| File name: | 1 (478) |
| Full analysis: | https://app.any.run/tasks/8b49cc44-0844-4b9e-851e-2e1c29395d1b |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 21:45:55 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | 11EC475C8A6E627291C490FC4ABCEE30 |
| SHA1: | FBCB1CBAA98D0F0BDAA132AB8F81190BF441E787 |
| SHA256: | 0A4A6C35F24E5117AD0ABBC7B83010B130725FAD7F160854388AFCCC491F7251 |
| SSDEEP: | 12288:69X2DjHA5sgUtBchakOye5SEx4DxmDsR:69GD05oBch05 |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- 1 (478).exe (PID: 5244)
- Unicorn-45846.exe (PID: 4696)
- Unicorn-11995.exe (PID: 7280)
- Unicorn-26940.exe (PID: 7288)
- Unicorn-15057.exe (PID: 7328)
- Unicorn-54620.exe (PID: 7368)
- Unicorn-48477.exe (PID: 7340)
- Unicorn-10755.exe (PID: 7396)
- Unicorn-43428.exe (PID: 7428)
- Unicorn-4533.exe (PID: 7452)
- Unicorn-6889.exe (PID: 7352)
- Unicorn-47247.exe (PID: 7436)
- Unicorn-33213.exe (PID: 7468)
- Unicorn-26106.exe (PID: 7704)
- Unicorn-60511.exe (PID: 7408)
- Unicorn-51357.exe (PID: 7752)
- Unicorn-28798.exe (PID: 7728)
- Unicorn-30281.exe (PID: 7744)
- Unicorn-51186.exe (PID: 7936)
- Unicorn-62348.exe (PID: 7812)
- Unicorn-54694.exe (PID: 7780)
- Unicorn-19478.exe (PID: 7476)
- Unicorn-20438.exe (PID: 7844)
- Unicorn-46125.exe (PID: 7952)
- Unicorn-17746.exe (PID: 7832)
- Unicorn-42753.exe (PID: 7964)
- Unicorn-24544.exe (PID: 7904)
- Unicorn-25866.exe (PID: 7156)
- Unicorn-2561.exe (PID: 7264)
- Unicorn-43594.exe (PID: 7192)
- Unicorn-62623.exe (PID: 5956)
- Unicorn-42124.exe (PID: 4188)
- Unicorn-54284.exe (PID: 6576)
- Unicorn-49624.exe (PID: 5984)
- Unicorn-48154.exe (PID: 2040)
- Unicorn-29323.exe (PID: 7672)
- Unicorn-1091.exe (PID: 7636)
- Unicorn-2945.exe (PID: 7692)
- Unicorn-25888.exe (PID: 7928)
- Unicorn-13827.exe (PID: 1052)
- Unicorn-45924.exe (PID: 7588)
- Unicorn-58923.exe (PID: 7740)
- Unicorn-59499.exe (PID: 2692)
- Unicorn-17454.exe (PID: 7916)
- Unicorn-55415.exe (PID: 5164)
- Unicorn-59115.exe (PID: 1096)
- Unicorn-36926.exe (PID: 7248)
- Unicorn-47040.exe (PID: 7184)
- Unicorn-48830.exe (PID: 6372)
- Unicorn-5467.exe (PID: 7992)
- Unicorn-27834.exe (PID: 7860)
- Unicorn-16314.exe (PID: 516)
- Unicorn-29871.exe (PID: 7868)
- Unicorn-18896.exe (PID: 8028)
- Unicorn-37310.exe (PID: 4692)
- Unicorn-7221.exe (PID: 7648)
- Unicorn-64020.exe (PID: 6388)
- Unicorn-30526.exe (PID: 7856)
- Unicorn-18644.exe (PID: 5960)
- Unicorn-61622.exe (PID: 8148)
- Unicorn-41778.exe (PID: 7544)
- Unicorn-31834.exe (PID: 5260)
- Unicorn-2260.exe (PID: 8120)
- Unicorn-41756.exe (PID: 8184)
- Unicorn-29504.exe (PID: 7216)
- Unicorn-54606.exe (PID: 7488)
- Unicorn-52468.exe (PID: 7524)
- Unicorn-4637.exe (PID: 4464)
- Unicorn-4253.exe (PID: 8172)
- Unicorn-6675.exe (PID: 1040)
- Unicorn-5467.exe (PID: 7900)
- Unicorn-41564.exe (PID: 7316)
- Unicorn-36110.exe (PID: 4424)
- Unicorn-1876.exe (PID: 7656)
- Unicorn-28493.exe (PID: 6148)
- Unicorn-35748.exe (PID: 7792)
- Unicorn-61820.exe (PID: 7540)
- Unicorn-63250.exe (PID: 8032)
- Unicorn-27388.exe (PID: 4000)
- Unicorn-19146.exe (PID: 1312)
- Unicorn-9965.exe (PID: 8052)
- Unicorn-50693.exe (PID: 7584)
- Unicorn-30003.exe (PID: 7972)
- Unicorn-64891.exe (PID: 7576)
- Unicorn-29142.exe (PID: 7612)
- Unicorn-5763.exe (PID: 8920)
- Unicorn-34906.exe (PID: 8960)
- Unicorn-58306.exe (PID: 7764)
- Unicorn-11793.exe (PID: 8988)
- Unicorn-2068.exe (PID: 8268)
- Unicorn-14917.exe (PID: 8712)
- Unicorn-7688.exe (PID: 8856)
- Unicorn-20730.exe (PID: 9256)
- Unicorn-46246.exe (PID: 7680)
- Unicorn-28732.exe (PID: 8348)
- Unicorn-40216.exe (PID: 7624)
- Unicorn-20756.exe (PID: 8464)
- Unicorn-48576.exe (PID: 8284)
- Unicorn-57512.exe (PID: 8508)
- Unicorn-9680.exe (PID: 8492)
- Unicorn-28659.exe (PID: 8544)
- Unicorn-59650.exe (PID: 8476)
- Unicorn-18954.exe (PID: 7608)
- Unicorn-3683.exe (PID: 7700)
- Unicorn-5597.exe (PID: 8292)
- Unicorn-34531.exe (PID: 2904)
- Unicorn-5379.exe (PID: 8740)
- Unicorn-57678.exe (PID: 8552)
- Unicorn-8119.exe (PID: 8380)
- Unicorn-49318.exe (PID: 9320)
- Unicorn-26467.exe (PID: 8328)
- Unicorn-57988.exe (PID: 8732)
- Unicorn-47808.exe (PID: 6744)
- Unicorn-45556.exe (PID: 10116)
- Unicorn-26765.exe (PID: 9604)
- Unicorn-21052.exe (PID: 10232)
- Unicorn-39038.exe (PID: 8340)
- Unicorn-63542.exe (PID: 8360)
- Unicorn-35018.exe (PID: 1600)
- Unicorn-49079.exe (PID: 8516)
- Unicorn-58664.exe (PID: 9080)
- Unicorn-49894.exe (PID: 9408)
- Unicorn-1466.exe (PID: 8564)
- Unicorn-43100.exe (PID: 8304)
- Unicorn-61959.exe (PID: 8372)
- Unicorn-44850.exe (PID: 9212)
- Unicorn-44148.exe (PID: 9504)
- Unicorn-12176.exe (PID: 9424)
- Unicorn-43418.exe (PID: 7000)
- Unicorn-10039.exe (PID: 9204)
- Unicorn-42904.exe (PID: 9176)
- Unicorn-15830.exe (PID: 9592)
- Unicorn-12971.exe (PID: 8672)
- Unicorn-23470.exe (PID: 8848)
- Unicorn-26018.exe (PID: 8276)
- Unicorn-45213.exe (PID: 9020)
- Unicorn-64620.exe (PID: 8060)
- Unicorn-32624.exe (PID: 8408)
- Unicorn-40356.exe (PID: 9656)
- Unicorn-10361.exe (PID: 9960)
- Unicorn-55824.exe (PID: 9472)
- Unicorn-40958.exe (PID: 9132)
- Unicorn-14486.exe (PID: 8996)
- Unicorn-53916.exe (PID: 10108)
- Unicorn-48887.exe (PID: 9512)
- Unicorn-29412.exe (PID: 10372)
- Unicorn-48628.exe (PID: 11244)
- Unicorn-37158.exe (PID: 9276)
- Unicorn-48436.exe (PID: 5364)
- Unicorn-14507.exe (PID: 9312)
- Unicorn-48633.exe (PID: 10004)
- Unicorn-19848.exe (PID: 3968)
- Unicorn-4113.exe (PID: 10668)
- Unicorn-54288.exe (PID: 8800)
- Unicorn-24435.exe (PID: 11724)
- Unicorn-61356.exe (PID: 11340)
- Unicorn-43843.exe (PID: 9328)
- Unicorn-15069.exe (PID: 8840)
- Unicorn-62250.exe (PID: 10988)
- Unicorn-53154.exe (PID: 10100)
- Unicorn-54169.exe (PID: 9896)
- Unicorn-21524.exe (PID: 8792)
- Unicorn-29198.exe (PID: 10020)
- Unicorn-47927.exe (PID: 9344)
- Unicorn-33781.exe (PID: 1852)
- Unicorn-7107.exe (PID: 9552)
- Unicorn-37926.exe (PID: 9536)
- Unicorn-16406.exe (PID: 9676)
- Unicorn-23422.exe (PID: 9284)
- Unicorn-13983.exe (PID: 12804)
- Unicorn-9799.exe (PID: 12848)
- Unicorn-29863.exe (PID: 12856)
- Unicorn-44954.exe (PID: 10700)
- Unicorn-64175.exe (PID: 10604)
- Unicorn-24752.exe (PID: 9980)
- Unicorn-63708.exe (PID: 9336)
- Unicorn-5628.exe (PID: 10908)
- Unicorn-37554.exe (PID: 11024)
- Unicorn-59422.exe (PID: 14260)
- Unicorn-59157.exe (PID: 14276)
- Unicorn-25795.exe (PID: 14296)
- Unicorn-61662.exe (PID: 9352)
- Unicorn-25203.exe (PID: 6944)
- Unicorn-51740.exe (PID: 9460)
- Unicorn-13905.exe (PID: 9940)
- Unicorn-29478.exe (PID: 8524)
- Unicorn-25712.exe (PID: 10468)
- Unicorn-40387.exe (PID: 11788)
- Unicorn-58192.exe (PID: 10300)
- Unicorn-27746.exe (PID: 8772)
- Unicorn-19670.exe (PID: 9624)
- Unicorn-47692.exe (PID: 10576)
- Unicorn-64393.exe (PID: 1676)
- Unicorn-39204.exe (PID: 9268)
- Unicorn-23356.exe (PID: 10972)
- Unicorn-17330.exe (PID: 2616)
- Unicorn-28836.exe (PID: 9972)
- Unicorn-49401.exe (PID: 10504)
- Unicorn-1570.exe (PID: 2084)
- Unicorn-48991.exe (PID: 11096)
- Unicorn-48462.exe (PID: 10380)
- Unicorn-4834.exe (PID: 11740)
- Unicorn-19722.exe (PID: 9440)
- Unicorn-34622.exe (PID: 11404)
- Unicorn-53292.exe (PID: 14348)
- Unicorn-12691.exe (PID: 10364)
- Unicorn-42982.exe (PID: 11296)
- Unicorn-31065.exe (PID: 1116)
- Unicorn-56692.exe (PID: 9636)
- Unicorn-56671.exe (PID: 9416)
- Unicorn-29962.exe (PID: 11112)
- Unicorn-20786.exe (PID: 12008)
- Unicorn-20346.exe (PID: 9164)
- Unicorn-339.exe (PID: 1180)
- Unicorn-33738.exe (PID: 15324)
- Unicorn-37284.exe (PID: 8428)
- Unicorn-33174.exe (PID: 9232)
- Unicorn-8673.exe (PID: 10768)
- Unicorn-28221.exe (PID: 9028)
- Unicorn-44814.exe (PID: 15316)
- Unicorn-22074.exe (PID: 9932)
- Unicorn-225.exe (PID: 12904)
- Unicorn-28016.exe (PID: 456)
- Unicorn-29500.exe (PID: 8644)
- Unicorn-43536.exe (PID: 11368)
- Unicorn-29748.exe (PID: 10784)
- Unicorn-30027.exe (PID: 12376)
- Unicorn-47621.exe (PID: 11352)
- Unicorn-39526.exe (PID: 10088)
- Unicorn-31781.exe (PID: 12192)
- Unicorn-42022.exe (PID: 11172)
- Unicorn-33448.exe (PID: 10612)
- Unicorn-6417.exe (PID: 11604)
- Unicorn-31999.exe (PID: 11104)
- Unicorn-36018.exe (PID: 10444)
- Unicorn-252.exe (PID: 15140)
- Unicorn-10719.exe (PID: 10792)
- Unicorn-34461.exe (PID: 14480)
- Unicorn-34139.exe (PID: 12876)
- Unicorn-37802.exe (PID: 14896)
- Unicorn-50714.exe (PID: 8256)
- Unicorn-4689.exe (PID: 11052)
- Unicorn-21745.exe (PID: 17920)
- Unicorn-16468.exe (PID: 13396)
- Unicorn-41912.exe (PID: 13344)
- Unicorn-5410.exe (PID: 10540)
- Unicorn-34.exe (PID: 14448)
- Unicorn-32868.exe (PID: 11700)
- Unicorn-60475.exe (PID: 10776)
- Unicorn-11669.exe (PID: 18164)
- Unicorn-58939.exe (PID: 15332)
- Unicorn-11648.exe (PID: 16796)
- Unicorn-23113.exe (PID: 16772)
- Unicorn-14974.exe (PID: 16096)
- Unicorn-61486.exe (PID: 13144)
- Unicorn-23662.exe (PID: 8764)
- Unicorn-9377.exe (PID: 10812)
- Unicorn-34087.exe (PID: 9012)
- Unicorn-14180.exe (PID: 10008)
- Unicorn-40910.exe (PID: 9644)
- Unicorn-13987.exe (PID: 15092)
- Unicorn-19721.exe (PID: 13164)
- Unicorn-11955.exe (PID: 17892)
- Unicorn-18945.exe (PID: 17912)
- Unicorn-28722.exe (PID: 13152)
- Unicorn-23910.exe (PID: 10948)
- Unicorn-40220.exe (PID: 12060)
Starts itself from another location
- Unicorn-45846.exe (PID: 4696)
- 1 (478).exe (PID: 5244)
- Unicorn-11995.exe (PID: 7280)
- Unicorn-15057.exe (PID: 7328)
- Unicorn-54620.exe (PID: 7368)
- Unicorn-6889.exe (PID: 7352)
- Unicorn-26940.exe (PID: 7288)
- Unicorn-60511.exe (PID: 7408)
- Unicorn-48477.exe (PID: 7340)
- Unicorn-4533.exe (PID: 7452)
- Unicorn-43428.exe (PID: 7428)
- Unicorn-19478.exe (PID: 7476)
- Unicorn-33213.exe (PID: 7468)
- Unicorn-26106.exe (PID: 7704)
- Unicorn-10755.exe (PID: 7396)
- Unicorn-28798.exe (PID: 7728)
- Unicorn-51357.exe (PID: 7752)
- Unicorn-30281.exe (PID: 7744)
- Unicorn-47247.exe (PID: 7436)
- Unicorn-54694.exe (PID: 7780)
- Unicorn-51186.exe (PID: 7936)
- Unicorn-24544.exe (PID: 7904)
- Unicorn-46125.exe (PID: 7952)
- Unicorn-42753.exe (PID: 7964)
- Unicorn-17746.exe (PID: 7832)
- Unicorn-25866.exe (PID: 7156)
- Unicorn-2561.exe (PID: 7264)
- Unicorn-43594.exe (PID: 7192)
- Unicorn-62623.exe (PID: 5956)
- Unicorn-42124.exe (PID: 4188)
- Unicorn-49624.exe (PID: 5984)
- Unicorn-54284.exe (PID: 6576)
- Unicorn-48154.exe (PID: 2040)
- Unicorn-29323.exe (PID: 7672)
- Unicorn-2945.exe (PID: 7692)
- Unicorn-1091.exe (PID: 7636)
- Unicorn-25888.exe (PID: 7928)
- Unicorn-13827.exe (PID: 1052)
- Unicorn-45924.exe (PID: 7588)
- Unicorn-58923.exe (PID: 7740)
- Unicorn-59499.exe (PID: 2692)
- Unicorn-55415.exe (PID: 5164)
- Unicorn-17454.exe (PID: 7916)
- Unicorn-59115.exe (PID: 1096)
- Unicorn-36926.exe (PID: 7248)
- Unicorn-47040.exe (PID: 7184)
- Unicorn-5467.exe (PID: 7992)
- Unicorn-48830.exe (PID: 6372)
- Unicorn-27834.exe (PID: 7860)
- Unicorn-29871.exe (PID: 7868)
- Unicorn-37310.exe (PID: 4692)
- Unicorn-7221.exe (PID: 7648)
- Unicorn-18896.exe (PID: 8028)
- Unicorn-30526.exe (PID: 7856)
- Unicorn-64020.exe (PID: 6388)
- Unicorn-18644.exe (PID: 5960)
- Unicorn-20438.exe (PID: 7844)
- Unicorn-61622.exe (PID: 8148)
- Unicorn-31834.exe (PID: 5260)
- Unicorn-41778.exe (PID: 7544)
- Unicorn-41756.exe (PID: 8184)
- Unicorn-29504.exe (PID: 7216)
- Unicorn-54606.exe (PID: 7488)
- Unicorn-2260.exe (PID: 8120)
- Unicorn-52468.exe (PID: 7524)
- Unicorn-4253.exe (PID: 8172)
- Unicorn-62348.exe (PID: 7812)
- Unicorn-6675.exe (PID: 1040)
- Unicorn-5467.exe (PID: 7900)
- Unicorn-1876.exe (PID: 7656)
- Unicorn-41564.exe (PID: 7316)
- Unicorn-36110.exe (PID: 4424)
- Unicorn-61820.exe (PID: 7540)
- Unicorn-28493.exe (PID: 6148)
- Unicorn-35748.exe (PID: 7792)
- Unicorn-19146.exe (PID: 1312)
- Unicorn-27388.exe (PID: 4000)
- Unicorn-63250.exe (PID: 8032)
- Unicorn-9965.exe (PID: 8052)
- Unicorn-50693.exe (PID: 7584)
- Unicorn-64891.exe (PID: 7576)
- Unicorn-29142.exe (PID: 7612)
- Unicorn-30003.exe (PID: 7972)
- Unicorn-5763.exe (PID: 8920)
- Unicorn-34906.exe (PID: 8960)
- Unicorn-11793.exe (PID: 8988)
- Unicorn-46246.exe (PID: 7680)
- Unicorn-28732.exe (PID: 8348)
- Unicorn-14917.exe (PID: 8712)
- Unicorn-20730.exe (PID: 9256)
- Unicorn-2068.exe (PID: 8268)
- Unicorn-57512.exe (PID: 8508)
- Unicorn-40216.exe (PID: 7624)
- Unicorn-48576.exe (PID: 8284)
- Unicorn-28659.exe (PID: 8544)
- Unicorn-9680.exe (PID: 8492)
- Unicorn-20756.exe (PID: 8464)
- Unicorn-59650.exe (PID: 8476)
- Unicorn-16314.exe (PID: 516)
- Unicorn-18954.exe (PID: 7608)
- Unicorn-3683.exe (PID: 7700)
- Unicorn-5597.exe (PID: 8292)
- Unicorn-34531.exe (PID: 2904)
- Unicorn-5379.exe (PID: 8740)
- Unicorn-57678.exe (PID: 8552)
- Unicorn-8119.exe (PID: 8380)
- Unicorn-49318.exe (PID: 9320)
- Unicorn-57988.exe (PID: 8732)
- Unicorn-26467.exe (PID: 8328)
- Unicorn-45556.exe (PID: 10116)
- Unicorn-21052.exe (PID: 10232)
- Unicorn-47808.exe (PID: 6744)
- Unicorn-26765.exe (PID: 9604)
- Unicorn-39038.exe (PID: 8340)
- Unicorn-63542.exe (PID: 8360)
- Unicorn-35018.exe (PID: 1600)
- Unicorn-49079.exe (PID: 8516)
- Unicorn-58664.exe (PID: 9080)
- Unicorn-49894.exe (PID: 9408)
- Unicorn-1466.exe (PID: 8564)
- Unicorn-43100.exe (PID: 8304)
- Unicorn-61959.exe (PID: 8372)
- Unicorn-44850.exe (PID: 9212)
- Unicorn-44148.exe (PID: 9504)
- Unicorn-12176.exe (PID: 9424)
- Unicorn-42904.exe (PID: 9176)
- Unicorn-43418.exe (PID: 7000)
- Unicorn-10039.exe (PID: 9204)
- Unicorn-15830.exe (PID: 9592)
- Unicorn-12971.exe (PID: 8672)
- Unicorn-23470.exe (PID: 8848)
- Unicorn-26018.exe (PID: 8276)
- Unicorn-45213.exe (PID: 9020)
- Unicorn-64620.exe (PID: 8060)
- Unicorn-32624.exe (PID: 8408)
- Unicorn-10361.exe (PID: 9960)
- Unicorn-55824.exe (PID: 9472)
- Unicorn-14486.exe (PID: 8996)
- Unicorn-48887.exe (PID: 9512)
- Unicorn-40958.exe (PID: 9132)
- Unicorn-29412.exe (PID: 10372)
- Unicorn-48628.exe (PID: 11244)
- Unicorn-53916.exe (PID: 10108)
- Unicorn-19848.exe (PID: 3968)
- Unicorn-37158.exe (PID: 9276)
- Unicorn-48436.exe (PID: 5364)
- Unicorn-14507.exe (PID: 9312)
- Unicorn-4113.exe (PID: 10668)
- Unicorn-48633.exe (PID: 10004)
- Unicorn-54288.exe (PID: 8800)
- Unicorn-61356.exe (PID: 11340)
- Unicorn-24435.exe (PID: 11724)
- Unicorn-20346.exe (PID: 9164)
- Unicorn-29198.exe (PID: 10020)
- Unicorn-15069.exe (PID: 8840)
- Unicorn-53154.exe (PID: 10100)
- Unicorn-54169.exe (PID: 9896)
- Unicorn-43843.exe (PID: 9328)
- Unicorn-7107.exe (PID: 9552)
- Unicorn-47927.exe (PID: 9344)
- Unicorn-27746.exe (PID: 8772)
- Unicorn-21524.exe (PID: 8792)
- Unicorn-37926.exe (PID: 9536)
- Unicorn-16406.exe (PID: 9676)
- Unicorn-33781.exe (PID: 1852)
- Unicorn-7688.exe (PID: 8856)
- Unicorn-58306.exe (PID: 7764)
- Unicorn-23422.exe (PID: 9284)
- Unicorn-13983.exe (PID: 12804)
- Unicorn-9799.exe (PID: 12848)
- Unicorn-29863.exe (PID: 12856)
- Unicorn-44954.exe (PID: 10700)
- Unicorn-4637.exe (PID: 4464)
- Unicorn-24752.exe (PID: 9980)
- Unicorn-64175.exe (PID: 10604)
- Unicorn-62250.exe (PID: 10988)
- Unicorn-63708.exe (PID: 9336)
- Unicorn-5628.exe (PID: 10908)
- Unicorn-59422.exe (PID: 14260)
- Unicorn-59157.exe (PID: 14276)
- Unicorn-37554.exe (PID: 11024)
- Unicorn-61662.exe (PID: 9352)
- Unicorn-25795.exe (PID: 14296)
- Unicorn-58939.exe (PID: 15332)
- Unicorn-33738.exe (PID: 15324)
- Unicorn-44814.exe (PID: 15316)
- Unicorn-40356.exe (PID: 9656)
- Unicorn-13905.exe (PID: 9940)
- Unicorn-25203.exe (PID: 6944)
- Unicorn-51740.exe (PID: 9460)
- Unicorn-25712.exe (PID: 10468)
- Unicorn-40387.exe (PID: 11788)
- Unicorn-58192.exe (PID: 10300)
- Unicorn-47692.exe (PID: 10576)
- Unicorn-19670.exe (PID: 9624)
- Unicorn-29478.exe (PID: 8524)
- Unicorn-39204.exe (PID: 9268)
- Unicorn-23356.exe (PID: 10972)
- Unicorn-17330.exe (PID: 2616)
- Unicorn-49401.exe (PID: 10504)
- Unicorn-28836.exe (PID: 9972)
- Unicorn-48991.exe (PID: 11096)
- Unicorn-48462.exe (PID: 10380)
- Unicorn-64009.exe (PID: 10028)
- Unicorn-64393.exe (PID: 1676)
- Unicorn-27222.exe (PID: 12088)
- Unicorn-1570.exe (PID: 2084)
- Unicorn-4834.exe (PID: 11740)
- Unicorn-19722.exe (PID: 9440)
- Unicorn-34622.exe (PID: 11404)
- Unicorn-23662.exe (PID: 8764)
- Unicorn-34033.exe (PID: 9732)
- Unicorn-63734.exe (PID: 8556)
- Unicorn-12691.exe (PID: 10364)
- Unicorn-53292.exe (PID: 14348)
- Unicorn-41912.exe (PID: 13344)
- Unicorn-51202.exe (PID: 9992)
- Unicorn-42982.exe (PID: 11296)
- Unicorn-31065.exe (PID: 1116)
- Unicorn-43536.exe (PID: 11368)
Executes application which crashes
- Unicorn-29168.exe (PID: 12144)
INFO
Checks supported languages
- Unicorn-45846.exe (PID: 4696)
- Unicorn-26940.exe (PID: 7288)
- Unicorn-11995.exe (PID: 7280)
- Unicorn-48477.exe (PID: 7340)
- Unicorn-15057.exe (PID: 7328)
- 1 (478).exe (PID: 5244)
- Unicorn-6889.exe (PID: 7352)
- Unicorn-54620.exe (PID: 7368)
- Unicorn-60511.exe (PID: 7408)
- Unicorn-10755.exe (PID: 7396)
- Unicorn-43428.exe (PID: 7428)
- Unicorn-4533.exe (PID: 7452)
- Unicorn-33213.exe (PID: 7468)
- Unicorn-19478.exe (PID: 7476)
- Unicorn-26106.exe (PID: 7704)
- Unicorn-28798.exe (PID: 7728)
- Unicorn-47247.exe (PID: 7436)
- Unicorn-30281.exe (PID: 7744)
- Unicorn-51357.exe (PID: 7752)
- Unicorn-54694.exe (PID: 7780)
- Unicorn-62348.exe (PID: 7812)
- Unicorn-17746.exe (PID: 7832)
- Unicorn-51186.exe (PID: 7936)
- Unicorn-24544.exe (PID: 7904)
- Unicorn-20438.exe (PID: 7844)
- Unicorn-46125.exe (PID: 7952)
- Unicorn-30003.exe (PID: 7972)
- Unicorn-42753.exe (PID: 7964)
- Unicorn-25866.exe (PID: 7156)
- Unicorn-2561.exe (PID: 7264)
- Unicorn-42124.exe (PID: 4188)
- Unicorn-62623.exe (PID: 5956)
- Unicorn-43594.exe (PID: 7192)
- Unicorn-49624.exe (PID: 5984)
- Unicorn-54284.exe (PID: 6576)
- Unicorn-48154.exe (PID: 2040)
- Unicorn-1091.exe (PID: 7636)
- Unicorn-7221.exe (PID: 7648)
- Unicorn-29323.exe (PID: 7672)
- Unicorn-2945.exe (PID: 7692)
- Unicorn-59115.exe (PID: 1096)
- Unicorn-45924.exe (PID: 7588)
- Unicorn-13827.exe (PID: 1052)
- Unicorn-58923.exe (PID: 7740)
- Unicorn-5467.exe (PID: 7900)
- Unicorn-55415.exe (PID: 5164)
- Unicorn-25888.exe (PID: 7928)
- Unicorn-17454.exe (PID: 7916)
- Unicorn-5467.exe (PID: 7992)
- Unicorn-30526.exe (PID: 7856)
- Unicorn-18896.exe (PID: 8028)
- Unicorn-29871.exe (PID: 7868)
- Unicorn-27834.exe (PID: 7860)
- Unicorn-2260.exe (PID: 8120)
- Unicorn-64020.exe (PID: 6388)
- Unicorn-59499.exe (PID: 2692)
- Unicorn-34531.exe (PID: 2904)
- Unicorn-48830.exe (PID: 6372)
- Unicorn-16314.exe (PID: 516)
- Unicorn-47040.exe (PID: 7184)
- Unicorn-18644.exe (PID: 5960)
- Unicorn-29504.exe (PID: 7216)
- Unicorn-4253.exe (PID: 8172)
- Unicorn-41756.exe (PID: 8184)
- Unicorn-61622.exe (PID: 8148)
- Unicorn-28493.exe (PID: 6148)
- Unicorn-41564.exe (PID: 7316)
- Unicorn-31834.exe (PID: 5260)
- Unicorn-36926.exe (PID: 7248)
- Unicorn-6675.exe (PID: 1040)
- Unicorn-4637.exe (PID: 4464)
- Unicorn-37310.exe (PID: 4692)
- Unicorn-29142.exe (PID: 7612)
- Unicorn-19146.exe (PID: 1312)
- Unicorn-58306.exe (PID: 7764)
- Unicorn-35748.exe (PID: 7792)
- Unicorn-50693.exe (PID: 7584)
- Unicorn-3683.exe (PID: 7700)
- Unicorn-18954.exe (PID: 7608)
- Unicorn-47808.exe (PID: 6744)
- Unicorn-27388.exe (PID: 4000)
- Unicorn-54606.exe (PID: 7488)
- Unicorn-64891.exe (PID: 7576)
- Unicorn-41778.exe (PID: 7544)
- Unicorn-36110.exe (PID: 4424)
- Unicorn-52468.exe (PID: 7524)
- Unicorn-1876.exe (PID: 7656)
- Unicorn-9965.exe (PID: 8052)
- Unicorn-40216.exe (PID: 7624)
- Unicorn-46246.exe (PID: 7680)
- Unicorn-61820.exe (PID: 7540)
- Unicorn-50714.exe (PID: 8256)
- Unicorn-2068.exe (PID: 8268)
- Unicorn-63250.exe (PID: 8032)
- Unicorn-48576.exe (PID: 8284)
- Unicorn-5597.exe (PID: 8292)
- Unicorn-39038.exe (PID: 8340)
- Unicorn-43100.exe (PID: 8304)
- Unicorn-63542.exe (PID: 8360)
- Unicorn-28732.exe (PID: 8348)
- Unicorn-26018.exe (PID: 8276)
- Unicorn-32624.exe (PID: 8408)
- Unicorn-64620.exe (PID: 8060)
- Unicorn-61959.exe (PID: 8372)
- Unicorn-8119.exe (PID: 8380)
- Unicorn-59650.exe (PID: 8476)
- Unicorn-20756.exe (PID: 8464)
- Unicorn-29478.exe (PID: 8524)
- Unicorn-9680.exe (PID: 8492)
- Unicorn-49079.exe (PID: 8516)
- Unicorn-57512.exe (PID: 8508)
- Unicorn-5763.exe (PID: 8920)
- Unicorn-12971.exe (PID: 8672)
- Unicorn-28659.exe (PID: 8544)
- Unicorn-63734.exe (PID: 8556)
- Unicorn-1466.exe (PID: 8564)
- Unicorn-29500.exe (PID: 8644)
- Unicorn-14917.exe (PID: 8712)
- Unicorn-34906.exe (PID: 8960)
- Unicorn-37284.exe (PID: 8428)
- Unicorn-11793.exe (PID: 8988)
- Unicorn-5379.exe (PID: 8740)
- Unicorn-57988.exe (PID: 8732)
- Unicorn-23662.exe (PID: 8764)
- Unicorn-27746.exe (PID: 8772)
- Unicorn-54288.exe (PID: 8800)
- Unicorn-15069.exe (PID: 8840)
- Unicorn-14486.exe (PID: 8996)
- Unicorn-21524.exe (PID: 8792)
- Unicorn-7688.exe (PID: 8856)
- Unicorn-23470.exe (PID: 8848)
- Unicorn-9634.exe (PID: 8636)
- Unicorn-45213.exe (PID: 9020)
- Unicorn-34087.exe (PID: 9012)
- Unicorn-58664.exe (PID: 9080)
- Unicorn-58948.exe (PID: 9004)
- Unicorn-33781.exe (PID: 1852)
- Unicorn-57678.exe (PID: 8552)
- Unicorn-28221.exe (PID: 9028)
- Unicorn-20346.exe (PID: 9164)
- Unicorn-44850.exe (PID: 9212)
- Unicorn-40958.exe (PID: 9132)
- Unicorn-10039.exe (PID: 9204)
- Unicorn-26467.exe (PID: 8328)
- Unicorn-42904.exe (PID: 9176)
- Unicorn-20730.exe (PID: 9256)
- Unicorn-39204.exe (PID: 9268)
- Unicorn-37158.exe (PID: 9276)
- Unicorn-23422.exe (PID: 9284)
- Unicorn-14507.exe (PID: 9312)
- Unicorn-49318.exe (PID: 9320)
- Unicorn-43843.exe (PID: 9328)
- Unicorn-63708.exe (PID: 9336)
- Unicorn-12176.exe (PID: 9424)
- Unicorn-61662.exe (PID: 9352)
- Unicorn-47927.exe (PID: 9344)
- Unicorn-49894.exe (PID: 9408)
- Unicorn-56671.exe (PID: 9416)
- Unicorn-44148.exe (PID: 9504)
- Unicorn-51740.exe (PID: 9460)
- Unicorn-56692.exe (PID: 9636)
- Unicorn-48887.exe (PID: 9512)
- Unicorn-7107.exe (PID: 9552)
- Unicorn-40356.exe (PID: 9656)
- Unicorn-55824.exe (PID: 9472)
- Unicorn-31511.exe (PID: 9432)
- Unicorn-26057.exe (PID: 9668)
- Unicorn-33174.exe (PID: 9232)
- Unicorn-37926.exe (PID: 9536)
- Unicorn-26765.exe (PID: 9604)
- Unicorn-15830.exe (PID: 9592)
- Unicorn-50662.exe (PID: 9616)
- Unicorn-40910.exe (PID: 9644)
- Unicorn-16406.exe (PID: 9676)
- Unicorn-19722.exe (PID: 9440)
- Unicorn-45556.exe (PID: 10116)
- Unicorn-34033.exe (PID: 9732)
- Unicorn-19670.exe (PID: 9624)
- Unicorn-21052.exe (PID: 10232)
- Unicorn-54169.exe (PID: 9896)
- Unicorn-13905.exe (PID: 9940)
- Unicorn-6277.exe (PID: 9952)
- Unicorn-10361.exe (PID: 9960)
- Unicorn-24752.exe (PID: 9980)
- Unicorn-14180.exe (PID: 10008)
- Unicorn-51202.exe (PID: 9992)
- Unicorn-35018.exe (PID: 1600)
- Unicorn-38602.exe (PID: 9924)
- Unicorn-22074.exe (PID: 9932)
- Unicorn-28836.exe (PID: 9972)
- Unicorn-29198.exe (PID: 10020)
- Unicorn-64009.exe (PID: 10028)
- Unicorn-39526.exe (PID: 10088)
- Unicorn-53916.exe (PID: 10108)
- Unicorn-53154.exe (PID: 10100)
- Unicorn-339.exe (PID: 1180)
- Unicorn-17330.exe (PID: 2616)
- Unicorn-28265.exe (PID: 9308)
- Unicorn-31065.exe (PID: 1116)
- Unicorn-64393.exe (PID: 1676)
- Unicorn-46687.exe (PID: 2384)
- Unicorn-46687.exe (PID: 2332)
- Unicorn-48633.exe (PID: 10004)
- Unicorn-36380.exe (PID: 10248)
- Unicorn-43418.exe (PID: 7000)
- Unicorn-12691.exe (PID: 10364)
- Unicorn-35634.exe (PID: 10288)
- Unicorn-58192.exe (PID: 10300)
- Unicorn-29412.exe (PID: 10372)
- Unicorn-48462.exe (PID: 10380)
- Unicorn-37196.exe (PID: 6876)
- Unicorn-44186.exe (PID: 10436)
- Unicorn-36018.exe (PID: 10444)
- Unicorn-64606.exe (PID: 10456)
- Unicorn-25712.exe (PID: 10468)
- Unicorn-49401.exe (PID: 10504)
- Unicorn-2338.exe (PID: 10516)
- Unicorn-5410.exe (PID: 10540)
- Unicorn-1491.exe (PID: 10568)
- Unicorn-47692.exe (PID: 10576)
- Unicorn-1570.exe (PID: 2084)
- Unicorn-64175.exe (PID: 10604)
- Unicorn-4113.exe (PID: 10668)
- Unicorn-44954.exe (PID: 10700)
- Unicorn-28618.exe (PID: 10728)
- Unicorn-33448.exe (PID: 10612)
- Unicorn-14538.exe (PID: 10760)
- Unicorn-22396.exe (PID: 10740)
- Unicorn-48628.exe (PID: 11244)
- Unicorn-55160.exe (PID: 10752)
- Unicorn-8673.exe (PID: 10768)
- Unicorn-60475.exe (PID: 10776)
- Unicorn-10719.exe (PID: 10792)
- Unicorn-19848.exe (PID: 3968)
- Unicorn-35224.exe (PID: 10836)
- Unicorn-48436.exe (PID: 5364)
- Unicorn-44187.exe (PID: 10820)
- Unicorn-45914.exe (PID: 10888)
- Unicorn-9377.exe (PID: 10812)
- Unicorn-5628.exe (PID: 10908)
- Unicorn-16563.exe (PID: 10924)
- Unicorn-19363.exe (PID: 10916)
- Unicorn-2935.exe (PID: 10896)
- Unicorn-30154.exe (PID: 4228)
- Unicorn-23091.exe (PID: 11012)
- Unicorn-48991.exe (PID: 11096)
- Unicorn-48336.exe (PID: 11076)
- Unicorn-4689.exe (PID: 11052)
- Unicorn-37554.exe (PID: 11024)
- Unicorn-62250.exe (PID: 10988)
- Unicorn-42598.exe (PID: 11236)
- Unicorn-43968.exe (PID: 11200)
- Unicorn-42022.exe (PID: 11172)
- Unicorn-23356.exe (PID: 10972)
- Unicorn-40387.exe (PID: 11788)
- Unicorn-24435.exe (PID: 11724)
- Unicorn-4834.exe (PID: 11732)
- Unicorn-20383.exe (PID: 11772)
- Unicorn-8918.exe (PID: 11764)
- Unicorn-8918.exe (PID: 11756)
- Unicorn-28519.exe (PID: 11748)
- Unicorn-13002.exe (PID: 11708)
- Unicorn-45312.exe (PID: 11612)
- Unicorn-21170.exe (PID: 11672)
- Unicorn-6417.exe (PID: 11604)
- Unicorn-29748.exe (PID: 10784)
- Unicorn-60667.exe (PID: 10980)
- Unicorn-29962.exe (PID: 11112)
- Unicorn-12473.exe (PID: 10860)
- Unicorn-36184.exe (PID: 5232)
- Unicorn-45867.exe (PID: 11648)
- Unicorn-57927.exe (PID: 11288)
- Unicorn-20786.exe (PID: 11572)
- Unicorn-55326.exe (PID: 11312)
- Unicorn-42982.exe (PID: 11296)
- Unicorn-6125.exe (PID: 11272)
- Unicorn-55326.exe (PID: 11320)
- Unicorn-34622.exe (PID: 11404)
- Unicorn-23910.exe (PID: 10948)
- Unicorn-43536.exe (PID: 11368)
- Unicorn-4834.exe (PID: 11740)
- Unicorn-32868.exe (PID: 11700)
- Unicorn-61356.exe (PID: 11340)
- Unicorn-47621.exe (PID: 11352)
- Unicorn-20808.exe (PID: 12024)
- Unicorn-34521.exe (PID: 12000)
- Unicorn-40387.exe (PID: 11980)
- Unicorn-31721.exe (PID: 11988)
- Unicorn-40220.exe (PID: 12060)
- Unicorn-28016.exe (PID: 456)
- Unicorn-52327.exe (PID: 11280)
- Unicorn-27222.exe (PID: 12088)
- Unicorn-51494.exe (PID: 12128)
- Unicorn-54248.exe (PID: 12180)
- Unicorn-31617.exe (PID: 12172)
- Unicorn-40412.exe (PID: 4812)
- Unicorn-36158.exe (PID: 12380)
- Unicorn-34212.exe (PID: 12316)
- Unicorn-1539.exe (PID: 12304)
- Unicorn-26022.exe (PID: 12252)
- Unicorn-13215.exe (PID: 12212)
- Unicorn-17876.exe (PID: 3176)
- Unicorn-2094.exe (PID: 5332)
- Unicorn-40412.exe (PID: 7144)
- Unicorn-19337.exe (PID: 12280)
- Unicorn-11077.exe (PID: 12244)
- Unicorn-25203.exe (PID: 6944)
- Unicorn-32100.exe (PID: 12048)
- Unicorn-13983.exe (PID: 12804)
- Unicorn-31114.exe (PID: 12016)
- Unicorn-35674.exe (PID: 12236)
- Unicorn-31781.exe (PID: 12192)
- Unicorn-9878.exe (PID: 12204)
- Unicorn-20786.exe (PID: 12008)
- Unicorn-34139.exe (PID: 12876)
- Unicorn-225.exe (PID: 12904)
- Unicorn-45623.exe (PID: 12260)
- Unicorn-9799.exe (PID: 12848)
- Unicorn-29863.exe (PID: 12856)
- Unicorn-31999.exe (PID: 11104)
- Unicorn-55326.exe (PID: 11304)
- Unicorn-34944.exe (PID: 13100)
- Unicorn-10174.exe (PID: 12992)
- Unicorn-10247.exe (PID: 13116)
- Unicorn-32374.exe (PID: 13432)
- Unicorn-65431.exe (PID: 13684)
- Unicorn-65213.exe (PID: 13364)
- Unicorn-16468.exe (PID: 13396)
- Unicorn-33089.exe (PID: 13456)
- Unicorn-4309.exe (PID: 13464)
- Unicorn-33089.exe (PID: 13448)
- Unicorn-51975.exe (PID: 13440)
- Unicorn-18918.exe (PID: 13608)
- Unicorn-64855.exe (PID: 13592)
- Unicorn-59255.exe (PID: 13600)
- Unicorn-40926.exe (PID: 13616)
- Unicorn-5924.exe (PID: 13660)
- Unicorn-35448.exe (PID: 13668)
- Unicorn-45442.exe (PID: 11424)
- Unicorn-41912.exe (PID: 13336)
- Unicorn-51856.exe (PID: 13388)
- Unicorn-7532.exe (PID: 13408)
- Unicorn-10253.exe (PID: 13560)
- Unicorn-64114.exe (PID: 13576)
- Unicorn-19721.exe (PID: 13164)
- Unicorn-4025.exe (PID: 13172)
- Unicorn-59157.exe (PID: 14276)
- Unicorn-28722.exe (PID: 13152)
- Unicorn-10247.exe (PID: 13124)
- Unicorn-61486.exe (PID: 13144)
- Unicorn-17024.exe (PID: 13132)
- Unicorn-59422.exe (PID: 14260)
- Unicorn-25795.exe (PID: 14296)
- Unicorn-20938.exe (PID: 12660)
- Unicorn-2655.exe (PID: 13196)
- Unicorn-30289.exe (PID: 13284)
- Unicorn-21684.exe (PID: 13188)
- Unicorn-30236.exe (PID: 13804)
- Unicorn-56516.exe (PID: 13796)
- Unicorn-25982.exe (PID: 13868)
- Unicorn-56303.exe (PID: 14068)
- Unicorn-53922.exe (PID: 13676)
- Unicorn-12146.exe (PID: 13848)
- Unicorn-52816.exe (PID: 13812)
- Unicorn-40848.exe (PID: 13320)
- Unicorn-26326.exe (PID: 14308)
- Unicorn-14860.exe (PID: 12364)
- Unicorn-14860.exe (PID: 12420)
- Unicorn-14860.exe (PID: 12372)
- Unicorn-20043.exe (PID: 13828)
- Unicorn-31820.exe (PID: 13996)
- Unicorn-37366.exe (PID: 14172)
- Unicorn-25497.exe (PID: 13920)
- Unicorn-11683.exe (PID: 13900)
- Unicorn-6718.exe (PID: 14060)
- Unicorn-14860.exe (PID: 12396)
- Unicorn-44051.exe (PID: 13964)
- Unicorn-49692.exe (PID: 14368)
- Unicorn-61944.exe (PID: 14356)
- Unicorn-34.exe (PID: 14448)
- Unicorn-45971.exe (PID: 14416)
- Unicorn-53292.exe (PID: 14348)
- Unicorn-299.exe (PID: 14440)
- Unicorn-62717.exe (PID: 13548)
- Unicorn-29171.exe (PID: 976)
- Unicorn-48930.exe (PID: 2340)
- Unicorn-36670.exe (PID: 14756)
- Unicorn-57290.exe (PID: 14732)
- Unicorn-53206.exe (PID: 14748)
- Unicorn-56495.exe (PID: 13208)
- Unicorn-662.exe (PID: 12456)
- Unicorn-34461.exe (PID: 14480)
- Unicorn-35686.exe (PID: 14888)
- Unicorn-37802.exe (PID: 14896)
- Unicorn-58939.exe (PID: 15332)
- Unicorn-44814.exe (PID: 15316)
- Unicorn-33738.exe (PID: 15324)
- Unicorn-11352.exe (PID: 14924)
- Unicorn-17792.exe (PID: 13892)
- Unicorn-38955.exe (PID: 13300)
- Unicorn-51538.exe (PID: 14904)
- Unicorn-19354.exe (PID: 13540)
- Unicorn-1377.exe (PID: 13584)
- Unicorn-14883.exe (PID: 15288)
- Unicorn-46190.exe (PID: 2320)
- Unicorn-40630.exe (PID: 15768)
- Unicorn-418.exe (PID: 14724)
- Unicorn-43562.exe (PID: 14824)
- Unicorn-39722.exe (PID: 15552)
- Unicorn-60294.exe (PID: 16456)
- Unicorn-7050.exe (PID: 15484)
- Unicorn-34508.exe (PID: 3268)
- Unicorn-30515.exe (PID: 15308)
- Unicorn-14755.exe (PID: 15452)
- Unicorn-37030.exe (PID: 15536)
- Unicorn-14755.exe (PID: 15428)
- Unicorn-27470.exe (PID: 15468)
- Unicorn-58819.exe (PID: 15512)
- Unicorn-11955.exe (PID: 15444)
- Unicorn-56006.exe (PID: 14800)
- Unicorn-42270.exe (PID: 14776)
- Unicorn-8804.exe (PID: 15268)
- Unicorn-60090.exe (PID: 14740)
- Unicorn-56006.exe (PID: 14792)
- Unicorn-36957.exe (PID: 15528)
- Unicorn-59780.exe (PID: 15400)
- Unicorn-11717.exe (PID: 15108)
- Unicorn-19852.exe (PID: 15116)
- Unicorn-34819.exe (PID: 15560)
- Unicorn-13987.exe (PID: 15092)
- Unicorn-13987.exe (PID: 15100)
- Unicorn-62712.exe (PID: 15016)
- Unicorn-61871.exe (PID: 14768)
- Unicorn-34678.exe (PID: 15212)
- Unicorn-62996.exe (PID: 15180)
- Unicorn-252.exe (PID: 15140)
- Unicorn-36546.exe (PID: 6540)
- Unicorn-252.exe (PID: 15172)
- Unicorn-5846.exe (PID: 9292)
- Unicorn-252.exe (PID: 15148)
- Unicorn-24101.exe (PID: 15200)
- Unicorn-10558.exe (PID: 15364)
- Unicorn-63864.exe (PID: 15420)
- Unicorn-30746.exe (PID: 16144)
- Unicorn-252.exe (PID: 15156)
- Unicorn-40273.exe (PID: 15068)
- Unicorn-13987.exe (PID: 15084)
- Unicorn-16891.exe (PID: 16824)
- Unicorn-51642.exe (PID: 16292)
- Unicorn-47419.exe (PID: 17200)
- Unicorn-41990.exe (PID: 16312)
- Unicorn-57542.exe (PID: 16880)
- Unicorn-11648.exe (PID: 16796)
- Unicorn-41052.exe (PID: 16160)
- Unicorn-33831.exe (PID: 15040)
- Unicorn-37906.exe (PID: 16272)
- Unicorn-24589.exe (PID: 7508)
- Unicorn-24589.exe (PID: 17416)
- Unicorn-28006.exe (PID: 17360)
- Unicorn-23113.exe (PID: 16772)
- Unicorn-29381.exe (PID: 17344)
- Unicorn-22539.exe (PID: 15276)
- Unicorn-29583.exe (PID: 15032)
- Unicorn-24589.exe (PID: 17424)
- Unicorn-51642.exe (PID: 16284)
- Unicorn-8232.exe (PID: 16252)
- Unicorn-52926.exe (PID: 16348)
- Unicorn-41990.exe (PID: 16328)
- Unicorn-41990.exe (PID: 16300)
- Unicorn-63983.exe (PID: 16104)
- Unicorn-34398.exe (PID: 7364)
- Unicorn-36390.exe (PID: 16320)
- Unicorn-23273.exe (PID: 16420)
- Unicorn-14607.exe (PID: 16396)
- Unicorn-3672.exe (PID: 16448)
- Unicorn-34243.exe (PID: 6940)
- Unicorn-56059.exe (PID: 16168)
- Unicorn-252.exe (PID: 15164)
- Unicorn-23273.exe (PID: 16436)
- Unicorn-17407.exe (PID: 16428)
- Unicorn-17407.exe (PID: 16404)
- Unicorn-52926.exe (PID: 16340)
- Unicorn-57388.exe (PID: 16120)
- Unicorn-14607.exe (PID: 16412)
- Unicorn-19852.exe (PID: 15124)
- Unicorn-4679.exe (PID: 16212)
- Unicorn-65363.exe (PID: 16804)
- Unicorn-1020.exe (PID: 15436)
- Unicorn-25027.exe (PID: 16784)
- Unicorn-21745.exe (PID: 17920)
- Unicorn-18945.exe (PID: 17912)
- Unicorn-34921.exe (PID: 16152)
- Unicorn-979.exe (PID: 16928)
- Unicorn-19161.exe (PID: 17376)
- Unicorn-17700.exe (PID: 16868)
- Unicorn-26706.exe (PID: 16260)
- Unicorn-1482.exe (PID: 7424)
- Unicorn-48710.exe (PID: 17224)
- Unicorn-33548.exe (PID: 14688)
- Unicorn-36174.exe (PID: 16612)
- Unicorn-11955.exe (PID: 17892)
- Unicorn-26662.exe (PID: 16128)
- Unicorn-14974.exe (PID: 16096)
Reads the computer name
- Unicorn-26940.exe (PID: 7288)
- Unicorn-45846.exe (PID: 4696)
- Unicorn-11995.exe (PID: 7280)
- 1 (478).exe (PID: 5244)
- Unicorn-54620.exe (PID: 7368)
- Unicorn-15057.exe (PID: 7328)
- Unicorn-48477.exe (PID: 7340)
- Unicorn-6889.exe (PID: 7352)
- Unicorn-10755.exe (PID: 7396)
- Unicorn-60511.exe (PID: 7408)
- Unicorn-43428.exe (PID: 7428)
- Unicorn-33213.exe (PID: 7468)
- Unicorn-4533.exe (PID: 7452)
- Unicorn-47247.exe (PID: 7436)
- Unicorn-19478.exe (PID: 7476)
- Unicorn-28798.exe (PID: 7728)
- Unicorn-30281.exe (PID: 7744)
- Unicorn-26106.exe (PID: 7704)
- Unicorn-54694.exe (PID: 7780)
- Unicorn-51357.exe (PID: 7752)
- Unicorn-62348.exe (PID: 7812)
- Unicorn-51186.exe (PID: 7936)
- Unicorn-24544.exe (PID: 7904)
- Unicorn-46125.exe (PID: 7952)
- Unicorn-30003.exe (PID: 7972)
- Unicorn-20438.exe (PID: 7844)
- Unicorn-42753.exe (PID: 7964)
- Unicorn-17746.exe (PID: 7832)
- Unicorn-25866.exe (PID: 7156)
- Unicorn-43594.exe (PID: 7192)
- Unicorn-2561.exe (PID: 7264)
- Unicorn-42124.exe (PID: 4188)
- Unicorn-54284.exe (PID: 6576)
- Unicorn-62623.exe (PID: 5956)
- Unicorn-49624.exe (PID: 5984)
- Unicorn-48154.exe (PID: 2040)
- Unicorn-29323.exe (PID: 7672)
- Unicorn-2945.exe (PID: 7692)
- Unicorn-1091.exe (PID: 7636)
- Unicorn-25888.exe (PID: 7928)
- Unicorn-13827.exe (PID: 1052)
- Unicorn-45924.exe (PID: 7588)
- Unicorn-59499.exe (PID: 2692)
- Unicorn-55415.exe (PID: 5164)
- Unicorn-59115.exe (PID: 1096)
- Unicorn-17454.exe (PID: 7916)
- Unicorn-58923.exe (PID: 7740)
- Unicorn-36926.exe (PID: 7248)
- Unicorn-27834.exe (PID: 7860)
- Unicorn-47040.exe (PID: 7184)
- Unicorn-16314.exe (PID: 516)
- Unicorn-5467.exe (PID: 7992)
- Unicorn-48830.exe (PID: 6372)
- Unicorn-18644.exe (PID: 5960)
- Unicorn-29871.exe (PID: 7868)
- Unicorn-37310.exe (PID: 4692)
- Unicorn-7221.exe (PID: 7648)
- Unicorn-18896.exe (PID: 8028)
- Unicorn-30526.exe (PID: 7856)
- Unicorn-64020.exe (PID: 6388)
- Unicorn-29504.exe (PID: 7216)
- Unicorn-61622.exe (PID: 8148)
- Unicorn-41778.exe (PID: 7544)
- Unicorn-31834.exe (PID: 5260)
- Unicorn-41564.exe (PID: 7316)
- Unicorn-54606.exe (PID: 7488)
- Unicorn-2260.exe (PID: 8120)
- Unicorn-41756.exe (PID: 8184)
- Unicorn-4637.exe (PID: 4464)
- Unicorn-4253.exe (PID: 8172)
- Unicorn-52468.exe (PID: 7524)
- Unicorn-5467.exe (PID: 7900)
- Unicorn-6675.exe (PID: 1040)
- Unicorn-1876.exe (PID: 7656)
- Unicorn-36110.exe (PID: 4424)
- Unicorn-61820.exe (PID: 7540)
- Unicorn-28493.exe (PID: 6148)
- Unicorn-35748.exe (PID: 7792)
- Unicorn-63250.exe (PID: 8032)
- Unicorn-19146.exe (PID: 1312)
- Unicorn-27388.exe (PID: 4000)
- Unicorn-50693.exe (PID: 7584)
- Unicorn-9965.exe (PID: 8052)
- Unicorn-64891.exe (PID: 7576)
- Unicorn-29142.exe (PID: 7612)
- Unicorn-5763.exe (PID: 8920)
- Unicorn-58306.exe (PID: 7764)
- Unicorn-34906.exe (PID: 8960)
- Unicorn-11793.exe (PID: 8988)
- Unicorn-34531.exe (PID: 2904)
- Unicorn-2068.exe (PID: 8268)
- Unicorn-46246.exe (PID: 7680)
- Unicorn-48576.exe (PID: 8284)
- Unicorn-28732.exe (PID: 8348)
- Unicorn-20756.exe (PID: 8464)
- Unicorn-7688.exe (PID: 8856)
- Unicorn-20730.exe (PID: 9256)
- Unicorn-14917.exe (PID: 8712)
- Unicorn-57512.exe (PID: 8508)
- Unicorn-40216.exe (PID: 7624)
- Unicorn-18954.exe (PID: 7608)
- Unicorn-5379.exe (PID: 8740)
- Unicorn-28659.exe (PID: 8544)
- Unicorn-9680.exe (PID: 8492)
- Unicorn-59650.exe (PID: 8476)
- Unicorn-3683.exe (PID: 7700)
- Unicorn-5597.exe (PID: 8292)
- Unicorn-57678.exe (PID: 8552)
- Unicorn-49318.exe (PID: 9320)
- Unicorn-26467.exe (PID: 8328)
- Unicorn-57988.exe (PID: 8732)
- Unicorn-8119.exe (PID: 8380)
- Unicorn-26765.exe (PID: 9604)
- Unicorn-44850.exe (PID: 9212)
- Unicorn-21052.exe (PID: 10232)
- Unicorn-45556.exe (PID: 10116)
- Unicorn-35018.exe (PID: 1600)
- Unicorn-39038.exe (PID: 8340)
- Unicorn-49079.exe (PID: 8516)
- Unicorn-58664.exe (PID: 9080)
- Unicorn-47808.exe (PID: 6744)
- Unicorn-1466.exe (PID: 8564)
- Unicorn-43100.exe (PID: 8304)
- Unicorn-61959.exe (PID: 8372)
- Unicorn-63542.exe (PID: 8360)
- Unicorn-10039.exe (PID: 9204)
- Unicorn-44148.exe (PID: 9504)
- Unicorn-12176.exe (PID: 9424)
- Unicorn-45213.exe (PID: 9020)
- Unicorn-26018.exe (PID: 8276)
- Unicorn-43418.exe (PID: 7000)
- Unicorn-15830.exe (PID: 9592)
- Unicorn-14486.exe (PID: 8996)
- Unicorn-42904.exe (PID: 9176)
- Unicorn-12971.exe (PID: 8672)
- Unicorn-49894.exe (PID: 9408)
- Unicorn-23470.exe (PID: 8848)
- Unicorn-14507.exe (PID: 9312)
- Unicorn-64620.exe (PID: 8060)
- Unicorn-55824.exe (PID: 9472)
- Unicorn-40958.exe (PID: 9132)
- Unicorn-20346.exe (PID: 9164)
- Unicorn-40356.exe (PID: 9656)
- Unicorn-43843.exe (PID: 9328)
- Unicorn-10361.exe (PID: 9960)
- Unicorn-32624.exe (PID: 8408)
- Unicorn-37926.exe (PID: 9536)
- Unicorn-48887.exe (PID: 9512)
- Unicorn-53916.exe (PID: 10108)
- Unicorn-23422.exe (PID: 9284)
- Unicorn-29412.exe (PID: 10372)
- Unicorn-48628.exe (PID: 11244)
- Unicorn-19848.exe (PID: 3968)
- Unicorn-37158.exe (PID: 9276)
- Unicorn-48436.exe (PID: 5364)
- Unicorn-4113.exe (PID: 10668)
- Unicorn-48633.exe (PID: 10004)
- Unicorn-54288.exe (PID: 8800)
- Unicorn-24435.exe (PID: 11724)
- Unicorn-61356.exe (PID: 11340)
- Unicorn-15069.exe (PID: 8840)
- Unicorn-29198.exe (PID: 10020)
- Unicorn-47927.exe (PID: 9344)
- Unicorn-62250.exe (PID: 10988)
- Unicorn-7107.exe (PID: 9552)
- Unicorn-54169.exe (PID: 9896)
- Unicorn-53154.exe (PID: 10100)
- Unicorn-37554.exe (PID: 11024)
- Unicorn-33781.exe (PID: 1852)
- Unicorn-44954.exe (PID: 10700)
- Unicorn-24752.exe (PID: 9980)
- Unicorn-9799.exe (PID: 12848)
- Unicorn-13983.exe (PID: 12804)
- Unicorn-64175.exe (PID: 10604)
- Unicorn-63708.exe (PID: 9336)
- Unicorn-59422.exe (PID: 14260)
- Unicorn-59157.exe (PID: 14276)
- Unicorn-25795.exe (PID: 14296)
- Unicorn-34033.exe (PID: 9732)
- Unicorn-48991.exe (PID: 11096)
- Unicorn-49401.exe (PID: 10504)
- Unicorn-51202.exe (PID: 9992)
- Unicorn-4834.exe (PID: 11740)
- Unicorn-19722.exe (PID: 9440)
- Unicorn-29500.exe (PID: 8644)
- Unicorn-33738.exe (PID: 15324)
- Unicorn-34622.exe (PID: 11404)
- Unicorn-44814.exe (PID: 15316)
- Unicorn-64393.exe (PID: 1676)
- Unicorn-28836.exe (PID: 9972)
- Unicorn-27222.exe (PID: 12088)
- Unicorn-64009.exe (PID: 10028)
- Unicorn-41912.exe (PID: 13344)
- Unicorn-1570.exe (PID: 2084)
- Unicorn-48462.exe (PID: 10380)
- Unicorn-23662.exe (PID: 8764)
- Unicorn-60475.exe (PID: 10776)
- Unicorn-40387.exe (PID: 11788)
- Unicorn-29478.exe (PID: 8524)
- Unicorn-51740.exe (PID: 9460)
- Unicorn-19670.exe (PID: 9624)
- Unicorn-22074.exe (PID: 9932)
- Unicorn-25712.exe (PID: 10468)
- Unicorn-47692.exe (PID: 10576)
- Unicorn-29962.exe (PID: 11112)
- Unicorn-43536.exe (PID: 11368)
- Unicorn-37284.exe (PID: 8428)
- Unicorn-38602.exe (PID: 9924)
- Unicorn-31065.exe (PID: 1116)
- Unicorn-29748.exe (PID: 10784)
- Unicorn-53292.exe (PID: 14348)
- Unicorn-33174.exe (PID: 9232)
- Unicorn-56692.exe (PID: 9636)
- Unicorn-20786.exe (PID: 12008)
- Unicorn-28016.exe (PID: 456)
- Unicorn-56671.exe (PID: 9416)
- Unicorn-8673.exe (PID: 10768)
The sample compiled with chinese language support
- 1 (478).exe (PID: 5244)
- Unicorn-39204.exe (PID: 9268)
- Unicorn-19721.exe (PID: 13164)
- Unicorn-29863.exe (PID: 12856)
- Unicorn-22074.exe (PID: 9932)
- Unicorn-47247.exe (PID: 7436)
- Unicorn-36926.exe (PID: 7248)
- Unicorn-37802.exe (PID: 14896)
Create files in a temporary directory
- Unicorn-45846.exe (PID: 4696)
- 1 (478).exe (PID: 5244)
- Unicorn-15057.exe (PID: 7328)
- Unicorn-11995.exe (PID: 7280)
- Unicorn-54620.exe (PID: 7368)
- Unicorn-10755.exe (PID: 7396)
- Unicorn-26940.exe (PID: 7288)
- Unicorn-4533.exe (PID: 7452)
- Unicorn-6889.exe (PID: 7352)
- Unicorn-47247.exe (PID: 7436)
- Unicorn-43428.exe (PID: 7428)
- Unicorn-33213.exe (PID: 7468)
- Unicorn-28798.exe (PID: 7728)
- Unicorn-51357.exe (PID: 7752)
- Unicorn-62348.exe (PID: 7812)
- Unicorn-30281.exe (PID: 7744)
- Unicorn-48477.exe (PID: 7340)
- Unicorn-51186.exe (PID: 7936)
- Unicorn-20438.exe (PID: 7844)
- Unicorn-17746.exe (PID: 7832)
- Unicorn-24544.exe (PID: 7904)
- Unicorn-25866.exe (PID: 7156)
- Unicorn-43594.exe (PID: 7192)
- Unicorn-26106.exe (PID: 7704)
- Unicorn-42124.exe (PID: 4188)
- Unicorn-62623.exe (PID: 5956)
- Unicorn-48154.exe (PID: 2040)
- Unicorn-54284.exe (PID: 6576)
- Unicorn-2945.exe (PID: 7692)
- Unicorn-46125.exe (PID: 7952)
- Unicorn-25888.exe (PID: 7928)
- Unicorn-45924.exe (PID: 7588)
- Unicorn-58923.exe (PID: 7740)
- Unicorn-55415.exe (PID: 5164)
- Unicorn-59499.exe (PID: 2692)
- Unicorn-54694.exe (PID: 7780)
- Unicorn-17454.exe (PID: 7916)
- Unicorn-59115.exe (PID: 1096)
- Unicorn-47040.exe (PID: 7184)
- Unicorn-27834.exe (PID: 7860)
- Unicorn-19478.exe (PID: 7476)
- Unicorn-49624.exe (PID: 5984)
- Unicorn-5467.exe (PID: 7992)
- Unicorn-16314.exe (PID: 516)
- Unicorn-37310.exe (PID: 4692)
- Unicorn-7221.exe (PID: 7648)
- Unicorn-30526.exe (PID: 7856)
- Unicorn-18644.exe (PID: 5960)
- Unicorn-18896.exe (PID: 8028)
- Unicorn-64020.exe (PID: 6388)
- Unicorn-29323.exe (PID: 7672)
- Unicorn-31834.exe (PID: 5260)
- Unicorn-41778.exe (PID: 7544)
- Unicorn-41756.exe (PID: 8184)
- Unicorn-54606.exe (PID: 7488)
- Unicorn-2260.exe (PID: 8120)
- Unicorn-52468.exe (PID: 7524)
- Unicorn-4253.exe (PID: 8172)
- Unicorn-13827.exe (PID: 1052)
- Unicorn-4637.exe (PID: 4464)
- Unicorn-60511.exe (PID: 7408)
- Unicorn-5467.exe (PID: 7900)
- Unicorn-1876.exe (PID: 7656)
- Unicorn-41564.exe (PID: 7316)
- Unicorn-36110.exe (PID: 4424)
- Unicorn-35748.exe (PID: 7792)
- Unicorn-28493.exe (PID: 6148)
- Unicorn-19146.exe (PID: 1312)
- Unicorn-27388.exe (PID: 4000)
- Unicorn-63250.exe (PID: 8032)
- Unicorn-9965.exe (PID: 8052)
- Unicorn-50693.exe (PID: 7584)
- Unicorn-2561.exe (PID: 7264)
- Unicorn-29142.exe (PID: 7612)
- Unicorn-30003.exe (PID: 7972)
- Unicorn-64891.exe (PID: 7576)
- Unicorn-58306.exe (PID: 7764)
- Unicorn-1091.exe (PID: 7636)
- Unicorn-5763.exe (PID: 8920)
- Unicorn-34906.exe (PID: 8960)
- Unicorn-2068.exe (PID: 8268)
- Unicorn-7688.exe (PID: 8856)
- Unicorn-14917.exe (PID: 8712)
- Unicorn-20730.exe (PID: 9256)
- Unicorn-46246.exe (PID: 7680)
- Unicorn-48830.exe (PID: 6372)
- Unicorn-40216.exe (PID: 7624)
- Unicorn-48576.exe (PID: 8284)
- Unicorn-9680.exe (PID: 8492)
- Unicorn-18954.exe (PID: 7608)
- Unicorn-20756.exe (PID: 8464)
- Unicorn-28659.exe (PID: 8544)
- Unicorn-29504.exe (PID: 7216)
- Unicorn-36926.exe (PID: 7248)
- Unicorn-59650.exe (PID: 8476)
- Unicorn-5597.exe (PID: 8292)
- Unicorn-34531.exe (PID: 2904)
- Unicorn-5379.exe (PID: 8740)
- Unicorn-6675.exe (PID: 1040)
- Unicorn-8119.exe (PID: 8380)
- Unicorn-49318.exe (PID: 9320)
- Unicorn-26467.exe (PID: 8328)
- Unicorn-57678.exe (PID: 8552)
- Unicorn-57988.exe (PID: 8732)
- Unicorn-29871.exe (PID: 7868)
- Unicorn-47808.exe (PID: 6744)
- Unicorn-45556.exe (PID: 10116)
- Unicorn-26765.exe (PID: 9604)
- Unicorn-35018.exe (PID: 1600)
- Unicorn-21052.exe (PID: 10232)
- Unicorn-39038.exe (PID: 8340)
- Unicorn-63542.exe (PID: 8360)
- Unicorn-58664.exe (PID: 9080)
- Unicorn-44850.exe (PID: 9212)
- Unicorn-49079.exe (PID: 8516)
- Unicorn-43100.exe (PID: 8304)
- Unicorn-61959.exe (PID: 8372)
- Unicorn-1466.exe (PID: 8564)
- Unicorn-12176.exe (PID: 9424)
- Unicorn-44148.exe (PID: 9504)
- Unicorn-43418.exe (PID: 7000)
- Unicorn-10039.exe (PID: 9204)
- Unicorn-42904.exe (PID: 9176)
- Unicorn-23470.exe (PID: 8848)
- Unicorn-26018.exe (PID: 8276)
- Unicorn-12971.exe (PID: 8672)
- Unicorn-64620.exe (PID: 8060)
- Unicorn-45213.exe (PID: 9020)
- Unicorn-61622.exe (PID: 8148)
- Unicorn-40356.exe (PID: 9656)
- Unicorn-10361.exe (PID: 9960)
- Unicorn-11793.exe (PID: 8988)
- Unicorn-32624.exe (PID: 8408)
- Unicorn-14486.exe (PID: 8996)
- Unicorn-55824.exe (PID: 9472)
- Unicorn-40958.exe (PID: 9132)
- Unicorn-48887.exe (PID: 9512)
- Unicorn-53916.exe (PID: 10108)
- Unicorn-29412.exe (PID: 10372)
- Unicorn-28732.exe (PID: 8348)
- Unicorn-48628.exe (PID: 11244)
- Unicorn-19848.exe (PID: 3968)
- Unicorn-61820.exe (PID: 7540)
- Unicorn-37158.exe (PID: 9276)
- Unicorn-48436.exe (PID: 5364)
- Unicorn-14507.exe (PID: 9312)
- Unicorn-42753.exe (PID: 7964)
- Unicorn-4113.exe (PID: 10668)
- Unicorn-48633.exe (PID: 10004)
- Unicorn-54288.exe (PID: 8800)
- Unicorn-24435.exe (PID: 11724)
- Unicorn-61356.exe (PID: 11340)
- Unicorn-43843.exe (PID: 9328)
- Unicorn-21524.exe (PID: 8792)
- Unicorn-15069.exe (PID: 8840)
- Unicorn-7107.exe (PID: 9552)
- Unicorn-47927.exe (PID: 9344)
- Unicorn-53154.exe (PID: 10100)
- Unicorn-29198.exe (PID: 10020)
- Unicorn-33781.exe (PID: 1852)
- Unicorn-15830.exe (PID: 9592)
- Unicorn-16406.exe (PID: 9676)
- Unicorn-37926.exe (PID: 9536)
- Unicorn-23422.exe (PID: 9284)
- Unicorn-3683.exe (PID: 7700)
- Unicorn-13983.exe (PID: 12804)
- Unicorn-9799.exe (PID: 12848)
- Unicorn-29863.exe (PID: 12856)
- Unicorn-57512.exe (PID: 8508)
- Unicorn-44954.exe (PID: 10700)
- Unicorn-64175.exe (PID: 10604)
- Unicorn-24752.exe (PID: 9980)
- Unicorn-62250.exe (PID: 10988)
- Unicorn-63708.exe (PID: 9336)
- Unicorn-49894.exe (PID: 9408)
- Unicorn-5628.exe (PID: 10908)
- Unicorn-59422.exe (PID: 14260)
- Unicorn-59157.exe (PID: 14276)
- Unicorn-25795.exe (PID: 14296)
- Unicorn-37554.exe (PID: 11024)
- Unicorn-61662.exe (PID: 9352)
- Unicorn-33738.exe (PID: 15324)
- Unicorn-44814.exe (PID: 15316)
- Unicorn-58939.exe (PID: 15332)
- Unicorn-25203.exe (PID: 6944)
- Unicorn-54169.exe (PID: 9896)
- Unicorn-29478.exe (PID: 8524)
- Unicorn-51740.exe (PID: 9460)
- Unicorn-13905.exe (PID: 9940)
- Unicorn-25712.exe (PID: 10468)
- Unicorn-58192.exe (PID: 10300)
- Unicorn-40387.exe (PID: 11788)
- Unicorn-27746.exe (PID: 8772)
- Unicorn-19670.exe (PID: 9624)
- Unicorn-47692.exe (PID: 10576)
- Unicorn-39204.exe (PID: 9268)
- Unicorn-17330.exe (PID: 2616)
- Unicorn-64393.exe (PID: 1676)
- Unicorn-48991.exe (PID: 11096)
- Unicorn-23356.exe (PID: 10972)
- Unicorn-28836.exe (PID: 9972)
- Unicorn-49401.exe (PID: 10504)
- Unicorn-48462.exe (PID: 10380)
- Unicorn-4834.exe (PID: 11740)
- Unicorn-1570.exe (PID: 2084)
- Unicorn-34622.exe (PID: 11404)
- Unicorn-19722.exe (PID: 9440)
- Unicorn-12691.exe (PID: 10364)
- Unicorn-53292.exe (PID: 14348)
- Unicorn-42982.exe (PID: 11296)
- Unicorn-31065.exe (PID: 1116)
Reads security settings of Internet Explorer
- BackgroundTransferHost.exe (PID: 7560)
- BackgroundTransferHost.exe (PID: 7868)
- BackgroundTransferHost.exe (PID: 8140)
- BackgroundTransferHost.exe (PID: 4692)
- BackgroundTransferHost.exe (PID: 7616)
Creates files or folders in the user directory
- BackgroundTransferHost.exe (PID: 7868)
Checks proxy server information
- BackgroundTransferHost.exe (PID: 7868)
Reads the software policy settings
- BackgroundTransferHost.exe (PID: 7868)
- slui.exe (PID: 6808)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
764
Monitored processes
629
Malicious processes
95
Suspicious processes
70
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 456 | C:\Users\admin\AppData\Local\Temp\Unicorn-28016.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-28016.exe | Unicorn-26018.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 516 | C:\Users\admin\AppData\Local\Temp\Unicorn-16314.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-16314.exe | Unicorn-49624.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 720 | C:\Users\admin\AppData\Local\Temp\Unicorn-28701.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-28701.exe | — | Unicorn-18644.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 | |||||||||||||||
| 976 | C:\Users\admin\AppData\Local\Temp\Unicorn-29171.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-29171.exe | — | Unicorn-40216.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1040 | C:\Users\admin\AppData\Local\Temp\Unicorn-6675.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-6675.exe | Unicorn-60511.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1052 | C:\Users\admin\AppData\Local\Temp\Unicorn-13827.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13827.exe | Unicorn-24544.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1096 | C:\Users\admin\AppData\Local\Temp\Unicorn-59115.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-59115.exe | Unicorn-47247.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1116 | C:\Users\admin\AppData\Local\Temp\Unicorn-31065.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-31065.exe | Unicorn-13827.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1180 | C:\Users\admin\AppData\Local\Temp\Unicorn-339.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-339.exe | Unicorn-42124.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1312 | C:\Users\admin\AppData\Local\Temp\Unicorn-19146.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-19146.exe | Unicorn-48477.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
14 522
Read events
14 507
Write events
15
Delete events
0
Modification events
| (PID) Process: | (7560) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7560) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7560) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7868) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7868) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7868) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (8140) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (8140) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (8140) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (4692) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
Executable files
877
Suspicious files
5
Text files
0
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 4696 | Unicorn-45846.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-48477.exe | executable | |
MD5:38C2676FC6F217B0DFF509D2531CEC8B | SHA256:420FF586DE6273F7508F5085EB7BC737F55B2377E0DD8DE959624AB68BE7DD08 | |||
| 7280 | Unicorn-11995.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-15057.exe | executable | |
MD5:2910DF24E79033B96E497EE8B75A691E | SHA256:23BBCE69A534967B80A992427C049A50C00FE3C978A1B8E03BE0E49DF4FE4ED3 | |||
| 4696 | Unicorn-45846.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-11995.exe | executable | |
MD5:136D6F98DE611495359D4ADF7504D0AA | SHA256:AF1816EF354E5FDEB3E2F840B3FC85C6C6E12B3F8909BCEAEF76177AF7DC244E | |||
| 7368 | Unicorn-54620.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-43428.exe | executable | |
MD5:B034A8D583EDE6A8883501DF08AD69DD | SHA256:594295D9170798DD51D0FF05602358D01864D2908A5707F8EB478D32F87CB07F | |||
| 7288 | Unicorn-26940.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-6889.exe | executable | |
MD5:1BADF7CBCEBBCDFA073783AD22568EA4 | SHA256:A6B257AECFF5EE06139C62B4697893F387AD80EA59E4CC2EBB725656225F5CC8 | |||
| 5244 | 1 (478).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-26940.exe | executable | |
MD5:861324E1162B3B96B1398235856BB9C6 | SHA256:1D0585A2FE3F568A6EB59FCA42B75A2A407482B8BFA89AC0FF469BA0830AB875 | |||
| 5244 | 1 (478).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-54620.exe | executable | |
MD5:1554D0EDD56C66722F82D2B09D1BA44B | SHA256:BEB79A6305D3361A75F76F0B0EA0C6CE534E04A3F759A1CA042D438349E316A1 | |||
| 5244 | 1 (478).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-45846.exe | executable | |
MD5:2EB8496B25B8C5BF06000EFE3713B622 | SHA256:1E38E30750128EC455C21ACC62FA0F127E44B33B4A1FEF9AF13BFE359E7888F8 | |||
| 7396 | Unicorn-10755.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-26106.exe | executable | |
MD5:471817A68EDDBA95A9E7A1ECB49C7C94 | SHA256:96327D861A19621417E27D1FFF5C644F845A619A24BF0EF6A3C72AF867D5533C | |||
| 7428 | Unicorn-43428.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-54694.exe | executable | |
MD5:DCAB05136C142DE81E755867BB7F795F | SHA256:FADA8C954145731A04B3A9F346C1ACC2D0BEFE2D646DAB55008E810DD6CB686C | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
7
TCP/UDP connections
25
DNS requests
17
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
— | — | GET | 304 | 2.19.11.120:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
5496 | MoUsoCoreWorker.exe | GET | 200 | 2.19.11.120:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
7868 | BackgroundTransferHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | whitelisted |
8076 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
8076 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
6620 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
5496 | MoUsoCoreWorker.exe | 2.19.11.120:80 | crl.microsoft.com | Elisa Oyj | NL | whitelisted |
— | — | 2.19.11.120:80 | crl.microsoft.com | Elisa Oyj | NL | whitelisted |
3216 | svchost.exe | 40.113.103.199:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.159.130:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
6620 | backgroundTaskHost.exe | 20.223.35.26:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6620 | backgroundTaskHost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
www.bing.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |