| File name: | 1 (385) |
| Full analysis: | https://app.any.run/tasks/911af316-79b7-4789-8f78-a9e7c0bc0d71 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 19:55:44 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | 7FF11BFE7B0616FC5A675644EE0E89F0 |
| SHA1: | E922B8CC6EFAC1839772C3978D10CEFA9060F795 |
| SHA256: | 553CCD219FB332E85C488E597EABA78112A734DA420A24AF931F9BDBFAB7F317 |
| SSDEEP: | 6144:P7K4TJIIvDnH05l/WZe/CbfxdtBqcKJGB9/WgeO5Tk/8SwjwpyAvEhnbf6w0sAHa:P+i6IH059WY4BdCa9OgeO5wx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- 1 (385).exe (PID: 2096)
- Unicorn-46490.exe (PID: 7200)
- Unicorn-41804.exe (PID: 7644)
- Unicorn-51295.exe (PID: 7652)
- Unicorn-38020.exe (PID: 7712)
- Unicorn-51756.exe (PID: 7704)
- Unicorn-61970.exe (PID: 7684)
- Unicorn-52816.exe (PID: 7804)
- Unicorn-61970.exe (PID: 7692)
- Unicorn-50678.exe (PID: 7848)
- Unicorn-24036.exe (PID: 7840)
- Unicorn-49287.exe (PID: 7824)
- Unicorn-16422.exe (PID: 7860)
- Unicorn-30157.exe (PID: 7868)
- Unicorn-31939.exe (PID: 7884)
- Unicorn-35494.exe (PID: 7944)
- Unicorn-44217.exe (PID: 7960)
- Unicorn-27225.exe (PID: 7992)
- Unicorn-31964.exe (PID: 7972)
- Unicorn-10797.exe (PID: 7984)
- Unicorn-50268.exe (PID: 8064)
- Unicorn-35115.exe (PID: 8104)
- Unicorn-62520.exe (PID: 8040)
- Unicorn-43781.exe (PID: 8096)
- Unicorn-19542.exe (PID: 8080)
- Unicorn-36070.exe (PID: 8012)
- Unicorn-42654.exe (PID: 8048)
- Unicorn-30402.exe (PID: 8072)
- Unicorn-61726.exe (PID: 1164)
- Unicorn-29608.exe (PID: 5772)
- Unicorn-26916.exe (PID: 7036)
- Unicorn-4357.exe (PID: 1184)
- Unicorn-36765.exe (PID: 3096)
- Unicorn-6879.exe (PID: 5204)
- Unicorn-33500.exe (PID: 2136)
- Unicorn-57450.exe (PID: 6620)
- Unicorn-34983.exe (PID: 2320)
- Unicorn-47428.exe (PID: 1228)
- Unicorn-31794.exe (PID: 8056)
- Unicorn-1788.exe (PID: 3304)
- Unicorn-18124.exe (PID: 3888)
- Unicorn-20284.exe (PID: 4024)
- Unicorn-5893.exe (PID: 5332)
- Unicorn-21462.exe (PID: 1452)
- Unicorn-23024.exe (PID: 5640)
- Unicorn-35276.exe (PID: 6184)
- Unicorn-23962.exe (PID: 2240)
- Unicorn-11949.exe (PID: 2108)
- Unicorn-42436.exe (PID: 1328)
- Unicorn-30184.exe (PID: 7196)
- Unicorn-25857.exe (PID: 5964)
- Unicorn-39936.exe (PID: 3272)
- Unicorn-49619.exe (PID: 1812)
- Unicorn-50050.exe (PID: 5384)
- Unicorn-16200.exe (PID: 856)
- Unicorn-24176.exe (PID: 7556)
- Unicorn-2712.exe (PID: 7620)
- Unicorn-5317.exe (PID: 2040)
- Unicorn-62432.exe (PID: 1180)
- Unicorn-53039.exe (PID: 7612)
- Unicorn-42000.exe (PID: 8088)
- Unicorn-58218.exe (PID: 2268)
- Unicorn-27967.exe (PID: 6752)
- Unicorn-51258.exe (PID: 3268)
- Unicorn-42374.exe (PID: 6964)
- Unicorn-3533.exe (PID: 7492)
- Unicorn-30455.exe (PID: 728)
- Unicorn-56272.exe (PID: 4620)
- Unicorn-40258.exe (PID: 5352)
- Unicorn-18938.exe (PID: 1012)
- Unicorn-22578.exe (PID: 7468)
- Unicorn-40066.exe (PID: 4164)
- Unicorn-28560.exe (PID: 7756)
- Unicorn-55442.exe (PID: 7568)
- Unicorn-21784.exe (PID: 7752)
- Unicorn-54610.exe (PID: 6592)
- Unicorn-57388.exe (PID: 7640)
- Unicorn-20824.exe (PID: 1764)
- Unicorn-32884.exe (PID: 7500)
- Unicorn-12821.exe (PID: 8260)
- Unicorn-23437.exe (PID: 5116)
- Unicorn-16587.exe (PID: 8812)
- Unicorn-25842.exe (PID: 8408)
- Unicorn-22453.exe (PID: 8836)
- Unicorn-356.exe (PID: 1096)
- Unicorn-63070.exe (PID: 7580)
- Unicorn-2904.exe (PID: 7608)
- Unicorn-49531.exe (PID: 5156)
- Unicorn-2852.exe (PID: 8828)
- Unicorn-30336.exe (PID: 1512)
- Unicorn-7558.exe (PID: 8804)
- Unicorn-46599.exe (PID: 9220)
- Unicorn-1045.exe (PID: 8480)
- Unicorn-735.exe (PID: 8968)
- Unicorn-64960.exe (PID: 8284)
- Unicorn-20479.exe (PID: 8632)
- Unicorn-15535.exe (PID: 8440)
- Unicorn-41772.exe (PID: 8292)
- Unicorn-54788.exe (PID: 9320)
- Unicorn-30118.exe (PID: 8580)
- Unicorn-64710.exe (PID: 9376)
- Unicorn-60486.exe (PID: 3896)
- Unicorn-13781.exe (PID: 8568)
- Unicorn-23678.exe (PID: 6876)
- Unicorn-60657.exe (PID: 4736)
- Unicorn-3257.exe (PID: 9368)
- Unicorn-3593.exe (PID: 4944)
- Unicorn-41320.exe (PID: 9960)
- Unicorn-39267.exe (PID: 9920)
- Unicorn-42282.exe (PID: 9940)
- Unicorn-26639.exe (PID: 9580)
- Unicorn-23486.exe (PID: 2084)
- Unicorn-21160.exe (PID: 6708)
- Unicorn-13787.exe (PID: 8852)
- Unicorn-24254.exe (PID: 9456)
- Unicorn-26178.exe (PID: 4212)
- Unicorn-55395.exe (PID: 5112)
- Unicorn-6791.exe (PID: 8348)
- Unicorn-32256.exe (PID: 8552)
- Unicorn-24664.exe (PID: 8896)
- Unicorn-7947.exe (PID: 9840)
- Unicorn-30621.exe (PID: 8888)
- Unicorn-46646.exe (PID: 8540)
- Unicorn-443.exe (PID: 9200)
- Unicorn-42728.exe (PID: 9400)
- Unicorn-7155.exe (PID: 9484)
- Unicorn-2811.exe (PID: 9868)
- Unicorn-14357.exe (PID: 8652)
- Unicorn-35572.exe (PID: 8328)
- Unicorn-53958.exe (PID: 9888)
- Unicorn-41436.exe (PID: 6816)
- Unicorn-42836.exe (PID: 9980)
- Unicorn-3885.exe (PID: 8248)
- Unicorn-10069.exe (PID: 5228)
- Unicorn-17180.exe (PID: 9560)
- Unicorn-13039.exe (PID: 2340)
- Unicorn-25894.exe (PID: 11448)
- Unicorn-23756.exe (PID: 11472)
- Unicorn-7652.exe (PID: 9424)
- Unicorn-63326.exe (PID: 8928)
- Unicorn-13999.exe (PID: 4200)
- Unicorn-5312.exe (PID: 9680)
- Unicorn-51602.exe (PID: 10496)
- Unicorn-13812.exe (PID: 10156)
- Unicorn-49765.exe (PID: 10220)
- Unicorn-45779.exe (PID: 7256)
- Unicorn-62789.exe (PID: 8844)
- Unicorn-7947.exe (PID: 10148)
- Unicorn-4072.exe (PID: 9744)
- Unicorn-63942.exe (PID: 9208)
- Unicorn-39914.exe (PID: 7308)
- Unicorn-51179.exe (PID: 12484)
- Unicorn-53667.exe (PID: 12384)
- Unicorn-6062.exe (PID: 12508)
- Unicorn-2427.exe (PID: 9716)
- Unicorn-51861.exe (PID: 8936)
- Unicorn-26754.exe (PID: 9280)
- Unicorn-55177.exe (PID: 8616)
- Unicorn-15447.exe (PID: 10092)
- Unicorn-9391.exe (PID: 10748)
- Unicorn-48426.exe (PID: 2516)
- Unicorn-23128.exe (PID: 8368)
- Unicorn-34586.exe (PID: 8744)
- Unicorn-6957.exe (PID: 9260)
- Unicorn-42514.exe (PID: 9228)
- Unicorn-54918.exe (PID: 9812)
- Unicorn-16496.exe (PID: 8908)
- Unicorn-1787.exe (PID: 9432)
- Unicorn-1891.exe (PID: 11608)
- Unicorn-7663.exe (PID: 3156)
- Unicorn-34319.exe (PID: 7472)
- Unicorn-59784.exe (PID: 8272)
- Unicorn-32565.exe (PID: 12128)
- Unicorn-51218.exe (PID: 10408)
- Unicorn-9928.exe (PID: 11732)
- Unicorn-44482.exe (PID: 9304)
- Unicorn-50258.exe (PID: 10084)
- Unicorn-8788.exe (PID: 11312)
Executable content was dropped or overwritten
- 1 (385).exe (PID: 2096)
- Unicorn-46490.exe (PID: 7200)
- Unicorn-41804.exe (PID: 7644)
- Unicorn-51295.exe (PID: 7652)
- Unicorn-61970.exe (PID: 7684)
- Unicorn-38020.exe (PID: 7712)
- Unicorn-61970.exe (PID: 7692)
- Unicorn-52816.exe (PID: 7804)
- Unicorn-49287.exe (PID: 7824)
- Unicorn-50678.exe (PID: 7848)
- Unicorn-51756.exe (PID: 7704)
- Unicorn-24036.exe (PID: 7840)
- Unicorn-16422.exe (PID: 7860)
- Unicorn-31939.exe (PID: 7884)
- Unicorn-30157.exe (PID: 7868)
- Unicorn-35494.exe (PID: 7944)
- Unicorn-44217.exe (PID: 7960)
- Unicorn-31964.exe (PID: 7972)
- Unicorn-27225.exe (PID: 7992)
- Unicorn-10797.exe (PID: 7984)
- Unicorn-31794.exe (PID: 8056)
- Unicorn-50268.exe (PID: 8064)
- Unicorn-36070.exe (PID: 8012)
- Unicorn-35115.exe (PID: 8104)
- Unicorn-42000.exe (PID: 8088)
- Unicorn-43781.exe (PID: 8096)
- Unicorn-62520.exe (PID: 8040)
- Unicorn-19542.exe (PID: 8080)
- Unicorn-42654.exe (PID: 8048)
- Unicorn-30402.exe (PID: 8072)
- Unicorn-29608.exe (PID: 5772)
- Unicorn-61726.exe (PID: 1164)
- Unicorn-26916.exe (PID: 7036)
- Unicorn-11949.exe (PID: 2108)
- Unicorn-4357.exe (PID: 1184)
- Unicorn-36765.exe (PID: 3096)
- Unicorn-6879.exe (PID: 5204)
- Unicorn-33500.exe (PID: 2136)
- Unicorn-57450.exe (PID: 6620)
- Unicorn-47428.exe (PID: 1228)
- Unicorn-34983.exe (PID: 2320)
- Unicorn-1788.exe (PID: 3304)
- Unicorn-18124.exe (PID: 3888)
- Unicorn-20284.exe (PID: 4024)
- Unicorn-5893.exe (PID: 5332)
- Unicorn-23962.exe (PID: 2240)
- Unicorn-21462.exe (PID: 1452)
- Unicorn-23024.exe (PID: 5640)
- Unicorn-35276.exe (PID: 6184)
- Unicorn-42436.exe (PID: 1328)
- Unicorn-25857.exe (PID: 5964)
- Unicorn-30184.exe (PID: 7196)
- Unicorn-49619.exe (PID: 1812)
- Unicorn-7071.exe (PID: 632)
- Unicorn-50050.exe (PID: 5384)
- Unicorn-39936.exe (PID: 3272)
- Unicorn-2712.exe (PID: 7620)
- Unicorn-24176.exe (PID: 7556)
- Unicorn-16200.exe (PID: 856)
- Unicorn-5317.exe (PID: 2040)
- Unicorn-62432.exe (PID: 1180)
- Unicorn-53039.exe (PID: 7612)
- Unicorn-3533.exe (PID: 7492)
- Unicorn-51258.exe (PID: 3268)
- Unicorn-57388.exe (PID: 7640)
- Unicorn-58218.exe (PID: 2268)
- Unicorn-27967.exe (PID: 6752)
- Unicorn-30455.exe (PID: 728)
- Unicorn-56272.exe (PID: 4620)
- Unicorn-40258.exe (PID: 5352)
- Unicorn-18938.exe (PID: 1012)
- Unicorn-22578.exe (PID: 7468)
- Unicorn-54610.exe (PID: 6592)
- Unicorn-40066.exe (PID: 4164)
- Unicorn-55442.exe (PID: 7568)
- Unicorn-21784.exe (PID: 7752)
- Unicorn-28560.exe (PID: 7756)
- Unicorn-41436.exe (PID: 6816)
- Unicorn-20824.exe (PID: 1764)
- Unicorn-25842.exe (PID: 8408)
- Unicorn-32884.exe (PID: 7500)
- Unicorn-12821.exe (PID: 8260)
- Unicorn-23437.exe (PID: 5116)
- Unicorn-16587.exe (PID: 8812)
- Unicorn-22453.exe (PID: 8836)
- Unicorn-356.exe (PID: 1096)
- Unicorn-2852.exe (PID: 8828)
- Unicorn-2904.exe (PID: 7608)
- Unicorn-49531.exe (PID: 5156)
- Unicorn-63070.exe (PID: 7580)
- Unicorn-23678.exe (PID: 6876)
- Unicorn-46599.exe (PID: 9220)
- Unicorn-1045.exe (PID: 8480)
- Unicorn-64960.exe (PID: 8284)
- Unicorn-30336.exe (PID: 1512)
- Unicorn-41772.exe (PID: 8292)
- Unicorn-735.exe (PID: 8968)
- Unicorn-20479.exe (PID: 8632)
- Unicorn-54788.exe (PID: 9320)
- Unicorn-15535.exe (PID: 8440)
- Unicorn-63326.exe (PID: 8928)
- Unicorn-64710.exe (PID: 9376)
- Unicorn-30118.exe (PID: 8580)
- Unicorn-60486.exe (PID: 3896)
- Unicorn-3257.exe (PID: 9368)
- Unicorn-60657.exe (PID: 4736)
- Unicorn-3593.exe (PID: 4944)
- Unicorn-13781.exe (PID: 8568)
- Unicorn-39267.exe (PID: 9920)
- Unicorn-42282.exe (PID: 9940)
- Unicorn-41320.exe (PID: 9960)
- Unicorn-26639.exe (PID: 9580)
- Unicorn-21160.exe (PID: 6708)
- Unicorn-13787.exe (PID: 8852)
- Unicorn-23486.exe (PID: 2084)
- Unicorn-24254.exe (PID: 9456)
- Unicorn-26178.exe (PID: 4212)
- Unicorn-55395.exe (PID: 5112)
- Unicorn-10069.exe (PID: 5228)
- Unicorn-6791.exe (PID: 8348)
- Unicorn-32256.exe (PID: 8552)
- Unicorn-24664.exe (PID: 8896)
- Unicorn-7947.exe (PID: 9840)
- Unicorn-46646.exe (PID: 8540)
- Unicorn-443.exe (PID: 9200)
- Unicorn-42728.exe (PID: 9400)
- Unicorn-7155.exe (PID: 9484)
- Unicorn-2811.exe (PID: 9868)
- Unicorn-14357.exe (PID: 8652)
- Unicorn-42836.exe (PID: 9980)
- Unicorn-53958.exe (PID: 9888)
- Unicorn-35572.exe (PID: 8328)
- Unicorn-47881.exe (PID: 10540)
- Unicorn-3885.exe (PID: 8248)
- Unicorn-25894.exe (PID: 11448)
- Unicorn-17180.exe (PID: 9560)
- Unicorn-23756.exe (PID: 11472)
- Unicorn-7558.exe (PID: 8804)
- Unicorn-13039.exe (PID: 2340)
- Unicorn-13999.exe (PID: 4200)
- Unicorn-5312.exe (PID: 9680)
- Unicorn-1891.exe (PID: 11608)
- Unicorn-51602.exe (PID: 10496)
- Unicorn-13812.exe (PID: 10156)
- Unicorn-49765.exe (PID: 10220)
- Unicorn-45779.exe (PID: 7256)
- Unicorn-62789.exe (PID: 8844)
- Unicorn-7947.exe (PID: 10148)
- Unicorn-4072.exe (PID: 9744)
- Unicorn-63942.exe (PID: 9208)
- Unicorn-39914.exe (PID: 7308)
- Unicorn-53667.exe (PID: 12384)
- Unicorn-40318.exe (PID: 12492)
- Unicorn-51179.exe (PID: 12484)
- Unicorn-42514.exe (PID: 9228)
- Unicorn-42374.exe (PID: 6964)
- Unicorn-51861.exe (PID: 8936)
- Unicorn-2427.exe (PID: 9716)
- Unicorn-26754.exe (PID: 9280)
- Unicorn-55177.exe (PID: 8616)
- Unicorn-9391.exe (PID: 10748)
- Unicorn-48426.exe (PID: 2516)
- Unicorn-23128.exe (PID: 8368)
- Unicorn-12642.exe (PID: 11960)
- Unicorn-15447.exe (PID: 10092)
- Unicorn-1787.exe (PID: 9432)
- Unicorn-65286.exe (PID: 9440)
- Unicorn-6957.exe (PID: 9260)
- Unicorn-3288.exe (PID: 1300)
- Unicorn-54918.exe (PID: 9812)
- Unicorn-16496.exe (PID: 8908)
- Unicorn-51218.exe (PID: 10408)
- Unicorn-7663.exe (PID: 3156)
- Unicorn-9928.exe (PID: 11732)
- Unicorn-44482.exe (PID: 9304)
- Unicorn-34319.exe (PID: 7472)
- Unicorn-59784.exe (PID: 8272)
- Unicorn-32565.exe (PID: 12128)
- Unicorn-137.exe (PID: 11072)
- Unicorn-62464.exe (PID: 12164)
- Unicorn-59858.exe (PID: 9172)
- Unicorn-34498.exe (PID: 10168)
- Unicorn-24746.exe (PID: 9864)
- Unicorn-30621.exe (PID: 8888)
- Unicorn-51820.exe (PID: 9688)
- Unicorn-5426.exe (PID: 6656)
- Unicorn-55177.exe (PID: 8624)
- Unicorn-18829.exe (PID: 10520)
- Unicorn-37801.exe (PID: 13036)
- Unicorn-25602.exe (PID: 8776)
- Unicorn-10081.exe (PID: 8672)
- Unicorn-8788.exe (PID: 11312)
- Unicorn-43194.exe (PID: 12136)
- Unicorn-7652.exe (PID: 9424)
- Unicorn-49583.exe (PID: 10780)
- Unicorn-15897.exe (PID: 10992)
- Unicorn-54508.exe (PID: 10740)
- Unicorn-3375.exe (PID: 8608)
- Unicorn-53589.exe (PID: 9408)
- Unicorn-12987.exe (PID: 9004)
- Unicorn-53372.exe (PID: 6676)
- Unicorn-14990.exe (PID: 11080)
- Unicorn-62795.exe (PID: 11044)
- Unicorn-9928.exe (PID: 11724)
- Unicorn-11020.exe (PID: 8880)
- Unicorn-50243.exe (PID: 9252)
- Unicorn-12907.exe (PID: 11944)
- Unicorn-53589.exe (PID: 9416)
- Unicorn-4063.exe (PID: 11748)
- Unicorn-30170.exe (PID: 11320)
- Unicorn-18663.exe (PID: 9524)
- Unicorn-14388.exe (PID: 11336)
- Unicorn-42614.exe (PID: 11880)
- Unicorn-59147.exe (PID: 12080)
- Unicorn-64164.exe (PID: 9664)
- Unicorn-43050.exe (PID: 5212)
- Unicorn-56838.exe (PID: 11852)
- Unicorn-45114.exe (PID: 9588)
- Unicorn-8623.exe (PID: 10512)
- Unicorn-34999.exe (PID: 9552)
- Unicorn-45362.exe (PID: 13300)
- Unicorn-26754.exe (PID: 9272)
- Unicorn-20855.exe (PID: 9328)
- Unicorn-39328.exe (PID: 10424)
- Unicorn-45236.exe (PID: 14748)
- Unicorn-53726.exe (PID: 9880)
- Unicorn-58851.exe (PID: 9244)
- Unicorn-23956.exe (PID: 14764)
- Unicorn-3143.exe (PID: 11244)
- Unicorn-32500.exe (PID: 11936)
- Unicorn-62532.exe (PID: 14756)
- Unicorn-24616.exe (PID: 9292)
- Unicorn-51939.exe (PID: 11064)
- Unicorn-12031.exe (PID: 10128)
- Unicorn-4355.exe (PID: 11764)
- Unicorn-17202.exe (PID: 9820)
- Unicorn-49280.exe (PID: 11692)
Executes application which crashes
- Unicorn-62681.exe (PID: 9640)
INFO
Checks supported languages
- 1 (385).exe (PID: 2096)
- Unicorn-46490.exe (PID: 7200)
- Unicorn-51295.exe (PID: 7652)
- Unicorn-41804.exe (PID: 7644)
- Unicorn-61970.exe (PID: 7692)
- Unicorn-61970.exe (PID: 7684)
- Unicorn-51756.exe (PID: 7704)
- Unicorn-38020.exe (PID: 7712)
- Unicorn-52816.exe (PID: 7804)
- Unicorn-49287.exe (PID: 7824)
- Unicorn-24036.exe (PID: 7840)
- Unicorn-50678.exe (PID: 7848)
- Unicorn-16422.exe (PID: 7860)
- Unicorn-30157.exe (PID: 7868)
- Unicorn-31939.exe (PID: 7884)
- Unicorn-35494.exe (PID: 7944)
- Unicorn-44217.exe (PID: 7960)
- Unicorn-27225.exe (PID: 7992)
- Unicorn-36070.exe (PID: 8012)
- Unicorn-10797.exe (PID: 7984)
- Unicorn-31964.exe (PID: 7972)
- Unicorn-19542.exe (PID: 8080)
- Unicorn-50268.exe (PID: 8064)
- Unicorn-42654.exe (PID: 8048)
- Unicorn-62520.exe (PID: 8040)
- Unicorn-31794.exe (PID: 8056)
- Unicorn-30402.exe (PID: 8072)
- Unicorn-42000.exe (PID: 8088)
- Unicorn-43781.exe (PID: 8096)
- Unicorn-35115.exe (PID: 8104)
- Unicorn-11949.exe (PID: 2108)
- Unicorn-29608.exe (PID: 5772)
- Unicorn-26916.exe (PID: 7036)
- Unicorn-61726.exe (PID: 1164)
- Unicorn-47428.exe (PID: 1228)
- Unicorn-4357.exe (PID: 1184)
- Unicorn-36765.exe (PID: 3096)
- Unicorn-34983.exe (PID: 2320)
- Unicorn-6879.exe (PID: 5204)
- Unicorn-33500.exe (PID: 2136)
- Unicorn-57450.exe (PID: 6620)
- Unicorn-23024.exe (PID: 5640)
- Unicorn-1788.exe (PID: 3304)
- Unicorn-58218.exe (PID: 2268)
- Unicorn-42436.exe (PID: 1328)
- Unicorn-23962.exe (PID: 2240)
- Unicorn-18124.exe (PID: 3888)
- Unicorn-56272.exe (PID: 4620)
- Unicorn-21462.exe (PID: 1452)
- Unicorn-35276.exe (PID: 6184)
- Unicorn-30184.exe (PID: 7196)
- Unicorn-53372.exe (PID: 6676)
- Unicorn-7071.exe (PID: 632)
- Unicorn-20284.exe (PID: 4024)
- Unicorn-25857.exe (PID: 5964)
- Unicorn-5893.exe (PID: 5332)
- Unicorn-39936.exe (PID: 3272)
- Unicorn-27967.exe (PID: 6752)
- Unicorn-54610.exe (PID: 6592)
- Unicorn-5317.exe (PID: 2040)
- Unicorn-16200.exe (PID: 856)
- Unicorn-10069.exe (PID: 5228)
- Unicorn-356.exe (PID: 1096)
- Unicorn-18938.exe (PID: 1012)
- Unicorn-49619.exe (PID: 1812)
- Unicorn-50050.exe (PID: 5384)
- Unicorn-63070.exe (PID: 7580)
- Unicorn-3533.exe (PID: 7492)
- Unicorn-55442.exe (PID: 7568)
- Unicorn-2904.exe (PID: 7608)
- Unicorn-24176.exe (PID: 7556)
- Unicorn-32884.exe (PID: 7500)
- Unicorn-22578.exe (PID: 7468)
- Unicorn-51258.exe (PID: 3268)
- Unicorn-57388.exe (PID: 7640)
- Unicorn-3288.exe (PID: 1300)
- Unicorn-2712.exe (PID: 7620)
- Unicorn-49531.exe (PID: 5156)
- Unicorn-62432.exe (PID: 1180)
- Unicorn-41436.exe (PID: 6816)
- Unicorn-23437.exe (PID: 5116)
- Unicorn-20824.exe (PID: 1764)
- Unicorn-60657.exe (PID: 4736)
- Unicorn-40258.exe (PID: 5352)
- Unicorn-21784.exe (PID: 7752)
- Unicorn-16356.exe (PID: 6228)
- Unicorn-28560.exe (PID: 7756)
- Unicorn-48426.exe (PID: 2516)
- Unicorn-40066.exe (PID: 4164)
- Unicorn-13039.exe (PID: 2340)
- Unicorn-42374.exe (PID: 6964)
- Unicorn-5426.exe (PID: 6656)
- Unicorn-34319.exe (PID: 7472)
- Unicorn-13999.exe (PID: 4200)
- Unicorn-21160.exe (PID: 6708)
- Unicorn-30455.exe (PID: 728)
- Unicorn-12821.exe (PID: 8260)
- Unicorn-3885.exe (PID: 8248)
- Unicorn-59784.exe (PID: 8272)
- Unicorn-64960.exe (PID: 8284)
- Unicorn-35572.exe (PID: 8328)
- Unicorn-6791.exe (PID: 8348)
- Unicorn-41772.exe (PID: 8292)
- Unicorn-3593.exe (PID: 4944)
- Unicorn-25842.exe (PID: 8408)
- Unicorn-23128.exe (PID: 8368)
- Unicorn-32256.exe (PID: 8552)
- Unicorn-13781.exe (PID: 8568)
- Unicorn-16587.exe (PID: 8812)
- Unicorn-22453.exe (PID: 8836)
- Unicorn-30118.exe (PID: 8580)
- Unicorn-46646.exe (PID: 8540)
- Unicorn-20479.exe (PID: 8632)
- Unicorn-10081.exe (PID: 8672)
- Unicorn-61228.exe (PID: 8728)
- Unicorn-34586.exe (PID: 8744)
- Unicorn-26994.exe (PID: 8764)
- Unicorn-25602.exe (PID: 8776)
- Unicorn-7558.exe (PID: 8804)
- Unicorn-55177.exe (PID: 8624)
- Unicorn-13787.exe (PID: 8852)
- Unicorn-30621.exe (PID: 8888)
- Unicorn-51861.exe (PID: 8936)
- Unicorn-735.exe (PID: 8968)
- Unicorn-24664.exe (PID: 8896)
- Unicorn-59858.exe (PID: 9172)
- Unicorn-2852.exe (PID: 8828)
- Unicorn-443.exe (PID: 9200)
- Unicorn-63942.exe (PID: 9208)
- Unicorn-62789.exe (PID: 8844)
- Unicorn-16496.exe (PID: 8908)
- Unicorn-56350.exe (PID: 3032)
- Unicorn-12987.exe (PID: 9004)
- Unicorn-63326.exe (PID: 8928)
- Unicorn-23678.exe (PID: 6876)
- Unicorn-45779.exe (PID: 7256)
- Unicorn-39914.exe (PID: 7308)
- Unicorn-26178.exe (PID: 4212)
- Unicorn-23486.exe (PID: 2084)
- Unicorn-46599.exe (PID: 9220)
- Unicorn-42514.exe (PID: 9228)
- Unicorn-58851.exe (PID: 9244)
- Unicorn-50243.exe (PID: 9252)
- Unicorn-6957.exe (PID: 9260)
- Unicorn-26754.exe (PID: 9280)
- Unicorn-26754.exe (PID: 9272)
- Unicorn-24616.exe (PID: 9292)
- Unicorn-3257.exe (PID: 9368)
- Unicorn-64710.exe (PID: 9376)
- Unicorn-42728.exe (PID: 9400)
- Unicorn-44482.exe (PID: 9304)
- Unicorn-53589.exe (PID: 9408)
- Unicorn-7652.exe (PID: 9424)
- Unicorn-20855.exe (PID: 9328)
- Unicorn-24254.exe (PID: 9456)
- Unicorn-1787.exe (PID: 9432)
- Unicorn-65286.exe (PID: 9440)
- Unicorn-42282.exe (PID: 9940)
- Unicorn-58799.exe (PID: 9448)
- Unicorn-7155.exe (PID: 9484)
- Unicorn-18663.exe (PID: 9524)
- Unicorn-4388.exe (PID: 9464)
- Unicorn-23989.exe (PID: 9476)
- Unicorn-17180.exe (PID: 9560)
- Unicorn-26639.exe (PID: 9580)
- Unicorn-45114.exe (PID: 9588)
- Unicorn-62681.exe (PID: 9640)
- Unicorn-32199.exe (PID: 9544)
- Unicorn-34999.exe (PID: 9552)
- Unicorn-2811.exe (PID: 9868)
- Unicorn-50258.exe (PID: 10084)
- Unicorn-15447.exe (PID: 10092)
- Unicorn-53726.exe (PID: 9880)
- Unicorn-49765.exe (PID: 10220)
- Unicorn-2427.exe (PID: 9716)
- Unicorn-4072.exe (PID: 9744)
- Unicorn-5312.exe (PID: 9680)
- Unicorn-55804.exe (PID: 9696)
- Unicorn-64164.exe (PID: 9664)
- Unicorn-51820.exe (PID: 9688)
- Unicorn-34498.exe (PID: 10168)
- Unicorn-13812.exe (PID: 10156)
- Unicorn-7947.exe (PID: 10148)
- Unicorn-59749.exe (PID: 10136)
- Unicorn-12031.exe (PID: 10128)
- Unicorn-17202.exe (PID: 9820)
- Unicorn-25178.exe (PID: 9672)
- Unicorn-53958.exe (PID: 9888)
- Unicorn-24746.exe (PID: 9864)
- Unicorn-39328.exe (PID: 10424)
- Unicorn-3771.exe (PID: 10228)
- Unicorn-54918.exe (PID: 9812)
- Unicorn-7947.exe (PID: 9840)
- Unicorn-56572.exe (PID: 9988)
- Unicorn-7663.exe (PID: 3156)
- Unicorn-59605.exe (PID: 7268)
- Unicorn-51602.exe (PID: 10496)
- Unicorn-18829.exe (PID: 10520)
- Unicorn-8623.exe (PID: 10512)
- Unicorn-51218.exe (PID: 10408)
- Unicorn-47881.exe (PID: 10540)
- Unicorn-43050.exe (PID: 5212)
- Unicorn-59194.exe (PID: 10476)
- Unicorn-62795.exe (PID: 11044)
- Unicorn-9391.exe (PID: 10748)
- Unicorn-25894.exe (PID: 11448)
- Unicorn-23756.exe (PID: 11472)
- Unicorn-62192.exe (PID: 10620)
- Unicorn-51939.exe (PID: 11064)
- Unicorn-14990.exe (PID: 11080)
- Unicorn-34591.exe (PID: 11088)
- Unicorn-45717.exe (PID: 11100)
- Unicorn-1891.exe (PID: 11608)
- Unicorn-50075.exe (PID: 11684)
- Unicorn-49280.exe (PID: 11692)
- Unicorn-137.exe (PID: 11072)
- Unicorn-43058.exe (PID: 11676)
- Unicorn-15613.exe (PID: 10720)
- Unicorn-6028.exe (PID: 11428)
- Unicorn-50185.exe (PID: 11228)
- Unicorn-3143.exe (PID: 11244)
- Unicorn-8788.exe (PID: 11312)
- Unicorn-14388.exe (PID: 11336)
- Unicorn-28123.exe (PID: 11300)
- Unicorn-14388.exe (PID: 11328)
- Unicorn-42422.exe (PID: 11392)
- Unicorn-1289.exe (PID: 11440)
- Unicorn-16608.exe (PID: 11704)
- Unicorn-1752.exe (PID: 11236)
- Unicorn-28123.exe (PID: 11292)
- Unicorn-25409.exe (PID: 6640)
- Unicorn-64357.exe (PID: 11028)
- Unicorn-39219.exe (PID: 11000)
- Unicorn-52925.exe (PID: 10756)
- Unicorn-40318.exe (PID: 12492)
- Unicorn-6062.exe (PID: 12508)
- Unicorn-38338.exe (PID: 11284)
- Unicorn-4063.exe (PID: 11748)
- Unicorn-4063.exe (PID: 11756)
- Unicorn-12577.exe (PID: 12064)
- Unicorn-22794.exe (PID: 12088)
- Unicorn-59147.exe (PID: 12080)
- Unicorn-21810.exe (PID: 12096)
- Unicorn-16030.exe (PID: 11972)
- Unicorn-43194.exe (PID: 12104)
- Unicorn-32565.exe (PID: 12128)
- Unicorn-4355.exe (PID: 11764)
- Unicorn-31465.exe (PID: 10772)
- Unicorn-43194.exe (PID: 12112)
- Unicorn-62464.exe (PID: 12164)
- Unicorn-42422.exe (PID: 11800)
- Unicorn-19864.exe (PID: 11348)
- Unicorn-48187.exe (PID: 11808)
- Unicorn-23873.exe (PID: 11828)
- Unicorn-40655.exe (PID: 11788)
- Unicorn-9928.exe (PID: 11724)
- Unicorn-51179.exe (PID: 12484)
- Unicorn-1263.exe (PID: 11740)
- Unicorn-51529.exe (PID: 12172)
- Unicorn-9015.exe (PID: 12404)
- Unicorn-42614.exe (PID: 11880)
- Unicorn-56930.exe (PID: 11860)
- Unicorn-53693.exe (PID: 11868)
- Unicorn-12907.exe (PID: 11944)
- Unicorn-56838.exe (PID: 11852)
- Unicorn-5857.exe (PID: 12364)
- Unicorn-64628.exe (PID: 12268)
- Unicorn-39219.exe (PID: 12208)
- Unicorn-53667.exe (PID: 12384)
- Unicorn-56930.exe (PID: 12180)
- Unicorn-18690.exe (PID: 12144)
- Unicorn-9928.exe (PID: 11732)
- Unicorn-12642.exe (PID: 11960)
- Unicorn-61916.exe (PID: 12004)
- Unicorn-43194.exe (PID: 12136)
- Unicorn-21630.exe (PID: 12120)
- Unicorn-50782.exe (PID: 11952)
- Unicorn-43826.exe (PID: 12412)
- Unicorn-43194.exe (PID: 12072)
- Unicorn-2885.exe (PID: 12672)
- Unicorn-6777.exe (PID: 11988)
- Unicorn-30453.exe (PID: 12356)
- Unicorn-23590.exe (PID: 12248)
- Unicorn-13436.exe (PID: 13252)
- Unicorn-42434.exe (PID: 12704)
- Unicorn-22996.exe (PID: 13276)
- Unicorn-65315.exe (PID: 12848)
- Unicorn-6062.exe (PID: 12856)
- Unicorn-56170.exe (PID: 12748)
- Unicorn-54687.exe (PID: 12724)
- Unicorn-40672.exe (PID: 12152)
- Unicorn-56654.exe (PID: 12528)
- Unicorn-13218.exe (PID: 12548)
- Unicorn-59155.exe (PID: 12556)
- Unicorn-57209.exe (PID: 12536)
- Unicorn-7353.exe (PID: 12580)
- Unicorn-42434.exe (PID: 12760)
- Unicorn-9015.exe (PID: 12652)
- Unicorn-10033.exe (PID: 12232)
- Unicorn-26888.exe (PID: 13308)
- Unicorn-12232.exe (PID: 12464)
- Unicorn-43316.exe (PID: 12476)
- Unicorn-37801.exe (PID: 13016)
- Unicorn-42434.exe (PID: 12696)
- Unicorn-14798.exe (PID: 12216)
- Unicorn-15898.exe (PID: 12732)
- Unicorn-22194.exe (PID: 12224)
- Unicorn-9015.exe (PID: 12664)
- Unicorn-17568.exe (PID: 12588)
- Unicorn-53530.exe (PID: 6132)
- Unicorn-59155.exe (PID: 12564)
- Unicorn-49583.exe (PID: 10780)
- Unicorn-40602.exe (PID: 13004)
- Unicorn-42434.exe (PID: 12820)
- Unicorn-1865.exe (PID: 12240)
- Unicorn-45362.exe (PID: 13300)
- Unicorn-6083.exe (PID: 13140)
- Unicorn-53728.exe (PID: 13660)
- Unicorn-41824.exe (PID: 11020)
- Unicorn-65158.exe (PID: 12200)
- Unicorn-55997.exe (PID: 12276)
- Unicorn-31932.exe (PID: 13704)
- Unicorn-48823.exe (PID: 13736)
- Unicorn-1297.exe (PID: 13636)
- Unicorn-34070.exe (PID: 13676)
- Unicorn-25710.exe (PID: 13716)
- Unicorn-11511.exe (PID: 13624)
- Unicorn-36588.exe (PID: 10764)
- Unicorn-3719.exe (PID: 12188)
- Unicorn-8750.exe (PID: 12680)
- Unicorn-50193.exe (PID: 13288)
- Unicorn-42434.exe (PID: 12440)
- Unicorn-6777.exe (PID: 11980)
- Unicorn-37801.exe (PID: 13028)
- Unicorn-35632.exe (PID: 13568)
- Unicorn-35056.exe (PID: 11644)
- Unicorn-39286.exe (PID: 12396)
- Unicorn-3130.exe (PID: 13260)
- Unicorn-45236.exe (PID: 14748)
- Unicorn-62532.exe (PID: 14756)
- Unicorn-25710.exe (PID: 13720)
- Unicorn-43727.exe (PID: 13972)
- Unicorn-22513.exe (PID: 14716)
- Unicorn-37260.exe (PID: 14672)
- Unicorn-4988.exe (PID: 14700)
- Unicorn-33576.exe (PID: 14692)
- Unicorn-52518.exe (PID: 14812)
- Unicorn-13177.exe (PID: 14944)
- Unicorn-11293.exe (PID: 14888)
- Unicorn-61956.exe (PID: 14900)
- Unicorn-31740.exe (PID: 13964)
- Unicorn-60996.exe (PID: 14860)
- Unicorn-45850.exe (PID: 14976)
- Unicorn-11039.exe (PID: 14968)
- Unicorn-23956.exe (PID: 14764)
- Unicorn-63409.exe (PID: 14732)
- Unicorn-10286.exe (PID: 14920)
- Unicorn-30653.exe (PID: 15000)
- Unicorn-13602.exe (PID: 15024)
- Unicorn-31475.exe (PID: 15052)
- Unicorn-49804.exe (PID: 15060)
- Unicorn-5263.exe (PID: 15076)
- Unicorn-37583.exe (PID: 15116)
- Unicorn-20283.exe (PID: 13952)
- Unicorn-27246.exe (PID: 15032)
The sample compiled with chinese language support
- 1 (385).exe (PID: 2096)
Reads the computer name
- 1 (385).exe (PID: 2096)
- Unicorn-46490.exe (PID: 7200)
- Unicorn-51295.exe (PID: 7652)
- Unicorn-41804.exe (PID: 7644)
- Unicorn-61970.exe (PID: 7684)
- Unicorn-61970.exe (PID: 7692)
- Unicorn-51756.exe (PID: 7704)
- Unicorn-49287.exe (PID: 7824)
- Unicorn-38020.exe (PID: 7712)
- Unicorn-52816.exe (PID: 7804)
- Unicorn-24036.exe (PID: 7840)
- Unicorn-16422.exe (PID: 7860)
- Unicorn-31939.exe (PID: 7884)
- Unicorn-30157.exe (PID: 7868)
- Unicorn-35494.exe (PID: 7944)
- Unicorn-50678.exe (PID: 7848)
- Unicorn-44217.exe (PID: 7960)
- Unicorn-31964.exe (PID: 7972)
- Unicorn-27225.exe (PID: 7992)
- Unicorn-10797.exe (PID: 7984)
- Unicorn-31794.exe (PID: 8056)
- Unicorn-43781.exe (PID: 8096)
- Unicorn-62520.exe (PID: 8040)
- Unicorn-19542.exe (PID: 8080)
- Unicorn-42000.exe (PID: 8088)
- Unicorn-50268.exe (PID: 8064)
- Unicorn-36070.exe (PID: 8012)
- Unicorn-35115.exe (PID: 8104)
- Unicorn-42654.exe (PID: 8048)
- Unicorn-30402.exe (PID: 8072)
- Unicorn-29608.exe (PID: 5772)
- Unicorn-11949.exe (PID: 2108)
- Unicorn-26916.exe (PID: 7036)
- Unicorn-4357.exe (PID: 1184)
- Unicorn-36765.exe (PID: 3096)
- Unicorn-61726.exe (PID: 1164)
- Unicorn-34983.exe (PID: 2320)
- Unicorn-6879.exe (PID: 5204)
- Unicorn-33500.exe (PID: 2136)
- Unicorn-47428.exe (PID: 1228)
- Unicorn-1788.exe (PID: 3304)
- Unicorn-57450.exe (PID: 6620)
- Unicorn-21462.exe (PID: 1452)
- Unicorn-18124.exe (PID: 3888)
- Unicorn-20284.exe (PID: 4024)
- Unicorn-30184.exe (PID: 7196)
- Unicorn-23962.exe (PID: 2240)
- Unicorn-5893.exe (PID: 5332)
- Unicorn-23024.exe (PID: 5640)
- Unicorn-35276.exe (PID: 6184)
- Unicorn-42436.exe (PID: 1328)
- Unicorn-25857.exe (PID: 5964)
- Unicorn-39936.exe (PID: 3272)
- Unicorn-50050.exe (PID: 5384)
- Unicorn-49619.exe (PID: 1812)
- Unicorn-7071.exe (PID: 632)
- Unicorn-16200.exe (PID: 856)
- Unicorn-24176.exe (PID: 7556)
- Unicorn-5317.exe (PID: 2040)
- Unicorn-62432.exe (PID: 1180)
- Unicorn-27967.exe (PID: 6752)
- Unicorn-58218.exe (PID: 2268)
- Unicorn-51258.exe (PID: 3268)
- Unicorn-57388.exe (PID: 7640)
- Unicorn-40258.exe (PID: 5352)
- Unicorn-42374.exe (PID: 6964)
- Unicorn-18938.exe (PID: 1012)
- Unicorn-22578.exe (PID: 7468)
- Unicorn-56272.exe (PID: 4620)
- Unicorn-40066.exe (PID: 4164)
- Unicorn-21784.exe (PID: 7752)
- Unicorn-25842.exe (PID: 8408)
- Unicorn-20824.exe (PID: 1764)
- Unicorn-32884.exe (PID: 7500)
- Unicorn-41436.exe (PID: 6816)
- Unicorn-23437.exe (PID: 5116)
- Unicorn-16587.exe (PID: 8812)
- Unicorn-22453.exe (PID: 8836)
- Unicorn-356.exe (PID: 1096)
- Unicorn-60486.exe (PID: 3896)
- Unicorn-2904.exe (PID: 7608)
- Unicorn-63070.exe (PID: 7580)
- Unicorn-49531.exe (PID: 5156)
- Unicorn-23678.exe (PID: 6876)
- Unicorn-7558.exe (PID: 8804)
- Unicorn-46599.exe (PID: 9220)
- Unicorn-735.exe (PID: 8968)
- Unicorn-64960.exe (PID: 8284)
- Unicorn-41772.exe (PID: 8292)
- Unicorn-1045.exe (PID: 8480)
- Unicorn-13781.exe (PID: 8568)
- Unicorn-3257.exe (PID: 9368)
- Unicorn-60657.exe (PID: 4736)
- Unicorn-64710.exe (PID: 9376)
- Unicorn-3593.exe (PID: 4944)
- Unicorn-39267.exe (PID: 9920)
- Unicorn-42282.exe (PID: 9940)
- Unicorn-41320.exe (PID: 9960)
- Unicorn-10069.exe (PID: 5228)
- Unicorn-3288.exe (PID: 1300)
- Unicorn-42514.exe (PID: 9228)
- Unicorn-35572.exe (PID: 8328)
- Unicorn-34319.exe (PID: 7472)
- Unicorn-48426.exe (PID: 2516)
- Unicorn-13999.exe (PID: 4200)
- Unicorn-6957.exe (PID: 9260)
- Unicorn-26639.exe (PID: 9580)
- Unicorn-7947.exe (PID: 10148)
- Unicorn-17180.exe (PID: 9560)
- Unicorn-59784.exe (PID: 8272)
- Unicorn-13787.exe (PID: 8852)
- Unicorn-21160.exe (PID: 6708)
- Unicorn-30621.exe (PID: 8888)
- Unicorn-55395.exe (PID: 5112)
- Unicorn-24254.exe (PID: 9456)
- Unicorn-23128.exe (PID: 8368)
- Unicorn-443.exe (PID: 9200)
- Unicorn-47881.exe (PID: 10540)
- Unicorn-3885.exe (PID: 8248)
- Unicorn-45779.exe (PID: 7256)
- Unicorn-54918.exe (PID: 9812)
- Unicorn-24664.exe (PID: 8896)
- Unicorn-13812.exe (PID: 10156)
- Unicorn-16496.exe (PID: 8908)
- Unicorn-32256.exe (PID: 8552)
- Unicorn-42728.exe (PID: 9400)
- Unicorn-42836.exe (PID: 9980)
- Unicorn-2811.exe (PID: 9868)
- Unicorn-4072.exe (PID: 9744)
- Unicorn-51602.exe (PID: 10496)
- Unicorn-7155.exe (PID: 9484)
- Unicorn-7663.exe (PID: 3156)
- Unicorn-55177.exe (PID: 8616)
- Unicorn-14357.exe (PID: 8652)
- Unicorn-53958.exe (PID: 9888)
- Unicorn-63942.exe (PID: 9208)
- Unicorn-25894.exe (PID: 11448)
- Unicorn-23756.exe (PID: 11472)
- Unicorn-5312.exe (PID: 9680)
- Unicorn-13039.exe (PID: 2340)
- Unicorn-51861.exe (PID: 8936)
- Unicorn-40318.exe (PID: 12492)
- Unicorn-6062.exe (PID: 12508)
- Unicorn-51179.exe (PID: 12484)
- Unicorn-53726.exe (PID: 9880)
- Unicorn-9391.exe (PID: 10748)
- Unicorn-2427.exe (PID: 9716)
- Unicorn-24746.exe (PID: 9864)
- Unicorn-15897.exe (PID: 10992)
- Unicorn-4355.exe (PID: 11764)
- Unicorn-12642.exe (PID: 11960)
- Unicorn-8788.exe (PID: 11312)
- Unicorn-3143.exe (PID: 11244)
- Unicorn-32565.exe (PID: 12128)
- Unicorn-34498.exe (PID: 10168)
- Unicorn-9928.exe (PID: 11724)
- Unicorn-45362.exe (PID: 13300)
- Unicorn-10081.exe (PID: 8672)
- Unicorn-26754.exe (PID: 9272)
- Unicorn-34999.exe (PID: 9552)
- Unicorn-50258.exe (PID: 10084)
- Unicorn-39328.exe (PID: 10424)
- Unicorn-51820.exe (PID: 9688)
- Unicorn-64164.exe (PID: 9664)
- Unicorn-50075.exe (PID: 11684)
- Unicorn-1787.exe (PID: 9432)
- Unicorn-44482.exe (PID: 9304)
- Unicorn-18829.exe (PID: 10520)
- Unicorn-24616.exe (PID: 9292)
- Unicorn-5426.exe (PID: 6656)
- Unicorn-53372.exe (PID: 6676)
- Unicorn-8623.exe (PID: 10512)
- Unicorn-53589.exe (PID: 9416)
- Unicorn-25602.exe (PID: 8776)
- Unicorn-34586.exe (PID: 8744)
- Unicorn-51939.exe (PID: 11064)
- Unicorn-59147.exe (PID: 12080)
- Unicorn-4063.exe (PID: 11748)
- Unicorn-49583.exe (PID: 10780)
- Unicorn-12987.exe (PID: 9004)
- Unicorn-48187.exe (PID: 11808)
Create files in a temporary directory
- 1 (385).exe (PID: 2096)
- Unicorn-61970.exe (PID: 7684)
- Unicorn-38020.exe (PID: 7712)
- Unicorn-46490.exe (PID: 7200)
- Unicorn-52816.exe (PID: 7804)
- Unicorn-16422.exe (PID: 7860)
- Unicorn-51756.exe (PID: 7704)
- Unicorn-51295.exe (PID: 7652)
- Unicorn-50678.exe (PID: 7848)
- Unicorn-31939.exe (PID: 7884)
- Unicorn-35494.exe (PID: 7944)
- Unicorn-31964.exe (PID: 7972)
- Unicorn-44217.exe (PID: 7960)
- Unicorn-27225.exe (PID: 7992)
- Unicorn-31794.exe (PID: 8056)
- Unicorn-50268.exe (PID: 8064)
- Unicorn-36070.exe (PID: 8012)
- Unicorn-35115.exe (PID: 8104)
- Unicorn-43781.exe (PID: 8096)
- Unicorn-42000.exe (PID: 8088)
- Unicorn-30157.exe (PID: 7868)
- Unicorn-42654.exe (PID: 8048)
- Unicorn-24036.exe (PID: 7840)
- Unicorn-41804.exe (PID: 7644)
- Unicorn-30402.exe (PID: 8072)
- Unicorn-61726.exe (PID: 1164)
- Unicorn-29608.exe (PID: 5772)
- Unicorn-4357.exe (PID: 1184)
- Unicorn-36765.exe (PID: 3096)
- Unicorn-34983.exe (PID: 2320)
- Unicorn-33500.exe (PID: 2136)
- Unicorn-57450.exe (PID: 6620)
- Unicorn-47428.exe (PID: 1228)
- Unicorn-6879.exe (PID: 5204)
- Unicorn-1788.exe (PID: 3304)
- Unicorn-18124.exe (PID: 3888)
- Unicorn-21462.exe (PID: 1452)
- Unicorn-61970.exe (PID: 7692)
- Unicorn-10797.exe (PID: 7984)
- Unicorn-62520.exe (PID: 8040)
- Unicorn-20284.exe (PID: 4024)
- Unicorn-5893.exe (PID: 5332)
- Unicorn-26916.exe (PID: 7036)
- Unicorn-11949.exe (PID: 2108)
- Unicorn-42436.exe (PID: 1328)
- Unicorn-25857.exe (PID: 5964)
- Unicorn-35276.exe (PID: 6184)
- Unicorn-30184.exe (PID: 7196)
- Unicorn-39936.exe (PID: 3272)
- Unicorn-19542.exe (PID: 8080)
- Unicorn-49619.exe (PID: 1812)
- Unicorn-7071.exe (PID: 632)
- Unicorn-50050.exe (PID: 5384)
- Unicorn-16200.exe (PID: 856)
- Unicorn-2712.exe (PID: 7620)
- Unicorn-24176.exe (PID: 7556)
- Unicorn-62432.exe (PID: 1180)
- Unicorn-53039.exe (PID: 7612)
- Unicorn-3533.exe (PID: 7492)
- Unicorn-5317.exe (PID: 2040)
- Unicorn-27967.exe (PID: 6752)
- Unicorn-51258.exe (PID: 3268)
- Unicorn-58218.exe (PID: 2268)
- Unicorn-30455.exe (PID: 728)
- Unicorn-49287.exe (PID: 7824)
- Unicorn-40258.exe (PID: 5352)
- Unicorn-18938.exe (PID: 1012)
- Unicorn-56272.exe (PID: 4620)
- Unicorn-55442.exe (PID: 7568)
- Unicorn-54610.exe (PID: 6592)
- Unicorn-21784.exe (PID: 7752)
- Unicorn-41436.exe (PID: 6816)
- Unicorn-25842.exe (PID: 8408)
- Unicorn-32884.exe (PID: 7500)
- Unicorn-57388.exe (PID: 7640)
- Unicorn-12821.exe (PID: 8260)
- Unicorn-16587.exe (PID: 8812)
- Unicorn-22453.exe (PID: 8836)
- Unicorn-356.exe (PID: 1096)
- Unicorn-23962.exe (PID: 2240)
- Unicorn-2852.exe (PID: 8828)
- Unicorn-2904.exe (PID: 7608)
- Unicorn-49531.exe (PID: 5156)
- Unicorn-63070.exe (PID: 7580)
- Unicorn-23678.exe (PID: 6876)
- Unicorn-1045.exe (PID: 8480)
- Unicorn-30336.exe (PID: 1512)
- Unicorn-46599.exe (PID: 9220)
- Unicorn-41772.exe (PID: 8292)
- Unicorn-735.exe (PID: 8968)
- Unicorn-54788.exe (PID: 9320)
- Unicorn-15535.exe (PID: 8440)
- Unicorn-60486.exe (PID: 3896)
- Unicorn-20479.exe (PID: 8632)
- Unicorn-63326.exe (PID: 8928)
- Unicorn-64710.exe (PID: 9376)
- Unicorn-30118.exe (PID: 8580)
- Unicorn-13781.exe (PID: 8568)
- Unicorn-3257.exe (PID: 9368)
- Unicorn-60657.exe (PID: 4736)
- Unicorn-3593.exe (PID: 4944)
- Unicorn-23437.exe (PID: 5116)
- Unicorn-42282.exe (PID: 9940)
- Unicorn-39267.exe (PID: 9920)
- Unicorn-41320.exe (PID: 9960)
- Unicorn-26639.exe (PID: 9580)
- Unicorn-40066.exe (PID: 4164)
- Unicorn-28560.exe (PID: 7756)
- Unicorn-23024.exe (PID: 5640)
- Unicorn-23486.exe (PID: 2084)
- Unicorn-21160.exe (PID: 6708)
- Unicorn-13787.exe (PID: 8852)
- Unicorn-20824.exe (PID: 1764)
- Unicorn-24254.exe (PID: 9456)
- Unicorn-55395.exe (PID: 5112)
- Unicorn-10069.exe (PID: 5228)
- Unicorn-22578.exe (PID: 7468)
- Unicorn-7947.exe (PID: 9840)
- Unicorn-24664.exe (PID: 8896)
- Unicorn-32256.exe (PID: 8552)
- Unicorn-6791.exe (PID: 8348)
- Unicorn-64960.exe (PID: 8284)
- Unicorn-46646.exe (PID: 8540)
- Unicorn-443.exe (PID: 9200)
- Unicorn-42728.exe (PID: 9400)
- Unicorn-2811.exe (PID: 9868)
- Unicorn-7155.exe (PID: 9484)
- Unicorn-42836.exe (PID: 9980)
- Unicorn-53958.exe (PID: 9888)
- Unicorn-35572.exe (PID: 8328)
- Unicorn-3885.exe (PID: 8248)
- Unicorn-47881.exe (PID: 10540)
- Unicorn-13039.exe (PID: 2340)
- Unicorn-26178.exe (PID: 4212)
- Unicorn-17180.exe (PID: 9560)
- Unicorn-23756.exe (PID: 11472)
- Unicorn-7558.exe (PID: 8804)
- Unicorn-13999.exe (PID: 4200)
- Unicorn-51602.exe (PID: 10496)
- Unicorn-13812.exe (PID: 10156)
- Unicorn-49765.exe (PID: 10220)
- Unicorn-7947.exe (PID: 10148)
- Unicorn-4072.exe (PID: 9744)
- Unicorn-63942.exe (PID: 9208)
- Unicorn-39914.exe (PID: 7308)
- Unicorn-51179.exe (PID: 12484)
- Unicorn-53667.exe (PID: 12384)
- Unicorn-40318.exe (PID: 12492)
- Unicorn-2427.exe (PID: 9716)
- Unicorn-25894.exe (PID: 11448)
- Unicorn-42374.exe (PID: 6964)
- Unicorn-51861.exe (PID: 8936)
- Unicorn-48426.exe (PID: 2516)
- Unicorn-55177.exe (PID: 8616)
- Unicorn-9391.exe (PID: 10748)
- Unicorn-23128.exe (PID: 8368)
- Unicorn-1787.exe (PID: 9432)
- Unicorn-65286.exe (PID: 9440)
- Unicorn-3288.exe (PID: 1300)
- Unicorn-54918.exe (PID: 9812)
- Unicorn-1891.exe (PID: 11608)
- Unicorn-7663.exe (PID: 3156)
Creates files or folders in the user directory
- WerFault.exe (PID: 11632)
Reads the software policy settings
- slui.exe (PID: 7324)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable (generic) (52.9) |
|---|---|---|
| .exe | | | Generic Win/DOS Executable (23.5) |
| .exe | | | DOS Executable Generic (23.5) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
590
Monitored processes
455
Malicious processes
72
Suspicious processes
54
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 616 | C:\Users\admin\AppData\Local\Temp\Unicorn-9285.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-9285.exe | — | Unicorn-44482.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 632 | C:\Users\admin\AppData\Local\Temp\Unicorn-7071.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-7071.exe | Unicorn-42000.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 728 | C:\Users\admin\AppData\Local\Temp\Unicorn-30455.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30455.exe | Unicorn-30157.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 856 | C:\Users\admin\AppData\Local\Temp\Unicorn-16200.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-16200.exe | Unicorn-61726.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1012 | C:\Users\admin\AppData\Local\Temp\Unicorn-18938.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-18938.exe | 1 (385).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1096 | C:\Users\admin\AppData\Local\Temp\Unicorn-356.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-356.exe | Unicorn-30402.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1164 | C:\Users\admin\AppData\Local\Temp\Unicorn-61726.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-61726.exe | Unicorn-44217.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1180 | C:\Users\admin\AppData\Local\Temp\Unicorn-62432.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-62432.exe | Unicorn-21462.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1184 | C:\Users\admin\AppData\Local\Temp\Unicorn-4357.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-4357.exe | Unicorn-27225.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1228 | C:\Users\admin\AppData\Local\Temp\Unicorn-47428.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-47428.exe | Unicorn-61970.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
10 903
Read events
10 903
Write events
0
Delete events
0
Modification events
Executable files
759
Suspicious files
3
Text files
1
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 2096 | 1 (385).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-46490.exe | executable | |
MD5:8AE08D24108C4C656E50A66902C461C0 | SHA256:9EBB93BD1A338B49126FBD2EE0E123C0194C1A56873307E96E51A5C5EEB17054 | |||
| 2096 | 1 (385).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-51756.exe | executable | |
MD5:0805976B4EC81E51DEAF4DC6C798E92C | SHA256:DE760F7334D1EC4E5747563067B7F51FE3F263DACF8BB01365E5EF4900CB5829 | |||
| 2096 | 1 (385).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-51295.exe | executable | |
MD5:D9881A77C3BDE2BD29189CCE09D546E6 | SHA256:EF639AF28F899380C5A1021D9DDC027CAC0699F8618D2FCF96F7F2BD6A26F5CC | |||
| 7200 | Unicorn-46490.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-41804.exe | executable | |
MD5:17184D643D684F92DAECE62AF03F1B00 | SHA256:E309EF1C90EFD4034F0D72670FEB2766C304D1F1D70E6DF42E839FF35EB6AD9C | |||
| 7200 | Unicorn-46490.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-38020.exe | executable | |
MD5:201BDE8F6D1E4EAA6830C56072E7F8D1 | SHA256:BB5FBAE206C1213F943EDC201C5332C7873290FB9A5F67D995D6EE58B78B1FF7 | |||
| 7644 | Unicorn-41804.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-61970.exe | executable | |
MD5:72AFFD12A3A7BB60A7CD5EBD5F7E1E07 | SHA256:8C715384E7E7879FB68FBDB663AAD473EBC8A822CD419D714CF956F0C8A429E1 | |||
| 7684 | Unicorn-61970.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-52816.exe | executable | |
MD5:A3ACF2BEE1650D64E926DC7F023CC08A | SHA256:BEF8944C02C9A2497D02EA6CD2B4A399A25ABF5F346DE44E5E3B871D9493D4D8 | |||
| 7692 | Unicorn-61970.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-50678.exe | executable | |
MD5:0F0582D06287023969784E57454DDA6A | SHA256:5FC3682CFAD82D9C1D9F3A960C737A8129E2922C66B4ABFC69808D6025ECE631 | |||
| 7200 | Unicorn-46490.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30157.exe | executable | |
MD5:DFBD7E47BD04388F983543EB9C001339 | SHA256:842C427971F1B24C7C04E37A2D6A43F24E56504011FC25A438AC8500242CE5D8 | |||
| 7848 | Unicorn-50678.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-36070.exe | executable | |
MD5:81307076141559DA99F8410FAF93A05A | SHA256:— | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
26
DNS requests
13
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
— | — | GET | 200 | 23.48.23.194:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6808 | backgroundTaskHost.exe | GET | 200 | 23.54.109.203:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 23.54.109.203:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
1616 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
1616 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 51.104.136.2:443 | — | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
— | — | 23.48.23.194:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
2104 | svchost.exe | 51.104.136.2:443 | — | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
3216 | svchost.exe | 40.115.3.253:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 40.126.31.129:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 23.54.109.203:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
5496 | MoUsoCoreWorker.exe | 51.104.136.2:443 | — | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6808 | backgroundTaskHost.exe | 20.105.99.58:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6808 | backgroundTaskHost.exe | 23.54.109.203:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |
nexusrules.officeapps.live.com |
| whitelisted |