: 8076)
- Unicorn-55606.exe (PID: 6740)
- Unicorn-37180.exe (PID: 1388)
- Unicorn-9582.exe (PID: 7368)
- Unicorn-35452.exe (PID: 7644)
- Unicorn-8325.exe (PID: 904)
- Unicorn-56811.exe (PID: 7872)
- Unicorn-23968.exe (PID: 4220)
- Unicorn-13635.exe (PID: 2644)
- Unicorn-30600.exe (PID: 5956)
- Unicorn-50200.exe (PID: 4464)
- Unicorn-32712.exe (PID: 5984)
- Unicorn-56448.exe (PID: 8116)
- Unicorn-5525.exe (PID: 2392)
- Unicorn-17645.exe (PID: 8128)
- Unicorn-25696.exe (PID: 5436)
- Unicorn-36826.exe (PID: 8364)
- Unicorn-5010.exe (PID: 1040)
- Unicorn-58014.exe (PID: 5776)
- Unicorn-29588.exe (PID: 5964)
- Unicorn-25120.exe (PID: 7960)
- Unicorn-47424.exe (PID: 8260)
- Unicorn-10210.exe (PID: 8876)
- Unicorn-15171.exe (PID: 8896)
- Unicorn-62748.exe (PID: 8920)
- Unicorn-37739.exe (PID: 2320)
- Unicorn-34226.exe (PID: 1240)
- Unicorn-27388.exe (PID: 8464)
- Unicorn-37284.exe (PID: 8728)
- Unicorn-42956.exe (PID: 8372)
- Unicorn-9442.exe (PID: 8708)
- Unicorn-42726.exe (PID: 1012)
- Unicorn-24735.exe (PID: 8228)
- Unicorn-10615.exe (PID: 9016)
- Unicorn-49603.exe (PID: 5260)
- Unicorn-48198.exe (PID: 8544)
- Unicorn-2758.exe (PID: 8480)
- Unicorn-20246.exe (PID: 8100)
- Unicorn-32432.exe (PID: 8628)
- Unicorn-49027.exe (PID: 8120)
- Unicorn-19535.exe (PID: 1056)
- Unicorn-8503.exe (PID: 8752)
- Unicorn-21310.exe (PID: 8788)
- Unicorn-20268.exe (PID: 1276)
- Unicorn-23776.exe (PID: 8060)
- Unicorn-51331.exe (PID: 7552)
- Unicorn-36670.exe (PID: 4200)
- Unicorn-38310.exe (PID: 6080)
- Unicorn-10402.exe (PID: 8824)
- Unicorn-5955.exe (PID: 9168)
- Unicorn-43096.exe (PID: 9104)
- Unicorn-50703.exe (PID: 7328)
- Unicorn-62068.exe (PID: 7976)
- Unicorn-27964.exe (PID: 8400)
- Unicorn-38878.exe (PID: 8452)
- Unicorn-32240.exe (PID: 8672)
- Unicorn-21118.exe (PID: 8500)
- Unicorn-29321.exe (PID: 7736)
- Unicorn-31368.exe (PID: 7924)
- Unicorn-58346.exe (PID: 1616)
- Unicorn-36007.exe (PID: 9236)
- Unicorn-54942.exe (PID: 9856)
- Unicorn-52712.exe (PID: 9884)
- Unicorn-2062.exe (PID: 8292)
- Unicorn-59380.exe (PID: 4724)
- Unicorn-7595.exe (PID: 9916)
- Unicorn-27341.exe (PID: 9228)
- Unicorn-52395.exe (PID: 7392)
- Unicorn-4995.exe (PID: 8656)
- Unicorn-15555.exe (PID: 8780)
- Unicorn-49728.exe (PID: 8700)
- Unicorn-698.exe (PID: 8472)
- Unicorn-9826.exe (PID: 8984)
- Unicorn-57687.exe (PID: 8852)
- Unicorn-41752.exe (PID: 8680)
- Unicorn-40164.exe (PID: 9300)
- Unicorn-3407.exe (PID: 9268)
- Unicorn-31280.exe (PID: 8220)
- Unicorn-50392.exe (PID: 7572)
- Unicorn-12461.exe (PID: 9068)
- Unicorn-43916.exe (PID: 8432)
- Unicorn-10527.exe (PID: 9804)
- Unicorn-60755.exe (PID: 8928)
- Unicorn-38628.exe (PID: 8280)
- Unicorn-31590.exe (PID: 9028)
- Unicorn-9375.exe (PID: 9420)
- Unicorn-6998.exe (PID: 9824)
- Unicorn-6827.exe (PID: 9720)
- Unicorn-15099.exe (PID: 11172)
- Unicorn-55171.exe (PID: 11180)
- Unicorn-57216.exe (PID: 4068)
- Unicorn-18208.exe (PID: 9140)
- Unicorn-45779.exe (PID: 11188)
- Unicorn-61958.exe (PID: 9768)
- Unicorn-3547.exe (PID: 10448)
- Unicorn-43200.exe (PID: 9812)
- Unicorn-62608.exe (PID: 6652)
- Unicorn-54772.exe (PID: 8812)
- Unicorn-13459.exe (PID: 9432)
- Unicorn-54646.exe (PID: 732)
- Unicorn-25525.exe (PID: 9648)
- Unicorn-55924.exe (PID: 9044)
- Unicorn-44139.exe (PID: 9784)
- Unicorn-40719.exe (PID: 8492)
- Unicorn-40372.exe (PID: 11420)
- Unicorn-44611.exe (PID: 7764)
- Unicorn-43304.exe (PID: 10700)
- Unicorn-12271.exe (PID: 2616)
- Unicorn-36511.exe (PID: 6708)
- Unicorn-9531.exe (PID: 12304)
- Unicorn-3.exe (PID: 10224)
- Unicorn-44632.exe (PID: 7580)
- Unicorn-45312.exe (PID: 10148)
- Unicorn-195.exe (PID: 10172)
- Unicorn-6421.exe (PID: 11544)
- Unicorn-38518.exe (PID: 2968)
- Unicorn-19337.exe (PID: 10328)
- Unicorn-50304.exe (PID: 8940)
- Unicorn-35312.exe (PID: 9148)
- Unicorn-3053.exe (PID: 9468)
- Unicorn-31221.exe (PID: 11384)
- Unicorn-30298.exe (PID: 10288)
- Unicorn-50600.exe (PID: 9680)
- Unicorn-20232.exe (PID: 6940)
- Unicorn-32515.exe (PID: 11232)
- Unicorn-42307.exe (PID: 10552)
- Unicorn-38502.exe (PID: 7220)
- Unicorn-31581.exe (PID: 10416)
- Unicorn-39343.exe (PID: 10316)
- Unicorn-39094.exe (PID: 9664)
- Unicorn-11399.exe (PID: 10836)
- Unicorn-27087.exe (PID: 11396)
- Unicorn-28644.exe (PID: 9384)
- Unicorn-4745.exe (PID: 12784)
- Unicorn-50792.exe (PID: 9640)
- Unicorn-22706.exe (PID: 10568)
- Unicorn-2441.exe (PID: 7900)
- Unicorn-8969.exe (PID: 11156)
- Unicorn-6613.exe (PID: 11488)
- Unicorn-27557.exe (PID: 9504)
- Unicorn-64580.exe (PID: 10072)
- Unicorn-3769.exe (PID: 10536)
- Unicorn-57927.exe (PID: 10204)
- Unicorn-43480.exe (PID: 9056)
- Unicorn-12639.exe (PID: 10120)
- Unicorn-48873.exe (PID: 9480)
- Unicorn-55063.exe (PID: 13592)
- Unicorn-42624.exe (PID: 9628)
- Unicorn-15218.exe (PID: 11888)
- Unicorn-43091.exe (PID: 12828)
- Unicorn-30141.exe (PID: 9220)
- Unicorn-59183.exe (PID: 11732)
- Unicorn-58820.exe (PID: 11704)
- Unicorn-41014.exe (PID: 11924)
- Unicorn-26236.exe (PID: 10560)
- Unicorn-33302.exe (PID: 9400)
- Unicorn-54471.exe (PID: 9288)
- Unicorn-4581.exe (PID: 11748)
- Unicorn-40718.exe (PID: 10464)
- Unicorn-24856.exe (PID: 13060)
- Unicorn-19796.exe (PID: 8392)
- Unicorn-52240.exe (PID: 10864)
- Unicorn-62726.exe (PID: 10016)
- Unicorn-60771.exe (PID: 11140)
- Unicorn-42799.exe (PID: 8760)
- Unicorn-491.exe (PID: 11480)
- Unicorn-45202.exe (PID: 12528)
- Unicorn-44818.exe (PID: 12656)
- Unicorn-22656.exe (PID: 13576)
- Unicorn-979.exe (PID: 12372)
- Unicorn-10579.exe (PID: 11868)
- Unicorn-35690.exe (PID: 12456)
- Unicorn-9515.exe (PID: 10632)
- Unicorn-51310.exe (PID: 13808)
- Unicorn-60392.exe (PID: 7576)
- Unicorn-5757.exe (PID: 14976)
- Unicorn-22670.exe (PID: 13448)
- Unicorn-47667.exe (PID: 14960)
- Unicorn-3350.exe (PID: 11312)
- Unicorn-3215.exe (PID: 7196)
- Unicorn-39908.exe (PID: 16548)
- Unicorn-60807.exe (PID: 9848)
- Unicorn-52972.exe (PID: 13904)
- Unicorn-61140.exe (PID: 13924)
- Unicorn-16024.exe (PID: 14004)
- Unicorn-32294.exe (PID: 16564)
- Unicorn-579.exe (PID: 10380)
- Unicorn-28325.exe (PID: 9656)
- Unicorn-55571.exe (PID: 10544)
- Unicorn-22884.exe (PID: 10720)
- Unicorn-13267.exe (PID: 9488)
- Unicorn-56096.exe (PID: 13756)
- Unicorn-26968.exe (PID: 10728)
- Unicorn-56668.exe (PID: 11320)
- Unicorn-29302.exe (PID: 14196)
- Unicorn-28953.exe (PID: 11880)
- Unicorn-56582.exe (PID: 11768)
- Unicorn-47558.exe (PID: 11572)
- Unicorn-42706.exe (PID: 13220)
- Unicorn-43038.exe (PID: 13156)
- Unicorn-53968.exe (PID: 11460)
- Unicorn-60247.exe (PID: 12848)
- Unicorn-34400.exe (PID: 5048)
- Unicorn-51560.exe (PID: 9792)
- Unicorn-44418.exe (PID: 10616)
- Unicorn-32845.exe (PID: 11916)
Starts itself from another location
- 1 (1240).exe (PID: 7336)
- Unicorn-15259.exe (PID: 7928)
- Unicorn-56655.exe (PID: 7944)
- Unicorn-45293.exe (PID: 7516)
- Unicorn-13095.exe (PID: 8156)
- Unicorn-52082.exe (PID: 8188)
- Unicorn-30178.exe (PID: 8172)
- Unicorn-31700.exe (PID: 2152)
- Unicorn-52867.exe (PID: 4688)
- Unicorn-44315.exe (PID: 7244)
- Unicorn-20133.exe (PID: 7000)
- Unicorn-60096.exe (PID: 744)
- Unicorn-50044.exe (PID: 8180)
- Unicorn-39411.exe (PID: 5132)
- Unicorn-37630.exe (PID: 7236)
- Unicorn-1139.exe (PID: 4776)
- Unicorn-34558.exe (PID: 2136)
- Unicorn-9307.exe (PID: 7300)
- Unicorn-1907.exe (PID: 5332)
- Unicorn-50703.exe (PID: 7328)
- Unicorn-22712.exe (PID: 1512)
- Unicorn-17673.exe (PID: 5176)
- Unicorn-43132.exe (PID: 3884)
- Unicorn-37002.exe (PID: 1676)
- Unicorn-40479.exe (PID: 5216)
- Unicorn-1907.exe (PID: 1672)
- Unicorn-10267.exe (PID: 5404)
- Unicorn-64107.exe (PID: 7260)
- Unicorn-60080.exe (PID: 1764)
- Unicorn-48368.exe (PID: 4120)
- Unicorn-5306.exe (PID: 6712)
- Unicorn-37424.exe (PID: 4408)
- Unicorn-53568.exe (PID: 1452)
- Unicorn-21450.exe (PID: 5344)
- Unicorn-3177.exe (PID: 7292)
- Unicorn-14381.exe (PID: 2244)
- Unicorn-49292.exe (PID: 6744)
- Unicorn-20512.exe (PID: 680)
- Unicorn-55606.exe (PID: 6740)
- Unicorn-42830.exe (PID: 4892)
- Unicorn-20246.exe (PID: 1072)
- Unicorn-45976.exe (PID: 4428)
- Unicorn-9027.exe (PID: 7500)
- Unicorn-61351.exe (PID: 7492)
- Unicorn-10734.exe (PID: 7776)
- Unicorn-2203.exe (PID: 6132)
- Unicorn-33532.exe (PID: 2148)
- Unicorn-31730.exe (PID: 7744)
- Unicorn-15394.exe (PID: 7668)
- Unicorn-8814.exe (PID: 4380)
- Unicorn-3739.exe (PID: 6456)
- Unicorn-50444.exe (PID: 2600)
- Unicorn-61418.exe (PID: 7816)
- Unicorn-59380.exe (PID: 4724)
- Unicorn-64351.exe (PID: 8092)
- Unicorn-23776.exe (PID: 8060)
- Unicorn-61855.exe (PID: 1244)
- Unicorn-2971.exe (PID: 7868)
- Unicorn-9582.exe (PID: 7368)
- Unicorn-23178.exe (PID: 5380)
- Unicorn-44943.exe (PID: 8076)
- Unicorn-37180.exe (PID: 1388)
- Unicorn-23968.exe (PID: 4220)
- Unicorn-8325.exe (PID: 904)
- Unicorn-36220.exe (PID: 8068)
- Unicorn-31368.exe (PID: 7924)
- Unicorn-56811.exe (PID: 7872)
- Unicorn-30600.exe (PID: 5956)
- Unicorn-41700.exe (PID: 4920)
- Unicorn-13635.exe (PID: 2644)
- Unicorn-32712.exe (PID: 5984)
- Unicorn-50200.exe (PID: 4464)
- Unicorn-36826.exe (PID: 8364)
- Unicorn-5525.exe (PID: 2392)
- Unicorn-17645.exe (PID: 8128)
- Unicorn-25696.exe (PID: 5436)
- Unicorn-5010.exe (PID: 1040)
- Unicorn-29588.exe (PID: 5964)
- Unicorn-35452.exe (PID: 7644)
- Unicorn-58014.exe (PID: 5776)
- Unicorn-47424.exe (PID: 8260)
- Unicorn-25120.exe (PID: 7960)
- Unicorn-10210.exe (PID: 8876)
- Unicorn-62748.exe (PID: 8920)
- Unicorn-34400.exe (PID: 5048)
- Unicorn-34226.exe (PID: 1240)
- Unicorn-27388.exe (PID: 8464)
- Unicorn-37284.exe (PID: 8728)
- Unicorn-37739.exe (PID: 2320)
- Unicorn-24735.exe (PID: 8228)
- Unicorn-9442.exe (PID: 8708)
- Unicorn-42726.exe (PID: 1012)
- Unicorn-42956.exe (PID: 8372)
- Unicorn-10615.exe (PID: 9016)
- Unicorn-49603.exe (PID: 5260)
- Unicorn-48198.exe (PID: 8544)
- Unicorn-32432.exe (PID: 8628)
- Unicorn-2758.exe (PID: 8480)
- Unicorn-19535.exe (PID: 1056)
- Unicorn-8503.exe (PID: 8752)
- Unicorn-21310.exe (PID: 8788)
- Unicorn-20268.exe (PID: 1276)
- Unicorn-38310.exe (PID: 6080)
- Unicorn-51331.exe (PID: 7552)
- Unicorn-43096.exe (PID: 9104)
- Unicorn-10402.exe (PID: 8824)
- Unicorn-36670.exe (PID: 4200)
- Unicorn-5955.exe (PID: 9168)
- Unicorn-62068.exe (PID: 7976)
- Unicorn-27964.exe (PID: 8400)
- Unicorn-32240.exe (PID: 8672)
- Unicorn-58346.exe (PID: 1616)
- Unicorn-56448.exe (PID: 8116)
- Unicorn-29321.exe (PID: 7736)
- Unicorn-21118.exe (PID: 8500)
- Unicorn-60392.exe (PID: 7576)
- Unicorn-2062.exe (PID: 8292)
- Unicorn-36007.exe (PID: 9236)
- Unicorn-54942.exe (PID: 9856)
- Unicorn-52395.exe (PID: 7392)
- Unicorn-7595.exe (PID: 9916)
- Unicorn-27341.exe (PID: 9228)
- Unicorn-52712.exe (PID: 9884)
- Unicorn-4995.exe (PID: 8656)
- Unicorn-49027.exe (PID: 8120)
- Unicorn-15555.exe (PID: 8780)
- Unicorn-57687.exe (PID: 8852)
- Unicorn-38878.exe (PID: 8452)
- Unicorn-49728.exe (PID: 8700)
- Unicorn-698.exe (PID: 8472)
- Unicorn-41752.exe (PID: 8680)
- Unicorn-50392.exe (PID: 7572)
- Unicorn-3407.exe (PID: 9268)
- Unicorn-31280.exe (PID: 8220)
- Unicorn-9826.exe (PID: 8984)
- Unicorn-40164.exe (PID: 9300)
- Unicorn-31590.exe (PID: 9028)
- Unicorn-12461.exe (PID: 9068)
- Unicorn-43916.exe (PID: 8432)
- Unicorn-10527.exe (PID: 9804)
- Unicorn-60755.exe (PID: 8928)
- Unicorn-9375.exe (PID: 9420)
- Unicorn-6998.exe (PID: 9824)
- Unicorn-6827.exe (PID: 9720)
- Unicorn-38628.exe (PID: 8280)
- Unicorn-57216.exe (PID: 4068)
- Unicorn-18208.exe (PID: 9140)
- Unicorn-15099.exe (PID: 11172)
- Unicorn-62727.exe (PID: 8688)
- Unicorn-61958.exe (PID: 9768)
- Unicorn-3547.exe (PID: 10448)
- Unicorn-62608.exe (PID: 6652)
- Unicorn-55171.exe (PID: 11180)
- Unicorn-45779.exe (PID: 11188)
- Unicorn-54646.exe (PID: 732)
- Unicorn-54772.exe (PID: 8812)
- Unicorn-13459.exe (PID: 9432)
- Unicorn-15171.exe (PID: 8896)
- Unicorn-38502.exe (PID: 7220)
- Unicorn-40719.exe (PID: 8492)
- Unicorn-55924.exe (PID: 9044)
- Unicorn-25525.exe (PID: 9648)
- Unicorn-40372.exe (PID: 11420)
- Unicorn-44139.exe (PID: 9784)
- Unicorn-43200.exe (PID: 9812)
- Unicorn-44611.exe (PID: 7764)
- Unicorn-3.exe (PID: 10224)
- Unicorn-9531.exe (PID: 12304)
- Unicorn-36511.exe (PID: 6708)
- Unicorn-12271.exe (PID: 2616)
- Unicorn-38518.exe (PID: 2968)
- Unicorn-44632.exe (PID: 7580)
- Unicorn-195.exe (PID: 10172)
- Unicorn-45312.exe (PID: 10148)
- Unicorn-6421.exe (PID: 11544)
- Unicorn-31221.exe (PID: 11384)
- Unicorn-19337.exe (PID: 10328)
- Unicorn-30298.exe (PID: 10288)
- Unicorn-35312.exe (PID: 9148)
- Unicorn-50304.exe (PID: 8940)
- Unicorn-3053.exe (PID: 9468)
- Unicorn-20232.exe (PID: 6940)
- Unicorn-43304.exe (PID: 10700)
- Unicorn-50600.exe (PID: 9680)
- Unicorn-32515.exe (PID: 11232)
- Unicorn-42307.exe (PID: 10552)
- Unicorn-31581.exe (PID: 10416)
- Unicorn-3215.exe (PID: 7196)
- Unicorn-39094.exe (PID: 9664)
- Unicorn-27087.exe (PID: 11396)
- Unicorn-11399.exe (PID: 10836)
- Unicorn-4745.exe (PID: 12784)
- Unicorn-28644.exe (PID: 9384)
- Unicorn-50792.exe (PID: 9640)
- Unicorn-22706.exe (PID: 10568)
- Unicorn-39343.exe (PID: 10316)
- Unicorn-2441.exe (PID: 7900)
- Unicorn-8969.exe (PID: 11156)
- Unicorn-6613.exe (PID: 11488)
- Unicorn-52972.exe (PID: 13904)
- Unicorn-27557.exe (PID: 9504)
- Unicorn-16024.exe (PID: 14004)
- Unicorn-61140.exe (PID: 13924)
- Unicorn-57927.exe (PID: 10204)
- Unicorn-3769.exe (PID: 10536)
- Unicorn-48873.exe (PID: 9480)
- Unicorn-5757.exe (PID: 14976)
- Unicorn-5757.exe (PID: 14968)
- Unicorn-47667.exe (PID: 14960)
- Unicorn-26236.exe (PID: 10560)
- Unicorn-40718.exe (PID: 10464)
- Unicorn-4581.exe (PID: 11748)
- Unicorn-33302.exe (PID: 9400)
- Unicorn-39908.exe (PID: 16548)
- Unicorn-32294.exe (PID: 16564)
Executes application which crashes
- Unicorn-24549.exe (PID: 7584)
INFO
Checks supported languages
- 1 (1240).exe (PID: 7336)
- Unicorn-45293.exe (PID: 7516)
- Unicorn-56655.exe (PID: 7944)
- Unicorn-15259.exe (PID: 7928)
- Unicorn-13095.exe (PID: 8156)
- Unicorn-50044.exe (PID: 8180)
- Unicorn-30178.exe (PID: 8172)
- Unicorn-52082.exe (PID: 8188)
- Unicorn-31700.exe (PID: 2152)
- Unicorn-52867.exe (PID: 4688)
- Unicorn-60096.exe (PID: 744)
- Unicorn-20133.exe (PID: 7000)
- Unicorn-37630.exe (PID: 7236)
- Unicorn-39411.exe (PID: 5132)
- Unicorn-1139.exe (PID: 4776)
- Unicorn-34558.exe (PID: 2136)
- Unicorn-44315.exe (PID: 7244)
- Unicorn-3177.exe (PID: 7292)
- Unicorn-22712.exe (PID: 1512)
- Unicorn-9307.exe (PID: 7300)
- Unicorn-50703.exe (PID: 7328)
- Unicorn-37002.exe (PID: 1676)
- Unicorn-17673.exe (PID: 5176)
- Unicorn-60080.exe (PID: 1764)
- Unicorn-40479.exe (PID: 5216)
- Unicorn-64107.exe (PID: 7260)
- Unicorn-10267.exe (PID: 5404)
- Unicorn-43132.exe (PID: 3884)
- Unicorn-1907.exe (PID: 1672)
- Unicorn-48368.exe (PID: 4120)
- Unicorn-5306.exe (PID: 6712)
- Unicorn-37424.exe (PID: 4408)
- Unicorn-53568.exe (PID: 1452)
- Unicorn-14381.exe (PID: 2244)
- Unicorn-8814.exe (PID: 4380)
- Unicorn-21450.exe (PID: 5344)
- Unicorn-49292.exe (PID: 6744)
- Unicorn-55606.exe (PID: 6740)
- Unicorn-42830.exe (PID: 4892)
- Unicorn-61351.exe (PID: 7492)
- Unicorn-9027.exe (PID: 7500)
- Unicorn-50444.exe (PID: 2600)
- Unicorn-9582.exe (PID: 7368)
- Unicorn-61855.exe (PID: 1244)
- Unicorn-45976.exe (PID: 4428)
- Unicorn-33532.exe (PID: 2148)
- Unicorn-41700.exe (PID: 4920)
- Unicorn-5525.exe (PID: 2392)
- Unicorn-8325.exe (PID: 904)
- Unicorn-59380.exe (PID: 4724)
- Unicorn-23178.exe (PID: 5380)
- Unicorn-30600.exe (PID: 5956)
- Unicorn-61418.exe (PID: 7816)
- Unicorn-10734.exe (PID: 7776)
- Unicorn-31730.exe (PID: 7744)
- Unicorn-2971.exe (PID: 7868)
- Unicorn-56811.exe (PID: 7872)
- Unicorn-31368.exe (PID: 7924)
- Unicorn-3739.exe (PID: 6456)
- Unicorn-29321.exe (PID: 7736)
- Unicorn-35452.exe (PID: 7644)
- Unicorn-15394.exe (PID: 7668)
- Unicorn-23968.exe (PID: 4220)
- Unicorn-17645.exe (PID: 8128)
- Unicorn-44943.exe (PID: 8076)
- Unicorn-36220.exe (PID: 8068)
- Unicorn-23776.exe (PID: 8060)
- Unicorn-56448.exe (PID: 8116)
- Unicorn-49027.exe (PID: 8120)
- Unicorn-64351.exe (PID: 8092)
- Unicorn-20246.exe (PID: 8100)
- Unicorn-25696.exe (PID: 5436)
- Unicorn-20268.exe (PID: 1276)
- Unicorn-49603.exe (PID: 5260)
- Unicorn-32712.exe (PID: 5984)
- Unicorn-57216.exe (PID: 4068)
- Unicorn-37180.exe (PID: 1388)
- Unicorn-50200.exe (PID: 4464)
- Unicorn-38310.exe (PID: 6080)
- Unicorn-29588.exe (PID: 5964)
- Unicorn-34226.exe (PID: 1240)
- Unicorn-62068.exe (PID: 7976)
- Unicorn-25120.exe (PID: 7960)
- Unicorn-37739.exe (PID: 2320)
- Unicorn-19535.exe (PID: 1056)
- Unicorn-36670.exe (PID: 4200)
- Unicorn-34400.exe (PID: 5048)
- Unicorn-31280.exe (PID: 8220)
- Unicorn-24735.exe (PID: 8228)
- Unicorn-47424.exe (PID: 8260)
- Unicorn-36826.exe (PID: 8364)
- Unicorn-51331.exe (PID: 7552)
- Unicorn-13635.exe (PID: 2644)
- Unicorn-58014.exe (PID: 5776)
- Unicorn-5010.exe (PID: 1040)
- Unicorn-48198.exe (PID: 8544)
- Unicorn-10210.exe (PID: 8876)
- Unicorn-15171.exe (PID: 8896)
- Unicorn-32432.exe (PID: 8628)
- Unicorn-698.exe (PID: 8472)
- Unicorn-62748.exe (PID: 8920)
- Unicorn-50392.exe (PID: 7572)
- Unicorn-32240.exe (PID: 8672)
- Unicorn-41752.exe (PID: 8680)
- Unicorn-62727.exe (PID: 8688)
- Unicorn-49728.exe (PID: 8700)
- Unicorn-37284.exe (PID: 8728)
- Unicorn-9442.exe (PID: 8708)
- Unicorn-38878.exe (PID: 8452)
- Unicorn-43916.exe (PID: 8432)
- Unicorn-4995.exe (PID: 8656)
- Unicorn-42956.exe (PID: 8372)
- Unicorn-8503.exe (PID: 8752)
- Unicorn-15555.exe (PID: 8780)
- Unicorn-21310.exe (PID: 8788)
- Unicorn-57687.exe (PID: 8852)
- Unicorn-27964.exe (PID: 8400)
- Unicorn-19796.exe (PID: 8392)
- Unicorn-27388.exe (PID: 8464)
- Unicorn-42799.exe (PID: 8760)
- Unicorn-10615.exe (PID: 9016)
- Unicorn-12461.exe (PID: 9068)
- Unicorn-9826.exe (PID: 8984)
- Unicorn-54772.exe (PID: 8812)
- Unicorn-18208.exe (PID: 9140)
- Unicorn-43096.exe (PID: 9104)
- Unicorn-38628.exe (PID: 8280)
- Unicorn-31590.exe (PID: 9028)
- Unicorn-2062.exe (PID: 8292)
- Unicorn-2758.exe (PID: 8480)
- Unicorn-10402.exe (PID: 8824)
- Unicorn-50304.exe (PID: 8940)
- Unicorn-5955.exe (PID: 9168)
- Unicorn-60755.exe (PID: 8928)
- Unicorn-52395.exe (PID: 7392)
- Unicorn-43480.exe (PID: 9056)
- Unicorn-35312.exe (PID: 9148)
- Unicorn-55924.exe (PID: 9044)
- Unicorn-38502.exe (PID: 7220)
- Unicorn-54646.exe (PID: 732)
- Unicorn-44632.exe (PID: 7580)
- Unicorn-3407.exe (PID: 9268)
- Unicorn-54471.exe (PID: 9288)
- Unicorn-3215.exe (PID: 7196)
- Unicorn-27341.exe (PID: 9228)
- Unicorn-36007.exe (PID: 9236)
- Unicorn-16406.exe (PID: 9244)
- Unicorn-44611.exe (PID: 7764)
- Unicorn-8342.exe (PID: 9324)
- Unicorn-54942.exe (PID: 9856)
- Unicorn-48873.exe (PID: 9480)
- Unicorn-13267.exe (PID: 9488)
- Unicorn-52712.exe (PID: 9884)
- Unicorn-27557.exe (PID: 9504)
- Unicorn-9546.exe (PID: 9536)
- Unicorn-18312.exe (PID: 9576)
- Unicorn-2852.exe (PID: 9600)
- Unicorn-50792.exe (PID: 9640)
- Unicorn-25525.exe (PID: 9648)
- Unicorn-39094.exe (PID: 9664)
- Unicorn-50600.exe (PID: 9680)
- Unicorn-48695.exe (PID: 9360)
- Unicorn-9375.exe (PID: 9420)
- Unicorn-33302.exe (PID: 9400)
- Unicorn-61958.exe (PID: 9768)
- Unicorn-44139.exe (PID: 9784)
- Unicorn-10527.exe (PID: 9804)
- Unicorn-51560.exe (PID: 9792)
- Unicorn-6827.exe (PID: 9720)
- Unicorn-28644.exe (PID: 9384)
- Unicorn-42048.exe (PID: 9452)
- Unicorn-48855.exe (PID: 9524)
- Unicorn-41014.exe (PID: 9924)
- Unicorn-16318.exe (PID: 9980)
- Unicorn-43200.exe (PID: 9812)
- Unicorn-62726.exe (PID: 10016)
- Unicorn-48991.exe (PID: 10024)
- Unicorn-15571.exe (PID: 9992)
- Unicorn-56339.exe (PID: 10000)
- Unicorn-64580.exe (PID: 10072)
- Unicorn-60496.exe (PID: 10060)
- Unicorn-12639.exe (PID: 10120)
- Unicorn-45312.exe (PID: 10148)
- Unicorn-13459.exe (PID: 9432)
- Unicorn-57927.exe (PID: 10204)
- Unicorn-3.exe (PID: 10224)
- Unicorn-62608.exe (PID: 6652)
- Unicorn-59926.exe (PID: 10008)
- Unicorn-19337.exe (PID: 10328)
- Unicorn-62224.exe (PID: 10356)
- Unicorn-33444.exe (PID: 10364)
- Unicorn-579.exe (PID: 10380)
- Unicorn-31581.exe (PID: 10416)
- Unicorn-22344.exe (PID: 10432)
- Unicorn-45779.exe (PID: 11188)
- Unicorn-49899.exe (PID: 10276)
- Unicorn-3769.exe (PID: 10536)
- Unicorn-3547.exe (PID: 11028)
- Unicorn-7486.exe (PID: 11148)
- Unicorn-30298.exe (PID: 10288)
- Unicorn-60771.exe (PID: 11140)
- Unicorn-11399.exe (PID: 10836)
- Unicorn-3547.exe (PID: 10448)
- Unicorn-55571.exe (PID: 10576)
- Unicorn-22706.exe (PID: 10568)
- Unicorn-26982.exe (PID: 10456)
- Unicorn-42307.exe (PID: 10592)
- Unicorn-29581.exe (PID: 10888)
- Unicorn-5202.exe (PID: 10792)
- Unicorn-55571.exe (PID: 10544)
- Unicorn-38104.exe (PID: 10664)
- Unicorn-40718.exe (PID: 10464)
- Unicorn-34958.exe (PID: 10584)
- Unicorn-29381.exe (PID: 2084)
- Unicorn-32588.exe (PID: 11244)
- Unicorn-18421.exe (PID: 11164)
- Unicorn-27087.exe (PID: 11396)
- Unicorn-3350.exe (PID: 11312)
- Unicorn-55364.exe (PID: 10784)
- Unicorn-38317.exe (PID: 11524)
- Unicorn-63075.exe (PID: 11836)
- Unicorn-18150.exe (PID: 11788)
- Unicorn-32845.exe (PID: 11916)
- Unicorn-28953.exe (PID: 11880)
- Unicorn-36442.exe (PID: 10528)
- Unicorn-55848.exe (PID: 12056)
- Unicorn-60984.exe (PID: 12076)
- Unicorn-491.exe (PID: 11480)
- Unicorn-30105.exe (PID: 12268)
- Unicorn-50652.exe (PID: 11680)
- Unicorn-58886.exe (PID: 12256)
- Unicorn-13577.exe (PID: 11300)
- Unicorn-31221.exe (PID: 11384)
- Unicorn-8306.exe (PID: 7884)
- Unicorn-2441.exe (PID: 7900)
- Unicorn-54243.exe (PID: 7876)
- Unicorn-19900.exe (PID: 11336)
- Unicorn-56111.exe (PID: 10740)
- Unicorn-54824.exe (PID: 10600)
- Unicorn-35690.exe (PID: 12456)
- Unicorn-58711.exe (PID: 12488)
- Unicorn-45202.exe (PID: 12528)
- Unicorn-51067.exe (PID: 12556)
- Unicorn-44818.exe (PID: 12656)
- Unicorn-63008.exe (PID: 12684)
- Unicorn-62306.exe (PID: 12736)
- Unicorn-2707.exe (PID: 12764)
- Unicorn-10683.exe (PID: 12816)
- Unicorn-43091.exe (PID: 12828)
- Unicorn-60247.exe (PID: 12848)
- Unicorn-52972.exe (PID: 13904)
- Unicorn-4745.exe (PID: 12784)
- Unicorn-16474.exe (PID: 12932)
- Unicorn-51914.exe (PID: 12960)
- Unicorn-24856.exe (PID: 13060)
- Unicorn-61140.exe (PID: 13924)
- Unicorn-45883.exe (PID: 6960)
- Unicorn-29302.exe (PID: 13192)
- Unicorn-7943.exe (PID: 13172)
- Unicorn-42706.exe (PID: 13220)
- Unicorn-13926.exe (PID: 13236)
- Unicorn-12914.exe (PID: 13292)
- Unicorn-32640.exe (PID: 13164)
- Unicorn-49168.exe (PID: 13148)
- Unicorn-33408.exe (PID: 4784)
- Unicorn-41576.exe (PID: 13316)
- Unicorn-43282.exe (PID: 13408)
- Unicorn-42344.exe (PID: 13468)
- Unicorn-12530.exe (PID: 13356)
- Unicorn-6526.exe (PID: 13396)
- Unicorn-47544.exe (PID: 13536)
- Unicorn-34908.exe (PID: 13604)
- Unicorn-5757.exe (PID: 14976)
- Unicorn-64456.exe (PID: 13724)
- Unicorn-34293.exe (PID: 12924)
- Unicorn-61124.exe (PID: 12176)
- Unicorn-48903.exe (PID: 14204)
- Unicorn-49848.exe (PID: 14120)
- Unicorn-61695.exe (PID: 14020)
- Unicorn-24000.exe (PID: 14064)
- Unicorn-28830.exe (PID: 14052)
- Unicorn-43038.exe (PID: 14168)
- Unicorn-29302.exe (PID: 14156)
- Unicorn-29302.exe (PID: 14044)
- Unicorn-51524.exe (PID: 13776)
- Unicorn-53475.exe (PID: 14140)
- Unicorn-5670.exe (PID: 14572)
- Unicorn-9013.exe (PID: 14456)
- Unicorn-3645.exe (PID: 14384)
- Unicorn-29812.exe (PID: 14512)
- Unicorn-46703.exe (PID: 14544)
- Unicorn-9397.exe (PID: 14788)
- Unicorn-12197.exe (PID: 14764)
- Unicorn-27959.exe (PID: 14936)
- Unicorn-63999.exe (PID: 14772)
- Unicorn-27648.exe (PID: 14828)
- Unicorn-27959.exe (PID: 15024)
- Unicorn-3645.exe (PID: 14360)
- Unicorn-845.exe (PID: 14344)
- Unicorn-3645.exe (PID: 14376)
- Unicorn-845.exe (PID: 14368)
- Unicorn-4775.exe (PID: 15640)
- Unicorn-5757.exe (PID: 14992)
- Unicorn-48903.exe (PID: 14256)
- Unicorn-55447.exe (PID: 7528)
- Unicorn-32294.exe (PID: 16564)
- Unicorn-50712.exe (PID: 15652)
- Unicorn-39908.exe (PID: 16548)
Reads the computer name
- 1 (1240).exe (PID: 7336)
- Unicorn-45293.exe (PID: 7516)
- Unicorn-15259.exe (PID: 7928)
- Unicorn-56655.exe (PID: 7944)
- Unicorn-31700.exe (PID: 2152)
- Unicorn-13095.exe (PID: 8156)
- Unicorn-30178.exe (PID: 8172)
- Unicorn-50044.exe (PID: 8180)
- Unicorn-52082.exe (PID: 8188)
- Unicorn-52867.exe (PID: 4688)
- Unicorn-44315.exe (PID: 7244)
- Unicorn-20133.exe (PID: 7000)
- Unicorn-60096.exe (PID: 744)
- Unicorn-39411.exe (PID: 5132)
- Unicorn-37630.exe (PID: 7236)
- Unicorn-9307.exe (PID: 7300)
- Unicorn-50703.exe (PID: 7328)
- Unicorn-3177.exe (PID: 7292)
- Unicorn-1139.exe (PID: 4776)
- Unicorn-34558.exe (PID: 2136)
- Unicorn-1907.exe (PID: 5332)
- Unicorn-17673.exe (PID: 5176)
- Unicorn-43132.exe (PID: 3884)
- Unicorn-22712.exe (PID: 1512)
- Unicorn-37002.exe (PID: 1676)
- Unicorn-60080.exe (PID: 1764)
- Unicorn-1907.exe (PID: 1672)
- Unicorn-10267.exe (PID: 5404)
- Unicorn-64107.exe (PID: 7260)
- Unicorn-48368.exe (PID: 4120)
- Unicorn-5306.exe (PID: 6712)
- Unicorn-37424.exe (PID: 4408)
- Unicorn-21450.exe (PID: 5344)
- Unicorn-49292.exe (PID: 6744)
- Unicorn-53568.exe (PID: 1452)
- Unicorn-20512.exe (PID: 680)
- Unicorn-14381.exe (PID: 2244)
- Unicorn-8814.exe (PID: 4380)
- Unicorn-55606.exe (PID: 6740)
- Unicorn-20246.exe (PID: 1072)
- Unicorn-9027.exe (PID: 7500)
- Unicorn-10734.exe (PID: 7776)
- Unicorn-61351.exe (PID: 7492)
- Unicorn-2203.exe (PID: 6132)
- Unicorn-33532.exe (PID: 2148)
- Unicorn-31730.exe (PID: 7744)
- Unicorn-15394.exe (PID: 7668)
- Unicorn-64351.exe (PID: 8092)
- Unicorn-61418.exe (PID: 7816)
- Unicorn-50444.exe (PID: 2600)
- Unicorn-3739.exe (PID: 6456)
- Unicorn-61855.exe (PID: 1244)
- Unicorn-23776.exe (PID: 8060)
- Unicorn-41700.exe (PID: 4920)
- Unicorn-36220.exe (PID: 8068)
- Unicorn-9582.exe (PID: 7368)
- Unicorn-2971.exe (PID: 7868)
- Unicorn-37180.exe (PID: 1388)
- Unicorn-23178.exe (PID: 5380)
- Unicorn-44943.exe (PID: 8076)
- Unicorn-35452.exe (PID: 7644)
- Unicorn-31368.exe (PID: 7924)
- Unicorn-59380.exe (PID: 4724)
- Unicorn-8325.exe (PID: 904)
- Unicorn-13635.exe (PID: 2644)
- Unicorn-32712.exe (PID: 5984)
- Unicorn-50200.exe (PID: 4464)
- Unicorn-56448.exe (PID: 8116)
- Unicorn-17645.exe (PID: 8128)
- Unicorn-36826.exe (PID: 8364)
- Unicorn-5525.exe (PID: 2392)
- Unicorn-25696.exe (PID: 5436)
- Unicorn-25120.exe (PID: 7960)
- Unicorn-62748.exe (PID: 8920)
- Unicorn-20246.exe (PID: 8100)
- Unicorn-10210.exe (PID: 8876)
- Unicorn-34400.exe (PID: 5048)
- Unicorn-15171.exe (PID: 8896)
- Unicorn-34226.exe (PID: 1240)
- Unicorn-27388.exe (PID: 8464)
- Unicorn-37284.exe (PID: 8728)
- Unicorn-9442.exe (PID: 8708)
- Unicorn-42726.exe (PID: 1012)
- Unicorn-48198.exe (PID: 8544)
- Unicorn-49027.exe (PID: 8120)
- Unicorn-10615.exe (PID: 9016)
- Unicorn-49603.exe (PID: 5260)
- Unicorn-38310.exe (PID: 6080)
- Unicorn-2758.exe (PID: 8480)
- Unicorn-32432.exe (PID: 8628)
- Unicorn-21310.exe (PID: 8788)
- Unicorn-20268.exe (PID: 1276)
- Unicorn-19535.exe (PID: 1056)
- Unicorn-62068.exe (PID: 7976)
- Unicorn-10402.exe (PID: 8824)
- Unicorn-43096.exe (PID: 9104)
- Unicorn-2062.exe (PID: 8292)
- Unicorn-27964.exe (PID: 8400)
- Unicorn-32240.exe (PID: 8672)
- Unicorn-21118.exe (PID: 8500)
- Unicorn-60392.exe (PID: 7576)
- Unicorn-38878.exe (PID: 8452)
- Unicorn-29321.exe (PID: 7736)
- Unicorn-52395.exe (PID: 7392)
- Unicorn-54942.exe (PID: 9856)
- Unicorn-52712.exe (PID: 9884)
- Unicorn-7595.exe (PID: 9916)
- Unicorn-27341.exe (PID: 9228)
- Unicorn-15555.exe (PID: 8780)
- Unicorn-57687.exe (PID: 8852)
- Unicorn-49728.exe (PID: 8700)
- Unicorn-698.exe (PID: 8472)
- Unicorn-6827.exe (PID: 9720)
- Unicorn-50392.exe (PID: 7572)
- Unicorn-41752.exe (PID: 8680)
- Unicorn-40164.exe (PID: 9300)
- Unicorn-38628.exe (PID: 8280)
- Unicorn-12461.exe (PID: 9068)
- Unicorn-31590.exe (PID: 9028)
- Unicorn-43916.exe (PID: 8432)
- Unicorn-10527.exe (PID: 9804)
- Unicorn-6998.exe (PID: 9824)
- Unicorn-60755.exe (PID: 8928)
- Unicorn-57216.exe (PID: 4068)
- Unicorn-62727.exe (PID: 8688)
- Unicorn-15099.exe (PID: 11172)
- Unicorn-62608.exe (PID: 6652)
- Unicorn-3547.exe (PID: 10448)
- Unicorn-54772.exe (PID: 8812)
- Unicorn-54646.exe (PID: 732)
- Unicorn-40719.exe (PID: 8492)
- Unicorn-26236.exe (PID: 10560)
- Unicorn-27087.exe (PID: 11396)
- Unicorn-3.exe (PID: 10224)
- Unicorn-12271.exe (PID: 2616)
- Unicorn-19337.exe (PID: 10328)
- Unicorn-3053.exe (PID: 9468)
- Unicorn-11399.exe (PID: 10836)
- Unicorn-30298.exe (PID: 10288)
- Unicorn-32515.exe (PID: 11232)
- Unicorn-31581.exe (PID: 10416)
- Unicorn-42624.exe (PID: 9628)
- Unicorn-4745.exe (PID: 12784)
- Unicorn-50792.exe (PID: 9640)
- Unicorn-52972.exe (PID: 13904)
- Unicorn-27557.exe (PID: 9504)
- Unicorn-16024.exe (PID: 14004)
- Unicorn-3769.exe (PID: 10536)
- Unicorn-15218.exe (PID: 11888)
- Unicorn-55063.exe (PID: 13592)
- Unicorn-57927.exe (PID: 10204)
- Unicorn-32294.exe (PID: 16564)
- Unicorn-9515.exe (PID: 10632)
- Unicorn-35690.exe (PID: 12456)
- Unicorn-60771.exe (PID: 11140)
- Unicorn-463.exe (PID: 15248)
- Unicorn-22656.exe (PID: 13576)
- Unicorn-10579.exe (PID: 11868)
- Unicorn-979.exe (PID: 12372)
The sample compiled with chinese language support
- 1 (1240).exe (PID: 7336)
- Unicorn-36511.exe (PID: 6708)
- Unicorn-52972.exe (PID: 13904)
- Unicorn-27087.exe (PID: 11396)
Create files in a temporary directory
- Unicorn-56655.exe (PID: 7944)
- Unicorn-45293.exe (PID: 7516)
- Unicorn-13095.exe (PID: 8156)
- 1 (1240).exe (PID: 7336)
- Unicorn-31700.exe (PID: 2152)
- Unicorn-50044.exe (PID: 8180)
- Unicorn-39411.exe (PID: 5132)
- Unicorn-20133.exe (PID: 7000)
- Unicorn-30178.exe (PID: 8172)
- Unicorn-1139.exe (PID: 4776)
- Unicorn-9307.exe (PID: 7300)
- Unicorn-1907.exe (PID: 5332)
- Unicorn-15259.exe (PID: 7928)
- Unicorn-22712.exe (PID: 1512)
- Unicorn-17673.exe (PID: 5176)
- Unicorn-37002.exe (PID: 1676)
- Unicorn-40479.exe (PID: 5216)
- Unicorn-60096.exe (PID: 744)
- Unicorn-1907.exe (PID: 1672)
- Unicorn-37630.exe (PID: 7236)
- Unicorn-64107.exe (PID: 7260)
- Unicorn-52082.exe (PID: 8188)
- Unicorn-48368.exe (PID: 4120)
- Unicorn-5306.exe (PID: 6712)
- Unicorn-37424.exe (PID: 4408)
- Unicorn-53568.exe (PID: 1452)
- Unicorn-52867.exe (PID: 4688)
- Unicorn-9027.exe (PID: 7500)
- Unicorn-45976.exe (PID: 4428)
- Unicorn-61351.exe (PID: 7492)
- Unicorn-20246.exe (PID: 1072)
- Unicorn-43132.exe (PID: 3884)
- Unicorn-2203.exe (PID: 6132)
- Unicorn-33532.exe (PID: 2148)
- Unicorn-44315.exe (PID: 7244)
- Unicorn-10734.exe (PID: 7776)
- Unicorn-31730.exe (PID: 7744)
- Unicorn-3177.exe (PID: 7292)
- Unicorn-50444.exe (PID: 2600)
- Unicorn-8814.exe (PID: 4380)
- Unicorn-3739.exe (PID: 6456)
- Unicorn-34558.exe (PID: 2136)
- Unicorn-36220.exe (PID: 8068)
- Unicorn-61855.exe (PID: 1244)
- Unicorn-64351.exe (PID: 8092)
- Unicorn-21450.exe (PID: 5344)
- Unicorn-23178.exe (PID: 5380)
- Unicorn-44943.exe (PID: 8076)
- Unicorn-55606.exe (PID: 6740)
- Unicorn-23968.exe (PID: 4220)
- Unicorn-10267.exe (PID: 5404)
- Unicorn-8325.exe (PID: 904)
- Unicorn-30600.exe (PID: 5956)
- Unicorn-41700.exe (PID: 4920)
- Unicorn-50200.exe (PID: 4464)
- Unicorn-56448.exe (PID: 8116)
- Unicorn-25696.exe (PID: 5436)
- Unicorn-49292.exe (PID: 6744)
- Unicorn-58014.exe (PID: 5776)
- Unicorn-42830.exe (PID: 4892)
- Unicorn-5010.exe (PID: 1040)
- Unicorn-10210.exe (PID: 8876)
- Unicorn-27388.exe (PID: 8464)
- Unicorn-56811.exe (PID: 7872)
- Unicorn-37284.exe (PID: 8728)
- Unicorn-37739.exe (PID: 2320)
- Unicorn-9442.exe (PID: 8708)
- Unicorn-42726.exe (PID: 1012)
- Unicorn-24735.exe (PID: 8228)
- Unicorn-10615.exe (PID: 9016)
- Unicorn-13635.exe (PID: 2644)
- Unicorn-48198.exe (PID: 8544)
- Unicorn-49027.exe (PID: 8120)
- Unicorn-23776.exe (PID: 8060)
- Unicorn-2758.exe (PID: 8480)
- Unicorn-32432.exe (PID: 8628)
- Unicorn-19535.exe (PID: 1056)
- Unicorn-8503.exe (PID: 8752)
- Unicorn-20268.exe (PID: 1276)
- Unicorn-38310.exe (PID: 6080)
- Unicorn-36670.exe (PID: 4200)
- Unicorn-15394.exe (PID: 7668)
- Unicorn-43096.exe (PID: 9104)
- Unicorn-50703.exe (PID: 7328)
- Unicorn-37180.exe (PID: 1388)
- Unicorn-62068.exe (PID: 7976)
- Unicorn-27964.exe (PID: 8400)
- Unicorn-32240.exe (PID: 8672)
- Unicorn-31368.exe (PID: 7924)
- Unicorn-58346.exe (PID: 1616)
- Unicorn-9582.exe (PID: 7368)
- Unicorn-21118.exe (PID: 8500)
- Unicorn-17645.exe (PID: 8128)
- Unicorn-36007.exe (PID: 9236)
- Unicorn-52395.exe (PID: 7392)
- Unicorn-52712.exe (PID: 9884)
- Unicorn-14381.exe (PID: 2244)
- Unicorn-2062.exe (PID: 8292)
- Unicorn-54942.exe (PID: 9856)
- Unicorn-59380.exe (PID: 4724)
- Unicorn-27341.exe (PID: 9228)
- Unicorn-60080.exe (PID: 1764)
- Unicorn-57687.exe (PID: 8852)
- Unicorn-15555.exe (PID: 8780)
- Unicorn-698.exe (PID: 8472)
- Unicorn-3407.exe (PID: 9268)
- Unicorn-35452.exe (PID: 7644)
- Unicorn-50392.exe (PID: 7572)
- Unicorn-12461.exe (PID: 9068)
- Unicorn-43916.exe (PID: 8432)
- Unicorn-60755.exe (PID: 8928)
- Unicorn-38628.exe (PID: 8280)
- Unicorn-6998.exe (PID: 9824)
- Unicorn-47424.exe (PID: 8260)
- Unicorn-32712.exe (PID: 5984)
- Unicorn-9375.exe (PID: 9420)
- Unicorn-57216.exe (PID: 4068)
- Unicorn-15099.exe (PID: 11172)
- Unicorn-18208.exe (PID: 9140)
- Unicorn-62748.exe (PID: 8920)
- Unicorn-62608.exe (PID: 6652)
- Unicorn-20512.exe (PID: 680)
- Unicorn-55171.exe (PID: 11180)
- Unicorn-45779.exe (PID: 11188)
- Unicorn-15171.exe (PID: 8896)
- Unicorn-38878.exe (PID: 8452)
- Unicorn-54646.exe (PID: 732)
- Unicorn-36826.exe (PID: 8364)
- Unicorn-29588.exe (PID: 5964)
- Unicorn-40372.exe (PID: 11420)
- Unicorn-44611.exe (PID: 7764)
- Unicorn-12271.exe (PID: 2616)
- Unicorn-43304.exe (PID: 10700)
- Unicorn-43200.exe (PID: 9812)
- Unicorn-34226.exe (PID: 1240)
- Unicorn-7595.exe (PID: 9916)
- Unicorn-3.exe (PID: 10224)
- Unicorn-45312.exe (PID: 10148)
- Unicorn-195.exe (PID: 10172)
- Unicorn-38518.exe (PID: 2968)
- Unicorn-19337.exe (PID: 10328)
- Unicorn-35312.exe (PID: 9148)
- Unicorn-50600.exe (PID: 9680)
- Unicorn-32515.exe (PID: 11232)
- Unicorn-20232.exe (PID: 6940)
- Unicorn-42307.exe (PID: 10552)
- Unicorn-31581.exe (PID: 10416)
- Unicorn-9826.exe (PID: 8984)
- Unicorn-39343.exe (PID: 10316)
- Unicorn-49603.exe (PID: 5260)
- Unicorn-61418.exe (PID: 7816)
- Unicorn-22706.exe (PID: 10568)
- Unicorn-27087.exe (PID: 11396)
- Unicorn-29321.exe (PID: 7736)
- Unicorn-8969.exe (PID: 11156)
- Unicorn-4995.exe (PID: 8656)
- Unicorn-16024.exe (PID: 14004)
- Unicorn-52972.exe (PID: 13904)
- Unicorn-47667.exe (PID: 14960)
- Unicorn-55063.exe (PID: 13592)
- Unicorn-5757.exe (PID: 14976)
- Unicorn-5757.exe (PID: 14968)
- Unicorn-10402.exe (PID: 8824)
- Unicorn-5525.exe (PID: 2392)
- Unicorn-25120.exe (PID: 7960)
- Unicorn-33302.exe (PID: 9400)
- Unicorn-54471.exe (PID: 9288)
- Unicorn-4581.exe (PID: 11748)
- Unicorn-26236.exe (PID: 10560)
- Unicorn-2971.exe (PID: 7868)
- Unicorn-40718.exe (PID: 10464)
- Unicorn-13459.exe (PID: 9432)
- Unicorn-39908.exe (PID: 16548)
Creates files or folders in the user directory
- WerFault.exe (PID: 9048)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
677
Monitored processes
542
Malicious processes
90
Suspicious processes
66
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 680 | C:\Users\admin\AppData\Local\Temp\Unicorn-20512.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-20512.exe | Unicorn-22712.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 732 | C:\Users\admin\AppData\Local\Temp\Unicorn-54646.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-54646.exe | Unicorn-1139.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 744 | C:\Users\admin\AppData\Local\Temp\Unicorn-60096.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-60096.exe | Unicorn-30178.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 904 | C:\Users\admin\AppData\Local\Temp\Unicorn-8325.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-8325.exe | Unicorn-30178.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1012 | C:\Users\admin\AppData\Local\Temp\Unicorn-42726.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-42726.exe | Unicorn-60096.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1040 | C:\Users\admin\AppData\Local\Temp\Unicorn-5010.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-5010.exe | Unicorn-13095.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1056 | C:\Users\admin\AppData\Local\Temp\Unicorn-19535.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-19535.exe | Unicorn-40479.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1072 | C:\Users\admin\AppData\Local\Temp\Unicorn-20246.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-20246.exe | Unicorn-15259.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1240 | C:\Users\admin\AppData\Local\Temp\Unicorn-34226.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-34226.exe | Unicorn-43132.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1244 | C:\Users\admin\AppData\Local\Temp\Unicorn-61855.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-61855.exe | Unicorn-56655.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
11 648
Read events
11 648
Write events
0
Delete events
0
Modification events
Executable files
845
Suspicious files
3
Text files
1
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7336 | 1 (1240).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-45293.exe | executable | |
MD5:AE53C9F8BEF0FBB84FFB5AC7DBB27B9C | SHA256:50A7FB2BC0506A0594E744CAF4A078C7C48ECF8BD598F7754BD11A5CC3034267 | |||
| 7516 | Unicorn-45293.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-15259.exe | executable | |
MD5:B4B9833C5B47BC33D32F6313AE6C0191 | SHA256:DF103585EE3D057A706164B31C9B5E7654C5366B0EF799C45CB007E95E55FC03 | |||
| 2152 | Unicorn-31700.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-1139.exe | executable | |
MD5:DF84AB7E47E1486BA30D9134B013885C | SHA256:A4EC88E0BB7681A3E6EA716E7493271E8B632FEF25AF795A96C47DC58794EF62 | |||
| 7336 | 1 (1240).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-39411.exe | executable | |
MD5:E80E3CA8DA88C137E9460942465AA39D | SHA256:96022135C799E52F7F73CAAE86FC2AF6664082F1209CADCD42E055AC8C235A17 | |||
| 8180 | Unicorn-50044.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-60096.exe | executable | |
MD5:6E40F1B25E28A0FEB322D2903813F24B | SHA256:9BD8696E8AAE949C087E9B7C88F2EE43A4BD21ED63B878092212E1460ED4EA87 | |||
| 7944 | Unicorn-56655.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-50044.exe | executable | |
MD5:9454BAA7B458169EC67F3438C5AC9251 | SHA256:43E4E8016507F17A083C21C97895BA8F1761072F7A14213558D735FF3A0549C6 | |||
| 8188 | Unicorn-52082.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-20133.exe | executable | |
MD5:E23CBBAD633FC9FD213E35BCD74F7336 | SHA256:7CA0BC310287B86BAF8F70696819371A84E0A09EAB23D1FE3A3EE3389D3AA07C | |||
| 7944 | Unicorn-56655.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-44315.exe | executable | |
MD5:46931E18478DBFFEB6BBC61E9663F4E8 | SHA256:EF740A3010077B7EB3533A727CFC0909F8F10B5FE9D67CC3464249BB42237C89 | |||
| 7516 | Unicorn-45293.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30178.exe | executable | |
MD5:D99B026FCF573D86A5029B9191FF05CC | SHA256:EE77D91AAB004216391316E77ADE54998490B42ECBA55E877E560D1C8D955A87 | |||
| 7516 | Unicorn-45293.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-37630.exe | executable | |
MD5:1A5F8B02A0F482D952D6063635303939 | SHA256:9F93B8AA1E1D285B5695611EB43B61F643E57C9A7AF3AE3E5D05E59E319F78E1 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
22
DNS requests
16
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
— | — | GET | 200 | 23.48.23.143:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
4336 | SIHClient.exe | GET | 200 | 2.23.246.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
4336 | SIHClient.exe | GET | 200 | 2.23.246.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
7576 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 4.231.128.59:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 23.48.23.143:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
2104 | svchost.exe | 4.231.128.59:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
2112 | svchost.exe | 4.231.128.59:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 40.126.32.138:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
3216 | svchost.exe | 40.115.3.253:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
7576 | backgroundTaskHost.exe | 20.223.35.26:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |