File name:

1 (268)

Full analysis: https://app.any.run/tasks/77130d46-caf0-4fdb-a749-73035f04ea44
Verdict: Malicious activity
Analysis date: March 24, 2025, 18:22:34
OS: Windows 10 Professional (build: 19045, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections
MD5:

5ED6ED92CC100594C3793354E2B18750

SHA1:

370F662B43B8CBF38D6B308A26080A3BAB309D60

SHA256:

1DB493F4A3F09768BB7889D6B957B69D1FED340EB5F797F3964F4420E00E243C

SSDEEP:

6144:i7KpOTIP2DoLA5XEt/eAiwfx/tBqlvJGBd/WyeTFTk/8SwjwpyAvEhy3yrP0sAMa:i+YERLA50t28BMhadOyeTFzx4DxmDsR

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.
  • MALICIOUS

    No malicious indicators.
  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • Unicorn-7616.exe (PID: 6540)
      • Unicorn-62510.exe (PID: 4200)
      • 1 (268).exe (PID: 4436)
      • Unicorn-19314.exe (PID: 5528)
      • Unicorn-40886.exe (PID: 4488)
      • Unicorn-18328.exe (PID: 4988)
      • Unicorn-16281.exe (PID: 1020)
      • Unicorn-59915.exe (PID: 1188)
      • Unicorn-48068.exe (PID: 5164)
      • Unicorn-1560.exe (PID: 6156)
      • Unicorn-15203.exe (PID: 1616)
      • Unicorn-29493.exe (PID: 5304)
      • Unicorn-35359.exe (PID: 5548)
      • Unicorn-3506.exe (PID: 6068)
      • Unicorn-23372.exe (PID: 1912)
      • Unicorn-24584.exe (PID: 7000)
      • Unicorn-43612.exe (PID: 960)
      • Unicorn-15600.exe (PID: 5124)
      • Unicorn-37504.exe (PID: 1812)
      • Unicorn-53748.exe (PID: 4756)
      • Unicorn-18362.exe (PID: 3888)
      • Unicorn-31190.exe (PID: 6324)
      • Unicorn-31540.exe (PID: 5680)
      • Unicorn-65238.exe (PID: 680)
      • Unicorn-5102.exe (PID: 5384)
      • Unicorn-43997.exe (PID: 1328)
      • Unicorn-22921.exe (PID: 6676)
      • Unicorn-16800.exe (PID: 1052)
      • Unicorn-24968.exe (PID: 632)
      • Unicorn-11345.exe (PID: 5360)
      • Unicorn-57567.exe (PID: 6112)
      • Unicorn-65185.exe (PID: 5436)
      • Unicorn-63160.exe (PID: 1324)
      • Unicorn-48870.exe (PID: 5228)
      • Unicorn-31382.exe (PID: 5640)
      • Unicorn-63623.exe (PID: 7192)
      • Unicorn-7645.exe (PID: 7212)
      • Unicorn-58984.exe (PID: 7176)
      • Unicorn-14443.exe (PID: 7268)
      • Unicorn-36326.exe (PID: 7232)
      • Unicorn-45725.exe (PID: 7284)
      • Unicorn-48989.exe (PID: 7276)
      • Unicorn-13290.exe (PID: 7364)
      • Unicorn-49809.exe (PID: 7292)
      • Unicorn-47671.exe (PID: 7316)
      • Unicorn-51008.exe (PID: 7376)
      • Unicorn-61314.exe (PID: 7356)
      • Unicorn-45838.exe (PID: 7596)
      • Unicorn-47884.exe (PID: 7584)
      • Unicorn-9544.exe (PID: 7636)
      • Unicorn-27272.exe (PID: 7700)
      • Unicorn-6638.exe (PID: 7348)
      • Unicorn-24179.exe (PID: 7500)
      • Unicorn-55668.exe (PID: 7476)
      • Unicorn-39886.exe (PID: 7492)
      • Unicorn-29772.exe (PID: 7424)
      • Unicorn-22996.exe (PID: 7436)
      • Unicorn-40078.exe (PID: 7736)
      • Unicorn-2959.exe (PID: 7544)
      • Unicorn-63452.exe (PID: 7308)
      • Unicorn-64220.exe (PID: 7648)
      • Unicorn-16800.exe (PID: 6816)
      • Unicorn-57806.exe (PID: 7444)
      • Unicorn-49538.exe (PID: 7484)
      • Unicorn-43151.exe (PID: 7460)
      • Unicorn-31740.exe (PID: 7820)
      • Unicorn-58937.exe (PID: 7836)
      • Unicorn-16966.exe (PID: 7720)
      • Unicorn-48652.exe (PID: 7864)
      • Unicorn-11703.exe (PID: 7880)
      • Unicorn-31091.exe (PID: 7708)
      • Unicorn-16774.exe (PID: 7468)
      • Unicorn-15595.exe (PID: 7776)
      • Unicorn-56528.exe (PID: 7788)
      • Unicorn-64028.exe (PID: 7396)
      • Unicorn-15958.exe (PID: 7828)
      • Unicorn-6057.exe (PID: 8008)
      • Unicorn-8003.exe (PID: 8048)
      • Unicorn-12279.exe (PID: 7948)
      • Unicorn-51048.exe (PID: 9052)
      • Unicorn-38512.exe (PID: 9192)
      • Unicorn-9657.exe (PID: 7888)
      • Unicorn-18096.exe (PID: 7804)
      • Unicorn-62440.exe (PID: 8612)
      • Unicorn-52312.exe (PID: 7932)
      • Unicorn-23738.exe (PID: 8944)
      • Unicorn-18440.exe (PID: 8236)
      • Unicorn-26800.exe (PID: 8256)
      • Unicorn-6441.exe (PID: 8132)
      • Unicorn-56794.exe (PID: 8732)
      • Unicorn-31522.exe (PID: 8704)
      • Unicorn-30536.exe (PID: 9016)
      • Unicorn-64941.exe (PID: 8680)
      • Unicorn-48221.exe (PID: 8440)
      • Unicorn-2933.exe (PID: 8652)
      • Unicorn-62340.exe (PID: 8644)
      • Unicorn-2257.exe (PID: 8176)
      • Unicorn-56607.exe (PID: 7664)
      • Unicorn-57972.exe (PID: 8348)
      • Unicorn-22913.exe (PID: 9480)
      • Unicorn-24724.exe (PID: 2644)
      • Unicorn-44111.exe (PID: 7908)
      • Unicorn-42456.exe (PID: 7220)
      • Unicorn-21818.exe (PID: 7924)
      • Unicorn-21988.exe (PID: 7552)
      • Unicorn-26046.exe (PID: 8668)
      • Unicorn-45891.exe (PID: 8168)
      • Unicorn-8340.exe (PID: 7144)
      • Unicorn-60982.exe (PID: 7504)
      • Unicorn-4613.exe (PID: 7404)
      • Unicorn-45201.exe (PID: 2316)
      • Unicorn-53369.exe (PID: 10260)
      • Unicorn-54189.exe (PID: 9316)
      • Unicorn-4433.exe (PID: 9300)
      • Unicorn-7209.exe (PID: 8552)
      • Unicorn-39782.exe (PID: 8660)
      • Unicorn-52966.exe (PID: 10416)
      • Unicorn-56794.exe (PID: 8720)
      • Unicorn-32347.exe (PID: 9692)
      • Unicorn-15289.exe (PID: 10216)
      • Unicorn-26862.exe (PID: 8152)
      • Unicorn-3229.exe (PID: 10164)
      • Unicorn-25792.exe (PID: 7944)
      • Unicorn-45274.exe (PID: 8620)
      • Unicorn-21987.exe (PID: 10344)
      • Unicorn-61392.exe (PID: 9648)
      • Unicorn-47220.exe (PID: 7976)
      • Unicorn-45528.exe (PID: 8492)
      • Unicorn-19976.exe (PID: 9580)
      • Unicorn-54874.exe (PID: 7848)
      • Unicorn-16446.exe (PID: 9600)
      • Unicorn-12885.exe (PID: 9032)
      • Unicorn-13706.exe (PID: 9940)
      • Unicorn-21408.exe (PID: 8628)
      • Unicorn-40488.exe (PID: 9564)
      • Unicorn-17175.exe (PID: 10236)
      • Unicorn-20914.exe (PID: 9712)
      • Unicorn-55009.exe (PID: 9028)
      • Unicorn-53228.exe (PID: 6572)
      • Unicorn-46680.exe (PID: 9212)
      • Unicorn-56877.exe (PID: 10200)
      • Unicorn-51074.exe (PID: 8032)
      • Unicorn-35606.exe (PID: 8260)
      • Unicorn-61729.exe (PID: 10532)
      • Unicorn-25662.exe (PID: 8484)
      • Unicorn-12885.exe (PID: 7956)
      • Unicorn-15600.exe (PID: 10296)
      • Unicorn-35326.exe (PID: 9728)
      • Unicorn-17148.exe (PID: 11792)
      • Unicorn-5485.exe (PID: 9436)
      • Unicorn-9247.exe (PID: 8588)
      • Unicorn-2336.exe (PID: 8088)
      • Unicorn-37552.exe (PID: 8336)
      • Unicorn-21600.exe (PID: 8524)
      • Unicorn-41382.exe (PID: 9244)
      • Unicorn-19976.exe (PID: 9588)
      • Unicorn-8252.exe (PID: 10372)
      • Unicorn-60520.exe (PID: 7796)
      • Unicorn-20094.exe (PID: 10900)
      • Unicorn-17956.exe (PID: 10944)
      • Unicorn-62928.exe (PID: 10644)
      • Unicorn-12357.exe (PID: 10724)
      • Unicorn-14905.exe (PID: 10060)
      • Unicorn-59254.exe (PID: 9684)
      • Unicorn-56327.exe (PID: 9268)
      • Unicorn-3075.exe (PID: 12604)
      • Unicorn-41440.exe (PID: 12620)
      • Unicorn-20976.exe (PID: 8972)
      • Unicorn-19182.exe (PID: 9964)
      • Unicorn-54059.exe (PID: 8184)
      • Unicorn-10629.exe (PID: 9756)
      • Unicorn-22476.exe (PID: 9424)
      • Unicorn-1585.exe (PID: 12408)
      • Unicorn-52316.exe (PID: 12712)
      • Unicorn-64402.exe (PID: 11756)
      • Unicorn-26481.exe (PID: 9700)
      • Unicorn-16420.exe (PID: 10328)
      • Unicorn-62688.exe (PID: 14112)
      • Unicorn-3016.exe (PID: 14120)
      • Unicorn-13898.exe (PID: 14172)
      • Unicorn-43328.exe (PID: 9324)
      • Unicorn-41440.exe (PID: 12628)
      • Unicorn-11708.exe (PID: 10488)
      • Unicorn-15097.exe (PID: 9952)
      • Unicorn-811.exe (PID: 11780)
      • Unicorn-59425.exe (PID: 13500)
      • Unicorn-41552.exe (PID: 9024)
      • Unicorn-1725.exe (PID: 9252)
      • Unicorn-32284.exe (PID: 11748)
      • Unicorn-55632.exe (PID: 12388)
      • Unicorn-41268.exe (PID: 11672)
      • Unicorn-31911.exe (PID: 11008)
      • Unicorn-12641.exe (PID: 10604)
      • Unicorn-47962.exe (PID: 10320)
      • Unicorn-4884.exe (PID: 10916)
      • Unicorn-15678.exe (PID: 9416)
      • Unicorn-36888.exe (PID: 9636)
      • Unicorn-49908.exe (PID: 9984)
      • Unicorn-18004.exe (PID: 6744)
      • Unicorn-7842.exe (PID: 10860)
      • Unicorn-40577.exe (PID: 8964)
      • Unicorn-55586.exe (PID: 9332)
      • Unicorn-42574.exe (PID: 8604)
      • Unicorn-56327.exe (PID: 9260)
      • Unicorn-45263.exe (PID: 8472)
      • Unicorn-25793.exe (PID: 12932)
      • Unicorn-8252.exe (PID: 10360)
      • Unicorn-235.exe (PID: 2332)
      • Unicorn-14666.exe (PID: 10472)
      • Unicorn-63700.exe (PID: 12428)
      • Unicorn-55734.exe (PID: 8512)
      • Unicorn-45044.exe (PID: 7968)
      • Unicorn-47505.exe (PID: 11196)
      • Unicorn-30438.exe (PID: 15540)
      • Unicorn-17920.exe (PID: 15512)
      • Unicorn-23446.exe (PID: 15532)
      • Unicorn-50550.exe (PID: 11036)
      • Unicorn-28388.exe (PID: 13388)
      • Unicorn-109.exe (PID: 4172)
      • Unicorn-8252.exe (PID: 10688)
      • Unicorn-8444.exe (PID: 7696)
      • Unicorn-12684.exe (PID: 15156)
      • Unicorn-23754.exe (PID: 12036)
      • Unicorn-59425.exe (PID: 13492)
      • Unicorn-1567.exe (PID: 10268)
      • Unicorn-31538.exe (PID: 11800)
      • Unicorn-58294.exe (PID: 9356)
      • Unicorn-28632.exe (PID: 2416)
      • Unicorn-2990.exe (PID: 10596)
      • Unicorn-64687.exe (PID: 7984)
      • Unicorn-3499.exe (PID: 12960)
      • Unicorn-46789.exe (PID: 9488)
      • Unicorn-45160.exe (PID: 6036)
      • Unicorn-38067.exe (PID: 9748)
      • Unicorn-60795.exe (PID: 9408)
      • Unicorn-62928.exe (PID: 10352)
      • Unicorn-26777.exe (PID: 8268)
      • Unicorn-36966.exe (PID: 5624)
      • Unicorn-11283.exe (PID: 12748)
      • Unicorn-109.exe (PID: 11820)
      • Unicorn-25700.exe (PID: 12132)
      • Unicorn-29400.exe (PID: 11856)
      • Unicorn-29328.exe (PID: 12140)
      • Unicorn-109.exe (PID: 11852)
      • Unicorn-4028.exe (PID: 12444)
      • Unicorn-21704.exe (PID: 10432)
      • Unicorn-31691.exe (PID: 10936)
      • Unicorn-1641.exe (PID: 11236)
      • Unicorn-49502.exe (PID: 12380)
      • Unicorn-26254.exe (PID: 12180)
      • Unicorn-31745.exe (PID: 8072)
      • Unicorn-26364.exe (PID: 10464)
      • Unicorn-13919.exe (PID: 7196)
      • Unicorn-50754.exe (PID: 12852)
      • Unicorn-57801.exe (PID: 3760)
      • Unicorn-3400.exe (PID: 4448)
      • Unicorn-26725.exe (PID: 13616)
      • Unicorn-8543.exe (PID: 13468)
      • Unicorn-28424.exe (PID: 8064)
      • Unicorn-59202.exe (PID: 11160)
      • Unicorn-109.exe (PID: 5232)
      • Unicorn-5974.exe (PID: 11900)
      • Unicorn-28061.exe (PID: 10188)
      • Unicorn-14126.exe (PID: 616)
      • Unicorn-39336.exe (PID: 11168)
      • Unicorn-53454.exe (PID: 12348)
      • Unicorn-23074.exe (PID: 10068)
      • Unicorn-61418.exe (PID: 8232)
      • Unicorn-49337.exe (PID: 14444)
      • Unicorn-61174.exe (PID: 10452)
      • Unicorn-42866.exe (PID: 11132)
      • Unicorn-63006.exe (PID: 12884)
      • Unicorn-9150.exe (PID: 11660)
      • Unicorn-8610.exe (PID: 11176)
      • Unicorn-52534.exe (PID: 11912)
      • Unicorn-43062.exe (PID: 10336)
      • Unicorn-49576.exe (PID: 13828)
      • Unicorn-55340.exe (PID: 6264)
      • Unicorn-39006.exe (PID: 10972)
      • Unicorn-23370.exe (PID: 11768)
      • Unicorn-3395.exe (PID: 11044)
      • Unicorn-51911.exe (PID: 12112)
      • Unicorn-49337.exe (PID: 14436)
      • Unicorn-20194.exe (PID: 14332)
      • Unicorn-34906.exe (PID: 15852)
      • Unicorn-49965.exe (PID: 12436)
      • Unicorn-15149.exe (PID: 14000)
      • Unicorn-109.exe (PID: 11808)
      • Unicorn-40698.exe (PID: 11640)
      • Unicorn-61444.exe (PID: 13068)
      • Unicorn-36727.exe (PID: 2084)
      • Unicorn-63146.exe (PID: 9528)
      • Unicorn-53084.exe (PID: 13160)
    • Starts itself from another location

      • 1 (268).exe (PID: 4436)
      • Unicorn-19314.exe (PID: 5528)
      • Unicorn-62510.exe (PID: 4200)
      • Unicorn-40886.exe (PID: 4488)
      • Unicorn-18328.exe (PID: 4988)
      • Unicorn-7616.exe (PID: 6540)
      • Unicorn-16281.exe (PID: 1020)
      • Unicorn-59915.exe (PID: 1188)
      • Unicorn-48068.exe (PID: 5164)
      • Unicorn-1560.exe (PID: 6156)
      • Unicorn-15203.exe (PID: 1616)
      • Unicorn-29493.exe (PID: 5304)
      • Unicorn-35359.exe (PID: 5548)
      • Unicorn-3506.exe (PID: 6068)
      • Unicorn-31540.exe (PID: 5680)
      • Unicorn-23372.exe (PID: 1912)
      • Unicorn-24584.exe (PID: 7000)
      • Unicorn-43612.exe (PID: 960)
      • Unicorn-31382.exe (PID: 5640)
      • Unicorn-37504.exe (PID: 1812)
      • Unicorn-53748.exe (PID: 4756)
      • Unicorn-16800.exe (PID: 6816)
      • Unicorn-65238.exe (PID: 680)
      • Unicorn-43997.exe (PID: 1328)
      • Unicorn-24968.exe (PID: 632)
      • Unicorn-22921.exe (PID: 6676)
      • Unicorn-16800.exe (PID: 1052)
      • Unicorn-5102.exe (PID: 5384)
      • Unicorn-57567.exe (PID: 6112)
      • Unicorn-11345.exe (PID: 5360)
      • Unicorn-18362.exe (PID: 3888)
      • Unicorn-48870.exe (PID: 5228)
      • Unicorn-63160.exe (PID: 1324)
      • Unicorn-65185.exe (PID: 5436)
      • Unicorn-63623.exe (PID: 7192)
      • Unicorn-42456.exe (PID: 7220)
      • Unicorn-31190.exe (PID: 6324)
      • Unicorn-58984.exe (PID: 7176)
      • Unicorn-14443.exe (PID: 7268)
      • Unicorn-48989.exe (PID: 7276)
      • Unicorn-36326.exe (PID: 7232)
      • Unicorn-45725.exe (PID: 7284)
      • Unicorn-13290.exe (PID: 7364)
      • Unicorn-49809.exe (PID: 7292)
      • Unicorn-61314.exe (PID: 7356)
      • Unicorn-51008.exe (PID: 7376)
      • Unicorn-45838.exe (PID: 7596)
      • Unicorn-7645.exe (PID: 7212)
      • Unicorn-15600.exe (PID: 5124)
      • Unicorn-9544.exe (PID: 7636)
      • Unicorn-27272.exe (PID: 7700)
      • Unicorn-55668.exe (PID: 7476)
      • Unicorn-6638.exe (PID: 7348)
      • Unicorn-39886.exe (PID: 7492)
      • Unicorn-29772.exe (PID: 7424)
      • Unicorn-63452.exe (PID: 7308)
      • Unicorn-40078.exe (PID: 7736)
      • Unicorn-21988.exe (PID: 7552)
      • Unicorn-56607.exe (PID: 7664)
      • Unicorn-4613.exe (PID: 7404)
      • Unicorn-57806.exe (PID: 7444)
      • Unicorn-49538.exe (PID: 7484)
      • Unicorn-43151.exe (PID: 7460)
      • Unicorn-31740.exe (PID: 7820)
      • Unicorn-58937.exe (PID: 7836)
      • Unicorn-16966.exe (PID: 7720)
      • Unicorn-31091.exe (PID: 7708)
      • Unicorn-11703.exe (PID: 7880)
      • Unicorn-64028.exe (PID: 7396)
      • Unicorn-15595.exe (PID: 7776)
      • Unicorn-64220.exe (PID: 7648)
      • Unicorn-48652.exe (PID: 7864)
      • Unicorn-16774.exe (PID: 7468)
      • Unicorn-6057.exe (PID: 8008)
      • Unicorn-15958.exe (PID: 7828)
      • Unicorn-8003.exe (PID: 8048)
      • Unicorn-56528.exe (PID: 7788)
      • Unicorn-47671.exe (PID: 7316)
      • Unicorn-12279.exe (PID: 7948)
      • Unicorn-51048.exe (PID: 9052)
      • Unicorn-38512.exe (PID: 9192)
      • Unicorn-46680.exe (PID: 9212)
      • Unicorn-18096.exe (PID: 7804)
      • Unicorn-9657.exe (PID: 7888)
      • Unicorn-62440.exe (PID: 8612)
      • Unicorn-52312.exe (PID: 7932)
      • Unicorn-23738.exe (PID: 8944)
      • Unicorn-26800.exe (PID: 8256)
      • Unicorn-6441.exe (PID: 8132)
      • Unicorn-56794.exe (PID: 8732)
      • Unicorn-18440.exe (PID: 8236)
      • Unicorn-31522.exe (PID: 8704)
      • Unicorn-64941.exe (PID: 8680)
      • Unicorn-47884.exe (PID: 7584)
      • Unicorn-48221.exe (PID: 8440)
      • Unicorn-30536.exe (PID: 9016)
      • Unicorn-62340.exe (PID: 8644)
      • Unicorn-2933.exe (PID: 8652)
      • Unicorn-2257.exe (PID: 8176)
      • Unicorn-44111.exe (PID: 7908)
      • Unicorn-57972.exe (PID: 8348)
      • Unicorn-24724.exe (PID: 2644)
      • Unicorn-21818.exe (PID: 7924)
      • Unicorn-31745.exe (PID: 8072)
      • Unicorn-22913.exe (PID: 9480)
      • Unicorn-26046.exe (PID: 8668)
      • Unicorn-61418.exe (PID: 8232)
      • Unicorn-2959.exe (PID: 7544)
      • Unicorn-8340.exe (PID: 7144)
      • Unicorn-22996.exe (PID: 7436)
      • Unicorn-60982.exe (PID: 7504)
      • Unicorn-45201.exe (PID: 2316)
      • Unicorn-45891.exe (PID: 8168)
      • Unicorn-53369.exe (PID: 10260)
      • Unicorn-54189.exe (PID: 9316)
      • Unicorn-4433.exe (PID: 9300)
      • Unicorn-39782.exe (PID: 8660)
      • Unicorn-7209.exe (PID: 8552)
      • Unicorn-32347.exe (PID: 9692)
      • Unicorn-56794.exe (PID: 8720)
      • Unicorn-52966.exe (PID: 10416)
      • Unicorn-15289.exe (PID: 10216)
      • Unicorn-3229.exe (PID: 10164)
      • Unicorn-26862.exe (PID: 8152)
      • Unicorn-25792.exe (PID: 7944)
      • Unicorn-45274.exe (PID: 8620)
      • Unicorn-21987.exe (PID: 10344)
      • Unicorn-61392.exe (PID: 9648)
      • Unicorn-16446.exe (PID: 9600)
      • Unicorn-45528.exe (PID: 8492)
      • Unicorn-19976.exe (PID: 9580)
      • Unicorn-54874.exe (PID: 7848)
      • Unicorn-47220.exe (PID: 7976)
      • Unicorn-12885.exe (PID: 9032)
      • Unicorn-13706.exe (PID: 9940)
      • Unicorn-40488.exe (PID: 9564)
      • Unicorn-21408.exe (PID: 8628)
      • Unicorn-20914.exe (PID: 9712)
      • Unicorn-53228.exe (PID: 6572)
      • Unicorn-17175.exe (PID: 10236)
      • Unicorn-55009.exe (PID: 9028)
      • Unicorn-56877.exe (PID: 10200)
      • Unicorn-35606.exe (PID: 8260)
      • Unicorn-51074.exe (PID: 8032)
      • Unicorn-25662.exe (PID: 8484)
      • Unicorn-15600.exe (PID: 10296)
      • Unicorn-35326.exe (PID: 9728)
      • Unicorn-17148.exe (PID: 11792)
      • Unicorn-61729.exe (PID: 10532)
      • Unicorn-9247.exe (PID: 8588)
      • Unicorn-5485.exe (PID: 9436)
      • Unicorn-61756.exe (PID: 10876)
      • Unicorn-2336.exe (PID: 8088)
      • Unicorn-21600.exe (PID: 8524)
      • Unicorn-41382.exe (PID: 9244)
      • Unicorn-37552.exe (PID: 8336)
      • Unicorn-8252.exe (PID: 10372)
      • Unicorn-19976.exe (PID: 9588)
      • Unicorn-60520.exe (PID: 7796)
      • Unicorn-17956.exe (PID: 10944)
      • Unicorn-7842.exe (PID: 10860)
      • Unicorn-62928.exe (PID: 10644)
      • Unicorn-12357.exe (PID: 10724)
      • Unicorn-14905.exe (PID: 10060)
      • Unicorn-59254.exe (PID: 9684)
      • Unicorn-19182.exe (PID: 9964)
      • Unicorn-3075.exe (PID: 12604)
      • Unicorn-41440.exe (PID: 12628)
      • Unicorn-41440.exe (PID: 12620)
      • Unicorn-55586.exe (PID: 9332)
      • Unicorn-54059.exe (PID: 8184)
      • Unicorn-22476.exe (PID: 9424)
      • Unicorn-10629.exe (PID: 9756)
      • Unicorn-20976.exe (PID: 8972)
      • Unicorn-20094.exe (PID: 10900)
      • Unicorn-1585.exe (PID: 12408)
      • Unicorn-52316.exe (PID: 12712)
      • Unicorn-64402.exe (PID: 11756)
      • Unicorn-26481.exe (PID: 9700)
      • Unicorn-62688.exe (PID: 14112)
      • Unicorn-3016.exe (PID: 14120)
      • Unicorn-13898.exe (PID: 14172)
      • Unicorn-43328.exe (PID: 9324)
      • Unicorn-30438.exe (PID: 15540)
      • Unicorn-11708.exe (PID: 10488)
      • Unicorn-15097.exe (PID: 9952)
      • Unicorn-811.exe (PID: 11780)
      • Unicorn-41552.exe (PID: 9024)
      • Unicorn-23446.exe (PID: 15532)
      • Unicorn-17920.exe (PID: 15512)
    • Executes application which crashes

      • Unicorn-24179.exe (PID: 7500)
      • Unicorn-63623.exe (PID: 7192)
      • Unicorn-15595.exe (PID: 7776)
      • Unicorn-29322.exe (PID: 9044)
  • INFO

    • The sample compiled with chinese language support

      • 1 (268).exe (PID: 4436)
      • Unicorn-20094.exe (PID: 10900)
      • Unicorn-1585.exe (PID: 12408)
      • Unicorn-56327.exe (PID: 9260)
      • Unicorn-15678.exe (PID: 9416)
      • Unicorn-8252.exe (PID: 10360)
      • Unicorn-15958.exe (PID: 7828)
      • Unicorn-27272.exe (PID: 7700)
      • Unicorn-2959.exe (PID: 7544)
      • Unicorn-56327.exe (PID: 9268)
      • Unicorn-40886.exe (PID: 4488)
      • Unicorn-43151.exe (PID: 7460)
      • Unicorn-35359.exe (PID: 5548)
      • Unicorn-25793.exe (PID: 12932)
      • Unicorn-65185.exe (PID: 5436)
      • Unicorn-63700.exe (PID: 12428)
      • Unicorn-45044.exe (PID: 7968)
      • Unicorn-46680.exe (PID: 9212)
      • Unicorn-31540.exe (PID: 5680)
      • Unicorn-62510.exe (PID: 4200)
      • Unicorn-11345.exe (PID: 5360)
      • Unicorn-47505.exe (PID: 11196)
      • Unicorn-235.exe (PID: 2332)
      • Unicorn-41440.exe (PID: 12628)
      • Unicorn-23446.exe (PID: 15532)
      • Unicorn-51048.exe (PID: 9052)
      • Unicorn-17920.exe (PID: 15512)
      • Unicorn-19314.exe (PID: 5528)
      • Unicorn-17175.exe (PID: 10236)
      • Unicorn-8252.exe (PID: 10688)
      • Unicorn-5102.exe (PID: 5384)
      • Unicorn-55009.exe (PID: 9028)
      • Unicorn-64028.exe (PID: 7396)
      • Unicorn-59425.exe (PID: 13492)
      • Unicorn-31538.exe (PID: 11800)
      • Unicorn-37504.exe (PID: 1812)
      • Unicorn-28632.exe (PID: 2416)
      • Unicorn-57806.exe (PID: 7444)
      • Unicorn-3499.exe (PID: 12960)
      • Unicorn-46789.exe (PID: 9488)
      • Unicorn-20976.exe (PID: 8972)
      • Unicorn-15203.exe (PID: 1616)
      • Unicorn-57567.exe (PID: 6112)
      • Unicorn-57972.exe (PID: 8348)
      • Unicorn-45274.exe (PID: 8620)
      • Unicorn-56877.exe (PID: 10200)
      • Unicorn-48068.exe (PID: 5164)
      • Unicorn-4433.exe (PID: 9300)
      • Unicorn-45160.exe (PID: 6036)
      • Unicorn-58294.exe (PID: 9356)
      • Unicorn-6441.exe (PID: 8132)
      • Unicorn-18440.exe (PID: 8236)
      • Unicorn-48989.exe (PID: 7276)
      • Unicorn-48870.exe (PID: 5228)
      • Unicorn-38067.exe (PID: 9748)
      • Unicorn-36966.exe (PID: 5624)
      • Unicorn-25700.exe (PID: 12132)
      • Unicorn-43997.exe (PID: 1328)
      • Unicorn-61314.exe (PID: 7356)
      • Unicorn-12357.exe (PID: 10724)
      • Unicorn-29772.exe (PID: 7424)
      • Unicorn-7616.exe (PID: 6540)
      • Unicorn-13290.exe (PID: 7364)
      • Unicorn-56794.exe (PID: 8732)
      • Unicorn-8003.exe (PID: 8048)
      • Unicorn-23738.exe (PID: 8944)
      • Unicorn-15097.exe (PID: 9952)
      • Unicorn-4028.exe (PID: 12444)
      • Unicorn-21704.exe (PID: 10432)
      • Unicorn-1560.exe (PID: 6156)
      • Unicorn-51074.exe (PID: 8032)
      • Unicorn-31691.exe (PID: 10936)
      • Unicorn-1641.exe (PID: 11236)
      • Unicorn-29328.exe (PID: 12140)
      • Unicorn-15289.exe (PID: 10216)
      • Unicorn-26254.exe (PID: 12180)
      • Unicorn-31745.exe (PID: 8072)
      • Unicorn-51008.exe (PID: 7376)
      • Unicorn-13919.exe (PID: 7196)
      • Unicorn-50754.exe (PID: 12852)
      • Unicorn-57801.exe (PID: 3760)
      • Unicorn-2336.exe (PID: 8088)
      • Unicorn-15600.exe (PID: 10296)
      • Unicorn-8340.exe (PID: 7144)
      • Unicorn-49538.exe (PID: 7484)
      • Unicorn-26364.exe (PID: 10464)
      • Unicorn-8543.exe (PID: 13468)
      • Unicorn-9544.exe (PID: 7636)
      • Unicorn-6638.exe (PID: 7348)
      • Unicorn-28424.exe (PID: 8064)
      • Unicorn-53369.exe (PID: 10260)
      • Unicorn-45201.exe (PID: 2316)
      • Unicorn-41440.exe (PID: 12620)
      • Unicorn-59202.exe (PID: 11160)
      • Unicorn-26481.exe (PID: 9700)
      • Unicorn-62440.exe (PID: 8612)
      • Unicorn-61392.exe (PID: 9648)
      • Unicorn-62928.exe (PID: 10644)
      • Unicorn-3400.exe (PID: 4448)
      • Unicorn-13898.exe (PID: 14172)
      • Unicorn-39336.exe (PID: 11168)
      • Unicorn-109.exe (PID: 5232)
      • Unicorn-5974.exe (PID: 11900)
      • Unicorn-5485.exe (PID: 9436)
      • Unicorn-28061.exe (PID: 10188)
      • Unicorn-14126.exe (PID: 616)
      • Unicorn-61418.exe (PID: 8232)
      • Unicorn-58937.exe (PID: 7836)
      • Unicorn-31190.exe (PID: 6324)
      • Unicorn-17956.exe (PID: 10944)
      • Unicorn-55734.exe (PID: 8512)
      • Unicorn-53454.exe (PID: 12348)
      • Unicorn-59915.exe (PID: 1188)
      • Unicorn-49337.exe (PID: 14444)
      • Unicorn-23074.exe (PID: 10068)
      • Unicorn-11703.exe (PID: 7880)
      • Unicorn-14666.exe (PID: 10472)
      • Unicorn-62340.exe (PID: 8644)
      • Unicorn-3506.exe (PID: 6068)
      • Unicorn-54189.exe (PID: 9316)
      • Unicorn-52966.exe (PID: 10416)
      • Unicorn-22996.exe (PID: 7436)
      • Unicorn-61174.exe (PID: 10452)
      • Unicorn-49502.exe (PID: 12380)
      • Unicorn-12885.exe (PID: 9032)
      • Unicorn-42866.exe (PID: 11132)
      • Unicorn-21600.exe (PID: 8524)
      • Unicorn-63160.exe (PID: 1324)
      • Unicorn-19976.exe (PID: 9588)
      • Unicorn-63006.exe (PID: 12884)
      • Unicorn-20914.exe (PID: 9712)
      • Unicorn-9150.exe (PID: 11660)
      • Unicorn-8610.exe (PID: 11176)
      • Unicorn-3229.exe (PID: 10164)
      • Unicorn-44111.exe (PID: 7908)
      • Unicorn-43062.exe (PID: 10336)
      • Unicorn-49908.exe (PID: 9984)
      • Unicorn-2257.exe (PID: 8176)
      • Unicorn-45891.exe (PID: 8168)
      • Unicorn-42456.exe (PID: 7220)
      • Unicorn-49576.exe (PID: 13828)
      • Unicorn-24584.exe (PID: 7000)
      • Unicorn-22921.exe (PID: 6676)
      • Unicorn-8444.exe (PID: 7696)
      • Unicorn-40078.exe (PID: 7736)
      • Unicorn-16774.exe (PID: 7468)
      • Unicorn-39006.exe (PID: 10972)
      • Unicorn-52534.exe (PID: 11912)
      • Unicorn-59425.exe (PID: 13500)
      • Unicorn-23370.exe (PID: 11768)
      • Unicorn-49337.exe (PID: 14436)
      • Unicorn-3395.exe (PID: 11044)
      • Unicorn-16420.exe (PID: 10328)
      • Unicorn-51911.exe (PID: 12112)
      • Unicorn-20194.exe (PID: 14332)
      • Unicorn-49965.exe (PID: 12436)
      • Unicorn-34906.exe (PID: 15852)
      • Unicorn-2990.exe (PID: 10596)
      • Unicorn-55340.exe (PID: 6264)
      • Unicorn-15149.exe (PID: 14000)
      • Unicorn-40698.exe (PID: 11640)
      • Unicorn-59254.exe (PID: 9684)
      • Unicorn-24968.exe (PID: 632)
      • Unicorn-16281.exe (PID: 1020)
      • Unicorn-64687.exe (PID: 7984)
      • Unicorn-23754.exe (PID: 12036)
      • Unicorn-811.exe (PID: 11780)
      • Unicorn-36727.exe (PID: 2084)
      • Unicorn-64402.exe (PID: 11756)
      • Unicorn-61444.exe (PID: 13068)
      • Unicorn-35326.exe (PID: 9728)
      • Unicorn-23372.exe (PID: 1912)
      • Unicorn-109.exe (PID: 11808)
      • Unicorn-63146.exe (PID: 9528)
      • Unicorn-53084.exe (PID: 13160)
      • Unicorn-12641.exe (PID: 10604)
      • Unicorn-14905.exe (PID: 10060)
      • Unicorn-53228.exe (PID: 6572)
      • Unicorn-60982.exe (PID: 7504)
      • Unicorn-12684.exe (PID: 15156)
    • Checks supported languages

      • Unicorn-62510.exe (PID: 4200)
      • 1 (268).exe (PID: 4436)
      • Unicorn-40886.exe (PID: 4488)
      • Unicorn-7616.exe (PID: 6540)
      • Unicorn-19314.exe (PID: 5528)
      • Unicorn-1560.exe (PID: 6156)
      • Unicorn-15203.exe (PID: 1616)
      • Unicorn-48068.exe (PID: 5164)
      • Unicorn-59915.exe (PID: 1188)
      • Unicorn-18328.exe (PID: 4988)
      • Unicorn-16281.exe (PID: 1020)
      • Unicorn-35359.exe (PID: 5548)
      • Unicorn-3506.exe (PID: 6068)
      • Unicorn-23372.exe (PID: 1912)
      • Unicorn-31540.exe (PID: 5680)
      • Unicorn-29493.exe (PID: 5304)
      • Unicorn-43612.exe (PID: 960)
      • Unicorn-31382.exe (PID: 5640)
      • Unicorn-18362.exe (PID: 3888)
      • Unicorn-37504.exe (PID: 1812)
      • Unicorn-24584.exe (PID: 7000)
      • Unicorn-15600.exe (PID: 5124)
      • Unicorn-53748.exe (PID: 4756)
      • Unicorn-65238.exe (PID: 680)
      • Unicorn-31190.exe (PID: 6324)
      • Unicorn-5102.exe (PID: 5384)
      • Unicorn-16800.exe (PID: 6816)
      • Unicorn-24968.exe (PID: 632)
      • Unicorn-22921.exe (PID: 6676)
      • Unicorn-43997.exe (PID: 1328)
      • Unicorn-57567.exe (PID: 6112)
      • Unicorn-16800.exe (PID: 1052)
      • Unicorn-63160.exe (PID: 1324)
      • Unicorn-11345.exe (PID: 5360)
      • Unicorn-65185.exe (PID: 5436)
      • Unicorn-48870.exe (PID: 5228)
      • Unicorn-42456.exe (PID: 7220)
      • Unicorn-58984.exe (PID: 7176)
      • Unicorn-63623.exe (PID: 7192)
      • Unicorn-7645.exe (PID: 7212)
      • Unicorn-36326.exe (PID: 7232)
      • Unicorn-14443.exe (PID: 7268)
      • Unicorn-48989.exe (PID: 7276)
      • Unicorn-49809.exe (PID: 7292)
      • Unicorn-45725.exe (PID: 7284)
      • Unicorn-63452.exe (PID: 7308)
      • Unicorn-13290.exe (PID: 7364)
      • Unicorn-6638.exe (PID: 7348)
      • Unicorn-61314.exe (PID: 7356)
      • Unicorn-51008.exe (PID: 7376)
      • Unicorn-47671.exe (PID: 7316)
      • Unicorn-64028.exe (PID: 7396)
      • Unicorn-4613.exe (PID: 7404)
      • Unicorn-29772.exe (PID: 7424)
      • Unicorn-22996.exe (PID: 7436)
      • Unicorn-43151.exe (PID: 7460)
      • Unicorn-55668.exe (PID: 7476)
      • Unicorn-16774.exe (PID: 7468)
      • Unicorn-39886.exe (PID: 7492)
      • Unicorn-57806.exe (PID: 7444)
      • Unicorn-49538.exe (PID: 7484)
      • Unicorn-24179.exe (PID: 7500)
      • Unicorn-47884.exe (PID: 7584)
      • Unicorn-45838.exe (PID: 7596)
      • Unicorn-2959.exe (PID: 7544)
      • Unicorn-21988.exe (PID: 7552)
      • Unicorn-9544.exe (PID: 7636)
      • Unicorn-56607.exe (PID: 7664)
      • Unicorn-64220.exe (PID: 7648)
      • Unicorn-27272.exe (PID: 7700)
      • Unicorn-31091.exe (PID: 7708)
      • Unicorn-15595.exe (PID: 7776)
      • Unicorn-40078.exe (PID: 7736)
      • Unicorn-60520.exe (PID: 7796)
      • Unicorn-18096.exe (PID: 7804)
      • Unicorn-15958.exe (PID: 7828)
      • Unicorn-31740.exe (PID: 7820)
      • Unicorn-56528.exe (PID: 7788)
      • Unicorn-58937.exe (PID: 7836)
      • Unicorn-16966.exe (PID: 7720)
      • Unicorn-54874.exe (PID: 7848)
      • Unicorn-48652.exe (PID: 7864)
      • Unicorn-9657.exe (PID: 7888)
      • Unicorn-52312.exe (PID: 7932)
      • Unicorn-44111.exe (PID: 7908)
      • Unicorn-12279.exe (PID: 7948)
      • Unicorn-11703.exe (PID: 7880)
      • Unicorn-51074.exe (PID: 8032)
      • Unicorn-8003.exe (PID: 8048)
      • Unicorn-45044.exe (PID: 7968)
      • Unicorn-6057.exe (PID: 8008)
      • Unicorn-2336.exe (PID: 8088)
      • Unicorn-31745.exe (PID: 8072)
      • Unicorn-6441.exe (PID: 8132)
      • Unicorn-45891.exe (PID: 8168)
      • Unicorn-54059.exe (PID: 8184)
      • Unicorn-24724.exe (PID: 2644)
      • Unicorn-2257.exe (PID: 8176)
      • Unicorn-55734.exe (PID: 8512)
      • Unicorn-28424.exe (PID: 8064)
      • Unicorn-57972.exe (PID: 8348)
      • Unicorn-45263.exe (PID: 8472)
      • Unicorn-7209.exe (PID: 8552)
      • Unicorn-21818.exe (PID: 7924)
      • Unicorn-35606.exe (PID: 8260)
      • Unicorn-62440.exe (PID: 8612)
      • Unicorn-37552.exe (PID: 8336)
      • Unicorn-9247.exe (PID: 8588)
      • Unicorn-26862.exe (PID: 8152)
      • Unicorn-42574.exe (PID: 8604)
      • Unicorn-21408.exe (PID: 8628)
      • Unicorn-31522.exe (PID: 8704)
      • Unicorn-25662.exe (PID: 8484)
      • Unicorn-56794.exe (PID: 8732)
      • Unicorn-2933.exe (PID: 8652)
      • Unicorn-23738.exe (PID: 8944)
      • Unicorn-40577.exe (PID: 8964)
      • Unicorn-56794.exe (PID: 8720)
      • Unicorn-64941.exe (PID: 8680)
      • Unicorn-30536.exe (PID: 9016)
      • Unicorn-20976.exe (PID: 8972)
      • Unicorn-38512.exe (PID: 9192)
      • Unicorn-51048.exe (PID: 9052)
      • Unicorn-48221.exe (PID: 8440)
      • Unicorn-26046.exe (PID: 8668)
      • Unicorn-39782.exe (PID: 8660)
      • Unicorn-46680.exe (PID: 9212)
      • Unicorn-62340.exe (PID: 8644)
      • Unicorn-65179.exe (PID: 8384)
      • Unicorn-22075.exe (PID: 720)
      • Unicorn-45528.exe (PID: 8492)
      • Unicorn-21600.exe (PID: 8524)
      • Unicorn-41552.exe (PID: 9024)
      • Unicorn-61418.exe (PID: 8232)
      • Unicorn-45274.exe (PID: 8620)
      • Unicorn-8340.exe (PID: 7144)
      • Unicorn-51304.exe (PID: 9012)
      • Unicorn-18440.exe (PID: 8236)
      • Unicorn-56327.exe (PID: 9268)
      • Unicorn-12885.exe (PID: 9032)
      • Unicorn-4433.exe (PID: 9300)
      • Unicorn-26800.exe (PID: 8256)
      • Unicorn-54189.exe (PID: 9316)
      • Unicorn-43328.exe (PID: 9324)
      • Unicorn-55586.exe (PID: 9332)
      • Unicorn-60795.exe (PID: 9408)
      • Unicorn-15678.exe (PID: 9416)
      • Unicorn-29322.exe (PID: 9044)
      • Unicorn-5485.exe (PID: 9436)
      • Unicorn-19976.exe (PID: 9588)
      • Unicorn-35326.exe (PID: 9728)
      • Unicorn-22476.exe (PID: 9424)
      • Unicorn-12170.exe (PID: 9444)
      • Unicorn-9596.exe (PID: 9544)
      • Unicorn-63146.exe (PID: 9528)
      • Unicorn-22913.exe (PID: 9480)
      • Unicorn-46789.exe (PID: 9488)
      • Unicorn-40488.exe (PID: 9564)
      • Unicorn-26481.exe (PID: 9700)
      • Unicorn-32347.exe (PID: 9692)
      • Unicorn-36888.exe (PID: 9636)
      • Unicorn-16446.exe (PID: 9600)
      • Unicorn-10629.exe (PID: 9756)
      • Unicorn-20914.exe (PID: 9712)
      • Unicorn-59254.exe (PID: 9684)
      • Unicorn-45658.exe (PID: 9472)
      • Unicorn-38067.exe (PID: 9748)
      • Unicorn-50629.exe (PID: 9516)
      • Unicorn-19976.exe (PID: 9580)
      • Unicorn-61392.exe (PID: 9648)
      • Unicorn-1725.exe (PID: 9252)
      • Unicorn-64687.exe (PID: 7984)
      • Unicorn-58294.exe (PID: 9356)
      • Unicorn-39602.exe (PID: 9976)
      • Unicorn-45201.exe (PID: 2316)
      • Unicorn-60982.exe (PID: 7504)
      • Unicorn-47220.exe (PID: 7976)
      • Unicorn-56327.exe (PID: 9260)
      • Unicorn-53369.exe (PID: 10260)
      • Unicorn-19182.exe (PID: 9964)
      • Unicorn-12885.exe (PID: 7956)
      • Unicorn-14905.exe (PID: 10060)
      • Unicorn-49908.exe (PID: 9984)
      • Unicorn-23074.exe (PID: 10068)
      • Unicorn-16658.exe (PID: 10148)
      • Unicorn-15097.exe (PID: 9952)
      • Unicorn-56877.exe (PID: 10200)
      • Unicorn-3229.exe (PID: 10164)
      • Unicorn-15289.exe (PID: 10216)
      • Unicorn-8444.exe (PID: 7696)
      • Unicorn-13919.exe (PID: 7196)
      • Unicorn-25792.exe (PID: 7944)
      • Unicorn-1567.exe (PID: 10268)
      • Unicorn-11516.exe (PID: 10280)
      • Unicorn-13706.exe (PID: 9940)
      • Unicorn-8252.exe (PID: 10360)
      • Unicorn-8252.exe (PID: 10372)
      • Unicorn-52966.exe (PID: 10416)
      • Unicorn-21704.exe (PID: 10432)
      • Unicorn-47962.exe (PID: 10320)
      • Unicorn-43062.exe (PID: 10336)
      • Unicorn-21987.exe (PID: 10344)
      • Unicorn-16420.exe (PID: 10328)
      • Unicorn-61729.exe (PID: 10532)
      • Unicorn-26364.exe (PID: 10464)
      • Unicorn-14666.exe (PID: 10472)
      • Unicorn-11708.exe (PID: 10488)
      • Unicorn-61729.exe (PID: 10540)
      • Unicorn-7127.exe (PID: 10516)
      • Unicorn-12641.exe (PID: 10604)
      • Unicorn-18004.exe (PID: 6744)
      • Unicorn-15600.exe (PID: 10296)
      • Unicorn-62928.exe (PID: 10644)
      • Unicorn-41382.exe (PID: 9244)
      • Unicorn-2990.exe (PID: 10596)
      • Unicorn-62928.exe (PID: 10352)
      • Unicorn-8252.exe (PID: 10688)
      • Unicorn-17175.exe (PID: 10236)
      • Unicorn-48901.exe (PID: 10768)
      • Unicorn-55009.exe (PID: 9028)
      • Unicorn-61174.exe (PID: 10452)
      • Unicorn-53228.exe (PID: 6572)
      • Unicorn-10987.exe (PID: 10776)
      • Unicorn-20094.exe (PID: 10900)
      • Unicorn-4884.exe (PID: 10916)
      • Unicorn-50821.exe (PID: 10892)
      • Unicorn-50821.exe (PID: 10884)
      • Unicorn-37557.exe (PID: 10928)
      • Unicorn-12357.exe (PID: 10724)
      • Unicorn-17956.exe (PID: 10944)
      • Unicorn-31911.exe (PID: 11008)
      • Unicorn-50550.exe (PID: 11036)
      • Unicorn-38782.exe (PID: 11124)
      • Unicorn-3395.exe (PID: 11044)
      • Unicorn-59202.exe (PID: 11160)
      • Unicorn-27084.exe (PID: 11140)
      • Unicorn-56087.exe (PID: 11212)
      • Unicorn-1641.exe (PID: 11236)
      • Unicorn-57604.exe (PID: 1748)
      • Unicorn-50428.exe (PID: 10388)
      • Unicorn-28061.exe (PID: 10188)
      • Unicorn-4665.exe (PID: 10824)
      • Unicorn-64556.exe (PID: 10908)
      • Unicorn-28632.exe (PID: 2416)
      • Unicorn-22501.exe (PID: 6228)
      • Unicorn-42866.exe (PID: 11132)
      • Unicorn-47505.exe (PID: 11196)
      • Unicorn-34597.exe (PID: 11204)
      • Unicorn-26777.exe (PID: 8268)
      • Unicorn-54512.exe (PID: 11272)
      • Unicorn-14433.exe (PID: 10144)
      • Unicorn-31691.exe (PID: 10936)
      • Unicorn-53197.exe (PID: 10980)
      • Unicorn-61756.exe (PID: 10876)
      • Unicorn-7842.exe (PID: 10860)
      • Unicorn-39006.exe (PID: 10972)
      • Unicorn-235.exe (PID: 2332)
      • Unicorn-40698.exe (PID: 11640)
      • Unicorn-39336.exe (PID: 11168)
      • Unicorn-22986.exe (PID: 11632)
      • Unicorn-41268.exe (PID: 11672)
      • Unicorn-9150.exe (PID: 11660)
      • Unicorn-45160.exe (PID: 6036)
      • Unicorn-811.exe (PID: 11780)
      • Unicorn-54288.exe (PID: 11688)
      • Unicorn-64402.exe (PID: 11756)
      • Unicorn-23370.exe (PID: 11768)
      • Unicorn-31538.exe (PID: 11800)
      • Unicorn-17148.exe (PID: 11792)
      • Unicorn-36727.exe (PID: 2084)
      • Unicorn-61729.exe (PID: 5020)
      • Unicorn-29400.exe (PID: 11856)
      • Unicorn-52534.exe (PID: 11912)
      • Unicorn-46312.exe (PID: 11956)
      • Unicorn-23754.exe (PID: 12036)
      • Unicorn-35046.exe (PID: 3032)
      • Unicorn-17532.exe (PID: 12120)
      • Unicorn-41440.exe (PID: 12628)
      • Unicorn-3075.exe (PID: 12604)
      • Unicorn-41440.exe (PID: 12620)
      • Unicorn-29328.exe (PID: 12140)
      • Unicorn-42036.exe (PID: 12164)
      • Unicorn-26254.exe (PID: 12180)
      • Unicorn-45855.exe (PID: 12172)
      • Unicorn-8610.exe (PID: 11176)
      • Unicorn-47490.exe (PID: 11652)
      • Unicorn-24037.exe (PID: 12268)
      • Unicorn-22554.exe (PID: 12284)
      • Unicorn-32284.exe (PID: 11748)
      • Unicorn-109.exe (PID: 2616)
      • Unicorn-62846.exe (PID: 3176)
      • Unicorn-109.exe (PID: 4172)
      • Unicorn-109.exe (PID: 5232)
      • Unicorn-36966.exe (PID: 5624)
      • Unicorn-109.exe (PID: 12080)
      • Unicorn-109.exe (PID: 11808)
      • Unicorn-51911.exe (PID: 12112)
      • Unicorn-55340.exe (PID: 6264)
      • Unicorn-109.exe (PID: 11820)
      • Unicorn-109.exe (PID: 11812)
      • Unicorn-109.exe (PID: 11852)
      • Unicorn-3909.exe (PID: 12320)
      • Unicorn-49502.exe (PID: 12380)
      • Unicorn-53454.exe (PID: 12348)
      • Unicorn-6523.exe (PID: 12356)
      • Unicorn-20822.exe (PID: 12372)
      • Unicorn-55632.exe (PID: 12388)
      • Unicorn-38456.exe (PID: 12200)
      • Unicorn-21516.exe (PID: 12564)
      • Unicorn-16935.exe (PID: 12580)
      • Unicorn-5974.exe (PID: 11900)
      • Unicorn-109.exe (PID: 11932)
      • Unicorn-53084.exe (PID: 13160)
      • Unicorn-53586.exe (PID: 12396)
      • Unicorn-49965.exe (PID: 12436)
      • Unicorn-63700.exe (PID: 12428)
      • Unicorn-4028.exe (PID: 12444)
      • Unicorn-8761.exe (PID: 12532)
      • Unicorn-25601.exe (PID: 12572)
      • Unicorn-1585.exe (PID: 12408)
      • Unicorn-20028.exe (PID: 12868)
      • Unicorn-52316.exe (PID: 12712)
      • Unicorn-26250.exe (PID: 12816)
      • Unicorn-25793.exe (PID: 12932)
      • Unicorn-50754.exe (PID: 12852)
      • Unicorn-63006.exe (PID: 12884)
      • Unicorn-1916.exe (PID: 12556)
      • Unicorn-11283.exe (PID: 12748)
      • Unicorn-48324.exe (PID: 12636)
      • Unicorn-3499.exe (PID: 12952)
      • Unicorn-54646.exe (PID: 12984)
      • Unicorn-36172.exe (PID: 13008)
      • Unicorn-34125.exe (PID: 13020)
      • Unicorn-42970.exe (PID: 13084)
      • Unicorn-56784.exe (PID: 12924)
      • Unicorn-26058.exe (PID: 12940)
      • Unicorn-3499.exe (PID: 12960)
      • Unicorn-61444.exe (PID: 13068)
      • Unicorn-13613.exe (PID: 13036)
      • Unicorn-25700.exe (PID: 12132)
      • Unicorn-32472.exe (PID: 13400)
      • Unicorn-28388.exe (PID: 13388)
      • Unicorn-34396.exe (PID: 12768)
      • Unicorn-47530.exe (PID: 13456)
      • Unicorn-59425.exe (PID: 13500)
      • Unicorn-59425.exe (PID: 13492)
      • Unicorn-62688.exe (PID: 14112)
      • Unicorn-43909.exe (PID: 13508)
      • Unicorn-63774.exe (PID: 13516)
      • Unicorn-13898.exe (PID: 14172)
      • Unicorn-23296.exe (PID: 13536)
      • Unicorn-3505.exe (PID: 13548)
      • Unicorn-8543.exe (PID: 13468)
      • Unicorn-55341.exe (PID: 13484)
      • Unicorn-3016.exe (PID: 14120)
      • Unicorn-26725.exe (PID: 13636)
      • Unicorn-26725.exe (PID: 13628)
      • Unicorn-12990.exe (PID: 13608)
      • Unicorn-26725.exe (PID: 13616)
      • Unicorn-49337.exe (PID: 14444)
      • Unicorn-49337.exe (PID: 14412)
      • Unicorn-49337.exe (PID: 14436)
      • Unicorn-49576.exe (PID: 13828)
      • Unicorn-49337.exe (PID: 14428)
      • Unicorn-49337.exe (PID: 14420)
      • Unicorn-58107.exe (PID: 13556)
      • Unicorn-38116.exe (PID: 13592)
      • Unicorn-43736.exe (PID: 14388)
      • Unicorn-51912.exe (PID: 14052)
      • Unicorn-43736.exe (PID: 14364)
      • Unicorn-46352.exe (PID: 14104)
      • Unicorn-41360.exe (PID: 14256)
      • Unicorn-20194.exe (PID: 14332)
      • Unicorn-63072.exe (PID: 14356)
      • Unicorn-3400.exe (PID: 4448)
      • Unicorn-63072.exe (PID: 12692)
      • Unicorn-22140.exe (PID: 12744)
      • Unicorn-36622.exe (PID: 14312)
      • Unicorn-15149.exe (PID: 14000)
      • Unicorn-3400.exe (PID: 14396)
      • Unicorn-63072.exe (PID: 14380)
      • Unicorn-3400.exe (PID: 14372)
      • Unicorn-3400.exe (PID: 14340)
      • Unicorn-63072.exe (PID: 9116)
      • Unicorn-63072.exe (PID: 7896)
      • Unicorn-44485.exe (PID: 13968)
      • Unicorn-46068.exe (PID: 13912)
      • Unicorn-36508.exe (PID: 13876)
      • Unicorn-41984.exe (PID: 13900)
      • Unicorn-13950.exe (PID: 13892)
      • Unicorn-36508.exe (PID: 13884)
      • Unicorn-14765.exe (PID: 13820)
      • Unicorn-35932.exe (PID: 13776)
      • Unicorn-49337.exe (PID: 14452)
      • Unicorn-14765.exe (PID: 13812)
      • Unicorn-21180.exe (PID: 13696)
      • Unicorn-45684.exe (PID: 13736)
      • Unicorn-19596.exe (PID: 13760)
      • Unicorn-8033.exe (PID: 14732)
      • Unicorn-6819.exe (PID: 15132)
      • Unicorn-6819.exe (PID: 15140)
      • Unicorn-6819.exe (PID: 15148)
      • Unicorn-58621.exe (PID: 15164)
      • Unicorn-47444.exe (PID: 14884)
      • Unicorn-50244.exe (PID: 14672)
      • Unicorn-62950.exe (PID: 14932)
      • Unicorn-60272.exe (PID: 14460)
      • Unicorn-25994.exe (PID: 14528)
      • Unicorn-39108.exe (PID: 15172)
      • Unicorn-63072.exe (PID: 13684)
      • Unicorn-32062.exe (PID: 14088)
      • Unicorn-62788.exe (PID: 14080)
      • Unicorn-21910.exe (PID: 14512)
      • Unicorn-30438.exe (PID: 15540)
      • Unicorn-60802.exe (PID: 14404)
      • Unicorn-31704.exe (PID: 12796)
      • Unicorn-11620.exe (PID: 13676)
      • Unicorn-17920.exe (PID: 15512)
      • Unicorn-63072.exe (PID: 8148)
      • Unicorn-23680.exe (PID: 13768)
      • Unicorn-58320.exe (PID: 13920)
      • Unicorn-56109.exe (PID: 14924)
      • Unicorn-41246.exe (PID: 14504)
      • Unicorn-17101.exe (PID: 14044)
      • Unicorn-12684.exe (PID: 15156)
      • Unicorn-38341.exe (PID: 15584)
    • Reads the computer name

      • Unicorn-62510.exe (PID: 4200)
      • 1 (268).exe (PID: 4436)
      • Unicorn-7616.exe (PID: 6540)
      • Unicorn-19314.exe (PID: 5528)
      • Unicorn-40886.exe (PID: 4488)
      • Unicorn-18328.exe (PID: 4988)
      • Unicorn-59915.exe (PID: 1188)
      • Unicorn-48068.exe (PID: 5164)
      • Unicorn-16281.exe (PID: 1020)
      • Unicorn-23372.exe (PID: 1912)
      • Unicorn-1560.exe (PID: 6156)
      • Unicorn-15203.exe (PID: 1616)
      • Unicorn-29493.exe (PID: 5304)
      • Unicorn-3506.exe (PID: 6068)
      • Unicorn-35359.exe (PID: 5548)
      • Unicorn-31540.exe (PID: 5680)
      • Unicorn-24584.exe (PID: 7000)
      • Unicorn-43612.exe (PID: 960)
      • Unicorn-31382.exe (PID: 5640)
      • Unicorn-18362.exe (PID: 3888)
      • Unicorn-37504.exe (PID: 1812)
      • Unicorn-15600.exe (PID: 5124)
      • Unicorn-16800.exe (PID: 6816)
      • Unicorn-53748.exe (PID: 4756)
      • Unicorn-65238.exe (PID: 680)
      • Unicorn-31190.exe (PID: 6324)
      • Unicorn-5102.exe (PID: 5384)
      • Unicorn-24968.exe (PID: 632)
      • Unicorn-22921.exe (PID: 6676)
      • Unicorn-57567.exe (PID: 6112)
      • Unicorn-16800.exe (PID: 1052)
      • Unicorn-43997.exe (PID: 1328)
      • Unicorn-11345.exe (PID: 5360)
      • Unicorn-65185.exe (PID: 5436)
      • Unicorn-48870.exe (PID: 5228)
      • Unicorn-58984.exe (PID: 7176)
      • Unicorn-63623.exe (PID: 7192)
      • Unicorn-63160.exe (PID: 1324)
      • Unicorn-7645.exe (PID: 7212)
      • Unicorn-42456.exe (PID: 7220)
      • Unicorn-14443.exe (PID: 7268)
      • Unicorn-48989.exe (PID: 7276)
      • Unicorn-36326.exe (PID: 7232)
      • Unicorn-45725.exe (PID: 7284)
      • Unicorn-13290.exe (PID: 7364)
      • Unicorn-49809.exe (PID: 7292)
      • Unicorn-61314.exe (PID: 7356)
      • Unicorn-51008.exe (PID: 7376)
      • Unicorn-47671.exe (PID: 7316)
      • Unicorn-47884.exe (PID: 7584)
      • Unicorn-45838.exe (PID: 7596)
      • Unicorn-27272.exe (PID: 7700)
      • Unicorn-55668.exe (PID: 7476)
      • Unicorn-6638.exe (PID: 7348)
      • Unicorn-24179.exe (PID: 7500)
      • Unicorn-9544.exe (PID: 7636)
      • Unicorn-29772.exe (PID: 7424)
      • Unicorn-63452.exe (PID: 7308)
      • Unicorn-39886.exe (PID: 7492)
      • Unicorn-22996.exe (PID: 7436)
      • Unicorn-21988.exe (PID: 7552)
      • Unicorn-57806.exe (PID: 7444)
      • Unicorn-2959.exe (PID: 7544)
      • Unicorn-4613.exe (PID: 7404)
      • Unicorn-56607.exe (PID: 7664)
      • Unicorn-40078.exe (PID: 7736)
      • Unicorn-49538.exe (PID: 7484)
      • Unicorn-31091.exe (PID: 7708)
      • Unicorn-64220.exe (PID: 7648)
      • Unicorn-43151.exe (PID: 7460)
      • Unicorn-64028.exe (PID: 7396)
      • Unicorn-16774.exe (PID: 7468)
      • Unicorn-16966.exe (PID: 7720)
      • Unicorn-31740.exe (PID: 7820)
      • Unicorn-58937.exe (PID: 7836)
      • Unicorn-48652.exe (PID: 7864)
      • Unicorn-11703.exe (PID: 7880)
      • Unicorn-12279.exe (PID: 7948)
      • Unicorn-15595.exe (PID: 7776)
      • Unicorn-15958.exe (PID: 7828)
      • Unicorn-56528.exe (PID: 7788)
      • Unicorn-6057.exe (PID: 8008)
      • Unicorn-8003.exe (PID: 8048)
      • Unicorn-51048.exe (PID: 9052)
      • Unicorn-9657.exe (PID: 7888)
      • Unicorn-18096.exe (PID: 7804)
      • Unicorn-38512.exe (PID: 9192)
      • Unicorn-46680.exe (PID: 9212)
      • Unicorn-6441.exe (PID: 8132)
      • Unicorn-23738.exe (PID: 8944)
      • Unicorn-24724.exe (PID: 2644)
      • Unicorn-18440.exe (PID: 8236)
      • Unicorn-31522.exe (PID: 8704)
      • Unicorn-26800.exe (PID: 8256)
      • Unicorn-62440.exe (PID: 8612)
      • Unicorn-52312.exe (PID: 7932)
      • Unicorn-56794.exe (PID: 8732)
      • Unicorn-30536.exe (PID: 9016)
      • Unicorn-57972.exe (PID: 8348)
      • Unicorn-64941.exe (PID: 8680)
      • Unicorn-2257.exe (PID: 8176)
      • Unicorn-48221.exe (PID: 8440)
      • Unicorn-2933.exe (PID: 8652)
      • Unicorn-62340.exe (PID: 8644)
      • Unicorn-44111.exe (PID: 7908)
      • Unicorn-31745.exe (PID: 8072)
      • Unicorn-22913.exe (PID: 9480)
      • Unicorn-21818.exe (PID: 7924)
      • Unicorn-26046.exe (PID: 8668)
      • Unicorn-45891.exe (PID: 8168)
      • Unicorn-61418.exe (PID: 8232)
      • Unicorn-54189.exe (PID: 9316)
      • Unicorn-60982.exe (PID: 7504)
      • Unicorn-45201.exe (PID: 2316)
      • Unicorn-53369.exe (PID: 10260)
      • Unicorn-7209.exe (PID: 8552)
      • Unicorn-8340.exe (PID: 7144)
      • Unicorn-39782.exe (PID: 8660)
      • Unicorn-3229.exe (PID: 10164)
      • Unicorn-40488.exe (PID: 9564)
      • Unicorn-56794.exe (PID: 8720)
      • Unicorn-16446.exe (PID: 9600)
      • Unicorn-56877.exe (PID: 10200)
      • Unicorn-15289.exe (PID: 10216)
      • Unicorn-32347.exe (PID: 9692)
      • Unicorn-26862.exe (PID: 8152)
      • Unicorn-21987.exe (PID: 10344)
      • Unicorn-45528.exe (PID: 8492)
      • Unicorn-45274.exe (PID: 8620)
      • Unicorn-47220.exe (PID: 7976)
      • Unicorn-12885.exe (PID: 9032)
      • Unicorn-13706.exe (PID: 9940)
      • Unicorn-21408.exe (PID: 8628)
      • Unicorn-19976.exe (PID: 9580)
      • Unicorn-29322.exe (PID: 9044)
      • Unicorn-17175.exe (PID: 10236)
      • Unicorn-25662.exe (PID: 8484)
      • Unicorn-20914.exe (PID: 9712)
      • Unicorn-53228.exe (PID: 6572)
      • Unicorn-10629.exe (PID: 9756)
      • Unicorn-54059.exe (PID: 8184)
      • Unicorn-51074.exe (PID: 8032)
      • Unicorn-5485.exe (PID: 9436)
      • Unicorn-35606.exe (PID: 8260)
      • Unicorn-12885.exe (PID: 7956)
      • Unicorn-14905.exe (PID: 10060)
      • Unicorn-59254.exe (PID: 9684)
      • Unicorn-15600.exe (PID: 10296)
      • Unicorn-17148.exe (PID: 11792)
      • Unicorn-35326.exe (PID: 9728)
      • Unicorn-62928.exe (PID: 10644)
      • Unicorn-2336.exe (PID: 8088)
      • Unicorn-37552.exe (PID: 8336)
      • Unicorn-21600.exe (PID: 8524)
      • Unicorn-19976.exe (PID: 9588)
      • Unicorn-55586.exe (PID: 9332)
      • Unicorn-8252.exe (PID: 10372)
      • Unicorn-7842.exe (PID: 10860)
      • Unicorn-20094.exe (PID: 10900)
      • Unicorn-17956.exe (PID: 10944)
      • Unicorn-61756.exe (PID: 10876)
      • Unicorn-12357.exe (PID: 10724)
      • Unicorn-56327.exe (PID: 9268)
      • Unicorn-19182.exe (PID: 9964)
      • Unicorn-3075.exe (PID: 12604)
      • Unicorn-41440.exe (PID: 12628)
      • Unicorn-20976.exe (PID: 8972)
      • Unicorn-22476.exe (PID: 9424)
      • Unicorn-1585.exe (PID: 12408)
      • Unicorn-52316.exe (PID: 12712)
      • Unicorn-64402.exe (PID: 11756)
      • Unicorn-26481.exe (PID: 9700)
      • Unicorn-43328.exe (PID: 9324)
      • Unicorn-16420.exe (PID: 10328)
      • Unicorn-3016.exe (PID: 14120)
      • Unicorn-11708.exe (PID: 10488)
      • Unicorn-62688.exe (PID: 14112)
      • Unicorn-13898.exe (PID: 14172)
      • Unicorn-12641.exe (PID: 10604)
      • Unicorn-56327.exe (PID: 9260)
      • Unicorn-36888.exe (PID: 9636)
      • Unicorn-31911.exe (PID: 11008)
      • Unicorn-47962.exe (PID: 10320)
      • Unicorn-26254.exe (PID: 12180)
      • Unicorn-32284.exe (PID: 11748)
      • Unicorn-41268.exe (PID: 11672)
      • Unicorn-49908.exe (PID: 9984)
      • Unicorn-41552.exe (PID: 9024)
      • Unicorn-55632.exe (PID: 12388)
      • Unicorn-1725.exe (PID: 9252)
      • Unicorn-1567.exe (PID: 10268)
      • Unicorn-45263.exe (PID: 8472)
      • Unicorn-40577.exe (PID: 8964)
      • Unicorn-46789.exe (PID: 9488)
      • Unicorn-17920.exe (PID: 15512)
      • Unicorn-3499.exe (PID: 12960)
      • Unicorn-23446.exe (PID: 15532)
      • Unicorn-235.exe (PID: 2332)
      • Unicorn-8252.exe (PID: 10688)
      • Unicorn-4884.exe (PID: 10916)
      • Unicorn-59425.exe (PID: 13492)
      • Unicorn-45044.exe (PID: 7968)
      • Unicorn-63146.exe (PID: 9528)
      • Unicorn-63700.exe (PID: 12428)
      • Unicorn-55734.exe (PID: 8512)
      • Unicorn-8252.exe (PID: 10360)
      • Unicorn-15678.exe (PID: 9416)
      • Unicorn-15097.exe (PID: 9952)
      • Unicorn-22075.exe (PID: 720)
      • Unicorn-14666.exe (PID: 10472)
      • Unicorn-2990.exe (PID: 10596)
      • Unicorn-18004.exe (PID: 6744)
      • Unicorn-42574.exe (PID: 8604)
    • Create files in a temporary directory

      • Unicorn-7616.exe (PID: 6540)
      • Unicorn-62510.exe (PID: 4200)
      • Unicorn-19314.exe (PID: 5528)
      • 1 (268).exe (PID: 4436)
      • Unicorn-40886.exe (PID: 4488)
      • Unicorn-18328.exe (PID: 4988)
      • Unicorn-16281.exe (PID: 1020)
      • Unicorn-59915.exe (PID: 1188)
      • Unicorn-48068.exe (PID: 5164)
      • Unicorn-1560.exe (PID: 6156)
      • Unicorn-15203.exe (PID: 1616)
      • Unicorn-3506.exe (PID: 6068)
      • Unicorn-23372.exe (PID: 1912)
      • Unicorn-24584.exe (PID: 7000)
      • Unicorn-43612.exe (PID: 960)
      • Unicorn-53748.exe (PID: 4756)
      • Unicorn-15600.exe (PID: 5124)
      • Unicorn-37504.exe (PID: 1812)
      • Unicorn-18362.exe (PID: 3888)
      • Unicorn-29493.exe (PID: 5304)
      • Unicorn-35359.exe (PID: 5548)
      • Unicorn-31190.exe (PID: 6324)
      • Unicorn-31540.exe (PID: 5680)
      • Unicorn-5102.exe (PID: 5384)
      • Unicorn-24968.exe (PID: 632)
      • Unicorn-43997.exe (PID: 1328)
      • Unicorn-16800.exe (PID: 1052)
      • Unicorn-57567.exe (PID: 6112)
      • Unicorn-11345.exe (PID: 5360)
      • Unicorn-48870.exe (PID: 5228)
      • Unicorn-63160.exe (PID: 1324)
      • Unicorn-31382.exe (PID: 5640)
      • Unicorn-63623.exe (PID: 7192)
      • Unicorn-58984.exe (PID: 7176)
      • Unicorn-36326.exe (PID: 7232)
      • Unicorn-48989.exe (PID: 7276)
      • Unicorn-45725.exe (PID: 7284)
      • Unicorn-14443.exe (PID: 7268)
      • Unicorn-49809.exe (PID: 7292)
      • Unicorn-13290.exe (PID: 7364)
      • Unicorn-47671.exe (PID: 7316)
      • Unicorn-51008.exe (PID: 7376)
      • Unicorn-61314.exe (PID: 7356)
      • Unicorn-45838.exe (PID: 7596)
      • Unicorn-65238.exe (PID: 680)
      • Unicorn-9544.exe (PID: 7636)
      • Unicorn-47884.exe (PID: 7584)
      • Unicorn-7645.exe (PID: 7212)
      • Unicorn-27272.exe (PID: 7700)
      • Unicorn-6638.exe (PID: 7348)
      • Unicorn-24179.exe (PID: 7500)
      • Unicorn-55668.exe (PID: 7476)
      • Unicorn-65185.exe (PID: 5436)
      • Unicorn-29772.exe (PID: 7424)
      • Unicorn-22996.exe (PID: 7436)
      • Unicorn-39886.exe (PID: 7492)
      • Unicorn-40078.exe (PID: 7736)
      • Unicorn-2959.exe (PID: 7544)
      • Unicorn-16800.exe (PID: 6816)
      • Unicorn-63452.exe (PID: 7308)
      • Unicorn-64220.exe (PID: 7648)
      • Unicorn-57806.exe (PID: 7444)
      • Unicorn-49538.exe (PID: 7484)
      • Unicorn-43151.exe (PID: 7460)
      • Unicorn-22921.exe (PID: 6676)
      • Unicorn-31740.exe (PID: 7820)
      • Unicorn-16966.exe (PID: 7720)
      • Unicorn-16774.exe (PID: 7468)
      • Unicorn-31091.exe (PID: 7708)
      • Unicorn-11703.exe (PID: 7880)
      • Unicorn-64028.exe (PID: 7396)
      • Unicorn-15595.exe (PID: 7776)
      • Unicorn-56528.exe (PID: 7788)
      • Unicorn-15958.exe (PID: 7828)
      • Unicorn-8003.exe (PID: 8048)
      • Unicorn-12279.exe (PID: 7948)
      • Unicorn-6057.exe (PID: 8008)
      • Unicorn-51048.exe (PID: 9052)
      • Unicorn-18096.exe (PID: 7804)
      • Unicorn-9657.exe (PID: 7888)
      • Unicorn-62440.exe (PID: 8612)
      • Unicorn-46680.exe (PID: 9212)
      • Unicorn-52312.exe (PID: 7932)
      • Unicorn-23738.exe (PID: 8944)
      • Unicorn-26800.exe (PID: 8256)
      • Unicorn-6441.exe (PID: 8132)
      • Unicorn-56794.exe (PID: 8732)
      • Unicorn-30536.exe (PID: 9016)
      • Unicorn-18440.exe (PID: 8236)
      • Unicorn-31522.exe (PID: 8704)
      • Unicorn-48221.exe (PID: 8440)
      • Unicorn-2933.exe (PID: 8652)
      • Unicorn-24724.exe (PID: 2644)
      • Unicorn-64941.exe (PID: 8680)
      • Unicorn-62340.exe (PID: 8644)
      • Unicorn-42456.exe (PID: 7220)
      • Unicorn-56607.exe (PID: 7664)
      • Unicorn-44111.exe (PID: 7908)
      • Unicorn-2257.exe (PID: 8176)
      • Unicorn-57972.exe (PID: 8348)
      • Unicorn-22913.exe (PID: 9480)
      • Unicorn-21988.exe (PID: 7552)
      • Unicorn-21818.exe (PID: 7924)
      • Unicorn-26046.exe (PID: 8668)
      • Unicorn-45891.exe (PID: 8168)
      • Unicorn-48652.exe (PID: 7864)
      • Unicorn-8340.exe (PID: 7144)
      • Unicorn-60982.exe (PID: 7504)
      • Unicorn-53369.exe (PID: 10260)
      • Unicorn-45201.exe (PID: 2316)
      • Unicorn-4613.exe (PID: 7404)
      • Unicorn-54189.exe (PID: 9316)
      • Unicorn-4433.exe (PID: 9300)
      • Unicorn-7209.exe (PID: 8552)
      • Unicorn-39782.exe (PID: 8660)
      • Unicorn-52966.exe (PID: 10416)
      • Unicorn-56794.exe (PID: 8720)
      • Unicorn-32347.exe (PID: 9692)
      • Unicorn-15289.exe (PID: 10216)
      • Unicorn-26862.exe (PID: 8152)
      • Unicorn-3229.exe (PID: 10164)
      • Unicorn-25792.exe (PID: 7944)
      • Unicorn-21987.exe (PID: 10344)
      • Unicorn-38512.exe (PID: 9192)
      • Unicorn-61392.exe (PID: 9648)
      • Unicorn-16446.exe (PID: 9600)
      • Unicorn-45274.exe (PID: 8620)
      • Unicorn-45528.exe (PID: 8492)
      • Unicorn-19976.exe (PID: 9580)
      • Unicorn-54874.exe (PID: 7848)
      • Unicorn-47220.exe (PID: 7976)
      • Unicorn-13706.exe (PID: 9940)
      • Unicorn-21408.exe (PID: 8628)
      • Unicorn-12885.exe (PID: 9032)
      • Unicorn-40488.exe (PID: 9564)
      • Unicorn-17175.exe (PID: 10236)
      • Unicorn-20914.exe (PID: 9712)
      • Unicorn-53228.exe (PID: 6572)
      • Unicorn-55009.exe (PID: 9028)
      • Unicorn-58937.exe (PID: 7836)
      • Unicorn-56877.exe (PID: 10200)
      • Unicorn-51074.exe (PID: 8032)
      • Unicorn-35606.exe (PID: 8260)
      • Unicorn-61729.exe (PID: 10532)
      • Unicorn-25662.exe (PID: 8484)
      • Unicorn-12885.exe (PID: 7956)
      • Unicorn-15600.exe (PID: 10296)
      • Unicorn-35326.exe (PID: 9728)
      • Unicorn-17148.exe (PID: 11792)
      • Unicorn-5485.exe (PID: 9436)
      • Unicorn-9247.exe (PID: 8588)
      • Unicorn-2336.exe (PID: 8088)
      • Unicorn-37552.exe (PID: 8336)
      • Unicorn-21600.exe (PID: 8524)
      • Unicorn-19976.exe (PID: 9588)
      • Unicorn-41382.exe (PID: 9244)
      • Unicorn-8252.exe (PID: 10372)
      • Unicorn-60520.exe (PID: 7796)
      • Unicorn-20094.exe (PID: 10900)
      • Unicorn-17956.exe (PID: 10944)
      • Unicorn-12357.exe (PID: 10724)
      • Unicorn-62928.exe (PID: 10644)
      • Unicorn-14905.exe (PID: 10060)
      • Unicorn-59254.exe (PID: 9684)
      • Unicorn-56327.exe (PID: 9268)
      • Unicorn-3075.exe (PID: 12604)
      • Unicorn-41440.exe (PID: 12620)
      • Unicorn-19182.exe (PID: 9964)
      • Unicorn-22476.exe (PID: 9424)
      • Unicorn-10629.exe (PID: 9756)
      • Unicorn-20976.exe (PID: 8972)
      • Unicorn-54059.exe (PID: 8184)
      • Unicorn-52316.exe (PID: 12712)
      • Unicorn-1585.exe (PID: 12408)
      • Unicorn-26481.exe (PID: 9700)
      • Unicorn-64402.exe (PID: 11756)
      • Unicorn-16420.exe (PID: 10328)
      • Unicorn-3016.exe (PID: 14120)
      • Unicorn-62688.exe (PID: 14112)
      • Unicorn-13898.exe (PID: 14172)
      • Unicorn-43328.exe (PID: 9324)
      • Unicorn-41440.exe (PID: 12628)
      • Unicorn-11708.exe (PID: 10488)
      • Unicorn-15097.exe (PID: 9952)
      • Unicorn-59425.exe (PID: 13500)
      • Unicorn-23446.exe (PID: 15532)
    • Creates files or folders in the user directory

      • WerFault.exe (PID: 8560)
      • WerFault.exe (PID: 9028)
      • WerFault.exe (PID: 11840)
      • WerFault.exe (PID: 12692)
    • Reads the software policy settings

      • slui.exe (PID: 2284)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable Microsoft Visual Basic 6 (90.6)
.exe | Win32 Executable (generic) (4.9)
.exe | Generic Win/DOS Executable (2.2)
.exe | DOS Executable Generic (2.2)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:01:19 13:34:56+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 299008
UninitializedDataSize: -
EntryPoint: 0x13d4
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
InternalName: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
642
Monitored processes
506
Malicious processes
80
Suspicious processes
67

Behavior graph

Click at the process to see the details
start 1 (268).exe sppextcomobj.exe no specs slui.exe unicorn-62510.exe unicorn-19314.exe unicorn-7616.exe unicorn-40886.exe unicorn-59915.exe unicorn-18328.exe unicorn-16281.exe unicorn-48068.exe unicorn-1560.exe unicorn-15203.exe unicorn-3506.exe unicorn-23372.exe unicorn-31540.exe unicorn-35359.exe unicorn-29493.exe unicorn-24584.exe unicorn-43612.exe unicorn-18362.exe unicorn-31382.exe unicorn-15600.exe unicorn-37504.exe unicorn-53748.exe unicorn-57567.exe unicorn-31190.exe unicorn-65238.exe unicorn-16800.exe unicorn-16800.exe unicorn-5102.exe unicorn-24968.exe unicorn-22921.exe unicorn-43997.exe unicorn-11345.exe unicorn-65185.exe unicorn-48870.exe unicorn-63160.exe unicorn-58984.exe unicorn-63623.exe unicorn-7645.exe unicorn-42456.exe unicorn-36326.exe unicorn-14443.exe unicorn-48989.exe unicorn-45725.exe unicorn-49809.exe unicorn-63452.exe unicorn-47671.exe unicorn-6638.exe unicorn-61314.exe unicorn-13290.exe unicorn-51008.exe unicorn-64028.exe unicorn-4613.exe unicorn-29772.exe unicorn-22996.exe unicorn-57806.exe unicorn-43151.exe unicorn-16774.exe unicorn-55668.exe unicorn-49538.exe unicorn-39886.exe unicorn-24179.exe unicorn-2959.exe unicorn-21988.exe unicorn-47884.exe unicorn-45838.exe unicorn-9544.exe unicorn-64220.exe unicorn-56607.exe unicorn-27272.exe unicorn-31091.exe unicorn-16966.exe unicorn-40078.exe unicorn-15595.exe unicorn-56528.exe unicorn-60520.exe unicorn-18096.exe unicorn-31740.exe unicorn-15958.exe unicorn-58937.exe unicorn-54874.exe unicorn-48652.exe unicorn-11703.exe unicorn-9657.exe unicorn-44111.exe unicorn-21818.exe unicorn-52312.exe unicorn-12279.exe unicorn-45044.exe unicorn-6057.exe unicorn-51074.exe unicorn-8003.exe unicorn-28424.exe unicorn-31745.exe unicorn-2336.exe unicorn-6441.exe unicorn-26862.exe unicorn-45891.exe unicorn-2257.exe unicorn-54059.exe unicorn-24724.exe unicorn-35606.exe unicorn-37552.exe unicorn-57972.exe unicorn-65179.exe no specs unicorn-48221.exe unicorn-45263.exe unicorn-25662.exe unicorn-45528.exe unicorn-55734.exe unicorn-21600.exe unicorn-7209.exe werfault.exe no specs unicorn-9247.exe unicorn-42574.exe unicorn-62440.exe unicorn-21408.exe unicorn-62340.exe unicorn-2933.exe unicorn-39782.exe unicorn-26046.exe unicorn-64941.exe unicorn-31522.exe unicorn-56794.exe unicorn-56794.exe unicorn-23738.exe unicorn-40577.exe unicorn-20976.exe unicorn-30536.exe werfault.exe no specs unicorn-51048.exe unicorn-38512.exe unicorn-46680.exe unicorn-8340.exe unicorn-22075.exe no specs unicorn-45274.exe unicorn-41552.exe unicorn-61418.exe unicorn-18440.exe unicorn-26800.exe unicorn-47220.exe unicorn-51304.exe no specs unicorn-29322.exe unicorn-25792.exe unicorn-64687.exe unicorn-12885.exe unicorn-12885.exe unicorn-41382.exe unicorn-1725.exe unicorn-56327.exe unicorn-56327.exe unicorn-4433.exe unicorn-54189.exe unicorn-43328.exe unicorn-55586.exe unicorn-58294.exe unicorn-60795.exe unicorn-15678.exe unicorn-22476.exe unicorn-5485.exe unicorn-12170.exe no specs unicorn-45658.exe no specs unicorn-22913.exe unicorn-46789.exe unicorn-50629.exe no specs unicorn-63146.exe unicorn-9596.exe no specs unicorn-40488.exe unicorn-19976.exe unicorn-19976.exe unicorn-16446.exe unicorn-36888.exe unicorn-61392.exe unicorn-59254.exe unicorn-32347.exe unicorn-26481.exe unicorn-20914.exe unicorn-35326.exe unicorn-38067.exe unicorn-10629.exe unicorn-13706.exe unicorn-15097.exe unicorn-19182.exe unicorn-39602.exe no specs unicorn-49908.exe unicorn-14905.exe unicorn-23074.exe unicorn-16658.exe no specs unicorn-3229.exe unicorn-56877.exe unicorn-15289.exe unicorn-8444.exe unicorn-13919.exe unicorn-18004.exe unicorn-60982.exe unicorn-45201.exe unicorn-53369.exe unicorn-1567.exe unicorn-11516.exe no specs unicorn-15600.exe unicorn-47962.exe unicorn-16420.exe unicorn-43062.exe unicorn-21987.exe unicorn-62928.exe unicorn-8252.exe unicorn-8252.exe unicorn-52966.exe unicorn-21704.exe unicorn-61174.exe unicorn-26364.exe unicorn-14666.exe unicorn-11708.exe unicorn-7127.exe no specs unicorn-61729.exe unicorn-61729.exe no specs unicorn-2990.exe unicorn-12641.exe unicorn-62928.exe unicorn-8252.exe unicorn-12357.exe unicorn-48901.exe no specs unicorn-10987.exe no specs unicorn-4665.exe no specs unicorn-7842.exe unicorn-61756.exe no specs unicorn-50821.exe no specs unicorn-50821.exe no specs unicorn-20094.exe unicorn-64556.exe no specs unicorn-4884.exe unicorn-37557.exe no specs unicorn-31691.exe unicorn-17956.exe unicorn-39006.exe unicorn-53197.exe no specs unicorn-31911.exe unicorn-50550.exe unicorn-3395.exe unicorn-38782.exe no specs unicorn-42866.exe unicorn-27084.exe no specs unicorn-59202.exe unicorn-39336.exe unicorn-8610.exe unicorn-47505.exe unicorn-34597.exe no specs unicorn-56087.exe no specs unicorn-1641.exe unicorn-61729.exe no specs unicorn-57604.exe no specs unicorn-235.exe unicorn-35046.exe no specs unicorn-26777.exe unicorn-36727.exe unicorn-28061.exe unicorn-45160.exe unicorn-14433.exe no specs unicorn-17175.exe unicorn-55009.exe unicorn-53228.exe unicorn-50428.exe no specs unicorn-28632.exe unicorn-22501.exe no specs unicorn-54512.exe no specs unicorn-22986.exe no specs unicorn-40698.exe unicorn-47490.exe no specs unicorn-9150.exe unicorn-41268.exe unicorn-54288.exe no specs unicorn-32284.exe unicorn-64402.exe unicorn-23370.exe unicorn-811.exe unicorn-17148.exe unicorn-31538.exe werfault.exe no specs unicorn-29400.exe unicorn-52534.exe unicorn-46312.exe no specs unicorn-23754.exe unicorn-17532.exe no specs unicorn-25700.exe unicorn-29328.exe unicorn-42036.exe no specs unicorn-45855.exe no specs unicorn-26254.exe unicorn-24037.exe no specs unicorn-22554.exe no specs unicorn-36966.exe unicorn-46310.exe no specs unicorn-62846.exe no specs unicorn-109.exe no specs unicorn-109.exe unicorn-109.exe unicorn-109.exe unicorn-109.exe no specs unicorn-109.exe unicorn-109.exe no specs unicorn-109.exe no specs unicorn-109.exe unicorn-5974.exe unicorn-51911.exe unicorn-55340.exe unicorn-38456.exe no specs unicorn-3909.exe no specs unicorn-53454.exe unicorn-6523.exe no specs unicorn-20822.exe no specs unicorn-49502.exe unicorn-55632.exe unicorn-53586.exe no specs unicorn-1585.exe unicorn-63700.exe unicorn-49965.exe unicorn-4028.exe unicorn-57962.exe no specs unicorn-8761.exe no specs unicorn-1916.exe no specs unicorn-21516.exe no specs unicorn-25601.exe no specs unicorn-16935.exe no specs unicorn-3075.exe unicorn-41440.exe unicorn-41440.exe unicorn-48324.exe no specs werfault.exe no specs unicorn-52316.exe unicorn-11283.exe unicorn-34396.exe no specs unicorn-31704.exe no specs unicorn-26250.exe no specs unicorn-50754.exe unicorn-20028.exe no specs unicorn-63006.exe unicorn-56784.exe no specs unicorn-25793.exe unicorn-26058.exe no specs unicorn-3499.exe no specs unicorn-3499.exe unicorn-54646.exe no specs unicorn-36172.exe no specs unicorn-34125.exe no specs unicorn-13613.exe no specs unicorn-61444.exe unicorn-42970.exe no specs unicorn-53084.exe unicorn-28388.exe unicorn-32472.exe no specs unicorn-47530.exe no specs unicorn-8543.exe unicorn-55341.exe no specs unicorn-59425.exe unicorn-59425.exe unicorn-43909.exe no specs unicorn-63774.exe no specs unicorn-23296.exe no specs unicorn-3505.exe no specs unicorn-58107.exe no specs unicorn-38116.exe no specs unicorn-12990.exe no specs unicorn-26725.exe unicorn-26725.exe no specs unicorn-26725.exe no specs unicorn-11620.exe no specs unicorn-21180.exe no specs unicorn-55990.exe no specs unicorn-45684.exe no specs unicorn-19596.exe no specs unicorn-23680.exe no specs unicorn-35932.exe no specs unicorn-14765.exe no specs unicorn-14765.exe no specs unicorn-49576.exe unicorn-36508.exe no specs unicorn-36508.exe no specs unicorn-13950.exe no specs unicorn-41984.exe no specs unicorn-46068.exe no specs unicorn-58320.exe no specs unicorn-44485.exe no specs unicorn-15149.exe unicorn-17101.exe no specs unicorn-51912.exe no specs unicorn-62788.exe no specs unicorn-32062.exe no specs unicorn-46352.exe no specs unicorn-62688.exe unicorn-3016.exe unicorn-13898.exe unicorn-41360.exe no specs unicorn-36622.exe no specs unicorn-20194.exe unicorn-22140.exe no specs unicorn-63072.exe no specs unicorn-3400.exe unicorn-63072.exe no specs unicorn-63072.exe no specs unicorn-63072.exe no specs unicorn-63072.exe no specs unicorn-3400.exe no specs unicorn-63072.exe no specs unicorn-43736.exe no specs unicorn-3400.exe no specs unicorn-63072.exe no specs unicorn-43736.exe no specs unicorn-3400.exe no specs unicorn-60802.exe no specs unicorn-49337.exe no specs unicorn-49337.exe no specs unicorn-49337.exe no specs unicorn-49337.exe unicorn-49337.exe unicorn-49337.exe no specs unicorn-60272.exe no specs unicorn-60272.exe no specs unicorn-41246.exe no specs unicorn-21910.exe no specs unicorn-17445.exe no specs unicorn-25994.exe no specs unicorn-50244.exe no specs unicorn-8033.exe no specs unicorn-47444.exe no specs unicorn-13120.exe no specs unicorn-56109.exe no specs unicorn-62950.exe no specs unicorn-6819.exe no specs unicorn-6819.exe no specs unicorn-6819.exe no specs unicorn-12684.exe unicorn-58621.exe no specs unicorn-39108.exe no specs unicorn-4250.exe no specs unicorn-9228.exe no specs unicorn-3628.exe no specs slui.exe no specs unicorn-27267.exe no specs unicorn-44423.exe no specs unicorn-27075.exe no specs unicorn-60104.exe no specs unicorn-4442.exe no specs unicorn-14126.exe unicorn-36830.exe no specs unicorn-50566.exe no specs unicorn-35314.exe no specs unicorn-51850.exe no specs unicorn-40914.exe no specs unicorn-54650.exe no specs unicorn-30608.exe no specs unicorn-42860.exe no specs unicorn-24962.exe no specs unicorn-49707.exe no specs unicorn-17920.exe unicorn-23446.exe unicorn-30438.exe unicorn-14656.exe no specs unicorn-49467.exe no specs unicorn-38341.exe no specs unicorn-38606.exe no specs unicorn-5476.exe no specs unicorn-5476.exe no specs unicorn-45812.exe no specs unicorn-62348.exe no specs unicorn-51413.exe no specs unicorn-13147.exe no specs unicorn-65148.exe no specs unicorn-16602.exe no specs unicorn-6296.exe no specs unicorn-34065.exe no specs unicorn-35506.exe no specs unicorn-6925.exe no specs unicorn-61548.exe no specs unicorn-55418.exe no specs unicorn-34906.exe unicorn-41682.exe no specs unicorn-12684.exe no specs unicorn-30695.exe no specs unicorn-47032.exe no specs unicorn-43650.exe no specs unicorn-57801.exe no specs unicorn-57801.exe unicorn-57801.exe no specs unicorn-4053.exe no specs unicorn-55684.exe no specs unicorn-55684.exe no specs unicorn-24958.exe no specs unicorn-10209.exe no specs unicorn-16598.exe no specs unicorn-13015.exe no specs unicorn-10375.exe no specs unicorn-5330.exe no specs unicorn-10930.exe no specs unicorn-24665.exe no specs unicorn-5330.exe no specs unicorn-30531.exe no specs unicorn-10930.exe no specs unicorn-30531.exe no specs unicorn-22395.exe no specs unicorn-10930.exe no specs unicorn-30531.exe no specs unicorn-10930.exe no specs unicorn-10930.exe no specs unicorn-10930.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
616C:\Users\admin\AppData\Local\Temp\Unicorn-14126.exeC:\Users\admin\AppData\Local\Temp\Unicorn-14126.exe
Unicorn-5102.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-14126.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
632C:\Users\admin\AppData\Local\Temp\Unicorn-24968.exeC:\Users\admin\AppData\Local\Temp\Unicorn-24968.exe
Unicorn-23372.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-24968.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
680C:\Users\admin\AppData\Local\Temp\Unicorn-65238.exeC:\Users\admin\AppData\Local\Temp\Unicorn-65238.exe
1 (268).exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-65238.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
720C:\Users\admin\AppData\Local\Temp\Unicorn-22075.exeC:\Users\admin\AppData\Local\Temp\Unicorn-22075.exeUnicorn-43612.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-22075.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
744C:\Users\admin\AppData\Local\Temp\Unicorn-10375.exeC:\Users\admin\AppData\Local\Temp\Unicorn-10375.exeUnicorn-811.exe
User:
admin
Integrity Level:
MEDIUM
812C:\WINDOWS\system32\SppExtComObj.exe -EmbeddingC:\Windows\System32\SppExtComObj.Exesvchost.exe
User:
NETWORK SERVICE
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
KMS Connection Broker
Version:
10.0.19041.3996 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\sppextcomobj.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\oleaut32.dll
960C:\Users\admin\AppData\Local\Temp\Unicorn-43612.exeC:\Users\admin\AppData\Local\Temp\Unicorn-43612.exe
Unicorn-40886.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-43612.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
976C:\Users\admin\AppData\Local\Temp\Unicorn-13015.exeC:\Users\admin\AppData\Local\Temp\Unicorn-13015.exeUnicorn-16446.exe
User:
admin
Integrity Level:
MEDIUM
1020C:\Users\admin\AppData\Local\Temp\Unicorn-16281.exeC:\Users\admin\AppData\Local\Temp\Unicorn-16281.exe
1 (268).exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-16281.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1052C:\Users\admin\AppData\Local\Temp\Unicorn-16800.exeC:\Users\admin\AppData\Local\Temp\Unicorn-16800.exe
Unicorn-3506.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-16800.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
Total events
16 668
Read events
16 668
Write events
0
Delete events
0

Modification events

No data
Executable files
794
Suspicious files
12
Text files
4
Unknown types
0

Dropped files

PID
Process
Filename
Type
44361 (268).exeC:\Users\admin\AppData\Local\Temp\Unicorn-35359.exeexecutable
MD5:1C43674608749FF5A8D6589FF001F8C1
SHA256:C77FAC258FB9F4C82D4E2A982C938E563DC3A30C87ADF14BF05281F339035D10
5528Unicorn-19314.exeC:\Users\admin\AppData\Local\Temp\Unicorn-40886.exeexecutable
MD5:12DA6F008C91613E9A0A3B76ACEB486E
SHA256:D5DCAAA97B832F7C4F0E423F887DE1A258D78C1F2A4DA1D723BEDBAF8DD4A50C
44361 (268).exeC:\Users\admin\AppData\Local\Temp\Unicorn-16281.exeexecutable
MD5:042AF85BA043C8EB69D8DF65D3951BEE
SHA256:9BCED9020C2F9C840F98F824D08C5BE9280449CA91449648D207656C4E4F7782
4200Unicorn-62510.exeC:\Users\admin\AppData\Local\Temp\Unicorn-59915.exeexecutable
MD5:E5F4F372FD92CF70B168C6AA24233013
SHA256:93160386518706F9EA2B0D8A931A573318202BB826AF69827132F8332729D2A6
5528Unicorn-19314.exeC:\Users\admin\AppData\Local\Temp\Unicorn-1560.exeexecutable
MD5:292BA1EAA40EA3BB8C890AB265B6C73F
SHA256:A165798321F081544B52E6B1AF773EC2393164698D5E549F6CA991B99A0E3100
6540Unicorn-7616.exeC:\Users\admin\AppData\Local\Temp\Unicorn-18328.exeexecutable
MD5:23D6A75E2BC13EC64F7B767F62A0CFBE
SHA256:BA4DE9E16580408B4DEF3C833FE226EDF42B7EDE4ED09AAF1CE27FA6DC8D5A04
4488Unicorn-40886.exeC:\Users\admin\AppData\Local\Temp\Unicorn-48068.exeexecutable
MD5:94C360EAD9FCCD8D301D96CF20DA305A
SHA256:5F31C6760C40B472215E915BE990106D739328A1F1888F9C3B7CB4046AA84A3B
6540Unicorn-7616.exeC:\Users\admin\AppData\Local\Temp\Unicorn-3506.exeexecutable
MD5:A8AF2B83060B1DE21A2945E8704707B4
SHA256:0753C8A793D1D729804DE84F02B1DA1F55BEA3BAC5488B337B462C3F175DCC3F
4988Unicorn-18328.exeC:\Users\admin\AppData\Local\Temp\Unicorn-15203.exeexecutable
MD5:C5EA21B1A6367BD52FCE412E7742D9CD
SHA256:976AEC2567319D08F3354BA6D93143E83731DDC0F095C602E32ED5F6EF74128D
4200Unicorn-62510.exeC:\Users\admin\AppData\Local\Temp\Unicorn-29493.exeexecutable
MD5:85300E24FBEA19128508CFB0FD16222A
SHA256:9BA3C5B684BD90F4AEFAD0BC681CD5226BA80BBC447078E6067356906F26D3B3
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
9
TCP/UDP connections
25
DNS requests
20
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
5496
MoUsoCoreWorker.exe
GET
200
2.16.168.114:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
whitelisted
GET
200
2.16.168.114:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
whitelisted
2104
svchost.exe
GET
200
2.16.168.114:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
whitelisted
6544
svchost.exe
GET
200
2.23.77.188:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
whitelisted
5504
backgroundTaskHost.exe
GET
200
2.23.77.188:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
whitelisted
8208
SIHClient.exe
GET
200
2.23.246.101:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
whitelisted
8208
SIHClient.exe
GET
200
2.23.246.101:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
whitelisted
GET
200
2.19.11.120:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
whitelisted
GET
200
2.23.246.101:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:137
whitelisted
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
5496
MoUsoCoreWorker.exe
2.16.168.114:80
crl.microsoft.com
Akamai International B.V.
RU
whitelisted
2.16.168.114:80
crl.microsoft.com
Akamai International B.V.
RU
whitelisted
2104
svchost.exe
2.16.168.114:80
crl.microsoft.com
Akamai International B.V.
RU
whitelisted
4
System
192.168.100.255:138
whitelisted
3216
svchost.exe
40.113.103.199:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
20.190.159.2:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
6544
svchost.exe
2.23.77.188:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted
2104
svchost.exe
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 20.73.194.208
  • 40.127.240.158
whitelisted
google.com
  • 142.250.185.78
whitelisted
crl.microsoft.com
  • 2.16.168.114
  • 2.16.168.124
  • 2.19.11.120
  • 2.19.11.105
whitelisted
client.wns.windows.com
  • 40.113.103.199
whitelisted
login.live.com
  • 20.190.159.2
  • 40.126.31.131
  • 40.126.31.2
  • 20.190.159.75
  • 40.126.31.128
  • 40.126.31.73
  • 40.126.31.1
  • 20.190.159.130
whitelisted
ocsp.digicert.com
  • 2.23.77.188
whitelisted
arc.msn.com
  • 20.223.36.55
whitelisted
slscr.update.microsoft.com
  • 172.202.163.200
whitelisted
www.microsoft.com
  • 2.23.246.101
whitelisted
fe3cr.delivery.mp.microsoft.com
  • 13.85.23.206
whitelisted

Threats

No threats detected
No debug info