| File name: | 1 (570) |
| Full analysis: | https://app.any.run/tasks/4c4b64bb-b007-4e8e-a2e9-95deaf599fd3 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 23:29:35 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | 42E20E0D392FBA934908D312F413E210 |
| SHA1: | 2A4F61605D672FD9C984BC925A84CCEA2BA7090E |
| SHA256: | 59B3A480CB4A82C08398848D80614182BC16225CD4FA854740E12447C3C5E85C |
| SSDEEP: | 12288:r9d2EcHA5+tU5BchamOye5Sax4DxmDsR:r9gEt5pBch25 |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- 1 (570).exe (PID: 1276)
- Unicorn-53854.exe (PID: 1164)
- Unicorn-22334.exe (PID: 4164)
- Unicorn-41362.exe (PID: 1072)
- Unicorn-30092.exe (PID: 680)
- Unicorn-50704.exe (PID: 4200)
- Unicorn-60351.exe (PID: 6108)
- Unicorn-44574.exe (PID: 3784)
- Unicorn-22478.exe (PID: 976)
- Unicorn-47544.exe (PID: 6436)
- Unicorn-55712.exe (PID: 6652)
- Unicorn-55612.exe (PID: 7148)
- Unicorn-35846.exe (PID: 4424)
- Unicorn-53335.exe (PID: 4224)
- Unicorn-45167.exe (PID: 536)
- Unicorn-36920.exe (PID: 6744)
- Unicorn-65032.exe (PID: 5592)
- Unicorn-27076.exe (PID: 6700)
- Unicorn-49272.exe (PID: 5964)
- Unicorn-8047.exe (PID: 5024)
- Unicorn-44731.exe (PID: 920)
- Unicorn-434.exe (PID: 1912)
- Unicorn-8139.exe (PID: 1180)
- Unicorn-32552.exe (PID: 5588)
- Unicorn-27897.exe (PID: 6800)
- Unicorn-33320.exe (PID: 7380)
- Unicorn-36828.exe (PID: 2088)
- Unicorn-64622.exe (PID: 7412)
- Unicorn-21735.exe (PID: 7428)
- Unicorn-17368.exe (PID: 7436)
- Unicorn-13283.exe (PID: 7448)
- Unicorn-1586.exe (PID: 7460)
- Unicorn-9754.exe (PID: 7480)
- Unicorn-41799.exe (PID: 7488)
- Unicorn-9675.exe (PID: 7652)
- Unicorn-36226.exe (PID: 7672)
- Unicorn-22028.exe (PID: 7512)
- Unicorn-1699.exe (PID: 7532)
- Unicorn-37356.exe (PID: 7704)
- Unicorn-28058.exe (PID: 7660)
- Unicorn-12276.exe (PID: 7680)
- Unicorn-6651.exe (PID: 7984)
- Unicorn-52323.exe (PID: 7976)
- Unicorn-45162.exe (PID: 7876)
- Unicorn-14911.exe (PID: 8032)
- Unicorn-18830.exe (PID: 7924)
- Unicorn-51192.exe (PID: 7728)
- Unicorn-58598.exe (PID: 7744)
- Unicorn-47227.exe (PID: 7844)
- Unicorn-21450.exe (PID: 7788)
- Unicorn-57030.exe (PID: 7772)
- Unicorn-22966.exe (PID: 7780)
- Unicorn-4897.exe (PID: 8148)
- Unicorn-52946.exe (PID: 7756)
- Unicorn-14051.exe (PID: 7764)
- Unicorn-62934.exe (PID: 3272)
- Unicorn-62385.exe (PID: 2140)
- Unicorn-51363.exe (PID: 7152)
- Unicorn-19130.exe (PID: 8268)
- Unicorn-34088.exe (PID: 7628)
- Unicorn-65125.exe (PID: 7720)
- Unicorn-24939.exe (PID: 8116)
- Unicorn-29594.exe (PID: 8188)
- Unicorn-57606.exe (PID: 7808)
- Unicorn-33769.exe (PID: 8172)
- Unicorn-56044.exe (PID: 7956)
- Unicorn-53906.exe (PID: 7936)
- Unicorn-64020.exe (PID: 8060)
- Unicorn-46293.exe (PID: 7944)
- Unicorn-20452.exe (PID: 8452)
- Unicorn-16574.exe (PID: 7904)
- Unicorn-46135.exe (PID: 8196)
- Unicorn-53556.exe (PID: 2100)
- Unicorn-35418.exe (PID: 8644)
- Unicorn-31552.exe (PID: 7216)
- Unicorn-59313.exe (PID: 2284)
- Unicorn-8994.exe (PID: 7564)
- Unicorn-21212.exe (PID: 7888)
- Unicorn-11695.exe (PID: 1388)
- Unicorn-17534.exe (PID: 8084)
- Unicorn-5189.exe (PID: 8996)
- Unicorn-55886.exe (PID: 7000)
- Unicorn-58382.exe (PID: 9024)
- Unicorn-3727.exe (PID: 9076)
- Unicorn-63034.exe (PID: 7364)
- Unicorn-22828.exe (PID: 8528)
- Unicorn-37312.exe (PID: 8212)
- Unicorn-61101.exe (PID: 8480)
- Unicorn-52762.exe (PID: 8624)
- Unicorn-62876.exe (PID: 8440)
- Unicorn-44760.exe (PID: 9252)
- Unicorn-51558.exe (PID: 9352)
- Unicorn-416.exe (PID: 8700)
- Unicorn-49704.exe (PID: 9548)
- Unicorn-59705.exe (PID: 9272)
- Unicorn-9055.exe (PID: 9656)
- Unicorn-21836.exe (PID: 7612)
- Unicorn-59234.exe (PID: 1452)
- Unicorn-49896.exe (PID: 9480)
- Unicorn-24179.exe (PID: 8812)
- Unicorn-43586.exe (PID: 8748)
- Unicorn-24894.exe (PID: 9244)
- Unicorn-32700.exe (PID: 3024)
- Unicorn-28586.exe (PID: 4892)
- Unicorn-11702.exe (PID: 9312)
- Unicorn-3945.exe (PID: 8684)
- Unicorn-50624.exe (PID: 8604)
- Unicorn-4137.exe (PID: 8632)
- Unicorn-38892.exe (PID: 1240)
- Unicorn-4823.exe (PID: 7388)
- Unicorn-24532.exe (PID: 9224)
- Unicorn-60857.exe (PID: 9632)
- Unicorn-2191.exe (PID: 8652)
- Unicorn-64775.exe (PID: 8904)
- Unicorn-4718.exe (PID: 2600)
- Unicorn-19458.exe (PID: 7832)
- Unicorn-29057.exe (PID: 10076)
- Unicorn-10551.exe (PID: 8820)
- Unicorn-53940.exe (PID: 8280)
- Unicorn-58606.exe (PID: 8732)
- Unicorn-45611.exe (PID: 10832)
- Unicorn-14884.exe (PID: 10864)
- Unicorn-15237.exe (PID: 8224)
- Unicorn-35440.exe (PID: 8860)
- Unicorn-58958.exe (PID: 9136)
- Unicorn-11729.exe (PID: 8584)
- Unicorn-24366.exe (PID: 8716)
- Unicorn-62850.exe (PID: 5304)
- Unicorn-52305.exe (PID: 8460)
- Unicorn-49036.exe (PID: 872)
- Unicorn-59970.exe (PID: 4152)
- Unicorn-59783.exe (PID: 10068)
- Unicorn-36763.exe (PID: 7588)
- Unicorn-4307.exe (PID: 11452)
- Unicorn-50509.exe (PID: 11428)
- Unicorn-23026.exe (PID: 11396)
- Unicorn-64988.exe (PID: 9172)
- Unicorn-9587.exe (PID: 12816)
- Unicorn-7995.exe (PID: 1012)
- Unicorn-17223.exe (PID: 9640)
- Unicorn-16471.exe (PID: 12792)
- Unicorn-26470.exe (PID: 4188)
- Unicorn-12387.exe (PID: 12836)
- Unicorn-38128.exe (PID: 9744)
- Unicorn-16686.exe (PID: 10108)
- Unicorn-20478.exe (PID: 12280)
- Unicorn-46851.exe (PID: 9596)
- Unicorn-50510.exe (PID: 10336)
- Unicorn-61625.exe (PID: 8784)
- Unicorn-59342.exe (PID: 9236)
- Unicorn-44672.exe (PID: 10520)
- Unicorn-36160.exe (PID: 9464)
- Unicorn-19212.exe (PID: 13096)
- Unicorn-44023.exe (PID: 1324)
- Unicorn-13475.exe (PID: 13048)
- Unicorn-8195.exe (PID: 5776)
- Unicorn-18252.exe (PID: 12828)
- Unicorn-59.exe (PID: 8832)
- Unicorn-15189.exe (PID: 11080)
- Unicorn-11987.exe (PID: 9280)
- Unicorn-56348.exe (PID: 10156)
- Unicorn-45684.exe (PID: 6980)
- Unicorn-16520.exe (PID: 4056)
- Unicorn-4267.exe (PID: 7264)
- Unicorn-10861.exe (PID: 1676)
- Unicorn-16915.exe (PID: 13160)
- Unicorn-60432.exe (PID: 3884)
- Unicorn-52508.exe (PID: 13960)
- Unicorn-58589.exe (PID: 12808)
- Unicorn-23764.exe (PID: 8960)
- Unicorn-37573.exe (PID: 7296)
- Unicorn-31707.exe (PID: 3828)
- Unicorn-28907.exe (PID: 7268)
- Unicorn-37488.exe (PID: 10608)
- Unicorn-14901.exe (PID: 15320)
- Unicorn-43328.exe (PID: 10100)
- Unicorn-61406.exe (PID: 8724)
- Unicorn-28018.exe (PID: 8840)
- Unicorn-15320.exe (PID: 13216)
- Unicorn-32804.exe (PID: 10680)
- Unicorn-28616.exe (PID: 9144)
- Unicorn-26561.exe (PID: 4628)
- Unicorn-28450.exe (PID: 8708)
- Unicorn-17711.exe (PID: 11336)
- Unicorn-64670.exe (PID: 9588)
- Unicorn-58554.exe (PID: 9832)
- Unicorn-2653.exe (PID: 11128)
- Unicorn-58439.exe (PID: 14752)
- Unicorn-44163.exe (PID: 12328)
- Unicorn-56080.exe (PID: 5376)
- Unicorn-59536.exe (PID: 16424)
- Unicorn-27224.exe (PID: 6208)
- Unicorn-7039.exe (PID: 11416)
- Unicorn-3182.exe (PID: 12140)
- Unicorn-23240.exe (PID: 12032)
- Unicorn-9055.exe (PID: 9648)
- Unicorn-9839.exe (PID: 4208)
- Unicorn-58954.exe (PID: 13732)
- Unicorn-54522.exe (PID: 8740)
- Unicorn-45851.exe (PID: 10692)
- Unicorn-41964.exe (PID: 10580)
- Unicorn-7198.exe (PID: 16052)
- Unicorn-42404.exe (PID: 9680)
- Unicorn-2649.exe (PID: 15256)
- Unicorn-61641.exe (PID: 11532)
- Unicorn-12649.exe (PID: 8888)
- Unicorn-47366.exe (PID: 12172)
- Unicorn-19709.exe (PID: 14560)
- Unicorn-38734.exe (PID: 10808)
- Unicorn-60001.exe (PID: 16196)
- Unicorn-28876.exe (PID: 15728)
- Unicorn-23846.exe (PID: 10212)
- Unicorn-56410.exe (PID: 9616)
- Unicorn-14142.exe (PID: 13364)
- Unicorn-47516.exe (PID: 16404)
- Unicorn-49285.exe (PID: 744)
- Unicorn-13976.exe (PID: 12728)
- Unicorn-40768.exe (PID: 9292)
- Unicorn-23026.exe (PID: 11732)
- Unicorn-1667.exe (PID: 11284)
- Unicorn-5943.exe (PID: 11756)
- Unicorn-39384.exe (PID: 12084)
- Unicorn-57235.exe (PID: 12436)
- Unicorn-17340.exe (PID: 13056)
- Unicorn-21818.exe (PID: 9156)
- Unicorn-27509.exe (PID: 17108)
Starts itself from another location
- Unicorn-53854.exe (PID: 1164)
- 1 (570).exe (PID: 1276)
- Unicorn-41362.exe (PID: 1072)
- Unicorn-22478.exe (PID: 976)
- Unicorn-50704.exe (PID: 4200)
- Unicorn-30092.exe (PID: 680)
- Unicorn-44574.exe (PID: 3784)
- Unicorn-60351.exe (PID: 6108)
- Unicorn-47544.exe (PID: 6436)
- Unicorn-55712.exe (PID: 6652)
- Unicorn-51363.exe (PID: 7152)
- Unicorn-35846.exe (PID: 4424)
- Unicorn-53335.exe (PID: 4224)
- Unicorn-22334.exe (PID: 4164)
- Unicorn-45167.exe (PID: 536)
- Unicorn-36920.exe (PID: 6744)
- Unicorn-65032.exe (PID: 5592)
- Unicorn-55612.exe (PID: 7148)
- Unicorn-27076.exe (PID: 6700)
- Unicorn-49272.exe (PID: 5964)
- Unicorn-8139.exe (PID: 1180)
- Unicorn-44731.exe (PID: 920)
- Unicorn-434.exe (PID: 1912)
- Unicorn-8047.exe (PID: 5024)
- Unicorn-36828.exe (PID: 2088)
- Unicorn-32552.exe (PID: 5588)
- Unicorn-27897.exe (PID: 6800)
- Unicorn-4823.exe (PID: 7388)
- Unicorn-64622.exe (PID: 7412)
- Unicorn-21735.exe (PID: 7428)
- Unicorn-13283.exe (PID: 7448)
- Unicorn-41799.exe (PID: 7488)
- Unicorn-9675.exe (PID: 7652)
- Unicorn-9754.exe (PID: 7480)
- Unicorn-21836.exe (PID: 7612)
- Unicorn-22028.exe (PID: 7512)
- Unicorn-33320.exe (PID: 7380)
- Unicorn-1699.exe (PID: 7532)
- Unicorn-37356.exe (PID: 7704)
- Unicorn-28058.exe (PID: 7660)
- Unicorn-12276.exe (PID: 7680)
- Unicorn-36226.exe (PID: 7672)
- Unicorn-6651.exe (PID: 7984)
- Unicorn-45162.exe (PID: 7876)
- Unicorn-17368.exe (PID: 7436)
- Unicorn-52323.exe (PID: 7976)
- Unicorn-14911.exe (PID: 8032)
- Unicorn-1586.exe (PID: 7460)
- Unicorn-65125.exe (PID: 7720)
- Unicorn-18830.exe (PID: 7924)
- Unicorn-57030.exe (PID: 7772)
- Unicorn-58598.exe (PID: 7744)
- Unicorn-47227.exe (PID: 7844)
- Unicorn-22966.exe (PID: 7780)
- Unicorn-4897.exe (PID: 8148)
- Unicorn-14051.exe (PID: 7764)
- Unicorn-62934.exe (PID: 3272)
- Unicorn-51192.exe (PID: 7728)
- Unicorn-52946.exe (PID: 7756)
- Unicorn-21450.exe (PID: 7788)
- Unicorn-62385.exe (PID: 2140)
- Unicorn-19130.exe (PID: 8268)
- Unicorn-34088.exe (PID: 7628)
- Unicorn-24939.exe (PID: 8116)
- Unicorn-29594.exe (PID: 8188)
- Unicorn-57606.exe (PID: 7808)
- Unicorn-33769.exe (PID: 8172)
- Unicorn-56044.exe (PID: 7956)
- Unicorn-53906.exe (PID: 7936)
- Unicorn-64020.exe (PID: 8060)
- Unicorn-16574.exe (PID: 7904)
- Unicorn-46135.exe (PID: 8196)
- Unicorn-15237.exe (PID: 8224)
- Unicorn-20452.exe (PID: 8452)
- Unicorn-31552.exe (PID: 7216)
- Unicorn-8994.exe (PID: 7564)
- Unicorn-59313.exe (PID: 2284)
- Unicorn-35418.exe (PID: 8644)
- Unicorn-21212.exe (PID: 7888)
- Unicorn-11695.exe (PID: 1388)
- Unicorn-17534.exe (PID: 8084)
- Unicorn-5189.exe (PID: 8996)
- Unicorn-53556.exe (PID: 2100)
- Unicorn-46293.exe (PID: 7944)
- Unicorn-58382.exe (PID: 9024)
- Unicorn-3727.exe (PID: 9076)
- Unicorn-55886.exe (PID: 7000)
- Unicorn-63034.exe (PID: 7364)
- Unicorn-22828.exe (PID: 8528)
- Unicorn-37312.exe (PID: 8212)
- Unicorn-61101.exe (PID: 8480)
- Unicorn-52762.exe (PID: 8624)
- Unicorn-44760.exe (PID: 9252)
- Unicorn-51558.exe (PID: 9352)
- Unicorn-416.exe (PID: 8700)
- Unicorn-62876.exe (PID: 8440)
- Unicorn-49704.exe (PID: 9548)
- Unicorn-59705.exe (PID: 9272)
- Unicorn-9055.exe (PID: 9656)
- Unicorn-59234.exe (PID: 1452)
- Unicorn-28586.exe (PID: 4892)
- Unicorn-11702.exe (PID: 9312)
- Unicorn-43586.exe (PID: 8748)
- Unicorn-24894.exe (PID: 9244)
- Unicorn-49896.exe (PID: 9480)
- Unicorn-3945.exe (PID: 8684)
- Unicorn-38892.exe (PID: 1240)
- Unicorn-32700.exe (PID: 3024)
- Unicorn-50624.exe (PID: 8604)
- Unicorn-60857.exe (PID: 9632)
- Unicorn-24532.exe (PID: 9224)
- Unicorn-2191.exe (PID: 8652)
- Unicorn-64775.exe (PID: 8904)
- Unicorn-4718.exe (PID: 2600)
- Unicorn-19458.exe (PID: 7832)
- Unicorn-16686.exe (PID: 10108)
- Unicorn-29057.exe (PID: 10076)
- Unicorn-43328.exe (PID: 10100)
- Unicorn-53940.exe (PID: 8280)
- Unicorn-58606.exe (PID: 8732)
- Unicorn-56348.exe (PID: 10156)
- Unicorn-10551.exe (PID: 8820)
- Unicorn-28450.exe (PID: 8708)
- Unicorn-58958.exe (PID: 9136)
- Unicorn-11729.exe (PID: 8584)
- Unicorn-24366.exe (PID: 8716)
- Unicorn-62850.exe (PID: 5304)
- Unicorn-52305.exe (PID: 8460)
- Unicorn-14884.exe (PID: 10864)
- Unicorn-49036.exe (PID: 872)
- Unicorn-59970.exe (PID: 4152)
- Unicorn-59783.exe (PID: 10068)
- Unicorn-36763.exe (PID: 7588)
- Unicorn-4307.exe (PID: 11452)
- Unicorn-50509.exe (PID: 11428)
- Unicorn-23026.exe (PID: 11396)
- Unicorn-64988.exe (PID: 9172)
- Unicorn-12387.exe (PID: 12836)
- Unicorn-18252.exe (PID: 12828)
- Unicorn-16471.exe (PID: 12792)
- Unicorn-7995.exe (PID: 1012)
- Unicorn-17223.exe (PID: 9640)
- Unicorn-46851.exe (PID: 9596)
- Unicorn-20478.exe (PID: 12280)
- Unicorn-26470.exe (PID: 4188)
- Unicorn-38128.exe (PID: 9744)
- Unicorn-50510.exe (PID: 10336)
- Unicorn-61625.exe (PID: 8784)
- Unicorn-44023.exe (PID: 1324)
- Unicorn-44672.exe (PID: 10520)
- Unicorn-59342.exe (PID: 9236)
- Unicorn-8195.exe (PID: 5776)
- Unicorn-9587.exe (PID: 12816)
- Unicorn-15189.exe (PID: 11080)
- Unicorn-9055.exe (PID: 9648)
- Unicorn-35440.exe (PID: 8860)
- Unicorn-59.exe (PID: 8832)
- Unicorn-11987.exe (PID: 9280)
- Unicorn-16520.exe (PID: 4056)
- Unicorn-45684.exe (PID: 6980)
- Unicorn-4267.exe (PID: 7264)
- Unicorn-16915.exe (PID: 13160)
- Unicorn-10861.exe (PID: 1676)
- Unicorn-4137.exe (PID: 8632)
- Unicorn-60432.exe (PID: 3884)
- Unicorn-52508.exe (PID: 13960)
- Unicorn-23764.exe (PID: 8960)
- Unicorn-13475.exe (PID: 13048)
- Unicorn-37573.exe (PID: 7296)
- Unicorn-31707.exe (PID: 3828)
- Unicorn-47516.exe (PID: 16404)
- Unicorn-28907.exe (PID: 7268)
- Unicorn-15320.exe (PID: 13216)
- Unicorn-36160.exe (PID: 9464)
- Unicorn-14901.exe (PID: 15320)
- Unicorn-61406.exe (PID: 8724)
- Unicorn-58589.exe (PID: 12808)
- Unicorn-32804.exe (PID: 10680)
- Unicorn-28018.exe (PID: 8840)
- Unicorn-36042.exe (PID: 8512)
- Unicorn-19212.exe (PID: 13096)
- Unicorn-7039.exe (PID: 11416)
Executes application which crashes
- Unicorn-29262.exe (PID: 4408)
- Unicorn-28668.exe (PID: 7228)
INFO
Reads the computer name
- 1 (570).exe (PID: 1276)
- Unicorn-53854.exe (PID: 1164)
- Unicorn-22334.exe (PID: 4164)
- Unicorn-41362.exe (PID: 1072)
- Unicorn-22478.exe (PID: 976)
- Unicorn-30092.exe (PID: 680)
- Unicorn-44574.exe (PID: 3784)
- Unicorn-29262.exe (PID: 4408)
- Unicorn-50704.exe (PID: 4200)
- Unicorn-60351.exe (PID: 6108)
- Unicorn-47544.exe (PID: 6436)
- Unicorn-51363.exe (PID: 7152)
- Unicorn-55712.exe (PID: 6652)
- Unicorn-55612.exe (PID: 7148)
- Unicorn-35846.exe (PID: 4424)
- Unicorn-53335.exe (PID: 4224)
- Unicorn-45167.exe (PID: 536)
- Unicorn-36920.exe (PID: 6744)
- Unicorn-65032.exe (PID: 5592)
- Unicorn-27076.exe (PID: 6700)
- Unicorn-49272.exe (PID: 5964)
- Unicorn-434.exe (PID: 1912)
- Unicorn-8139.exe (PID: 1180)
- Unicorn-8047.exe (PID: 5024)
- Unicorn-32552.exe (PID: 5588)
- Unicorn-27897.exe (PID: 6800)
- Unicorn-44731.exe (PID: 920)
- Unicorn-36828.exe (PID: 2088)
- Unicorn-33320.exe (PID: 7380)
- Unicorn-4823.exe (PID: 7388)
- Unicorn-64622.exe (PID: 7412)
- Unicorn-21735.exe (PID: 7428)
- Unicorn-17368.exe (PID: 7436)
- Unicorn-1586.exe (PID: 7460)
- Unicorn-13283.exe (PID: 7448)
- Unicorn-9754.exe (PID: 7480)
- Unicorn-41799.exe (PID: 7488)
- Unicorn-9675.exe (PID: 7652)
- Unicorn-21836.exe (PID: 7612)
- Unicorn-36226.exe (PID: 7672)
- Unicorn-22028.exe (PID: 7512)
- Unicorn-1699.exe (PID: 7532)
- Unicorn-37356.exe (PID: 7704)
- Unicorn-28058.exe (PID: 7660)
- Unicorn-12276.exe (PID: 7680)
- Unicorn-14911.exe (PID: 8032)
- Unicorn-6651.exe (PID: 7984)
- Unicorn-52323.exe (PID: 7976)
- Unicorn-45162.exe (PID: 7876)
- Unicorn-18830.exe (PID: 7924)
- Unicorn-65125.exe (PID: 7720)
- Unicorn-51192.exe (PID: 7728)
- Unicorn-57030.exe (PID: 7772)
- Unicorn-58598.exe (PID: 7744)
- Unicorn-22966.exe (PID: 7780)
- Unicorn-4897.exe (PID: 8148)
- Unicorn-14051.exe (PID: 7764)
- Unicorn-62934.exe (PID: 3272)
- Unicorn-21450.exe (PID: 7788)
- Unicorn-47227.exe (PID: 7844)
- Unicorn-52946.exe (PID: 7756)
- Unicorn-62385.exe (PID: 2140)
- Unicorn-19130.exe (PID: 8268)
- Unicorn-34088.exe (PID: 7628)
- Unicorn-24939.exe (PID: 8116)
- Unicorn-29594.exe (PID: 8188)
- Unicorn-57606.exe (PID: 7808)
- Unicorn-46293.exe (PID: 7944)
- Unicorn-33769.exe (PID: 8172)
- Unicorn-56044.exe (PID: 7956)
- Unicorn-53906.exe (PID: 7936)
- Unicorn-16574.exe (PID: 7904)
- Unicorn-64020.exe (PID: 8060)
- Unicorn-46135.exe (PID: 8196)
- Unicorn-15237.exe (PID: 8224)
- Unicorn-20452.exe (PID: 8452)
- Unicorn-31552.exe (PID: 7216)
- Unicorn-8994.exe (PID: 7564)
- Unicorn-59313.exe (PID: 2284)
- Unicorn-53556.exe (PID: 2100)
- Unicorn-35418.exe (PID: 8644)
- Unicorn-21212.exe (PID: 7888)
- Unicorn-42792.exe (PID: 8952)
- Unicorn-17534.exe (PID: 8084)
- Unicorn-5189.exe (PID: 8996)
- Unicorn-11695.exe (PID: 1388)
- Unicorn-58382.exe (PID: 9024)
- Unicorn-3727.exe (PID: 9076)
- Unicorn-55886.exe (PID: 7000)
- Unicorn-22828.exe (PID: 8528)
- Unicorn-37312.exe (PID: 8212)
- Unicorn-63034.exe (PID: 7364)
- Unicorn-61101.exe (PID: 8480)
- Unicorn-52762.exe (PID: 8624)
- Unicorn-62876.exe (PID: 8440)
- Unicorn-49704.exe (PID: 9548)
- Unicorn-44760.exe (PID: 9252)
- Unicorn-51558.exe (PID: 9352)
- Unicorn-416.exe (PID: 8700)
- Unicorn-43586.exe (PID: 8748)
- Unicorn-9055.exe (PID: 9656)
- Unicorn-59705.exe (PID: 9272)
- Unicorn-49896.exe (PID: 9480)
- Unicorn-24179.exe (PID: 8812)
- Unicorn-11702.exe (PID: 9312)
- Unicorn-24894.exe (PID: 9244)
- Unicorn-32700.exe (PID: 3024)
- Unicorn-59234.exe (PID: 1452)
- Unicorn-28586.exe (PID: 4892)
- Unicorn-50624.exe (PID: 8604)
- Unicorn-38892.exe (PID: 1240)
- Unicorn-4137.exe (PID: 8632)
- Unicorn-3945.exe (PID: 8684)
- Unicorn-24532.exe (PID: 9224)
- Unicorn-60857.exe (PID: 9632)
- Unicorn-2191.exe (PID: 8652)
- Unicorn-10551.exe (PID: 8820)
- Unicorn-64775.exe (PID: 8904)
- Unicorn-4718.exe (PID: 2600)
- Unicorn-19458.exe (PID: 7832)
- Unicorn-29057.exe (PID: 10076)
- Unicorn-16686.exe (PID: 10108)
- Unicorn-43328.exe (PID: 10100)
- Unicorn-24366.exe (PID: 8716)
- Unicorn-11729.exe (PID: 8584)
- Unicorn-56348.exe (PID: 10156)
- Unicorn-45611.exe (PID: 10832)
- Unicorn-14884.exe (PID: 10864)
- Unicorn-53940.exe (PID: 8280)
- Unicorn-58958.exe (PID: 9136)
- Unicorn-58606.exe (PID: 8732)
- Unicorn-28450.exe (PID: 8708)
- Unicorn-35440.exe (PID: 8860)
- Unicorn-9055.exe (PID: 9648)
- Unicorn-62850.exe (PID: 5304)
- Unicorn-52305.exe (PID: 8460)
- Unicorn-49036.exe (PID: 872)
- Unicorn-36763.exe (PID: 7588)
- Unicorn-59970.exe (PID: 4152)
- Unicorn-50509.exe (PID: 11428)
- Unicorn-4307.exe (PID: 11452)
- Unicorn-23026.exe (PID: 11396)
- Unicorn-59783.exe (PID: 10068)
- Unicorn-36160.exe (PID: 9464)
- Unicorn-9587.exe (PID: 12816)
- Unicorn-12387.exe (PID: 12836)
- Unicorn-18252.exe (PID: 12828)
- Unicorn-64988.exe (PID: 9172)
- Unicorn-20478.exe (PID: 12280)
- Unicorn-16471.exe (PID: 12792)
- Unicorn-17223.exe (PID: 9640)
- Unicorn-7995.exe (PID: 1012)
- Unicorn-26470.exe (PID: 4188)
- Unicorn-46851.exe (PID: 9596)
- Unicorn-38128.exe (PID: 9744)
- Unicorn-61406.exe (PID: 8724)
- Unicorn-44023.exe (PID: 1324)
- Unicorn-59342.exe (PID: 9236)
- Unicorn-61625.exe (PID: 8784)
- Unicorn-50510.exe (PID: 10336)
- Unicorn-44672.exe (PID: 10520)
- Unicorn-7039.exe (PID: 11416)
- Unicorn-13475.exe (PID: 13048)
- Unicorn-19212.exe (PID: 13096)
- Unicorn-23240.exe (PID: 12032)
- Unicorn-15320.exe (PID: 13216)
- Unicorn-58589.exe (PID: 12808)
- Unicorn-8195.exe (PID: 5776)
- Unicorn-61641.exe (PID: 11532)
- Unicorn-28616.exe (PID: 9144)
- Unicorn-60432.exe (PID: 3884)
- Unicorn-59.exe (PID: 8832)
- Unicorn-11987.exe (PID: 9280)
- Unicorn-15189.exe (PID: 11080)
- Unicorn-56410.exe (PID: 9616)
- Unicorn-10861.exe (PID: 1676)
- Unicorn-28018.exe (PID: 8840)
- Unicorn-3182.exe (PID: 12140)
- Unicorn-45684.exe (PID: 6980)
- Unicorn-4267.exe (PID: 7264)
- Unicorn-32804.exe (PID: 10680)
- Unicorn-23764.exe (PID: 8960)
- Unicorn-16915.exe (PID: 13160)
- Unicorn-16520.exe (PID: 4056)
- Unicorn-44163.exe (PID: 12328)
- Unicorn-52508.exe (PID: 13960)
- Unicorn-23846.exe (PID: 10212)
- Unicorn-12649.exe (PID: 8888)
- Unicorn-31707.exe (PID: 3828)
- Unicorn-14901.exe (PID: 15320)
- Unicorn-37573.exe (PID: 7296)
- Unicorn-28907.exe (PID: 7268)
- Unicorn-56080.exe (PID: 5376)
- Unicorn-28876.exe (PID: 15728)
- Unicorn-31707.exe (PID: 15596)
- Unicorn-58439.exe (PID: 14752)
- Unicorn-54522.exe (PID: 8740)
- Unicorn-27224.exe (PID: 6208)
- Unicorn-26561.exe (PID: 4628)
- Unicorn-47516.exe (PID: 16404)
- Unicorn-36042.exe (PID: 8512)
- Unicorn-39384.exe (PID: 12084)
- Unicorn-37488.exe (PID: 10608)
- Unicorn-23026.exe (PID: 11732)
- Unicorn-5943.exe (PID: 11756)
- Unicorn-1667.exe (PID: 11284)
- Unicorn-47366.exe (PID: 12172)
- Unicorn-41964.exe (PID: 10580)
- Unicorn-49565.exe (PID: 9808)
- Unicorn-38734.exe (PID: 10808)
- Unicorn-45851.exe (PID: 10692)
- Unicorn-17340.exe (PID: 13056)
- Unicorn-14142.exe (PID: 13364)
- Unicorn-56109.exe (PID: 10968)
- Unicorn-57235.exe (PID: 12436)
- Unicorn-64670.exe (PID: 9588)
- Unicorn-21818.exe (PID: 9156)
- Unicorn-2649.exe (PID: 15256)
- Unicorn-17711.exe (PID: 11336)
- Unicorn-58554.exe (PID: 9832)
- Unicorn-49171.exe (PID: 15792)
- Unicorn-42404.exe (PID: 9680)
- Unicorn-9839.exe (PID: 4208)
- Unicorn-13976.exe (PID: 12728)
- Unicorn-40768.exe (PID: 9292)
- Unicorn-2653.exe (PID: 11128)
Create files in a temporary directory
- 1 (570).exe (PID: 1276)
- Unicorn-53854.exe (PID: 1164)
- Unicorn-30092.exe (PID: 680)
- Unicorn-60351.exe (PID: 6108)
- Unicorn-41362.exe (PID: 1072)
- Unicorn-44574.exe (PID: 3784)
- Unicorn-22334.exe (PID: 4164)
- Unicorn-47544.exe (PID: 6436)
- Unicorn-55712.exe (PID: 6652)
- Unicorn-50704.exe (PID: 4200)
- Unicorn-55612.exe (PID: 7148)
- Unicorn-35846.exe (PID: 4424)
- Unicorn-53335.exe (PID: 4224)
- Unicorn-45167.exe (PID: 536)
- Unicorn-22478.exe (PID: 976)
- Unicorn-36920.exe (PID: 6744)
- Unicorn-65032.exe (PID: 5592)
- Unicorn-27076.exe (PID: 6700)
- Unicorn-49272.exe (PID: 5964)
- Unicorn-8047.exe (PID: 5024)
- Unicorn-44731.exe (PID: 920)
- Unicorn-36828.exe (PID: 2088)
- Unicorn-434.exe (PID: 1912)
- Unicorn-8139.exe (PID: 1180)
- Unicorn-32552.exe (PID: 5588)
- Unicorn-27897.exe (PID: 6800)
- Unicorn-64622.exe (PID: 7412)
- Unicorn-21735.exe (PID: 7428)
- Unicorn-17368.exe (PID: 7436)
- Unicorn-13283.exe (PID: 7448)
- Unicorn-1586.exe (PID: 7460)
- Unicorn-9754.exe (PID: 7480)
- Unicorn-41799.exe (PID: 7488)
- Unicorn-9675.exe (PID: 7652)
- Unicorn-36226.exe (PID: 7672)
- Unicorn-22028.exe (PID: 7512)
- Unicorn-33320.exe (PID: 7380)
- Unicorn-1699.exe (PID: 7532)
- Unicorn-37356.exe (PID: 7704)
- Unicorn-28058.exe (PID: 7660)
- Unicorn-12276.exe (PID: 7680)
- Unicorn-52323.exe (PID: 7976)
- Unicorn-6651.exe (PID: 7984)
- Unicorn-45162.exe (PID: 7876)
- Unicorn-14911.exe (PID: 8032)
- Unicorn-51192.exe (PID: 7728)
- Unicorn-18830.exe (PID: 7924)
- Unicorn-57030.exe (PID: 7772)
- Unicorn-58598.exe (PID: 7744)
- Unicorn-47227.exe (PID: 7844)
- Unicorn-21450.exe (PID: 7788)
- Unicorn-4897.exe (PID: 8148)
- Unicorn-14051.exe (PID: 7764)
- Unicorn-52946.exe (PID: 7756)
- Unicorn-22966.exe (PID: 7780)
- Unicorn-62934.exe (PID: 3272)
- Unicorn-62385.exe (PID: 2140)
- Unicorn-51363.exe (PID: 7152)
- Unicorn-19130.exe (PID: 8268)
- Unicorn-34088.exe (PID: 7628)
- Unicorn-65125.exe (PID: 7720)
- Unicorn-24939.exe (PID: 8116)
- Unicorn-29594.exe (PID: 8188)
- Unicorn-57606.exe (PID: 7808)
- Unicorn-33769.exe (PID: 8172)
- Unicorn-56044.exe (PID: 7956)
- Unicorn-46293.exe (PID: 7944)
- Unicorn-53906.exe (PID: 7936)
- Unicorn-64020.exe (PID: 8060)
- Unicorn-16574.exe (PID: 7904)
- Unicorn-46135.exe (PID: 8196)
- Unicorn-53556.exe (PID: 2100)
- Unicorn-20452.exe (PID: 8452)
- Unicorn-35418.exe (PID: 8644)
- Unicorn-31552.exe (PID: 7216)
- Unicorn-59313.exe (PID: 2284)
- Unicorn-8994.exe (PID: 7564)
- Unicorn-21212.exe (PID: 7888)
- Unicorn-17534.exe (PID: 8084)
- Unicorn-5189.exe (PID: 8996)
- Unicorn-58382.exe (PID: 9024)
- Unicorn-11695.exe (PID: 1388)
- Unicorn-55886.exe (PID: 7000)
- Unicorn-3727.exe (PID: 9076)
- Unicorn-63034.exe (PID: 7364)
- Unicorn-22828.exe (PID: 8528)
- Unicorn-37312.exe (PID: 8212)
- Unicorn-61101.exe (PID: 8480)
- Unicorn-52762.exe (PID: 8624)
- Unicorn-49704.exe (PID: 9548)
- Unicorn-51558.exe (PID: 9352)
- Unicorn-416.exe (PID: 8700)
- Unicorn-62876.exe (PID: 8440)
- Unicorn-44760.exe (PID: 9252)
- Unicorn-9055.exe (PID: 9656)
- Unicorn-59705.exe (PID: 9272)
- Unicorn-21836.exe (PID: 7612)
- Unicorn-59234.exe (PID: 1452)
- Unicorn-49896.exe (PID: 9480)
- Unicorn-28586.exe (PID: 4892)
- Unicorn-11702.exe (PID: 9312)
- Unicorn-43586.exe (PID: 8748)
- Unicorn-24894.exe (PID: 9244)
- Unicorn-32700.exe (PID: 3024)
- Unicorn-24179.exe (PID: 8812)
- Unicorn-3945.exe (PID: 8684)
- Unicorn-50624.exe (PID: 8604)
- Unicorn-4137.exe (PID: 8632)
- Unicorn-4823.exe (PID: 7388)
- Unicorn-38892.exe (PID: 1240)
- Unicorn-24532.exe (PID: 9224)
- Unicorn-60857.exe (PID: 9632)
- Unicorn-2191.exe (PID: 8652)
- Unicorn-64775.exe (PID: 8904)
- Unicorn-4718.exe (PID: 2600)
- Unicorn-19458.exe (PID: 7832)
- Unicorn-29057.exe (PID: 10076)
- Unicorn-10551.exe (PID: 8820)
- Unicorn-53940.exe (PID: 8280)
- Unicorn-58606.exe (PID: 8732)
- Unicorn-45611.exe (PID: 10832)
- Unicorn-14884.exe (PID: 10864)
- Unicorn-58958.exe (PID: 9136)
- Unicorn-15237.exe (PID: 8224)
- Unicorn-35440.exe (PID: 8860)
- Unicorn-24366.exe (PID: 8716)
- Unicorn-11729.exe (PID: 8584)
- Unicorn-52305.exe (PID: 8460)
- Unicorn-49036.exe (PID: 872)
- Unicorn-62850.exe (PID: 5304)
- Unicorn-59783.exe (PID: 10068)
- Unicorn-59970.exe (PID: 4152)
- Unicorn-36763.exe (PID: 7588)
- Unicorn-4307.exe (PID: 11452)
- Unicorn-23026.exe (PID: 11396)
- Unicorn-50509.exe (PID: 11428)
- Unicorn-64988.exe (PID: 9172)
- Unicorn-12387.exe (PID: 12836)
- Unicorn-17223.exe (PID: 9640)
- Unicorn-16471.exe (PID: 12792)
- Unicorn-7995.exe (PID: 1012)
- Unicorn-9587.exe (PID: 12816)
- Unicorn-26470.exe (PID: 4188)
- Unicorn-16686.exe (PID: 10108)
- Unicorn-20478.exe (PID: 12280)
- Unicorn-46851.exe (PID: 9596)
- Unicorn-38128.exe (PID: 9744)
- Unicorn-44672.exe (PID: 10520)
- Unicorn-50510.exe (PID: 10336)
- Unicorn-59342.exe (PID: 9236)
- Unicorn-61625.exe (PID: 8784)
- Unicorn-36160.exe (PID: 9464)
- Unicorn-19212.exe (PID: 13096)
- Unicorn-44023.exe (PID: 1324)
- Unicorn-8195.exe (PID: 5776)
- Unicorn-13475.exe (PID: 13048)
- Unicorn-18252.exe (PID: 12828)
- Unicorn-11987.exe (PID: 9280)
- Unicorn-59.exe (PID: 8832)
- Unicorn-15189.exe (PID: 11080)
- Unicorn-60432.exe (PID: 3884)
- Unicorn-56348.exe (PID: 10156)
- Unicorn-4267.exe (PID: 7264)
- Unicorn-45684.exe (PID: 6980)
- Unicorn-16520.exe (PID: 4056)
- Unicorn-10861.exe (PID: 1676)
- Unicorn-16915.exe (PID: 13160)
- Unicorn-52508.exe (PID: 13960)
- Unicorn-23764.exe (PID: 8960)
- Unicorn-37573.exe (PID: 7296)
- Unicorn-31707.exe (PID: 3828)
- Unicorn-58589.exe (PID: 12808)
- Unicorn-28907.exe (PID: 7268)
- Unicorn-26561.exe (PID: 4628)
- Unicorn-37488.exe (PID: 10608)
Checks supported languages
- 1 (570).exe (PID: 1276)
- Unicorn-53854.exe (PID: 1164)
- Unicorn-22334.exe (PID: 4164)
- Unicorn-41362.exe (PID: 1072)
- Unicorn-30092.exe (PID: 680)
- Unicorn-22478.exe (PID: 976)
- Unicorn-50704.exe (PID: 4200)
- Unicorn-44574.exe (PID: 3784)
- Unicorn-60351.exe (PID: 6108)
- Unicorn-29262.exe (PID: 4408)
- Unicorn-55612.exe (PID: 7148)
- Unicorn-35846.exe (PID: 4424)
- Unicorn-47544.exe (PID: 6436)
- Unicorn-55712.exe (PID: 6652)
- Unicorn-51363.exe (PID: 7152)
- Unicorn-53335.exe (PID: 4224)
- Unicorn-45167.exe (PID: 536)
- Unicorn-65032.exe (PID: 5592)
- Unicorn-36920.exe (PID: 6744)
- Unicorn-8047.exe (PID: 5024)
- Unicorn-49272.exe (PID: 5964)
- Unicorn-32552.exe (PID: 5588)
- Unicorn-27076.exe (PID: 6700)
- Unicorn-434.exe (PID: 1912)
- Unicorn-8139.exe (PID: 1180)
- Unicorn-44731.exe (PID: 920)
- Unicorn-36828.exe (PID: 2088)
- Unicorn-27897.exe (PID: 6800)
- Unicorn-4823.exe (PID: 7388)
- Unicorn-64622.exe (PID: 7412)
- Unicorn-21735.exe (PID: 7428)
- Unicorn-13283.exe (PID: 7448)
- Unicorn-17368.exe (PID: 7436)
- Unicorn-1586.exe (PID: 7460)
- Unicorn-9754.exe (PID: 7480)
- Unicorn-33320.exe (PID: 7380)
- Unicorn-41799.exe (PID: 7488)
- Unicorn-22028.exe (PID: 7512)
- Unicorn-1699.exe (PID: 7532)
- Unicorn-9675.exe (PID: 7652)
- Unicorn-21836.exe (PID: 7612)
- Unicorn-28058.exe (PID: 7660)
- Unicorn-36226.exe (PID: 7672)
- Unicorn-12276.exe (PID: 7680)
- Unicorn-37356.exe (PID: 7704)
- Unicorn-52946.exe (PID: 7756)
- Unicorn-14051.exe (PID: 7764)
- Unicorn-57030.exe (PID: 7772)
- Unicorn-22966.exe (PID: 7780)
- Unicorn-57606.exe (PID: 7808)
- Unicorn-21450.exe (PID: 7788)
- Unicorn-65125.exe (PID: 7720)
- Unicorn-34088.exe (PID: 7628)
- Unicorn-51192.exe (PID: 7728)
- Unicorn-58598.exe (PID: 7744)
- Unicorn-19458.exe (PID: 7832)
- Unicorn-45162.exe (PID: 7876)
- Unicorn-6651.exe (PID: 7984)
- Unicorn-14911.exe (PID: 8032)
- Unicorn-52323.exe (PID: 7976)
- Unicorn-47227.exe (PID: 7844)
- Unicorn-21212.exe (PID: 7888)
- Unicorn-53906.exe (PID: 7936)
- Unicorn-46293.exe (PID: 7944)
- Unicorn-64020.exe (PID: 8060)
- Unicorn-56044.exe (PID: 7956)
- Unicorn-24939.exe (PID: 8116)
- Unicorn-17534.exe (PID: 8084)
- Unicorn-4897.exe (PID: 8148)
- Unicorn-16574.exe (PID: 7904)
- Unicorn-18830.exe (PID: 7924)
- Unicorn-33769.exe (PID: 8172)
- Unicorn-29594.exe (PID: 8188)
- Unicorn-38892.exe (PID: 1240)
- Unicorn-62934.exe (PID: 3272)
- Unicorn-62385.exe (PID: 2140)
- Unicorn-59313.exe (PID: 2284)
- Unicorn-26470.exe (PID: 4188)
- Unicorn-7995.exe (PID: 1012)
- Unicorn-59234.exe (PID: 1452)
- Unicorn-63034.exe (PID: 7364)
- Unicorn-28586.exe (PID: 4892)
- Unicorn-36763.exe (PID: 7588)
- Unicorn-8994.exe (PID: 7564)
- Unicorn-11695.exe (PID: 1388)
- Unicorn-10861.exe (PID: 1676)
- Unicorn-46135.exe (PID: 8196)
- Unicorn-37312.exe (PID: 8212)
- Unicorn-15237.exe (PID: 8224)
- Unicorn-19130.exe (PID: 8268)
- Unicorn-59970.exe (PID: 4152)
- Unicorn-55886.exe (PID: 7000)
- Unicorn-53556.exe (PID: 2100)
- Unicorn-31552.exe (PID: 7216)
- Unicorn-28668.exe (PID: 7228)
- Unicorn-4718.exe (PID: 2600)
- Unicorn-20452.exe (PID: 8452)
- Unicorn-53940.exe (PID: 8280)
- Unicorn-62876.exe (PID: 8440)
- Unicorn-52305.exe (PID: 8460)
- Unicorn-61101.exe (PID: 8480)
- Unicorn-36042.exe (PID: 8512)
- Unicorn-22828.exe (PID: 8528)
- Unicorn-11729.exe (PID: 8584)
- Unicorn-50624.exe (PID: 8604)
- Unicorn-52762.exe (PID: 8624)
- Unicorn-4137.exe (PID: 8632)
- Unicorn-35418.exe (PID: 8644)
- Unicorn-2191.exe (PID: 8652)
- Unicorn-3945.exe (PID: 8684)
- Unicorn-54522.exe (PID: 8740)
- Unicorn-416.exe (PID: 8700)
- Unicorn-28450.exe (PID: 8708)
- Unicorn-58606.exe (PID: 8732)
- Unicorn-24366.exe (PID: 8716)
- Unicorn-61406.exe (PID: 8724)
- Unicorn-43586.exe (PID: 8748)
- Unicorn-61625.exe (PID: 8784)
- Unicorn-24179.exe (PID: 8812)
- Unicorn-10551.exe (PID: 8820)
- Unicorn-5189.exe (PID: 8996)
- Unicorn-59.exe (PID: 8832)
- Unicorn-28018.exe (PID: 8840)
- Unicorn-42792.exe (PID: 8952)
- Unicorn-3727.exe (PID: 9076)
- Unicorn-64775.exe (PID: 8904)
- Unicorn-23764.exe (PID: 8960)
- Unicorn-58382.exe (PID: 9024)
- Unicorn-35440.exe (PID: 8860)
- Unicorn-58958.exe (PID: 9136)
- Unicorn-21818.exe (PID: 9156)
- Unicorn-64988.exe (PID: 9172)
- Unicorn-17350.exe (PID: 8980)
- Unicorn-12649.exe (PID: 8888)
- Unicorn-32700.exe (PID: 3024)
- Unicorn-62850.exe (PID: 5304)
- Unicorn-49036.exe (PID: 872)
- Unicorn-27224.exe (PID: 6208)
- Unicorn-8195.exe (PID: 5776)
- Unicorn-28616.exe (PID: 9144)
- Unicorn-59342.exe (PID: 9236)
- Unicorn-24894.exe (PID: 9244)
- Unicorn-11987.exe (PID: 9280)
- Unicorn-24532.exe (PID: 9224)
- Unicorn-38630.exe (PID: 9260)
- Unicorn-44760.exe (PID: 9252)
- Unicorn-59705.exe (PID: 9272)
- Unicorn-40768.exe (PID: 9292)
- Unicorn-36711.exe (PID: 9368)
- Unicorn-11702.exe (PID: 9312)
- Unicorn-51558.exe (PID: 9352)
- Unicorn-49896.exe (PID: 9472)
- Unicorn-49896.exe (PID: 9480)
- Unicorn-49704.exe (PID: 9548)
- Unicorn-36160.exe (PID: 9464)
- Unicorn-49704.exe (PID: 9556)
- Unicorn-64670.exe (PID: 9588)
- Unicorn-46851.exe (PID: 9596)
- Unicorn-9055.exe (PID: 9656)
- Unicorn-21307.exe (PID: 9664)
- Unicorn-42404.exe (PID: 9680)
- Unicorn-62824.exe (PID: 9692)
- Unicorn-49896.exe (PID: 9488)
- Unicorn-56410.exe (PID: 9616)
- Unicorn-17223.exe (PID: 9640)
- Unicorn-9055.exe (PID: 9648)
- Unicorn-65133.exe (PID: 9580)
- Unicorn-60857.exe (PID: 9632)
- Unicorn-43328.exe (PID: 10100)
- Unicorn-16686.exe (PID: 10108)
- Unicorn-39204.exe (PID: 10044)
- Unicorn-31743.exe (PID: 10164)
- Unicorn-23484.exe (PID: 10124)
- Unicorn-56348.exe (PID: 10156)
- Unicorn-35544.exe (PID: 10188)
- Unicorn-4817.exe (PID: 10196)
- Unicorn-23846.exe (PID: 10204)
- Unicorn-33497.exe (PID: 10220)
- Unicorn-23846.exe (PID: 10212)
- Unicorn-21984.exe (PID: 9736)
- Unicorn-38128.exe (PID: 9744)
- Unicorn-29057.exe (PID: 10076)
- Unicorn-47604.exe (PID: 10052)
- Unicorn-53918.exe (PID: 10060)
- Unicorn-59783.exe (PID: 10068)
- Unicorn-54464.exe (PID: 9760)
- Unicorn-52253.exe (PID: 9788)
- Unicorn-40820.exe (PID: 9796)
- Unicorn-47235.exe (PID: 9724)
- Unicorn-49565.exe (PID: 9808)
- Unicorn-60432.exe (PID: 3884)
- Unicorn-32652.exe (PID: 9780)
- Unicorn-47427.exe (PID: 9908)
- Unicorn-46964.exe (PID: 9864)
- Unicorn-51304.exe (PID: 9956)
- Unicorn-16036.exe (PID: 10016)
- Unicorn-13021.exe (PID: 9996)
- Unicorn-44023.exe (PID: 1324)
- Unicorn-43831.exe (PID: 10356)
- Unicorn-27760.exe (PID: 10324)
- Unicorn-58554.exe (PID: 9832)
- Unicorn-16892.exe (PID: 9840)
- Unicorn-61354.exe (PID: 9824)
- Unicorn-47619.exe (PID: 9856)
- Unicorn-13934.exe (PID: 9848)
- Unicorn-50510.exe (PID: 10336)
- Unicorn-18632.exe (PID: 9964)
- Unicorn-63146.exe (PID: 10508)
- Unicorn-44672.exe (PID: 10520)
- Unicorn-59062.exe (PID: 10536)
- Unicorn-43088.exe (PID: 10592)
- Unicorn-41964.exe (PID: 10580)
- Unicorn-34558.exe (PID: 10556)
- Unicorn-7683.exe (PID: 10568)
- Unicorn-37488.exe (PID: 10608)
- Unicorn-56824.exe (PID: 10600)
- Unicorn-32804.exe (PID: 10680)
- Unicorn-40972.exe (PID: 10700)
- Unicorn-59254.exe (PID: 10788)
- Unicorn-38734.exe (PID: 10808)
- Unicorn-45611.exe (PID: 10832)
- Unicorn-4023.exe (PID: 10824)
- Unicorn-56924.exe (PID: 10644)
- Unicorn-65092.exe (PID: 10656)
- Unicorn-15892.exe (PID: 10668)
- Unicorn-45851.exe (PID: 10692)
- Unicorn-28619.exe (PID: 10856)
- Unicorn-14884.exe (PID: 10864)
- Unicorn-20360.exe (PID: 10880)
- Unicorn-494.exe (PID: 10872)
- Unicorn-45611.exe (PID: 10840)
- Unicorn-59346.exe (PID: 10848)
- Unicorn-26196.exe (PID: 10932)
- Unicorn-10172.exe (PID: 10960)
- Unicorn-4307.exe (PID: 11452)
- Unicorn-50509.exe (PID: 11428)
- Unicorn-56109.exe (PID: 10984)
- Unicorn-56109.exe (PID: 10976)
- Unicorn-56109.exe (PID: 10968)
- Unicorn-33550.exe (PID: 10992)
- Unicorn-58168.exe (PID: 11024)
- Unicorn-15189.exe (PID: 11080)
- Unicorn-44433.exe (PID: 11032)
- Unicorn-2461.exe (PID: 10896)
- Unicorn-12389.exe (PID: 11092)
- Unicorn-63020.exe (PID: 812)
- Unicorn-6829.exe (PID: 11192)
- Unicorn-16778.exe (PID: 11200)
- Unicorn-13898.exe (PID: 11260)
- Unicorn-21663.exe (PID: 11316)
- Unicorn-23026.exe (PID: 11396)
- Unicorn-49285.exe (PID: 744)
- Unicorn-2653.exe (PID: 11128)
- Unicorn-52430.exe (PID: 11248)
- Unicorn-23026.exe (PID: 11732)
- Unicorn-1454.exe (PID: 11100)
- Unicorn-1667.exe (PID: 11284)
- Unicorn-5943.exe (PID: 11748)
- Unicorn-5943.exe (PID: 11756)
- Unicorn-5943.exe (PID: 11764)
- Unicorn-24418.exe (PID: 11480)
- Unicorn-17711.exe (PID: 11336)
- Unicorn-44354.exe (PID: 11344)
- Unicorn-19710.exe (PID: 11948)
- Unicorn-39746.exe (PID: 11904)
- Unicorn-28886.exe (PID: 11912)
- Unicorn-25356.exe (PID: 11928)
- Unicorn-14495.exe (PID: 11920)
- Unicorn-64272.exe (PID: 12004)
- Unicorn-21001.exe (PID: 12048)
- Unicorn-41522.exe (PID: 12124)
- Unicorn-36430.exe (PID: 12164)
- Unicorn-47936.exe (PID: 12224)
- Unicorn-2527.exe (PID: 12056)
- Unicorn-39384.exe (PID: 12072)
- Unicorn-39384.exe (PID: 12092)
- Unicorn-39384.exe (PID: 12084)
- Unicorn-24729.exe (PID: 12116)
- Unicorn-63073.exe (PID: 12156)
- Unicorn-47366.exe (PID: 12172)
- Unicorn-52020.exe (PID: 12240)
- Unicorn-965.exe (PID: 12260)
- Unicorn-6830.exe (PID: 12268)
- Unicorn-20478.exe (PID: 12280)
- Unicorn-55289.exe (PID: 3900)
- Unicorn-12387.exe (PID: 12836)
- Unicorn-9587.exe (PID: 12816)
- Unicorn-3487.exe (PID: 12320)
- Unicorn-13680.exe (PID: 12012)
- Unicorn-45222.exe (PID: 11940)
- Unicorn-18170.exe (PID: 12468)
- Unicorn-57235.exe (PID: 12436)
- Unicorn-3182.exe (PID: 12140)
- Unicorn-18252.exe (PID: 12828)
- Unicorn-34213.exe (PID: 1052)
- Unicorn-9352.exe (PID: 12292)
- Unicorn-9352.exe (PID: 12312)
- Unicorn-44163.exe (PID: 12328)
- Unicorn-23240.exe (PID: 12032)
- Unicorn-34917.exe (PID: 12408)
- Unicorn-4219.exe (PID: 12668)
- Unicorn-63378.exe (PID: 12520)
- Unicorn-16032.exe (PID: 12588)
- Unicorn-16572.exe (PID: 12640)
- Unicorn-61588.exe (PID: 12660)
- Unicorn-30697.exe (PID: 12688)
- Unicorn-24831.exe (PID: 12696)
- Unicorn-16123.exe (PID: 12492)
- Unicorn-34433.exe (PID: 12508)
- Unicorn-13893.exe (PID: 12564)
- Unicorn-5311.exe (PID: 12752)
- Unicorn-13671.exe (PID: 12784)
- Unicorn-2736.exe (PID: 12772)
- Unicorn-16471.exe (PID: 12792)
- Unicorn-12387.exe (PID: 12800)
- Unicorn-58589.exe (PID: 12808)
- Unicorn-32716.exe (PID: 12720)
- Unicorn-13976.exe (PID: 12728)
- Unicorn-59913.exe (PID: 12736)
- Unicorn-2388.exe (PID: 13064)
- Unicorn-29016.exe (PID: 12972)
- Unicorn-8471.exe (PID: 12500)
- Unicorn-55472.exe (PID: 13072)
- Unicorn-62456.exe (PID: 13104)
- Unicorn-41196.exe (PID: 13188)
- Unicorn-16915.exe (PID: 13160)
- Unicorn-54672.exe (PID: 13224)
- Unicorn-53639.exe (PID: 12936)
- Unicorn-5311.exe (PID: 12744)
- Unicorn-30007.exe (PID: 12852)
- Unicorn-9352.exe (PID: 12300)
- Unicorn-44537.exe (PID: 13088)
- Unicorn-10540.exe (PID: 13304)
- Unicorn-46504.exe (PID: 5984)
- Unicorn-26830.exe (PID: 11496)
- Unicorn-7039.exe (PID: 11416)
- Unicorn-15704.exe (PID: 11444)
- Unicorn-61641.exe (PID: 11532)
- Unicorn-39825.exe (PID: 13296)
- Unicorn-14142.exe (PID: 13364)
- Unicorn-19212.exe (PID: 13096)
- Unicorn-15320.exe (PID: 13216)
- Unicorn-13475.exe (PID: 13048)
- Unicorn-64137.exe (PID: 13080)
- Unicorn-9839.exe (PID: 4208)
- Unicorn-26830.exe (PID: 11488)
- Unicorn-44266.exe (PID: 13280)
- Unicorn-17340.exe (PID: 13056)
- Unicorn-4267.exe (PID: 7264)
- Unicorn-17122.exe (PID: 13844)
- Unicorn-51859.exe (PID: 13824)
- Unicorn-62238.exe (PID: 13760)
- Unicorn-45684.exe (PID: 6980)
- Unicorn-16520.exe (PID: 4056)
- Unicorn-1672.exe (PID: 5720)
- Unicorn-48232.exe (PID: 13952)
- Unicorn-5756.exe (PID: 3240)
- Unicorn-52508.exe (PID: 13960)
- Unicorn-19709.exe (PID: 14560)
- Unicorn-51336.exe (PID: 14648)
- Unicorn-6603.exe (PID: 14668)
- Unicorn-16856.exe (PID: 14684)
- Unicorn-6603.exe (PID: 14716)
- Unicorn-6603.exe (PID: 14660)
- Unicorn-6603.exe (PID: 14692)
- Unicorn-6603.exe (PID: 14708)
- Unicorn-6603.exe (PID: 14700)
- Unicorn-9622.exe (PID: 14952)
- Unicorn-62940.exe (PID: 14960)
- Unicorn-31707.exe (PID: 3828)
- Unicorn-59289.exe (PID: 14988)
- Unicorn-63172.exe (PID: 14980)
- Unicorn-21684.exe (PID: 14928)
- Unicorn-28907.exe (PID: 7268)
- Unicorn-51475.exe (PID: 14904)
- Unicorn-9813.exe (PID: 14124)
- Unicorn-2989.exe (PID: 14528)
- Unicorn-45253.exe (PID: 14920)
- Unicorn-44485.exe (PID: 14584)
- Unicorn-45714.exe (PID: 15140)
- Unicorn-45165.exe (PID: 15124)
- Unicorn-63098.exe (PID: 14108)
- Unicorn-52660.exe (PID: 14100)
- Unicorn-37573.exe (PID: 7296)
- Unicorn-37494.exe (PID: 4724)
- Unicorn-53063.exe (PID: 13984)
- Unicorn-10521.exe (PID: 14024)
- Unicorn-3016.exe (PID: 14612)
- Unicorn-26420.exe (PID: 14000)
- Unicorn-32591.exe (PID: 4436)
- Unicorn-189.exe (PID: 14540)
- Unicorn-27791.exe (PID: 14676)
- Unicorn-35486.exe (PID: 15116)
- Unicorn-374.exe (PID: 14568)
- Unicorn-9721.exe (PID: 14064)
- Unicorn-5729.exe (PID: 14132)
- Unicorn-12657.exe (PID: 15132)
- Unicorn-48708.exe (PID: 14056)
- Unicorn-19186.exe (PID: 14016)
- Unicorn-50946.exe (PID: 14592)
- Unicorn-64158.exe (PID: 4016)
- Unicorn-182.exe (PID: 14404)
- Unicorn-34125.exe (PID: 14152)
- Unicorn-10899.exe (PID: 13908)
- Unicorn-11256.exe (PID: 14744)
- Unicorn-45052.exe (PID: 4028)
- Unicorn-63264.exe (PID: 14728)
- Unicorn-44279.exe (PID: 15340)
- Unicorn-65472.exe (PID: 14628)
- Unicorn-58439.exe (PID: 14752)
- Unicorn-55605.exe (PID: 14736)
- Unicorn-54136.exe (PID: 15288)
- Unicorn-12373.exe (PID: 7344)
- Unicorn-19517.exe (PID: 14412)
- Unicorn-3757.exe (PID: 7272)
- Unicorn-41538.exe (PID: 7280)
- Unicorn-33540.exe (PID: 14912)
- Unicorn-49959.exe (PID: 14968)
- Unicorn-31707.exe (PID: 7240)
- Unicorn-62238.exe (PID: 13768)
- Unicorn-4220.exe (PID: 14520)
- Unicorn-25383.exe (PID: 14424)
- Unicorn-785.exe (PID: 13748)
- Unicorn-5974.exe (PID: 14600)
- Unicorn-44476.exe (PID: 14936)
- Unicorn-14901.exe (PID: 15320)
- Unicorn-45404.exe (PID: 15768)
- Unicorn-1968.exe (PID: 15756)
- Unicorn-32834.exe (PID: 15824)
- Unicorn-56080.exe (PID: 5376)
- Unicorn-1941.exe (PID: 15432)
- Unicorn-42129.exe (PID: 15836)
- Unicorn-41194.exe (PID: 15528)
- Unicorn-43001.exe (PID: 15776)
- Unicorn-46570.exe (PID: 15860)
- Unicorn-4438.exe (PID: 15560)
- Unicorn-61957.exe (PID: 15308)
- Unicorn-16624.exe (PID: 15736)
- Unicorn-1941.exe (PID: 15440)
- Unicorn-49171.exe (PID: 15792)
- Unicorn-28876.exe (PID: 15728)
- Unicorn-2233.exe (PID: 15744)
- Unicorn-12850.exe (PID: 15784)
- Unicorn-2649.exe (PID: 15256)
- Unicorn-31707.exe (PID: 15596)
- Unicorn-1941.exe (PID: 15424)
- Unicorn-37355.exe (PID: 15812)
- Unicorn-17701.exe (PID: 15332)
- Unicorn-21620.exe (PID: 15300)
- Unicorn-51744.exe (PID: 5952)
- Unicorn-27108.exe (PID: 15552)
- Unicorn-39488.exe (PID: 13888)
- Unicorn-26561.exe (PID: 4628)
- Unicorn-33344.exe (PID: 15848)
- Unicorn-47516.exe (PID: 16404)
- Unicorn-37634.exe (PID: 13788)
- Unicorn-59536.exe (PID: 16424)
- Unicorn-55305.exe (PID: 2780)
- Unicorn-11361.exe (PID: 16188)
- Unicorn-21097.exe (PID: 7400)
The sample compiled with chinese language support
- 1 (570).exe (PID: 1276)
Creates files or folders in the user directory
- WerFault.exe (PID: 896)
- WerFault.exe (PID: 13840)
Reads the software policy settings
- slui.exe (PID: 900)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
721
Monitored processes
584
Malicious processes
85
Suspicious processes
61
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 536 | C:\Users\admin\AppData\Local\Temp\Unicorn-45167.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-45167.exe | Unicorn-22478.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 680 | C:\Users\admin\AppData\Local\Temp\Unicorn-30092.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30092.exe | Unicorn-22334.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 744 | C:\Users\admin\AppData\Local\Temp\Unicorn-49285.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-49285.exe | Unicorn-29594.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 812 | C:\Users\admin\AppData\Local\Temp\Unicorn-63020.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-63020.exe | — | Unicorn-22028.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 856 | C:\Users\admin\AppData\Local\Temp\Unicorn-31707.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-31707.exe | — | Unicorn-52305.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 872 | C:\Users\admin\AppData\Local\Temp\Unicorn-49036.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-49036.exe | Unicorn-15237.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 896 | C:\WINDOWS\SysWOW64\WerFault.exe -u -p 4408 -s 660 | C:\Windows\SysWOW64\WerFault.exe | — | Unicorn-29262.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Problem Reporting Exit code: 0 Version: 10.0.19041.3996 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 900 | "C:\WINDOWS\System32\SLUI.exe" RuleId=3482d82e-ca2c-4e1f-8864-da0267b484b2;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=TimerEvent | C:\Windows\System32\slui.exe | SppExtComObj.Exe | ||||||||||||
User: NETWORK SERVICE Company: Microsoft Corporation Integrity Level: SYSTEM Description: Windows Activation Client Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 920 | C:\Users\admin\AppData\Local\Temp\Unicorn-44731.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-44731.exe | Unicorn-53854.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 976 | C:\Users\admin\AppData\Local\Temp\Unicorn-22478.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-22478.exe | Unicorn-53854.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
14 060
Read events
14 060
Write events
0
Delete events
0
Modification events
Executable files
730
Suspicious files
6
Text files
2
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 1164 | Unicorn-53854.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-22478.exe | executable | |
MD5:A2CE41BA84E491DCDD91C36C361BDD28 | SHA256:0C5C68065C41A8D5830F1DC6DD4D7CDDCCCB2C13B9B7DA274AEA866B6326AE7C | |||
| 1164 | Unicorn-53854.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-22334.exe | executable | |
MD5:D2DA76DBFC60DBD1E8298C8890381A0C | SHA256:DE3829973EBCF82B2E0068B2302AEF00126A03E9D9AC9EF1B5EF2B732CB0EF49 | |||
| 4164 | Unicorn-22334.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30092.exe | executable | |
MD5:C3565302F11024E72DD3CD5FB4AC3479 | SHA256:CC2717D7315432B00D75E2BF2BBDEF1E495336E0C4D21C04A1BE6933E2AEDBC0 | |||
| 1276 | 1 (570).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53854.exe | executable | |
MD5:1E9DD236C66D458298498A6B963462D4 | SHA256:AD736B05241935BC73B5577758541527370097C4583EFA7FAAE6ADFACD600BB5 | |||
| 1276 | 1 (570).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-41362.exe | executable | |
MD5:D86152F7A389F7A1ADE111CBBFBA3693 | SHA256:0667DB77E473693120316075CBC43307293B2F915E9A1312CD9524BFD64BC3BA | |||
| 1072 | Unicorn-41362.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-50704.exe | executable | |
MD5:F6DEA995A46C3AD49C310AD9089182BE | SHA256:2521A8433646216DDAEFD0E8BFCF529F7A219C3DB24F8764556C971FDD643BC1 | |||
| 1276 | 1 (570).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-44574.exe | executable | |
MD5:2458E7357BBB6E38BEF7ECA8322D86DC | SHA256:51C7FDBB7242D4CBB8AF7206CA5048A6DB9223F477F6AFFAA49DBF69FC9F59C2 | |||
| 6108 | Unicorn-60351.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-65032.exe | executable | |
MD5:5F1C1B75F52307D913A0E3B63134DF6B | SHA256:965ACBB11E3AFC6BB24B909B34F5AD1AA789B3D4B7E0129C9182E986B283967D | |||
| 3784 | Unicorn-44574.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-55712.exe | executable | |
MD5:E4D00DD8F534684BF9005C2B60A53280 | SHA256:AFDEEF80E43817BFAA8E212339A06F422DFC331236C7E25743DBF90C18991E55 | |||
| 6652 | Unicorn-55712.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-8047.exe | executable | |
MD5:FF9B19A766CD864F302BA70ED92851A1 | SHA256:6C04E2ACC2CE6D4799ABF3ACBB1829AAAC6B25EE4293FE70151EB3C58617FC94 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
22
DNS requests
15
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
6544 | svchost.exe | GET | 200 | 2.17.190.73:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
— | — | GET | 200 | 23.48.23.143:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
5728 | backgroundTaskHost.exe | GET | 200 | 2.17.190.73:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
1056 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
1056 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
2104 | svchost.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
— | — | 23.48.23.143:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
5496 | MoUsoCoreWorker.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
2112 | svchost.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
2104 | svchost.exe | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
3216 | svchost.exe | 20.197.71.89:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | SG | whitelisted |
6544 | svchost.exe | 40.126.32.72:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 2.17.190.73:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |