File name:

1 (52)

Full analysis: https://app.any.run/tasks/999de3b5-adc7-41b7-9295-f945e72348b6
Verdict: Malicious activity
Analysis date: March 25, 2025, 00:31:10
OS: Windows 10 Professional (build: 19045, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections
MD5:

01EA01B5A60885806EFAD7B0DEAAEDC0

SHA1:

0C00C31D953CFAA5D66310DEF3F6F5EC16B2EEDD

SHA256:

2486E3620AEE3B90EAD7145145CF4A2BA196BFFA1DEB841697025C801D002276

SSDEEP:

6144:tJw8cSm+QDQeAuay1wesrZSx56Pqlp8GBs/xyeOLYk/8SwjwpyAvEhXuLEAVqyJa:tq1rSeAu/1rcPM+asJyeOLbx4DxmDsR

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.
  • MALICIOUS

    No malicious indicators.
  • SUSPICIOUS

    • Starts itself from another location

      • 1 (52).exe (PID: 4208)
      • Unicorn-56719.exe (PID: 616)
      • Unicorn-46952.exe (PID: 6728)
      • Unicorn-27086.exe (PID: 2692)
      • Unicorn-3586.exe (PID: 6872)
      • Unicorn-23907.exe (PID: 7144)
      • Unicorn-3586.exe (PID: 6192)
      • Unicorn-25091.exe (PID: 6476)
      • Unicorn-16992.exe (PID: 4920)
      • Unicorn-22119.exe (PID: 1812)
      • Unicorn-16992.exe (PID: 3676)
      • Unicorn-38045.exe (PID: 1764)
      • Unicorn-36858.exe (PID: 6964)
      • Unicorn-37643.exe (PID: 6324)
      • Unicorn-6899.exe (PID: 1052)
      • Unicorn-62311.exe (PID: 1388)
      • Unicorn-52081.exe (PID: 5360)
      • Unicorn-52081.exe (PID: 1568)
      • Unicorn-8334.exe (PID: 6752)
      • Unicorn-8334.exe (PID: 5756)
      • Unicorn-8334.exe (PID: 4188)
      • Unicorn-57073.exe (PID: 4868)
      • Unicorn-48408.exe (PID: 5968)
      • Unicorn-51208.exe (PID: 6456)
      • Unicorn-51208.exe (PID: 6388)
      • Unicorn-64883.exe (PID: 2984)
      • Unicorn-20451.exe (PID: 6592)
      • Unicorn-37472.exe (PID: 5508)
      • Unicorn-58638.exe (PID: 7196)
      • Unicorn-12168.exe (PID: 7188)
      • Unicorn-35686.exe (PID: 7256)
      • Unicorn-3305.exe (PID: 7276)
      • Unicorn-15857.exe (PID: 7300)
      • Unicorn-62052.exe (PID: 7332)
      • Unicorn-56432.exe (PID: 7352)
      • Unicorn-43791.exe (PID: 7316)
      • Unicorn-27502.exe (PID: 7380)
      • Unicorn-22406.exe (PID: 7472)
      • Unicorn-52364.exe (PID: 7480)
      • Unicorn-9712.exe (PID: 7404)
      • Unicorn-55908.exe (PID: 7488)
      • Unicorn-4259.exe (PID: 7448)
      • Unicorn-53261.exe (PID: 7464)
      • Unicorn-55908.exe (PID: 7496)
      • Unicorn-22300.exe (PID: 7396)
      • Unicorn-52364.exe (PID: 7512)
      • Unicorn-32498.exe (PID: 7424)
      • Unicorn-7059.exe (PID: 7432)
      • Unicorn-22406.exe (PID: 7540)
      • Unicorn-46234.exe (PID: 7416)
      • Unicorn-52364.exe (PID: 7440)
      • Unicorn-28166.exe (PID: 7528)
      • Unicorn-52364.exe (PID: 7504)
      • Unicorn-37647.exe (PID: 7552)
      • Unicorn-12924.exe (PID: 7456)
      • Unicorn-60909.exe (PID: 7736)
      • Unicorn-3068.exe (PID: 7728)
      • Unicorn-20739.exe (PID: 7784)
      • Unicorn-52735.exe (PID: 7804)
      • Unicorn-23705.exe (PID: 7848)
      • Unicorn-17495.exe (PID: 7924)
      • Unicorn-37766.exe (PID: 7948)
      • Unicorn-53245.exe (PID: 7828)
      • Unicorn-28669.exe (PID: 7964)
      • Unicorn-31217.exe (PID: 7980)
      • Unicorn-1415.exe (PID: 8012)
      • Unicorn-40471.exe (PID: 8004)
      • Unicorn-55765.exe (PID: 8020)
      • Unicorn-27502.exe (PID: 7388)
      • Unicorn-54412.exe (PID: 8132)
      • Unicorn-35837.exe (PID: 8156)
      • Unicorn-12427.exe (PID: 680)
      • Unicorn-48006.exe (PID: 8164)
      • Unicorn-782.exe (PID: 668)
      • Unicorn-21591.exe (PID: 904)
      • Unicorn-15499.exe (PID: 1132)
      • Unicorn-24020.exe (PID: 8364)
      • Unicorn-55027.exe (PID: 8228)
      • Unicorn-59246.exe (PID: 5084)
      • Unicorn-59246.exe (PID: 2420)
      • Unicorn-32765.exe (PID: 6736)
      • Unicorn-782.exe (PID: 4200)
      • Unicorn-3330.exe (PID: 1300)
      • Unicorn-41457.exe (PID: 7156)
      • Unicorn-59246.exe (PID: 8220)
      • Unicorn-59246.exe (PID: 6644)
      • Unicorn-21591.exe (PID: 8248)
      • Unicorn-24020.exe (PID: 8348)
      • Unicorn-47482.exe (PID: 2240)
      • Unicorn-24020.exe (PID: 8372)
      • Unicorn-17418.exe (PID: 8520)
      • Unicorn-15499.exe (PID: 7244)
      • Unicorn-18420.exe (PID: 8388)
      • Unicorn-3564.exe (PID: 8708)
      • Unicorn-37756.exe (PID: 8432)
      • Unicorn-45811.exe (PID: 8532)
      • Unicorn-3330.exe (PID: 3896)
      • Unicorn-56746.exe (PID: 8400)
      • Unicorn-24020.exe (PID: 8356)
      • Unicorn-34955.exe (PID: 8468)
      • Unicorn-59246.exe (PID: 6564)
      • Unicorn-24544.exe (PID: 8408)
      • Unicorn-65411.exe (PID: 8416)
      • Unicorn-40814.exe (PID: 8620)
      • Unicorn-53388.exe (PID: 8720)
      • Unicorn-38266.exe (PID: 8576)
      • Unicorn-44305.exe (PID: 8628)
      • Unicorn-65411.exe (PID: 8424)
      • Unicorn-43934.exe (PID: 8768)
      • Unicorn-35486.exe (PID: 8380)
      • Unicorn-43621.exe (PID: 8588)
      • Unicorn-10736.exe (PID: 8808)
      • Unicorn-5640.exe (PID: 8728)
      • Unicorn-40835.exe (PID: 8824)
      • Unicorn-18281.exe (PID: 8800)
      • Unicorn-20239.exe (PID: 8904)
      • Unicorn-44931.exe (PID: 7764)
      • Unicorn-32998.exe (PID: 8776)
      • Unicorn-38647.exe (PID: 7708)
      • Unicorn-58365.exe (PID: 8920)
      • Unicorn-44120.exe (PID: 8996)
      • Unicorn-15972.exe (PID: 8980)
      • Unicorn-7667.exe (PID: 9036)
      • Unicorn-27398.exe (PID: 9052)
      • Unicorn-41361.exe (PID: 9068)
      • Unicorn-27625.exe (PID: 9076)
      • Unicorn-47491.exe (PID: 9084)
      • Unicorn-55150.exe (PID: 7912)
      • Unicorn-21254.exe (PID: 9132)
      • Unicorn-55524.exe (PID: 9204)
      • Unicorn-9852.exe (PID: 7012)
      • Unicorn-46832.exe (PID: 9168)
      • Unicorn-47195.exe (PID: 9116)
      • Unicorn-55296.exe (PID: 9148)
      • Unicorn-9852.exe (PID: 9212)
      • Unicorn-41347.exe (PID: 9188)
      • Unicorn-14844.exe (PID: 6800)
      • Unicorn-14844.exe (PID: 9032)
      • Unicorn-8979.exe (PID: 9220)
      • Unicorn-12037.exe (PID: 9292)
      • Unicorn-43759.exe (PID: 9272)
      • Unicorn-8441.exe (PID: 9340)
      • Unicorn-48483.exe (PID: 9388)
      • Unicorn-10626.exe (PID: 9396)
      • Unicorn-28617.exe (PID: 9364)
      • Unicorn-16505.exe (PID: 9372)
      • Unicorn-2525.exe (PID: 9320)
      • Unicorn-25190.exe (PID: 9428)
      • Unicorn-30810.exe (PID: 9460)
      • Unicorn-64899.exe (PID: 9716)
      • Unicorn-58459.exe (PID: 9748)
      • Unicorn-59246.exe (PID: 2644)
      • Unicorn-24020.exe (PID: 8440)
      • Unicorn-49402.exe (PID: 9832)
      • Unicorn-36604.exe (PID: 9856)
      • Unicorn-25978.exe (PID: 8788)
      • Unicorn-53248.exe (PID: 9888)
    • Executable content was dropped or overwritten

      • 1 (52).exe (PID: 4208)
      • Unicorn-56719.exe (PID: 616)
      • Unicorn-46952.exe (PID: 6728)
      • Unicorn-3586.exe (PID: 6872)
      • Unicorn-37643.exe (PID: 6324)
      • Unicorn-27086.exe (PID: 2692)
      • Unicorn-23907.exe (PID: 7144)
      • Unicorn-16992.exe (PID: 3676)
      • Unicorn-6899.exe (PID: 1052)
      • Unicorn-62311.exe (PID: 1388)
      • Unicorn-3586.exe (PID: 6192)
      • Unicorn-25091.exe (PID: 6476)
      • Unicorn-52081.exe (PID: 5360)
      • Unicorn-52081.exe (PID: 1568)
      • Unicorn-36858.exe (PID: 6964)
      • Unicorn-38045.exe (PID: 1764)
      • Unicorn-22119.exe (PID: 1812)
      • Unicorn-8334.exe (PID: 5756)
      • Unicorn-8334.exe (PID: 4188)
      • Unicorn-16992.exe (PID: 4920)
      • Unicorn-64883.exe (PID: 2984)
      • Unicorn-48408.exe (PID: 5968)
      • Unicorn-37472.exe (PID: 5508)
      • Unicorn-12168.exe (PID: 7188)
      • Unicorn-58638.exe (PID: 7196)
      • Unicorn-35686.exe (PID: 7256)
      • Unicorn-3305.exe (PID: 7276)
      • Unicorn-15857.exe (PID: 7300)
      • Unicorn-43791.exe (PID: 7316)
      • Unicorn-62052.exe (PID: 7332)
      • Unicorn-56432.exe (PID: 7352)
      • Unicorn-27502.exe (PID: 7380)
      • Unicorn-22406.exe (PID: 7472)
      • Unicorn-52364.exe (PID: 7480)
      • Unicorn-9712.exe (PID: 7404)
      • Unicorn-55908.exe (PID: 7488)
      • Unicorn-22300.exe (PID: 7396)
      • Unicorn-52364.exe (PID: 7512)
      • Unicorn-55908.exe (PID: 7496)
      • Unicorn-22406.exe (PID: 7540)
      • Unicorn-8334.exe (PID: 6752)
      • Unicorn-37647.exe (PID: 7552)
      • Unicorn-28166.exe (PID: 7528)
      • Unicorn-20451.exe (PID: 6592)
      • Unicorn-3068.exe (PID: 7728)
      • Unicorn-60909.exe (PID: 7736)
      • Unicorn-44931.exe (PID: 7764)
      • Unicorn-38647.exe (PID: 7708)
      • Unicorn-53245.exe (PID: 7828)
      • Unicorn-20739.exe (PID: 7784)
      • Unicorn-52735.exe (PID: 7804)
      • Unicorn-23705.exe (PID: 7848)
      • Unicorn-37766.exe (PID: 7948)
      • Unicorn-55150.exe (PID: 7912)
      • Unicorn-17495.exe (PID: 7924)
      • Unicorn-28669.exe (PID: 7964)
      • Unicorn-31217.exe (PID: 7980)
      • Unicorn-1415.exe (PID: 8012)
      • Unicorn-40471.exe (PID: 8004)
      • Unicorn-54412.exe (PID: 8132)
      • Unicorn-48006.exe (PID: 8164)
      • Unicorn-27502.exe (PID: 7388)
      • Unicorn-35837.exe (PID: 8156)
      • Unicorn-12427.exe (PID: 680)
      • Unicorn-782.exe (PID: 668)
      • Unicorn-4259.exe (PID: 7448)
      • Unicorn-21591.exe (PID: 904)
      • Unicorn-15499.exe (PID: 1132)
      • Unicorn-24020.exe (PID: 8364)
      • Unicorn-59246.exe (PID: 5084)
      • Unicorn-782.exe (PID: 4200)
      • Unicorn-55027.exe (PID: 8228)
      • Unicorn-57073.exe (PID: 4868)
      • Unicorn-32765.exe (PID: 6736)
      • Unicorn-59246.exe (PID: 8220)
      • Unicorn-59246.exe (PID: 2420)
      • Unicorn-59246.exe (PID: 6644)
      • Unicorn-41457.exe (PID: 7156)
      • Unicorn-47482.exe (PID: 2240)
      • Unicorn-32498.exe (PID: 7424)
      • Unicorn-59246.exe (PID: 2644)
      • Unicorn-21591.exe (PID: 8248)
      • Unicorn-24020.exe (PID: 8348)
      • Unicorn-15499.exe (PID: 7244)
      • Unicorn-18420.exe (PID: 8388)
      • Unicorn-3564.exe (PID: 8708)
      • Unicorn-17418.exe (PID: 8520)
      • Unicorn-37756.exe (PID: 8432)
      • Unicorn-52364.exe (PID: 7440)
      • Unicorn-45811.exe (PID: 8532)
      • Unicorn-12924.exe (PID: 7456)
      • Unicorn-34955.exe (PID: 8468)
      • Unicorn-7059.exe (PID: 7432)
      • Unicorn-3330.exe (PID: 3896)
      • Unicorn-24020.exe (PID: 8356)
      • Unicorn-65411.exe (PID: 8416)
      • Unicorn-40814.exe (PID: 8620)
      • Unicorn-52364.exe (PID: 7504)
      • Unicorn-59246.exe (PID: 6564)
      • Unicorn-38266.exe (PID: 8576)
      • Unicorn-65411.exe (PID: 8424)
      • Unicorn-53388.exe (PID: 8720)
      • Unicorn-35486.exe (PID: 8380)
      • Unicorn-43934.exe (PID: 8768)
      • Unicorn-25978.exe (PID: 8788)
      • Unicorn-51208.exe (PID: 6388)
      • Unicorn-46234.exe (PID: 7416)
      • Unicorn-5640.exe (PID: 8728)
      • Unicorn-10736.exe (PID: 8808)
      • Unicorn-40835.exe (PID: 8824)
      • Unicorn-53261.exe (PID: 7464)
      • Unicorn-18281.exe (PID: 8800)
      • Unicorn-51208.exe (PID: 6456)
      • Unicorn-20239.exe (PID: 8904)
      • Unicorn-32998.exe (PID: 8776)
      • Unicorn-58365.exe (PID: 8920)
      • Unicorn-44120.exe (PID: 8996)
      • Unicorn-7667.exe (PID: 9036)
      • Unicorn-27398.exe (PID: 9052)
      • Unicorn-15972.exe (PID: 8980)
      • Unicorn-41361.exe (PID: 9068)
      • Unicorn-27625.exe (PID: 9076)
      • Unicorn-47491.exe (PID: 9084)
      • Unicorn-47195.exe (PID: 9116)
      • Unicorn-21254.exe (PID: 9132)
      • Unicorn-55296.exe (PID: 9148)
      • Unicorn-55524.exe (PID: 9204)
      • Unicorn-46832.exe (PID: 9168)
      • Unicorn-9852.exe (PID: 9212)
      • Unicorn-41347.exe (PID: 9188)
      • Unicorn-14844.exe (PID: 9032)
      • Unicorn-43759.exe (PID: 9272)
      • Unicorn-14844.exe (PID: 6800)
      • Unicorn-55765.exe (PID: 8020)
      • Unicorn-8979.exe (PID: 9220)
      • Unicorn-12037.exe (PID: 9292)
      • Unicorn-8441.exe (PID: 9340)
      • Unicorn-10626.exe (PID: 9396)
      • Unicorn-2525.exe (PID: 9320)
      • Unicorn-48483.exe (PID: 9388)
      • Unicorn-25190.exe (PID: 9428)
      • Unicorn-30810.exe (PID: 9460)
      • Unicorn-64899.exe (PID: 9716)
      • Unicorn-58459.exe (PID: 9748)
      • Unicorn-24020.exe (PID: 8372)
      • Unicorn-56746.exe (PID: 8400)
      • Unicorn-49402.exe (PID: 9832)
      • Unicorn-44305.exe (PID: 8628)
      • Unicorn-43621.exe (PID: 8588)
      • Unicorn-36604.exe (PID: 9856)
      • Unicorn-47332.exe (PID: 9932)
      • Unicorn-64386.exe (PID: 10020)
      • Unicorn-50176.exe (PID: 9924)
      • Unicorn-2431.exe (PID: 9984)
      • Unicorn-56204.exe (PID: 10144)
      • Unicorn-50179.exe (PID: 10004)
      • Unicorn-33402.exe (PID: 10180)
      • Unicorn-30330.exe (PID: 10124)
      • Unicorn-47121.exe (PID: 10060)
      • Unicorn-13064.exe (PID: 10172)
      • Unicorn-33402.exe (PID: 10188)
      • Unicorn-53248.exe (PID: 9888)
      • Unicorn-15085.exe (PID: 9944)
      • Unicorn-31747.exe (PID: 10256)
      • Unicorn-55680.exe (PID: 8820)
      • Unicorn-21638.exe (PID: 4152)
      • Unicorn-17501.exe (PID: 10416)
      • Unicorn-31747.exe (PID: 10252)
      • Unicorn-46448.exe (PID: 10340)
      • Unicorn-24050.exe (PID: 10276)
      • Unicorn-16505.exe (PID: 9372)
      • Unicorn-3324.exe (PID: 10400)
      • Unicorn-21114.exe (PID: 10356)
      • Unicorn-34819.exe (PID: 10364)
      • Unicorn-34295.exe (PID: 10308)
      • Unicorn-8285.exe (PID: 10504)
      • Unicorn-39410.exe (PID: 10216)
      • Unicorn-27782.exe (PID: 9016)
      • Unicorn-58752.exe (PID: 4436)
      • Unicorn-58752.exe (PID: 5216)
      • Unicorn-2665.exe (PID: 10716)
      • Unicorn-60169.exe (PID: 10544)
      • Unicorn-40844.exe (PID: 10600)
      • Unicorn-60641.exe (PID: 10576)
      • Unicorn-52977.exe (PID: 10760)
      • Unicorn-22007.exe (PID: 10660)
      • Unicorn-133.exe (PID: 10644)
      • Unicorn-133.exe (PID: 10652)
      • Unicorn-47895.exe (PID: 10688)
      • Unicorn-59016.exe (PID: 10776)
      • Unicorn-16911.exe (PID: 10744)
      • Unicorn-65146.exe (PID: 10800)
      • Unicorn-59016.exe (PID: 10784)
      • Unicorn-37772.exe (PID: 10460)
      • Unicorn-28151.exe (PID: 10524)
      • Unicorn-28151.exe (PID: 10516)
      • Unicorn-57569.exe (PID: 10440)
      • Unicorn-51949.exe (PID: 10480)
      • Unicorn-34176.exe (PID: 10860)
      • Unicorn-4636.exe (PID: 10896)
      • Unicorn-24960.exe (PID: 10928)
      • Unicorn-28032.exe (PID: 10972)
      • Unicorn-24695.exe (PID: 10916)
      • Unicorn-12790.exe (PID: 11048)
      • Unicorn-48054.exe (PID: 11032)
      • Unicorn-45454.exe (PID: 11056)
      • Unicorn-56454.exe (PID: 11016)
      • Unicorn-8339.exe (PID: 11124)
      • Unicorn-33795.exe (PID: 11096)
      • Unicorn-42371.exe (PID: 11108)
      • Unicorn-2824.exe (PID: 11160)
      • Unicorn-55914.exe (PID: 10996)
      • Unicorn-16477.exe (PID: 11144)
      • Unicorn-34176.exe (PID: 10852)
      • Unicorn-56468.exe (PID: 10888)
      • Unicorn-64408.exe (PID: 11320)
      • Unicorn-53132.exe (PID: 6184)
      • Unicorn-21520.exe (PID: 11232)
      • Unicorn-13405.exe (PID: 11276)
      • Unicorn-19549.exe (PID: 11184)
      • Unicorn-21507.exe (PID: 11392)
      • Unicorn-1641.exe (PID: 11344)
      • Unicorn-24020.exe (PID: 8440)
      • Unicorn-39296.exe (PID: 11284)
      • Unicorn-12576.exe (PID: 11332)
      • Unicorn-43407.exe (PID: 11312)
      • Unicorn-38755.exe (PID: 11448)
      • Unicorn-45324.exe (PID: 11476)
      • Unicorn-9977.exe (PID: 11000)
      • Unicorn-9852.exe (PID: 7012)
      • Unicorn-7916.exe (PID: 8756)
      • Unicorn-5015.exe (PID: 11208)
      • Unicorn-55284.exe (PID: 11360)
      • Unicorn-7785.exe (PID: 11224)
      • Unicorn-65146.exe (PID: 10792)
      • Unicorn-16358.exe (PID: 11496)
      • Unicorn-38772.exe (PID: 11548)
      • Unicorn-43785.exe (PID: 11644)
      • Unicorn-23919.exe (PID: 11636)
      • Unicorn-58516.exe (PID: 11556)
      • Unicorn-43547.exe (PID: 11572)
      • Unicorn-40203.exe (PID: 11668)
      • Unicorn-3598.exe (PID: 11612)
      • Unicorn-44781.exe (PID: 11564)
      • Unicorn-19299.exe (PID: 12052)
      • Unicorn-39165.exe (PID: 12060)
      • Unicorn-633.exe (PID: 11980)
      • Unicorn-17411.exe (PID: 11888)
      • Unicorn-35200.exe (PID: 11868)
      • Unicorn-617.exe (PID: 11920)
      • Unicorn-46214.exe (PID: 11804)
      • Unicorn-32492.exe (PID: 11748)
      • Unicorn-32128.exe (PID: 11972)
      • Unicorn-24544.exe (PID: 8408)
      • Unicorn-2969.exe (PID: 11776)
      • Unicorn-28617.exe (PID: 9364)
      • Unicorn-11266.exe (PID: 11956)
      • Unicorn-48905.exe (PID: 11876)
      • Unicorn-6027.exe (PID: 11852)
      • Unicorn-36653.exe (PID: 11948)
      • Unicorn-54406.exe (PID: 12148)
      • Unicorn-39165.exe (PID: 12076)
      • Unicorn-37088.exe (PID: 12040)
      • Unicorn-55148.exe (PID: 12104)
      • Unicorn-36617.exe (PID: 12024)
      • Unicorn-36352.exe (PID: 12016)
      • Unicorn-44351.exe (PID: 12264)
      • Unicorn-50824.exe (PID: 12032)
      • Unicorn-65511.exe (PID: 12164)
      • Unicorn-46621.exe (PID: 12272)
      • Unicorn-8058.exe (PID: 5008)
      • Unicorn-48262.exe (PID: 12212)
  • INFO

    • Create files in a temporary directory

      • 1 (52).exe (PID: 4208)
      • Unicorn-56719.exe (PID: 616)
      • Unicorn-46952.exe (PID: 6728)
      • Unicorn-3586.exe (PID: 6872)
      • Unicorn-37643.exe (PID: 6324)
      • Unicorn-27086.exe (PID: 2692)
      • Unicorn-23907.exe (PID: 7144)
      • Unicorn-6899.exe (PID: 1052)
      • Unicorn-16992.exe (PID: 3676)
      • Unicorn-62311.exe (PID: 1388)
      • Unicorn-3586.exe (PID: 6192)
      • Unicorn-25091.exe (PID: 6476)
      • Unicorn-52081.exe (PID: 5360)
      • Unicorn-52081.exe (PID: 1568)
      • Unicorn-36858.exe (PID: 6964)
      • Unicorn-38045.exe (PID: 1764)
      • Unicorn-8334.exe (PID: 5756)
      • Unicorn-8334.exe (PID: 4188)
      • Unicorn-64883.exe (PID: 2984)
      • Unicorn-37472.exe (PID: 5508)
      • Unicorn-16992.exe (PID: 4920)
      • Unicorn-48408.exe (PID: 5968)
      • Unicorn-22119.exe (PID: 1812)
      • Unicorn-12168.exe (PID: 7188)
      • Unicorn-58638.exe (PID: 7196)
      • Unicorn-35686.exe (PID: 7256)
      • Unicorn-3305.exe (PID: 7276)
      • Unicorn-15857.exe (PID: 7300)
      • Unicorn-43791.exe (PID: 7316)
      • Unicorn-62052.exe (PID: 7332)
      • Unicorn-56432.exe (PID: 7352)
      • Unicorn-27502.exe (PID: 7380)
      • Unicorn-22406.exe (PID: 7472)
      • Unicorn-55908.exe (PID: 7488)
      • Unicorn-22406.exe (PID: 7540)
      • Unicorn-52364.exe (PID: 7480)
      • Unicorn-9712.exe (PID: 7404)
      • Unicorn-8334.exe (PID: 6752)
      • Unicorn-22300.exe (PID: 7396)
      • Unicorn-55908.exe (PID: 7496)
      • Unicorn-52364.exe (PID: 7512)
      • Unicorn-28166.exe (PID: 7528)
      • Unicorn-37647.exe (PID: 7552)
      • Unicorn-20451.exe (PID: 6592)
      • Unicorn-60909.exe (PID: 7736)
      • Unicorn-3068.exe (PID: 7728)
      • Unicorn-38647.exe (PID: 7708)
      • Unicorn-44931.exe (PID: 7764)
      • Unicorn-20739.exe (PID: 7784)
      • Unicorn-52735.exe (PID: 7804)
      • Unicorn-23705.exe (PID: 7848)
      • Unicorn-53245.exe (PID: 7828)
      • Unicorn-55150.exe (PID: 7912)
      • Unicorn-17495.exe (PID: 7924)
      • Unicorn-37766.exe (PID: 7948)
      • Unicorn-28669.exe (PID: 7964)
      • Unicorn-1415.exe (PID: 8012)
      • Unicorn-31217.exe (PID: 7980)
      • Unicorn-40471.exe (PID: 8004)
      • Unicorn-27502.exe (PID: 7388)
      • Unicorn-54412.exe (PID: 8132)
      • Unicorn-35837.exe (PID: 8156)
      • Unicorn-48006.exe (PID: 8164)
      • Unicorn-12427.exe (PID: 680)
      • Unicorn-782.exe (PID: 668)
      • Unicorn-4259.exe (PID: 7448)
      • Unicorn-21591.exe (PID: 904)
      • Unicorn-15499.exe (PID: 1132)
      • Unicorn-24020.exe (PID: 8364)
      • Unicorn-59246.exe (PID: 5084)
      • Unicorn-782.exe (PID: 4200)
      • Unicorn-55027.exe (PID: 8228)
      • Unicorn-57073.exe (PID: 4868)
      • Unicorn-59246.exe (PID: 2420)
      • Unicorn-32765.exe (PID: 6736)
      • Unicorn-41457.exe (PID: 7156)
      • Unicorn-47482.exe (PID: 2240)
      • Unicorn-59246.exe (PID: 8220)
      • Unicorn-59246.exe (PID: 6644)
      • Unicorn-32498.exe (PID: 7424)
      • Unicorn-59246.exe (PID: 2644)
      • Unicorn-21591.exe (PID: 8248)
      • Unicorn-24020.exe (PID: 8348)
      • Unicorn-17418.exe (PID: 8520)
      • Unicorn-15499.exe (PID: 7244)
      • Unicorn-3564.exe (PID: 8708)
      • Unicorn-18420.exe (PID: 8388)
      • Unicorn-12924.exe (PID: 7456)
      • Unicorn-37756.exe (PID: 8432)
      • Unicorn-52364.exe (PID: 7440)
      • Unicorn-45811.exe (PID: 8532)
      • Unicorn-24020.exe (PID: 8356)
      • Unicorn-34955.exe (PID: 8468)
      • Unicorn-7059.exe (PID: 7432)
      • Unicorn-3330.exe (PID: 3896)
      • Unicorn-65411.exe (PID: 8416)
      • Unicorn-40814.exe (PID: 8620)
      • Unicorn-52364.exe (PID: 7504)
      • Unicorn-59246.exe (PID: 6564)
      • Unicorn-53388.exe (PID: 8720)
      • Unicorn-38266.exe (PID: 8576)
      • Unicorn-65411.exe (PID: 8424)
      • Unicorn-43934.exe (PID: 8768)
      • Unicorn-35486.exe (PID: 8380)
      • Unicorn-51208.exe (PID: 6388)
      • Unicorn-25978.exe (PID: 8788)
      • Unicorn-46234.exe (PID: 7416)
      • Unicorn-10736.exe (PID: 8808)
      • Unicorn-5640.exe (PID: 8728)
      • Unicorn-51208.exe (PID: 6456)
      • Unicorn-40835.exe (PID: 8824)
      • Unicorn-53261.exe (PID: 7464)
      • Unicorn-18281.exe (PID: 8800)
      • Unicorn-32998.exe (PID: 8776)
      • Unicorn-20239.exe (PID: 8904)
      • Unicorn-58365.exe (PID: 8920)
      • Unicorn-44120.exe (PID: 8996)
      • Unicorn-7667.exe (PID: 9036)
      • Unicorn-27398.exe (PID: 9052)
      • Unicorn-15972.exe (PID: 8980)
      • Unicorn-47491.exe (PID: 9084)
      • Unicorn-21254.exe (PID: 9132)
      • Unicorn-41361.exe (PID: 9068)
      • Unicorn-27625.exe (PID: 9076)
      • Unicorn-55296.exe (PID: 9148)
      • Unicorn-55524.exe (PID: 9204)
      • Unicorn-46832.exe (PID: 9168)
      • Unicorn-47195.exe (PID: 9116)
      • Unicorn-41347.exe (PID: 9188)
      • Unicorn-9852.exe (PID: 9212)
      • Unicorn-8979.exe (PID: 9220)
      • Unicorn-55765.exe (PID: 8020)
      • Unicorn-43759.exe (PID: 9272)
      • Unicorn-14844.exe (PID: 9032)
      • Unicorn-14844.exe (PID: 6800)
      • Unicorn-12037.exe (PID: 9292)
      • Unicorn-48483.exe (PID: 9388)
      • Unicorn-8441.exe (PID: 9340)
      • Unicorn-10626.exe (PID: 9396)
      • Unicorn-2525.exe (PID: 9320)
      • Unicorn-25190.exe (PID: 9428)
      • Unicorn-30810.exe (PID: 9460)
      • Unicorn-64899.exe (PID: 9716)
      • Unicorn-58459.exe (PID: 9748)
      • Unicorn-24020.exe (PID: 8372)
      • Unicorn-56746.exe (PID: 8400)
      • Unicorn-44305.exe (PID: 8628)
      • Unicorn-49402.exe (PID: 9832)
      • Unicorn-43621.exe (PID: 8588)
      • Unicorn-36604.exe (PID: 9856)
    • Reads the computer name

      • 1 (52).exe (PID: 4208)
      • Unicorn-3586.exe (PID: 6872)
      • Unicorn-56719.exe (PID: 616)
      • Unicorn-27086.exe (PID: 2692)
      • Unicorn-46952.exe (PID: 6728)
      • Unicorn-37643.exe (PID: 6324)
      • Unicorn-3586.exe (PID: 6192)
      • Unicorn-23907.exe (PID: 7144)
      • Unicorn-36858.exe (PID: 6964)
      • Unicorn-16992.exe (PID: 3676)
      • Unicorn-6899.exe (PID: 1052)
      • Unicorn-22119.exe (PID: 1812)
      • Unicorn-16992.exe (PID: 4920)
      • Unicorn-62311.exe (PID: 1388)
      • Unicorn-25091.exe (PID: 6476)
      • Unicorn-38045.exe (PID: 1764)
      • Unicorn-52081.exe (PID: 5360)
      • Unicorn-51208.exe (PID: 6388)
      • Unicorn-52081.exe (PID: 1568)
      • Unicorn-8334.exe (PID: 5756)
      • Unicorn-8334.exe (PID: 6752)
      • Unicorn-37472.exe (PID: 5508)
      • Unicorn-64883.exe (PID: 2984)
      • Unicorn-48408.exe (PID: 5968)
      • Unicorn-20451.exe (PID: 6592)
      • Unicorn-51208.exe (PID: 6456)
      • Unicorn-57073.exe (PID: 4868)
      • Unicorn-28428.exe (PID: 2420)
      • Unicorn-8334.exe (PID: 4188)
      • Unicorn-58638.exe (PID: 7196)
      • Unicorn-12168.exe (PID: 7188)
      • Unicorn-35686.exe (PID: 7256)
      • Unicorn-3305.exe (PID: 7276)
      • Unicorn-15857.exe (PID: 7300)
      • Unicorn-43791.exe (PID: 7316)
      • Unicorn-56432.exe (PID: 7352)
      • Unicorn-62052.exe (PID: 7332)
      • Unicorn-27502.exe (PID: 7388)
      • Unicorn-4259.exe (PID: 7448)
      • Unicorn-52364.exe (PID: 7480)
      • Unicorn-22406.exe (PID: 7472)
      • Unicorn-9712.exe (PID: 7404)
      • Unicorn-55908.exe (PID: 7488)
      • Unicorn-27502.exe (PID: 7380)
      • Unicorn-7059.exe (PID: 7432)
      • Unicorn-52364.exe (PID: 7440)
      • Unicorn-52364.exe (PID: 7504)
      • Unicorn-22406.exe (PID: 7540)
      • Unicorn-55908.exe (PID: 7496)
      • Unicorn-22300.exe (PID: 7396)
      • Unicorn-46234.exe (PID: 7416)
      • Unicorn-37647.exe (PID: 7552)
      • Unicorn-32498.exe (PID: 7424)
      • Unicorn-12924.exe (PID: 7456)
      • Unicorn-53261.exe (PID: 7464)
      • Unicorn-52364.exe (PID: 7512)
      • Unicorn-28166.exe (PID: 7528)
      • Unicorn-60909.exe (PID: 7736)
      • Unicorn-3068.exe (PID: 7728)
      • Unicorn-44931.exe (PID: 7764)
      • Unicorn-38647.exe (PID: 7708)
      • Unicorn-53245.exe (PID: 7828)
      • Unicorn-55150.exe (PID: 7912)
      • Unicorn-37766.exe (PID: 7948)
      • Unicorn-28669.exe (PID: 7964)
      • Unicorn-31217.exe (PID: 7980)
      • Unicorn-55765.exe (PID: 8020)
      • Unicorn-20739.exe (PID: 7784)
      • Unicorn-52735.exe (PID: 7804)
      • Unicorn-23705.exe (PID: 7848)
      • Unicorn-17495.exe (PID: 7924)
      • Unicorn-40471.exe (PID: 8004)
      • Unicorn-1415.exe (PID: 8012)
      • Unicorn-54412.exe (PID: 8132)
      • Unicorn-35837.exe (PID: 8156)
      • Unicorn-48006.exe (PID: 8164)
      • Unicorn-12427.exe (PID: 680)
      • Unicorn-782.exe (PID: 668)
      • Unicorn-15499.exe (PID: 1132)
      • Unicorn-21591.exe (PID: 904)
      • Unicorn-55027.exe (PID: 8228)
      • Unicorn-782.exe (PID: 4200)
      • Unicorn-59246.exe (PID: 8220)
      • Unicorn-59246.exe (PID: 2420)
      • Unicorn-32765.exe (PID: 6736)
      • Unicorn-59246.exe (PID: 6644)
      • Unicorn-3330.exe (PID: 1300)
      • Unicorn-41457.exe (PID: 7156)
      • Unicorn-47482.exe (PID: 2240)
      • Unicorn-59246.exe (PID: 2644)
      • Unicorn-24020.exe (PID: 8440)
      • Unicorn-24020.exe (PID: 8348)
      • Unicorn-24020.exe (PID: 8372)
      • Unicorn-3564.exe (PID: 8708)
      • Unicorn-24020.exe (PID: 8364)
      • Unicorn-59246.exe (PID: 5084)
      • Unicorn-21591.exe (PID: 8248)
      • Unicorn-18420.exe (PID: 8388)
      • Unicorn-15499.exe (PID: 7244)
      • Unicorn-24020.exe (PID: 8356)
      • Unicorn-3330.exe (PID: 3896)
      • Unicorn-56746.exe (PID: 8400)
      • Unicorn-34955.exe (PID: 8468)
      • Unicorn-59246.exe (PID: 6564)
      • Unicorn-65411.exe (PID: 8416)
      • Unicorn-17418.exe (PID: 8520)
      • Unicorn-37756.exe (PID: 8432)
      • Unicorn-45811.exe (PID: 8532)
      • Unicorn-25978.exe (PID: 8788)
      • Unicorn-43621.exe (PID: 8588)
      • Unicorn-35486.exe (PID: 8380)
      • Unicorn-43934.exe (PID: 8768)
      • Unicorn-5640.exe (PID: 8728)
      • Unicorn-18281.exe (PID: 8800)
      • Unicorn-40835.exe (PID: 8824)
      • Unicorn-40814.exe (PID: 8620)
      • Unicorn-24544.exe (PID: 8408)
      • Unicorn-53388.exe (PID: 8720)
      • Unicorn-38266.exe (PID: 8576)
      • Unicorn-44305.exe (PID: 8628)
      • Unicorn-65411.exe (PID: 8424)
      • Unicorn-20239.exe (PID: 8904)
      • Unicorn-32998.exe (PID: 8776)
      • Unicorn-58365.exe (PID: 8920)
      • Unicorn-10736.exe (PID: 8808)
      • Unicorn-15972.exe (PID: 8980)
      • Unicorn-44120.exe (PID: 8996)
      • Unicorn-7667.exe (PID: 9036)
      • Unicorn-41361.exe (PID: 9068)
      • Unicorn-27625.exe (PID: 9076)
      • Unicorn-27398.exe (PID: 9052)
      • Unicorn-47491.exe (PID: 9084)
      • Unicorn-21254.exe (PID: 9132)
      • Unicorn-47195.exe (PID: 9116)
      • Unicorn-55296.exe (PID: 9148)
      • Unicorn-9852.exe (PID: 9212)
      • Unicorn-55524.exe (PID: 9204)
      • Unicorn-9852.exe (PID: 7012)
      • Unicorn-46832.exe (PID: 9168)
      • Unicorn-41347.exe (PID: 9188)
      • Unicorn-14844.exe (PID: 6800)
      • Unicorn-14844.exe (PID: 9032)
      • Unicorn-8979.exe (PID: 9220)
      • Unicorn-43759.exe (PID: 9272)
      • Unicorn-2525.exe (PID: 9320)
      • Unicorn-12037.exe (PID: 9292)
      • Unicorn-8441.exe (PID: 9340)
      • Unicorn-48483.exe (PID: 9388)
      • Unicorn-16505.exe (PID: 9372)
      • Unicorn-10626.exe (PID: 9396)
      • Unicorn-28617.exe (PID: 9364)
      • Unicorn-25190.exe (PID: 9428)
      • Unicorn-30810.exe (PID: 9460)
      • Unicorn-49402.exe (PID: 9832)
      • Unicorn-36604.exe (PID: 9856)
      • Unicorn-53248.exe (PID: 9888)
      • Unicorn-47332.exe (PID: 9932)
      • Unicorn-64899.exe (PID: 9716)
      • Unicorn-58459.exe (PID: 9748)
      • Unicorn-2431.exe (PID: 9984)
      • Unicorn-50179.exe (PID: 10004)
      • Unicorn-50176.exe (PID: 9924)
      • Unicorn-15085.exe (PID: 9944)
      • Unicorn-64386.exe (PID: 10020)
      • Unicorn-30330.exe (PID: 10124)
      • Unicorn-47121.exe (PID: 10060)
      • Unicorn-56204.exe (PID: 10144)
      • Unicorn-33402.exe (PID: 10180)
    • The sample compiled with chinese language support

      • 1 (52).exe (PID: 4208)
    • Checks supported languages

      • 1 (52).exe (PID: 4208)
      • Unicorn-56719.exe (PID: 616)
      • Unicorn-27086.exe (PID: 2692)
      • Unicorn-23907.exe (PID: 7144)
      • Unicorn-46952.exe (PID: 6728)
      • Unicorn-3586.exe (PID: 6192)
      • Unicorn-3586.exe (PID: 6872)
      • Unicorn-37643.exe (PID: 6324)
      • Unicorn-38045.exe (PID: 1764)
      • Unicorn-6899.exe (PID: 1052)
      • Unicorn-25091.exe (PID: 6476)
      • Unicorn-36858.exe (PID: 6964)
      • Unicorn-62311.exe (PID: 1388)
      • Unicorn-28428.exe (PID: 2420)
      • Unicorn-22119.exe (PID: 1812)
      • Unicorn-16992.exe (PID: 3676)
      • Unicorn-16992.exe (PID: 4920)
      • Unicorn-52081.exe (PID: 5360)
      • Unicorn-8334.exe (PID: 5756)
      • Unicorn-20451.exe (PID: 6592)
      • Unicorn-8334.exe (PID: 4188)
      • Unicorn-8334.exe (PID: 6752)
      • Unicorn-64883.exe (PID: 2984)
      • Unicorn-37472.exe (PID: 5508)
      • Unicorn-57073.exe (PID: 4868)
      • Unicorn-51208.exe (PID: 6388)
      • Unicorn-48408.exe (PID: 5968)
      • Unicorn-52081.exe (PID: 1568)
      • Unicorn-51208.exe (PID: 6456)
      • Unicorn-12168.exe (PID: 7188)
      • Unicorn-58638.exe (PID: 7196)
      • Unicorn-35686.exe (PID: 7256)
      • Unicorn-3305.exe (PID: 7276)
      • Unicorn-15857.exe (PID: 7300)
      • Unicorn-43791.exe (PID: 7316)
      • Unicorn-62052.exe (PID: 7332)
      • Unicorn-56432.exe (PID: 7352)
      • Unicorn-27502.exe (PID: 7380)
      • Unicorn-27502.exe (PID: 7388)
      • Unicorn-52364.exe (PID: 7504)
      • Unicorn-53261.exe (PID: 7464)
      • Unicorn-12924.exe (PID: 7456)
      • Unicorn-9712.exe (PID: 7404)
      • Unicorn-46234.exe (PID: 7416)
      • Unicorn-4259.exe (PID: 7448)
      • Unicorn-55908.exe (PID: 7488)
      • Unicorn-22406.exe (PID: 7472)
      • Unicorn-52364.exe (PID: 7480)
      • Unicorn-52364.exe (PID: 7440)
      • Unicorn-55908.exe (PID: 7496)
      • Unicorn-52364.exe (PID: 7512)
      • Unicorn-32498.exe (PID: 7424)
      • Unicorn-22406.exe (PID: 7540)
      • Unicorn-37647.exe (PID: 7552)
      • Unicorn-28166.exe (PID: 7528)
      • Unicorn-7059.exe (PID: 7432)
      • Unicorn-38647.exe (PID: 7708)
      • Unicorn-3068.exe (PID: 7728)
      • Unicorn-60909.exe (PID: 7736)
      • Unicorn-22300.exe (PID: 7396)
      • Unicorn-20739.exe (PID: 7784)
      • Unicorn-52735.exe (PID: 7804)
      • Unicorn-53245.exe (PID: 7828)
      • Unicorn-23705.exe (PID: 7848)
      • Unicorn-44931.exe (PID: 7764)
      • Unicorn-55150.exe (PID: 7912)
      • Unicorn-17495.exe (PID: 7924)
      • Unicorn-37766.exe (PID: 7948)
      • Unicorn-28669.exe (PID: 7964)
      • Unicorn-31217.exe (PID: 7980)
      • Unicorn-40471.exe (PID: 8004)
      • Unicorn-1415.exe (PID: 8012)
      • Unicorn-55765.exe (PID: 8020)
      • Unicorn-54412.exe (PID: 8132)
      • Unicorn-35837.exe (PID: 8156)
      • Unicorn-48006.exe (PID: 8164)
      • Unicorn-12427.exe (PID: 680)
      • Unicorn-782.exe (PID: 4200)
      • Unicorn-47482.exe (PID: 2240)
      • Unicorn-21591.exe (PID: 904)
      • Unicorn-15499.exe (PID: 1132)
      • Unicorn-3330.exe (PID: 1300)
      • Unicorn-59246.exe (PID: 2420)
      • Unicorn-59246.exe (PID: 6644)
      • Unicorn-3330.exe (PID: 3896)
      • Unicorn-782.exe (PID: 668)
      • Unicorn-59246.exe (PID: 2644)
      • Unicorn-21591.exe (PID: 8248)
      • Unicorn-59246.exe (PID: 8220)
      • Unicorn-15499.exe (PID: 7244)
      • Unicorn-32765.exe (PID: 6736)
      • Unicorn-35486.exe (PID: 8380)
      • Unicorn-24020.exe (PID: 8348)
      • Unicorn-24020.exe (PID: 8372)
      • Unicorn-55027.exe (PID: 8228)
      • Unicorn-37756.exe (PID: 8432)
      • Unicorn-24020.exe (PID: 8440)
      • Unicorn-59246.exe (PID: 6564)
      • Unicorn-59246.exe (PID: 5084)
      • Unicorn-41457.exe (PID: 7156)
      • Unicorn-34955.exe (PID: 8468)
      • Unicorn-56746.exe (PID: 8400)
      • Unicorn-65411.exe (PID: 8416)
      • Unicorn-17418.exe (PID: 8520)
      • Unicorn-24544.exe (PID: 8408)
      • Unicorn-24020.exe (PID: 8364)
      • Unicorn-65411.exe (PID: 8424)
      • Unicorn-24020.exe (PID: 8356)
      • Unicorn-45811.exe (PID: 8532)
      • Unicorn-40814.exe (PID: 8620)
      • Unicorn-44305.exe (PID: 8628)
      • Unicorn-38266.exe (PID: 8576)
      • Unicorn-18420.exe (PID: 8388)
      • Unicorn-43621.exe (PID: 8588)
      • Unicorn-3564.exe (PID: 8708)
      • Unicorn-53388.exe (PID: 8720)
      • Unicorn-5640.exe (PID: 8728)
      • Unicorn-32998.exe (PID: 8776)
      • Unicorn-43934.exe (PID: 8768)
      • Unicorn-25978.exe (PID: 8788)
      • Unicorn-10736.exe (PID: 8808)
      • Unicorn-18281.exe (PID: 8800)
      • Unicorn-40835.exe (PID: 8824)
      • Unicorn-20239.exe (PID: 8904)
      • Unicorn-15972.exe (PID: 8980)
      • Unicorn-7667.exe (PID: 9036)
      • Unicorn-27398.exe (PID: 9052)
      • Unicorn-41361.exe (PID: 9068)
      • Unicorn-27625.exe (PID: 9076)
      • Unicorn-47491.exe (PID: 9084)
      • Unicorn-47195.exe (PID: 9116)
      • Unicorn-58365.exe (PID: 8920)
      • Unicorn-44120.exe (PID: 8996)
      • Unicorn-21254.exe (PID: 9132)
      • Unicorn-55296.exe (PID: 9148)
      • Unicorn-46832.exe (PID: 9168)
      • Unicorn-41347.exe (PID: 9188)
      • Unicorn-55524.exe (PID: 9204)
      • Unicorn-9852.exe (PID: 9212)
      • Unicorn-9852.exe (PID: 7012)
      • Unicorn-43759.exe (PID: 9272)
      • Unicorn-12037.exe (PID: 9292)
      • Unicorn-2525.exe (PID: 9320)
      • Unicorn-28617.exe (PID: 9364)
      • Unicorn-14844.exe (PID: 9032)
      • Unicorn-14844.exe (PID: 6800)
      • Unicorn-8979.exe (PID: 9220)
      • Unicorn-8441.exe (PID: 9340)
      • Unicorn-16505.exe (PID: 9372)
      • Unicorn-48483.exe (PID: 9388)
      • Unicorn-10626.exe (PID: 9396)
      • Unicorn-25190.exe (PID: 9428)
      • Unicorn-64899.exe (PID: 9716)
      • Unicorn-30810.exe (PID: 9460)
      • Unicorn-58459.exe (PID: 9748)
      • Unicorn-49402.exe (PID: 9832)
      • Unicorn-36604.exe (PID: 9856)
      • Unicorn-53248.exe (PID: 9888)
      • Unicorn-50176.exe (PID: 9924)
      • Unicorn-47332.exe (PID: 9932)
      • Unicorn-15085.exe (PID: 9944)
      • Unicorn-2431.exe (PID: 9984)
      • Unicorn-50179.exe (PID: 10004)
      • Unicorn-47121.exe (PID: 10060)
      • Unicorn-56204.exe (PID: 10144)
      • Unicorn-30330.exe (PID: 10124)
      • Unicorn-64386.exe (PID: 10020)
      • Unicorn-13064.exe (PID: 10172)
      • Unicorn-33402.exe (PID: 10180)
      • Unicorn-33402.exe (PID: 10188)
      • Unicorn-39410.exe (PID: 10216)
      • Unicorn-55680.exe (PID: 8820)
      • Unicorn-58752.exe (PID: 4436)
      • Unicorn-58752.exe (PID: 5216)
      • Unicorn-53132.exe (PID: 6184)
      • Unicorn-21638.exe (PID: 4152)
      • Unicorn-27782.exe (PID: 9016)
      • Unicorn-7916.exe (PID: 8756)
      • Unicorn-24050.exe (PID: 10276)
      • Unicorn-31747.exe (PID: 10256)
      • Unicorn-31747.exe (PID: 10252)
      • Unicorn-34295.exe (PID: 10308)
      • Unicorn-46448.exe (PID: 10340)
      • Unicorn-21114.exe (PID: 10356)
      • Unicorn-34819.exe (PID: 10364)
      • Unicorn-17501.exe (PID: 10416)
      • Unicorn-3324.exe (PID: 10400)
      • Unicorn-37772.exe (PID: 10460)
      • Unicorn-8285.exe (PID: 10504)
      • Unicorn-28151.exe (PID: 10524)
      • Unicorn-60169.exe (PID: 10544)
      • Unicorn-28151.exe (PID: 10516)
      • Unicorn-57569.exe (PID: 10440)
      • Unicorn-51949.exe (PID: 10480)
      • Unicorn-60641.exe (PID: 10576)
      • Unicorn-14969.exe (PID: 10584)
      • Unicorn-40844.exe (PID: 10600)
      • Unicorn-22007.exe (PID: 10660)
      • Unicorn-133.exe (PID: 10652)
      • Unicorn-133.exe (PID: 10644)
      • Unicorn-2665.exe (PID: 10716)
      • Unicorn-16911.exe (PID: 10744)
      • Unicorn-52977.exe (PID: 10760)
      • Unicorn-59016.exe (PID: 10784)
      • Unicorn-47895.exe (PID: 10688)
      • Unicorn-34176.exe (PID: 10860)
      • Unicorn-59016.exe (PID: 10776)
      • Unicorn-65146.exe (PID: 10800)
      • Unicorn-56468.exe (PID: 10888)
      • Unicorn-24695.exe (PID: 10916)
      • Unicorn-4636.exe (PID: 10896)
      • Unicorn-24960.exe (PID: 10928)
      • Unicorn-34176.exe (PID: 10852)
      • Unicorn-65146.exe (PID: 10792)
      • Unicorn-28032.exe (PID: 10972)
      • Unicorn-9977.exe (PID: 11000)
      • Unicorn-55914.exe (PID: 10996)
      • Unicorn-48054.exe (PID: 11032)
      • Unicorn-56454.exe (PID: 11016)
      • Unicorn-45454.exe (PID: 11056)
      • Unicorn-42371.exe (PID: 11108)
      • Unicorn-8339.exe (PID: 11124)
      • Unicorn-16477.exe (PID: 11144)
      • Unicorn-2824.exe (PID: 11160)
      • Unicorn-19549.exe (PID: 11184)
      • Unicorn-12790.exe (PID: 11048)
      • Unicorn-33795.exe (PID: 11096)
      • Unicorn-5015.exe (PID: 11208)
      • Unicorn-13405.exe (PID: 11276)
      • Unicorn-64408.exe (PID: 11320)
      • Unicorn-39296.exe (PID: 11284)
      • Unicorn-43407.exe (PID: 11312)
      • Unicorn-1641.exe (PID: 11344)
      • Unicorn-12576.exe (PID: 11332)
      • Unicorn-21520.exe (PID: 11232)
      • Unicorn-7785.exe (PID: 11224)
      • Unicorn-16358.exe (PID: 11496)
      • Unicorn-43547.exe (PID: 11572)
      • Unicorn-38772.exe (PID: 11548)
      • Unicorn-58516.exe (PID: 11556)
      • Unicorn-44781.exe (PID: 11564)
      • Unicorn-21507.exe (PID: 11392)
      • Unicorn-55284.exe (PID: 11360)
      • Unicorn-38755.exe (PID: 11448)
      • Unicorn-45324.exe (PID: 11476)
      • Unicorn-43785.exe (PID: 11644)
      • Unicorn-3598.exe (PID: 11612)
      • Unicorn-23919.exe (PID: 11636)
      • Unicorn-40203.exe (PID: 11668)
      • Unicorn-32492.exe (PID: 11748)
      • Unicorn-2969.exe (PID: 11776)
      • Unicorn-46214.exe (PID: 11804)
      • Unicorn-17411.exe (PID: 11888)
      • Unicorn-48905.exe (PID: 11876)
      • Unicorn-617.exe (PID: 11920)
      • Unicorn-6027.exe (PID: 11852)
      • Unicorn-35200.exe (PID: 11868)
      • Unicorn-32128.exe (PID: 11972)
      • Unicorn-36653.exe (PID: 11948)
      • Unicorn-633.exe (PID: 11980)
      • Unicorn-36352.exe (PID: 12016)
      • Unicorn-50824.exe (PID: 12032)
      • Unicorn-11266.exe (PID: 11956)
      • Unicorn-19299.exe (PID: 12052)
      • Unicorn-39165.exe (PID: 12060)
      • Unicorn-39165.exe (PID: 12076)
      • Unicorn-55148.exe (PID: 12104)
      • Unicorn-54406.exe (PID: 12148)
      • Unicorn-65511.exe (PID: 12164)
      • Unicorn-37088.exe (PID: 12040)
      • Unicorn-36617.exe (PID: 12024)
      • Unicorn-46913.exe (PID: 12232)
      • Unicorn-26877.exe (PID: 12248)
      • Unicorn-48262.exe (PID: 12212)
      • Unicorn-61457.exe (PID: 12180)
      • Unicorn-47722.exe (PID: 12188)
      • Unicorn-61443.exe (PID: 4756)
      • Unicorn-10083.exe (PID: 12292)
      • Unicorn-58014.exe (PID: 12388)
      • Unicorn-8058.exe (PID: 5008)
      • Unicorn-14323.exe (PID: 12360)
      • Unicorn-59367.exe (PID: 12280)
      • Unicorn-39701.exe (PID: 12376)
      • Unicorn-45573.exe (PID: 12416)
      • Unicorn-17661.exe (PID: 12408)
      • Unicorn-46621.exe (PID: 12272)
      • Unicorn-44351.exe (PID: 12264)
      • Unicorn-43011.exe (PID: 12440)
      • Unicorn-60761.exe (PID: 12456)
      • Unicorn-6527.exe (PID: 12488)
      • Unicorn-50679.exe (PID: 12512)
      • Unicorn-12012.exe (PID: 12532)
      • Unicorn-43656.exe (PID: 12472)
      • Unicorn-45059.exe (PID: 12552)
      • Unicorn-45059.exe (PID: 12568)
      • Unicorn-13429.exe (PID: 12668)
      • Unicorn-24364.exe (PID: 12676)
      • Unicorn-13429.exe (PID: 12660)
      • Unicorn-27164.exe (PID: 12684)
      • Unicorn-58121.exe (PID: 12756)
      • Unicorn-61371.exe (PID: 12772)
      • Unicorn-18462.exe (PID: 12792)
      • Unicorn-45059.exe (PID: 12560)
      • Unicorn-51467.exe (PID: 12736)
      • Unicorn-31888.exe (PID: 13236)
      • Unicorn-3985.exe (PID: 13280)
      • Unicorn-58023.exe (PID: 12348)
      • Unicorn-57727.exe (PID: 2332)
      • Unicorn-6788.exe (PID: 11800)
      • Unicorn-8956.exe (PID: 11796)
      • Unicorn-1168.exe (PID: 11736)
      • Unicorn-27816.exe (PID: 12812)
      • Unicorn-47749.exe (PID: 12880)
      • Unicorn-17838.exe (PID: 13332)
      • Unicorn-46088.exe (PID: 7208)
      • Unicorn-52232.exe (PID: 1228)
      • Unicorn-53540.exe (PID: 12932)
      • Unicorn-38802.exe (PID: 6852)
      • Unicorn-62616.exe (PID: 2416)
      • Unicorn-24458.exe (PID: 5132)
      • Unicorn-13057.exe (PID: 4024)
      • Unicorn-13057.exe (PID: 13316)
      • Unicorn-30602.exe (PID: 2800)
      • Unicorn-6295.exe (PID: 5728)
      • Unicorn-51083.exe (PID: 13380)
      • Unicorn-51083.exe (PID: 13388)
      • Unicorn-14980.exe (PID: 13488)
      • Unicorn-18576.exe (PID: 13444)
      • Unicorn-18576.exe (PID: 13452)
      • Unicorn-50559.exe (PID: 13460)
      • Unicorn-1829.exe (PID: 13516)
      • Unicorn-53631.exe (PID: 13524)
      • Unicorn-53631.exe (PID: 13532)
      • Unicorn-6485.exe (PID: 13540)
      • Unicorn-13057.exe (PID: 13324)
      • Unicorn-4901.exe (PID: 13340)
      • Unicorn-44415.exe (PID: 13616)
      • Unicorn-44415.exe (PID: 13624)
      • Unicorn-24845.exe (PID: 13724)
      • Unicorn-27393.exe (PID: 13796)
      • Unicorn-38581.exe (PID: 13716)
      • Unicorn-54804.exe (PID: 13772)
      • Unicorn-25643.exe (PID: 13732)
      • Unicorn-54804.exe (PID: 13780)
      • Unicorn-41129.exe (PID: 13788)
      • Unicorn-6288.exe (PID: 13812)
      • Unicorn-2692.exe (PID: 13844)
      • Unicorn-9146.exe (PID: 13556)
      • Unicorn-57352.exe (PID: 13604)
      • Unicorn-52530.exe (PID: 13676)
      • Unicorn-8098.exe (PID: 13656)
      • Unicorn-5764.exe (PID: 13900)
      • Unicorn-25630.exe (PID: 13916)
      • Unicorn-40850.exe (PID: 13944)
      • Unicorn-5764.exe (PID: 13908)
      • Unicorn-34984.exe (PID: 13952)
      • Unicorn-62085.exe (PID: 14008)
      • Unicorn-46107.exe (PID: 14044)
      • Unicorn-26506.exe (PID: 14032)
      • Unicorn-48136.exe (PID: 14076)
      • Unicorn-48136.exe (PID: 14068)
      • Unicorn-5764.exe (PID: 13892)
      • Unicorn-2168.exe (PID: 14128)
      • Unicorn-10004.exe (PID: 14164)
      • Unicorn-11670.exe (PID: 14260)
      • Unicorn-44235.exe (PID: 14188)
      • Unicorn-43711.exe (PID: 14252)
      • Unicorn-33299.exe (PID: 14180)
      • Unicorn-23434.exe (PID: 14228)
      • Unicorn-39731.exe (PID: 14288)
      • Unicorn-27155.exe (PID: 14304)
      • Unicorn-31536.exe (PID: 14284)
      • Unicorn-46756.exe (PID: 14312)
      • Unicorn-35847.exe (PID: 14352)
      • Unicorn-2168.exe (PID: 14136)
      • Unicorn-10004.exe (PID: 14160)
      • Unicorn-46511.exe (PID: 14244)
      • Unicorn-34376.exe (PID: 14364)
      • Unicorn-55417.exe (PID: 14432)
      • Unicorn-57996.exe (PID: 14396)
      • Unicorn-1067.exe (PID: 14388)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable Microsoft Visual Basic 6 (90.6)
.exe | Win32 Executable (generic) (4.9)
.exe | Generic Win/DOS Executable (2.2)
.exe | DOS Executable Generic (2.2)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:01:19 13:34:56+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 299008
UninitializedDataSize: -
EntryPoint: 0x13d4
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
InternalName: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
521
Monitored processes
390
Malicious processes
63
Suspicious processes
75

Behavior graph

Click at the process to see the details
start 1 (52).exe unicorn-56719.exe sppextcomobj.exe no specs slui.exe no specs unicorn-27086.exe unicorn-46952.exe unicorn-3586.exe unicorn-3586.exe unicorn-37643.exe unicorn-23907.exe unicorn-6899.exe unicorn-25091.exe unicorn-36858.exe unicorn-38045.exe unicorn-22119.exe unicorn-16992.exe unicorn-16992.exe unicorn-62311.exe unicorn-28428.exe no specs unicorn-52081.exe unicorn-52081.exe unicorn-8334.exe unicorn-8334.exe unicorn-8334.exe unicorn-20451.exe unicorn-64883.exe unicorn-48408.exe unicorn-57073.exe unicorn-37472.exe unicorn-51208.exe unicorn-51208.exe unicorn-12168.exe unicorn-58638.exe unicorn-35686.exe unicorn-3305.exe unicorn-15857.exe unicorn-43791.exe unicorn-62052.exe unicorn-56432.exe unicorn-27502.exe unicorn-27502.exe unicorn-22300.exe unicorn-9712.exe unicorn-46234.exe unicorn-32498.exe unicorn-7059.exe unicorn-52364.exe unicorn-4259.exe unicorn-12924.exe unicorn-53261.exe unicorn-22406.exe unicorn-52364.exe unicorn-55908.exe unicorn-55908.exe unicorn-52364.exe unicorn-52364.exe unicorn-28166.exe unicorn-22406.exe unicorn-37647.exe unicorn-38647.exe unicorn-3068.exe unicorn-60909.exe unicorn-44931.exe unicorn-20739.exe unicorn-52735.exe unicorn-53245.exe unicorn-23705.exe unicorn-55150.exe unicorn-17495.exe unicorn-37766.exe unicorn-28669.exe unicorn-31217.exe unicorn-40471.exe unicorn-1415.exe unicorn-55765.exe unicorn-54412.exe unicorn-35837.exe unicorn-48006.exe unicorn-12427.exe unicorn-782.exe unicorn-782.exe unicorn-3330.exe no specs unicorn-3330.exe unicorn-15499.exe unicorn-15499.exe unicorn-21591.exe unicorn-47482.exe unicorn-59246.exe unicorn-59246.exe unicorn-59246.exe unicorn-59246.exe unicorn-41457.exe unicorn-59246.exe unicorn-32765.exe unicorn-59246.exe unicorn-55027.exe unicorn-21591.exe unicorn-24020.exe unicorn-24020.exe unicorn-24020.exe unicorn-24020.exe unicorn-35486.exe unicorn-18420.exe unicorn-56746.exe unicorn-24544.exe unicorn-65411.exe unicorn-65411.exe unicorn-37756.exe unicorn-24020.exe unicorn-34955.exe unicorn-17418.exe unicorn-45811.exe unicorn-38266.exe unicorn-43621.exe unicorn-40814.exe unicorn-44305.exe unicorn-3564.exe unicorn-53388.exe unicorn-5640.exe unicorn-43934.exe unicorn-32998.exe unicorn-25978.exe unicorn-18281.exe unicorn-10736.exe unicorn-40835.exe unicorn-20239.exe unicorn-58365.exe unicorn-15972.exe unicorn-44120.exe unicorn-7667.exe unicorn-27398.exe unicorn-41361.exe unicorn-27625.exe unicorn-47491.exe unicorn-47195.exe unicorn-21254.exe unicorn-55296.exe unicorn-46832.exe unicorn-41347.exe unicorn-55524.exe unicorn-9852.exe unicorn-9852.exe unicorn-14844.exe unicorn-14844.exe unicorn-8979.exe unicorn-43759.exe unicorn-12037.exe unicorn-2525.exe unicorn-8441.exe unicorn-28617.exe unicorn-16505.exe unicorn-48483.exe unicorn-10626.exe unicorn-25190.exe unicorn-30810.exe unicorn-64899.exe unicorn-58459.exe unicorn-49402.exe unicorn-36604.exe unicorn-53248.exe unicorn-50176.exe unicorn-47332.exe unicorn-15085.exe unicorn-2431.exe unicorn-50179.exe unicorn-64386.exe unicorn-47121.exe unicorn-30330.exe unicorn-56204.exe unicorn-13064.exe unicorn-33402.exe unicorn-33402.exe unicorn-39410.exe unicorn-7916.exe unicorn-27782.exe unicorn-55680.exe unicorn-58752.exe unicorn-58752.exe unicorn-53132.exe unicorn-21638.exe unicorn-31747.exe unicorn-31747.exe unicorn-24050.exe unicorn-34295.exe unicorn-46448.exe unicorn-21114.exe unicorn-34819.exe unicorn-3324.exe unicorn-17501.exe unicorn-57569.exe unicorn-37772.exe unicorn-51949.exe unicorn-8285.exe unicorn-28151.exe unicorn-28151.exe unicorn-60169.exe unicorn-60641.exe unicorn-14969.exe no specs unicorn-40844.exe unicorn-133.exe unicorn-133.exe unicorn-22007.exe unicorn-47895.exe unicorn-2665.exe unicorn-16911.exe unicorn-52977.exe unicorn-59016.exe unicorn-59016.exe unicorn-65146.exe unicorn-65146.exe unicorn-34176.exe unicorn-34176.exe unicorn-56468.exe unicorn-4636.exe unicorn-24695.exe unicorn-24960.exe unicorn-28032.exe unicorn-55914.exe unicorn-9977.exe unicorn-56454.exe unicorn-48054.exe unicorn-12790.exe unicorn-45454.exe unicorn-33795.exe unicorn-42371.exe unicorn-8339.exe unicorn-16477.exe unicorn-2824.exe unicorn-19549.exe unicorn-5015.exe unicorn-7785.exe unicorn-21520.exe unicorn-13405.exe unicorn-39296.exe unicorn-43407.exe unicorn-64408.exe unicorn-12576.exe unicorn-1641.exe unicorn-55284.exe unicorn-21507.exe unicorn-38755.exe unicorn-45324.exe unicorn-16358.exe unicorn-38772.exe unicorn-58516.exe unicorn-44781.exe unicorn-43547.exe unicorn-3598.exe unicorn-23919.exe unicorn-43785.exe unicorn-40203.exe unicorn-32492.exe unicorn-2969.exe unicorn-46214.exe unicorn-6027.exe unicorn-35200.exe unicorn-48905.exe unicorn-17411.exe unicorn-617.exe unicorn-36653.exe unicorn-11266.exe unicorn-32128.exe unicorn-633.exe unicorn-36352.exe unicorn-36617.exe unicorn-50824.exe unicorn-37088.exe unicorn-19299.exe unicorn-39165.exe unicorn-39165.exe unicorn-55148.exe unicorn-54406.exe unicorn-65511.exe unicorn-61457.exe no specs unicorn-47722.exe no specs unicorn-48262.exe unicorn-46913.exe no specs unicorn-26877.exe no specs unicorn-44351.exe unicorn-46621.exe unicorn-59367.exe no specs unicorn-61443.exe no specs unicorn-8058.exe unicorn-10083.exe no specs unicorn-63856.exe no specs unicorn-14323.exe no specs unicorn-39701.exe no specs unicorn-58014.exe no specs unicorn-17661.exe no specs unicorn-45573.exe no specs unicorn-43011.exe no specs unicorn-60761.exe no specs unicorn-43656.exe no specs unicorn-6527.exe no specs unicorn-50679.exe no specs unicorn-12012.exe no specs unicorn-45059.exe no specs unicorn-45059.exe no specs unicorn-45059.exe no specs unicorn-13429.exe no specs unicorn-13429.exe no specs unicorn-24364.exe no specs unicorn-27164.exe no specs unicorn-51467.exe no specs unicorn-58121.exe no specs unicorn-61371.exe no specs unicorn-18462.exe no specs unicorn-27816.exe no specs unicorn-47749.exe no specs unicorn-58412.exe no specs unicorn-31888.exe no specs unicorn-3985.exe no specs unicorn-58023.exe no specs unicorn-57727.exe no specs unicorn-8956.exe no specs unicorn-6788.exe no specs unicorn-1168.exe no specs unicorn-30602.exe no specs unicorn-52232.exe no specs unicorn-6295.exe no specs unicorn-53540.exe no specs unicorn-38802.exe no specs unicorn-62616.exe no specs unicorn-24458.exe no specs unicorn-46088.exe no specs unicorn-13057.exe no specs unicorn-13057.exe no specs unicorn-13057.exe no specs unicorn-17838.exe no specs unicorn-4901.exe no specs unicorn-51083.exe no specs unicorn-51083.exe no specs unicorn-18576.exe no specs unicorn-18576.exe no specs unicorn-50559.exe no specs unicorn-14980.exe no specs unicorn-1829.exe no specs unicorn-53631.exe no specs unicorn-53631.exe no specs unicorn-6485.exe no specs unicorn-9146.exe no specs unicorn-57352.exe no specs unicorn-44415.exe no specs unicorn-44415.exe no specs unicorn-8098.exe no specs unicorn-52530.exe no specs unicorn-38581.exe no specs unicorn-24845.exe no specs unicorn-25643.exe no specs unicorn-54804.exe no specs unicorn-54804.exe no specs unicorn-41129.exe no specs unicorn-27393.exe no specs unicorn-6288.exe no specs unicorn-2692.exe no specs unicorn-5764.exe no specs unicorn-5764.exe no specs unicorn-5764.exe no specs unicorn-25630.exe no specs unicorn-40850.exe no specs unicorn-34984.exe no specs unicorn-62085.exe no specs unicorn-26506.exe no specs unicorn-46107.exe no specs unicorn-48136.exe no specs unicorn-48136.exe no specs unicorn-2168.exe no specs unicorn-2168.exe no specs unicorn-10004.exe no specs unicorn-10004.exe no specs unicorn-33299.exe no specs unicorn-44235.exe no specs unicorn-23434.exe no specs unicorn-46511.exe no specs unicorn-43711.exe no specs unicorn-11670.exe no specs unicorn-31536.exe no specs unicorn-39731.exe no specs unicorn-27155.exe no specs unicorn-46756.exe no specs unicorn-35847.exe no specs unicorn-34376.exe no specs unicorn-1067.exe no specs unicorn-57996.exe no specs unicorn-55417.exe no specs unicorn-21809.exe no specs unicorn-24103.exe no specs unicorn-36632.exe no specs unicorn-45987.exe no specs unicorn-51852.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
616C:\Users\admin\AppData\Local\Temp\Unicorn-56719.exeC:\Users\admin\AppData\Local\Temp\Unicorn-56719.exe
1 (52).exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-56719.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
668C:\Users\admin\AppData\Local\Temp\Unicorn-782.exeC:\Users\admin\AppData\Local\Temp\Unicorn-782.exe
Unicorn-4259.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-782.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
680C:\Users\admin\AppData\Local\Temp\Unicorn-12427.exeC:\Users\admin\AppData\Local\Temp\Unicorn-12427.exe
Unicorn-9712.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-12427.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
904C:\Users\admin\AppData\Local\Temp\Unicorn-21591.exeC:\Users\admin\AppData\Local\Temp\Unicorn-21591.exe
Unicorn-8334.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-21591.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1052C:\Users\admin\AppData\Local\Temp\Unicorn-6899.exeC:\Users\admin\AppData\Local\Temp\Unicorn-6899.exe
Unicorn-37643.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-6899.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1132C:\Users\admin\AppData\Local\Temp\Unicorn-15499.exeC:\Users\admin\AppData\Local\Temp\Unicorn-15499.exe
Unicorn-55908.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-15499.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1228C:\Users\admin\AppData\Local\Temp\Unicorn-52232.exeC:\Users\admin\AppData\Local\Temp\Unicorn-52232.exeUnicorn-782.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-52232.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1300C:\Users\admin\AppData\Local\Temp\Unicorn-3330.exeC:\Users\admin\AppData\Local\Temp\Unicorn-3330.exeUnicorn-7059.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-3330.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1388C:\Users\admin\AppData\Local\Temp\Unicorn-62311.exeC:\Users\admin\AppData\Local\Temp\Unicorn-62311.exe
Unicorn-3586.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-62311.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1568C:\Users\admin\AppData\Local\Temp\Unicorn-52081.exeC:\Users\admin\AppData\Local\Temp\Unicorn-52081.exe
Unicorn-38045.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-52081.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
Total events
8 236
Read events
8 236
Write events
0
Delete events
0

Modification events

No data
Executable files
1 225
Suspicious files
0
Text files
0
Unknown types
0

Dropped files

PID
Process
Filename
Type
42081 (52).exeC:\Users\admin\AppData\Local\Temp\Unicorn-56719.exeexecutable
MD5:10F3FAB03A3ABE6FE45EFED427FE3C0D
SHA256:3FE6C729DCE497B6044A170F40265325B8D3836EDAF43F85783AADB77DE47AC3
6192Unicorn-3586.exeC:\Users\admin\AppData\Local\Temp\Unicorn-62311.exeexecutable
MD5:8243439E0F69FDEAC2CE6E706A8E1BB0
SHA256:E0EF6A84D5559955C12E1CBE6C80963285FABC2767827CFE090DE91E20B079DF
6728Unicorn-46952.exeC:\Users\admin\AppData\Local\Temp\Unicorn-3586.exeexecutable
MD5:C4AD42B6976BDFC97D5F1201EAE1BC66
SHA256:D84D004A59BF997DAD2749BB094EB192B368E40DB5EEE407D0E59209F4F2DC08
42081 (52).exeC:\Users\admin\AppData\Local\Temp\Unicorn-27086.exeexecutable
MD5:F878EED6914D52567C0D601E0D87AE09
SHA256:132950A9E6B40F1A87F82BF74554254E115CF1649AC97D190D06995C722310EB
616Unicorn-56719.exeC:\Users\admin\AppData\Local\Temp\Unicorn-23907.exeexecutable
MD5:728CA15C9EEE47BDA3C461C2D0C9F106
SHA256:9E94FFA526975CE3AB7B3703749A88EB31370F6EDC3C34FAF9121FDD453EC554
616Unicorn-56719.exeC:\Users\admin\AppData\Local\Temp\Unicorn-46952.exeexecutable
MD5:027BDC83EE1E02866067B7F03B88449B
SHA256:715430A6950117EE0DA37B3D9DA426CBE14BEAD8C317F1B6C414CA6F1622C1BD
6872Unicorn-3586.exeC:\Users\admin\AppData\Local\Temp\Unicorn-25091.exeexecutable
MD5:3986E41117F4D407E95E86DC8D62A21F
SHA256:299C3CCD4CE20136721C21DCC3233398ED79CF5608AB178683AD6588798E92B8
42081 (52).exeC:\Users\admin\AppData\Local\Temp\Unicorn-37643.exeexecutable
MD5:1974925A1AC8BEA2B5FB2F247DACF3B3
SHA256:C92131EBF88866224AE7EEB9F0D70AD5C45B4F2F991564AA3099685441A8D893
7144Unicorn-23907.exeC:\Users\admin\AppData\Local\Temp\Unicorn-36858.exeexecutable
MD5:CF57218C2505998B352D77A4F2C5E9C5
SHA256:F84C087B28063307DDECC8B58D1D9C5A78D5326C712BA9124C62589CD700CEDD
2692Unicorn-27086.exeC:\Users\admin\AppData\Local\Temp\Unicorn-16992.exeexecutable
MD5:5FE1BA4EE62D225D2C9D2ED1B5B0FCFC
SHA256:01CBB1ABF68209439811A3820045FC16B465EA6894A14DD8980F9DB56CF51E2C
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
22
DNS requests
15
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
GET
200
2.16.168.200:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
whitelisted
6712
backgroundTaskHost.exe
GET
200
2.23.77.188:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
whitelisted
6544
svchost.exe
GET
200
2.23.77.188:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
whitelisted
8700
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
whitelisted
8700
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
51.124.78.146:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
192.168.100.255:137
whitelisted
2.16.168.200:80
crl.microsoft.com
Akamai International B.V.
RU
whitelisted
4
System
192.168.100.255:138
whitelisted
6544
svchost.exe
20.190.160.2:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
2.23.77.188:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted
2104
svchost.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
3216
svchost.exe
40.115.3.253:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6712
backgroundTaskHost.exe
20.31.169.57:443
arc.msn.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6712
backgroundTaskHost.exe
2.23.77.188:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 51.124.78.146
  • 4.231.128.59
whitelisted
crl.microsoft.com
  • 2.16.168.200
  • 2.16.168.199
whitelisted
google.com
  • 142.250.186.174
whitelisted
login.live.com
  • 20.190.160.2
  • 20.190.160.3
  • 40.126.32.74
  • 20.190.160.64
  • 20.190.160.5
  • 20.190.160.132
  • 40.126.32.133
  • 20.190.160.22
whitelisted
ocsp.digicert.com
  • 2.23.77.188
whitelisted
client.wns.windows.com
  • 40.115.3.253
whitelisted
arc.msn.com
  • 20.31.169.57
whitelisted
slscr.update.microsoft.com
  • 4.175.87.197
whitelisted
www.microsoft.com
  • 184.30.21.171
whitelisted
fe3cr.delivery.mp.microsoft.com
  • 13.95.31.18
whitelisted

Threats

No threats detected
No debug info