| File name: | 1 (578) |
| Full analysis: | https://app.any.run/tasks/3df2ab4f-33df-44d1-8fb9-9fce08415445 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 23:22:04 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | 45C56B5FCE30C03A4BB3341C203DAD60 |
| SHA1: | 2DA52CF19D5C35DCD682C75AD01A7708B6A82630 |
| SHA256: | 169BFEECE06EEDF2A907AF94C1CE206C897D1F2A8988684BF46ED207494DC3FD |
| SSDEEP: | 6144:o7K0t7IJvD5HA5la9Lx8Riex/ZBclvJGBc/WyeF97k/8ZwjwpyAvEhy4QLZ0sEva:o+oMfHA549l+BahacOyeF9qx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- Unicorn-49410.exe (PID: 5728)
- Unicorn-3478.exe (PID: 5376)
- 1 (578).exe (PID: 2140)
- Unicorn-50396.exe (PID: 4224)
- Unicorn-6021.exe (PID: 1188)
- Unicorn-20503.exe (PID: 5156)
- Unicorn-26634.exe (PID: 3676)
- Unicorn-24256.exe (PID: 7696)
- Unicorn-62596.exe (PID: 7680)
- Unicorn-37708.exe (PID: 7712)
- Unicorn-59861.exe (PID: 3900)
- Unicorn-39746.exe (PID: 7732)
- Unicorn-27594.exe (PID: 7760)
- Unicorn-46623.exe (PID: 7772)
- Unicorn-58055.exe (PID: 7752)
- Unicorn-10235.exe (PID: 7816)
- Unicorn-64075.exe (PID: 7832)
- Unicorn-65466.exe (PID: 7844)
- Unicorn-2067.exe (PID: 7888)
- Unicorn-37708.exe (PID: 7720)
- Unicorn-47739.exe (PID: 7880)
- Unicorn-11366.exe (PID: 7912)
- Unicorn-14438.exe (PID: 7952)
- Unicorn-18980.exe (PID: 7900)
- Unicorn-14703.exe (PID: 7960)
- Unicorn-64096.exe (PID: 7936)
- Unicorn-52836.exe (PID: 8000)
- Unicorn-22872.exe (PID: 7968)
- Unicorn-33732.exe (PID: 7984)
- Unicorn-59720.exe (PID: 7992)
- Unicorn-18788.exe (PID: 7976)
- Unicorn-39976.exe (PID: 8096)
- Unicorn-11963.exe (PID: 8132)
- Unicorn-14001.exe (PID: 8148)
- Unicorn-9825.exe (PID: 8160)
- Unicorn-5476.exe (PID: 8180)
- Unicorn-1967.exe (PID: 7860)
- Unicorn-42690.exe (PID: 4920)
- Unicorn-49467.exe (PID: 5960)
- Unicorn-34330.exe (PID: 1132)
- Unicorn-20494.exe (PID: 5048)
- Unicorn-53359.exe (PID: 5548)
- Unicorn-28492.exe (PID: 7236)
- Unicorn-12347.exe (PID: 6744)
- Unicorn-9447.exe (PID: 2108)
- Unicorn-19237.exe (PID: 7608)
- Unicorn-56649.exe (PID: 7660)
- Unicorn-16240.exe (PID: 7224)
- Unicorn-54127.exe (PID: 7540)
- Unicorn-61740.exe (PID: 7528)
- Unicorn-10764.exe (PID: 7332)
- Unicorn-4463.exe (PID: 7436)
- Unicorn-18378.exe (PID: 7424)
- Unicorn-7686.exe (PID: 7384)
- Unicorn-18277.exe (PID: 7228)
- Unicorn-49415.exe (PID: 7280)
- Unicorn-17370.exe (PID: 7444)
- Unicorn-49104.exe (PID: 6424)
- Unicorn-5231.exe (PID: 4652)
- Unicorn-45788.exe (PID: 6752)
- Unicorn-24984.exe (PID: 7368)
- Unicorn-23016.exe (PID: 7352)
- Unicorn-47734.exe (PID: 5984)
- Unicorn-54703.exe (PID: 2772)
- Unicorn-21860.exe (PID: 4408)
- Unicorn-33728.exe (PID: 4268)
- Unicorn-55637.exe (PID: 7668)
- Unicorn-65393.exe (PID: 4696)
- Unicorn-42882.exe (PID: 7360)
- Unicorn-27698.exe (PID: 6228)
- Unicorn-59939.exe (PID: 7640)
- Unicorn-13286.exe (PID: 7400)
- Unicorn-35164.exe (PID: 8340)
- Unicorn-3193.exe (PID: 5228)
- Unicorn-8071.exe (PID: 7340)
- Unicorn-21258.exe (PID: 8424)
- Unicorn-63878.exe (PID: 7416)
- Unicorn-34474.exe (PID: 2092)
- Unicorn-42372.exe (PID: 6272)
- Unicorn-22244.exe (PID: 8272)
- Unicorn-49110.exe (PID: 6592)
- Unicorn-10785.exe (PID: 7672)
- Unicorn-35948.exe (PID: 9164)
- Unicorn-33152.exe (PID: 7392)
- Unicorn-49462.exe (PID: 8296)
- Unicorn-27763.exe (PID: 8648)
- Unicorn-37532.exe (PID: 9200)
- Unicorn-38964.exe (PID: 8392)
- Unicorn-30531.exe (PID: 8380)
- Unicorn-10889.exe (PID: 9192)
- Unicorn-62700.exe (PID: 3132)
- Unicorn-27458.exe (PID: 8400)
- Unicorn-6483.exe (PID: 8332)
- Unicorn-53738.exe (PID: 8480)
- Unicorn-6575.exe (PID: 8520)
- Unicorn-4537.exe (PID: 8504)
- Unicorn-4283.exe (PID: 8948)
- Unicorn-50427.exe (PID: 5360)
- Unicorn-57190.exe (PID: 3884)
- Unicorn-21668.exe (PID: 1240)
- Unicorn-46298.exe (PID: 8700)
- Unicorn-3743.exe (PID: 8920)
- Unicorn-9560.exe (PID: 8432)
- Unicorn-23526.exe (PID: 9052)
- Unicorn-15425.exe (PID: 8832)
- Unicorn-23116.exe (PID: 9960)
- Unicorn-29237.exe (PID: 9968)
- Unicorn-27946.exe (PID: 10016)
- Unicorn-50552.exe (PID: 9348)
- Unicorn-27610.exe (PID: 8620)
- Unicorn-36956.exe (PID: 9104)
- Unicorn-7360.exe (PID: 1300)
- Unicorn-28788.exe (PID: 9012)
- Unicorn-52923.exe (PID: 8656)
- Unicorn-5819.exe (PID: 9448)
- Unicorn-56966.exe (PID: 9460)
- Unicorn-63856.exe (PID: 9744)
- Unicorn-24309.exe (PID: 8212)
- Unicorn-64345.exe (PID: 9020)
- Unicorn-45954.exe (PID: 8692)
- Unicorn-41232.exe (PID: 9004)
- Unicorn-5523.exe (PID: 680)
- Unicorn-33038.exe (PID: 9876)
- Unicorn-10266.exe (PID: 9536)
- Unicorn-51361.exe (PID: 8896)
- Unicorn-54252.exe (PID: 9056)
- Unicorn-36956.exe (PID: 9096)
- Unicorn-36332.exe (PID: 9088)
- Unicorn-52778.exe (PID: 5084)
- Unicorn-39822.exe (PID: 9400)
- Unicorn-8751.exe (PID: 9128)
- Unicorn-14158.exe (PID: 9332)
- Unicorn-21095.exe (PID: 8452)
- Unicorn-5973.exe (PID: 8872)
- Unicorn-59083.exe (PID: 9392)
- Unicorn-40796.exe (PID: 10332)
- Unicorn-4236.exe (PID: 9568)
- Unicorn-42565.exe (PID: 8880)
- Unicorn-47236.exe (PID: 9620)
- Unicorn-11749.exe (PID: 9504)
- Unicorn-29918.exe (PID: 8616)
- Unicorn-10379.exe (PID: 9628)
- Unicorn-47328.exe (PID: 9808)
- Unicorn-42694.exe (PID: 10892)
- Unicorn-18630.exe (PID: 10072)
- Unicorn-1927.exe (PID: 9688)
- Unicorn-56063.exe (PID: 1748)
- Unicorn-54894.exe (PID: 2616)
- Unicorn-53676.exe (PID: 2644)
- Unicorn-13603.exe (PID: 9308)
- Unicorn-53676.exe (PID: 8116)
- Unicorn-64698.exe (PID: 11084)
- Unicorn-62560.exe (PID: 10884)
- Unicorn-19696.exe (PID: 8732)
- Unicorn-34662.exe (PID: 8864)
- Unicorn-5523.exe (PID: 7812)
- Unicorn-24029.exe (PID: 9492)
- Unicorn-16920.exe (PID: 9136)
- Unicorn-27597.exe (PID: 7676)
- Unicorn-64645.exe (PID: 8204)
- Unicorn-63136.exe (PID: 11252)
- Unicorn-31183.exe (PID: 9792)
- Unicorn-12041.exe (PID: 9480)
- Unicorn-10749.exe (PID: 12440)
- Unicorn-32631.exe (PID: 5124)
- Unicorn-17614.exe (PID: 9512)
- Unicorn-56452.exe (PID: 8640)
- Unicorn-17112.exe (PID: 9224)
- Unicorn-43344.exe (PID: 9860)
- Unicorn-27729.exe (PID: 9356)
- Unicorn-48684.exe (PID: 12156)
- Unicorn-40054.exe (PID: 9380)
- Unicorn-52451.exe (PID: 9932)
- Unicorn-28356.exe (PID: 9408)
- Unicorn-13385.exe (PID: 10192)
- Unicorn-44118.exe (PID: 10348)
- Unicorn-13027.exe (PID: 9232)
- Unicorn-14350.exe (PID: 9524)
- Unicorn-60593.exe (PID: 10684)
- Unicorn-18944.exe (PID: 11420)
- Unicorn-58222.exe (PID: 11632)
- Unicorn-43986.exe (PID: 10996)
- Unicorn-49950.exe (PID: 9884)
- Unicorn-24001.exe (PID: 9544)
- Unicorn-3302.exe (PID: 13476)
- Unicorn-53650.exe (PID: 9704)
- Unicorn-33474.exe (PID: 13528)
- Unicorn-19316.exe (PID: 10872)
- Unicorn-60064.exe (PID: 10028)
- Unicorn-29390.exe (PID: 13544)
- Unicorn-25591.exe (PID: 9316)
- Unicorn-53219.exe (PID: 8568)
- Unicorn-30874.exe (PID: 10528)
- Unicorn-49670.exe (PID: 11448)
- Unicorn-12237.exe (PID: 11328)
- Unicorn-48196.exe (PID: 10204)
- Unicorn-59762.exe (PID: 15100)
- Unicorn-27552.exe (PID: 15116)
- Unicorn-64750.exe (PID: 9340)
- Unicorn-46027.exe (PID: 15108)
- Unicorn-55523.exe (PID: 9772)
- Unicorn-11417.exe (PID: 12912)
- Unicorn-61465.exe (PID: 11500)
- Unicorn-28496.exe (PID: 11068)
- Unicorn-22212.exe (PID: 11868)
- Unicorn-39042.exe (PID: 10544)
- Unicorn-16318.exe (PID: 9676)
- Unicorn-44116.exe (PID: 11892)
- Unicorn-50006.exe (PID: 16500)
- Unicorn-51098.exe (PID: 16528)
- Unicorn-18290.exe (PID: 14452)
- Unicorn-50006.exe (PID: 16492)
- Unicorn-53271.exe (PID: 14228)
- Unicorn-4858.exe (PID: 9468)
- Unicorn-41118.exe (PID: 3032)
- Unicorn-42248.exe (PID: 15736)
- Unicorn-37231.exe (PID: 14924)
- Unicorn-8128.exe (PID: 9760)
- Unicorn-58232.exe (PID: 7472)
- Unicorn-43920.exe (PID: 9896)
- Unicorn-11299.exe (PID: 13684)
- Unicorn-49052.exe (PID: 8856)
- Unicorn-29700.exe (PID: 9720)
- Unicorn-6753.exe (PID: 10604)
- Unicorn-49152.exe (PID: 16428)
- Unicorn-13769.exe (PID: 4040)
- Unicorn-37610.exe (PID: 11672)
- Unicorn-30516.exe (PID: 9660)
- Unicorn-20869.exe (PID: 12928)
- Unicorn-8294.exe (PID: 8220)
- Unicorn-64039.exe (PID: 11300)
- Unicorn-52000.exe (PID: 11740)
- Unicorn-33182.exe (PID: 10360)
- Unicorn-60422.exe (PID: 10844)
- Unicorn-8372.exe (PID: 13116)
- Unicorn-41954.exe (PID: 14256)
- Unicorn-28762.exe (PID: 9640)
- Unicorn-19804.exe (PID: 13108)
- Unicorn-63628.exe (PID: 16100)
- Unicorn-53088.exe (PID: 6972)
- Unicorn-9462.exe (PID: 14860)
- Unicorn-28269.exe (PID: 16292)
- Unicorn-42742.exe (PID: 10288)
- Unicorn-52888.exe (PID: 9728)
- Unicorn-49748.exe (PID: 15004)
- Unicorn-39504.exe (PID: 13624)
- Unicorn-17946.exe (PID: 6808)
- Unicorn-9841.exe (PID: 17016)
- Unicorn-23172.exe (PID: 12224)
- Unicorn-24333.exe (PID: 11184)
- Unicorn-44880.exe (PID: 10324)
- Unicorn-18703.exe (PID: 5044)
- Unicorn-21811.exe (PID: 11164)
- Unicorn-9524.exe (PID: 12140)
- Unicorn-55600.exe (PID: 11508)
- Unicorn-13312.exe (PID: 10104)
- Unicorn-41158.exe (PID: 5544)
- Unicorn-24349.exe (PID: 15956)
- Unicorn-38356.exe (PID: 16012)
- Unicorn-40054.exe (PID: 9372)
- Unicorn-36110.exe (PID: 11172)
- Unicorn-33832.exe (PID: 9420)
- Unicorn-31258.exe (PID: 10740)
- Unicorn-37480.exe (PID: 10596)
- Unicorn-775.exe (PID: 9288)
- Unicorn-53323.exe (PID: 1672)
- Unicorn-32004.exe (PID: 10572)
- Unicorn-18597.exe (PID: 15512)
- Unicorn-51595.exe (PID: 18024)
- Unicorn-26733.exe (PID: 15504)
- Unicorn-65330.exe (PID: 18032)
- Unicorn-65330.exe (PID: 18016)
- Unicorn-31761.exe (PID: 11152)
- Unicorn-50225.exe (PID: 11516)
- Unicorn-48881.exe (PID: 16068)
- Unicorn-27582.exe (PID: 10340)
- Unicorn-50681.exe (PID: 7312)
- Unicorn-42773.exe (PID: 12240)
- Unicorn-24460.exe (PID: 4220)
- Unicorn-21414.exe (PID: 14188)
- Unicorn-27946.exe (PID: 10376)
- Unicorn-23666.exe (PID: 10912)
Starts itself from another location
- Unicorn-3478.exe (PID: 5376)
- Unicorn-50396.exe (PID: 4224)
- 1 (578).exe (PID: 2140)
- Unicorn-6021.exe (PID: 1188)
- Unicorn-49410.exe (PID: 5728)
- Unicorn-26634.exe (PID: 3676)
- Unicorn-59861.exe (PID: 3900)
- Unicorn-20503.exe (PID: 5156)
- Unicorn-24256.exe (PID: 7696)
- Unicorn-37708.exe (PID: 7720)
- Unicorn-37708.exe (PID: 7712)
- Unicorn-62596.exe (PID: 7680)
- Unicorn-39746.exe (PID: 7732)
- Unicorn-27594.exe (PID: 7760)
- Unicorn-46623.exe (PID: 7772)
- Unicorn-58055.exe (PID: 7752)
- Unicorn-10235.exe (PID: 7816)
- Unicorn-1967.exe (PID: 7860)
- Unicorn-2067.exe (PID: 7888)
- Unicorn-64075.exe (PID: 7832)
- Unicorn-18980.exe (PID: 7900)
- Unicorn-47739.exe (PID: 7880)
- Unicorn-11366.exe (PID: 7912)
- Unicorn-14438.exe (PID: 7952)
- Unicorn-14703.exe (PID: 7960)
- Unicorn-64096.exe (PID: 7936)
- Unicorn-52836.exe (PID: 8000)
- Unicorn-22872.exe (PID: 7968)
- Unicorn-33732.exe (PID: 7984)
- Unicorn-59720.exe (PID: 7992)
- Unicorn-18788.exe (PID: 7976)
- Unicorn-39976.exe (PID: 8096)
- Unicorn-65466.exe (PID: 7844)
- Unicorn-11963.exe (PID: 8132)
- Unicorn-14001.exe (PID: 8148)
- Unicorn-9825.exe (PID: 8160)
- Unicorn-5476.exe (PID: 8180)
- Unicorn-20494.exe (PID: 5048)
- Unicorn-42690.exe (PID: 4920)
- Unicorn-49467.exe (PID: 5960)
- Unicorn-34330.exe (PID: 1132)
- Unicorn-53359.exe (PID: 5548)
- Unicorn-12347.exe (PID: 6744)
- Unicorn-28492.exe (PID: 7236)
- Unicorn-54127.exe (PID: 7540)
- Unicorn-16240.exe (PID: 7224)
- Unicorn-10764.exe (PID: 7332)
- Unicorn-61740.exe (PID: 7528)
- Unicorn-58232.exe (PID: 7472)
- Unicorn-56649.exe (PID: 7660)
- Unicorn-18378.exe (PID: 7424)
- Unicorn-7686.exe (PID: 7384)
- Unicorn-18277.exe (PID: 7228)
- Unicorn-49415.exe (PID: 7280)
- Unicorn-49104.exe (PID: 6424)
- Unicorn-17370.exe (PID: 7444)
- Unicorn-4463.exe (PID: 7436)
- Unicorn-5231.exe (PID: 4652)
- Unicorn-45788.exe (PID: 6752)
- Unicorn-23016.exe (PID: 7352)
- Unicorn-24984.exe (PID: 7368)
- Unicorn-52778.exe (PID: 5084)
- Unicorn-54703.exe (PID: 2772)
- Unicorn-21860.exe (PID: 4408)
- Unicorn-55637.exe (PID: 7668)
- Unicorn-33728.exe (PID: 4268)
- Unicorn-27597.exe (PID: 7676)
- Unicorn-17946.exe (PID: 6808)
- Unicorn-42882.exe (PID: 7360)
- Unicorn-35164.exe (PID: 8340)
- Unicorn-3193.exe (PID: 5228)
- Unicorn-27698.exe (PID: 6228)
- Unicorn-59939.exe (PID: 7640)
- Unicorn-13286.exe (PID: 7400)
- Unicorn-5523.exe (PID: 7812)
- Unicorn-8071.exe (PID: 7340)
- Unicorn-63878.exe (PID: 7416)
- Unicorn-64645.exe (PID: 8204)
- Unicorn-34474.exe (PID: 2092)
- Unicorn-42372.exe (PID: 6272)
- Unicorn-49110.exe (PID: 6592)
- Unicorn-22244.exe (PID: 8272)
- Unicorn-35948.exe (PID: 9164)
- Unicorn-33152.exe (PID: 7392)
- Unicorn-65393.exe (PID: 4696)
- Unicorn-38964.exe (PID: 8392)
- Unicorn-27763.exe (PID: 8648)
- Unicorn-49462.exe (PID: 8296)
- Unicorn-10889.exe (PID: 9192)
- Unicorn-9447.exe (PID: 2108)
- Unicorn-21258.exe (PID: 8424)
- Unicorn-37532.exe (PID: 9200)
- Unicorn-30531.exe (PID: 8380)
- Unicorn-62700.exe (PID: 3132)
- Unicorn-27458.exe (PID: 8400)
- Unicorn-6483.exe (PID: 8332)
- Unicorn-53738.exe (PID: 8480)
- Unicorn-19237.exe (PID: 7608)
- Unicorn-6575.exe (PID: 8520)
- Unicorn-4537.exe (PID: 8504)
- Unicorn-4283.exe (PID: 8948)
- Unicorn-57190.exe (PID: 3884)
- Unicorn-50427.exe (PID: 5360)
- Unicorn-56452.exe (PID: 8640)
- Unicorn-23526.exe (PID: 9052)
- Unicorn-3743.exe (PID: 8920)
- Unicorn-9560.exe (PID: 8432)
- Unicorn-46298.exe (PID: 8700)
- Unicorn-15425.exe (PID: 8832)
- Unicorn-23116.exe (PID: 9960)
- Unicorn-29237.exe (PID: 9968)
- Unicorn-27610.exe (PID: 8620)
- Unicorn-36956.exe (PID: 9104)
- Unicorn-53088.exe (PID: 6972)
- Unicorn-27946.exe (PID: 10016)
- Unicorn-50552.exe (PID: 9348)
- Unicorn-63856.exe (PID: 9744)
- Unicorn-52923.exe (PID: 8656)
- Unicorn-5819.exe (PID: 9448)
- Unicorn-56966.exe (PID: 9460)
- Unicorn-21668.exe (PID: 1240)
- Unicorn-7360.exe (PID: 1300)
- Unicorn-24309.exe (PID: 8212)
- Unicorn-64345.exe (PID: 9020)
- Unicorn-45954.exe (PID: 8692)
- Unicorn-10266.exe (PID: 9536)
- Unicorn-41232.exe (PID: 9004)
- Unicorn-33038.exe (PID: 9876)
- Unicorn-10785.exe (PID: 7672)
- Unicorn-54252.exe (PID: 9056)
- Unicorn-51361.exe (PID: 8896)
- Unicorn-36956.exe (PID: 9096)
- Unicorn-36332.exe (PID: 9088)
- Unicorn-47734.exe (PID: 5984)
- Unicorn-39822.exe (PID: 9400)
- Unicorn-8751.exe (PID: 9128)
- Unicorn-14158.exe (PID: 9332)
- Unicorn-21095.exe (PID: 8452)
- Unicorn-5973.exe (PID: 8872)
- Unicorn-59083.exe (PID: 9392)
- Unicorn-40796.exe (PID: 10332)
- Unicorn-5523.exe (PID: 680)
- Unicorn-4236.exe (PID: 9568)
- Unicorn-47236.exe (PID: 9620)
- Unicorn-11749.exe (PID: 9504)
- Unicorn-29918.exe (PID: 8616)
- Unicorn-42565.exe (PID: 8880)
- Unicorn-10379.exe (PID: 9628)
- Unicorn-47328.exe (PID: 9808)
- Unicorn-42694.exe (PID: 10892)
- Unicorn-18630.exe (PID: 10072)
- Unicorn-1927.exe (PID: 9688)
- Unicorn-41118.exe (PID: 3032)
- Unicorn-53676.exe (PID: 8116)
- Unicorn-53676.exe (PID: 2644)
- Unicorn-13603.exe (PID: 9308)
- Unicorn-54894.exe (PID: 2616)
- Unicorn-64698.exe (PID: 11084)
- Unicorn-62560.exe (PID: 10884)
- Unicorn-34662.exe (PID: 8864)
- Unicorn-24029.exe (PID: 9492)
- Unicorn-16920.exe (PID: 9136)
- Unicorn-63136.exe (PID: 11252)
- Unicorn-31183.exe (PID: 9792)
- Unicorn-32631.exe (PID: 5124)
- Unicorn-12041.exe (PID: 9480)
- Unicorn-10749.exe (PID: 12440)
- Unicorn-17112.exe (PID: 9224)
- Unicorn-17614.exe (PID: 9512)
- Unicorn-28762.exe (PID: 9640)
- Unicorn-48684.exe (PID: 12156)
- Unicorn-40054.exe (PID: 9380)
- Unicorn-52451.exe (PID: 9932)
- Unicorn-28356.exe (PID: 9408)
- Unicorn-13027.exe (PID: 9232)
- Unicorn-44118.exe (PID: 10348)
- Unicorn-14350.exe (PID: 9524)
- Unicorn-13385.exe (PID: 10192)
- Unicorn-43344.exe (PID: 9860)
- Unicorn-60593.exe (PID: 10684)
- Unicorn-18944.exe (PID: 11420)
- Unicorn-58222.exe (PID: 11632)
- Unicorn-43986.exe (PID: 10996)
- Unicorn-49950.exe (PID: 9884)
- Unicorn-24001.exe (PID: 9544)
- Unicorn-3302.exe (PID: 13476)
- Unicorn-53650.exe (PID: 9704)
- Unicorn-19316.exe (PID: 10872)
- Unicorn-33474.exe (PID: 13528)
- Unicorn-29390.exe (PID: 13544)
- Unicorn-60064.exe (PID: 10028)
- Unicorn-30874.exe (PID: 10528)
- Unicorn-53219.exe (PID: 8568)
- Unicorn-49670.exe (PID: 11448)
- Unicorn-48196.exe (PID: 10204)
- Unicorn-28788.exe (PID: 9012)
- Unicorn-12237.exe (PID: 11328)
- Unicorn-27552.exe (PID: 15116)
- Unicorn-46027.exe (PID: 15108)
- Unicorn-59762.exe (PID: 15100)
- Unicorn-55523.exe (PID: 9772)
- Unicorn-64750.exe (PID: 9340)
- Unicorn-11417.exe (PID: 12912)
- Unicorn-61465.exe (PID: 11500)
- Unicorn-39042.exe (PID: 10544)
- Unicorn-28496.exe (PID: 11068)
- Unicorn-22212.exe (PID: 11868)
- Unicorn-16318.exe (PID: 9676)
- Unicorn-44116.exe (PID: 11892)
- Unicorn-50006.exe (PID: 16500)
- Unicorn-51098.exe (PID: 16528)
- Unicorn-18290.exe (PID: 14452)
- Unicorn-50006.exe (PID: 16492)
- Unicorn-4858.exe (PID: 9468)
- Unicorn-53271.exe (PID: 14228)
- Unicorn-56063.exe (PID: 1748)
- Unicorn-19696.exe (PID: 8732)
- Unicorn-42248.exe (PID: 15736)
- Unicorn-37231.exe (PID: 14924)
- Unicorn-43920.exe (PID: 9896)
- Unicorn-11299.exe (PID: 13684)
- Unicorn-8128.exe (PID: 9760)
- Unicorn-49052.exe (PID: 8856)
- Unicorn-29700.exe (PID: 9720)
- Unicorn-51595.exe (PID: 18024)
- Unicorn-65330.exe (PID: 18016)
- Unicorn-65330.exe (PID: 18032)
- Unicorn-33182.exe (PID: 10360)
Executes application which crashes
- Unicorn-63281.exe (PID: 8116)
- Unicorn-62653.exe (PID: 8564)
- Unicorn-34769.exe (PID: 4284)
- Unicorn-29390.exe (PID: 13544)
INFO
Checks supported languages
- 1 (578).exe (PID: 2140)
- Unicorn-50396.exe (PID: 4224)
- Unicorn-49410.exe (PID: 5728)
- Unicorn-3478.exe (PID: 5376)
- Unicorn-59861.exe (PID: 3900)
- Unicorn-20503.exe (PID: 5156)
- Unicorn-6021.exe (PID: 1188)
- Unicorn-62596.exe (PID: 7680)
- Unicorn-24256.exe (PID: 7696)
- Unicorn-26634.exe (PID: 3676)
- Unicorn-39746.exe (PID: 7732)
- Unicorn-27594.exe (PID: 7760)
- Unicorn-46623.exe (PID: 7772)
- Unicorn-37708.exe (PID: 7712)
- Unicorn-37708.exe (PID: 7720)
- Unicorn-58055.exe (PID: 7752)
- Unicorn-10235.exe (PID: 7816)
- Unicorn-64075.exe (PID: 7832)
- Unicorn-1967.exe (PID: 7860)
- Unicorn-65466.exe (PID: 7844)
- Unicorn-2067.exe (PID: 7888)
- Unicorn-11366.exe (PID: 7912)
- Unicorn-64096.exe (PID: 7936)
- Unicorn-47739.exe (PID: 7880)
- Unicorn-18980.exe (PID: 7900)
- Unicorn-14703.exe (PID: 7960)
- Unicorn-22872.exe (PID: 7968)
- Unicorn-18788.exe (PID: 7976)
- Unicorn-14438.exe (PID: 7952)
- Unicorn-59720.exe (PID: 7992)
- Unicorn-33732.exe (PID: 7984)
- Unicorn-52836.exe (PID: 8000)
- Unicorn-39976.exe (PID: 8096)
- Unicorn-63281.exe (PID: 8116)
- Unicorn-11963.exe (PID: 8132)
- Unicorn-14001.exe (PID: 8148)
- Unicorn-9825.exe (PID: 8160)
- Unicorn-5476.exe (PID: 8180)
- Unicorn-42690.exe (PID: 4920)
- Unicorn-34330.exe (PID: 1132)
- Unicorn-53359.exe (PID: 5548)
- Unicorn-12347.exe (PID: 6744)
- Unicorn-49467.exe (PID: 5960)
- Unicorn-20494.exe (PID: 5048)
- Unicorn-16240.exe (PID: 7224)
- Unicorn-53088.exe (PID: 6972)
- Unicorn-28492.exe (PID: 7236)
- Unicorn-18277.exe (PID: 7228)
- Unicorn-9447.exe (PID: 2108)
- Unicorn-49104.exe (PID: 6424)
- Unicorn-8071.exe (PID: 7340)
- Unicorn-10764.exe (PID: 7332)
- Unicorn-42882.exe (PID: 7360)
- Unicorn-23016.exe (PID: 7352)
- Unicorn-33152.exe (PID: 7392)
- Unicorn-7686.exe (PID: 7384)
- Unicorn-13286.exe (PID: 7400)
- Unicorn-4463.exe (PID: 7436)
- Unicorn-17370.exe (PID: 7444)
- Unicorn-49415.exe (PID: 7280)
- Unicorn-54127.exe (PID: 7540)
- Unicorn-19237.exe (PID: 7608)
- Unicorn-56649.exe (PID: 7660)
- Unicorn-61740.exe (PID: 7528)
- Unicorn-24984.exe (PID: 7368)
- Unicorn-63878.exe (PID: 7416)
- Unicorn-18378.exe (PID: 7424)
- Unicorn-54703.exe (PID: 2772)
- Unicorn-58232.exe (PID: 7472)
- Unicorn-55637.exe (PID: 7668)
- Unicorn-47734.exe (PID: 5984)
- Unicorn-45788.exe (PID: 6752)
- Unicorn-49110.exe (PID: 6592)
- Unicorn-50427.exe (PID: 5360)
- Unicorn-10785.exe (PID: 7672)
- Unicorn-3193.exe (PID: 5228)
- Unicorn-21668.exe (PID: 1240)
- Unicorn-17946.exe (PID: 6808)
- Unicorn-52778.exe (PID: 5084)
- Unicorn-21860.exe (PID: 4408)
- Unicorn-34474.exe (PID: 2092)
- Unicorn-27698.exe (PID: 6228)
- Unicorn-27597.exe (PID: 7676)
- Unicorn-5231.exe (PID: 4652)
- Unicorn-65393.exe (PID: 4696)
- Unicorn-62700.exe (PID: 3132)
- Unicorn-42372.exe (PID: 6272)
- Unicorn-33728.exe (PID: 4268)
- Unicorn-59939.exe (PID: 7640)
- Unicorn-64645.exe (PID: 8204)
- Unicorn-5523.exe (PID: 7812)
- Unicorn-5523.exe (PID: 680)
- Unicorn-24309.exe (PID: 8212)
- Unicorn-22244.exe (PID: 8272)
- Unicorn-49462.exe (PID: 8296)
- Unicorn-38964.exe (PID: 8392)
- Unicorn-27458.exe (PID: 8400)
- Unicorn-21258.exe (PID: 8424)
- Unicorn-6483.exe (PID: 8332)
- Unicorn-35164.exe (PID: 8340)
- Unicorn-30531.exe (PID: 8380)
- Unicorn-9560.exe (PID: 8432)
- Unicorn-6575.exe (PID: 8520)
- Unicorn-4537.exe (PID: 8504)
- Unicorn-62653.exe (PID: 8564)
- Unicorn-56452.exe (PID: 8640)
- Unicorn-53738.exe (PID: 8480)
- Unicorn-45954.exe (PID: 8692)
- Unicorn-27763.exe (PID: 8648)
- Unicorn-52923.exe (PID: 8656)
- Unicorn-19696.exe (PID: 8732)
- Unicorn-46298.exe (PID: 8700)
- Unicorn-34662.exe (PID: 8864)
- Unicorn-5973.exe (PID: 8872)
- Unicorn-49052.exe (PID: 8856)
- Unicorn-35948.exe (PID: 9164)
- Unicorn-3743.exe (PID: 8920)
- Unicorn-37532.exe (PID: 9200)
- Unicorn-10889.exe (PID: 9192)
- Unicorn-4283.exe (PID: 8948)
- Unicorn-41232.exe (PID: 9004)
- Unicorn-36956.exe (PID: 9096)
- Unicorn-42565.exe (PID: 8880)
- Unicorn-51361.exe (PID: 8896)
- Unicorn-28788.exe (PID: 9012)
- Unicorn-64345.exe (PID: 9020)
- Unicorn-15425.exe (PID: 8832)
- Unicorn-36956.exe (PID: 9104)
- Unicorn-8751.exe (PID: 9128)
- Unicorn-57190.exe (PID: 3884)
- Unicorn-16920.exe (PID: 9136)
- Unicorn-7360.exe (PID: 1300)
- Unicorn-21095.exe (PID: 8452)
- Unicorn-29918.exe (PID: 8616)
- Unicorn-8294.exe (PID: 8220)
- Unicorn-53676.exe (PID: 2644)
- Unicorn-36332.exe (PID: 9088)
- Unicorn-53676.exe (PID: 8116)
- Unicorn-27610.exe (PID: 8620)
- Unicorn-54252.exe (PID: 9056)
- Unicorn-13027.exe (PID: 9232)
- Unicorn-25591.exe (PID: 9316)
- Unicorn-775.exe (PID: 9288)
- Unicorn-13603.exe (PID: 9308)
- Unicorn-23526.exe (PID: 9052)
- Unicorn-17112.exe (PID: 9224)
- Unicorn-64750.exe (PID: 9340)
- Unicorn-50552.exe (PID: 9348)
- Unicorn-14158.exe (PID: 9332)
- Unicorn-27729.exe (PID: 9356)
- Unicorn-21863.exe (PID: 9364)
- Unicorn-40054.exe (PID: 9380)
- Unicorn-59083.exe (PID: 9392)
- Unicorn-39822.exe (PID: 9400)
- Unicorn-28356.exe (PID: 9408)
- Unicorn-33832.exe (PID: 9420)
- Unicorn-5819.exe (PID: 9448)
- Unicorn-40054.exe (PID: 9372)
- Unicorn-56966.exe (PID: 9460)
- Unicorn-12041.exe (PID: 9480)
- Unicorn-11749.exe (PID: 9504)
- Unicorn-17614.exe (PID: 9512)
- Unicorn-14350.exe (PID: 9524)
- Unicorn-24001.exe (PID: 9544)
- Unicorn-10266.exe (PID: 9536)
- Unicorn-29237.exe (PID: 9968)
- Unicorn-4236.exe (PID: 9568)
- Unicorn-23116.exe (PID: 9960)
- Unicorn-24029.exe (PID: 9492)
- Unicorn-47236.exe (PID: 9620)
- Unicorn-10379.exe (PID: 9628)
- Unicorn-16318.exe (PID: 9676)
- Unicorn-30516.exe (PID: 9660)
- Unicorn-1927.exe (PID: 9688)
- Unicorn-53650.exe (PID: 9704)
- Unicorn-41398.exe (PID: 9696)
- Unicorn-33784.exe (PID: 9712)
- Unicorn-63856.exe (PID: 9744)
- Unicorn-29700.exe (PID: 9720)
- Unicorn-52888.exe (PID: 9728)
- Unicorn-18931.exe (PID: 9784)
- Unicorn-8128.exe (PID: 9760)
- Unicorn-55523.exe (PID: 9772)
- Unicorn-31183.exe (PID: 9792)
- Unicorn-27946.exe (PID: 10016)
- Unicorn-28762.exe (PID: 9640)
- Unicorn-47328.exe (PID: 9808)
- Unicorn-60235.exe (PID: 9816)
- Unicorn-43344.exe (PID: 9860)
- Unicorn-33038.exe (PID: 9876)
- Unicorn-49950.exe (PID: 9884)
- Unicorn-43920.exe (PID: 9896)
- Unicorn-52451.exe (PID: 9932)
- Unicorn-60064.exe (PID: 10028)
- Unicorn-13556.exe (PID: 10056)
- Unicorn-13312.exe (PID: 10104)
- Unicorn-32606.exe (PID: 10120)
- Unicorn-13385.exe (PID: 10192)
- Unicorn-18630.exe (PID: 10072)
- Unicorn-48196.exe (PID: 10204)
- Unicorn-37890.exe (PID: 10236)
- Unicorn-15908.exe (PID: 4424)
- Unicorn-54894.exe (PID: 2616)
- Unicorn-42742.exe (PID: 10288)
- Unicorn-40796.exe (PID: 10332)
- Unicorn-7282.exe (PID: 9032)
- Unicorn-53219.exe (PID: 8568)
- Unicorn-13769.exe (PID: 4040)
- Unicorn-19225.exe (PID: 10264)
- Unicorn-44880.exe (PID: 10324)
- Unicorn-44118.exe (PID: 10348)
- Unicorn-27946.exe (PID: 10376)
- Unicorn-27582.exe (PID: 10340)
- Unicorn-33182.exe (PID: 10360)
- Unicorn-41682.exe (PID: 10388)
- Unicorn-39042.exe (PID: 10544)
- Unicorn-41118.exe (PID: 3032)
- Unicorn-56063.exe (PID: 1748)
- Unicorn-30874.exe (PID: 10528)
- Unicorn-32004.exe (PID: 10564)
- Unicorn-6753.exe (PID: 10604)
- Unicorn-29312.exe (PID: 10580)
- Unicorn-60593.exe (PID: 10684)
- Unicorn-46525.exe (PID: 10668)
- Unicorn-25036.exe (PID: 10676)
- Unicorn-23090.exe (PID: 10696)
- Unicorn-31258.exe (PID: 10740)
- Unicorn-48170.exe (PID: 10792)
- Unicorn-60422.exe (PID: 10844)
- Unicorn-23282.exe (PID: 10616)
- Unicorn-19316.exe (PID: 10872)
- Unicorn-42694.exe (PID: 10892)
- Unicorn-62560.exe (PID: 10884)
- Unicorn-41158.exe (PID: 5544)
- Unicorn-38201.exe (PID: 4608)
- Unicorn-35918.exe (PID: 10924)
- Unicorn-63354.exe (PID: 6652)
- Unicorn-24460.exe (PID: 4220)
- Unicorn-15305.exe (PID: 10968)
- Unicorn-46139.exe (PID: 10980)
- Unicorn-43986.exe (PID: 10996)
- Unicorn-64890.exe (PID: 11036)
- Unicorn-4858.exe (PID: 9468)
- Unicorn-42524.exe (PID: 11060)
- Unicorn-28496.exe (PID: 11068)
- Unicorn-64698.exe (PID: 11084)
- Unicorn-31925.exe (PID: 11104)
- Unicorn-18190.exe (PID: 11112)
- Unicorn-18190.exe (PID: 11120)
- Unicorn-31761.exe (PID: 11152)
- Unicorn-21811.exe (PID: 11164)
- Unicorn-36110.exe (PID: 11172)
- Unicorn-30555.exe (PID: 11228)
- Unicorn-6862.exe (PID: 10732)
- Unicorn-32004.exe (PID: 10572)
- Unicorn-37480.exe (PID: 10596)
- Unicorn-63484.exe (PID: 11268)
- Unicorn-24333.exe (PID: 11184)
- Unicorn-63136.exe (PID: 11252)
- Unicorn-33312.exe (PID: 11308)
- Unicorn-12237.exe (PID: 11320)
- Unicorn-12237.exe (PID: 11328)
- Unicorn-37418.exe (PID: 11396)
- Unicorn-15079.exe (PID: 11288)
- Unicorn-49670.exe (PID: 11448)
- Unicorn-47724.exe (PID: 11464)
- Unicorn-41310.exe (PID: 11480)
- Unicorn-61465.exe (PID: 11500)
- Unicorn-55600.exe (PID: 11508)
- Unicorn-22795.exe (PID: 11532)
- Unicorn-50225.exe (PID: 11516)
- Unicorn-34769.exe (PID: 4284)
- Unicorn-29504.exe (PID: 11556)
- Unicorn-50054.exe (PID: 11612)
- Unicorn-50801.exe (PID: 11624)
- Unicorn-58222.exe (PID: 11632)
- Unicorn-45586.exe (PID: 11408)
- Unicorn-18944.exe (PID: 11420)
- Unicorn-32631.exe (PID: 5124)
- Unicorn-23666.exe (PID: 10912)
- Unicorn-10749.exe (PID: 12440)
- Unicorn-2799.exe (PID: 11660)
- Unicorn-37610.exe (PID: 11672)
- Unicorn-41694.exe (PID: 11680)
- Unicorn-3354.exe (PID: 11700)
- Unicorn-46446.exe (PID: 11808)
- Unicorn-57215.exe (PID: 11768)
- Unicorn-56560.exe (PID: 11800)
- Unicorn-44116.exe (PID: 11892)
- Unicorn-17190.exe (PID: 11732)
- Unicorn-52000.exe (PID: 11740)
- Unicorn-29826.exe (PID: 11944)
- Unicorn-29826.exe (PID: 11940)
- Unicorn-26872.exe (PID: 11964)
- Unicorn-40608.exe (PID: 11976)
- Unicorn-57044.exe (PID: 12048)
- Unicorn-6181.exe (PID: 12208)
- Unicorn-32348.exe (PID: 12112)
- Unicorn-9524.exe (PID: 12140)
- Unicorn-57983.exe (PID: 12216)
- Unicorn-34107.exe (PID: 12232)
- Unicorn-35424.exe (PID: 12256)
- Unicorn-23172.exe (PID: 12224)
- Unicorn-42773.exe (PID: 12240)
- Unicorn-3567.exe (PID: 12036)
- Unicorn-62882.exe (PID: 12096)
- Unicorn-48684.exe (PID: 12156)
- Unicorn-151.exe (PID: 5956)
- Unicorn-14449.exe (PID: 2904)
- Unicorn-51298.exe (PID: 4868)
- Unicorn-37562.exe (PID: 7052)
- Unicorn-35424.exe (PID: 12264)
- Unicorn-64039.exe (PID: 11300)
- Unicorn-28840.exe (PID: 12548)
- Unicorn-3302.exe (PID: 13476)
- Unicorn-54091.exe (PID: 12532)
- Unicorn-6473.exe (PID: 12584)
- Unicorn-33474.exe (PID: 13528)
- Unicorn-20672.exe (PID: 12524)
- Unicorn-27448.exe (PID: 12572)
- Unicorn-23940.exe (PID: 12660)
- Unicorn-24847.exe (PID: 12648)
- Unicorn-29151.exe (PID: 12680)
- Unicorn-9550.exe (PID: 12688)
- Unicorn-58096.exe (PID: 12696)
- Unicorn-63961.exe (PID: 12704)
- Unicorn-29390.exe (PID: 13544)
- Unicorn-22810.exe (PID: 12616)
- Unicorn-10557.exe (PID: 12624)
- Unicorn-11112.exe (PID: 12632)
- Unicorn-22047.exe (PID: 12640)
- Unicorn-41019.exe (PID: 12712)
- Unicorn-1984.exe (PID: 11816)
- Unicorn-50967.exe (PID: 12848)
- Unicorn-63769.exe (PID: 12800)
- Unicorn-44169.exe (PID: 12808)
- Unicorn-60697.exe (PID: 12824)
- Unicorn-18654.exe (PID: 12836)
- Unicorn-34076.exe (PID: 12948)
- Unicorn-204.exe (PID: 13092)
- Unicorn-22016.exe (PID: 13080)
- Unicorn-19804.exe (PID: 13108)
- Unicorn-8372.exe (PID: 13116)
- Unicorn-54547.exe (PID: 9912)
- Unicorn-6042.exe (PID: 13160)
- Unicorn-63458.exe (PID: 2416)
- Unicorn-34822.exe (PID: 13200)
- Unicorn-56395.exe (PID: 11840)
- Unicorn-20869.exe (PID: 12928)
- Unicorn-23669.exe (PID: 12920)
- Unicorn-29535.exe (PID: 12936)
- Unicorn-40609.exe (PID: 13220)
- Unicorn-57210.exe (PID: 13244)
- Unicorn-50967.exe (PID: 13844)
- Unicorn-53271.exe (PID: 14228)
- Unicorn-21414.exe (PID: 14188)
- Unicorn-19777.exe (PID: 13152)
- Unicorn-33858.exe (PID: 13772)
- Unicorn-65191.exe (PID: 11876)
- Unicorn-42434.exe (PID: 4284)
- Unicorn-24657.exe (PID: 13364)
- Unicorn-204.exe (PID: 13100)
- Unicorn-19803.exe (PID: 11848)
- Unicorn-47672.exe (PID: 13648)
- Unicorn-61055.exe (PID: 13676)
- Unicorn-11417.exe (PID: 12912)
- Unicorn-6042.exe (PID: 13168)
- Unicorn-64702.exe (PID: 12856)
- Unicorn-11299.exe (PID: 13684)
- Unicorn-39504.exe (PID: 13624)
- Unicorn-65186.exe (PID: 12376)
- Unicorn-972.exe (PID: 13392)
- Unicorn-12669.exe (PID: 13356)
- Unicorn-29222.exe (PID: 13192)
- Unicorn-317.exe (PID: 12080)
- Unicorn-59762.exe (PID: 15100)
- Unicorn-46027.exe (PID: 15108)
- Unicorn-40296.exe (PID: 13336)
- Unicorn-27552.exe (PID: 15116)
- Unicorn-20572.exe (PID: 13384)
- Unicorn-11907.exe (PID: 13400)
- Unicorn-53053.exe (PID: 13432)
- Unicorn-2939.exe (PID: 13800)
- Unicorn-20161.exe (PID: 12372)
- Unicorn-55740.exe (PID: 13604)
- Unicorn-41954.exe (PID: 14256)
- Unicorn-27596.exe (PID: 13736)
- Unicorn-50530.exe (PID: 11828)
- Unicorn-7360.exe (PID: 13176)
- Unicorn-22212.exe (PID: 11868)
- Unicorn-9353.exe (PID: 13744)
- Unicorn-50941.exe (PID: 13752)
- Unicorn-39020.exe (PID: 13412)
- Unicorn-56971.exe (PID: 13692)
- Unicorn-12285.exe (PID: 12344)
- Unicorn-61605.exe (PID: 13612)
- Unicorn-48200.exe (PID: 11884)
- Unicorn-50604.exe (PID: 13208)
- Unicorn-41643.exe (PID: 14444)
- Unicorn-8346.exe (PID: 14496)
- Unicorn-14760.exe (PID: 14468)
- Unicorn-18290.exe (PID: 14452)
- Unicorn-52808.exe (PID: 14488)
- Unicorn-6400.exe (PID: 14568)
- Unicorn-45295.exe (PID: 14580)
- Unicorn-3323.exe (PID: 14316)
- Unicorn-56608.exe (PID: 14356)
- Unicorn-21798.exe (PID: 14368)
- Unicorn-16152.exe (PID: 14396)
- Unicorn-31917.exe (PID: 14436)
- Unicorn-45295.exe (PID: 14588)
- Unicorn-6447.exe (PID: 12296)
- Unicorn-28843.exe (PID: 14596)
- Unicorn-28651.exe (PID: 14680)
- Unicorn-31274.exe (PID: 14768)
- Unicorn-36768.exe (PID: 13140)
- Unicorn-3293.exe (PID: 14716)
- Unicorn-62000.exe (PID: 14756)
- Unicorn-35358.exe (PID: 14812)
- Unicorn-22784.exe (PID: 13324)
- Unicorn-31698.exe (PID: 13376)
- Unicorn-33452.exe (PID: 13424)
- Unicorn-29063.exe (PID: 14852)
- Unicorn-639.exe (PID: 14932)
- Unicorn-6093.exe (PID: 14704)
- Unicorn-12669.exe (PID: 13348)
- Unicorn-23197.exe (PID: 14876)
- Unicorn-39634.exe (PID: 15352)
- Unicorn-13546.exe (PID: 14972)
- Unicorn-20867.exe (PID: 15044)
- Unicorn-10853.exe (PID: 14996)
- Unicorn-9462.exe (PID: 14868)
- Unicorn-13546.exe (PID: 14980)
- Unicorn-7132.exe (PID: 15076)
- Unicorn-53924.exe (PID: 14900)
- Unicorn-9462.exe (PID: 14860)
- Unicorn-40426.exe (PID: 15092)
- Unicorn-20397.exe (PID: 14916)
- Unicorn-11216.exe (PID: 15020)
- Unicorn-9462.exe (PID: 14908)
- Unicorn-35285.exe (PID: 5308)
- Unicorn-6577.exe (PID: 15192)
- Unicorn-53924.exe (PID: 14884)
- Unicorn-9462.exe (PID: 14892)
- Unicorn-49748.exe (PID: 15004)
- Unicorn-13546.exe (PID: 14964)
- Unicorn-55321.exe (PID: 15148)
- Unicorn-13546.exe (PID: 14956)
- Unicorn-37231.exe (PID: 14924)
- Unicorn-50006.exe (PID: 16500)
- Unicorn-50006.exe (PID: 16492)
- Unicorn-51098.exe (PID: 16528)
- Unicorn-61902.exe (PID: 12864)
- Unicorn-11216.exe (PID: 15016)
- Unicorn-18597.exe (PID: 15512)
- Unicorn-26733.exe (PID: 15504)
- Unicorn-9462.exe (PID: 15464)
- Unicorn-42248.exe (PID: 15736)
- Unicorn-21160.exe (PID: 6384)
- Unicorn-9078.exe (PID: 12360)
- Unicorn-18636.exe (PID: 15828)
- Unicorn-27195.exe (PID: 15744)
- Unicorn-28512.exe (PID: 15720)
- Unicorn-60630.exe (PID: 15880)
- Unicorn-7132.exe (PID: 15496)
- Unicorn-46551.exe (PID: 15972)
- Unicorn-36126.exe (PID: 15752)
- Unicorn-3235.exe (PID: 16596)
- Unicorn-40746.exe (PID: 16056)
- Unicorn-57625.exe (PID: 16620)
- Unicorn-34271.exe (PID: 15988)
- Unicorn-38356.exe (PID: 16012)
- Unicorn-63628.exe (PID: 16100)
- Unicorn-48881.exe (PID: 16068)
- Unicorn-2685.exe (PID: 14940)
- Unicorn-27281.exe (PID: 14948)
- Unicorn-49893.exe (PID: 16136)
- Unicorn-51839.exe (PID: 16040)
- Unicorn-50944.exe (PID: 16124)
- Unicorn-3956.exe (PID: 16196)
- Unicorn-51019.exe (PID: 16220)
- Unicorn-49893.exe (PID: 16144)
- Unicorn-24349.exe (PID: 15956)
- Unicorn-51952.exe (PID: 16436)
- Unicorn-43784.exe (PID: 16408)
- Unicorn-805.exe (PID: 4304)
- Unicorn-640.exe (PID: 16452)
- Unicorn-6743.exe (PID: 16548)
- Unicorn-41070.exe (PID: 16160)
- Unicorn-3956.exe (PID: 16204)
- Unicorn-63628.exe (PID: 16116)
- Unicorn-49893.exe (PID: 16152)
- Unicorn-36270.exe (PID: 16484)
- Unicorn-48954.exe (PID: 16284)
- Unicorn-65482.exe (PID: 16300)
- Unicorn-28269.exe (PID: 16292)
- Unicorn-60391.exe (PID: 16316)
- Unicorn-57512.exe (PID: 16444)
- Unicorn-49152.exe (PID: 16428)
- Unicorn-29280.exe (PID: 16080)
- Unicorn-24349.exe (PID: 15948)
- Unicorn-60828.exe (PID: 16168)
- Unicorn-22403.exe (PID: 16264)
- Unicorn-9462.exe (PID: 15456)
- Unicorn-8668.exe (PID: 16232)
- Unicorn-57624.exe (PID: 14612)
- Unicorn-48378.exe (PID: 15932)
- Unicorn-35643.exe (PID: 16920)
- Unicorn-51595.exe (PID: 18024)
- Unicorn-65330.exe (PID: 18032)
- Unicorn-65330.exe (PID: 18016)
- Unicorn-26977.exe (PID: 16928)
- Unicorn-29777.exe (PID: 16940)
- Unicorn-29777.exe (PID: 16956)
- Unicorn-36053.exe (PID: 15996)
- Unicorn-19603.exe (PID: 16240)
- Unicorn-31418.exe (PID: 16212)
- Unicorn-61573.exe (PID: 16632)
- Unicorn-22312.exe (PID: 16276)
- Unicorn-40084.exe (PID: 16612)
- Unicorn-62721.exe (PID: 16572)
- Unicorn-15082.exe (PID: 16092)
- Unicorn-59160.exe (PID: 15964)
- Unicorn-63628.exe (PID: 16184)
- Unicorn-38216.exe (PID: 16468)
The sample compiled with chinese language support
- 1 (578).exe (PID: 2140)
- Unicorn-50006.exe (PID: 16492)
- Unicorn-23016.exe (PID: 7352)
Reads the computer name
- 1 (578).exe (PID: 2140)
- Unicorn-50396.exe (PID: 4224)
- Unicorn-49410.exe (PID: 5728)
- Unicorn-3478.exe (PID: 5376)
- Unicorn-6021.exe (PID: 1188)
- Unicorn-26634.exe (PID: 3676)
- Unicorn-62596.exe (PID: 7680)
- Unicorn-24256.exe (PID: 7696)
- Unicorn-59861.exe (PID: 3900)
- Unicorn-20503.exe (PID: 5156)
- Unicorn-37708.exe (PID: 7720)
- Unicorn-39746.exe (PID: 7732)
- Unicorn-37708.exe (PID: 7712)
- Unicorn-10235.exe (PID: 7816)
- Unicorn-64075.exe (PID: 7832)
- Unicorn-27594.exe (PID: 7760)
- Unicorn-46623.exe (PID: 7772)
- Unicorn-58055.exe (PID: 7752)
- Unicorn-1967.exe (PID: 7860)
- Unicorn-65466.exe (PID: 7844)
- Unicorn-2067.exe (PID: 7888)
- Unicorn-18980.exe (PID: 7900)
- Unicorn-47739.exe (PID: 7880)
- Unicorn-11366.exe (PID: 7912)
- Unicorn-14438.exe (PID: 7952)
- Unicorn-14703.exe (PID: 7960)
- Unicorn-52836.exe (PID: 8000)
- Unicorn-18788.exe (PID: 7976)
- Unicorn-64096.exe (PID: 7936)
- Unicorn-22872.exe (PID: 7968)
- Unicorn-59720.exe (PID: 7992)
- Unicorn-33732.exe (PID: 7984)
- Unicorn-39976.exe (PID: 8096)
- Unicorn-63281.exe (PID: 8116)
- Unicorn-9825.exe (PID: 8160)
- Unicorn-14001.exe (PID: 8148)
- Unicorn-11963.exe (PID: 8132)
- Unicorn-42690.exe (PID: 4920)
- Unicorn-20494.exe (PID: 5048)
- Unicorn-49467.exe (PID: 5960)
- Unicorn-5476.exe (PID: 8180)
- Unicorn-34330.exe (PID: 1132)
- Unicorn-53359.exe (PID: 5548)
- Unicorn-12347.exe (PID: 6744)
- Unicorn-53088.exe (PID: 6972)
- Unicorn-9447.exe (PID: 2108)
- Unicorn-28492.exe (PID: 7236)
- Unicorn-16240.exe (PID: 7224)
- Unicorn-19237.exe (PID: 7608)
- Unicorn-54127.exe (PID: 7540)
- Unicorn-61740.exe (PID: 7528)
- Unicorn-10764.exe (PID: 7332)
- Unicorn-58232.exe (PID: 7472)
- Unicorn-4463.exe (PID: 7436)
- Unicorn-56649.exe (PID: 7660)
- Unicorn-18378.exe (PID: 7424)
- Unicorn-24984.exe (PID: 7368)
- Unicorn-7686.exe (PID: 7384)
- Unicorn-49415.exe (PID: 7280)
- Unicorn-17370.exe (PID: 7444)
- Unicorn-18277.exe (PID: 7228)
- Unicorn-49104.exe (PID: 6424)
- Unicorn-45788.exe (PID: 6752)
- Unicorn-52778.exe (PID: 5084)
- Unicorn-23016.exe (PID: 7352)
- Unicorn-5231.exe (PID: 4652)
- Unicorn-47734.exe (PID: 5984)
- Unicorn-55637.exe (PID: 7668)
- Unicorn-27597.exe (PID: 7676)
- Unicorn-65393.exe (PID: 4696)
- Unicorn-17946.exe (PID: 6808)
- Unicorn-54703.exe (PID: 2772)
- Unicorn-21860.exe (PID: 4408)
- Unicorn-33728.exe (PID: 4268)
- Unicorn-42882.exe (PID: 7360)
- Unicorn-35164.exe (PID: 8340)
- Unicorn-27698.exe (PID: 6228)
- Unicorn-59939.exe (PID: 7640)
- Unicorn-3193.exe (PID: 5228)
- Unicorn-13286.exe (PID: 7400)
- Unicorn-21258.exe (PID: 8424)
- Unicorn-63878.exe (PID: 7416)
- Unicorn-5523.exe (PID: 7812)
- Unicorn-34474.exe (PID: 2092)
- Unicorn-42372.exe (PID: 6272)
- Unicorn-10785.exe (PID: 7672)
- Unicorn-8071.exe (PID: 7340)
- Unicorn-64645.exe (PID: 8204)
- Unicorn-49110.exe (PID: 6592)
- Unicorn-35948.exe (PID: 9164)
- Unicorn-22244.exe (PID: 8272)
- Unicorn-33152.exe (PID: 7392)
- Unicorn-38964.exe (PID: 8392)
- Unicorn-27763.exe (PID: 8648)
- Unicorn-37532.exe (PID: 9200)
- Unicorn-10889.exe (PID: 9192)
- Unicorn-49462.exe (PID: 8296)
- Unicorn-30531.exe (PID: 8380)
- Unicorn-62700.exe (PID: 3132)
- Unicorn-50427.exe (PID: 5360)
- Unicorn-27458.exe (PID: 8400)
- Unicorn-53738.exe (PID: 8480)
- Unicorn-9560.exe (PID: 8432)
- Unicorn-6575.exe (PID: 8520)
- Unicorn-6483.exe (PID: 8332)
- Unicorn-4283.exe (PID: 8948)
- Unicorn-4537.exe (PID: 8504)
- Unicorn-57190.exe (PID: 3884)
- Unicorn-28788.exe (PID: 9012)
- Unicorn-56452.exe (PID: 8640)
- Unicorn-21668.exe (PID: 1240)
- Unicorn-52923.exe (PID: 8656)
- Unicorn-46298.exe (PID: 8700)
- Unicorn-15425.exe (PID: 8832)
- Unicorn-3743.exe (PID: 8920)
- Unicorn-41232.exe (PID: 9004)
- Unicorn-23526.exe (PID: 9052)
- Unicorn-50552.exe (PID: 9348)
- Unicorn-29237.exe (PID: 9968)
- Unicorn-27946.exe (PID: 10016)
- Unicorn-23116.exe (PID: 9960)
- Unicorn-27610.exe (PID: 8620)
- Unicorn-36956.exe (PID: 9104)
- Unicorn-7360.exe (PID: 1300)
- Unicorn-33038.exe (PID: 9876)
- Unicorn-63856.exe (PID: 9744)
- Unicorn-5819.exe (PID: 9448)
- Unicorn-56966.exe (PID: 9460)
- Unicorn-64345.exe (PID: 9020)
- Unicorn-24309.exe (PID: 8212)
- Unicorn-45954.exe (PID: 8692)
- Unicorn-5523.exe (PID: 680)
- Unicorn-54252.exe (PID: 9056)
- Unicorn-42565.exe (PID: 8880)
- Unicorn-8751.exe (PID: 9128)
- Unicorn-10266.exe (PID: 9536)
- Unicorn-51361.exe (PID: 8896)
- Unicorn-36332.exe (PID: 9088)
- Unicorn-36956.exe (PID: 9096)
- Unicorn-21095.exe (PID: 8452)
- Unicorn-14158.exe (PID: 9332)
- Unicorn-39822.exe (PID: 9400)
- Unicorn-47328.exe (PID: 9808)
- Unicorn-5973.exe (PID: 8872)
- Unicorn-59083.exe (PID: 9392)
- Unicorn-40796.exe (PID: 10332)
- Unicorn-11749.exe (PID: 9504)
- Unicorn-47236.exe (PID: 9620)
- Unicorn-29918.exe (PID: 8616)
- Unicorn-4236.exe (PID: 9568)
- Unicorn-18630.exe (PID: 10072)
- Unicorn-10379.exe (PID: 9628)
- Unicorn-13603.exe (PID: 9308)
- Unicorn-31183.exe (PID: 9792)
- Unicorn-56063.exe (PID: 1748)
- Unicorn-1927.exe (PID: 9688)
- Unicorn-53676.exe (PID: 2644)
- Unicorn-42694.exe (PID: 10892)
- Unicorn-41118.exe (PID: 3032)
- Unicorn-54894.exe (PID: 2616)
- Unicorn-34662.exe (PID: 8864)
- Unicorn-16920.exe (PID: 9136)
- Unicorn-53676.exe (PID: 8116)
- Unicorn-14350.exe (PID: 9524)
- Unicorn-44118.exe (PID: 10348)
- Unicorn-64698.exe (PID: 11084)
- Unicorn-62560.exe (PID: 10884)
- Unicorn-19696.exe (PID: 8732)
- Unicorn-24029.exe (PID: 9492)
- Unicorn-63136.exe (PID: 11252)
- Unicorn-17112.exe (PID: 9224)
- Unicorn-32631.exe (PID: 5124)
- Unicorn-13027.exe (PID: 9232)
- Unicorn-12041.exe (PID: 9480)
- Unicorn-10749.exe (PID: 12440)
- Unicorn-28356.exe (PID: 9408)
- Unicorn-21811.exe (PID: 11164)
- Unicorn-43344.exe (PID: 9860)
- Unicorn-17614.exe (PID: 9512)
- Unicorn-24001.exe (PID: 9544)
- Unicorn-53650.exe (PID: 9704)
- Unicorn-28762.exe (PID: 9640)
- Unicorn-48684.exe (PID: 12156)
- Unicorn-40054.exe (PID: 9380)
- Unicorn-27729.exe (PID: 9356)
- Unicorn-60064.exe (PID: 10028)
- Unicorn-52451.exe (PID: 9932)
- Unicorn-19316.exe (PID: 10872)
- Unicorn-13385.exe (PID: 10192)
- Unicorn-53219.exe (PID: 8568)
- Unicorn-18944.exe (PID: 11420)
- Unicorn-60593.exe (PID: 10684)
- Unicorn-49950.exe (PID: 9884)
- Unicorn-43986.exe (PID: 10996)
- Unicorn-58222.exe (PID: 11632)
- Unicorn-3302.exe (PID: 13476)
- Unicorn-33474.exe (PID: 13528)
- Unicorn-29390.exe (PID: 13544)
- Unicorn-25591.exe (PID: 9316)
- Unicorn-30874.exe (PID: 10528)
- Unicorn-55523.exe (PID: 9772)
- Unicorn-49670.exe (PID: 11448)
- Unicorn-12237.exe (PID: 11328)
- Unicorn-48196.exe (PID: 10204)
- Unicorn-46027.exe (PID: 15108)
- Unicorn-59762.exe (PID: 15100)
- Unicorn-27552.exe (PID: 15116)
- Unicorn-64750.exe (PID: 9340)
- Unicorn-43920.exe (PID: 9896)
- Unicorn-11417.exe (PID: 12912)
- Unicorn-61465.exe (PID: 11500)
- Unicorn-39042.exe (PID: 10544)
- Unicorn-22212.exe (PID: 11868)
- Unicorn-16318.exe (PID: 9676)
- Unicorn-28496.exe (PID: 11068)
- Unicorn-8128.exe (PID: 9760)
- Unicorn-44116.exe (PID: 11892)
- Unicorn-18290.exe (PID: 14452)
- Unicorn-50006.exe (PID: 16492)
- Unicorn-50006.exe (PID: 16500)
- Unicorn-51098.exe (PID: 16528)
- Unicorn-53271.exe (PID: 14228)
- Unicorn-4858.exe (PID: 9468)
- Unicorn-11299.exe (PID: 13684)
- Unicorn-37231.exe (PID: 14924)
- Unicorn-42248.exe (PID: 15736)
- Unicorn-775.exe (PID: 9288)
- Unicorn-49052.exe (PID: 8856)
- Unicorn-29700.exe (PID: 9720)
- Unicorn-33182.exe (PID: 10360)
- Unicorn-51595.exe (PID: 18024)
- Unicorn-65330.exe (PID: 18032)
- Unicorn-65330.exe (PID: 18016)
Reads security settings of Internet Explorer
- BackgroundTransferHost.exe (PID: 3900)
- BackgroundTransferHost.exe (PID: 2088)
- BackgroundTransferHost.exe (PID: 2560)
- BackgroundTransferHost.exe (PID: 7488)
- BackgroundTransferHost.exe (PID: 7256)
Checks proxy server information
- BackgroundTransferHost.exe (PID: 2560)
Creates files or folders in the user directory
- BackgroundTransferHost.exe (PID: 2560)
- WerFault.exe (PID: 632)
- WerFault.exe (PID: 7084)
- WerFault.exe (PID: 9048)
- WerFault.exe (PID: 12368)
- WerFault.exe (PID: 17488)
Reads the software policy settings
- BackgroundTransferHost.exe (PID: 2560)
- slui.exe (PID: 1196)
Create files in a temporary directory
- Unicorn-3478.exe (PID: 5376)
- 1 (578).exe (PID: 2140)
- Unicorn-50396.exe (PID: 4224)
- Unicorn-6021.exe (PID: 1188)
- Unicorn-20503.exe (PID: 5156)
- Unicorn-26634.exe (PID: 3676)
- Unicorn-24256.exe (PID: 7696)
- Unicorn-37708.exe (PID: 7720)
- Unicorn-49410.exe (PID: 5728)
- Unicorn-59861.exe (PID: 3900)
- Unicorn-46623.exe (PID: 7772)
- Unicorn-64075.exe (PID: 7832)
- Unicorn-65466.exe (PID: 7844)
- Unicorn-37708.exe (PID: 7712)
- Unicorn-47739.exe (PID: 7880)
- Unicorn-11366.exe (PID: 7912)
- Unicorn-14703.exe (PID: 7960)
- Unicorn-27594.exe (PID: 7760)
- Unicorn-58055.exe (PID: 7752)
- Unicorn-52836.exe (PID: 8000)
- Unicorn-64096.exe (PID: 7936)
- Unicorn-14438.exe (PID: 7952)
- Unicorn-39746.exe (PID: 7732)
- Unicorn-33732.exe (PID: 7984)
- Unicorn-18788.exe (PID: 7976)
- Unicorn-59720.exe (PID: 7992)
- Unicorn-11963.exe (PID: 8132)
- Unicorn-9825.exe (PID: 8160)
- Unicorn-1967.exe (PID: 7860)
- Unicorn-2067.exe (PID: 7888)
- Unicorn-20494.exe (PID: 5048)
- Unicorn-34330.exe (PID: 1132)
- Unicorn-18980.exe (PID: 7900)
- Unicorn-12347.exe (PID: 6744)
- Unicorn-53359.exe (PID: 5548)
- Unicorn-16240.exe (PID: 7224)
- Unicorn-9447.exe (PID: 2108)
- Unicorn-10235.exe (PID: 7816)
- Unicorn-62596.exe (PID: 7680)
- Unicorn-54127.exe (PID: 7540)
- Unicorn-56649.exe (PID: 7660)
- Unicorn-39976.exe (PID: 8096)
- Unicorn-10764.exe (PID: 7332)
- Unicorn-61740.exe (PID: 7528)
- Unicorn-18277.exe (PID: 7228)
- Unicorn-49415.exe (PID: 7280)
- Unicorn-49104.exe (PID: 6424)
- Unicorn-17370.exe (PID: 7444)
- Unicorn-4463.exe (PID: 7436)
- Unicorn-24984.exe (PID: 7368)
- Unicorn-23016.exe (PID: 7352)
- Unicorn-5231.exe (PID: 4652)
- Unicorn-47734.exe (PID: 5984)
- Unicorn-54703.exe (PID: 2772)
- Unicorn-21860.exe (PID: 4408)
- Unicorn-55637.exe (PID: 7668)
- Unicorn-5476.exe (PID: 8180)
- Unicorn-35164.exe (PID: 8340)
- Unicorn-14001.exe (PID: 8148)
- Unicorn-3193.exe (PID: 5228)
- Unicorn-27698.exe (PID: 6228)
- Unicorn-59939.exe (PID: 7640)
- Unicorn-13286.exe (PID: 7400)
- Unicorn-63878.exe (PID: 7416)
- Unicorn-8071.exe (PID: 7340)
- Unicorn-42690.exe (PID: 4920)
- Unicorn-34474.exe (PID: 2092)
- Unicorn-10785.exe (PID: 7672)
- Unicorn-49110.exe (PID: 6592)
- Unicorn-22244.exe (PID: 8272)
- Unicorn-7686.exe (PID: 7384)
- Unicorn-42372.exe (PID: 6272)
- Unicorn-65393.exe (PID: 4696)
- Unicorn-33152.exe (PID: 7392)
- Unicorn-35948.exe (PID: 9164)
- Unicorn-27763.exe (PID: 8648)
- Unicorn-49462.exe (PID: 8296)
- Unicorn-37532.exe (PID: 9200)
- Unicorn-38964.exe (PID: 8392)
- Unicorn-22872.exe (PID: 7968)
- Unicorn-33728.exe (PID: 4268)
- Unicorn-10889.exe (PID: 9192)
- Unicorn-28492.exe (PID: 7236)
- Unicorn-30531.exe (PID: 8380)
- Unicorn-62700.exe (PID: 3132)
- Unicorn-27458.exe (PID: 8400)
- Unicorn-6483.exe (PID: 8332)
- Unicorn-53738.exe (PID: 8480)
- Unicorn-19237.exe (PID: 7608)
- Unicorn-6575.exe (PID: 8520)
- Unicorn-4283.exe (PID: 8948)
- Unicorn-57190.exe (PID: 3884)
- Unicorn-50427.exe (PID: 5360)
- Unicorn-4537.exe (PID: 8504)
- Unicorn-49467.exe (PID: 5960)
- Unicorn-46298.exe (PID: 8700)
- Unicorn-15425.exe (PID: 8832)
- Unicorn-3743.exe (PID: 8920)
- Unicorn-9560.exe (PID: 8432)
- Unicorn-23526.exe (PID: 9052)
- Unicorn-23116.exe (PID: 9960)
- Unicorn-29237.exe (PID: 9968)
- Unicorn-27946.exe (PID: 10016)
- Unicorn-28788.exe (PID: 9012)
- Unicorn-27610.exe (PID: 8620)
- Unicorn-36956.exe (PID: 9104)
- Unicorn-7360.exe (PID: 1300)
- Unicorn-50552.exe (PID: 9348)
- Unicorn-52923.exe (PID: 8656)
- Unicorn-5819.exe (PID: 9448)
- Unicorn-56966.exe (PID: 9460)
- Unicorn-21668.exe (PID: 1240)
- Unicorn-63856.exe (PID: 9744)
- Unicorn-64345.exe (PID: 9020)
- Unicorn-24309.exe (PID: 8212)
- Unicorn-45954.exe (PID: 8692)
- Unicorn-10266.exe (PID: 9536)
- Unicorn-41232.exe (PID: 9004)
- Unicorn-5523.exe (PID: 680)
- Unicorn-33038.exe (PID: 9876)
- Unicorn-51361.exe (PID: 8896)
- Unicorn-36332.exe (PID: 9088)
- Unicorn-54252.exe (PID: 9056)
- Unicorn-36956.exe (PID: 9096)
- Unicorn-52778.exe (PID: 5084)
- Unicorn-18378.exe (PID: 7424)
- Unicorn-39822.exe (PID: 9400)
- Unicorn-8751.exe (PID: 9128)
- Unicorn-14158.exe (PID: 9332)
- Unicorn-21095.exe (PID: 8452)
- Unicorn-5973.exe (PID: 8872)
- Unicorn-59083.exe (PID: 9392)
- Unicorn-40796.exe (PID: 10332)
- Unicorn-45788.exe (PID: 6752)
- Unicorn-4236.exe (PID: 9568)
- Unicorn-47236.exe (PID: 9620)
- Unicorn-11749.exe (PID: 9504)
- Unicorn-29918.exe (PID: 8616)
- Unicorn-42565.exe (PID: 8880)
- Unicorn-47328.exe (PID: 9808)
- Unicorn-10379.exe (PID: 9628)
- Unicorn-21258.exe (PID: 8424)
- Unicorn-42882.exe (PID: 7360)
- Unicorn-56063.exe (PID: 1748)
- Unicorn-18630.exe (PID: 10072)
- Unicorn-42694.exe (PID: 10892)
- Unicorn-1927.exe (PID: 9688)
- Unicorn-13603.exe (PID: 9308)
- Unicorn-53676.exe (PID: 2644)
- Unicorn-53676.exe (PID: 8116)
- Unicorn-54894.exe (PID: 2616)
- Unicorn-64698.exe (PID: 11084)
- Unicorn-62560.exe (PID: 10884)
- Unicorn-19696.exe (PID: 8732)
- Unicorn-34662.exe (PID: 8864)
- Unicorn-24029.exe (PID: 9492)
- Unicorn-5523.exe (PID: 7812)
- Unicorn-16920.exe (PID: 9136)
- Unicorn-64645.exe (PID: 8204)
- Unicorn-63136.exe (PID: 11252)
- Unicorn-27597.exe (PID: 7676)
- Unicorn-31183.exe (PID: 9792)
- Unicorn-12041.exe (PID: 9480)
- Unicorn-10749.exe (PID: 12440)
- Unicorn-32631.exe (PID: 5124)
- Unicorn-27729.exe (PID: 9356)
- Unicorn-17614.exe (PID: 9512)
- Unicorn-56452.exe (PID: 8640)
- Unicorn-17112.exe (PID: 9224)
- Unicorn-43344.exe (PID: 9860)
- Unicorn-48684.exe (PID: 12156)
- Unicorn-40054.exe (PID: 9380)
- Unicorn-52451.exe (PID: 9932)
- Unicorn-28356.exe (PID: 9408)
- Unicorn-13385.exe (PID: 10192)
- Unicorn-13027.exe (PID: 9232)
- Unicorn-44118.exe (PID: 10348)
- Unicorn-14350.exe (PID: 9524)
- Unicorn-60593.exe (PID: 10684)
- Unicorn-18944.exe (PID: 11420)
- Unicorn-58222.exe (PID: 11632)
- Unicorn-43986.exe (PID: 10996)
- Unicorn-49950.exe (PID: 9884)
- Unicorn-24001.exe (PID: 9544)
- Unicorn-3302.exe (PID: 13476)
- Unicorn-53650.exe (PID: 9704)
- Unicorn-19316.exe (PID: 10872)
- Unicorn-33474.exe (PID: 13528)
- Unicorn-29390.exe (PID: 13544)
- Unicorn-60064.exe (PID: 10028)
- Unicorn-25591.exe (PID: 9316)
- Unicorn-30874.exe (PID: 10528)
- Unicorn-53219.exe (PID: 8568)
- Unicorn-49670.exe (PID: 11448)
- Unicorn-48196.exe (PID: 10204)
- Unicorn-46027.exe (PID: 15108)
- Unicorn-59762.exe (PID: 15100)
- Unicorn-12237.exe (PID: 11328)
- Unicorn-27552.exe (PID: 15116)
- Unicorn-64750.exe (PID: 9340)
- Unicorn-55523.exe (PID: 9772)
- Unicorn-11417.exe (PID: 12912)
- Unicorn-61465.exe (PID: 11500)
- Unicorn-39042.exe (PID: 10544)
- Unicorn-28496.exe (PID: 11068)
- Unicorn-22212.exe (PID: 11868)
- Unicorn-16318.exe (PID: 9676)
- Unicorn-44116.exe (PID: 11892)
- Unicorn-50006.exe (PID: 16492)
- Unicorn-50006.exe (PID: 16500)
- Unicorn-51098.exe (PID: 16528)
- Unicorn-18290.exe (PID: 14452)
- Unicorn-42248.exe (PID: 15736)
- Unicorn-4858.exe (PID: 9468)
- Unicorn-41118.exe (PID: 3032)
- Unicorn-53271.exe (PID: 14228)
- Unicorn-37231.exe (PID: 14924)
- Unicorn-58232.exe (PID: 7472)
- Unicorn-8128.exe (PID: 9760)
- Unicorn-43920.exe (PID: 9896)
- Unicorn-11299.exe (PID: 13684)
- Unicorn-51595.exe (PID: 18024)
- Unicorn-65330.exe (PID: 18016)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
764
Monitored processes
626
Malicious processes
102
Suspicious processes
75
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 632 | C:\WINDOWS\SysWOW64\WerFault.exe -u -p 8116 -s 660 | C:\Windows\SysWOW64\WerFault.exe | — | Unicorn-63281.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Problem Reporting Exit code: 0 Version: 10.0.19041.3996 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 680 | C:\Users\admin\AppData\Local\Temp\Unicorn-5523.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-5523.exe | Unicorn-53088.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1132 | C:\Users\admin\AppData\Local\Temp\Unicorn-34330.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-34330.exe | Unicorn-18980.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1184 | C:\Users\admin\AppData\Local\Temp\Unicorn-40574.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-40574.exe | — | Unicorn-18980.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 | |||||||||||||||
| 1188 | C:\Users\admin\AppData\Local\Temp\Unicorn-6021.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-6021.exe | Unicorn-49410.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1196 | "C:\WINDOWS\System32\SLUI.exe" RuleId=3482d82e-ca2c-4e1f-8864-da0267b484b2;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=TimerEvent | C:\Windows\System32\slui.exe | SppExtComObj.Exe | ||||||||||||
User: NETWORK SERVICE Company: Microsoft Corporation Integrity Level: SYSTEM Description: Windows Activation Client Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 1240 | C:\Users\admin\AppData\Local\Temp\Unicorn-21668.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-21668.exe | Unicorn-20494.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1300 | C:\Users\admin\AppData\Local\Temp\Unicorn-7360.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-7360.exe | Unicorn-14001.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1672 | C:\Users\admin\AppData\Local\Temp\Unicorn-53323.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53323.exe | Unicorn-7686.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 | |||||||||||||||
| 1748 | C:\Users\admin\AppData\Local\Temp\Unicorn-56063.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-56063.exe | Unicorn-47734.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
21 608
Read events
21 593
Write events
15
Delete events
0
Modification events
| (PID) Process: | (3900) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (3900) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (3900) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (2560) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (2560) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (2560) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (2088) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (2088) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (2088) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7256) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
Executable files
868
Suspicious files
19
Text files
6
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 2560 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\8456a99e-049e-4247-a064-b889062afa69.down_data | — | |
MD5:— | SHA256:— | |||
| 2140 | 1 (578).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-50396.exe | executable | |
MD5:841611DC57F44A598A98F25DA67598FD | SHA256:D3CBCC8A52164D20E56A833D4D19E3E6BD46E15578D520560526DE9D538BBE1A | |||
| 2560 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10D | binary | |
MD5:47860DC6433E155C7CDAFCF5832DC37D | SHA256:C447D59A7E8F8015B21D50F6332E11E26E63B739E41EAAE94D1D52D95ECDB0BB | |||
| 2140 | 1 (578).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-3478.exe | executable | |
MD5:D4B3C2624A90C200CC4FC58C1D4ACD17 | SHA256:9C4B51F6B93E2885D24730ED244CDACB4D422675A58C76F01D695366FA948F5D | |||
| 2560 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\8456a99e-049e-4247-a064-b889062afa69.0def82ce-edbf-4824-bdec-204b63e81693.down_meta | binary | |
MD5:E5B24568589B7DBA0A74AC655953F639 | SHA256:B0F5124310C6A6D23E4F9D33F0DFF0F21E3D256AA7159C9A967D96A9EC833FA6 | |||
| 2560 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10D | binary | |
MD5:4872BABAF39AA62B8D32695EBB7E9173 | SHA256:2EE85DF86EE29BBEB3DCA81AA29B6DE204F605A2769B84C728A329178A2D0999 | |||
| 2560 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\19f2518b-a151-459c-b688-f6d98b9103cb.0def82ce-edbf-4824-bdec-204b63e81693.down_meta | binary | |
MD5:E5B24568589B7DBA0A74AC655953F639 | SHA256:B0F5124310C6A6D23E4F9D33F0DFF0F21E3D256AA7159C9A967D96A9EC833FA6 | |||
| 4224 | Unicorn-50396.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-49410.exe | executable | |
MD5:5947DA014D714123FCF36C62333EE263 | SHA256:FEB520C0FDC91AA5EFA0F2DB51885950ECE73234AD33F97F7B8C05A667AFA644 | |||
| 2140 | 1 (578).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-20503.exe | executable | |
MD5:D89E623395CFDEDDCCED4D2852894BB3 | SHA256:CEA380A591D815E30CB3C730612B5DC3599BBD227FC9D8E3F2A8B9D8314E7050 | |||
| 5728 | Unicorn-49410.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-6021.exe | executable | |
MD5:E81488CF1D2098C30ADB779AF01E982B | SHA256:E2519DB82DFBA6558A277DD776C1FB9643DC430E5B7F3330CB1349165F14E05F | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
25
DNS requests
16
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
— | — | GET | 200 | 23.48.23.156:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
2560 | BackgroundTransferHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | whitelisted |
920 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
8440 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
8440 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
— | — | 23.48.23.156:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
2104 | svchost.exe | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
2112 | svchost.exe | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
3216 | svchost.exe | 40.113.110.67:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.159.73:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
920 | backgroundTaskHost.exe | 20.103.156.88:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
www.bing.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |