| File name: | 1 (423) |
| Full analysis: | https://app.any.run/tasks/1097eca1-0fa0-4eff-9b12-8fe18131d049 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 22:59:32 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | 8F97A9F85332E7D4B3FFA141D47727B0 |
| SHA1: | 5B098C8AC25040660D9B4CF5FF749038BC66767A |
| SHA256: | 52BE6CDD9EF9E6EA05AD0E8F9AE6C8A4286CDE287A131B64553702CDB8835B2B |
| SSDEEP: | 6144:a7K8f7IhJDNHA5D/sseB1Afx/tB5lvJGBH/WyeOiFk/8SwjwpyAvEhNi9IM+sCxa:a+aMtHA5TsP4BThaHOyeOiNx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- 1 (423).exe (PID: 7264)
- Unicorn-61822.exe (PID: 7340)
- Unicorn-1884.exe (PID: 7852)
- Unicorn-13773.exe (PID: 7836)
- Unicorn-36187.exe (PID: 8172)
- Unicorn-20405.exe (PID: 8184)
- Unicorn-13628.exe (PID: 1276)
- Unicorn-27225.exe (PID: 300)
- Unicorn-47152.exe (PID: 2284)
- Unicorn-11582.exe (PID: 496)
- Unicorn-11272.exe (PID: 4880)
- Unicorn-49902.exe (PID: 7320)
- Unicorn-30301.exe (PID: 7316)
- Unicorn-34983.exe (PID: 6640)
- Unicorn-46254.exe (PID: 4024)
- Unicorn-6294.exe (PID: 1628)
- Unicorn-54012.exe (PID: 5452)
- Unicorn-58096.exe (PID: 1764)
- Unicorn-28246.exe (PID: 5972)
- Unicorn-57541.exe (PID: 1452)
- Unicorn-63306.exe (PID: 1812)
- Unicorn-48112.exe (PID: 1324)
- Unicorn-53820.exe (PID: 5256)
- Unicorn-28761.exe (PID: 4560)
- Unicorn-55211.exe (PID: 6468)
- Unicorn-61525.exe (PID: 5056)
- Unicorn-14379.exe (PID: 4776)
- Unicorn-30105.exe (PID: 5892)
- Unicorn-51080.exe (PID: 1056)
- Unicorn-22491.exe (PID: 3240)
- Unicorn-49264.exe (PID: 516)
- Unicorn-9035.exe (PID: 5124)
- Unicorn-5771.exe (PID: 5008)
- Unicorn-21553.exe (PID: 4244)
- Unicorn-19506.exe (PID: 660)
- Unicorn-53602.exe (PID: 7360)
- Unicorn-13384.exe (PID: 6240)
- Unicorn-40603.exe (PID: 7492)
- Unicorn-34381.exe (PID: 5988)
- Unicorn-44203.exe (PID: 1088)
- Unicorn-40411.exe (PID: 5956)
- Unicorn-64345.exe (PID: 6148)
- Unicorn-54641.exe (PID: 4008)
- Unicorn-22028.exe (PID: 7276)
- Unicorn-20183.exe (PID: 7284)
- Unicorn-6155.exe (PID: 7648)
- Unicorn-54417.exe (PID: 3020)
- Unicorn-12014.exe (PID: 7636)
- Unicorn-8293.exe (PID: 7228)
- Unicorn-51894.exe (PID: 7756)
- Unicorn-33312.exe (PID: 728)
- Unicorn-125.exe (PID: 7628)
- Unicorn-50717.exe (PID: 7680)
- Unicorn-23810.exe (PID: 7684)
- Unicorn-13166.exe (PID: 7752)
- Unicorn-55853.exe (PID: 7620)
- Unicorn-40363.exe (PID: 8128)
- Unicorn-23451.exe (PID: 7560)
- Unicorn-63737.exe (PID: 7964)
- Unicorn-34381.exe (PID: 7740)
- Unicorn-43317.exe (PID: 7584)
- Unicorn-60229.exe (PID: 7700)
- Unicorn-51677.exe (PID: 7580)
- Unicorn-22897.exe (PID: 7860)
- Unicorn-23720.exe (PID: 8104)
- Unicorn-25767.exe (PID: 7152)
- Unicorn-14920.exe (PID: 8144)
- Unicorn-57515.exe (PID: 7612)
- Unicorn-54099.exe (PID: 7540)
- Unicorn-35048.exe (PID: 7588)
- Unicorn-33130.exe (PID: 7704)
- Unicorn-42295.exe (PID: 6592)
- Unicorn-55486.exe (PID: 6080)
- Unicorn-54547.exe (PID: 8164)
- Unicorn-23987.exe (PID: 8732)
- Unicorn-21491.exe (PID: 7012)
- Unicorn-33743.exe (PID: 4944)
- Unicorn-44578.exe (PID: 8712)
- Unicorn-11734.exe (PID: 8796)
- Unicorn-13296.exe (PID: 8564)
- Unicorn-62606.exe (PID: 8276)
- Unicorn-14282.exe (PID: 8080)
- Unicorn-9061.exe (PID: 7616)
- Unicorn-17613.exe (PID: 7736)
- Unicorn-3976.exe (PID: 7808)
- Unicorn-19545.exe (PID: 5384)
- Unicorn-44909.exe (PID: 6824)
- Unicorn-9082.exe (PID: 7732)
- Unicorn-37633.exe (PID: 3008)
- Unicorn-25549.exe (PID: 8696)
- Unicorn-38403.exe (PID: 2772)
- Unicorn-55699.exe (PID: 8228)
- Unicorn-5538.exe (PID: 1240)
- Unicorn-28651.exe (PID: 5228)
- Unicorn-16997.exe (PID: 8704)
- Unicorn-51594.exe (PID: 7544)
- Unicorn-38555.exe (PID: 7780)
- Unicorn-24589.exe (PID: 8028)
- Unicorn-32181.exe (PID: 2140)
- Unicorn-18739.exe (PID: 6668)
- Unicorn-25165.exe (PID: 8484)
- Unicorn-7821.exe (PID: 8544)
- Unicorn-32108.exe (PID: 5964)
- Unicorn-58823.exe (PID: 2984)
- Unicorn-9906.exe (PID: 6960)
- Unicorn-26897.exe (PID: 7760)
- Unicorn-56804.exe (PID: 5204)
- Unicorn-60961.exe (PID: 6512)
- Unicorn-2506.exe (PID: 8472)
- Unicorn-28241.exe (PID: 8572)
- Unicorn-46654.exe (PID: 8492)
- Unicorn-22928.exe (PID: 8584)
- Unicorn-53561.exe (PID: 3140)
- Unicorn-65216.exe (PID: 5544)
- Unicorn-60333.exe (PID: 1168)
- Unicorn-55315.exe (PID: 8036)
- Unicorn-65111.exe (PID: 9076)
- Unicorn-26156.exe (PID: 2644)
- Unicorn-30571.exe (PID: 8956)
- Unicorn-22621.exe (PID: 5984)
- Unicorn-14732.exe (PID: 8348)
- Unicorn-35855.exe (PID: 8552)
- Unicorn-64291.exe (PID: 9868)
- Unicorn-61491.exe (PID: 9880)
- Unicorn-27997.exe (PID: 9912)
- Unicorn-49669.exe (PID: 8532)
- Unicorn-2506.exe (PID: 8460)
- Unicorn-55699.exe (PID: 8232)
- Unicorn-25139.exe (PID: 4112)
- Unicorn-29415.exe (PID: 9248)
- Unicorn-30759.exe (PID: 9604)
- Unicorn-54137.exe (PID: 8652)
- Unicorn-997.exe (PID: 8340)
- Unicorn-63271.exe (PID: 8328)
- Unicorn-8200.exe (PID: 9616)
- Unicorn-62505.exe (PID: 7464)
- Unicorn-52391.exe (PID: 10128)
- Unicorn-12708.exe (PID: 11012)
- Unicorn-51404.exe (PID: 11048)
- Unicorn-64562.exe (PID: 8900)
- Unicorn-3135.exe (PID: 7676)
- Unicorn-35564.exe (PID: 9236)
- Unicorn-52694.exe (PID: 9952)
- Unicorn-57209.exe (PID: 10120)
- Unicorn-8152.exe (PID: 7172)
- Unicorn-48279.exe (PID: 9692)
- Unicorn-12502.exe (PID: 9176)
- Unicorn-52362.exe (PID: 8508)
- Unicorn-2580.exe (PID: 6248)
- Unicorn-32705.exe (PID: 9720)
- Unicorn-58697.exe (PID: 8916)
- Unicorn-38555.exe (PID: 10232)
- Unicorn-37007.exe (PID: 9132)
- Unicorn-50445.exe (PID: 10156)
- Unicorn-4095.exe (PID: 9320)
- Unicorn-30793.exe (PID: 10696)
- Unicorn-333.exe (PID: 9344)
- Unicorn-27067.exe (PID: 9556)
- Unicorn-39153.exe (PID: 10600)
- Unicorn-50006.exe (PID: 6032)
- Unicorn-45813.exe (PID: 9416)
- Unicorn-7850.exe (PID: 10540)
- Unicorn-27879.exe (PID: 8836)
- Unicorn-48809.exe (PID: 9684)
- Unicorn-21059.exe (PID: 8044)
- Unicorn-5136.exe (PID: 3956)
- Unicorn-17691.exe (PID: 9088)
- Unicorn-23751.exe (PID: 5740)
- Unicorn-5276.exe (PID: 5624)
- Unicorn-30951.exe (PID: 9760)
- Unicorn-39119.exe (PID: 9772)
- Unicorn-27067.exe (PID: 9564)
- Unicorn-23611.exe (PID: 10224)
- Unicorn-3734.exe (PID: 9944)
- Unicorn-62458.exe (PID: 10608)
- Unicorn-27019.exe (PID: 10000)
- Unicorn-2798.exe (PID: 8364)
- Unicorn-27469.exe (PID: 9272)
- Unicorn-50224.exe (PID: 8436)
- Unicorn-35611.exe (PID: 9860)
- Unicorn-64099.exe (PID: 10008)
- Unicorn-23585.exe (PID: 10956)
- Unicorn-61083.exe (PID: 12496)
- Unicorn-65411.exe (PID: 10392)
- Unicorn-22987.exe (PID: 10408)
- Unicorn-7385.exe (PID: 9980)
- Unicorn-12476.exe (PID: 9788)
- Unicorn-34611.exe (PID: 4108)
- Unicorn-45547.exe (PID: 2416)
- Unicorn-3348.exe (PID: 9300)
- Unicorn-7506.exe (PID: 12200)
- Unicorn-28965.exe (PID: 12296)
- Unicorn-3885.exe (PID: 10656)
- Unicorn-25959.exe (PID: 4188)
- Unicorn-23969.exe (PID: 11164)
- Unicorn-49796.exe (PID: 11792)
- Unicorn-47440.exe (PID: 10904)
- Unicorn-25622.exe (PID: 10980)
- Unicorn-7082.exe (PID: 10208)
- Unicorn-12629.exe (PID: 10896)
- Unicorn-21447.exe (PID: 11136)
- Unicorn-64451.exe (PID: 10196)
- Unicorn-48657.exe (PID: 9588)
- Unicorn-6280.exe (PID: 9140)
- Unicorn-779.exe (PID: 9804)
- Unicorn-1069.exe (PID: 7796)
- Unicorn-56859.exe (PID: 8072)
- Unicorn-12794.exe (PID: 10880)
- Unicorn-1210.exe (PID: 9384)
- Unicorn-47762.exe (PID: 14476)
- Unicorn-53583.exe (PID: 13108)
- Unicorn-40249.exe (PID: 10032)
- Unicorn-32931.exe (PID: 10812)
- Unicorn-44473.exe (PID: 6384)
- Unicorn-27263.exe (PID: 10416)
- Unicorn-54099.exe (PID: 16016)
- Unicorn-22425.exe (PID: 9004)
- Unicorn-22794.exe (PID: 14184)
- Unicorn-8978.exe (PID: 12816)
- Unicorn-43757.exe (PID: 9652)
- Unicorn-61213.exe (PID: 13960)
- Unicorn-34571.exe (PID: 13976)
- Unicorn-34651.exe (PID: 9704)
- Unicorn-48307.exe (PID: 10100)
- Unicorn-63628.exe (PID: 9096)
- Unicorn-11357.exe (PID: 10488)
- Unicorn-47273.exe (PID: 7356)
- Unicorn-1529.exe (PID: 13216)
- Unicorn-50585.exe (PID: 12164)
- Unicorn-31313.exe (PID: 9640)
- Unicorn-8504.exe (PID: 13984)
- Unicorn-11887.exe (PID: 10972)
- Unicorn-11197.exe (PID: 12924)
- Unicorn-40111.exe (PID: 11776)
- Unicorn-22765.exe (PID: 13044)
- Unicorn-26774.exe (PID: 11372)
- Unicorn-53509.exe (PID: 9848)
- Unicorn-15967.exe (PID: 12688)
- Unicorn-61497.exe (PID: 14436)
- Unicorn-24351.exe (PID: 11848)
- Unicorn-203.exe (PID: 9456)
- Unicorn-1145.exe (PID: 11188)
- Unicorn-20373.exe (PID: 13880)
- Unicorn-23087.exe (PID: 15108)
- Unicorn-34611.exe (PID: 4172)
- Unicorn-27263.exe (PID: 10452)
- Unicorn-40606.exe (PID: 10828)
- Unicorn-5870.exe (PID: 9484)
- Unicorn-27839.exe (PID: 10912)
- Unicorn-16783.exe (PID: 1132)
- Unicorn-36597.exe (PID: 9476)
- Unicorn-8016.exe (PID: 11268)
- Unicorn-44962.exe (PID: 8908)
- Unicorn-44473.exe (PID: 7292)
- Unicorn-55079.exe (PID: 10676)
- Unicorn-45128.exe (PID: 9520)
- Unicorn-43893.exe (PID: 8944)
- Unicorn-31335.exe (PID: 9992)
- Unicorn-37657.exe (PID: 12116)
- Unicorn-23943.exe (PID: 12172)
- Unicorn-45991.exe (PID: 13260)
- Unicorn-27045.exe (PID: 10728)
- Unicorn-46864.exe (PID: 10468)
- Unicorn-13828.exe (PID: 12744)
- Unicorn-59022.exe (PID: 16520)
- Unicorn-57410.exe (PID: 12124)
Starts itself from another location
- Unicorn-13773.exe (PID: 7836)
- 1 (423).exe (PID: 7264)
- Unicorn-61822.exe (PID: 7340)
- Unicorn-1884.exe (PID: 7852)
- Unicorn-36187.exe (PID: 8172)
- Unicorn-20405.exe (PID: 8184)
- Unicorn-11582.exe (PID: 496)
- Unicorn-46254.exe (PID: 4024)
- Unicorn-11272.exe (PID: 4880)
- Unicorn-47152.exe (PID: 2284)
- Unicorn-13628.exe (PID: 1276)
- Unicorn-14379.exe (PID: 4776)
- Unicorn-30301.exe (PID: 7316)
- Unicorn-27225.exe (PID: 300)
- Unicorn-34983.exe (PID: 6640)
- Unicorn-6294.exe (PID: 1628)
- Unicorn-54012.exe (PID: 5452)
- Unicorn-58096.exe (PID: 1764)
- Unicorn-49902.exe (PID: 7320)
- Unicorn-57541.exe (PID: 1452)
- Unicorn-28246.exe (PID: 5972)
- Unicorn-28761.exe (PID: 4560)
- Unicorn-48112.exe (PID: 1324)
- Unicorn-63306.exe (PID: 1812)
- Unicorn-54641.exe (PID: 4008)
- Unicorn-53820.exe (PID: 5256)
- Unicorn-55211.exe (PID: 6468)
- Unicorn-61525.exe (PID: 5056)
- Unicorn-30105.exe (PID: 5892)
- Unicorn-51080.exe (PID: 1056)
- Unicorn-22491.exe (PID: 3240)
- Unicorn-49264.exe (PID: 516)
- Unicorn-9035.exe (PID: 5124)
- Unicorn-5771.exe (PID: 5008)
- Unicorn-13384.exe (PID: 6240)
- Unicorn-21553.exe (PID: 4244)
- Unicorn-19506.exe (PID: 660)
- Unicorn-53602.exe (PID: 7360)
- Unicorn-40603.exe (PID: 7492)
- Unicorn-34381.exe (PID: 5988)
- Unicorn-44203.exe (PID: 1088)
- Unicorn-40411.exe (PID: 5956)
- Unicorn-64345.exe (PID: 6148)
- Unicorn-22028.exe (PID: 7276)
- Unicorn-6155.exe (PID: 7648)
- Unicorn-20183.exe (PID: 7284)
- Unicorn-8293.exe (PID: 7228)
- Unicorn-54417.exe (PID: 3020)
- Unicorn-33312.exe (PID: 728)
- Unicorn-125.exe (PID: 7628)
- Unicorn-50717.exe (PID: 7680)
- Unicorn-51894.exe (PID: 7756)
- Unicorn-23810.exe (PID: 7684)
- Unicorn-9082.exe (PID: 7732)
- Unicorn-13166.exe (PID: 7752)
- Unicorn-9061.exe (PID: 7616)
- Unicorn-23451.exe (PID: 7560)
- Unicorn-63737.exe (PID: 7964)
- Unicorn-34381.exe (PID: 7740)
- Unicorn-22897.exe (PID: 7860)
- Unicorn-43317.exe (PID: 7584)
- Unicorn-60229.exe (PID: 7700)
- Unicorn-25767.exe (PID: 7152)
- Unicorn-40363.exe (PID: 8128)
- Unicorn-23720.exe (PID: 8104)
- Unicorn-51677.exe (PID: 7580)
- Unicorn-14920.exe (PID: 8144)
- Unicorn-55853.exe (PID: 7620)
- Unicorn-57515.exe (PID: 7612)
- Unicorn-35048.exe (PID: 7588)
- Unicorn-54099.exe (PID: 7540)
- Unicorn-42295.exe (PID: 6592)
- Unicorn-55486.exe (PID: 6080)
- Unicorn-54547.exe (PID: 8164)
- Unicorn-23987.exe (PID: 8732)
- Unicorn-21491.exe (PID: 7012)
- Unicorn-44578.exe (PID: 8712)
- Unicorn-33743.exe (PID: 4944)
- Unicorn-11734.exe (PID: 8796)
- Unicorn-14282.exe (PID: 8080)
- Unicorn-62606.exe (PID: 8276)
- Unicorn-16783.exe (PID: 1132)
- Unicorn-19545.exe (PID: 5384)
- Unicorn-44909.exe (PID: 6824)
- Unicorn-55699.exe (PID: 8228)
- Unicorn-37633.exe (PID: 3008)
- Unicorn-38403.exe (PID: 2772)
- Unicorn-5538.exe (PID: 1240)
- Unicorn-28651.exe (PID: 5228)
- Unicorn-25549.exe (PID: 8696)
- Unicorn-16997.exe (PID: 8704)
- Unicorn-51594.exe (PID: 7544)
- Unicorn-13296.exe (PID: 8564)
- Unicorn-32181.exe (PID: 2140)
- Unicorn-38555.exe (PID: 7780)
- Unicorn-18739.exe (PID: 6668)
- Unicorn-25165.exe (PID: 8484)
- Unicorn-24589.exe (PID: 8028)
- Unicorn-7821.exe (PID: 8544)
- Unicorn-32108.exe (PID: 5964)
- Unicorn-58823.exe (PID: 2984)
- Unicorn-9906.exe (PID: 6960)
- Unicorn-26897.exe (PID: 7760)
- Unicorn-60961.exe (PID: 6512)
- Unicorn-2506.exe (PID: 8472)
- Unicorn-28241.exe (PID: 8572)
- Unicorn-46654.exe (PID: 8492)
- Unicorn-22928.exe (PID: 8584)
- Unicorn-53561.exe (PID: 3140)
- Unicorn-65216.exe (PID: 5544)
- Unicorn-60333.exe (PID: 1168)
- Unicorn-12014.exe (PID: 7636)
- Unicorn-65111.exe (PID: 9076)
- Unicorn-26156.exe (PID: 2644)
- Unicorn-22621.exe (PID: 5984)
- Unicorn-14732.exe (PID: 8348)
- Unicorn-55315.exe (PID: 8036)
- Unicorn-30571.exe (PID: 8956)
- Unicorn-49669.exe (PID: 8532)
- Unicorn-35855.exe (PID: 8552)
- Unicorn-64291.exe (PID: 9868)
- Unicorn-61491.exe (PID: 9880)
- Unicorn-2506.exe (PID: 8460)
- Unicorn-27997.exe (PID: 9912)
- Unicorn-29415.exe (PID: 9248)
- Unicorn-25139.exe (PID: 4112)
- Unicorn-43893.exe (PID: 8944)
- Unicorn-55699.exe (PID: 8232)
- Unicorn-30759.exe (PID: 9604)
- Unicorn-54137.exe (PID: 8652)
- Unicorn-997.exe (PID: 8340)
- Unicorn-63271.exe (PID: 8328)
- Unicorn-62505.exe (PID: 7464)
- Unicorn-8200.exe (PID: 9616)
- Unicorn-52391.exe (PID: 10128)
- Unicorn-51404.exe (PID: 11048)
- Unicorn-12708.exe (PID: 11012)
- Unicorn-11067.exe (PID: 11040)
- Unicorn-64562.exe (PID: 8900)
- Unicorn-3135.exe (PID: 7676)
- Unicorn-35564.exe (PID: 9236)
- Unicorn-52694.exe (PID: 9952)
- Unicorn-57209.exe (PID: 10120)
- Unicorn-8152.exe (PID: 7172)
- Unicorn-48279.exe (PID: 9692)
- Unicorn-12502.exe (PID: 9176)
- Unicorn-52362.exe (PID: 8508)
- Unicorn-2580.exe (PID: 6248)
- Unicorn-32705.exe (PID: 9720)
- Unicorn-58697.exe (PID: 8916)
- Unicorn-38555.exe (PID: 10232)
- Unicorn-37007.exe (PID: 9132)
- Unicorn-50445.exe (PID: 10156)
- Unicorn-4095.exe (PID: 9320)
- Unicorn-6280.exe (PID: 9140)
- Unicorn-27067.exe (PID: 9556)
- Unicorn-50006.exe (PID: 6032)
- Unicorn-39153.exe (PID: 10600)
- Unicorn-7850.exe (PID: 10540)
- Unicorn-45813.exe (PID: 9416)
- Unicorn-21059.exe (PID: 8044)
- Unicorn-48809.exe (PID: 9684)
- Unicorn-27879.exe (PID: 8836)
- Unicorn-33130.exe (PID: 7704)
- Unicorn-17613.exe (PID: 7736)
- Unicorn-5136.exe (PID: 3956)
- Unicorn-17691.exe (PID: 9088)
- Unicorn-30793.exe (PID: 10696)
- Unicorn-23751.exe (PID: 5740)
- Unicorn-3885.exe (PID: 10656)
- Unicorn-30951.exe (PID: 9760)
- Unicorn-39119.exe (PID: 9772)
- Unicorn-3976.exe (PID: 7808)
- Unicorn-23611.exe (PID: 10224)
- Unicorn-3161.exe (PID: 8392)
- Unicorn-36597.exe (PID: 9476)
- Unicorn-27067.exe (PID: 9564)
- Unicorn-27019.exe (PID: 10000)
- Unicorn-48307.exe (PID: 10100)
- Unicorn-56804.exe (PID: 5204)
- Unicorn-50224.exe (PID: 8436)
- Unicorn-2798.exe (PID: 8364)
- Unicorn-27469.exe (PID: 9272)
- Unicorn-35611.exe (PID: 9860)
- Unicorn-11357.exe (PID: 10488)
- Unicorn-64099.exe (PID: 10008)
- Unicorn-23585.exe (PID: 10956)
- Unicorn-61083.exe (PID: 12496)
- Unicorn-3734.exe (PID: 9944)
- Unicorn-22987.exe (PID: 10408)
- Unicorn-61213.exe (PID: 13960)
- Unicorn-34571.exe (PID: 13976)
- Unicorn-65411.exe (PID: 10392)
- Unicorn-7385.exe (PID: 9980)
- Unicorn-46864.exe (PID: 10468)
- Unicorn-12476.exe (PID: 9788)
- Unicorn-34611.exe (PID: 4108)
- Unicorn-45547.exe (PID: 2416)
- Unicorn-3348.exe (PID: 9300)
- Unicorn-7506.exe (PID: 12200)
- Unicorn-28965.exe (PID: 12296)
- Unicorn-5276.exe (PID: 5624)
INFO
Reads the computer name
- 1 (423).exe (PID: 7264)
- Unicorn-61822.exe (PID: 7340)
- Unicorn-13773.exe (PID: 7836)
- Unicorn-1884.exe (PID: 7852)
- Unicorn-20405.exe (PID: 8184)
- Unicorn-13628.exe (PID: 1276)
- Unicorn-11582.exe (PID: 496)
- Unicorn-36187.exe (PID: 8172)
- Unicorn-14379.exe (PID: 4776)
- Unicorn-11272.exe (PID: 4880)
- Unicorn-47152.exe (PID: 2284)
- Unicorn-49902.exe (PID: 7320)
- Unicorn-30301.exe (PID: 7316)
- Unicorn-27225.exe (PID: 300)
- Unicorn-46254.exe (PID: 4024)
- Unicorn-58096.exe (PID: 1764)
- Unicorn-34983.exe (PID: 6640)
- Unicorn-54012.exe (PID: 5452)
- Unicorn-6294.exe (PID: 1628)
- Unicorn-57541.exe (PID: 1452)
- Unicorn-28246.exe (PID: 5972)
- Unicorn-53820.exe (PID: 5256)
- Unicorn-48112.exe (PID: 1324)
- Unicorn-28761.exe (PID: 4560)
- Unicorn-63306.exe (PID: 1812)
- Unicorn-54641.exe (PID: 4008)
- Unicorn-55211.exe (PID: 6468)
- Unicorn-61525.exe (PID: 5056)
- Unicorn-51080.exe (PID: 1056)
- Unicorn-30105.exe (PID: 5892)
- Unicorn-22491.exe (PID: 3240)
- Unicorn-49264.exe (PID: 516)
- Unicorn-5771.exe (PID: 5008)
- Unicorn-9035.exe (PID: 5124)
- Unicorn-21553.exe (PID: 4244)
- Unicorn-13384.exe (PID: 6240)
- Unicorn-19506.exe (PID: 660)
- Unicorn-53602.exe (PID: 7360)
- Unicorn-40603.exe (PID: 7492)
- Unicorn-44203.exe (PID: 1088)
- Unicorn-34381.exe (PID: 5988)
- Unicorn-22028.exe (PID: 7276)
- Unicorn-40411.exe (PID: 5956)
- Unicorn-64345.exe (PID: 6148)
- Unicorn-6155.exe (PID: 7648)
- Unicorn-20183.exe (PID: 7284)
- Unicorn-8293.exe (PID: 7228)
- Unicorn-54417.exe (PID: 3020)
- Unicorn-12014.exe (PID: 7636)
- Unicorn-51894.exe (PID: 7756)
- Unicorn-33312.exe (PID: 728)
- Unicorn-125.exe (PID: 7628)
- Unicorn-50717.exe (PID: 7680)
- Unicorn-23810.exe (PID: 7684)
- Unicorn-13166.exe (PID: 7752)
- Unicorn-9082.exe (PID: 7732)
- Unicorn-9061.exe (PID: 7616)
- Unicorn-40363.exe (PID: 8128)
- Unicorn-34381.exe (PID: 7740)
- Unicorn-55853.exe (PID: 7620)
- Unicorn-23451.exe (PID: 7560)
- Unicorn-63737.exe (PID: 7964)
- Unicorn-22897.exe (PID: 7860)
- Unicorn-60229.exe (PID: 7700)
- Unicorn-43317.exe (PID: 7584)
- Unicorn-25767.exe (PID: 7152)
- Unicorn-23720.exe (PID: 8104)
- Unicorn-57515.exe (PID: 7612)
- Unicorn-14920.exe (PID: 8144)
- Unicorn-51677.exe (PID: 7580)
- Unicorn-35048.exe (PID: 7588)
- Unicorn-54099.exe (PID: 7540)
- Unicorn-55486.exe (PID: 6080)
- Unicorn-33130.exe (PID: 7704)
- Unicorn-42295.exe (PID: 6592)
- Unicorn-21491.exe (PID: 7012)
- Unicorn-54547.exe (PID: 8164)
- Unicorn-23987.exe (PID: 8732)
- Unicorn-11734.exe (PID: 8796)
- Unicorn-33743.exe (PID: 4944)
- Unicorn-44578.exe (PID: 8712)
- Unicorn-14282.exe (PID: 8080)
- Unicorn-16783.exe (PID: 1132)
- Unicorn-13296.exe (PID: 8564)
- Unicorn-62606.exe (PID: 8276)
- Unicorn-44909.exe (PID: 6824)
- Unicorn-3976.exe (PID: 7808)
- Unicorn-17613.exe (PID: 7736)
- Unicorn-32181.exe (PID: 2140)
- Unicorn-19545.exe (PID: 5384)
- Unicorn-38403.exe (PID: 2772)
- Unicorn-55699.exe (PID: 8228)
- Unicorn-18739.exe (PID: 6668)
- Unicorn-25549.exe (PID: 8696)
- Unicorn-32108.exe (PID: 5964)
- Unicorn-5538.exe (PID: 1240)
- Unicorn-58823.exe (PID: 2984)
- Unicorn-37633.exe (PID: 3008)
- Unicorn-28651.exe (PID: 5228)
- Unicorn-51594.exe (PID: 7544)
- Unicorn-16997.exe (PID: 8704)
- Unicorn-38555.exe (PID: 7780)
- Unicorn-24589.exe (PID: 8028)
- Unicorn-25165.exe (PID: 8484)
- Unicorn-7821.exe (PID: 8544)
- Unicorn-9906.exe (PID: 6960)
- Unicorn-26897.exe (PID: 7760)
- Unicorn-56804.exe (PID: 5204)
- Unicorn-60961.exe (PID: 6512)
- Unicorn-22928.exe (PID: 8584)
- Unicorn-46654.exe (PID: 8492)
- Unicorn-35855.exe (PID: 8552)
- Unicorn-2506.exe (PID: 8472)
- Unicorn-28241.exe (PID: 8572)
- Unicorn-65111.exe (PID: 9076)
- Unicorn-26156.exe (PID: 2644)
- Unicorn-53561.exe (PID: 3140)
- Unicorn-65216.exe (PID: 5544)
- Unicorn-60333.exe (PID: 1168)
- Unicorn-55315.exe (PID: 8036)
- Unicorn-30571.exe (PID: 8956)
- Unicorn-22621.exe (PID: 5984)
- Unicorn-14732.exe (PID: 8348)
- Unicorn-49669.exe (PID: 8532)
- Unicorn-61491.exe (PID: 9880)
- Unicorn-27997.exe (PID: 9912)
- Unicorn-64291.exe (PID: 9868)
- Unicorn-55699.exe (PID: 8232)
- Unicorn-2506.exe (PID: 8460)
- Unicorn-29415.exe (PID: 9248)
- Unicorn-25139.exe (PID: 4112)
- Unicorn-30759.exe (PID: 9604)
- Unicorn-43893.exe (PID: 8944)
- Unicorn-997.exe (PID: 8340)
- Unicorn-63271.exe (PID: 8328)
- Unicorn-52391.exe (PID: 10128)
- Unicorn-54137.exe (PID: 8652)
- Unicorn-38555.exe (PID: 10232)
- Unicorn-8200.exe (PID: 9616)
- Unicorn-62505.exe (PID: 7464)
- Unicorn-3135.exe (PID: 7676)
- Unicorn-12708.exe (PID: 11012)
- Unicorn-52362.exe (PID: 8508)
- Unicorn-37007.exe (PID: 9132)
- Unicorn-11067.exe (PID: 11040)
- Unicorn-64562.exe (PID: 8900)
- Unicorn-35564.exe (PID: 9236)
- Unicorn-52694.exe (PID: 9952)
- Unicorn-51404.exe (PID: 11048)
- Unicorn-48279.exe (PID: 9692)
- Unicorn-8152.exe (PID: 7172)
- Unicorn-50445.exe (PID: 10156)
- Unicorn-2580.exe (PID: 6248)
- Unicorn-57209.exe (PID: 10120)
- Unicorn-32705.exe (PID: 9720)
- Unicorn-58697.exe (PID: 8916)
- Unicorn-12502.exe (PID: 9176)
- Unicorn-2798.exe (PID: 8364)
- Unicorn-4095.exe (PID: 9320)
- Unicorn-6280.exe (PID: 9140)
- Unicorn-30793.exe (PID: 10696)
- Unicorn-333.exe (PID: 9344)
- Unicorn-27067.exe (PID: 9556)
- Unicorn-50006.exe (PID: 6032)
- Unicorn-39153.exe (PID: 10600)
- Unicorn-27879.exe (PID: 8836)
- Unicorn-7850.exe (PID: 10540)
- Unicorn-45813.exe (PID: 9416)
- Unicorn-48809.exe (PID: 9684)
- Unicorn-21059.exe (PID: 8044)
- Unicorn-5136.exe (PID: 3956)
- Unicorn-17691.exe (PID: 9088)
- Unicorn-23751.exe (PID: 5740)
- Unicorn-3885.exe (PID: 10656)
- Unicorn-5276.exe (PID: 5624)
- Unicorn-30951.exe (PID: 9760)
- Unicorn-3161.exe (PID: 8392)
- Unicorn-3734.exe (PID: 9944)
- Unicorn-23611.exe (PID: 10224)
- Unicorn-36597.exe (PID: 9476)
- Unicorn-48307.exe (PID: 10100)
- Unicorn-62458.exe (PID: 10608)
- Unicorn-27019.exe (PID: 10000)
- Unicorn-39119.exe (PID: 9772)
- Unicorn-27067.exe (PID: 9564)
- Unicorn-27469.exe (PID: 9272)
- Unicorn-35611.exe (PID: 9860)
- Unicorn-7082.exe (PID: 10208)
- Unicorn-50224.exe (PID: 8436)
- Unicorn-22987.exe (PID: 10408)
- Unicorn-65411.exe (PID: 10392)
- Unicorn-64099.exe (PID: 10008)
- Unicorn-11357.exe (PID: 10488)
- Unicorn-61083.exe (PID: 12496)
- Unicorn-23585.exe (PID: 10956)
- Unicorn-8504.exe (PID: 13984)
- Unicorn-61213.exe (PID: 13960)
- Unicorn-34571.exe (PID: 13976)
- Unicorn-7385.exe (PID: 9980)
- Unicorn-46864.exe (PID: 10468)
- Unicorn-34611.exe (PID: 4108)
- Unicorn-49796.exe (PID: 11792)
- Unicorn-25622.exe (PID: 10980)
- Unicorn-45547.exe (PID: 2416)
- Unicorn-7506.exe (PID: 12200)
- Unicorn-12629.exe (PID: 10896)
- Unicorn-12476.exe (PID: 9788)
- Unicorn-3348.exe (PID: 9300)
- Unicorn-27263.exe (PID: 10416)
- Unicorn-21447.exe (PID: 11136)
- Unicorn-25959.exe (PID: 4188)
- Unicorn-28965.exe (PID: 12296)
- Unicorn-40249.exe (PID: 10032)
- Unicorn-1069.exe (PID: 7796)
- Unicorn-44473.exe (PID: 7292)
- Unicorn-47273.exe (PID: 7356)
- Unicorn-23969.exe (PID: 11164)
- Unicorn-47440.exe (PID: 10904)
- Unicorn-64451.exe (PID: 10196)
- Unicorn-44473.exe (PID: 6384)
- Unicorn-48657.exe (PID: 9588)
- Unicorn-34651.exe (PID: 9704)
The sample compiled with chinese language support
- 1 (423).exe (PID: 7264)
Checks supported languages
- Unicorn-61822.exe (PID: 7340)
- 1 (423).exe (PID: 7264)
- Unicorn-1884.exe (PID: 7852)
- Unicorn-13773.exe (PID: 7836)
- Unicorn-36187.exe (PID: 8172)
- Unicorn-20405.exe (PID: 8184)
- Unicorn-13628.exe (PID: 1276)
- Unicorn-11582.exe (PID: 496)
- Unicorn-27225.exe (PID: 300)
- Unicorn-46254.exe (PID: 4024)
- Unicorn-14379.exe (PID: 4776)
- Unicorn-49902.exe (PID: 7320)
- Unicorn-11272.exe (PID: 4880)
- Unicorn-30301.exe (PID: 7316)
- Unicorn-34983.exe (PID: 6640)
- Unicorn-47152.exe (PID: 2284)
- Unicorn-54012.exe (PID: 5452)
- Unicorn-58096.exe (PID: 1764)
- Unicorn-6294.exe (PID: 1628)
- Unicorn-57541.exe (PID: 1452)
- Unicorn-48112.exe (PID: 1324)
- Unicorn-28246.exe (PID: 5972)
- Unicorn-53820.exe (PID: 5256)
- Unicorn-54641.exe (PID: 4008)
- Unicorn-28761.exe (PID: 4560)
- Unicorn-55211.exe (PID: 6468)
- Unicorn-63306.exe (PID: 1812)
- Unicorn-61525.exe (PID: 5056)
- Unicorn-51080.exe (PID: 1056)
- Unicorn-30105.exe (PID: 5892)
- Unicorn-22491.exe (PID: 3240)
- Unicorn-49264.exe (PID: 516)
- Unicorn-9035.exe (PID: 5124)
- Unicorn-13384.exe (PID: 6240)
- Unicorn-21553.exe (PID: 4244)
- Unicorn-19506.exe (PID: 660)
- Unicorn-5771.exe (PID: 5008)
- Unicorn-44203.exe (PID: 1088)
- Unicorn-54417.exe (PID: 3020)
- Unicorn-40603.exe (PID: 7492)
- Unicorn-53602.exe (PID: 7360)
- Unicorn-12014.exe (PID: 7636)
- Unicorn-20183.exe (PID: 7284)
- Unicorn-22028.exe (PID: 7276)
- Unicorn-6155.exe (PID: 7648)
- Unicorn-8293.exe (PID: 7228)
- Unicorn-34381.exe (PID: 5988)
- Unicorn-64345.exe (PID: 6148)
- Unicorn-40411.exe (PID: 5956)
- Unicorn-23810.exe (PID: 7684)
- Unicorn-34381.exe (PID: 7740)
- Unicorn-51894.exe (PID: 7756)
- Unicorn-33312.exe (PID: 728)
- Unicorn-50717.exe (PID: 7680)
- Unicorn-125.exe (PID: 7628)
- Unicorn-22897.exe (PID: 7860)
- Unicorn-55853.exe (PID: 7620)
- Unicorn-51677.exe (PID: 7580)
- Unicorn-9082.exe (PID: 7732)
- Unicorn-63737.exe (PID: 7964)
- Unicorn-9061.exe (PID: 7616)
- Unicorn-57515.exe (PID: 7612)
- Unicorn-35048.exe (PID: 7588)
- Unicorn-13166.exe (PID: 7752)
- Unicorn-33130.exe (PID: 7704)
- Unicorn-14920.exe (PID: 8144)
- Unicorn-43317.exe (PID: 7584)
- Unicorn-18739.exe (PID: 6668)
- Unicorn-23451.exe (PID: 7560)
- Unicorn-60229.exe (PID: 7700)
- Unicorn-40363.exe (PID: 8128)
- Unicorn-23720.exe (PID: 8104)
- Unicorn-54099.exe (PID: 7540)
- Unicorn-25767.exe (PID: 7152)
- Unicorn-21491.exe (PID: 7012)
- Unicorn-33743.exe (PID: 4944)
- Unicorn-17613.exe (PID: 7736)
- Unicorn-54547.exe (PID: 8164)
- Unicorn-50006.exe (PID: 6032)
- Unicorn-60961.exe (PID: 6512)
- Unicorn-19545.exe (PID: 5384)
- Unicorn-37633.exe (PID: 3008)
- Unicorn-55486.exe (PID: 6080)
- Unicorn-42295.exe (PID: 6592)
- Unicorn-58823.exe (PID: 2984)
- Unicorn-38403.exe (PID: 2772)
- Unicorn-22621.exe (PID: 5984)
- Unicorn-1069.exe (PID: 7796)
- Unicorn-3976.exe (PID: 7808)
- Unicorn-38555.exe (PID: 7780)
- Unicorn-65216.exe (PID: 5544)
- Unicorn-24589.exe (PID: 8028)
- Unicorn-21059.exe (PID: 8044)
- Unicorn-14282.exe (PID: 8080)
- Unicorn-8152.exe (PID: 7172)
- Unicorn-32181.exe (PID: 2140)
- Unicorn-5538.exe (PID: 1240)
- Unicorn-28651.exe (PID: 5228)
- Unicorn-26897.exe (PID: 7760)
- Unicorn-44909.exe (PID: 6824)
- Unicorn-32108.exe (PID: 5964)
- Unicorn-16783.exe (PID: 1132)
- Unicorn-51594.exe (PID: 7544)
- Unicorn-53561.exe (PID: 3140)
- Unicorn-26156.exe (PID: 2644)
- Unicorn-9906.exe (PID: 6960)
- Unicorn-25959.exe (PID: 4188)
- Unicorn-55699.exe (PID: 8228)
- Unicorn-62606.exe (PID: 8276)
- Unicorn-55699.exe (PID: 8232)
- Unicorn-2798.exe (PID: 8364)
- Unicorn-23987.exe (PID: 8732)
- Unicorn-50224.exe (PID: 8436)
- Unicorn-3161.exe (PID: 8392)
- Unicorn-2506.exe (PID: 8460)
- Unicorn-55315.exe (PID: 8036)
- Unicorn-11734.exe (PID: 8796)
- Unicorn-2506.exe (PID: 8472)
- Unicorn-13296.exe (PID: 8564)
- Unicorn-52362.exe (PID: 8508)
- Unicorn-7821.exe (PID: 8544)
- Unicorn-35855.exe (PID: 8552)
- Unicorn-28241.exe (PID: 8572)
- Unicorn-46654.exe (PID: 8492)
- Unicorn-25165.exe (PID: 8484)
- Unicorn-44578.exe (PID: 8712)
- Unicorn-16997.exe (PID: 8704)
- Unicorn-27879.exe (PID: 8836)
- Unicorn-49669.exe (PID: 8532)
- Unicorn-44962.exe (PID: 8908)
- Unicorn-64562.exe (PID: 8900)
- Unicorn-58697.exe (PID: 8916)
- Unicorn-43893.exe (PID: 8944)
- Unicorn-54137.exe (PID: 8652)
- Unicorn-25549.exe (PID: 8696)
- Unicorn-30571.exe (PID: 8956)
- Unicorn-22425.exe (PID: 9004)
- Unicorn-51013.exe (PID: 9064)
- Unicorn-63628.exe (PID: 9096)
- Unicorn-37007.exe (PID: 9132)
- Unicorn-6280.exe (PID: 9140)
- Unicorn-2580.exe (PID: 6248)
- Unicorn-63271.exe (PID: 8328)
- Unicorn-22928.exe (PID: 8584)
- Unicorn-12502.exe (PID: 9176)
- Unicorn-3135.exe (PID: 7676)
- Unicorn-17691.exe (PID: 9088)
- Unicorn-14732.exe (PID: 8348)
- Unicorn-997.exe (PID: 8340)
- Unicorn-65111.exe (PID: 9076)
- Unicorn-56804.exe (PID: 5204)
- Unicorn-35564.exe (PID: 9236)
- Unicorn-29415.exe (PID: 9248)
- Unicorn-27469.exe (PID: 9272)
- Unicorn-60333.exe (PID: 1168)
- Unicorn-25139.exe (PID: 4112)
- Unicorn-3348.exe (PID: 9300)
- Unicorn-4095.exe (PID: 9320)
- Unicorn-333.exe (PID: 9344)
- Unicorn-19493.exe (PID: 9368)
- Unicorn-1210.exe (PID: 9384)
- Unicorn-16155.exe (PID: 9392)
- Unicorn-36597.exe (PID: 9476)
- Unicorn-58863.exe (PID: 9512)
- Unicorn-27997.exe (PID: 9912)
- Unicorn-5870.exe (PID: 9484)
- Unicorn-45128.exe (PID: 9520)
- Unicorn-13332.exe (PID: 9536)
- Unicorn-27067.exe (PID: 9564)
- Unicorn-27067.exe (PID: 9556)
- Unicorn-64291.exe (PID: 9868)
- Unicorn-61491.exe (PID: 9880)
- Unicorn-48657.exe (PID: 9588)
- Unicorn-30759.exe (PID: 9604)
- Unicorn-8200.exe (PID: 9616)
- Unicorn-31313.exe (PID: 9640)
- Unicorn-43757.exe (PID: 9652)
- Unicorn-63623.exe (PID: 9668)
- Unicorn-48809.exe (PID: 9684)
- Unicorn-48279.exe (PID: 9692)
- Unicorn-30951.exe (PID: 9760)
- Unicorn-32705.exe (PID: 9720)
- Unicorn-45813.exe (PID: 9416)
- Unicorn-39119.exe (PID: 9772)
- Unicorn-34651.exe (PID: 9704)
- Unicorn-25475.exe (PID: 9828)
- Unicorn-49425.exe (PID: 9836)
- Unicorn-12476.exe (PID: 9788)
- Unicorn-779.exe (PID: 9804)
- Unicorn-3734.exe (PID: 9944)
- Unicorn-64099.exe (PID: 10008)
- Unicorn-203.exe (PID: 9456)
- Unicorn-35611.exe (PID: 9860)
- Unicorn-52694.exe (PID: 9952)
- Unicorn-31335.exe (PID: 9992)
- Unicorn-27019.exe (PID: 10000)
- Unicorn-17931.exe (PID: 9596)
- Unicorn-40249.exe (PID: 10032)
- Unicorn-48307.exe (PID: 10100)
- Unicorn-57209.exe (PID: 10120)
- Unicorn-52391.exe (PID: 10128)
- Unicorn-50445.exe (PID: 10156)
- Unicorn-62505.exe (PID: 7464)
- Unicorn-5136.exe (PID: 3956)
- Unicorn-39211.exe (PID: 9820)
- Unicorn-56859.exe (PID: 8072)
- Unicorn-53509.exe (PID: 9848)
- Unicorn-23611.exe (PID: 10224)
- Unicorn-38555.exe (PID: 10232)
- Unicorn-12708.exe (PID: 11012)
- Unicorn-7385.exe (PID: 9980)
- Unicorn-11067.exe (PID: 11040)
- Unicorn-51404.exe (PID: 11048)
- Unicorn-9604.exe (PID: 10344)
- Unicorn-30601.exe (PID: 10372)
- Unicorn-65411.exe (PID: 10392)
- Unicorn-28271.exe (PID: 10244)
- Unicorn-52583.exe (PID: 10272)
- Unicorn-63365.exe (PID: 10400)
- Unicorn-40999.exe (PID: 10424)
- Unicorn-27263.exe (PID: 10432)
- Unicorn-27263.exe (PID: 10444)
- Unicorn-27263.exe (PID: 10452)
- Unicorn-46864.exe (PID: 10468)
- Unicorn-30692.exe (PID: 10480)
- Unicorn-16957.exe (PID: 10496)
- Unicorn-51768.exe (PID: 10504)
- Unicorn-22987.exe (PID: 10408)
- Unicorn-27263.exe (PID: 10416)
- Unicorn-11357.exe (PID: 10488)
- Unicorn-62703.exe (PID: 10528)
- Unicorn-7850.exe (PID: 10540)
- Unicorn-62458.exe (PID: 10608)
- Unicorn-39153.exe (PID: 10600)
- Unicorn-59744.exe (PID: 10512)
- Unicorn-65503.exe (PID: 10520)
- Unicorn-45183.exe (PID: 10628)
- Unicorn-32830.exe (PID: 10732)
- Unicorn-30793.exe (PID: 10696)
- Unicorn-24763.exe (PID: 10792)
- Unicorn-4897.exe (PID: 10800)
- Unicorn-64451.exe (PID: 10196)
- Unicorn-40606.exe (PID: 10828)
- Unicorn-7082.exe (PID: 10208)
- Unicorn-12794.exe (PID: 10880)
- Unicorn-27839.exe (PID: 10912)
- Unicorn-47440.exe (PID: 10904)
- Unicorn-12629.exe (PID: 10896)
- Unicorn-50227.exe (PID: 10940)
- Unicorn-25622.exe (PID: 10980)
- Unicorn-60433.exe (PID: 10988)
- Unicorn-27477.exe (PID: 11092)
- Unicorn-54721.exe (PID: 10332)
- Unicorn-1581.exe (PID: 11116)
- Unicorn-21447.exe (PID: 11128)
- Unicorn-21447.exe (PID: 11136)
- Unicorn-32931.exe (PID: 10812)
- Unicorn-13662.exe (PID: 10560)
- Unicorn-64809.exe (PID: 8400)
- Unicorn-11887.exe (PID: 10972)
- Unicorn-23969.exe (PID: 11164)
- Unicorn-1145.exe (PID: 11188)
- Unicorn-953.exe (PID: 3024)
- Unicorn-23585.exe (PID: 10956)
- Unicorn-6764.exe (PID: 11432)
- Unicorn-6764.exe (PID: 11440)
- Unicorn-23751.exe (PID: 5740)
- Unicorn-5276.exe (PID: 5624)
- Unicorn-3885.exe (PID: 10656)
- Unicorn-15350.exe (PID: 5112)
- Unicorn-28965.exe (PID: 12296)
- Unicorn-42701.exe (PID: 5232)
- Unicorn-48347.exe (PID: 864)
- Unicorn-34611.exe (PID: 4172)
- Unicorn-34611.exe (PID: 5132)
- Unicorn-34611.exe (PID: 4108)
- Unicorn-45547.exe (PID: 2416)
- Unicorn-28389.exe (PID: 12248)
- Unicorn-28389.exe (PID: 12240)
- Unicorn-39325.exe (PID: 12224)
- Unicorn-21613.exe (PID: 12232)
- Unicorn-42125.exe (PID: 12216)
- Unicorn-42125.exe (PID: 12208)
- Unicorn-34000.exe (PID: 10772)
- Unicorn-61109.exe (PID: 11332)
- Unicorn-8016.exe (PID: 11268)
- Unicorn-11259.exe (PID: 10708)
- Unicorn-9770.exe (PID: 11300)
- Unicorn-27045.exe (PID: 10728)
- Unicorn-55079.exe (PID: 10676)
- Unicorn-26774.exe (PID: 11372)
- Unicorn-15775.exe (PID: 12152)
- Unicorn-10730.exe (PID: 11840)
- Unicorn-62862.exe (PID: 11384)
- Unicorn-18541.exe (PID: 10648)
- Unicorn-25313.exe (PID: 12052)
- Unicorn-4015.exe (PID: 11952)
- Unicorn-19069.exe (PID: 11804)
- Unicorn-24351.exe (PID: 11848)
- Unicorn-2733.exe (PID: 11768)
- Unicorn-48592.exe (PID: 11312)
- Unicorn-21320.exe (PID: 12092)
- Unicorn-64783.exe (PID: 12140)
- Unicorn-57410.exe (PID: 12124)
- Unicorn-37565.exe (PID: 12080)
- Unicorn-1000.exe (PID: 12036)
- Unicorn-49796.exe (PID: 11792)
- Unicorn-13423.exe (PID: 11976)
- Unicorn-55390.exe (PID: 11988)
- Unicorn-16761.exe (PID: 11964)
- Unicorn-41841.exe (PID: 12012)
- Unicorn-49525.exe (PID: 11996)
- Unicorn-62453.exe (PID: 12028)
- Unicorn-37657.exe (PID: 12116)
- Unicorn-40111.exe (PID: 11776)
- Unicorn-47487.exe (PID: 11908)
- Unicorn-46725.exe (PID: 12004)
- Unicorn-47487.exe (PID: 11900)
- Unicorn-61083.exe (PID: 12496)
- Unicorn-29011.exe (PID: 12552)
- Unicorn-37133.exe (PID: 12596)
- Unicorn-7506.exe (PID: 12200)
- Unicorn-29402.exe (PID: 12660)
- Unicorn-15967.exe (PID: 12680)
- Unicorn-50585.exe (PID: 12164)
- Unicorn-54861.exe (PID: 12696)
- Unicorn-43521.exe (PID: 10872)
- Unicorn-59116.exe (PID: 12704)
- Unicorn-27763.exe (PID: 12716)
- Unicorn-13828.exe (PID: 12744)
- Unicorn-53299.exe (PID: 12756)
- Unicorn-2733.exe (PID: 11784)
- Unicorn-8978.exe (PID: 12816)
- Unicorn-19043.exe (PID: 12824)
- Unicorn-14404.exe (PID: 12876)
- Unicorn-61254.exe (PID: 12916)
- Unicorn-11197.exe (PID: 12924)
- Unicorn-31216.exe (PID: 13012)
- Unicorn-31125.exe (PID: 12952)
- Unicorn-40279.exe (PID: 12192)
- Unicorn-23943.exe (PID: 12172)
- Unicorn-15967.exe (PID: 12688)
- Unicorn-16634.exe (PID: 13036)
- Unicorn-32255.exe (PID: 13224)
- Unicorn-53583.exe (PID: 13108)
- Unicorn-32255.exe (PID: 13200)
- Unicorn-50075.exe (PID: 13184)
- Unicorn-5306.exe (PID: 13304)
- Unicorn-51856.exe (PID: 13172)
- Unicorn-9390.exe (PID: 12320)
- Unicorn-31509.exe (PID: 13140)
- Unicorn-45991.exe (PID: 13260)
- Unicorn-32255.exe (PID: 13248)
- Unicorn-1529.exe (PID: 13208)
- Unicorn-1529.exe (PID: 13216)
- Unicorn-39677.exe (PID: 13160)
- Unicorn-1529.exe (PID: 13192)
- Unicorn-10704.exe (PID: 13020)
- Unicorn-22765.exe (PID: 13044)
- Unicorn-24802.exe (PID: 13080)
- Unicorn-1529.exe (PID: 13240)
- Unicorn-28722.exe (PID: 13116)
- Unicorn-8504.exe (PID: 13984)
- Unicorn-61213.exe (PID: 13960)
- Unicorn-34571.exe (PID: 14040)
- Unicorn-28440.exe (PID: 14024)
- Unicorn-16651.exe (PID: 13936)
- Unicorn-12588.exe (PID: 14004)
- Unicorn-4128.exe (PID: 13896)
- Unicorn-5412.exe (PID: 13912)
- Unicorn-14077.exe (PID: 13904)
- Unicorn-34571.exe (PID: 13976)
- Unicorn-34306.exe (PID: 14032)
- Unicorn-8504.exe (PID: 13992)
- Unicorn-10429.exe (PID: 13820)
- Unicorn-8099.exe (PID: 13844)
- Unicorn-8120.exe (PID: 13864)
- Unicorn-60756.exe (PID: 13808)
- Unicorn-16289.exe (PID: 13872)
- Unicorn-32255.exe (PID: 13232)
- Unicorn-20373.exe (PID: 13880)
- Unicorn-65468.exe (PID: 13832)
- Unicorn-28219.exe (PID: 13340)
- Unicorn-48193.exe (PID: 13732)
- Unicorn-35749.exe (PID: 13720)
- Unicorn-9853.exe (PID: 13752)
- Unicorn-37071.exe (PID: 13800)
- Unicorn-21318.exe (PID: 13776)
- Unicorn-23588.exe (PID: 13760)
- Unicorn-63251.exe (PID: 14324)
- Unicorn-25640.exe (PID: 14332)
- Unicorn-28440.exe (PID: 14260)
- Unicorn-9059.exe (PID: 14176)
- Unicorn-22794.exe (PID: 14192)
- Unicorn-22794.exe (PID: 14184)
- Unicorn-28440.exe (PID: 14252)
- Unicorn-43677.exe (PID: 14356)
- Unicorn-61497.exe (PID: 14364)
- Unicorn-61497.exe (PID: 14372)
- Unicorn-61497.exe (PID: 14380)
- Unicorn-61497.exe (PID: 14412)
- Unicorn-42161.exe (PID: 14396)
- Unicorn-48193.exe (PID: 13740)
- Unicorn-25033.exe (PID: 14632)
- Unicorn-61497.exe (PID: 14420)
- Unicorn-19313.exe (PID: 14812)
- Unicorn-28432.exe (PID: 14572)
- Unicorn-17035.exe (PID: 14444)
- Unicorn-4804.exe (PID: 14612)
- Unicorn-30770.exe (PID: 14492)
- Unicorn-50284.exe (PID: 14684)
- Unicorn-47762.exe (PID: 14468)
- Unicorn-17860.exe (PID: 14596)
- Unicorn-41561.exe (PID: 14648)
- Unicorn-59227.exe (PID: 14460)
- Unicorn-1825.exe (PID: 14388)
- Unicorn-1825.exe (PID: 14404)
- Unicorn-62649.exe (PID: 14884)
- Unicorn-44939.exe (PID: 14620)
- Unicorn-7418.exe (PID: 14848)
- Unicorn-19505.exe (PID: 14940)
- Unicorn-62649.exe (PID: 14876)
- Unicorn-61497.exe (PID: 14436)
- Unicorn-35723.exe (PID: 14792)
- Unicorn-62649.exe (PID: 14908)
- Unicorn-64503.exe (PID: 14696)
- Unicorn-19003.exe (PID: 14656)
- Unicorn-61497.exe (PID: 14452)
- Unicorn-58697.exe (PID: 14428)
- Unicorn-30770.exe (PID: 14484)
- Unicorn-22463.exe (PID: 14916)
- Unicorn-47273.exe (PID: 7356)
- Unicorn-20517.exe (PID: 14804)
- Unicorn-44473.exe (PID: 6384)
- Unicorn-44473.exe (PID: 7292)
- Unicorn-7497.exe (PID: 14588)
- Unicorn-62649.exe (PID: 14892)
- Unicorn-47762.exe (PID: 14476)
- Unicorn-30964.exe (PID: 15648)
- Unicorn-4129.exe (PID: 15680)
- Unicorn-46174.exe (PID: 15656)
- Unicorn-10808.exe (PID: 15548)
- Unicorn-33345.exe (PID: 15608)
- Unicorn-10808.exe (PID: 15540)
- Unicorn-4010.exe (PID: 15476)
- Unicorn-30388.exe (PID: 15516)
- Unicorn-26113.exe (PID: 15464)
- Unicorn-1991.exe (PID: 15428)
- Unicorn-53138.exe (PID: 15376)
- Unicorn-58452.exe (PID: 15412)
- Unicorn-45427.exe (PID: 15636)
- Unicorn-64093.exe (PID: 15620)
- Unicorn-25098.exe (PID: 15628)
- Unicorn-33537.exe (PID: 15356)
- Unicorn-47273.exe (PID: 7352)
- Unicorn-13631.exe (PID: 15668)
- Unicorn-33537.exe (PID: 15304)
- Unicorn-53403.exe (PID: 15324)
- Unicorn-53403.exe (PID: 15332)
- Unicorn-33537.exe (PID: 15340)
- Unicorn-33537.exe (PID: 15348)
Create files in a temporary directory
- Unicorn-13773.exe (PID: 7836)
- Unicorn-61822.exe (PID: 7340)
- 1 (423).exe (PID: 7264)
- Unicorn-1884.exe (PID: 7852)
- Unicorn-36187.exe (PID: 8172)
- Unicorn-20405.exe (PID: 8184)
- Unicorn-13628.exe (PID: 1276)
- Unicorn-27225.exe (PID: 300)
- Unicorn-11272.exe (PID: 4880)
- Unicorn-11582.exe (PID: 496)
- Unicorn-47152.exe (PID: 2284)
- Unicorn-49902.exe (PID: 7320)
- Unicorn-30301.exe (PID: 7316)
- Unicorn-34983.exe (PID: 6640)
- Unicorn-46254.exe (PID: 4024)
- Unicorn-6294.exe (PID: 1628)
- Unicorn-54012.exe (PID: 5452)
- Unicorn-58096.exe (PID: 1764)
- Unicorn-57541.exe (PID: 1452)
- Unicorn-28246.exe (PID: 5972)
- Unicorn-48112.exe (PID: 1324)
- Unicorn-63306.exe (PID: 1812)
- Unicorn-53820.exe (PID: 5256)
- Unicorn-28761.exe (PID: 4560)
- Unicorn-55211.exe (PID: 6468)
- Unicorn-61525.exe (PID: 5056)
- Unicorn-14379.exe (PID: 4776)
- Unicorn-51080.exe (PID: 1056)
- Unicorn-30105.exe (PID: 5892)
- Unicorn-22491.exe (PID: 3240)
- Unicorn-49264.exe (PID: 516)
- Unicorn-9035.exe (PID: 5124)
- Unicorn-5771.exe (PID: 5008)
- Unicorn-13384.exe (PID: 6240)
- Unicorn-21553.exe (PID: 4244)
- Unicorn-19506.exe (PID: 660)
- Unicorn-53602.exe (PID: 7360)
- Unicorn-44203.exe (PID: 1088)
- Unicorn-40603.exe (PID: 7492)
- Unicorn-34381.exe (PID: 5988)
- Unicorn-22028.exe (PID: 7276)
- Unicorn-64345.exe (PID: 6148)
- Unicorn-54641.exe (PID: 4008)
- Unicorn-40411.exe (PID: 5956)
- Unicorn-8293.exe (PID: 7228)
- Unicorn-20183.exe (PID: 7284)
- Unicorn-6155.exe (PID: 7648)
- Unicorn-54417.exe (PID: 3020)
- Unicorn-12014.exe (PID: 7636)
- Unicorn-51894.exe (PID: 7756)
- Unicorn-33312.exe (PID: 728)
- Unicorn-125.exe (PID: 7628)
- Unicorn-50717.exe (PID: 7680)
- Unicorn-23810.exe (PID: 7684)
- Unicorn-13166.exe (PID: 7752)
- Unicorn-55853.exe (PID: 7620)
- Unicorn-40363.exe (PID: 8128)
- Unicorn-34381.exe (PID: 7740)
- Unicorn-23451.exe (PID: 7560)
- Unicorn-63737.exe (PID: 7964)
- Unicorn-43317.exe (PID: 7584)
- Unicorn-60229.exe (PID: 7700)
- Unicorn-22897.exe (PID: 7860)
- Unicorn-25767.exe (PID: 7152)
- Unicorn-51677.exe (PID: 7580)
- Unicorn-23720.exe (PID: 8104)
- Unicorn-14920.exe (PID: 8144)
- Unicorn-57515.exe (PID: 7612)
- Unicorn-54099.exe (PID: 7540)
- Unicorn-35048.exe (PID: 7588)
- Unicorn-33130.exe (PID: 7704)
- Unicorn-42295.exe (PID: 6592)
- Unicorn-54547.exe (PID: 8164)
- Unicorn-21491.exe (PID: 7012)
- Unicorn-55486.exe (PID: 6080)
- Unicorn-23987.exe (PID: 8732)
- Unicorn-11734.exe (PID: 8796)
- Unicorn-33743.exe (PID: 4944)
- Unicorn-44578.exe (PID: 8712)
- Unicorn-14282.exe (PID: 8080)
- Unicorn-13296.exe (PID: 8564)
- Unicorn-9061.exe (PID: 7616)
- Unicorn-62606.exe (PID: 8276)
- Unicorn-3976.exe (PID: 7808)
- Unicorn-17613.exe (PID: 7736)
- Unicorn-19545.exe (PID: 5384)
- Unicorn-44909.exe (PID: 6824)
- Unicorn-9082.exe (PID: 7732)
- Unicorn-37633.exe (PID: 3008)
- Unicorn-25549.exe (PID: 8696)
- Unicorn-38403.exe (PID: 2772)
- Unicorn-55699.exe (PID: 8228)
- Unicorn-5538.exe (PID: 1240)
- Unicorn-28651.exe (PID: 5228)
- Unicorn-51594.exe (PID: 7544)
- Unicorn-38555.exe (PID: 7780)
- Unicorn-24589.exe (PID: 8028)
- Unicorn-16997.exe (PID: 8704)
- Unicorn-32181.exe (PID: 2140)
- Unicorn-25165.exe (PID: 8484)
- Unicorn-18739.exe (PID: 6668)
- Unicorn-32108.exe (PID: 5964)
- Unicorn-58823.exe (PID: 2984)
- Unicorn-9906.exe (PID: 6960)
- Unicorn-7821.exe (PID: 8544)
- Unicorn-26897.exe (PID: 7760)
- Unicorn-56804.exe (PID: 5204)
- Unicorn-46654.exe (PID: 8492)
- Unicorn-2506.exe (PID: 8472)
- Unicorn-60961.exe (PID: 6512)
- Unicorn-28241.exe (PID: 8572)
- Unicorn-22928.exe (PID: 8584)
- Unicorn-53561.exe (PID: 3140)
- Unicorn-65111.exe (PID: 9076)
- Unicorn-60333.exe (PID: 1168)
- Unicorn-55315.exe (PID: 8036)
- Unicorn-26156.exe (PID: 2644)
- Unicorn-65216.exe (PID: 5544)
- Unicorn-30571.exe (PID: 8956)
- Unicorn-14732.exe (PID: 8348)
- Unicorn-22621.exe (PID: 5984)
- Unicorn-64291.exe (PID: 9868)
- Unicorn-35855.exe (PID: 8552)
- Unicorn-27997.exe (PID: 9912)
- Unicorn-49669.exe (PID: 8532)
- Unicorn-61491.exe (PID: 9880)
- Unicorn-55699.exe (PID: 8232)
- Unicorn-2506.exe (PID: 8460)
- Unicorn-29415.exe (PID: 9248)
- Unicorn-25139.exe (PID: 4112)
- Unicorn-30759.exe (PID: 9604)
- Unicorn-54137.exe (PID: 8652)
- Unicorn-997.exe (PID: 8340)
- Unicorn-63271.exe (PID: 8328)
- Unicorn-62505.exe (PID: 7464)
- Unicorn-8200.exe (PID: 9616)
- Unicorn-52391.exe (PID: 10128)
- Unicorn-51404.exe (PID: 11048)
- Unicorn-64562.exe (PID: 8900)
- Unicorn-12708.exe (PID: 11012)
- Unicorn-35564.exe (PID: 9236)
- Unicorn-52694.exe (PID: 9952)
- Unicorn-57209.exe (PID: 10120)
- Unicorn-3135.exe (PID: 7676)
- Unicorn-8152.exe (PID: 7172)
- Unicorn-48279.exe (PID: 9692)
- Unicorn-12502.exe (PID: 9176)
- Unicorn-2580.exe (PID: 6248)
- Unicorn-52362.exe (PID: 8508)
- Unicorn-32705.exe (PID: 9720)
- Unicorn-38555.exe (PID: 10232)
- Unicorn-37007.exe (PID: 9132)
- Unicorn-50445.exe (PID: 10156)
- Unicorn-58697.exe (PID: 8916)
- Unicorn-4095.exe (PID: 9320)
- Unicorn-30793.exe (PID: 10696)
- Unicorn-333.exe (PID: 9344)
- Unicorn-27067.exe (PID: 9556)
- Unicorn-39153.exe (PID: 10600)
- Unicorn-50006.exe (PID: 6032)
- Unicorn-7850.exe (PID: 10540)
- Unicorn-45813.exe (PID: 9416)
- Unicorn-27879.exe (PID: 8836)
- Unicorn-48809.exe (PID: 9684)
- Unicorn-21059.exe (PID: 8044)
- Unicorn-5136.exe (PID: 3956)
- Unicorn-17691.exe (PID: 9088)
- Unicorn-5276.exe (PID: 5624)
- Unicorn-30951.exe (PID: 9760)
- Unicorn-39119.exe (PID: 9772)
- Unicorn-23751.exe (PID: 5740)
- Unicorn-27067.exe (PID: 9564)
- Unicorn-23611.exe (PID: 10224)
- Unicorn-3734.exe (PID: 9944)
- Unicorn-62458.exe (PID: 10608)
- Unicorn-27019.exe (PID: 10000)
- Unicorn-50224.exe (PID: 8436)
- Unicorn-2798.exe (PID: 8364)
- Unicorn-27469.exe (PID: 9272)
- Unicorn-35611.exe (PID: 9860)
- Unicorn-64099.exe (PID: 10008)
- Unicorn-23585.exe (PID: 10956)
- Unicorn-61083.exe (PID: 12496)
- Unicorn-65411.exe (PID: 10392)
- Unicorn-22987.exe (PID: 10408)
- Unicorn-34571.exe (PID: 13976)
- Unicorn-7385.exe (PID: 9980)
- Unicorn-12476.exe (PID: 9788)
- Unicorn-45547.exe (PID: 2416)
- Unicorn-3348.exe (PID: 9300)
- Unicorn-34611.exe (PID: 4108)
- Unicorn-7506.exe (PID: 12200)
- Unicorn-25959.exe (PID: 4188)
- Unicorn-28965.exe (PID: 12296)
- Unicorn-3885.exe (PID: 10656)
- Unicorn-6280.exe (PID: 9140)
Reads the software policy settings
- slui.exe (PID: 7412)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
638
Monitored processes
502
Malicious processes
79
Suspicious processes
72
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 300 | C:\Users\admin\AppData\Local\Temp\Unicorn-27225.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-27225.exe | Unicorn-36187.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 496 | C:\Users\admin\AppData\Local\Temp\Unicorn-11582.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-11582.exe | 1 (423).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 516 | C:\Users\admin\AppData\Local\Temp\Unicorn-49264.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-49264.exe | Unicorn-6294.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 660 | C:\Users\admin\AppData\Local\Temp\Unicorn-19506.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-19506.exe | Unicorn-13628.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 728 | C:\Users\admin\AppData\Local\Temp\Unicorn-33312.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-33312.exe | Unicorn-55211.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 864 | C:\Users\admin\AppData\Local\Temp\Unicorn-48347.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-48347.exe | — | Unicorn-23720.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1056 | C:\Users\admin\AppData\Local\Temp\Unicorn-51080.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-51080.exe | Unicorn-27225.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1088 | C:\Users\admin\AppData\Local\Temp\Unicorn-44203.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-44203.exe | Unicorn-36187.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1132 | C:\Users\admin\AppData\Local\Temp\Unicorn-16783.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-16783.exe | Unicorn-53820.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1168 | C:\Users\admin\AppData\Local\Temp\Unicorn-60333.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-60333.exe | Unicorn-23987.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
10 458
Read events
10 458
Write events
0
Delete events
0
Modification events
Executable files
822
Suspicious files
0
Text files
0
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 8184 | Unicorn-20405.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-47152.exe | executable | |
MD5:04CFBF867A1E13D39CAAE7CC70D3F87C | SHA256:DA234DFFFF93B74D3AE6DCEB59A981C91546C9C78FD5D9F7C906948C097AA955 | |||
| 7340 | Unicorn-61822.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-14379.exe | executable | |
MD5:31AE0810B053B1E71B4578506DF2AC16 | SHA256:4726601943A17482969573F1ABC9C3502F9B777D2E1A81FDA89C3C136627F052 | |||
| 7852 | Unicorn-1884.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30301.exe | executable | |
MD5:4F9D9C889A453CD80584615667794A39 | SHA256:3E2FCBA5F321363F5A3D3490890A3F3222A54BF21EE1530FE5730495A82F84C7 | |||
| 7852 | Unicorn-1884.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13628.exe | executable | |
MD5:C41871DCD764BA75131F3B16ABC928F7 | SHA256:C24E9BD93DC67F4A0D5D7E21F1440B19FED2D91AB16AA025AC36C2897D3798F6 | |||
| 8172 | Unicorn-36187.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-27225.exe | executable | |
MD5:189AE4E8B0D2559B9A5E97AE4757919B | SHA256:031507815ABF4D63B4D759C8967D282B9F6143C980DDDBF166783D06D67012AA | |||
| 1276 | Unicorn-13628.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-11272.exe | executable | |
MD5:BA0A6A6723661424324AB9FA607041F3 | SHA256:36D464752BB1F67D1D22CC120C79E6630CA8496E0E0A1DE90A1830142DF5BE03 | |||
| 7340 | Unicorn-61822.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-20405.exe | executable | |
MD5:848A14629D8338DDBC318B4DD5006D4F | SHA256:C6BBF9D1E332B36367DB92837CB972F714A42743546037987C69AB5525CEA5B9 | |||
| 7836 | Unicorn-13773.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-36187.exe | executable | |
MD5:8379AC20A9170E484E181CEA92112F11 | SHA256:B83A46572562D5879BDAB8D4727F8A7887F26A12D9381C2B1FF207013EF0A077 | |||
| 7264 | 1 (423).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-49902.exe | executable | |
MD5:107E4A5FC9483370CC7FEC52A801B611 | SHA256:CD710BA5BAA60F48FA4E7B7C4658F2FB59BCC100C808CB0A279CF6A73371A3F5 | |||
| 7264 | 1 (423).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-11582.exe | executable | |
MD5:CCD3B500314ECEF2B528D3D89F70F925 | SHA256:40BAA9B249D3CD568A09D4EB356FF587AAFDC9A7F77EF5D960CB8B013965FA32 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
8
TCP/UDP connections
26
DNS requests
18
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
5496 | MoUsoCoreWorker.exe | GET | 200 | 95.101.54.128:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
2104 | svchost.exe | GET | 200 | 95.101.54.128:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
— | — | GET | 200 | 95.101.54.128:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
8320 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
8320 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
7776 | backgroundTaskHost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
5496 | MoUsoCoreWorker.exe | 95.101.54.128:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
— | — | 95.101.54.128:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
2104 | svchost.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
2104 | svchost.exe | 95.101.54.128:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
5496 | MoUsoCoreWorker.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
5496 | MoUsoCoreWorker.exe | 4.231.128.59:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
3216 | svchost.exe | 40.115.3.253:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |