| File name: | 1 (191) |
| Full analysis: | https://app.any.run/tasks/90851949-ee45-4e52-8b19-dd3b8201df95 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 16:17:53 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 4AF847D9A8CDC771D1626A340B0B0800 |
| SHA1: | 8096894DC7262F07E817A5423DE98382A632CFD7 |
| SHA256: | 248B26DA736A9303573DDF4856854F8EDA53EF5CF062A5822C1FFAD703A6D48C |
| SSDEEP: | 6144:jdNziz8LnDRjA5lJ6kY2smfx5tBqlvJGBa/P0e9vTk/8SwjwpyAAEhsmIk6ZsxQa:jzOgpjA5f6hgBMhaaX0e9vPx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- Unicorn-51418.exe (PID: 5972)
- Unicorn-27565.exe (PID: 4224)
- 1 (191).exe (PID: 4400)
- Unicorn-22315.exe (PID: 6800)
- Unicorn-16473.exe (PID: 4000)
- Unicorn-41723.exe (PID: 5552)
- Unicorn-40192.exe (PID: 2320)
- Unicorn-15762.exe (PID: 1616)
- Unicorn-136.exe (PID: 2908)
- Unicorn-4433.exe (PID: 6132)
- Unicorn-54603.exe (PID: 4560)
- Unicorn-52196.exe (PID: 6640)
- Unicorn-27796.exe (PID: 4980)
- Unicorn-57396.exe (PID: 6108)
- Unicorn-11724.exe (PID: 4944)
- Unicorn-42617.exe (PID: 1012)
- Unicorn-60577.exe (PID: 4464)
- Unicorn-50785.exe (PID: 2552)
- Unicorn-5284.exe (PID: 5228)
- Unicorn-65075.exe (PID: 6080)
- Unicorn-19352.exe (PID: 7172)
- Unicorn-25632.exe (PID: 7208)
- Unicorn-6545.exe (PID: 7240)
- Unicorn-42425.exe (PID: 7232)
- Unicorn-56715.exe (PID: 7272)
- Unicorn-19893.exe (PID: 6032)
- Unicorn-58761.exe (PID: 7280)
- Unicorn-58761.exe (PID: 7288)
- Unicorn-41029.exe (PID: 7444)
- Unicorn-48621.exe (PID: 7464)
- Unicorn-65533.exe (PID: 7408)
- Unicorn-58112.exe (PID: 7428)
- Unicorn-50659.exe (PID: 7492)
- Unicorn-56524.exe (PID: 7500)
- Unicorn-36923.exe (PID: 7508)
- Unicorn-44537.exe (PID: 7484)
- Unicorn-8849.exe (PID: 7548)
- Unicorn-52980.exe (PID: 7584)
- Unicorn-27498.exe (PID: 7604)
- Unicorn-61641.exe (PID: 7624)
- Unicorn-17729.exe (PID: 7184)
- Unicorn-42482.exe (PID: 7704)
- Unicorn-35191.exe (PID: 7692)
- Unicorn-61641.exe (PID: 7632)
- Unicorn-11870.exe (PID: 7660)
- Unicorn-935.exe (PID: 7668)
- Unicorn-41413.exe (PID: 7752)
- Unicorn-33245.exe (PID: 7736)
- Unicorn-6757.exe (PID: 7904)
- Unicorn-34169.exe (PID: 7796)
- Unicorn-41413.exe (PID: 7760)
- Unicorn-41413.exe (PID: 7744)
- Unicorn-56627.exe (PID: 7852)
- Unicorn-42072.exe (PID: 7820)
- Unicorn-4906.exe (PID: 7312)
- Unicorn-26555.exe (PID: 7812)
- Unicorn-13379.exe (PID: 7728)
- Unicorn-14303.exe (PID: 7788)
- Unicorn-59508.exe (PID: 7304)
- Unicorn-56627.exe (PID: 7844)
- Unicorn-38895.exe (PID: 7296)
- Unicorn-10240.exe (PID: 8028)
- Unicorn-29574.exe (PID: 8036)
- Unicorn-31023.exe (PID: 7988)
- Unicorn-44366.exe (PID: 7976)
- Unicorn-31813.exe (PID: 8144)
- Unicorn-7308.exe (PID: 8104)
- Unicorn-43489.exe (PID: 8156)
- Unicorn-55741.exe (PID: 5084)
- Unicorn-35875.exe (PID: 8168)
- Unicorn-26582.exe (PID: 5376)
- Unicorn-36473.exe (PID: 6244)
- Unicorn-49803.exe (PID: 5504)
- Unicorn-33135.exe (PID: 2644)
- Unicorn-63909.exe (PID: 744)
- Unicorn-36473.exe (PID: 7392)
- Unicorn-65232.exe (PID: 8132)
- Unicorn-2648.exe (PID: 2852)
- Unicorn-43416.exe (PID: 5528)
- Unicorn-56488.exe (PID: 6392)
- Unicorn-44407.exe (PID: 7564)
- Unicorn-12222.exe (PID: 8240)
- Unicorn-15861.exe (PID: 8220)
- Unicorn-24989.exe (PID: 8252)
- Unicorn-50733.exe (PID: 8324)
- Unicorn-45336.exe (PID: 8268)
- Unicorn-42586.exe (PID: 8300)
- Unicorn-8460.exe (PID: 8396)
- Unicorn-847.exe (PID: 8416)
- Unicorn-37049.exe (PID: 8352)
- Unicorn-32070.exe (PID: 8540)
- Unicorn-13504.exe (PID: 8508)
- Unicorn-54345.exe (PID: 8480)
- Unicorn-53961.exe (PID: 8600)
- Unicorn-9612.exe (PID: 8560)
- Unicorn-58299.exe (PID: 8580)
- Unicorn-58792.exe (PID: 8636)
- Unicorn-5144.exe (PID: 8716)
- Unicorn-15149.exe (PID: 8768)
- Unicorn-33541.exe (PID: 8656)
- Unicorn-46945.exe (PID: 8732)
- Unicorn-56929.exe (PID: 8784)
- Unicorn-2020.exe (PID: 8828)
- Unicorn-2020.exe (PID: 8820)
- Unicorn-6749.exe (PID: 8752)
- Unicorn-58512.exe (PID: 8852)
- Unicorn-38393.exe (PID: 8892)
- Unicorn-59312.exe (PID: 8988)
- Unicorn-14464.exe (PID: 8872)
- Unicorn-46239.exe (PID: 8940)
- Unicorn-34169.exe (PID: 7804)
- Unicorn-567.exe (PID: 8948)
- Unicorn-42477.exe (PID: 8880)
- Unicorn-35055.exe (PID: 9040)
- Unicorn-48377.exe (PID: 8996)
- Unicorn-54656.exe (PID: 9024)
- Unicorn-43364.exe (PID: 9076)
- Unicorn-742.exe (PID: 9096)
- Unicorn-12357.exe (PID: 7912)
- Unicorn-43223.exe (PID: 9032)
- Unicorn-5895.exe (PID: 9140)
- Unicorn-41775.exe (PID: 9120)
- Unicorn-41775.exe (PID: 9116)
- Unicorn-49021.exe (PID: 2340)
- Unicorn-13224.exe (PID: 8348)
- Unicorn-25154.exe (PID: 8020)
- Unicorn-37921.exe (PID: 8616)
- Unicorn-51635.exe (PID: 3896)
- Unicorn-14464.exe (PID: 9248)
- Unicorn-588.exe (PID: 9228)
- Unicorn-26089.exe (PID: 9268)
- Unicorn-30521.exe (PID: 9292)
- Unicorn-63385.exe (PID: 9312)
- Unicorn-46281.exe (PID: 9344)
- Unicorn-8459.exe (PID: 8524)
- Unicorn-20708.exe (PID: 9336)
- Unicorn-842.exe (PID: 9328)
- Unicorn-59280.exe (PID: 9404)
- Unicorn-14677.exe (PID: 9372)
- Unicorn-59472.exe (PID: 9484)
- Unicorn-3577.exe (PID: 9592)
- Unicorn-47137.exe (PID: 8792)
- Unicorn-567.exe (PID: 8956)
- Unicorn-47220.exe (PID: 9420)
- Unicorn-39374.exe (PID: 9504)
- Unicorn-10676.exe (PID: 9544)
- Unicorn-35373.exe (PID: 9564)
- Unicorn-19037.exe (PID: 9636)
- Unicorn-1339.exe (PID: 9524)
- Unicorn-47049.exe (PID: 9692)
- Unicorn-46784.exe (PID: 9684)
- Unicorn-55793.exe (PID: 9600)
- Unicorn-1739.exe (PID: 9648)
- Unicorn-3577.exe (PID: 9584)
- Unicorn-14376.exe (PID: 9800)
- Unicorn-35351.exe (PID: 9728)
- Unicorn-55217.exe (PID: 9732)
- Unicorn-20690.exe (PID: 9944)
- Unicorn-18195.exe (PID: 9764)
- Unicorn-8024.exe (PID: 9924)
- Unicorn-22719.exe (PID: 10012)
- Unicorn-39271.exe (PID: 9976)
- Unicorn-11039.exe (PID: 9816)
- Unicorn-31459.exe (PID: 9864)
- Unicorn-36141.exe (PID: 10028)
- Unicorn-51901.exe (PID: 10072)
- Unicorn-49855.exe (PID: 10084)
- Unicorn-48009.exe (PID: 10120)
- Unicorn-4838.exe (PID: 10064)
- Unicorn-27589.exe (PID: 10160)
- Unicorn-28658.exe (PID: 10144)
- Unicorn-61008.exe (PID: 10152)
- Unicorn-62482.exe (PID: 9880)
- Unicorn-8792.exe (PID: 10136)
- Unicorn-64735.exe (PID: 10224)
- Unicorn-17458.exe (PID: 8900)
- Unicorn-41486.exe (PID: 728)
- Unicorn-65305.exe (PID: 10312)
- Unicorn-65175.exe (PID: 2192)
- Unicorn-2875.exe (PID: 10212)
- Unicorn-38646.exe (PID: 10428)
- Unicorn-37101.exe (PID: 10484)
- Unicorn-30905.exe (PID: 9824)
- Unicorn-49353.exe (PID: 10504)
- Unicorn-57713.exe (PID: 10564)
- Unicorn-4620.exe (PID: 10584)
- Unicorn-36333.exe (PID: 5216)
- Unicorn-54568.exe (PID: 10400)
- Unicorn-22964.exe (PID: 10472)
- Unicorn-39155.exe (PID: 10716)
- Unicorn-25965.exe (PID: 10616)
- Unicorn-37952.exe (PID: 10652)
- Unicorn-62913.exe (PID: 10684)
- Unicorn-10657.exe (PID: 10736)
- Unicorn-50209.exe (PID: 10248)
- Unicorn-57713.exe (PID: 10572)
- Unicorn-18351.exe (PID: 10644)
- Unicorn-35071.exe (PID: 10728)
- Unicorn-50277.exe (PID: 10872)
- Unicorn-16518.exe (PID: 10900)
- Unicorn-42663.exe (PID: 10828)
- Unicorn-39177.exe (PID: 10952)
- Unicorn-51237.exe (PID: 10916)
- Unicorn-17989.exe (PID: 10760)
- Unicorn-19450.exe (PID: 10784)
- Unicorn-59213.exe (PID: 11028)
- Unicorn-52114.exe (PID: 11060)
- Unicorn-31179.exe (PID: 11088)
- Unicorn-51045.exe (PID: 11096)
- Unicorn-60666.exe (PID: 10944)
- Unicorn-64428.exe (PID: 10988)
- Unicorn-50853.exe (PID: 11008)
- Unicorn-52114.exe (PID: 11052)
- Unicorn-11828.exe (PID: 11120)
- Unicorn-56836.exe (PID: 11220)
- Unicorn-23417.exe (PID: 11164)
- Unicorn-31694.exe (PID: 11128)
- Unicorn-61242.exe (PID: 11172)
- Unicorn-56281.exe (PID: 11204)
- Unicorn-39945.exe (PID: 10344)
- Unicorn-59022.exe (PID: 11156)
- Unicorn-5034.exe (PID: 11240)
- Unicorn-11164.exe (PID: 11228)
- Unicorn-39945.exe (PID: 10104)
- Unicorn-40691.exe (PID: 10444)
- Unicorn-56281.exe (PID: 11208)
- Unicorn-61112.exe (PID: 10624)
- Unicorn-20594.exe (PID: 10392)
- Unicorn-20079.exe (PID: 10004)
- Unicorn-23033.exe (PID: 6184)
- Unicorn-40691.exe (PID: 10348)
- Unicorn-42787.exe (PID: 6028)
- Unicorn-23225.exe (PID: 11312)
- Unicorn-6696.exe (PID: 11296)
- Unicorn-13887.exe (PID: 11068)
- Unicorn-27863.exe (PID: 11336)
- Unicorn-17987.exe (PID: 3024)
- Unicorn-60173.exe (PID: 11344)
- Unicorn-152.exe (PID: 6208)
- Unicorn-15440.exe (PID: 9796)
- Unicorn-23587.exe (PID: 5392)
- Unicorn-57935.exe (PID: 2084)
Starts itself from another location
- Unicorn-27565.exe (PID: 4224)
- 1 (191).exe (PID: 4400)
- Unicorn-51418.exe (PID: 5972)
- Unicorn-22315.exe (PID: 6800)
- Unicorn-16473.exe (PID: 4000)
- Unicorn-41723.exe (PID: 5552)
- Unicorn-136.exe (PID: 2908)
- Unicorn-40192.exe (PID: 2320)
- Unicorn-15762.exe (PID: 1616)
- Unicorn-4433.exe (PID: 6132)
- Unicorn-54603.exe (PID: 4560)
- Unicorn-52196.exe (PID: 6640)
- Unicorn-57396.exe (PID: 6108)
- Unicorn-27796.exe (PID: 4980)
- Unicorn-19893.exe (PID: 6032)
- Unicorn-42617.exe (PID: 1012)
- Unicorn-60577.exe (PID: 4464)
- Unicorn-50785.exe (PID: 2552)
- Unicorn-65075.exe (PID: 6080)
- Unicorn-5284.exe (PID: 5228)
- Unicorn-19352.exe (PID: 7172)
- Unicorn-17729.exe (PID: 7184)
- Unicorn-25632.exe (PID: 7208)
- Unicorn-42425.exe (PID: 7232)
- Unicorn-58761.exe (PID: 7288)
- Unicorn-38895.exe (PID: 7296)
- Unicorn-56715.exe (PID: 7272)
- Unicorn-4906.exe (PID: 7312)
- Unicorn-11724.exe (PID: 4944)
- Unicorn-58761.exe (PID: 7280)
- Unicorn-6545.exe (PID: 7240)
- Unicorn-59508.exe (PID: 7304)
- Unicorn-58112.exe (PID: 7428)
- Unicorn-65533.exe (PID: 7408)
- Unicorn-48621.exe (PID: 7464)
- Unicorn-50659.exe (PID: 7492)
- Unicorn-36923.exe (PID: 7508)
- Unicorn-44537.exe (PID: 7484)
- Unicorn-56524.exe (PID: 7500)
- Unicorn-44407.exe (PID: 7564)
- Unicorn-8849.exe (PID: 7548)
- Unicorn-52980.exe (PID: 7584)
- Unicorn-27498.exe (PID: 7604)
- Unicorn-11870.exe (PID: 7660)
- Unicorn-935.exe (PID: 7668)
- Unicorn-42482.exe (PID: 7704)
- Unicorn-35191.exe (PID: 7692)
- Unicorn-61641.exe (PID: 7624)
- Unicorn-61641.exe (PID: 7632)
- Unicorn-41413.exe (PID: 7752)
- Unicorn-6757.exe (PID: 7904)
- Unicorn-34169.exe (PID: 7796)
- Unicorn-41413.exe (PID: 7760)
- Unicorn-56627.exe (PID: 7852)
- Unicorn-34169.exe (PID: 7804)
- Unicorn-41413.exe (PID: 7744)
- Unicorn-33245.exe (PID: 7736)
- Unicorn-42072.exe (PID: 7820)
- Unicorn-26555.exe (PID: 7812)
- Unicorn-56627.exe (PID: 7844)
- Unicorn-14303.exe (PID: 7788)
- Unicorn-12357.exe (PID: 7912)
- Unicorn-13379.exe (PID: 7728)
- Unicorn-10240.exe (PID: 8028)
- Unicorn-44366.exe (PID: 7976)
- Unicorn-29574.exe (PID: 8036)
- Unicorn-31023.exe (PID: 7988)
- Unicorn-7308.exe (PID: 8104)
- Unicorn-43489.exe (PID: 8156)
- Unicorn-55741.exe (PID: 5084)
- Unicorn-35875.exe (PID: 8168)
- Unicorn-31813.exe (PID: 8144)
- Unicorn-26582.exe (PID: 5376)
- Unicorn-36473.exe (PID: 6244)
- Unicorn-42787.exe (PID: 6028)
- Unicorn-41029.exe (PID: 7444)
- Unicorn-2648.exe (PID: 2852)
- Unicorn-63909.exe (PID: 744)
- Unicorn-36473.exe (PID: 7392)
- Unicorn-33135.exe (PID: 2644)
- Unicorn-43416.exe (PID: 5528)
- Unicorn-56488.exe (PID: 6392)
- Unicorn-65232.exe (PID: 8132)
- Unicorn-12222.exe (PID: 8240)
- Unicorn-15861.exe (PID: 8220)
- Unicorn-24989.exe (PID: 8252)
- Unicorn-42586.exe (PID: 8300)
- Unicorn-50733.exe (PID: 8324)
- Unicorn-37049.exe (PID: 8352)
- Unicorn-8460.exe (PID: 8396)
- Unicorn-847.exe (PID: 8416)
- Unicorn-32070.exe (PID: 8540)
- Unicorn-54345.exe (PID: 8480)
- Unicorn-53961.exe (PID: 8600)
- Unicorn-8459.exe (PID: 8524)
- Unicorn-9612.exe (PID: 8560)
- Unicorn-58299.exe (PID: 8580)
- Unicorn-13504.exe (PID: 8508)
- Unicorn-58792.exe (PID: 8636)
- Unicorn-5144.exe (PID: 8716)
- Unicorn-15149.exe (PID: 8768)
- Unicorn-33541.exe (PID: 8656)
- Unicorn-56929.exe (PID: 8784)
- Unicorn-2020.exe (PID: 8828)
- Unicorn-47137.exe (PID: 8792)
- Unicorn-6749.exe (PID: 8752)
- Unicorn-46945.exe (PID: 8732)
- Unicorn-2020.exe (PID: 8820)
- Unicorn-58512.exe (PID: 8852)
- Unicorn-38393.exe (PID: 8892)
- Unicorn-14464.exe (PID: 8872)
- Unicorn-59312.exe (PID: 8988)
- Unicorn-17458.exe (PID: 8900)
- Unicorn-42477.exe (PID: 8880)
- Unicorn-46239.exe (PID: 8940)
- Unicorn-35055.exe (PID: 9040)
- Unicorn-54656.exe (PID: 9024)
- Unicorn-567.exe (PID: 8948)
- Unicorn-567.exe (PID: 8956)
- Unicorn-48377.exe (PID: 8996)
- Unicorn-43223.exe (PID: 9032)
- Unicorn-742.exe (PID: 9096)
- Unicorn-41775.exe (PID: 9120)
- Unicorn-41775.exe (PID: 9116)
- Unicorn-5895.exe (PID: 9140)
- Unicorn-13224.exe (PID: 8348)
- Unicorn-49021.exe (PID: 2340)
- Unicorn-37921.exe (PID: 8616)
- Unicorn-25154.exe (PID: 8020)
- Unicorn-14464.exe (PID: 9248)
- Unicorn-51635.exe (PID: 3896)
- Unicorn-588.exe (PID: 9228)
- Unicorn-49803.exe (PID: 5504)
- Unicorn-26089.exe (PID: 9268)
- Unicorn-45336.exe (PID: 8268)
- Unicorn-30521.exe (PID: 9292)
- Unicorn-20708.exe (PID: 9336)
- Unicorn-63385.exe (PID: 9312)
- Unicorn-46281.exe (PID: 9344)
- Unicorn-842.exe (PID: 9328)
- Unicorn-59280.exe (PID: 9404)
- Unicorn-59472.exe (PID: 9484)
- Unicorn-14677.exe (PID: 9372)
- Unicorn-47220.exe (PID: 9420)
- Unicorn-3577.exe (PID: 9592)
- Unicorn-39374.exe (PID: 9504)
- Unicorn-43364.exe (PID: 9076)
- Unicorn-10676.exe (PID: 9544)
- Unicorn-19037.exe (PID: 9636)
- Unicorn-1339.exe (PID: 9524)
- Unicorn-3577.exe (PID: 9584)
- Unicorn-47049.exe (PID: 9692)
- Unicorn-46784.exe (PID: 9684)
- Unicorn-55793.exe (PID: 9600)
- Unicorn-1739.exe (PID: 9648)
- Unicorn-14376.exe (PID: 9800)
- Unicorn-55217.exe (PID: 9732)
- Unicorn-35351.exe (PID: 9728)
- Unicorn-20690.exe (PID: 9944)
- Unicorn-39271.exe (PID: 9976)
- Unicorn-18195.exe (PID: 9764)
- Unicorn-30905.exe (PID: 9824)
Executes application which crashes
- Unicorn-12330.exe (PID: 9756)
INFO
Checks supported languages
- Unicorn-16473.exe (PID: 4000)
- Unicorn-22315.exe (PID: 6800)
- Unicorn-51418.exe (PID: 5972)
- Unicorn-27565.exe (PID: 4224)
- 1 (191).exe (PID: 4400)
- Unicorn-41723.exe (PID: 5552)
- Unicorn-136.exe (PID: 2908)
- Unicorn-52196.exe (PID: 6640)
- Unicorn-15762.exe (PID: 1616)
- Unicorn-4433.exe (PID: 6132)
- Unicorn-40192.exe (PID: 2320)
- Unicorn-54603.exe (PID: 4560)
- Unicorn-57396.exe (PID: 6108)
- Unicorn-11724.exe (PID: 4944)
- Unicorn-27796.exe (PID: 4980)
- Unicorn-42617.exe (PID: 1012)
- Unicorn-19893.exe (PID: 6032)
- Unicorn-65075.exe (PID: 6080)
- Unicorn-50785.exe (PID: 2552)
- Unicorn-5284.exe (PID: 5228)
- Unicorn-17729.exe (PID: 7184)
- Unicorn-25632.exe (PID: 7208)
- Unicorn-60577.exe (PID: 4464)
- Unicorn-19352.exe (PID: 7172)
- Unicorn-56715.exe (PID: 7272)
- Unicorn-58761.exe (PID: 7288)
- Unicorn-38895.exe (PID: 7296)
- Unicorn-59508.exe (PID: 7304)
- Unicorn-4906.exe (PID: 7312)
- Unicorn-42425.exe (PID: 7232)
- Unicorn-6545.exe (PID: 7240)
- Unicorn-58761.exe (PID: 7280)
- Unicorn-65533.exe (PID: 7408)
- Unicorn-48621.exe (PID: 7464)
- Unicorn-8849.exe (PID: 7548)
- Unicorn-44407.exe (PID: 7564)
- Unicorn-11870.exe (PID: 7660)
- Unicorn-61641.exe (PID: 7624)
- Unicorn-61641.exe (PID: 7632)
- Unicorn-935.exe (PID: 7668)
- Unicorn-27498.exe (PID: 7604)
- Unicorn-42482.exe (PID: 7704)
- Unicorn-33245.exe (PID: 7736)
- Unicorn-13379.exe (PID: 7728)
- Unicorn-35191.exe (PID: 7692)
- Unicorn-26555.exe (PID: 7812)
- Unicorn-42072.exe (PID: 7820)
- Unicorn-34169.exe (PID: 7804)
- Unicorn-41413.exe (PID: 7760)
- Unicorn-6757.exe (PID: 7904)
- Unicorn-56627.exe (PID: 7844)
- Unicorn-14303.exe (PID: 7788)
- Unicorn-12357.exe (PID: 7912)
- Unicorn-34169.exe (PID: 7796)
- Unicorn-56627.exe (PID: 7852)
- Unicorn-29574.exe (PID: 8036)
- Unicorn-10240.exe (PID: 8028)
- Unicorn-7308.exe (PID: 8104)
- Unicorn-44366.exe (PID: 7976)
- Unicorn-31813.exe (PID: 8144)
- Unicorn-65232.exe (PID: 8132)
- Unicorn-43489.exe (PID: 8156)
- Unicorn-35875.exe (PID: 8168)
- Unicorn-55741.exe (PID: 5084)
- Unicorn-26582.exe (PID: 5376)
- Unicorn-36473.exe (PID: 7392)
- Unicorn-36473.exe (PID: 6244)
- Unicorn-42787.exe (PID: 6028)
- Unicorn-33135.exe (PID: 2644)
- Unicorn-2648.exe (PID: 2852)
- Unicorn-63909.exe (PID: 744)
- Unicorn-49803.exe (PID: 5504)
- Unicorn-56488.exe (PID: 6392)
- Unicorn-15861.exe (PID: 8220)
- Unicorn-45336.exe (PID: 8268)
- Unicorn-24989.exe (PID: 8252)
- Unicorn-13504.exe (PID: 8508)
- Unicorn-8459.exe (PID: 8524)
- Unicorn-32070.exe (PID: 8540)
- Unicorn-42586.exe (PID: 8300)
- Unicorn-58299.exe (PID: 8580)
- Unicorn-53961.exe (PID: 8600)
- Unicorn-5144.exe (PID: 8716)
- Unicorn-9612.exe (PID: 8560)
- Unicorn-2020.exe (PID: 8828)
- Unicorn-2020.exe (PID: 8820)
- Unicorn-58512.exe (PID: 8852)
- Unicorn-38393.exe (PID: 8892)
- Unicorn-59312.exe (PID: 8988)
- Unicorn-17458.exe (PID: 8900)
- Unicorn-46239.exe (PID: 8940)
- Unicorn-567.exe (PID: 8948)
- Unicorn-48377.exe (PID: 8996)
- Unicorn-35055.exe (PID: 9040)
- Unicorn-54656.exe (PID: 9024)
- Unicorn-43223.exe (PID: 9032)
- Unicorn-742.exe (PID: 9096)
- Unicorn-41775.exe (PID: 9120)
- Unicorn-5895.exe (PID: 9140)
- Unicorn-49021.exe (PID: 2340)
- Unicorn-25154.exe (PID: 8020)
- Unicorn-37921.exe (PID: 8616)
- Unicorn-51635.exe (PID: 3896)
- Unicorn-63385.exe (PID: 9312)
- Unicorn-20708.exe (PID: 9336)
- Unicorn-842.exe (PID: 9328)
- Unicorn-26089.exe (PID: 9268)
- Unicorn-46281.exe (PID: 9344)
- Unicorn-47220.exe (PID: 9420)
- Unicorn-59472.exe (PID: 9484)
- Unicorn-1339.exe (PID: 9524)
- Unicorn-10676.exe (PID: 9544)
- Unicorn-59280.exe (PID: 9404)
- Unicorn-35373.exe (PID: 9564)
- Unicorn-55793.exe (PID: 9600)
- Unicorn-3577.exe (PID: 9584)
- Unicorn-19037.exe (PID: 9636)
- Unicorn-1739.exe (PID: 9648)
- Unicorn-47049.exe (PID: 9692)
- Unicorn-3577.exe (PID: 9592)
- Unicorn-55217.exe (PID: 9732)
- Unicorn-12330.exe (PID: 9756)
- Unicorn-35351.exe (PID: 9728)
- Unicorn-31459.exe (PID: 9864)
- Unicorn-14376.exe (PID: 9800)
- Unicorn-46784.exe (PID: 9684)
- Unicorn-11039.exe (PID: 9816)
- Unicorn-22719.exe (PID: 10012)
- Unicorn-39271.exe (PID: 9976)
- Unicorn-36141.exe (PID: 10028)
- Unicorn-8024.exe (PID: 9924)
- Unicorn-20690.exe (PID: 9944)
- Unicorn-2875.exe (PID: 10212)
- Unicorn-61008.exe (PID: 10152)
- Unicorn-28658.exe (PID: 10144)
- Unicorn-27589.exe (PID: 10160)
- Unicorn-64735.exe (PID: 10224)
- Unicorn-51901.exe (PID: 10072)
- Unicorn-62482.exe (PID: 9880)
- Unicorn-50209.exe (PID: 10248)
- Unicorn-41486.exe (PID: 728)
- Unicorn-38646.exe (PID: 10428)
- Unicorn-22964.exe (PID: 10472)
- Unicorn-37101.exe (PID: 10484)
- Unicorn-36333.exe (PID: 5216)
- Unicorn-65305.exe (PID: 10312)
- Unicorn-49353.exe (PID: 10504)
- Unicorn-57713.exe (PID: 10564)
- Unicorn-57713.exe (PID: 10572)
- Unicorn-25965.exe (PID: 10616)
- Unicorn-18351.exe (PID: 10644)
- Unicorn-19450.exe (PID: 10784)
- Unicorn-62913.exe (PID: 10684)
- Unicorn-35071.exe (PID: 10728)
- Unicorn-17989.exe (PID: 10760)
- Unicorn-50277.exe (PID: 10872)
- Unicorn-60666.exe (PID: 10944)
- Unicorn-64428.exe (PID: 10988)
- Unicorn-39177.exe (PID: 10952)
- Unicorn-52114.exe (PID: 11060)
- Unicorn-59213.exe (PID: 11028)
- Unicorn-11828.exe (PID: 11120)
- Unicorn-31694.exe (PID: 11128)
- Unicorn-51045.exe (PID: 11096)
- Unicorn-31179.exe (PID: 11088)
- Unicorn-56281.exe (PID: 11204)
- Unicorn-11164.exe (PID: 11228)
- Unicorn-56836.exe (PID: 11220)
- Unicorn-59022.exe (PID: 11156)
- Unicorn-61242.exe (PID: 11172)
- Unicorn-23417.exe (PID: 11164)
- Unicorn-40691.exe (PID: 10444)
- Unicorn-15440.exe (PID: 9796)
- Unicorn-61112.exe (PID: 10624)
- Unicorn-39945.exe (PID: 10344)
- Unicorn-39945.exe (PID: 10104)
- Unicorn-23225.exe (PID: 11312)
- Unicorn-6696.exe (PID: 11296)
- Unicorn-27863.exe (PID: 11336)
- Unicorn-48476.exe (PID: 11368)
- Unicorn-23033.exe (PID: 6184)
- Unicorn-17987.exe (PID: 3024)
- Unicorn-152.exe (PID: 6208)
- Unicorn-13887.exe (PID: 11068)
- Unicorn-28269.exe (PID: 11416)
- Unicorn-23422.exe (PID: 11440)
- Unicorn-47712.exe (PID: 11428)
- Unicorn-53842.exe (PID: 11448)
- Unicorn-61745.exe (PID: 11456)
- Unicorn-13010.exe (PID: 11388)
- Unicorn-32851.exe (PID: 11512)
- Unicorn-32545.exe (PID: 11548)
- Unicorn-43956.exe (PID: 11584)
- Unicorn-60676.exe (PID: 11612)
- Unicorn-40447.exe (PID: 11856)
- Unicorn-26414.exe (PID: 11540)
- Unicorn-32280.exe (PID: 11532)
- Unicorn-63821.exe (PID: 11880)
- Unicorn-16658.exe (PID: 11892)
- Unicorn-36856.exe (PID: 11916)
- Unicorn-52316.exe (PID: 11940)
- Unicorn-52685.exe (PID: 11972)
- Unicorn-16235.exe (PID: 12052)
- Unicorn-23713.exe (PID: 12100)
- Unicorn-32627.exe (PID: 12108)
- Unicorn-4916.exe (PID: 12136)
- Unicorn-49570.exe (PID: 12016)
- Unicorn-34878.exe (PID: 12160)
- Unicorn-21143.exe (PID: 12168)
- Unicorn-21143.exe (PID: 12172)
- Unicorn-168.exe (PID: 12232)
- Unicorn-49924.exe (PID: 12216)
- Unicorn-26104.exe (PID: 12308)
- Unicorn-3868.exe (PID: 6228)
- Unicorn-55819.exe (PID: 12296)
- Unicorn-37479.exe (PID: 12360)
- Unicorn-37479.exe (PID: 12376)
- Unicorn-29311.exe (PID: 12352)
- Unicorn-13743.exe (PID: 12428)
- Unicorn-9990.exe (PID: 4172)
- Unicorn-46608.exe (PID: 12484)
- Unicorn-62389.exe (PID: 12476)
- Unicorn-11334.exe (PID: 12520)
- Unicorn-30463.exe (PID: 12600)
- Unicorn-63136.exe (PID: 12540)
- Unicorn-30463.exe (PID: 12592)
- Unicorn-44199.exe (PID: 12584)
- Unicorn-8534.exe (PID: 12548)
- Unicorn-47568.exe (PID: 12920)
- Unicorn-47376.exe (PID: 12848)
- Unicorn-39124.exe (PID: 12752)
- Unicorn-47376.exe (PID: 12856)
- Unicorn-26136.exe (PID: 12884)
- Unicorn-32455.exe (PID: 12720)
- Unicorn-22040.exe (PID: 13036)
- Unicorn-19886.exe (PID: 13044)
- Unicorn-47241.exe (PID: 13028)
- Unicorn-14833.exe (PID: 13072)
- Unicorn-48475.exe (PID: 12952)
- Unicorn-48475.exe (PID: 12960)
- Unicorn-2944.exe (PID: 12972)
- Unicorn-36083.exe (PID: 13188)
- Unicorn-28216.exe (PID: 13232)
- Unicorn-32906.exe (PID: 1116)
- Unicorn-19311.exe (PID: 12904)
- Unicorn-49819.exe (PID: 13180)
- Unicorn-60287.exe (PID: 13332)
- Unicorn-64864.exe (PID: 13368)
- Unicorn-29006.exe (PID: 13396)
- Unicorn-64864.exe (PID: 13360)
- Unicorn-41236.exe (PID: 13436)
- Unicorn-62263.exe (PID: 13528)
- Unicorn-14214.exe (PID: 13580)
- Unicorn-7516.exe (PID: 13404)
- Unicorn-59463.exe (PID: 13464)
- Unicorn-4179.exe (PID: 13684)
- Unicorn-20345.exe (PID: 13596)
- Unicorn-61569.exe (PID: 13672)
- Unicorn-60728.exe (PID: 13712)
- Unicorn-14918.exe (PID: 13604)
- Unicorn-49488.exe (PID: 13744)
- Unicorn-4947.exe (PID: 13968)
- Unicorn-9607.exe (PID: 13900)
- Unicorn-56508.exe (PID: 14004)
- Unicorn-49488.exe (PID: 13748)
- Unicorn-18268.exe (PID: 13948)
- Unicorn-40826.exe (PID: 14060)
- Unicorn-56152.exe (PID: 14036)
- Unicorn-40826.exe (PID: 14068)
- Unicorn-61761.exe (PID: 14044)
- Unicorn-28824.exe (PID: 14188)
- Unicorn-3462.exe (PID: 14276)
- Unicorn-30013.exe (PID: 14324)
- Unicorn-44495.exe (PID: 14356)
- Unicorn-21475.exe (PID: 14108)
- Unicorn-63991.exe (PID: 14204)
- Unicorn-6504.exe (PID: 14412)
- Unicorn-27168.exe (PID: 14452)
- Unicorn-64693.exe (PID: 14444)
- Unicorn-19414.exe (PID: 14472)
- Unicorn-40904.exe (PID: 14464)
- Unicorn-32943.exe (PID: 14556)
- Unicorn-38543.exe (PID: 14564)
- Unicorn-45587.exe (PID: 14628)
- Unicorn-14371.exe (PID: 14700)
- Unicorn-22042.exe (PID: 14736)
- Unicorn-14828.exe (PID: 15028)
- Unicorn-54060.exe (PID: 14548)
- Unicorn-22042.exe (PID: 14728)
- Unicorn-28342.exe (PID: 15056)
- Unicorn-5382.exe (PID: 15188)
- Unicorn-3344.exe (PID: 15220)
- Unicorn-20257.exe (PID: 15156)
Create files in a temporary directory
- 1 (191).exe (PID: 4400)
- Unicorn-51418.exe (PID: 5972)
- Unicorn-27565.exe (PID: 4224)
- Unicorn-136.exe (PID: 2908)
- Unicorn-22315.exe (PID: 6800)
- Unicorn-15762.exe (PID: 1616)
- Unicorn-4433.exe (PID: 6132)
- Unicorn-27796.exe (PID: 4980)
- Unicorn-40192.exe (PID: 2320)
- Unicorn-42617.exe (PID: 1012)
- Unicorn-50785.exe (PID: 2552)
- Unicorn-16473.exe (PID: 4000)
- Unicorn-25632.exe (PID: 7208)
- Unicorn-54603.exe (PID: 4560)
- Unicorn-11724.exe (PID: 4944)
- Unicorn-58761.exe (PID: 7280)
- Unicorn-58761.exe (PID: 7288)
- Unicorn-57396.exe (PID: 6108)
- Unicorn-65533.exe (PID: 7408)
- Unicorn-58112.exe (PID: 7428)
- Unicorn-48621.exe (PID: 7464)
- Unicorn-44537.exe (PID: 7484)
- Unicorn-56524.exe (PID: 7500)
- Unicorn-50659.exe (PID: 7492)
- Unicorn-65075.exe (PID: 6080)
- Unicorn-52196.exe (PID: 6640)
- Unicorn-8849.exe (PID: 7548)
- Unicorn-27498.exe (PID: 7604)
- Unicorn-41723.exe (PID: 5552)
- Unicorn-19352.exe (PID: 7172)
- Unicorn-935.exe (PID: 7668)
- Unicorn-42482.exe (PID: 7704)
- Unicorn-61641.exe (PID: 7632)
- Unicorn-41413.exe (PID: 7752)
- Unicorn-42425.exe (PID: 7232)
- Unicorn-34169.exe (PID: 7796)
- Unicorn-33245.exe (PID: 7736)
- Unicorn-6545.exe (PID: 7240)
- Unicorn-4906.exe (PID: 7312)
- Unicorn-41413.exe (PID: 7760)
- Unicorn-41413.exe (PID: 7744)
- Unicorn-26555.exe (PID: 7812)
- Unicorn-56627.exe (PID: 7844)
- Unicorn-14303.exe (PID: 7788)
- Unicorn-13379.exe (PID: 7728)
- Unicorn-59508.exe (PID: 7304)
- Unicorn-38895.exe (PID: 7296)
- Unicorn-56715.exe (PID: 7272)
- Unicorn-44366.exe (PID: 7976)
- Unicorn-10240.exe (PID: 8028)
- Unicorn-43489.exe (PID: 8156)
- Unicorn-55741.exe (PID: 5084)
- Unicorn-35875.exe (PID: 8168)
- Unicorn-31813.exe (PID: 8144)
- Unicorn-33135.exe (PID: 2644)
- Unicorn-26582.exe (PID: 5376)
- Unicorn-49803.exe (PID: 5504)
- Unicorn-2648.exe (PID: 2852)
- Unicorn-63909.exe (PID: 744)
- Unicorn-65232.exe (PID: 8132)
- Unicorn-56488.exe (PID: 6392)
- Unicorn-44407.exe (PID: 7564)
- Unicorn-60577.exe (PID: 4464)
- Unicorn-5284.exe (PID: 5228)
- Unicorn-15861.exe (PID: 8220)
- Unicorn-24989.exe (PID: 8252)
- Unicorn-42586.exe (PID: 8300)
- Unicorn-61641.exe (PID: 7624)
- Unicorn-50733.exe (PID: 8324)
- Unicorn-52980.exe (PID: 7584)
- Unicorn-45336.exe (PID: 8268)
- Unicorn-8460.exe (PID: 8396)
- Unicorn-37049.exe (PID: 8352)
- Unicorn-847.exe (PID: 8416)
- Unicorn-32070.exe (PID: 8540)
- Unicorn-13504.exe (PID: 8508)
- Unicorn-58299.exe (PID: 8580)
- Unicorn-35191.exe (PID: 7692)
- Unicorn-6757.exe (PID: 7904)
- Unicorn-56929.exe (PID: 8784)
- Unicorn-2020.exe (PID: 8820)
- Unicorn-2020.exe (PID: 8828)
- Unicorn-38393.exe (PID: 8892)
- Unicorn-14464.exe (PID: 8872)
- Unicorn-58512.exe (PID: 8852)
- Unicorn-567.exe (PID: 8956)
- Unicorn-46239.exe (PID: 8940)
- Unicorn-56627.exe (PID: 7852)
- Unicorn-35055.exe (PID: 9040)
- Unicorn-12357.exe (PID: 7912)
- Unicorn-43364.exe (PID: 9076)
- Unicorn-19893.exe (PID: 6032)
- Unicorn-5895.exe (PID: 9140)
- Unicorn-31023.exe (PID: 7988)
- Unicorn-7308.exe (PID: 8104)
- Unicorn-29574.exe (PID: 8036)
- Unicorn-51635.exe (PID: 3896)
- Unicorn-41029.exe (PID: 7444)
- Unicorn-588.exe (PID: 9228)
- Unicorn-36473.exe (PID: 6244)
- Unicorn-36923.exe (PID: 7508)
- Unicorn-30521.exe (PID: 9292)
- Unicorn-11870.exe (PID: 7660)
- Unicorn-17729.exe (PID: 7184)
- Unicorn-20708.exe (PID: 9336)
- Unicorn-8459.exe (PID: 8524)
- Unicorn-15149.exe (PID: 8768)
- Unicorn-59472.exe (PID: 9484)
- Unicorn-42072.exe (PID: 7820)
- Unicorn-47137.exe (PID: 8792)
- Unicorn-47220.exe (PID: 9420)
- Unicorn-43223.exe (PID: 9032)
- Unicorn-10676.exe (PID: 9544)
- Unicorn-55217.exe (PID: 9732)
- Unicorn-48377.exe (PID: 8996)
- Unicorn-14376.exe (PID: 9800)
Reads the computer name
- Unicorn-27565.exe (PID: 4224)
- 1 (191).exe (PID: 4400)
- Unicorn-51418.exe (PID: 5972)
- Unicorn-22315.exe (PID: 6800)
- Unicorn-16473.exe (PID: 4000)
- Unicorn-136.exe (PID: 2908)
- Unicorn-41723.exe (PID: 5552)
- Unicorn-52196.exe (PID: 6640)
- Unicorn-15762.exe (PID: 1616)
- Unicorn-40192.exe (PID: 2320)
- Unicorn-54603.exe (PID: 4560)
- Unicorn-4433.exe (PID: 6132)
- Unicorn-57396.exe (PID: 6108)
- Unicorn-11724.exe (PID: 4944)
- Unicorn-27796.exe (PID: 4980)
- Unicorn-19893.exe (PID: 6032)
- Unicorn-42617.exe (PID: 1012)
- Unicorn-60577.exe (PID: 4464)
- Unicorn-50785.exe (PID: 2552)
- Unicorn-65075.exe (PID: 6080)
- Unicorn-5284.exe (PID: 5228)
- Unicorn-56715.exe (PID: 7272)
- Unicorn-58761.exe (PID: 7280)
- Unicorn-19352.exe (PID: 7172)
- Unicorn-17729.exe (PID: 7184)
- Unicorn-58761.exe (PID: 7288)
- Unicorn-59508.exe (PID: 7304)
- Unicorn-65533.exe (PID: 7408)
- Unicorn-41029.exe (PID: 7444)
- Unicorn-58112.exe (PID: 7428)
- Unicorn-56524.exe (PID: 7500)
- Unicorn-50659.exe (PID: 7492)
- Unicorn-36923.exe (PID: 7508)
- Unicorn-8849.exe (PID: 7548)
- Unicorn-27498.exe (PID: 7604)
- Unicorn-52980.exe (PID: 7584)
- Unicorn-61641.exe (PID: 7624)
- Unicorn-11870.exe (PID: 7660)
- Unicorn-42482.exe (PID: 7704)
- Unicorn-35191.exe (PID: 7692)
- Unicorn-61641.exe (PID: 7632)
- Unicorn-34169.exe (PID: 7804)
- Unicorn-41413.exe (PID: 7744)
- Unicorn-42072.exe (PID: 7820)
- Unicorn-26555.exe (PID: 7812)
- Unicorn-13379.exe (PID: 7728)
- Unicorn-14303.exe (PID: 7788)
- Unicorn-12357.exe (PID: 7912)
- Unicorn-41413.exe (PID: 7760)
- Unicorn-31023.exe (PID: 7988)
- Unicorn-63909.exe (PID: 744)
- Unicorn-44366.exe (PID: 7976)
- Unicorn-31813.exe (PID: 8144)
- Unicorn-55741.exe (PID: 5084)
- Unicorn-7308.exe (PID: 8104)
- Unicorn-35875.exe (PID: 8168)
- Unicorn-26582.exe (PID: 5376)
- Unicorn-33135.exe (PID: 2644)
- Unicorn-2648.exe (PID: 2852)
- Unicorn-36473.exe (PID: 7392)
- Unicorn-12222.exe (PID: 8240)
- Unicorn-15861.exe (PID: 8220)
- Unicorn-65232.exe (PID: 8132)
- Unicorn-37049.exe (PID: 8352)
- Unicorn-24989.exe (PID: 8252)
- Unicorn-8460.exe (PID: 8396)
- Unicorn-13504.exe (PID: 8508)
- Unicorn-8459.exe (PID: 8524)
- Unicorn-33541.exe (PID: 8656)
- Unicorn-9612.exe (PID: 8560)
- Unicorn-5144.exe (PID: 8716)
- Unicorn-58792.exe (PID: 8636)
- Unicorn-15149.exe (PID: 8768)
- Unicorn-56929.exe (PID: 8784)
- Unicorn-2020.exe (PID: 8828)
- Unicorn-47137.exe (PID: 8792)
- Unicorn-59312.exe (PID: 8988)
- Unicorn-46239.exe (PID: 8940)
- Unicorn-42477.exe (PID: 8880)
- Unicorn-567.exe (PID: 8948)
- Unicorn-2020.exe (PID: 8820)
- Unicorn-38393.exe (PID: 8892)
- Unicorn-54656.exe (PID: 9024)
- Unicorn-43223.exe (PID: 9032)
- Unicorn-48377.exe (PID: 8996)
- Unicorn-41775.exe (PID: 9120)
- Unicorn-5895.exe (PID: 9140)
- Unicorn-41775.exe (PID: 9116)
- Unicorn-13224.exe (PID: 8348)
- Unicorn-588.exe (PID: 9228)
- Unicorn-14464.exe (PID: 9248)
- Unicorn-26089.exe (PID: 9268)
- Unicorn-20708.exe (PID: 9336)
- Unicorn-59280.exe (PID: 9404)
- Unicorn-59472.exe (PID: 9484)
- Unicorn-3577.exe (PID: 9592)
- Unicorn-19037.exe (PID: 9636)
- Unicorn-46784.exe (PID: 9684)
- Unicorn-20690.exe (PID: 9944)
- Unicorn-47049.exe (PID: 9692)
- Unicorn-11039.exe (PID: 9816)
- Unicorn-18195.exe (PID: 9764)
The sample compiled with chinese language support
- 1 (191).exe (PID: 4400)
- Unicorn-33245.exe (PID: 7736)
- Unicorn-59312.exe (PID: 8988)
- Unicorn-48377.exe (PID: 8996)
- Unicorn-54656.exe (PID: 9024)
- Unicorn-56627.exe (PID: 7844)
- Unicorn-22315.exe (PID: 6800)
- Unicorn-136.exe (PID: 2908)
- Unicorn-56715.exe (PID: 7272)
- Unicorn-19893.exe (PID: 6032)
- Unicorn-27796.exe (PID: 4980)
- Unicorn-10240.exe (PID: 8028)
- Unicorn-5895.exe (PID: 9140)
- Unicorn-57396.exe (PID: 6108)
- Unicorn-65533.exe (PID: 7408)
- Unicorn-31023.exe (PID: 7988)
- Unicorn-44366.exe (PID: 7976)
- Unicorn-13224.exe (PID: 8348)
- Unicorn-29574.exe (PID: 8036)
- Unicorn-42617.exe (PID: 1012)
- Unicorn-49021.exe (PID: 2340)
- Unicorn-58112.exe (PID: 7428)
- Unicorn-25154.exe (PID: 8020)
- Unicorn-37921.exe (PID: 8616)
- Unicorn-31813.exe (PID: 8144)
- Unicorn-48621.exe (PID: 7464)
- Unicorn-7308.exe (PID: 8104)
- Unicorn-55741.exe (PID: 5084)
- Unicorn-15762.exe (PID: 1616)
- Unicorn-35875.exe (PID: 8168)
- Unicorn-26582.exe (PID: 5376)
- Unicorn-51635.exe (PID: 3896)
- Unicorn-41029.exe (PID: 7444)
- Unicorn-44537.exe (PID: 7484)
- Unicorn-56524.exe (PID: 7500)
- Unicorn-14464.exe (PID: 9248)
- Unicorn-49803.exe (PID: 5504)
- Unicorn-36473.exe (PID: 6244)
- Unicorn-2648.exe (PID: 2852)
- Unicorn-63909.exe (PID: 744)
- Unicorn-51418.exe (PID: 5972)
- Unicorn-52196.exe (PID: 6640)
- Unicorn-588.exe (PID: 9228)
- Unicorn-50785.exe (PID: 2552)
- Unicorn-4433.exe (PID: 6132)
- Unicorn-36473.exe (PID: 7392)
- Unicorn-50659.exe (PID: 7492)
- Unicorn-8849.exe (PID: 7548)
- Unicorn-65232.exe (PID: 8132)
- Unicorn-43416.exe (PID: 5528)
- Unicorn-36923.exe (PID: 7508)
- Unicorn-44407.exe (PID: 7564)
- Unicorn-26089.exe (PID: 9268)
- Unicorn-12222.exe (PID: 8240)
- Unicorn-19352.exe (PID: 7172)
- Unicorn-24989.exe (PID: 8252)
- Unicorn-50733.exe (PID: 8324)
- Unicorn-52980.exe (PID: 7584)
- Unicorn-42586.exe (PID: 8300)
- Unicorn-60577.exe (PID: 4464)
- Unicorn-16473.exe (PID: 4000)
- Unicorn-65075.exe (PID: 6080)
- Unicorn-41723.exe (PID: 5552)
- Unicorn-61641.exe (PID: 7624)
- Unicorn-37049.exe (PID: 8352)
- Unicorn-25632.exe (PID: 7208)
- Unicorn-30521.exe (PID: 9292)
- Unicorn-17729.exe (PID: 7184)
- Unicorn-11870.exe (PID: 7660)
- Unicorn-935.exe (PID: 7668)
- Unicorn-32070.exe (PID: 8540)
- Unicorn-13504.exe (PID: 8508)
- Unicorn-61641.exe (PID: 7632)
- Unicorn-54345.exe (PID: 8480)
- Unicorn-847.exe (PID: 8416)
- Unicorn-8459.exe (PID: 8524)
- Unicorn-20708.exe (PID: 9336)
- Unicorn-63385.exe (PID: 9312)
- Unicorn-58299.exe (PID: 8580)
- Unicorn-54603.exe (PID: 4560)
- Unicorn-46281.exe (PID: 9344)
- Unicorn-33541.exe (PID: 8656)
- Unicorn-35191.exe (PID: 7692)
- Unicorn-842.exe (PID: 9328)
- Unicorn-27565.exe (PID: 4224)
- Unicorn-41413.exe (PID: 7752)
- Unicorn-59280.exe (PID: 9404)
- Unicorn-58792.exe (PID: 8636)
- Unicorn-6757.exe (PID: 7904)
- Unicorn-42482.exe (PID: 7704)
- Unicorn-59472.exe (PID: 9484)
- Unicorn-42425.exe (PID: 7232)
- Unicorn-14677.exe (PID: 9372)
- Unicorn-15149.exe (PID: 8768)
- Unicorn-46945.exe (PID: 8732)
- Unicorn-34169.exe (PID: 7796)
- Unicorn-6545.exe (PID: 7240)
- Unicorn-47137.exe (PID: 8792)
- Unicorn-42072.exe (PID: 7820)
- Unicorn-58512.exe (PID: 8852)
- Unicorn-38393.exe (PID: 8892)
- Unicorn-3577.exe (PID: 9592)
- Unicorn-56929.exe (PID: 8784)
- Unicorn-2020.exe (PID: 8828)
- Unicorn-2020.exe (PID: 8820)
- Unicorn-46239.exe (PID: 8940)
- Unicorn-42477.exe (PID: 8880)
- Unicorn-34169.exe (PID: 7804)
- Unicorn-4906.exe (PID: 7312)
- Unicorn-567.exe (PID: 8956)
- Unicorn-567.exe (PID: 8948)
- Unicorn-56627.exe (PID: 7852)
- Unicorn-47220.exe (PID: 9420)
- Unicorn-41413.exe (PID: 7744)
- Unicorn-43364.exe (PID: 9076)
- Unicorn-39374.exe (PID: 9504)
- Unicorn-14303.exe (PID: 7788)
- Unicorn-26555.exe (PID: 7812)
- Unicorn-58761.exe (PID: 7280)
- Unicorn-43223.exe (PID: 9032)
- Unicorn-742.exe (PID: 9096)
- Unicorn-41413.exe (PID: 7760)
- Unicorn-35055.exe (PID: 9040)
- Unicorn-12357.exe (PID: 7912)
- Unicorn-10676.exe (PID: 9544)
- Unicorn-41775.exe (PID: 9116)
- Unicorn-41775.exe (PID: 9120)
- Unicorn-38895.exe (PID: 7296)
- Unicorn-5284.exe (PID: 5228)
- Unicorn-13379.exe (PID: 7728)
- Unicorn-59508.exe (PID: 7304)
- Unicorn-40192.exe (PID: 2320)
- Unicorn-35373.exe (PID: 9564)
- Unicorn-19037.exe (PID: 9636)
- Unicorn-1339.exe (PID: 9524)
- Unicorn-11724.exe (PID: 4944)
- Unicorn-3577.exe (PID: 9584)
- Unicorn-47049.exe (PID: 9692)
- Unicorn-55793.exe (PID: 9600)
- Unicorn-46784.exe (PID: 9684)
- Unicorn-1739.exe (PID: 9648)
- Unicorn-35351.exe (PID: 9728)
- Unicorn-14376.exe (PID: 9800)
- Unicorn-55217.exe (PID: 9732)
- Unicorn-20690.exe (PID: 9944)
- Unicorn-8024.exe (PID: 9924)
- Unicorn-11039.exe (PID: 9816)
- Unicorn-39271.exe (PID: 9976)
- Unicorn-31459.exe (PID: 9864)
- Unicorn-22719.exe (PID: 10012)
- Unicorn-36141.exe (PID: 10028)
- Unicorn-51901.exe (PID: 10072)
- Unicorn-18195.exe (PID: 9764)
- Unicorn-48009.exe (PID: 10120)
- Unicorn-4838.exe (PID: 10064)
- Unicorn-8460.exe (PID: 8396)
- Unicorn-8792.exe (PID: 10136)
- Unicorn-45336.exe (PID: 8268)
- Unicorn-28658.exe (PID: 10144)
- Unicorn-27498.exe (PID: 7604)
- Unicorn-61008.exe (PID: 10152)
- Unicorn-62482.exe (PID: 9880)
- Unicorn-49855.exe (PID: 10084)
- Unicorn-27589.exe (PID: 10160)
- Unicorn-2875.exe (PID: 10212)
- Unicorn-53961.exe (PID: 8600)
- Unicorn-65305.exe (PID: 10312)
- Unicorn-9612.exe (PID: 8560)
- Unicorn-6749.exe (PID: 8752)
- Unicorn-17458.exe (PID: 8900)
- Unicorn-14464.exe (PID: 8872)
- Unicorn-41486.exe (PID: 728)
- Unicorn-58761.exe (PID: 7288)
- Unicorn-65175.exe (PID: 2192)
- Unicorn-64735.exe (PID: 10224)
- Unicorn-54568.exe (PID: 10400)
- Unicorn-22964.exe (PID: 10472)
- Unicorn-38646.exe (PID: 10428)
- Unicorn-30905.exe (PID: 9824)
- Unicorn-37101.exe (PID: 10484)
- Unicorn-49353.exe (PID: 10504)
- Unicorn-57713.exe (PID: 10564)
- Unicorn-33135.exe (PID: 2644)
- Unicorn-36333.exe (PID: 5216)
- Unicorn-15861.exe (PID: 8220)
- Unicorn-50209.exe (PID: 10248)
- Unicorn-18351.exe (PID: 10644)
- Unicorn-10657.exe (PID: 10736)
- Unicorn-39155.exe (PID: 10716)
- Unicorn-4620.exe (PID: 10584)
- Unicorn-57713.exe (PID: 10572)
- Unicorn-25965.exe (PID: 10616)
- Unicorn-37952.exe (PID: 10652)
- Unicorn-62913.exe (PID: 10684)
- Unicorn-17989.exe (PID: 10760)
- Unicorn-16518.exe (PID: 10900)
- Unicorn-42663.exe (PID: 10828)
- Unicorn-51237.exe (PID: 10916)
- Unicorn-19450.exe (PID: 10784)
- Unicorn-35071.exe (PID: 10728)
- Unicorn-56488.exe (PID: 6392)
- Unicorn-50853.exe (PID: 11008)
- Unicorn-59213.exe (PID: 11028)
- Unicorn-52114.exe (PID: 11052)
- Unicorn-51045.exe (PID: 11096)
- Unicorn-39177.exe (PID: 10952)
- Unicorn-60666.exe (PID: 10944)
- Unicorn-64428.exe (PID: 10988)
- Unicorn-52114.exe (PID: 11060)
- Unicorn-31179.exe (PID: 11088)
- Unicorn-11828.exe (PID: 11120)
- Unicorn-23417.exe (PID: 11164)
- Unicorn-56836.exe (PID: 11220)
- Unicorn-31694.exe (PID: 11128)
- Unicorn-56281.exe (PID: 11204)
- Unicorn-61242.exe (PID: 11172)
- Unicorn-5034.exe (PID: 11240)
- Unicorn-59022.exe (PID: 11156)
- Unicorn-39945.exe (PID: 10344)
- Unicorn-11164.exe (PID: 11228)
- Unicorn-40691.exe (PID: 10444)
- Unicorn-40691.exe (PID: 10348)
- Unicorn-56281.exe (PID: 11208)
- Unicorn-20594.exe (PID: 10392)
- Unicorn-23033.exe (PID: 6184)
- Unicorn-20079.exe (PID: 10004)
- Unicorn-39945.exe (PID: 10104)
- Unicorn-61112.exe (PID: 10624)
- Unicorn-42787.exe (PID: 6028)
- Unicorn-23225.exe (PID: 11312)
- Unicorn-6696.exe (PID: 11296)
- Unicorn-27863.exe (PID: 11336)
- Unicorn-60173.exe (PID: 11344)
- Unicorn-17987.exe (PID: 3024)
- Unicorn-15440.exe (PID: 9796)
- Unicorn-23587.exe (PID: 5392)
- Unicorn-43489.exe (PID: 8156)
- Unicorn-13887.exe (PID: 11068)
- Unicorn-152.exe (PID: 6208)
- Unicorn-57935.exe (PID: 2084)
Creates files or folders in the user directory
- WerFault.exe (PID: 9992)
- WerFault.exe (PID: 10376)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
563
Monitored processes
428
Malicious processes
66
Suspicious processes
63
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 728 | C:\Users\admin\AppData\Local\Temp\Unicorn-41486.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-41486.exe | Unicorn-847.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 744 | C:\Users\admin\AppData\Local\Temp\Unicorn-63909.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-63909.exe | Unicorn-50659.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1012 | C:\Users\admin\AppData\Local\Temp\Unicorn-42617.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-42617.exe | Unicorn-15762.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1116 | C:\Users\admin\AppData\Local\Temp\Unicorn-32906.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-32906.exe | — | Unicorn-11870.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1324 | "C:\WINDOWS\System32\SLUI.exe" RuleId=3482d82e-ca2c-4e1f-8864-da0267b484b2;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=TimerEvent | C:\Windows\System32\slui.exe | — | SppExtComObj.Exe | |||||||||||
User: NETWORK SERVICE Company: Microsoft Corporation Integrity Level: SYSTEM Description: Windows Activation Client Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 1616 | C:\Users\admin\AppData\Local\Temp\Unicorn-15762.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-15762.exe | Unicorn-16473.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 2084 | C:\Users\admin\AppData\Local\Temp\Unicorn-57935.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-57935.exe | Unicorn-58761.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 2192 | C:\Users\admin\AppData\Local\Temp\Unicorn-65175.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-65175.exe | Unicorn-61641.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 2320 | C:\Users\admin\AppData\Local\Temp\Unicorn-40192.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-40192.exe | 1 (191).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 2340 | C:\Users\admin\AppData\Local\Temp\Unicorn-49021.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-49021.exe | Unicorn-10240.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
12 236
Read events
12 236
Write events
0
Delete events
0
Modification events
Executable files
1 197
Suspicious files
6
Text files
2
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 5972 | Unicorn-51418.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-16473.exe | executable | |
MD5:3B445578849D1377985E903A98D5D3D0 | SHA256:2B20A038C22BD8D8DD4D50985CD1FC982EAE446F83B7C385DA72FB5FC390F9EE | |||
| 4400 | 1 (191).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-27565.exe | executable | |
MD5:A66EDBCFDDD794F91611592A32F91C15 | SHA256:70EDEDB43A1D2DBCBDA7035260504B5E3EEC48A6E162F53E89EC4CF169949A2D | |||
| 4224 | Unicorn-27565.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-51418.exe | executable | |
MD5:E5B70939A02AC6421729FE82F0426CCC | SHA256:63580D1C31255D1EDD3C0C391721F4186105B5F9B606F19FF347BFF1C5037FF8 | |||
| 5972 | Unicorn-51418.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-52196.exe | executable | |
MD5:D94E2F5E255656A580E7C71E7AE5853F | SHA256:654998DF9B71D19668FE1CFAF598828E7F57FFF03A719DC58942DE8FFE7F90CF | |||
| 4400 | 1 (191).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-22315.exe | executable | |
MD5:405D3EE09AF686C829710DB1156F9F3C | SHA256:346DD128DAA9929EDF7D0171ACAFDC5294EC2C09ED0C3FC5ACB1AE0D2549F27A | |||
| 4224 | Unicorn-27565.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-41723.exe | executable | |
MD5:36959A6E89C4AEEFC210A10377FE397B | SHA256:B1E1998121B73A7B19EB75F5D8DF587A93319839630E85B1D13692E4EC0BE630 | |||
| 4224 | Unicorn-27565.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-54603.exe | executable | |
MD5:98464F6D10245DF0CEE8016D55F7DE99 | SHA256:795C3F18AE628132D509C7FD505BB7FE61E43FF07118912F3087D6FD08A52D75 | |||
| 6800 | Unicorn-22315.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-136.exe | executable | |
MD5:8DBE72EC3A7676C6D5E6949E8CC1AD1A | SHA256:CBC0186438C5519CF35C0E72AA734E6E7AA5C17A12FC4FD92253EC192126702B | |||
| 4400 | 1 (191).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-40192.exe | executable | |
MD5:6D2E8657A9BC37A6B39149F616A6BE40 | SHA256:95ABBDEEF61387537B0FC54462FE0E3A8327AB672F680EDAE686EB98C2A4200D | |||
| 4000 | Unicorn-16473.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-15762.exe | executable | |
MD5:A0BA4C15651F8AC5861DA13AD980E72B | SHA256:280134D4261131AC647BE46150ED0C73BB90E5A23023A44FE84D1391A8775C98 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
7
TCP/UDP connections
24
DNS requests
17
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
— | — | GET | 200 | 2.16.168.114:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
5496 | MoUsoCoreWorker.exe | GET | 200 | 2.16.168.114:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
— | — | GET | 200 | 2.16.168.114:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
5960 | backgroundTaskHost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
8284 | SIHClient.exe | GET | 200 | 23.209.214.100:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
8284 | SIHClient.exe | GET | 200 | 23.209.214.100:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 2.16.168.114:80 | crl.microsoft.com | Akamai International B.V. | RU | whitelisted |
5496 | MoUsoCoreWorker.exe | 2.16.168.114:80 | crl.microsoft.com | Akamai International B.V. | RU | whitelisted |
— | — | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
3216 | svchost.exe | 40.113.110.67:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.159.128:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 2.23.77.188:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
5960 | backgroundTaskHost.exe | 20.223.35.26:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |