| File name: | 1 (1221) |
| Full analysis: | https://app.any.run/tasks/02d52993-10fb-4f0f-abe6-a0803ae44d7b |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 10:51:52 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | A340377BBF722A9E295B9AE35B6930A0 |
| SHA1: | A8A46D7DA93EF05E0F7EB88A98751C336B146E66 |
| SHA256: | 2FA68712331E0C6998487A4BDDD42BD2CCB316825250C5A8203F6704971DF62D |
| SSDEEP: | 6144:P7iMGMI+8D3HA+Jcv7egq5Zx5tGqcvJGB9/byeF+Tk/8SwjwpyAvEh8+bhX0sOqa:Pu37RHA++vaxGdha9TyeF+Tx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- Unicorn-16616.exe (PID: 4944)
- Unicorn-1784.exe (PID: 7692)
- Unicorn-18884.exe (PID: 7264)
- 1 (1221).exe (PID: 7440)
- Unicorn-5987.exe (PID: 668)
- Unicorn-14799.exe (PID: 2852)
- Unicorn-50653.exe (PID: 904)
- Unicorn-60471.exe (PID: 7284)
- Unicorn-10367.exe (PID: 5164)
- Unicorn-30041.exe (PID: 4040)
- Unicorn-17714.exe (PID: 6068)
- Unicorn-38209.exe (PID: 6372)
- Unicorn-2229.exe (PID: 6488)
- Unicorn-21415.exe (PID: 5800)
- Unicorn-54031.exe (PID: 536)
- Unicorn-49428.exe (PID: 7012)
- Unicorn-20093.exe (PID: 4448)
- Unicorn-24731.exe (PID: 5892)
- Unicorn-21938.exe (PID: 6032)
- Unicorn-824.exe (PID: 5064)
- Unicorn-24260.exe (PID: 5772)
- Unicorn-60039.exe (PID: 1184)
- Unicorn-4394.exe (PID: 4696)
- Unicorn-1187.exe (PID: 2600)
- Unicorn-632.exe (PID: 6632)
- Unicorn-41473.exe (PID: 6036)
- Unicorn-45292.exe (PID: 3096)
- Unicorn-22361.exe (PID: 4120)
- Unicorn-25930.exe (PID: 7228)
- Unicorn-3092.exe (PID: 7248)
- Unicorn-27959.exe (PID: 7360)
- Unicorn-56185.exe (PID: 976)
- Unicorn-6107.exe (PID: 1452)
- Unicorn-16313.exe (PID: 7272)
- Unicorn-64716.exe (PID: 7676)
- Unicorn-23985.exe (PID: 6272)
- Unicorn-46948.exe (PID: 7508)
- Unicorn-32457.exe (PID: 7544)
- Unicorn-2407.exe (PID: 6040)
- Unicorn-11815.exe (PID: 4336)
- Unicorn-36626.exe (PID: 5868)
- Unicorn-56953.exe (PID: 7528)
- Unicorn-48785.exe (PID: 7536)
- Unicorn-18779.exe (PID: 1244)
- Unicorn-19045.exe (PID: 4452)
- Unicorn-52220.exe (PID: 6028)
- Unicorn-46355.exe (PID: 4920)
- Unicorn-5322.exe (PID: 7892)
- Unicorn-47332.exe (PID: 7972)
- Unicorn-32065.exe (PID: 7896)
- Unicorn-57124.exe (PID: 7880)
- Unicorn-34569.exe (PID: 7328)
- Unicorn-39029.exe (PID: 7332)
- Unicorn-43630.exe (PID: 7860)
- Unicorn-21157.exe (PID: 8176)
- Unicorn-59044.exe (PID: 6584)
- Unicorn-18417.exe (PID: 7352)
- Unicorn-22828.exe (PID: 7944)
- Unicorn-51089.exe (PID: 8188)
- Unicorn-37192.exe (PID: 7312)
- Unicorn-59812.exe (PID: 6620)
- Unicorn-17627.exe (PID: 7820)
- Unicorn-18395.exe (PID: 7300)
- Unicorn-21541.exe (PID: 5332)
- Unicorn-44191.exe (PID: 7952)
- Unicorn-54981.exe (PID: 7432)
- Unicorn-21157.exe (PID: 7348)
- Unicorn-37087.exe (PID: 7524)
- Unicorn-53829.exe (PID: 7884)
- Unicorn-20471.exe (PID: 4620)
- Unicorn-51260.exe (PID: 5384)
- Unicorn-35338.exe (PID: 5400)
- Unicorn-4047.exe (PID: 8372)
- Unicorn-15842.exe (PID: 8392)
- Unicorn-11556.exe (PID: 5008)
- Unicorn-15100.exe (PID: 2984)
- Unicorn-17177.exe (PID: 8400)
- Unicorn-45500.exe (PID: 8956)
- Unicorn-23077.exe (PID: 8076)
- Unicorn-25301.exe (PID: 8972)
- Unicorn-11566.exe (PID: 8980)
- Unicorn-5671.exe (PID: 8352)
- Unicorn-58017.exe (PID: 8416)
- Unicorn-18862.exe (PID: 5260)
- Unicorn-6527.exe (PID: 1328)
- Unicorn-59641.exe (PID: 8068)
- Unicorn-62049.exe (PID: 9116)
- Unicorn-23269.exe (PID: 1040)
- Unicorn-51769.exe (PID: 8588)
- Unicorn-51883.exe (PID: 6740)
- Unicorn-64384.exe (PID: 8720)
- Unicorn-18028.exe (PID: 8576)
- Unicorn-5967.exe (PID: 8884)
- Unicorn-51255.exe (PID: 8668)
- Unicorn-64162.exe (PID: 968)
- Unicorn-6527.exe (PID: 6676)
- Unicorn-62293.exe (PID: 8384)
- Unicorn-26128.exe (PID: 1128)
- Unicorn-39076.exe (PID: 4724)
- Unicorn-7950.exe (PID: 7872)
- Unicorn-38843.exe (PID: 856)
- Unicorn-20553.exe (PID: 9332)
- Unicorn-54613.exe (PID: 2040)
- Unicorn-64851.exe (PID: 8988)
- Unicorn-50769.exe (PID: 8484)
- Unicorn-54488.exe (PID: 8408)
- Unicorn-46896.exe (PID: 6080)
- Unicorn-35485.exe (PID: 10180)
- Unicorn-14955.exe (PID: 4224)
- Unicorn-9563.exe (PID: 8064)
- Unicorn-6704.exe (PID: 10196)
- Unicorn-38941.exe (PID: 8752)
- Unicorn-42038.exe (PID: 8340)
- Unicorn-4867.exe (PID: 10076)
- Unicorn-3471.exe (PID: 1512)
- Unicorn-55774.exe (PID: 616)
- Unicorn-29725.exe (PID: 6656)
- Unicorn-8235.exe (PID: 1912)
- Unicorn-63563.exe (PID: 8248)
- Unicorn-5862.exe (PID: 9520)
- Unicorn-47747.exe (PID: 8296)
- Unicorn-45063.exe (PID: 8768)
- Unicorn-29761.exe (PID: 10156)
- Unicorn-40752.exe (PID: 9080)
- Unicorn-1312.exe (PID: 7832)
- Unicorn-103.exe (PID: 9552)
- Unicorn-20493.exe (PID: 9304)
- Unicorn-44172.exe (PID: 9680)
- Unicorn-57856.exe (PID: 9460)
- Unicorn-43382.exe (PID: 9388)
- Unicorn-59553.exe (PID: 8736)
- Unicorn-20680.exe (PID: 7752)
- Unicorn-14680.exe (PID: 4152)
- Unicorn-49304.exe (PID: 9536)
- Unicorn-64700.exe (PID: 9692)
- Unicorn-49688.exe (PID: 5036)
- Unicorn-33385.exe (PID: 776)
- Unicorn-65028.exe (PID: 11304)
- Unicorn-16402.exe (PID: 9260)
- Unicorn-55111.exe (PID: 10456)
- Unicorn-8536.exe (PID: 11352)
- Unicorn-22739.exe (PID: 10732)
- Unicorn-54696.exe (PID: 9420)
- Unicorn-22413.exe (PID: 8464)
- Unicorn-35510.exe (PID: 11060)
- Unicorn-26749.exe (PID: 9792)
- Unicorn-33666.exe (PID: 4188)
- Unicorn-34717.exe (PID: 10056)
- Unicorn-51032.exe (PID: 9716)
- Unicorn-18655.exe (PID: 10748)
- Unicorn-31933.exe (PID: 8744)
- Unicorn-50139.exe (PID: 2236)
- Unicorn-15724.exe (PID: 3896)
- Unicorn-15676.exe (PID: 8524)
- Unicorn-49588.exe (PID: 12628)
- Unicorn-8742.exe (PID: 10216)
- Unicorn-28171.exe (PID: 12668)
- Unicorn-59169.exe (PID: 8492)
- Unicorn-36475.exe (PID: 10720)
- Unicorn-22228.exe (PID: 4572)
- Unicorn-36667.exe (PID: 12328)
- Unicorn-30087.exe (PID: 4284)
- Unicorn-50197.exe (PID: 10592)
- Unicorn-42339.exe (PID: 5132)
- Unicorn-62759.exe (PID: 10288)
- Unicorn-18447.exe (PID: 8728)
- Unicorn-15536.exe (PID: 10100)
- Unicorn-24554.exe (PID: 9252)
- Unicorn-38173.exe (PID: 8556)
- Unicorn-33269.exe (PID: 9156)
- Unicorn-3523.exe (PID: 9636)
- Unicorn-35510.exe (PID: 10416)
- Unicorn-16631.exe (PID: 9504)
- Unicorn-27346.exe (PID: 11980)
- Unicorn-57680.exe (PID: 10784)
- Unicorn-16055.exe (PID: 11236)
- Unicorn-14549.exe (PID: 7804)
- Unicorn-752.exe (PID: 1116)
- Unicorn-33438.exe (PID: 14184)
- Unicorn-41606.exe (PID: 14192)
- Unicorn-368.exe (PID: 11324)
- Unicorn-19061.exe (PID: 10820)
- Unicorn-35964.exe (PID: 5428)
- Unicorn-31129.exe (PID: 11740)
- Unicorn-53473.exe (PID: 13292)
- Unicorn-22739.exe (PID: 10740)
- Unicorn-62497.exe (PID: 12464)
- Unicorn-4260.exe (PID: 11868)
- Unicorn-36284.exe (PID: 10884)
- Unicorn-29910.exe (PID: 10472)
- Unicorn-22005.exe (PID: 14200)
- Unicorn-15183.exe (PID: 6268)
- Unicorn-4429.exe (PID: 15136)
- Unicorn-28555.exe (PID: 12568)
- Unicorn-4429.exe (PID: 15144)
- Unicorn-15894.exe (PID: 15152)
- Unicorn-24309.exe (PID: 11576)
- Unicorn-50778.exe (PID: 9600)
- Unicorn-36475.exe (PID: 10712)
- Unicorn-42117.exe (PID: 9732)
- Unicorn-61992.exe (PID: 11244)
- Unicorn-38268.exe (PID: 12916)
- Unicorn-7828.exe (PID: 14900)
- Unicorn-1414.exe (PID: 13812)
- Unicorn-36232.exe (PID: 9496)
- Unicorn-19820.exe (PID: 12860)
- Unicorn-64960.exe (PID: 8876)
Executable content was dropped or overwritten
- Unicorn-1784.exe (PID: 7692)
- Unicorn-18884.exe (PID: 7264)
- Unicorn-17714.exe (PID: 6068)
- Unicorn-5987.exe (PID: 668)
- Unicorn-16616.exe (PID: 4944)
- 1 (1221).exe (PID: 7440)
- Unicorn-60471.exe (PID: 7284)
- Unicorn-50653.exe (PID: 904)
- Unicorn-10367.exe (PID: 5164)
- Unicorn-38209.exe (PID: 6372)
- Unicorn-14799.exe (PID: 2852)
- Unicorn-30041.exe (PID: 4040)
- Unicorn-21415.exe (PID: 5800)
- Unicorn-54031.exe (PID: 536)
- Unicorn-2229.exe (PID: 6488)
- Unicorn-20093.exe (PID: 4448)
- Unicorn-49428.exe (PID: 7012)
- Unicorn-23985.exe (PID: 6272)
- Unicorn-24731.exe (PID: 5892)
- Unicorn-21938.exe (PID: 6032)
- Unicorn-824.exe (PID: 5064)
- Unicorn-24260.exe (PID: 5772)
- Unicorn-60039.exe (PID: 1184)
- Unicorn-4394.exe (PID: 4696)
- Unicorn-1187.exe (PID: 2600)
- Unicorn-41473.exe (PID: 6036)
- Unicorn-11815.exe (PID: 4336)
- Unicorn-22361.exe (PID: 4120)
- Unicorn-25930.exe (PID: 7228)
- Unicorn-36626.exe (PID: 5868)
- Unicorn-3092.exe (PID: 7248)
- Unicorn-16313.exe (PID: 7272)
- Unicorn-56185.exe (PID: 976)
- Unicorn-6107.exe (PID: 1452)
- Unicorn-46948.exe (PID: 7508)
- Unicorn-64716.exe (PID: 7676)
- Unicorn-2407.exe (PID: 6040)
- Unicorn-18779.exe (PID: 1244)
- Unicorn-32457.exe (PID: 7544)
- Unicorn-56953.exe (PID: 7528)
- Unicorn-48785.exe (PID: 7536)
- Unicorn-19045.exe (PID: 4452)
- Unicorn-52220.exe (PID: 6028)
- Unicorn-57124.exe (PID: 7880)
- Unicorn-46355.exe (PID: 4920)
- Unicorn-47332.exe (PID: 7972)
- Unicorn-5322.exe (PID: 7892)
- Unicorn-32065.exe (PID: 7896)
- Unicorn-632.exe (PID: 6632)
- Unicorn-34569.exe (PID: 7328)
- Unicorn-39029.exe (PID: 7332)
- Unicorn-18417.exe (PID: 7352)
- Unicorn-43630.exe (PID: 7860)
- Unicorn-21157.exe (PID: 8176)
- Unicorn-44191.exe (PID: 7952)
- Unicorn-51089.exe (PID: 8188)
- Unicorn-22828.exe (PID: 7944)
- Unicorn-59812.exe (PID: 6620)
- Unicorn-37192.exe (PID: 7312)
- Unicorn-21541.exe (PID: 5332)
- Unicorn-17627.exe (PID: 7820)
- Unicorn-18395.exe (PID: 7300)
- Unicorn-1312.exe (PID: 7832)
- Unicorn-53829.exe (PID: 7884)
- Unicorn-6527.exe (PID: 6676)
- Unicorn-20471.exe (PID: 4620)
- Unicorn-54981.exe (PID: 7432)
- Unicorn-37087.exe (PID: 7524)
- Unicorn-21157.exe (PID: 7348)
- Unicorn-35338.exe (PID: 5400)
- Unicorn-15842.exe (PID: 8392)
- Unicorn-4047.exe (PID: 8372)
- Unicorn-17177.exe (PID: 8400)
- Unicorn-51260.exe (PID: 5384)
- Unicorn-45292.exe (PID: 3096)
- Unicorn-11556.exe (PID: 5008)
- Unicorn-15100.exe (PID: 2984)
- Unicorn-27959.exe (PID: 7360)
- Unicorn-11566.exe (PID: 8980)
- Unicorn-5671.exe (PID: 8352)
- Unicorn-45500.exe (PID: 8956)
- Unicorn-18862.exe (PID: 5260)
- Unicorn-58017.exe (PID: 8416)
- Unicorn-6527.exe (PID: 1328)
- Unicorn-59641.exe (PID: 8068)
- Unicorn-62049.exe (PID: 9116)
- Unicorn-23269.exe (PID: 1040)
- Unicorn-51769.exe (PID: 8588)
- Unicorn-51883.exe (PID: 6740)
- Unicorn-64384.exe (PID: 8720)
- Unicorn-18028.exe (PID: 8576)
- Unicorn-5967.exe (PID: 8884)
- Unicorn-51255.exe (PID: 8668)
- Unicorn-64162.exe (PID: 968)
- Unicorn-8235.exe (PID: 1912)
- Unicorn-26128.exe (PID: 1128)
- Unicorn-62293.exe (PID: 8384)
- Unicorn-39076.exe (PID: 4724)
- Unicorn-7950.exe (PID: 7872)
- Unicorn-38843.exe (PID: 856)
- Unicorn-20553.exe (PID: 9332)
- Unicorn-14955.exe (PID: 4224)
- Unicorn-54613.exe (PID: 2040)
- Unicorn-64851.exe (PID: 8988)
- Unicorn-50769.exe (PID: 8484)
- Unicorn-54488.exe (PID: 8408)
- Unicorn-46896.exe (PID: 6080)
- Unicorn-35485.exe (PID: 10180)
- Unicorn-9563.exe (PID: 8064)
- Unicorn-6704.exe (PID: 10196)
- Unicorn-8742.exe (PID: 10216)
- Unicorn-38941.exe (PID: 8752)
- Unicorn-7420.exe (PID: 8800)
- Unicorn-42038.exe (PID: 8340)
- Unicorn-3471.exe (PID: 1512)
- Unicorn-4867.exe (PID: 10076)
- Unicorn-29725.exe (PID: 6656)
- Unicorn-55774.exe (PID: 616)
- Unicorn-63563.exe (PID: 8248)
- Unicorn-5862.exe (PID: 9520)
- Unicorn-47747.exe (PID: 8296)
- Unicorn-45063.exe (PID: 8768)
- Unicorn-29761.exe (PID: 10156)
- Unicorn-40752.exe (PID: 9080)
- Unicorn-103.exe (PID: 9552)
- Unicorn-44172.exe (PID: 9680)
- Unicorn-57856.exe (PID: 9460)
- Unicorn-43382.exe (PID: 9388)
- Unicorn-59553.exe (PID: 8736)
- Unicorn-20493.exe (PID: 9304)
- Unicorn-20680.exe (PID: 7752)
- Unicorn-14680.exe (PID: 4152)
- Unicorn-64700.exe (PID: 9692)
- Unicorn-49688.exe (PID: 5036)
- Unicorn-33385.exe (PID: 776)
- Unicorn-65028.exe (PID: 11304)
- Unicorn-16402.exe (PID: 9260)
- Unicorn-55111.exe (PID: 10456)
- Unicorn-8536.exe (PID: 11352)
- Unicorn-22739.exe (PID: 10732)
- Unicorn-22413.exe (PID: 8464)
- Unicorn-54696.exe (PID: 9420)
- Unicorn-34577.exe (PID: 9288)
- Unicorn-2842.exe (PID: 10652)
- Unicorn-35510.exe (PID: 11060)
- Unicorn-18655.exe (PID: 10748)
- Unicorn-26749.exe (PID: 9792)
- Unicorn-36232.exe (PID: 9496)
- Unicorn-29185.exe (PID: 9148)
- Unicorn-33666.exe (PID: 4188)
- Unicorn-51032.exe (PID: 9716)
- Unicorn-34717.exe (PID: 10056)
- Unicorn-62759.exe (PID: 10288)
- Unicorn-50139.exe (PID: 2236)
- Unicorn-15724.exe (PID: 3896)
- Unicorn-49588.exe (PID: 12628)
- Unicorn-15676.exe (PID: 8524)
- Unicorn-28555.exe (PID: 12568)
- Unicorn-59169.exe (PID: 8492)
- Unicorn-44369.exe (PID: 8780)
- Unicorn-22228.exe (PID: 4572)
- Unicorn-36475.exe (PID: 10720)
- Unicorn-28171.exe (PID: 12668)
- Unicorn-36667.exe (PID: 12328)
- Unicorn-30087.exe (PID: 4284)
- Unicorn-42339.exe (PID: 5132)
- Unicorn-368.exe (PID: 11324)
- Unicorn-50197.exe (PID: 10592)
- Unicorn-15536.exe (PID: 10100)
- Unicorn-38173.exe (PID: 8556)
- Unicorn-59044.exe (PID: 6584)
- Unicorn-24554.exe (PID: 9252)
- Unicorn-18447.exe (PID: 8728)
- Unicorn-33269.exe (PID: 9156)
- Unicorn-3523.exe (PID: 9636)
- Unicorn-16631.exe (PID: 9504)
- Unicorn-57680.exe (PID: 10784)
- Unicorn-35510.exe (PID: 10416)
- Unicorn-16055.exe (PID: 11236)
- Unicorn-14549.exe (PID: 7804)
- Unicorn-19061.exe (PID: 10820)
- Unicorn-35964.exe (PID: 5428)
- Unicorn-31129.exe (PID: 11740)
- Unicorn-53473.exe (PID: 13292)
- Unicorn-22739.exe (PID: 10740)
- Unicorn-62497.exe (PID: 12464)
- Unicorn-4260.exe (PID: 11868)
- Unicorn-29910.exe (PID: 10472)
- Unicorn-36284.exe (PID: 10884)
- Unicorn-15183.exe (PID: 6268)
- Unicorn-50778.exe (PID: 9600)
- Unicorn-24309.exe (PID: 11576)
- Unicorn-36475.exe (PID: 10712)
- Unicorn-42117.exe (PID: 9732)
- Unicorn-19820.exe (PID: 12860)
- Unicorn-5360.exe (PID: 9700)
- Unicorn-38268.exe (PID: 12916)
- Unicorn-1414.exe (PID: 13812)
- Unicorn-33952.exe (PID: 10584)
- Unicorn-64960.exe (PID: 8876)
- Unicorn-41606.exe (PID: 14192)
- Unicorn-49304.exe (PID: 9536)
- Unicorn-33438.exe (PID: 14184)
- Unicorn-5337.exe (PID: 3364)
- Unicorn-28831.exe (PID: 8112)
- Unicorn-38114.exe (PID: 13244)
- Unicorn-27244.exe (PID: 10140)
- Unicorn-25301.exe (PID: 8972)
- Unicorn-752.exe (PID: 1116)
- Unicorn-22005.exe (PID: 14200)
- Unicorn-4429.exe (PID: 15144)
- Unicorn-15894.exe (PID: 15152)
- Unicorn-53473.exe (PID: 13300)
- Unicorn-26632.exe (PID: 5084)
- Unicorn-65498.exe (PID: 14768)
- Unicorn-29824.exe (PID: 12392)
- Unicorn-41357.exe (PID: 13032)
- Unicorn-7470.exe (PID: 13612)
- Unicorn-56040.exe (PID: 9476)
- Unicorn-41679.exe (PID: 14312)
- Unicorn-51008.exe (PID: 14248)
- Unicorn-31933.exe (PID: 8744)
- Unicorn-21813.exe (PID: 14304)
- Unicorn-36283.exe (PID: 9372)
- Unicorn-10595.exe (PID: 14908)
- Unicorn-58348.exe (PID: 13376)
- Unicorn-8351.exe (PID: 14784)
- Unicorn-3085.exe (PID: 13772)
- Unicorn-43574.exe (PID: 9352)
- Unicorn-4429.exe (PID: 15136)
- Unicorn-7828.exe (PID: 14900)
- Unicorn-21259.exe (PID: 14228)
- Unicorn-28248.exe (PID: 15012)
- Unicorn-59338.exe (PID: 13276)
- Unicorn-24640.exe (PID: 13072)
- Unicorn-43547.exe (PID: 3760)
- Unicorn-39005.exe (PID: 11844)
- Unicorn-31604.exe (PID: 12124)
- Unicorn-10168.exe (PID: 11548)
- Unicorn-13158.exe (PID: 8864)
- Unicorn-24196.exe (PID: 13696)
- Unicorn-40308.exe (PID: 15056)
- Unicorn-56777.exe (PID: 8152)
- Unicorn-34257.exe (PID: 14168)
- Unicorn-56053.exe (PID: 12376)
- Unicorn-23664.exe (PID: 10812)
- Unicorn-3506.exe (PID: 12296)
- Unicorn-61992.exe (PID: 11244)
- Unicorn-49546.exe (PID: 13820)
- Unicorn-23157.exe (PID: 13648)
- Unicorn-7390.exe (PID: 11204)
- Unicorn-15829.exe (PID: 13688)
- Unicorn-5550.exe (PID: 13088)
- Unicorn-37470.exe (PID: 12060)
- Unicorn-45353.exe (PID: 15324)
- Unicorn-34590.exe (PID: 7704)
- Unicorn-26002.exe (PID: 15572)
- Unicorn-21425.exe (PID: 11664)
- Unicorn-10573.exe (PID: 12356)
- Unicorn-48421.exe (PID: 14968)
- Unicorn-21103.exe (PID: 3176)
- Unicorn-27346.exe (PID: 11980)
- Unicorn-16055.exe (PID: 11220)
- Unicorn-30418.exe (PID: 8016)
- Unicorn-49910.exe (PID: 9756)
- Unicorn-7643.exe (PID: 10132)
- Unicorn-32657.exe (PID: 11148)
- Unicorn-10168.exe (PID: 4528)
- Unicorn-41414.exe (PID: 14296)
- Unicorn-18151.exe (PID: 16520)
- Unicorn-25445.exe (PID: 10396)
Executes application which crashes
- Unicorn-6123.exe (PID: 10968)
- Unicorn-29185.exe (PID: 9148)
INFO
Reads the computer name
- 1 (1221).exe (PID: 7440)
- Unicorn-1784.exe (PID: 7692)
- Unicorn-16616.exe (PID: 4944)
- Unicorn-5987.exe (PID: 668)
- Unicorn-18884.exe (PID: 7264)
- Unicorn-60471.exe (PID: 7284)
- Unicorn-17714.exe (PID: 6068)
- Unicorn-14799.exe (PID: 2852)
- Unicorn-50653.exe (PID: 904)
- Unicorn-21415.exe (PID: 5800)
- Unicorn-38209.exe (PID: 6372)
- Unicorn-30041.exe (PID: 4040)
- Unicorn-54031.exe (PID: 536)
- Unicorn-10367.exe (PID: 5164)
- Unicorn-2229.exe (PID: 6488)
- Unicorn-23985.exe (PID: 6272)
- Unicorn-21938.exe (PID: 6032)
- Unicorn-824.exe (PID: 5064)
- Unicorn-24731.exe (PID: 5892)
- Unicorn-45292.exe (PID: 3096)
- Unicorn-22361.exe (PID: 4120)
- Unicorn-60039.exe (PID: 1184)
- Unicorn-1187.exe (PID: 2600)
- Unicorn-41473.exe (PID: 6036)
- Unicorn-36626.exe (PID: 5868)
- Unicorn-3092.exe (PID: 7248)
- Unicorn-16313.exe (PID: 7272)
- Unicorn-56185.exe (PID: 976)
- Unicorn-46948.exe (PID: 7508)
- Unicorn-2407.exe (PID: 6040)
- Unicorn-48785.exe (PID: 7536)
- Unicorn-19045.exe (PID: 4452)
- Unicorn-18779.exe (PID: 1244)
- Unicorn-32065.exe (PID: 7896)
- Unicorn-46355.exe (PID: 4920)
- Unicorn-47332.exe (PID: 7972)
- Unicorn-43630.exe (PID: 7860)
- Unicorn-59044.exe (PID: 6584)
- Unicorn-34569.exe (PID: 7328)
- Unicorn-18417.exe (PID: 7352)
- Unicorn-22828.exe (PID: 7944)
- Unicorn-37192.exe (PID: 7312)
- Unicorn-59812.exe (PID: 6620)
- Unicorn-44191.exe (PID: 7952)
- Unicorn-17627.exe (PID: 7820)
- Unicorn-54981.exe (PID: 7432)
- Unicorn-20471.exe (PID: 4620)
- Unicorn-21157.exe (PID: 7348)
- Unicorn-51260.exe (PID: 5384)
- Unicorn-37087.exe (PID: 7524)
- Unicorn-11556.exe (PID: 5008)
- Unicorn-15100.exe (PID: 2984)
- Unicorn-23077.exe (PID: 8076)
- Unicorn-17177.exe (PID: 8400)
- Unicorn-25301.exe (PID: 8972)
- Unicorn-58017.exe (PID: 8416)
- Unicorn-23269.exe (PID: 1040)
- Unicorn-51769.exe (PID: 8588)
- Unicorn-6527.exe (PID: 1328)
- Unicorn-64384.exe (PID: 8720)
- Unicorn-5967.exe (PID: 8884)
- Unicorn-18028.exe (PID: 8576)
- Unicorn-39076.exe (PID: 4724)
- Unicorn-7950.exe (PID: 7872)
- Unicorn-38843.exe (PID: 856)
- Unicorn-26128.exe (PID: 1128)
- Unicorn-54488.exe (PID: 8408)
- Unicorn-20553.exe (PID: 9332)
- Unicorn-35485.exe (PID: 10180)
- Unicorn-38941.exe (PID: 8752)
- Unicorn-9563.exe (PID: 8064)
- Unicorn-3471.exe (PID: 1512)
- Unicorn-20680.exe (PID: 7752)
- Unicorn-55774.exe (PID: 616)
- Unicorn-4867.exe (PID: 10076)
- Unicorn-5862.exe (PID: 9520)
- Unicorn-63563.exe (PID: 8248)
- Unicorn-57856.exe (PID: 9460)
- Unicorn-44172.exe (PID: 9680)
- Unicorn-29761.exe (PID: 10156)
- Unicorn-49304.exe (PID: 9536)
- Unicorn-20493.exe (PID: 9304)
- Unicorn-43382.exe (PID: 9388)
- Unicorn-103.exe (PID: 9552)
- Unicorn-14680.exe (PID: 4152)
- Unicorn-64700.exe (PID: 9692)
- Unicorn-33385.exe (PID: 776)
- Unicorn-15724.exe (PID: 3896)
- Unicorn-16402.exe (PID: 9260)
- Unicorn-55111.exe (PID: 10456)
- Unicorn-18655.exe (PID: 10748)
- Unicorn-35510.exe (PID: 11060)
- Unicorn-22739.exe (PID: 10732)
- Unicorn-2842.exe (PID: 10652)
- Unicorn-34577.exe (PID: 9288)
- Unicorn-36232.exe (PID: 9496)
- Unicorn-33666.exe (PID: 4188)
- Unicorn-62759.exe (PID: 10288)
- Unicorn-31933.exe (PID: 8744)
- Unicorn-59169.exe (PID: 8492)
- Unicorn-50139.exe (PID: 2236)
- Unicorn-51032.exe (PID: 9716)
- Unicorn-44369.exe (PID: 8780)
- Unicorn-14549.exe (PID: 7804)
- Unicorn-4260.exe (PID: 11868)
- Unicorn-18447.exe (PID: 8728)
- Unicorn-24309.exe (PID: 11576)
- Unicorn-28171.exe (PID: 12668)
- Unicorn-16055.exe (PID: 11236)
- Unicorn-36475.exe (PID: 10720)
- Unicorn-64960.exe (PID: 8876)
- Unicorn-30087.exe (PID: 4284)
- Unicorn-19061.exe (PID: 10820)
- Unicorn-42339.exe (PID: 5132)
- Unicorn-3523.exe (PID: 9636)
- Unicorn-16631.exe (PID: 9504)
- Unicorn-57680.exe (PID: 10784)
- Unicorn-29910.exe (PID: 10472)
- Unicorn-31129.exe (PID: 11740)
- Unicorn-53473.exe (PID: 13292)
- Unicorn-50778.exe (PID: 9600)
- Unicorn-23664.exe (PID: 10812)
- Unicorn-15183.exe (PID: 6268)
- Unicorn-5360.exe (PID: 9700)
- Unicorn-36475.exe (PID: 10712)
- Unicorn-61992.exe (PID: 11244)
- Unicorn-7828.exe (PID: 14900)
- Unicorn-4429.exe (PID: 15144)
- Unicorn-19820.exe (PID: 12860)
- Unicorn-45353.exe (PID: 15324)
- Unicorn-33952.exe (PID: 10584)
The sample compiled with chinese language support
- 1 (1221).exe (PID: 7440)
Checks supported languages
- 1 (1221).exe (PID: 7440)
- Unicorn-1784.exe (PID: 7692)
- Unicorn-16616.exe (PID: 4944)
- Unicorn-5987.exe (PID: 668)
- Unicorn-18884.exe (PID: 7264)
- Unicorn-17714.exe (PID: 6068)
- Unicorn-50653.exe (PID: 904)
- Unicorn-60471.exe (PID: 7284)
- Unicorn-14799.exe (PID: 2852)
- Unicorn-10367.exe (PID: 5164)
- Unicorn-54031.exe (PID: 536)
- Unicorn-30041.exe (PID: 4040)
- Unicorn-38209.exe (PID: 6372)
- Unicorn-2229.exe (PID: 6488)
- Unicorn-21415.exe (PID: 5800)
- Unicorn-21938.exe (PID: 6032)
- Unicorn-824.exe (PID: 5064)
- Unicorn-20093.exe (PID: 4448)
- Unicorn-49428.exe (PID: 7012)
- Unicorn-24731.exe (PID: 5892)
- Unicorn-23985.exe (PID: 6272)
- Unicorn-24260.exe (PID: 5772)
- Unicorn-41473.exe (PID: 6036)
- Unicorn-36626.exe (PID: 5868)
- Unicorn-45292.exe (PID: 3096)
- Unicorn-4394.exe (PID: 4696)
- Unicorn-22361.exe (PID: 4120)
- Unicorn-25930.exe (PID: 7228)
- Unicorn-632.exe (PID: 6632)
- Unicorn-16313.exe (PID: 7272)
- Unicorn-46948.exe (PID: 7508)
- Unicorn-56185.exe (PID: 976)
- Unicorn-27959.exe (PID: 7360)
- Unicorn-18779.exe (PID: 1244)
- Unicorn-64716.exe (PID: 7676)
- Unicorn-19045.exe (PID: 4452)
- Unicorn-37087.exe (PID: 7524)
- Unicorn-2407.exe (PID: 6040)
- Unicorn-48785.exe (PID: 7536)
- Unicorn-52220.exe (PID: 6028)
- Unicorn-22828.exe (PID: 7944)
- Unicorn-32065.exe (PID: 7896)
- Unicorn-46355.exe (PID: 4920)
- Unicorn-17627.exe (PID: 7820)
- Unicorn-43630.exe (PID: 7860)
- Unicorn-34569.exe (PID: 7328)
- Unicorn-18417.exe (PID: 7352)
- Unicorn-21157.exe (PID: 7348)
- Unicorn-1312.exe (PID: 7832)
- Unicorn-59044.exe (PID: 6584)
- Unicorn-21541.exe (PID: 5332)
- Unicorn-21157.exe (PID: 8176)
- Unicorn-37192.exe (PID: 7312)
- Unicorn-51089.exe (PID: 8188)
- Unicorn-59812.exe (PID: 6620)
- Unicorn-26128.exe (PID: 1128)
- Unicorn-6527.exe (PID: 6676)
- Unicorn-6527.exe (PID: 1328)
- Unicorn-46896.exe (PID: 6080)
- Unicorn-3211.exe (PID: 7208)
- Unicorn-35338.exe (PID: 5400)
- Unicorn-59641.exe (PID: 8068)
- Unicorn-20471.exe (PID: 4620)
- Unicorn-11556.exe (PID: 5008)
- Unicorn-33666.exe (PID: 4188)
- Unicorn-9563.exe (PID: 8064)
- Unicorn-50139.exe (PID: 2236)
- Unicorn-18862.exe (PID: 5260)
- Unicorn-52952.exe (PID: 8080)
- Unicorn-15183.exe (PID: 6268)
- Unicorn-63563.exe (PID: 8248)
- Unicorn-64162.exe (PID: 968)
- Unicorn-23269.exe (PID: 1040)
- Unicorn-15724.exe (PID: 3896)
- Unicorn-47747.exe (PID: 8296)
- Unicorn-17177.exe (PID: 8400)
- Unicorn-58017.exe (PID: 8416)
- Unicorn-54488.exe (PID: 8408)
- Unicorn-22413.exe (PID: 8464)
- Unicorn-62293.exe (PID: 8384)
- Unicorn-15842.exe (PID: 8392)
- Unicorn-18028.exe (PID: 8576)
- Unicorn-59169.exe (PID: 8492)
- Unicorn-15676.exe (PID: 8524)
- Unicorn-51255.exe (PID: 8668)
- Unicorn-45500.exe (PID: 8956)
- Unicorn-25301.exe (PID: 8972)
- Unicorn-38941.exe (PID: 8752)
- Unicorn-31933.exe (PID: 8744)
- Unicorn-45063.exe (PID: 8768)
- Unicorn-44369.exe (PID: 8780)
- Unicorn-7420.exe (PID: 8800)
- Unicorn-13158.exe (PID: 8864)
- Unicorn-51769.exe (PID: 8588)
- Unicorn-64960.exe (PID: 8876)
- Unicorn-64851.exe (PID: 8988)
- Unicorn-5967.exe (PID: 8884)
- Unicorn-18447.exe (PID: 8728)
- Unicorn-65256.exe (PID: 9060)
- Unicorn-33269.exe (PID: 9156)
- Unicorn-42038.exe (PID: 8340)
- Unicorn-29185.exe (PID: 9148)
- Unicorn-40752.exe (PID: 9080)
- Unicorn-20680.exe (PID: 7752)
- Unicorn-14549.exe (PID: 7804)
- Unicorn-29725.exe (PID: 6656)
- Unicorn-55774.exe (PID: 616)
- Unicorn-22901.exe (PID: 2192)
- Unicorn-54613.exe (PID: 2040)
- Unicorn-34577.exe (PID: 9288)
- Unicorn-20493.exe (PID: 9304)
- Unicorn-61586.exe (PID: 9316)
- Unicorn-20553.exe (PID: 9332)
- Unicorn-24554.exe (PID: 9252)
- Unicorn-36283.exe (PID: 9372)
- Unicorn-43382.exe (PID: 9388)
- Unicorn-54696.exe (PID: 9420)
- Unicorn-30493.exe (PID: 9436)
- Unicorn-43574.exe (PID: 9352)
- Unicorn-57856.exe (PID: 9460)
- Unicorn-36232.exe (PID: 9496)
- Unicorn-56040.exe (PID: 9480)
- Unicorn-16631.exe (PID: 9504)
- Unicorn-11727.exe (PID: 9528)
- Unicorn-5360.exe (PID: 9700)
- Unicorn-25890.exe (PID: 9644)
- Unicorn-51032.exe (PID: 9716)
- Unicorn-13528.exe (PID: 9744)
- Unicorn-42117.exe (PID: 9732)
- Unicorn-44172.exe (PID: 9680)
- Unicorn-49910.exe (PID: 9756)
- Unicorn-26749.exe (PID: 9792)
- Unicorn-64700.exe (PID: 9692)
- Unicorn-35236.exe (PID: 9572)
- Unicorn-64767.exe (PID: 9708)
- Unicorn-56040.exe (PID: 9476)
- Unicorn-23949.exe (PID: 9784)
- Unicorn-35485.exe (PID: 10180)
- Unicorn-49304.exe (PID: 9536)
- Unicorn-3523.exe (PID: 9636)
- Unicorn-50778.exe (PID: 9600)
- Unicorn-3907.exe (PID: 9988)
- Unicorn-6704.exe (PID: 10196)
- Unicorn-32561.exe (PID: 10172)
- Unicorn-40170.exe (PID: 7404)
- Unicorn-64732.exe (PID: 6108)
- Unicorn-18106.exe (PID: 10016)
- Unicorn-58069.exe (PID: 10024)
- Unicorn-27244.exe (PID: 10140)
- Unicorn-14680.exe (PID: 4152)
- Unicorn-29761.exe (PID: 10156)
- Unicorn-55952.exe (PID: 7144)
- Unicorn-3736.exe (PID: 7428)
- Unicorn-44577.exe (PID: 2332)
- Unicorn-36409.exe (PID: 3032)
- Unicorn-18826.exe (PID: 10164)
- Unicorn-25445.exe (PID: 10396)
- Unicorn-51407.exe (PID: 10432)
- Unicorn-44556.exe (PID: 10440)
- Unicorn-62759.exe (PID: 10288)
- Unicorn-55111.exe (PID: 10456)
- Unicorn-29910.exe (PID: 10472)
- Unicorn-35510.exe (PID: 10416)
- Unicorn-4203.exe (PID: 10576)
- Unicorn-25501.exe (PID: 10620)
- Unicorn-20274.exe (PID: 10612)
- Unicorn-33952.exe (PID: 10584)
- Unicorn-50197.exe (PID: 10592)
- Unicorn-36475.exe (PID: 10712)
- Unicorn-36475.exe (PID: 10720)
- Unicorn-2842.exe (PID: 10652)
- Unicorn-38713.exe (PID: 10692)
- Unicorn-14409.exe (PID: 10600)
- Unicorn-22739.exe (PID: 10740)
- Unicorn-40471.exe (PID: 10448)
- Unicorn-38256.exe (PID: 10704)
- Unicorn-33385.exe (PID: 776)
- Unicorn-38137.exe (PID: 10800)
- Unicorn-19061.exe (PID: 10820)
- Unicorn-29502.exe (PID: 10552)
- Unicorn-46446.exe (PID: 10424)
- Unicorn-65033.exe (PID: 10900)
- Unicorn-6616.exe (PID: 10848)
- Unicorn-6123.exe (PID: 10968)
- Unicorn-35510.exe (PID: 11060)
- Unicorn-23664.exe (PID: 10812)
- Unicorn-60456.exe (PID: 10840)
- Unicorn-51541.exe (PID: 10864)
- Unicorn-16055.exe (PID: 11220)
- Unicorn-7390.exe (PID: 11204)
- Unicorn-10190.exe (PID: 11212)
- Unicorn-61992.exe (PID: 11244)
- Unicorn-16055.exe (PID: 11228)
- Unicorn-16055.exe (PID: 11236)
- Unicorn-22739.exe (PID: 10732)
- Unicorn-2916.exe (PID: 10992)
- Unicorn-368.exe (PID: 11324)
- Unicorn-8536.exe (PID: 11352)
- Unicorn-38429.exe (PID: 11412)
- Unicorn-30087.exe (PID: 4284)
- Unicorn-752.exe (PID: 1116)
- Unicorn-3012.exe (PID: 11552)
- Unicorn-24309.exe (PID: 11576)
- Unicorn-24309.exe (PID: 11584)
- Unicorn-22250.exe (PID: 8004)
- Unicorn-36284.exe (PID: 10884)
- Unicorn-30662.exe (PID: 11680)
- Unicorn-12654.exe (PID: 11700)
- Unicorn-31129.exe (PID: 11740)
- Unicorn-24531.exe (PID: 11656)
- Unicorn-39005.exe (PID: 11836)
- Unicorn-39790.exe (PID: 11920)
- Unicorn-27346.exe (PID: 11980)
- Unicorn-28555.exe (PID: 12568)
- Unicorn-37470.exe (PID: 12060)
- Unicorn-25675.exe (PID: 11992)
- Unicorn-62166.exe (PID: 12032)
- Unicorn-49588.exe (PID: 12628)
- Unicorn-36666.exe (PID: 12052)
- Unicorn-12269.exe (PID: 12068)
- Unicorn-17869.exe (PID: 12076)
- Unicorn-28171.exe (PID: 12668)
- Unicorn-17869.exe (PID: 12092)
- Unicorn-13038.exe (PID: 12108)
- Unicorn-8632.exe (PID: 12116)
- Unicorn-13998.exe (PID: 12236)
- Unicorn-28.exe (PID: 12260)
- Unicorn-40364.exe (PID: 12268)
- Unicorn-30662.exe (PID: 12244)
- Unicorn-60544.exe (PID: 10232)
- Unicorn-47439.exe (PID: 6652)
- Unicorn-37937.exe (PID: 11256)
- Unicorn-10168.exe (PID: 7728)
- Unicorn-21103.exe (PID: 3176)
- Unicorn-5337.exe (PID: 3364)
- Unicorn-22228.exe (PID: 4572)
- Unicorn-35964.exe (PID: 5428)
- Unicorn-35964.exe (PID: 12304)
- Unicorn-3506.exe (PID: 12296)
- Unicorn-26312.exe (PID: 12312)
- Unicorn-41829.exe (PID: 12320)
- Unicorn-36667.exe (PID: 12328)
- Unicorn-10573.exe (PID: 12356)
- Unicorn-29824.exe (PID: 12392)
- Unicorn-62497.exe (PID: 12464)
- Unicorn-56566.exe (PID: 12544)
- Unicorn-31383.exe (PID: 12952)
- Unicorn-7449.exe (PID: 12988)
- Unicorn-43421.exe (PID: 12968)
- Unicorn-43421.exe (PID: 12960)
- Unicorn-38223.exe (PID: 13128)
- Unicorn-4024.exe (PID: 13156)
- Unicorn-41191.exe (PID: 13004)
- Unicorn-5550.exe (PID: 13088)
- Unicorn-38268.exe (PID: 12916)
- Unicorn-4481.exe (PID: 13144)
- Unicorn-49961.exe (PID: 13172)
- Unicorn-38114.exe (PID: 13244)
- Unicorn-59338.exe (PID: 13276)
- Unicorn-19820.exe (PID: 12860)
- Unicorn-43421.exe (PID: 12996)
- Unicorn-42944.exe (PID: 13232)
- Unicorn-58348.exe (PID: 13376)
- Unicorn-51798.exe (PID: 11948)
- Unicorn-21970.exe (PID: 13444)
- Unicorn-46266.exe (PID: 12164)
- Unicorn-41606.exe (PID: 14192)
- Unicorn-17263.exe (PID: 12720)
- Unicorn-34183.exe (PID: 12944)
- Unicorn-33438.exe (PID: 14184)
- Unicorn-37107.exe (PID: 13020)
- Unicorn-40143.exe (PID: 13620)
- Unicorn-32551.exe (PID: 13656)
- Unicorn-15829.exe (PID: 13688)
- Unicorn-41357.exe (PID: 13032)
- Unicorn-50673.exe (PID: 13284)
- Unicorn-30232.exe (PID: 14136)
- Unicorn-9696.exe (PID: 12532)
- Unicorn-47989.exe (PID: 14048)
- Unicorn-40335.exe (PID: 14056)
- Unicorn-34257.exe (PID: 14168)
- Unicorn-64346.exe (PID: 13456)
- Unicorn-35741.exe (PID: 14176)
- Unicorn-53473.exe (PID: 13308)
- Unicorn-32878.exe (PID: 13188)
- Unicorn-15894.exe (PID: 15152)
- Unicorn-3151.exe (PID: 14328)
- Unicorn-21259.exe (PID: 14228)
- Unicorn-32748.exe (PID: 14276)
- Unicorn-41414.exe (PID: 14296)
- Unicorn-21813.exe (PID: 14304)
- Unicorn-22005.exe (PID: 14200)
- Unicorn-24640.exe (PID: 13072)
- Unicorn-23157.exe (PID: 13648)
- Unicorn-34398.exe (PID: 14368)
- Unicorn-19487.exe (PID: 14360)
- Unicorn-28724.exe (PID: 7716)
- Unicorn-537.exe (PID: 14464)
- Unicorn-41570.exe (PID: 14424)
- Unicorn-5389.exe (PID: 14600)
- Unicorn-26455.exe (PID: 11884)
- Unicorn-50293.exe (PID: 14452)
- Unicorn-15316.exe (PID: 14032)
- Unicorn-64642.exe (PID: 14868)
- Unicorn-65498.exe (PID: 14144)
- Unicorn-8351.exe (PID: 14784)
- Unicorn-63874.exe (PID: 14704)
- Unicorn-65498.exe (PID: 14768)
- Unicorn-7828.exe (PID: 14900)
- Unicorn-31604.exe (PID: 12124)
- Unicorn-44523.exe (PID: 14680)
- Unicorn-27694.exe (PID: 14892)
- Unicorn-49576.exe (PID: 14720)
- Unicorn-10595.exe (PID: 14908)
- Unicorn-44337.exe (PID: 14988)
- Unicorn-47137.exe (PID: 15020)
- Unicorn-15364.exe (PID: 15120)
- Unicorn-48421.exe (PID: 14968)
- Unicorn-22648.exe (PID: 14976)
- Unicorn-28248.exe (PID: 14996)
- Unicorn-28248.exe (PID: 15012)
- Unicorn-41679.exe (PID: 14312)
- Unicorn-43547.exe (PID: 3760)
- Unicorn-45353.exe (PID: 15324)
- Unicorn-9389.exe (PID: 15456)
- Unicorn-18151.exe (PID: 16520)
- Unicorn-14989.exe (PID: 15392)
- Unicorn-18164.exe (PID: 15168)
- Unicorn-3085.exe (PID: 13772)
- Unicorn-5752.exe (PID: 13080)
- Unicorn-28724.exe (PID: 7656)
- Unicorn-4268.exe (PID: 15496)
- Unicorn-50906.exe (PID: 16628)
- Unicorn-43407.exe (PID: 14584)
- Unicorn-19871.exe (PID: 15560)
- Unicorn-43407.exe (PID: 14592)
- Unicorn-38166.exe (PID: 15720)
- Unicorn-64916.exe (PID: 15728)
- Unicorn-42440.exe (PID: 15736)
- Unicorn-64916.exe (PID: 15756)
- Unicorn-18300.exe (PID: 15788)
- Unicorn-21830.exe (PID: 15592)
- Unicorn-34082.exe (PID: 15600)
- Unicorn-2104.exe (PID: 15708)
- Unicorn-57029.exe (PID: 14916)
- Unicorn-40034.exe (PID: 13756)
- Unicorn-34590.exe (PID: 14344)
- Unicorn-53525.exe (PID: 15860)
- Unicorn-15312.exe (PID: 15900)
Create files in a temporary directory
- Unicorn-5987.exe (PID: 668)
- Unicorn-1784.exe (PID: 7692)
- 1 (1221).exe (PID: 7440)
- Unicorn-16616.exe (PID: 4944)
- Unicorn-60471.exe (PID: 7284)
- Unicorn-17714.exe (PID: 6068)
- Unicorn-54031.exe (PID: 536)
- Unicorn-2229.exe (PID: 6488)
- Unicorn-49428.exe (PID: 7012)
- Unicorn-23985.exe (PID: 6272)
- Unicorn-20093.exe (PID: 4448)
- Unicorn-21938.exe (PID: 6032)
- Unicorn-38209.exe (PID: 6372)
- Unicorn-60039.exe (PID: 1184)
- Unicorn-14799.exe (PID: 2852)
- Unicorn-4394.exe (PID: 4696)
- Unicorn-41473.exe (PID: 6036)
- Unicorn-22361.exe (PID: 4120)
- Unicorn-25930.exe (PID: 7228)
- Unicorn-36626.exe (PID: 5868)
- Unicorn-10367.exe (PID: 5164)
- Unicorn-50653.exe (PID: 904)
- Unicorn-3092.exe (PID: 7248)
- Unicorn-16313.exe (PID: 7272)
- Unicorn-56185.exe (PID: 976)
- Unicorn-64716.exe (PID: 7676)
- Unicorn-32457.exe (PID: 7544)
- Unicorn-18779.exe (PID: 1244)
- Unicorn-2407.exe (PID: 6040)
- Unicorn-21415.exe (PID: 5800)
- Unicorn-48785.exe (PID: 7536)
- Unicorn-19045.exe (PID: 4452)
- Unicorn-52220.exe (PID: 6028)
- Unicorn-56953.exe (PID: 7528)
- Unicorn-46355.exe (PID: 4920)
- Unicorn-47332.exe (PID: 7972)
- Unicorn-39029.exe (PID: 7332)
- Unicorn-632.exe (PID: 6632)
- Unicorn-34569.exe (PID: 7328)
- Unicorn-21157.exe (PID: 8176)
- Unicorn-59044.exe (PID: 6584)
- Unicorn-37192.exe (PID: 7312)
- Unicorn-51089.exe (PID: 8188)
- Unicorn-59812.exe (PID: 6620)
- Unicorn-24731.exe (PID: 5892)
- Unicorn-1312.exe (PID: 7832)
- Unicorn-1187.exe (PID: 2600)
- Unicorn-17627.exe (PID: 7820)
- Unicorn-44191.exe (PID: 7952)
- Unicorn-46948.exe (PID: 7508)
- Unicorn-6527.exe (PID: 6676)
- Unicorn-20471.exe (PID: 4620)
- Unicorn-21157.exe (PID: 7348)
- Unicorn-51260.exe (PID: 5384)
- Unicorn-4047.exe (PID: 8372)
- Unicorn-30041.exe (PID: 4040)
- Unicorn-17177.exe (PID: 8400)
- Unicorn-11556.exe (PID: 5008)
- Unicorn-27959.exe (PID: 7360)
- Unicorn-11566.exe (PID: 8980)
- Unicorn-5671.exe (PID: 8352)
- Unicorn-18417.exe (PID: 7352)
- Unicorn-18862.exe (PID: 5260)
- Unicorn-6527.exe (PID: 1328)
- Unicorn-59641.exe (PID: 8068)
- Unicorn-23269.exe (PID: 1040)
- Unicorn-51769.exe (PID: 8588)
- Unicorn-18884.exe (PID: 7264)
- Unicorn-22828.exe (PID: 7944)
- Unicorn-62049.exe (PID: 9116)
- Unicorn-51883.exe (PID: 6740)
- Unicorn-64384.exe (PID: 8720)
- Unicorn-51255.exe (PID: 8668)
- Unicorn-8235.exe (PID: 1912)
- Unicorn-26128.exe (PID: 1128)
- Unicorn-39076.exe (PID: 4724)
- Unicorn-824.exe (PID: 5064)
- Unicorn-7950.exe (PID: 7872)
- Unicorn-38843.exe (PID: 856)
- Unicorn-57124.exe (PID: 7880)
- Unicorn-5322.exe (PID: 7892)
- Unicorn-24260.exe (PID: 5772)
- Unicorn-14955.exe (PID: 4224)
- Unicorn-64851.exe (PID: 8988)
- Unicorn-6107.exe (PID: 1452)
- Unicorn-46896.exe (PID: 6080)
- Unicorn-54488.exe (PID: 8408)
- Unicorn-54981.exe (PID: 7432)
- Unicorn-50769.exe (PID: 8484)
- Unicorn-11815.exe (PID: 4336)
- Unicorn-9563.exe (PID: 8064)
- Unicorn-64162.exe (PID: 968)
- Unicorn-8742.exe (PID: 10216)
- Unicorn-38941.exe (PID: 8752)
- Unicorn-42038.exe (PID: 8340)
- Unicorn-3471.exe (PID: 1512)
- Unicorn-4867.exe (PID: 10076)
- Unicorn-45292.exe (PID: 3096)
- Unicorn-43630.exe (PID: 7860)
- Unicorn-45500.exe (PID: 8956)
- Unicorn-63563.exe (PID: 8248)
- Unicorn-29761.exe (PID: 10156)
- Unicorn-21541.exe (PID: 5332)
- Unicorn-103.exe (PID: 9552)
- Unicorn-59553.exe (PID: 8736)
- Unicorn-37087.exe (PID: 7524)
- Unicorn-32065.exe (PID: 7896)
- Unicorn-20493.exe (PID: 9304)
- Unicorn-44172.exe (PID: 9680)
- Unicorn-57856.exe (PID: 9460)
- Unicorn-20680.exe (PID: 7752)
- Unicorn-14680.exe (PID: 4152)
- Unicorn-64700.exe (PID: 9692)
- Unicorn-49688.exe (PID: 5036)
- Unicorn-33385.exe (PID: 776)
- Unicorn-65028.exe (PID: 11304)
- Unicorn-29725.exe (PID: 6656)
- Unicorn-53829.exe (PID: 7884)
- Unicorn-16402.exe (PID: 9260)
- Unicorn-55111.exe (PID: 10456)
- Unicorn-8536.exe (PID: 11352)
- Unicorn-22739.exe (PID: 10732)
- Unicorn-2842.exe (PID: 10652)
- Unicorn-15100.exe (PID: 2984)
- Unicorn-35510.exe (PID: 11060)
- Unicorn-34577.exe (PID: 9288)
- Unicorn-18028.exe (PID: 8576)
- Unicorn-36232.exe (PID: 9496)
- Unicorn-34717.exe (PID: 10056)
- Unicorn-51032.exe (PID: 9716)
- Unicorn-29185.exe (PID: 9148)
- Unicorn-35485.exe (PID: 10180)
- Unicorn-5967.exe (PID: 8884)
- Unicorn-50139.exe (PID: 2236)
- Unicorn-15676.exe (PID: 8524)
- Unicorn-15724.exe (PID: 3896)
- Unicorn-59169.exe (PID: 8492)
- Unicorn-28555.exe (PID: 12568)
- Unicorn-44369.exe (PID: 8780)
- Unicorn-22228.exe (PID: 4572)
- Unicorn-30087.exe (PID: 4284)
- Unicorn-28171.exe (PID: 12668)
- Unicorn-36475.exe (PID: 10720)
- Unicorn-42339.exe (PID: 5132)
- Unicorn-368.exe (PID: 11324)
- Unicorn-20553.exe (PID: 9332)
- Unicorn-62293.exe (PID: 8384)
- Unicorn-18447.exe (PID: 8728)
- Unicorn-47747.exe (PID: 8296)
- Unicorn-58017.exe (PID: 8416)
- Unicorn-15536.exe (PID: 10100)
- Unicorn-5862.exe (PID: 9520)
- Unicorn-55774.exe (PID: 616)
- Unicorn-24554.exe (PID: 9252)
- Unicorn-54613.exe (PID: 2040)
- Unicorn-33269.exe (PID: 9156)
- Unicorn-3523.exe (PID: 9636)
- Unicorn-57680.exe (PID: 10784)
- Unicorn-33438.exe (PID: 14184)
- Unicorn-18395.exe (PID: 7300)
- Unicorn-14549.exe (PID: 7804)
- Unicorn-15842.exe (PID: 8392)
- Unicorn-19061.exe (PID: 10820)
- Unicorn-35964.exe (PID: 5428)
- Unicorn-31129.exe (PID: 11740)
- Unicorn-7420.exe (PID: 8800)
- Unicorn-22739.exe (PID: 10740)
- Unicorn-62497.exe (PID: 12464)
- Unicorn-45063.exe (PID: 8768)
- Unicorn-15894.exe (PID: 15152)
- Unicorn-42117.exe (PID: 9732)
- Unicorn-19820.exe (PID: 12860)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable (generic) (52.9) |
|---|---|---|
| .exe | | | Generic Win/DOS Executable (23.5) |
| .exe | | | DOS Executable Generic (23.5) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:36:00+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
705
Monitored processes
566
Malicious processes
86
Suspicious processes
62
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 536 | C:\Users\admin\AppData\Local\Temp\Unicorn-54031.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-54031.exe | Unicorn-5987.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 616 | C:\Users\admin\AppData\Local\Temp\Unicorn-55774.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-55774.exe | Unicorn-30041.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 668 | C:\Users\admin\AppData\Local\Temp\Unicorn-5987.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-5987.exe | 1 (1221).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 776 | C:\Users\admin\AppData\Local\Temp\Unicorn-33385.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-33385.exe | Unicorn-1784.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 856 | C:\Users\admin\AppData\Local\Temp\Unicorn-38843.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-38843.exe | Unicorn-16616.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 904 | C:\Users\admin\AppData\Local\Temp\Unicorn-50653.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-50653.exe | Unicorn-18884.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 968 | C:\Users\admin\AppData\Local\Temp\Unicorn-64162.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-64162.exe | Unicorn-5987.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 976 | C:\Users\admin\AppData\Local\Temp\Unicorn-56185.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-56185.exe | Unicorn-21938.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1040 | C:\Users\admin\AppData\Local\Temp\Unicorn-23269.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-23269.exe | Unicorn-32457.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1116 | C:\Users\admin\AppData\Local\Temp\Unicorn-752.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-752.exe | Unicorn-55774.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
13 992
Read events
13 992
Write events
0
Delete events
0
Modification events
Executable files
757
Suspicious files
3
Text files
1
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7440 | 1 (1221).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-1784.exe | executable | |
MD5:8FA7D5EFB99903447C33C7CE6070518F | SHA256:0A06BBF276EBD7F6131718220606F9026ABADF62ED779A0BE6B5F6B4605C4BAC | |||
| 7264 | Unicorn-18884.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-50653.exe | executable | |
MD5:C622A59B5A04ADB6D1C19B1E2F1B601E | SHA256:BD9D85A8DC9297154454345D406AF3DC59CD883F9826078FFFCDB2079CB2B7C9 | |||
| 668 | Unicorn-5987.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-54031.exe | executable | |
MD5:BB1ABB745F549E124926D2E60197ABC6 | SHA256:79CDF5D0B05463FA171275AFF2B474E14A91E4A56BB7251C3201226921777BB5 | |||
| 7284 | Unicorn-60471.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30041.exe | executable | |
MD5:D7390AA23E38F3FF14394D2EA7CDB5EB | SHA256:11C4617FC1F0D5F972FA388BC5A588F91AC4B355F3B32C89D4D5D66084AFD4FD | |||
| 7440 | 1 (1221).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-21415.exe | executable | |
MD5:08667C3FD921187050FB60D34EEDAFC6 | SHA256:33E39B325CB88A27A025D331D56941884AD46D2973576F1B68B369EB34D7DF67 | |||
| 4944 | Unicorn-16616.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-10367.exe | executable | |
MD5:49ECE98C2294625989E7D08466BDA889 | SHA256:1CAF01F24660AEF164AA1649D8C52C43720A504A0FECD525408E18E6E554281B | |||
| 6068 | Unicorn-17714.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-24731.exe | executable | |
MD5:5BA67790D5CB67A0C2AA0BAEDC38DB75 | SHA256:F89A33619CA7BABAFE906881AF6E8D86DC6E6F1535C4A0ABC2D19BFA46379533 | |||
| 7692 | Unicorn-1784.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2229.exe | executable | |
MD5:F25A0C159FD3BE778DEEC751CEE3E48D | SHA256:09DDBACABA7B81BFA5C8C84345E20A87E82DC02446C6F157A2D56B5176AA7199 | |||
| 904 | Unicorn-50653.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-20093.exe | executable | |
MD5:B4423441E748DFE227DD253831079919 | SHA256:B4087BBF38BE4FDB300EAA41F884341E82C7B7FF6FED42E79899959A679911B5 | |||
| 5164 | Unicorn-10367.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-23985.exe | executable | |
MD5:52EEA3BE9961758F3D39FB0EE624AAC5 | SHA256:F93F7DA9C30F8CF350A1E79AD54E1B4DFB010208DE58597F98C74EA0E6D517D9 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
26
DNS requests
15
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
5496 | MoUsoCoreWorker.exe | GET | 200 | 2.16.164.99:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
7744 | backgroundTaskHost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
616 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
616 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
5496 | MoUsoCoreWorker.exe | 2.16.164.99:80 | crl.microsoft.com | Akamai International B.V. | NL | whitelisted |
2104 | svchost.exe | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
6476 | RUXIMICS.exe | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 20.190.159.0:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
3216 | svchost.exe | 40.115.3.253:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 2.23.77.188:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
2112 | svchost.exe | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
login.live.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |