| File name: | 1 (1464) |
| Full analysis: | https://app.any.run/tasks/6bb95532-bdf9-40fd-974b-ab518ad65175 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 17:42:01 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | F4D0743849FFE7577C3AEFE2D1147380 |
| SHA1: | D19CC77081D767757D2B08207F1F3571FDD73BA5 |
| SHA256: | 60431A5A7CBD636E4DF3D07F9797F4820134DEA1B1DA0DF0759EAC8CF0B39C4C |
| SSDEEP: | 6144:N+K5ANIPkDGHA5dotMevpofxotB1lvJGBR//yGICZk/8SwjwpyA4EhyaxD+XGFMN:NvyehHA5qtvTBHhaR3yGIChx4QNmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- Unicorn-47130.exe (PID: 5392)
- Unicorn-42012.exe (PID: 6044)
- Unicorn-8593.exe (PID: 3268)
- 1 (1464).exe (PID: 7020)
- Unicorn-57529.exe (PID: 1184)
- Unicorn-5727.exe (PID: 2316)
- Unicorn-20026.exe (PID: 5064)
- Unicorn-51266.exe (PID: 664)
- Unicorn-36968.exe (PID: 5956)
- Unicorn-55329.exe (PID: 3364)
- Unicorn-46606.exe (PID: 732)
- Unicorn-50425.exe (PID: 728)
- Unicorn-30824.exe (PID: 2136)
- Unicorn-20026.exe (PID: 2504)
- Unicorn-7877.exe (PID: 5800)
- Unicorn-36658.exe (PID: 976)
- Unicorn-17826.exe (PID: 616)
- Unicorn-36393.exe (PID: 6132)
- Unicorn-36850.exe (PID: 1388)
- Unicorn-1608.exe (PID: 5756)
- Unicorn-52292.exe (PID: 6592)
- Unicorn-54146.exe (PID: 2772)
- Unicorn-15151.exe (PID: 6512)
- Unicorn-51131.exe (PID: 2268)
- Unicorn-58977.exe (PID: 4188)
- Unicorn-5137.exe (PID: 6752)
- Unicorn-42201.exe (PID: 4068)
- Unicorn-14003.exe (PID: 6740)
- Unicorn-29044.exe (PID: 6388)
- Unicorn-63609.exe (PID: 4776)
- Unicorn-35575.exe (PID: 5512)
- Unicorn-42037.exe (PID: 5988)
- Unicorn-63801.exe (PID: 6652)
- Unicorn-11071.exe (PID: 2340)
- Unicorn-26469.exe (PID: 7216)
- Unicorn-51549.exe (PID: 6228)
- Unicorn-8877.exe (PID: 7180)
- Unicorn-56209.exe (PID: 7268)
- Unicorn-2047.exe (PID: 7292)
- Unicorn-18877.exe (PID: 7364)
- Unicorn-23537.exe (PID: 7284)
- Unicorn-51860.exe (PID: 7276)
- Unicorn-31822.exe (PID: 2384)
- Unicorn-23080.exe (PID: 7244)
- Unicorn-58439.exe (PID: 7300)
- Unicorn-21565.exe (PID: 7624)
- Unicorn-51528.exe (PID: 7200)
- Unicorn-24806.exe (PID: 7084)
- Unicorn-61947.exe (PID: 7376)
- Unicorn-50900.exe (PID: 7648)
- Unicorn-58705.exe (PID: 7676)
- Unicorn-37060.exe (PID: 7548)
- Unicorn-44149.exe (PID: 7316)
- Unicorn-48212.exe (PID: 7384)
- Unicorn-7179.exe (PID: 7340)
- Unicorn-58948.exe (PID: 7356)
- Unicorn-54045.exe (PID: 7732)
- Unicorn-14792.exe (PID: 7348)
- Unicorn-20797.exe (PID: 7532)
- Unicorn-29711.exe (PID: 7540)
- Unicorn-47221.exe (PID: 7800)
- Unicorn-39939.exe (PID: 7760)
- Unicorn-41025.exe (PID: 7588)
- Unicorn-31194.exe (PID: 7556)
- Unicorn-23101.exe (PID: 7852)
- Unicorn-16905.exe (PID: 7564)
- Unicorn-12031.exe (PID: 7332)
- Unicorn-58492.exe (PID: 7572)
- Unicorn-12991.exe (PID: 7596)
- Unicorn-31897.exe (PID: 7324)
- Unicorn-17843.exe (PID: 7744)
- Unicorn-33431.exe (PID: 7808)
- Unicorn-45804.exe (PID: 7768)
- Unicorn-47989.exe (PID: 7888)
- Unicorn-30309.exe (PID: 7820)
- Unicorn-22437.exe (PID: 8740)
- Unicorn-3604.exe (PID: 8040)
- Unicorn-47915.exe (PID: 7724)
- Unicorn-14844.exe (PID: 8680)
- Unicorn-45981.exe (PID: 8296)
- Unicorn-24528.exe (PID: 8176)
- Unicorn-19749.exe (PID: 8000)
- Unicorn-23262.exe (PID: 8016)
- Unicorn-8627.exe (PID: 3896)
- Unicorn-42347.exe (PID: 8996)
- Unicorn-12327.exe (PID: 8048)
- Unicorn-62125.exe (PID: 8384)
- Unicorn-55493.exe (PID: 8848)
- Unicorn-58617.exe (PID: 8524)
- Unicorn-18662.exe (PID: 8184)
- Unicorn-26713.exe (PID: 8828)
- Unicorn-22909.exe (PID: 7968)
- Unicorn-41465.exe (PID: 8492)
- Unicorn-10382.exe (PID: 8960)
- Unicorn-31928.exe (PID: 8060)
- Unicorn-52997.exe (PID: 6300)
- Unicorn-2104.exe (PID: 7792)
- Unicorn-4762.exe (PID: 8572)
- Unicorn-28611.exe (PID: 8984)
- Unicorn-17201.exe (PID: 8260)
- Unicorn-3235.exe (PID: 7844)
- Unicorn-62701.exe (PID: 8532)
- Unicorn-51601.exe (PID: 8652)
- Unicorn-34585.exe (PID: 7828)
- Unicorn-46843.exe (PID: 7984)
- Unicorn-16027.exe (PID: 8116)
- Unicorn-25924.exe (PID: 7924)
- Unicorn-56712.exe (PID: 7868)
- Unicorn-14719.exe (PID: 7836)
- Unicorn-13427.exe (PID: 8580)
- Unicorn-4896.exe (PID: 9212)
- Unicorn-20687.exe (PID: 8076)
- Unicorn-58212.exe (PID: 6112)
- Unicorn-9800.exe (PID: 8404)
- Unicorn-56432.exe (PID: 8668)
- Unicorn-24217.exe (PID: 8088)
- Unicorn-2784.exe (PID: 8976)
- Unicorn-29733.exe (PID: 7616)
- Unicorn-34370.exe (PID: 9116)
- Unicorn-40169.exe (PID: 8144)
- Unicorn-50833.exe (PID: 8424)
- Unicorn-25997.exe (PID: 9892)
- Unicorn-8892.exe (PID: 9924)
- Unicorn-46396.exe (PID: 9952)
- Unicorn-24793.exe (PID: 8168)
- Unicorn-16101.exe (PID: 9540)
- Unicorn-48700.exe (PID: 8108)
- Unicorn-54511.exe (PID: 9592)
- Unicorn-59940.exe (PID: 8760)
- Unicorn-14823.exe (PID: 8516)
- Unicorn-42473.exe (PID: 8604)
- Unicorn-49608.exe (PID: 9028)
- Unicorn-43464.exe (PID: 9488)
- Unicorn-24217.exe (PID: 8092)
- Unicorn-51772.exe (PID: 8780)
- Unicorn-31717.exe (PID: 8944)
- Unicorn-6218.exe (PID: 8156)
- Unicorn-32053.exe (PID: 9616)
- Unicorn-19993.exe (PID: 9648)
- Unicorn-22763.exe (PID: 11016)
- Unicorn-34388.exe (PID: 11256)
- Unicorn-56365.exe (PID: 9420)
- Unicorn-28522.exe (PID: 6708)
- Unicorn-17201.exe (PID: 8596)
- Unicorn-42089.exe (PID: 8340)
- Unicorn-27201.exe (PID: 9476)
- Unicorn-18161.exe (PID: 8456)
- Unicorn-11314.exe (PID: 9832)
- Unicorn-39733.exe (PID: 8952)
- Unicorn-7932.exe (PID: 9552)
- Unicorn-56453.exe (PID: 8968)
- Unicorn-26241.exe (PID: 7956)
- Unicorn-4616.exe (PID: 9684)
- Unicorn-59364.exe (PID: 8564)
- Unicorn-12291.exe (PID: 10556)
- Unicorn-52592.exe (PID: 10388)
- Unicorn-5716.exe (PID: 8412)
- Unicorn-4528.exe (PID: 10868)
- Unicorn-50583.exe (PID: 12332)
- Unicorn-51321.exe (PID: 9284)
- Unicorn-26625.exe (PID: 9364)
- Unicorn-63817.exe (PID: 12344)
- Unicorn-17741.exe (PID: 12420)
- Unicorn-57216.exe (PID: 10692)
- Unicorn-13610.exe (PID: 9372)
- Unicorn-13582.exe (PID: 10656)
- Unicorn-22349.exe (PID: 9328)
- Unicorn-28558.exe (PID: 8508)
- Unicorn-53433.exe (PID: 9812)
- Unicorn-17445.exe (PID: 9824)
- Unicorn-12866.exe (PID: 11572)
- Unicorn-6396.exe (PID: 9300)
- Unicorn-57023.exe (PID: 5136)
- Unicorn-64320.exe (PID: 9292)
- Unicorn-47777.exe (PID: 11500)
- Unicorn-35317.exe (PID: 10484)
- Unicorn-3442.exe (PID: 2084)
- Unicorn-40812.exe (PID: 9084)
- Unicorn-7143.exe (PID: 12176)
- Unicorn-14491.exe (PID: 10260)
- Unicorn-60131.exe (PID: 10200)
- Unicorn-61684.exe (PID: 10600)
- Unicorn-34143.exe (PID: 10192)
- Unicorn-40459.exe (PID: 6392)
- Unicorn-1714.exe (PID: 10760)
- Unicorn-9831.exe (PID: 9344)
- Unicorn-57216.exe (PID: 10684)
- Unicorn-12291.exe (PID: 10548)
- Unicorn-11929.exe (PID: 12048)
- Unicorn-3931.exe (PID: 10672)
- Unicorn-25015.exe (PID: 9560)
- Unicorn-3796.exe (PID: 4740)
- Unicorn-63795.exe (PID: 12496)
- Unicorn-59868.exe (PID: 14028)
- Unicorn-25905.exe (PID: 8628)
- Unicorn-17829.exe (PID: 10236)
- Unicorn-41447.exe (PID: 14072)
- Unicorn-994.exe (PID: 12064)
- Unicorn-40325.exe (PID: 10524)
- Unicorn-2675.exe (PID: 9380)
- Unicorn-51440.exe (PID: 10312)
- Unicorn-64097.exe (PID: 10360)
- Unicorn-48700.exe (PID: 9568)
- Unicorn-8891.exe (PID: 5256)
- Unicorn-61108.exe (PID: 10640)
- Unicorn-17511.exe (PID: 8556)
- Unicorn-8699.exe (PID: 9884)
- Unicorn-62375.exe (PID: 10280)
- Unicorn-15524.exe (PID: 9584)
Executable content was dropped or overwritten
- Unicorn-47130.exe (PID: 5392)
- 1 (1464).exe (PID: 7020)
- Unicorn-42012.exe (PID: 6044)
- Unicorn-57529.exe (PID: 1184)
- Unicorn-20026.exe (PID: 5064)
- Unicorn-8593.exe (PID: 3268)
- Unicorn-20026.exe (PID: 2504)
- Unicorn-51266.exe (PID: 664)
- Unicorn-55329.exe (PID: 3364)
- Unicorn-36968.exe (PID: 5956)
- Unicorn-50425.exe (PID: 728)
- Unicorn-17826.exe (PID: 616)
- Unicorn-30824.exe (PID: 2136)
- Unicorn-5727.exe (PID: 2316)
- Unicorn-7877.exe (PID: 5800)
- Unicorn-29044.exe (PID: 6388)
- Unicorn-36850.exe (PID: 1388)
- Unicorn-36393.exe (PID: 6132)
- Unicorn-15151.exe (PID: 6512)
- Unicorn-52292.exe (PID: 6592)
- Unicorn-1608.exe (PID: 5756)
- Unicorn-54146.exe (PID: 2772)
- Unicorn-5137.exe (PID: 6752)
- Unicorn-51131.exe (PID: 2268)
- Unicorn-58977.exe (PID: 4188)
- Unicorn-46606.exe (PID: 732)
- Unicorn-42201.exe (PID: 4068)
- Unicorn-31822.exe (PID: 2384)
- Unicorn-42037.exe (PID: 5988)
- Unicorn-63609.exe (PID: 4776)
- Unicorn-63801.exe (PID: 6652)
- Unicorn-35575.exe (PID: 5512)
- Unicorn-36658.exe (PID: 976)
- Unicorn-24806.exe (PID: 7084)
- Unicorn-11071.exe (PID: 2340)
- Unicorn-51549.exe (PID: 6228)
- Unicorn-8877.exe (PID: 7180)
- Unicorn-56209.exe (PID: 7268)
- Unicorn-2047.exe (PID: 7292)
- Unicorn-23080.exe (PID: 7244)
- Unicorn-61947.exe (PID: 7376)
- Unicorn-23537.exe (PID: 7284)
- Unicorn-51860.exe (PID: 7276)
- Unicorn-18877.exe (PID: 7364)
- Unicorn-58439.exe (PID: 7300)
- Unicorn-21565.exe (PID: 7624)
- Unicorn-50900.exe (PID: 7648)
- Unicorn-58705.exe (PID: 7676)
- Unicorn-48212.exe (PID: 7384)
- Unicorn-39939.exe (PID: 7760)
- Unicorn-31897.exe (PID: 7324)
- Unicorn-7179.exe (PID: 7340)
- Unicorn-29711.exe (PID: 7540)
- Unicorn-58948.exe (PID: 7356)
- Unicorn-14792.exe (PID: 7348)
- Unicorn-29733.exe (PID: 7616)
- Unicorn-20797.exe (PID: 7532)
- Unicorn-54045.exe (PID: 7732)
- Unicorn-14003.exe (PID: 6740)
- Unicorn-23101.exe (PID: 7852)
- Unicorn-41025.exe (PID: 7588)
- Unicorn-12991.exe (PID: 7596)
- Unicorn-31194.exe (PID: 7556)
- Unicorn-47221.exe (PID: 7800)
- Unicorn-16905.exe (PID: 7564)
- Unicorn-12031.exe (PID: 7332)
- Unicorn-58492.exe (PID: 7572)
- Unicorn-33431.exe (PID: 7808)
- Unicorn-47989.exe (PID: 7888)
- Unicorn-17843.exe (PID: 7744)
- Unicorn-45804.exe (PID: 7768)
- Unicorn-26469.exe (PID: 7216)
- Unicorn-30309.exe (PID: 7820)
- Unicorn-14844.exe (PID: 8680)
- Unicorn-47915.exe (PID: 7724)
- Unicorn-22437.exe (PID: 8740)
- Unicorn-45981.exe (PID: 8296)
- Unicorn-24528.exe (PID: 8176)
- Unicorn-19749.exe (PID: 8000)
- Unicorn-59940.exe (PID: 8760)
- Unicorn-8627.exe (PID: 3896)
- Unicorn-12327.exe (PID: 8048)
- Unicorn-23262.exe (PID: 8016)
- Unicorn-42347.exe (PID: 8996)
- Unicorn-55493.exe (PID: 8848)
- Unicorn-58617.exe (PID: 8524)
- Unicorn-18662.exe (PID: 8184)
- Unicorn-62125.exe (PID: 8384)
- Unicorn-26713.exe (PID: 8828)
- Unicorn-22909.exe (PID: 7968)
- Unicorn-56712.exe (PID: 7868)
- Unicorn-52997.exe (PID: 6300)
- Unicorn-20687.exe (PID: 8076)
- Unicorn-28611.exe (PID: 8984)
- Unicorn-2104.exe (PID: 7792)
- Unicorn-10382.exe (PID: 8960)
- Unicorn-31928.exe (PID: 8060)
- Unicorn-17201.exe (PID: 8260)
- Unicorn-24217.exe (PID: 8088)
- Unicorn-46843.exe (PID: 7984)
- Unicorn-62701.exe (PID: 8532)
- Unicorn-51601.exe (PID: 8652)
- Unicorn-34585.exe (PID: 7828)
- Unicorn-14719.exe (PID: 7836)
- Unicorn-34370.exe (PID: 9116)
- Unicorn-25924.exe (PID: 7924)
- Unicorn-16027.exe (PID: 8116)
- Unicorn-4896.exe (PID: 9212)
- Unicorn-58212.exe (PID: 6112)
- Unicorn-9800.exe (PID: 8404)
- Unicorn-56432.exe (PID: 8668)
- Unicorn-2784.exe (PID: 8976)
- Unicorn-40169.exe (PID: 8144)
- Unicorn-50833.exe (PID: 8424)
- Unicorn-25997.exe (PID: 9892)
- Unicorn-3235.exe (PID: 7844)
- Unicorn-8892.exe (PID: 9924)
- Unicorn-24793.exe (PID: 8168)
- Unicorn-3604.exe (PID: 8040)
- Unicorn-16101.exe (PID: 9540)
- Unicorn-48700.exe (PID: 8108)
- Unicorn-14823.exe (PID: 8516)
- Unicorn-42473.exe (PID: 8604)
- Unicorn-4159.exe (PID: 8068)
- Unicorn-42089.exe (PID: 8340)
- Unicorn-43464.exe (PID: 9488)
- Unicorn-51772.exe (PID: 8780)
- Unicorn-31717.exe (PID: 8944)
- Unicorn-6218.exe (PID: 8156)
- Unicorn-32053.exe (PID: 9616)
- Unicorn-22763.exe (PID: 11016)
- Unicorn-34388.exe (PID: 11256)
- Unicorn-56365.exe (PID: 9420)
- Unicorn-56483.exe (PID: 9240)
- Unicorn-17201.exe (PID: 8596)
- Unicorn-11314.exe (PID: 9832)
- Unicorn-18161.exe (PID: 8456)
- Unicorn-27201.exe (PID: 9476)
- Unicorn-12291.exe (PID: 10556)
- Unicorn-39733.exe (PID: 8952)
- Unicorn-56453.exe (PID: 8968)
- Unicorn-7932.exe (PID: 9552)
- Unicorn-26241.exe (PID: 7956)
- Unicorn-5716.exe (PID: 8412)
- Unicorn-4616.exe (PID: 9684)
- Unicorn-59364.exe (PID: 8564)
- Unicorn-52592.exe (PID: 10388)
- Unicorn-4528.exe (PID: 10868)
- Unicorn-53433.exe (PID: 9812)
- Unicorn-51440.exe (PID: 10296)
- Unicorn-50583.exe (PID: 12332)
- Unicorn-17741.exe (PID: 12420)
- Unicorn-63817.exe (PID: 12344)
- Unicorn-28558.exe (PID: 8508)
- Unicorn-57216.exe (PID: 10692)
- Unicorn-51321.exe (PID: 9284)
- Unicorn-26625.exe (PID: 9364)
- Unicorn-41465.exe (PID: 8492)
- Unicorn-13582.exe (PID: 10656)
- Unicorn-13610.exe (PID: 9372)
- Unicorn-37060.exe (PID: 7548)
- Unicorn-22349.exe (PID: 9328)
- Unicorn-46396.exe (PID: 9952)
- Unicorn-17445.exe (PID: 9824)
- Unicorn-12866.exe (PID: 11572)
- Unicorn-57023.exe (PID: 5136)
- Unicorn-6396.exe (PID: 9300)
- Unicorn-64320.exe (PID: 9292)
- Unicorn-47777.exe (PID: 11500)
- Unicorn-35317.exe (PID: 10484)
- Unicorn-7562.exe (PID: 8588)
- Unicorn-3442.exe (PID: 2084)
- Unicorn-40812.exe (PID: 9084)
- Unicorn-61684.exe (PID: 10600)
- Unicorn-25015.exe (PID: 9560)
- Unicorn-7143.exe (PID: 12176)
- Unicorn-60131.exe (PID: 10200)
- Unicorn-40459.exe (PID: 6392)
- Unicorn-26026.exe (PID: 10564)
- Unicorn-44149.exe (PID: 7316)
- Unicorn-4762.exe (PID: 8572)
- Unicorn-12291.exe (PID: 10548)
- Unicorn-1714.exe (PID: 10760)
- Unicorn-9831.exe (PID: 9344)
- Unicorn-3931.exe (PID: 10672)
- Unicorn-57216.exe (PID: 10684)
- Unicorn-11929.exe (PID: 12048)
- Unicorn-51528.exe (PID: 7200)
- Unicorn-3796.exe (PID: 4740)
- Unicorn-63795.exe (PID: 12496)
- Unicorn-994.exe (PID: 12064)
- Unicorn-25905.exe (PID: 8628)
- Unicorn-17829.exe (PID: 10236)
- Unicorn-40325.exe (PID: 10524)
- Unicorn-24217.exe (PID: 8092)
- Unicorn-61108.exe (PID: 10640)
- Unicorn-19993.exe (PID: 9648)
- Unicorn-2675.exe (PID: 9380)
- Unicorn-51440.exe (PID: 10312)
- Unicorn-48700.exe (PID: 9568)
- Unicorn-15524.exe (PID: 9584)
- Unicorn-8891.exe (PID: 5256)
- Unicorn-64097.exe (PID: 10360)
- Unicorn-17511.exe (PID: 8556)
- Unicorn-8699.exe (PID: 9884)
- Unicorn-62375.exe (PID: 10280)
- Unicorn-37107.exe (PID: 6108)
- Unicorn-8508.exe (PID: 9660)
- Unicorn-24818.exe (PID: 10980)
- Unicorn-4616.exe (PID: 9692)
- Unicorn-55301.exe (PID: 8812)
- Unicorn-59868.exe (PID: 14028)
- Unicorn-14196.exe (PID: 14036)
- Unicorn-41447.exe (PID: 14072)
- Unicorn-31595.exe (PID: 10428)
- Unicorn-49608.exe (PID: 9028)
- Unicorn-54511.exe (PID: 9592)
- Unicorn-28522.exe (PID: 6708)
- Unicorn-46396.exe (PID: 9960)
- Unicorn-59504.exe (PID: 15404)
- Unicorn-994.exe (PID: 12596)
- Unicorn-22946.exe (PID: 15396)
- Unicorn-20050.exe (PID: 11996)
- Unicorn-55545.exe (PID: 10416)
- Unicorn-61248.exe (PID: 12116)
- Unicorn-667.exe (PID: 12588)
- Unicorn-41291.exe (PID: 10848)
- Unicorn-38315.exe (PID: 8332)
- Unicorn-64009.exe (PID: 12080)
- Unicorn-31929.exe (PID: 13408)
- Unicorn-53241.exe (PID: 9784)
- Unicorn-8042.exe (PID: 10924)
- Unicorn-13427.exe (PID: 8580)
- Unicorn-14491.exe (PID: 10260)
- Unicorn-51440.exe (PID: 10288)
- Unicorn-40459.exe (PID: 8204)
- Unicorn-33397.exe (PID: 9744)
- Unicorn-41508.exe (PID: 16472)
- Unicorn-35717.exe (PID: 5112)
- Unicorn-26211.exe (PID: 13456)
- Unicorn-54195.exe (PID: 13288)
- Unicorn-48244.exe (PID: 16464)
Executes application which crashes
- Unicorn-40795.exe (PID: 10208)
INFO
Checks supported languages
- 1 (1464).exe (PID: 7020)
- Unicorn-8593.exe (PID: 3268)
- Unicorn-57529.exe (PID: 1184)
- Unicorn-47130.exe (PID: 5392)
- Unicorn-42012.exe (PID: 6044)
- Unicorn-20026.exe (PID: 5064)
- Unicorn-20026.exe (PID: 2504)
- Unicorn-5727.exe (PID: 2316)
- Unicorn-51266.exe (PID: 664)
- Unicorn-36968.exe (PID: 5956)
- Unicorn-17826.exe (PID: 616)
- Unicorn-46606.exe (PID: 732)
- Unicorn-55329.exe (PID: 3364)
- Unicorn-50425.exe (PID: 728)
- Unicorn-30824.exe (PID: 2136)
- Unicorn-29044.exe (PID: 6388)
- Unicorn-7877.exe (PID: 5800)
- Unicorn-36658.exe (PID: 976)
- Unicorn-36393.exe (PID: 6132)
- Unicorn-54146.exe (PID: 2772)
- Unicorn-36850.exe (PID: 1388)
- Unicorn-15151.exe (PID: 6512)
- Unicorn-42201.exe (PID: 4068)
- Unicorn-51131.exe (PID: 2268)
- Unicorn-58977.exe (PID: 4188)
- Unicorn-5137.exe (PID: 6752)
- Unicorn-31822.exe (PID: 2384)
- Unicorn-42037.exe (PID: 5988)
- Unicorn-14003.exe (PID: 6740)
- Unicorn-1608.exe (PID: 5756)
- Unicorn-63609.exe (PID: 4776)
- Unicorn-11071.exe (PID: 2340)
- Unicorn-63801.exe (PID: 6652)
- Unicorn-24806.exe (PID: 7084)
- Unicorn-51549.exe (PID: 6228)
- Unicorn-8877.exe (PID: 7180)
- Unicorn-26469.exe (PID: 7216)
- Unicorn-58439.exe (PID: 7300)
- Unicorn-51528.exe (PID: 7200)
- Unicorn-23537.exe (PID: 7284)
- Unicorn-23080.exe (PID: 7244)
- Unicorn-51860.exe (PID: 7276)
- Unicorn-2047.exe (PID: 7292)
- Unicorn-44149.exe (PID: 7316)
- Unicorn-31897.exe (PID: 7324)
- Unicorn-12031.exe (PID: 7332)
- Unicorn-48212.exe (PID: 7384)
- Unicorn-18877.exe (PID: 7364)
- Unicorn-7179.exe (PID: 7340)
- Unicorn-14792.exe (PID: 7348)
- Unicorn-61947.exe (PID: 7376)
- Unicorn-20797.exe (PID: 7532)
- Unicorn-21565.exe (PID: 7624)
- Unicorn-37060.exe (PID: 7548)
- Unicorn-58492.exe (PID: 7572)
- Unicorn-58705.exe (PID: 7676)
- Unicorn-41025.exe (PID: 7588)
- Unicorn-29733.exe (PID: 7616)
- Unicorn-12991.exe (PID: 7596)
- Unicorn-47915.exe (PID: 7724)
- Unicorn-31194.exe (PID: 7556)
- Unicorn-39939.exe (PID: 7760)
- Unicorn-54045.exe (PID: 7732)
- Unicorn-17843.exe (PID: 7744)
- Unicorn-45804.exe (PID: 7768)
- Unicorn-47221.exe (PID: 7800)
- Unicorn-33431.exe (PID: 7808)
- Unicorn-22909.exe (PID: 7968)
- Unicorn-14719.exe (PID: 7836)
- Unicorn-3235.exe (PID: 7844)
- Unicorn-23101.exe (PID: 7852)
- Unicorn-56712.exe (PID: 7868)
- Unicorn-19749.exe (PID: 8000)
- Unicorn-23262.exe (PID: 8016)
- Unicorn-31928.exe (PID: 8060)
- Unicorn-4159.exe (PID: 8068)
- Unicorn-20687.exe (PID: 8076)
- Unicorn-24793.exe (PID: 8168)
- Unicorn-16027.exe (PID: 8116)
- Unicorn-40169.exe (PID: 8144)
- Unicorn-58212.exe (PID: 6112)
- Unicorn-24528.exe (PID: 8176)
- Unicorn-48700.exe (PID: 8108)
- Unicorn-24217.exe (PID: 8088)
- Unicorn-46843.exe (PID: 7984)
- Unicorn-8627.exe (PID: 3896)
- Unicorn-25924.exe (PID: 7924)
- Unicorn-3796.exe (PID: 4740)
- Unicorn-12327.exe (PID: 8048)
- Unicorn-22437.exe (PID: 8740)
- Unicorn-62125.exe (PID: 8384)
- Unicorn-59940.exe (PID: 8760)
- Unicorn-9800.exe (PID: 8404)
- Unicorn-5716.exe (PID: 8412)
- Unicorn-14844.exe (PID: 8680)
- Unicorn-50833.exe (PID: 8424)
- Unicorn-18161.exe (PID: 8456)
- Unicorn-41465.exe (PID: 8492)
- Unicorn-14823.exe (PID: 8516)
- Unicorn-58617.exe (PID: 8524)
- Unicorn-17511.exe (PID: 8556)
- Unicorn-4762.exe (PID: 8572)
- Unicorn-13427.exe (PID: 8580)
- Unicorn-28558.exe (PID: 8508)
- Unicorn-42473.exe (PID: 8604)
- Unicorn-51601.exe (PID: 8652)
- Unicorn-56432.exe (PID: 8668)
- Unicorn-42089.exe (PID: 8340)
- Unicorn-51772.exe (PID: 8780)
- Unicorn-55301.exe (PID: 8812)
- Unicorn-7562.exe (PID: 8588)
- Unicorn-25905.exe (PID: 8628)
- Unicorn-31717.exe (PID: 8944)
- Unicorn-39733.exe (PID: 8952)
- Unicorn-17201.exe (PID: 8596)
- Unicorn-28611.exe (PID: 8984)
- Unicorn-42347.exe (PID: 8996)
- Unicorn-26713.exe (PID: 8828)
- Unicorn-55493.exe (PID: 8848)
- Unicorn-4896.exe (PID: 9212)
- Unicorn-56453.exe (PID: 8968)
- Unicorn-40812.exe (PID: 9084)
- Unicorn-38315.exe (PID: 8332)
- Unicorn-26241.exe (PID: 7932)
- Unicorn-26241.exe (PID: 7956)
- Unicorn-56483.exe (PID: 9240)
- Unicorn-62348.exe (PID: 9248)
- Unicorn-51321.exe (PID: 9284)
- Unicorn-42193.exe (PID: 9264)
- Unicorn-42399.exe (PID: 5868)
- Unicorn-22349.exe (PID: 9328)
- Unicorn-3966.exe (PID: 9336)
- Unicorn-13610.exe (PID: 9372)
- Unicorn-38877.exe (PID: 9352)
- Unicorn-26625.exe (PID: 9364)
- Unicorn-11248.exe (PID: 9404)
- Unicorn-56365.exe (PID: 9420)
- Unicorn-64320.exe (PID: 9292)
- Unicorn-6396.exe (PID: 9300)
- Unicorn-27201.exe (PID: 9476)
- Unicorn-3656.exe (PID: 9496)
- Unicorn-16101.exe (PID: 9540)
- Unicorn-25015.exe (PID: 9560)
- Unicorn-25997.exe (PID: 9892)
- Unicorn-15524.exe (PID: 9584)
- Unicorn-43464.exe (PID: 9488)
- Unicorn-19993.exe (PID: 9648)
- Unicorn-40775.exe (PID: 9600)
- Unicorn-50096.exe (PID: 9256)
- Unicorn-54511.exe (PID: 9592)
- Unicorn-32053.exe (PID: 9616)
- Unicorn-8892.exe (PID: 9924)
- Unicorn-46396.exe (PID: 9952)
- Unicorn-8508.exe (PID: 9660)
- Unicorn-11314.exe (PID: 9832)
- Unicorn-46396.exe (PID: 9960)
- Unicorn-4616.exe (PID: 9692)
- Unicorn-17445.exe (PID: 9824)
- Unicorn-2675.exe (PID: 9712)
- Unicorn-25421.exe (PID: 10144)
- Unicorn-46993.exe (PID: 10160)
- Unicorn-8699.exe (PID: 9884)
- Unicorn-53433.exe (PID: 9812)
- Unicorn-46396.exe (PID: 9968)
- Unicorn-34143.exe (PID: 10192)
- Unicorn-40795.exe (PID: 10208)
- Unicorn-51963.exe (PID: 10220)
- Unicorn-2815.exe (PID: 10228)
- Unicorn-62560.exe (PID: 10172)
- Unicorn-60131.exe (PID: 10200)
- Unicorn-38227.exe (PID: 4428)
- Unicorn-14491.exe (PID: 10260)
- Unicorn-8891.exe (PID: 5256)
- Unicorn-28226.exe (PID: 10248)
- Unicorn-17829.exe (PID: 10236)
- Unicorn-37107.exe (PID: 6108)
- Unicorn-42525.exe (PID: 4152)
- Unicorn-51440.exe (PID: 10312)
- Unicorn-52592.exe (PID: 10388)
- Unicorn-57828.exe (PID: 10340)
- Unicorn-43677.exe (PID: 10376)
- Unicorn-62375.exe (PID: 10280)
- Unicorn-51440.exe (PID: 10288)
- Unicorn-51440.exe (PID: 10304)
- Unicorn-40325.exe (PID: 10524)
- Unicorn-35317.exe (PID: 10484)
- Unicorn-31595.exe (PID: 10428)
- Unicorn-51653.exe (PID: 10468)
- Unicorn-52577.exe (PID: 10512)
- Unicorn-20459.exe (PID: 10532)
- Unicorn-26026.exe (PID: 10564)
- Unicorn-61684.exe (PID: 10600)
- Unicorn-9306.exe (PID: 10632)
- Unicorn-13582.exe (PID: 10656)
- Unicorn-23532.exe (PID: 10664)
- Unicorn-3931.exe (PID: 10672)
- Unicorn-57216.exe (PID: 10684)
- Unicorn-57216.exe (PID: 10700)
- Unicorn-45104.exe (PID: 10744)
- Unicorn-1714.exe (PID: 10760)
- Unicorn-28522.exe (PID: 6708)
- Unicorn-22763.exe (PID: 11016)
- Unicorn-12291.exe (PID: 10548)
- Unicorn-26026.exe (PID: 10540)
- Unicorn-12291.exe (PID: 10556)
- Unicorn-57216.exe (PID: 10692)
- Unicorn-31198.exe (PID: 10768)
- Unicorn-57792.exe (PID: 10780)
- Unicorn-3442.exe (PID: 2084)
- Unicorn-34388.exe (PID: 11256)
- Unicorn-61108.exe (PID: 10640)
- Unicorn-4722.exe (PID: 6028)
- Unicorn-34653.exe (PID: 1600)
- Unicorn-34653.exe (PID: 6148)
- Unicorn-4616.exe (PID: 9684)
- Unicorn-33885.exe (PID: 10860)
- Unicorn-9764.exe (PID: 11000)
- Unicorn-61601.exe (PID: 9804)
- Unicorn-57325.exe (PID: 9764)
- Unicorn-62644.exe (PID: 10916)
- Unicorn-61409.exe (PID: 9756)
- Unicorn-51876.exe (PID: 11548)
- Unicorn-65140.exe (PID: 11592)
- Unicorn-15000.exe (PID: 11756)
- Unicorn-49157.exe (PID: 9772)
- Unicorn-60693.exe (PID: 11524)
- Unicorn-23361.exe (PID: 11540)
- Unicorn-49380.exe (PID: 11808)
- Unicorn-40392.exe (PID: 11840)
- Unicorn-61467.exe (PID: 11892)
- Unicorn-39187.exe (PID: 11948)
- Unicorn-26934.exe (PID: 11956)
- Unicorn-24683.exe (PID: 11768)
- Unicorn-179.exe (PID: 11788)
- Unicorn-1662.exe (PID: 11800)
- Unicorn-63817.exe (PID: 12344)
- Unicorn-9307.exe (PID: 9792)
- Unicorn-17741.exe (PID: 12420)
- Unicorn-11855.exe (PID: 10788)
- Unicorn-13827.exe (PID: 10820)
- Unicorn-42349.exe (PID: 12072)
- Unicorn-14729.exe (PID: 12056)
- Unicorn-50583.exe (PID: 12332)
- Unicorn-61248.exe (PID: 12116)
- Unicorn-994.exe (PID: 12596)
- Unicorn-9115.exe (PID: 11980)
- Unicorn-33397.exe (PID: 9744)
- Unicorn-63795.exe (PID: 12496)
- Unicorn-57023.exe (PID: 5136)
- Unicorn-20050.exe (PID: 11996)
- Unicorn-8042.exe (PID: 10924)
- Unicorn-994.exe (PID: 12064)
- Unicorn-667.exe (PID: 12588)
- Unicorn-11929.exe (PID: 12048)
- Unicorn-21087.exe (PID: 12548)
- Unicorn-26324.exe (PID: 4172)
- Unicorn-43567.exe (PID: 12508)
- Unicorn-32275.exe (PID: 5624)
- Unicorn-12866.exe (PID: 11572)
- Unicorn-61373.exe (PID: 12528)
- Unicorn-47777.exe (PID: 11500)
- Unicorn-20050.exe (PID: 11988)
- Unicorn-27829.exe (PID: 12128)
- Unicorn-9868.exe (PID: 12148)
- Unicorn-5784.exe (PID: 12140)
- Unicorn-18229.exe (PID: 6852)
- Unicorn-28522.exe (PID: 12008)
- Unicorn-14284.exe (PID: 12880)
- Unicorn-614.exe (PID: 11612)
- Unicorn-14787.exe (PID: 2560)
- Unicorn-61928.exe (PID: 12292)
- Unicorn-26677.exe (PID: 5344)
- Unicorn-30813.exe (PID: 12892)
- Unicorn-63729.exe (PID: 12284)
- Unicorn-38649.exe (PID: 4528)
- Unicorn-28716.exe (PID: 11972)
- Unicorn-43205.exe (PID: 12192)
- Unicorn-43205.exe (PID: 12240)
- Unicorn-34845.exe (PID: 12256)
- Unicorn-34845.exe (PID: 12268)
- Unicorn-41611.exe (PID: 13440)
- Unicorn-48820.exe (PID: 13368)
- Unicorn-54195.exe (PID: 13280)
- Unicorn-51395.exe (PID: 13264)
- Unicorn-54195.exe (PID: 13304)
- Unicorn-32121.exe (PID: 13212)
- Unicorn-54195.exe (PID: 13296)
- Unicorn-54195.exe (PID: 13288)
- Unicorn-40459.exe (PID: 13328)
- Unicorn-40459.exe (PID: 6392)
- Unicorn-41035.exe (PID: 13244)
- Unicorn-19677.exe (PID: 13416)
- Unicorn-54195.exe (PID: 13272)
- Unicorn-25606.exe (PID: 13340)
- Unicorn-3532.exe (PID: 13236)
- Unicorn-28893.exe (PID: 12920)
- Unicorn-35473.exe (PID: 13140)
- Unicorn-112.exe (PID: 13016)
- Unicorn-8472.exe (PID: 12928)
- Unicorn-47725.exe (PID: 13132)
- Unicorn-16543.exe (PID: 13112)
- Unicorn-47341.exe (PID: 13176)
- Unicorn-1648.exe (PID: 13056)
- Unicorn-41291.exe (PID: 10848)
- Unicorn-17138.exe (PID: 12220)
- Unicorn-18229.exe (PID: 6960)
- Unicorn-21314.exe (PID: 4620)
- Unicorn-33273.exe (PID: 13912)
- Unicorn-64073.exe (PID: 3140)
- Unicorn-41447.exe (PID: 14072)
- Unicorn-31929.exe (PID: 13408)
- Unicorn-26211.exe (PID: 13456)
- Unicorn-40459.exe (PID: 8204)
- Unicorn-29905.exe (PID: 12968)
- Unicorn-48331.exe (PID: 14080)
- Unicorn-22850.exe (PID: 12912)
- Unicorn-40953.exe (PID: 13008)
- Unicorn-59868.exe (PID: 14028)
- Unicorn-7107.exe (PID: 5600)
- Unicorn-36013.exe (PID: 13424)
- Unicorn-62416.exe (PID: 13728)
- Unicorn-62208.exe (PID: 3968)
- Unicorn-41611.exe (PID: 13448)
- Unicorn-20594.exe (PID: 13032)
- Unicorn-52733.exe (PID: 13252)
- Unicorn-44129.exe (PID: 14624)
- Unicorn-34822.exe (PID: 13596)
- Unicorn-16833.exe (PID: 13608)
- Unicorn-51263.exe (PID: 13432)
- Unicorn-16479.exe (PID: 13720)
- Unicorn-9131.exe (PID: 14496)
- Unicorn-407.exe (PID: 14480)
- Unicorn-43096.exe (PID: 14408)
- Unicorn-57651.exe (PID: 14472)
- Unicorn-37231.exe (PID: 14388)
- Unicorn-10968.exe (PID: 13668)
- Unicorn-17002.exe (PID: 14560)
- Unicorn-31036.exe (PID: 14544)
- Unicorn-50304.exe (PID: 14536)
- Unicorn-21019.exe (PID: 14528)
- Unicorn-30511.exe (PID: 14488)
- Unicorn-34430.exe (PID: 14424)
- Unicorn-17002.exe (PID: 14556)
- Unicorn-63516.exe (PID: 14644)
- Unicorn-32785.exe (PID: 12988)
- Unicorn-23444.exe (PID: 15072)
- Unicorn-14348.exe (PID: 15124)
- Unicorn-48597.exe (PID: 15092)
- Unicorn-61425.exe (PID: 15032)
- Unicorn-48768.exe (PID: 15012)
- Unicorn-2831.exe (PID: 14988)
- Unicorn-23495.exe (PID: 14416)
- Unicorn-48597.exe (PID: 15104)
- Unicorn-61233.exe (PID: 15004)
- Unicorn-44684.exe (PID: 14796)
- Unicorn-6411.exe (PID: 14812)
- Unicorn-59504.exe (PID: 15404)
- Unicorn-22946.exe (PID: 15396)
- Unicorn-13302.exe (PID: 15412)
- Unicorn-48768.exe (PID: 14976)
- Unicorn-2904.exe (PID: 14872)
- Unicorn-12011.exe (PID: 14968)
- Unicorn-29638.exe (PID: 14960)
- Unicorn-39853.exe (PID: 14944)
- Unicorn-34809.exe (PID: 14592)
- Unicorn-21789.exe (PID: 14512)
- Unicorn-54195.exe (PID: 13704)
- Unicorn-12011.exe (PID: 14820)
- Unicorn-47981.exe (PID: 14784)
- Unicorn-11191.exe (PID: 14952)
- Unicorn-34402.exe (PID: 15952)
- Unicorn-30703.exe (PID: 14696)
- Unicorn-57651.exe (PID: 14756)
- Unicorn-53257.exe (PID: 15044)
- Unicorn-27518.exe (PID: 15940)
- Unicorn-40215.exe (PID: 14928)
- Unicorn-48051.exe (PID: 15512)
- Unicorn-40045.exe (PID: 14768)
- Unicorn-42379.exe (PID: 16444)
- Unicorn-63516.exe (PID: 14400)
- Unicorn-43745.exe (PID: 15556)
- Unicorn-14035.exe (PID: 15716)
- Unicorn-62503.exe (PID: 15748)
- Unicorn-50688.exe (PID: 15548)
The sample compiled with chinese language support
- 1 (1464).exe (PID: 7020)
Reads the computer name
- 1 (1464).exe (PID: 7020)
- Unicorn-47130.exe (PID: 5392)
- Unicorn-42012.exe (PID: 6044)
- Unicorn-8593.exe (PID: 3268)
- Unicorn-5727.exe (PID: 2316)
- Unicorn-36968.exe (PID: 5956)
- Unicorn-57529.exe (PID: 1184)
- Unicorn-20026.exe (PID: 5064)
- Unicorn-20026.exe (PID: 2504)
- Unicorn-50425.exe (PID: 728)
- Unicorn-46606.exe (PID: 732)
- Unicorn-17826.exe (PID: 616)
- Unicorn-30824.exe (PID: 2136)
- Unicorn-7877.exe (PID: 5800)
- Unicorn-36393.exe (PID: 6132)
- Unicorn-36850.exe (PID: 1388)
- Unicorn-29044.exe (PID: 6388)
- Unicorn-36658.exe (PID: 976)
- Unicorn-52292.exe (PID: 6592)
- Unicorn-1608.exe (PID: 5756)
- Unicorn-5137.exe (PID: 6752)
- Unicorn-42201.exe (PID: 4068)
- Unicorn-51131.exe (PID: 2268)
- Unicorn-14003.exe (PID: 6740)
- Unicorn-31822.exe (PID: 2384)
- Unicorn-42037.exe (PID: 5988)
- Unicorn-63609.exe (PID: 4776)
- Unicorn-11071.exe (PID: 2340)
- Unicorn-63801.exe (PID: 6652)
- Unicorn-35575.exe (PID: 5512)
- Unicorn-24806.exe (PID: 7084)
- Unicorn-26469.exe (PID: 7216)
- Unicorn-2047.exe (PID: 7292)
- Unicorn-51549.exe (PID: 6228)
- Unicorn-8877.exe (PID: 7180)
- Unicorn-56209.exe (PID: 7268)
- Unicorn-23537.exe (PID: 7284)
- Unicorn-51860.exe (PID: 7276)
- Unicorn-61947.exe (PID: 7376)
- Unicorn-18877.exe (PID: 7364)
- Unicorn-58439.exe (PID: 7300)
- Unicorn-51528.exe (PID: 7200)
- Unicorn-50900.exe (PID: 7648)
- Unicorn-31897.exe (PID: 7324)
- Unicorn-48212.exe (PID: 7384)
- Unicorn-58948.exe (PID: 7356)
- Unicorn-7179.exe (PID: 7340)
- Unicorn-29711.exe (PID: 7540)
- Unicorn-20797.exe (PID: 7532)
- Unicorn-31194.exe (PID: 7556)
- Unicorn-47221.exe (PID: 7800)
- Unicorn-54045.exe (PID: 7732)
- Unicorn-29733.exe (PID: 7616)
- Unicorn-14792.exe (PID: 7348)
- Unicorn-23101.exe (PID: 7852)
- Unicorn-41025.exe (PID: 7588)
- Unicorn-12991.exe (PID: 7596)
- Unicorn-16905.exe (PID: 7564)
- Unicorn-58492.exe (PID: 7572)
- Unicorn-12031.exe (PID: 7332)
- Unicorn-17843.exe (PID: 7744)
- Unicorn-47989.exe (PID: 7888)
- Unicorn-33431.exe (PID: 7808)
- Unicorn-30309.exe (PID: 7820)
- Unicorn-3604.exe (PID: 8040)
- Unicorn-14844.exe (PID: 8680)
- Unicorn-47915.exe (PID: 7724)
- Unicorn-59940.exe (PID: 8760)
- Unicorn-12327.exe (PID: 8048)
- Unicorn-24528.exe (PID: 8176)
- Unicorn-42347.exe (PID: 8996)
- Unicorn-28611.exe (PID: 8984)
- Unicorn-45981.exe (PID: 8296)
- Unicorn-19749.exe (PID: 8000)
- Unicorn-62125.exe (PID: 8384)
- Unicorn-22909.exe (PID: 7968)
- Unicorn-26713.exe (PID: 8828)
- Unicorn-8627.exe (PID: 3896)
- Unicorn-18662.exe (PID: 8184)
- Unicorn-55493.exe (PID: 8848)
- Unicorn-41465.exe (PID: 8492)
- Unicorn-56712.exe (PID: 7868)
- Unicorn-52997.exe (PID: 6300)
- Unicorn-4762.exe (PID: 8572)
- Unicorn-2104.exe (PID: 7792)
- Unicorn-17201.exe (PID: 8260)
- Unicorn-62701.exe (PID: 8532)
- Unicorn-10382.exe (PID: 8960)
- Unicorn-31928.exe (PID: 8060)
- Unicorn-3235.exe (PID: 7844)
- Unicorn-46843.exe (PID: 7984)
- Unicorn-24217.exe (PID: 8088)
- Unicorn-51601.exe (PID: 8652)
- Unicorn-34585.exe (PID: 7828)
- Unicorn-13427.exe (PID: 8580)
- Unicorn-58212.exe (PID: 6112)
- Unicorn-34370.exe (PID: 9116)
- Unicorn-2784.exe (PID: 8976)
- Unicorn-9800.exe (PID: 8404)
- Unicorn-56432.exe (PID: 8668)
- Unicorn-27201.exe (PID: 9476)
- Unicorn-50833.exe (PID: 8424)
- Unicorn-8892.exe (PID: 9924)
- Unicorn-46396.exe (PID: 9952)
- Unicorn-51772.exe (PID: 8780)
- Unicorn-42473.exe (PID: 8604)
- Unicorn-54511.exe (PID: 9592)
- Unicorn-48700.exe (PID: 8108)
- Unicorn-24217.exe (PID: 8092)
- Unicorn-6218.exe (PID: 8156)
- Unicorn-19993.exe (PID: 9648)
- Unicorn-32053.exe (PID: 9616)
- Unicorn-49608.exe (PID: 9028)
- Unicorn-42089.exe (PID: 8340)
- Unicorn-11314.exe (PID: 9832)
- Unicorn-24793.exe (PID: 8168)
- Unicorn-16101.exe (PID: 9540)
- Unicorn-4159.exe (PID: 8068)
- Unicorn-31717.exe (PID: 8944)
- Unicorn-43464.exe (PID: 9488)
- Unicorn-5716.exe (PID: 8412)
- Unicorn-12291.exe (PID: 10556)
- Unicorn-56365.exe (PID: 9420)
- Unicorn-17201.exe (PID: 8596)
- Unicorn-28522.exe (PID: 6708)
- Unicorn-34388.exe (PID: 11256)
- Unicorn-4616.exe (PID: 9684)
- Unicorn-1714.exe (PID: 10760)
- Unicorn-64097.exe (PID: 10360)
- Unicorn-17445.exe (PID: 9824)
- Unicorn-39733.exe (PID: 8952)
- Unicorn-40795.exe (PID: 10208)
- Unicorn-50583.exe (PID: 12332)
- Unicorn-26625.exe (PID: 9364)
- Unicorn-3931.exe (PID: 10672)
- Unicorn-53433.exe (PID: 9812)
- Unicorn-4528.exe (PID: 10868)
- Unicorn-63817.exe (PID: 12344)
- Unicorn-51321.exe (PID: 9284)
- Unicorn-40325.exe (PID: 10524)
- Unicorn-17741.exe (PID: 12420)
- Unicorn-2675.exe (PID: 9380)
- Unicorn-6396.exe (PID: 9300)
- Unicorn-9831.exe (PID: 9344)
- Unicorn-40812.exe (PID: 9084)
- Unicorn-26026.exe (PID: 10564)
- Unicorn-57216.exe (PID: 10684)
- Unicorn-22349.exe (PID: 9328)
- Unicorn-31595.exe (PID: 10428)
- Unicorn-4616.exe (PID: 9692)
- Unicorn-57023.exe (PID: 5136)
- Unicorn-11929.exe (PID: 12048)
- Unicorn-3442.exe (PID: 2084)
- Unicorn-7143.exe (PID: 12176)
- Unicorn-47777.exe (PID: 11500)
- Unicorn-40459.exe (PID: 6392)
- Unicorn-8891.exe (PID: 5256)
- Unicorn-37107.exe (PID: 6108)
- Unicorn-994.exe (PID: 12064)
- Unicorn-55301.exe (PID: 8812)
- Unicorn-59868.exe (PID: 14028)
- Unicorn-14196.exe (PID: 14036)
- Unicorn-51440.exe (PID: 10312)
- Unicorn-3796.exe (PID: 4740)
- Unicorn-17829.exe (PID: 10236)
- Unicorn-15524.exe (PID: 9584)
- Unicorn-46396.exe (PID: 9960)
- Unicorn-62375.exe (PID: 10280)
Create files in a temporary directory
- 1 (1464).exe (PID: 7020)
- Unicorn-47130.exe (PID: 5392)
- Unicorn-57529.exe (PID: 1184)
- Unicorn-20026.exe (PID: 5064)
- Unicorn-8593.exe (PID: 3268)
- Unicorn-20026.exe (PID: 2504)
- Unicorn-50425.exe (PID: 728)
- Unicorn-5727.exe (PID: 2316)
- Unicorn-30824.exe (PID: 2136)
- Unicorn-42012.exe (PID: 6044)
- Unicorn-36968.exe (PID: 5956)
- Unicorn-17826.exe (PID: 616)
- Unicorn-36850.exe (PID: 1388)
- Unicorn-55329.exe (PID: 3364)
- Unicorn-15151.exe (PID: 6512)
- Unicorn-42201.exe (PID: 4068)
- Unicorn-5137.exe (PID: 6752)
- Unicorn-1608.exe (PID: 5756)
- Unicorn-58977.exe (PID: 4188)
- Unicorn-46606.exe (PID: 732)
- Unicorn-51131.exe (PID: 2268)
- Unicorn-51266.exe (PID: 664)
- Unicorn-29044.exe (PID: 6388)
- Unicorn-63609.exe (PID: 4776)
- Unicorn-36658.exe (PID: 976)
- Unicorn-35575.exe (PID: 5512)
- Unicorn-7877.exe (PID: 5800)
- Unicorn-11071.exe (PID: 2340)
- Unicorn-24806.exe (PID: 7084)
- Unicorn-36393.exe (PID: 6132)
- Unicorn-56209.exe (PID: 7268)
- Unicorn-2047.exe (PID: 7292)
- Unicorn-31822.exe (PID: 2384)
- Unicorn-51549.exe (PID: 6228)
- Unicorn-18877.exe (PID: 7364)
- Unicorn-23537.exe (PID: 7284)
- Unicorn-51860.exe (PID: 7276)
- Unicorn-52292.exe (PID: 6592)
- Unicorn-58439.exe (PID: 7300)
- Unicorn-21565.exe (PID: 7624)
- Unicorn-54146.exe (PID: 2772)
- Unicorn-61947.exe (PID: 7376)
- Unicorn-50900.exe (PID: 7648)
- Unicorn-58705.exe (PID: 7676)
- Unicorn-39939.exe (PID: 7760)
- Unicorn-31897.exe (PID: 7324)
- Unicorn-48212.exe (PID: 7384)
- Unicorn-29711.exe (PID: 7540)
- Unicorn-58948.exe (PID: 7356)
- Unicorn-7179.exe (PID: 7340)
- Unicorn-14792.exe (PID: 7348)
- Unicorn-20797.exe (PID: 7532)
- Unicorn-29733.exe (PID: 7616)
- Unicorn-23101.exe (PID: 7852)
- Unicorn-14003.exe (PID: 6740)
- Unicorn-41025.exe (PID: 7588)
- Unicorn-8877.exe (PID: 7180)
- Unicorn-31194.exe (PID: 7556)
- Unicorn-47221.exe (PID: 7800)
- Unicorn-12991.exe (PID: 7596)
- Unicorn-16905.exe (PID: 7564)
- Unicorn-63801.exe (PID: 6652)
- Unicorn-58492.exe (PID: 7572)
- Unicorn-17843.exe (PID: 7744)
- Unicorn-33431.exe (PID: 7808)
- Unicorn-45804.exe (PID: 7768)
- Unicorn-47989.exe (PID: 7888)
- Unicorn-42037.exe (PID: 5988)
- Unicorn-30309.exe (PID: 7820)
- Unicorn-23080.exe (PID: 7244)
- Unicorn-14844.exe (PID: 8680)
- Unicorn-26469.exe (PID: 7216)
- Unicorn-22437.exe (PID: 8740)
- Unicorn-59940.exe (PID: 8760)
- Unicorn-19749.exe (PID: 8000)
- Unicorn-23262.exe (PID: 8016)
- Unicorn-42347.exe (PID: 8996)
- Unicorn-8627.exe (PID: 3896)
- Unicorn-55493.exe (PID: 8848)
- Unicorn-58617.exe (PID: 8524)
- Unicorn-22909.exe (PID: 7968)
- Unicorn-26713.exe (PID: 8828)
- Unicorn-31928.exe (PID: 8060)
- Unicorn-28611.exe (PID: 8984)
- Unicorn-52997.exe (PID: 6300)
- Unicorn-20687.exe (PID: 8076)
- Unicorn-2104.exe (PID: 7792)
- Unicorn-10382.exe (PID: 8960)
- Unicorn-17201.exe (PID: 8260)
- Unicorn-24217.exe (PID: 8088)
- Unicorn-46843.exe (PID: 7984)
- Unicorn-51601.exe (PID: 8652)
- Unicorn-34585.exe (PID: 7828)
- Unicorn-14719.exe (PID: 7836)
- Unicorn-16027.exe (PID: 8116)
- Unicorn-56712.exe (PID: 7868)
- Unicorn-34370.exe (PID: 9116)
- Unicorn-4896.exe (PID: 9212)
- Unicorn-58212.exe (PID: 6112)
- Unicorn-2784.exe (PID: 8976)
- Unicorn-9800.exe (PID: 8404)
- Unicorn-56432.exe (PID: 8668)
- Unicorn-40169.exe (PID: 8144)
- Unicorn-50833.exe (PID: 8424)
- Unicorn-25997.exe (PID: 9892)
- Unicorn-3235.exe (PID: 7844)
- Unicorn-24793.exe (PID: 8168)
- Unicorn-3604.exe (PID: 8040)
- Unicorn-48700.exe (PID: 8108)
- Unicorn-16101.exe (PID: 9540)
- Unicorn-12031.exe (PID: 7332)
- Unicorn-47915.exe (PID: 7724)
- Unicorn-42473.exe (PID: 8604)
- Unicorn-14823.exe (PID: 8516)
- Unicorn-4159.exe (PID: 8068)
- Unicorn-43464.exe (PID: 9488)
- Unicorn-32053.exe (PID: 9616)
- Unicorn-45981.exe (PID: 8296)
- Unicorn-6218.exe (PID: 8156)
- Unicorn-31717.exe (PID: 8944)
- Unicorn-12327.exe (PID: 8048)
- Unicorn-51772.exe (PID: 8780)
- Unicorn-24528.exe (PID: 8176)
- Unicorn-22763.exe (PID: 11016)
- Unicorn-56483.exe (PID: 9240)
- Unicorn-42089.exe (PID: 8340)
- Unicorn-11314.exe (PID: 9832)
- Unicorn-27201.exe (PID: 9476)
- Unicorn-18662.exe (PID: 8184)
- Unicorn-17201.exe (PID: 8596)
- Unicorn-18161.exe (PID: 8456)
- Unicorn-62125.exe (PID: 8384)
- Unicorn-12291.exe (PID: 10556)
- Unicorn-39733.exe (PID: 8952)
- Unicorn-5716.exe (PID: 8412)
- Unicorn-56453.exe (PID: 8968)
- Unicorn-26241.exe (PID: 7956)
- Unicorn-4616.exe (PID: 9684)
- Unicorn-59364.exe (PID: 8564)
- Unicorn-17445.exe (PID: 9824)
- Unicorn-57216.exe (PID: 10692)
- Unicorn-51321.exe (PID: 9284)
- Unicorn-26625.exe (PID: 9364)
- Unicorn-17741.exe (PID: 12420)
- Unicorn-54045.exe (PID: 7732)
- Unicorn-28558.exe (PID: 8508)
- Unicorn-41465.exe (PID: 8492)
- Unicorn-37060.exe (PID: 7548)
- Unicorn-22349.exe (PID: 9328)
- Unicorn-12866.exe (PID: 11572)
- Unicorn-57023.exe (PID: 5136)
- Unicorn-35317.exe (PID: 10484)
- Unicorn-64320.exe (PID: 9292)
- Unicorn-3442.exe (PID: 2084)
- Unicorn-7562.exe (PID: 8588)
- Unicorn-60131.exe (PID: 10200)
- Unicorn-25015.exe (PID: 9560)
- Unicorn-7143.exe (PID: 12176)
- Unicorn-40459.exe (PID: 6392)
- Unicorn-61684.exe (PID: 10600)
- Unicorn-40812.exe (PID: 9084)
- Unicorn-26026.exe (PID: 10564)
- Unicorn-3931.exe (PID: 10672)
- Unicorn-51528.exe (PID: 7200)
- Unicorn-12291.exe (PID: 10548)
- Unicorn-34388.exe (PID: 11256)
- Unicorn-11929.exe (PID: 12048)
- Unicorn-40325.exe (PID: 10524)
- Unicorn-57216.exe (PID: 10684)
- Unicorn-17829.exe (PID: 10236)
- Unicorn-994.exe (PID: 12064)
- Unicorn-41447.exe (PID: 14072)
- Unicorn-24217.exe (PID: 8092)
- Unicorn-64097.exe (PID: 10360)
- Unicorn-51440.exe (PID: 10312)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
668
Monitored processes
532
Malicious processes
85
Suspicious processes
56
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 616 | C:\Users\admin\AppData\Local\Temp\Unicorn-17826.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-17826.exe | Unicorn-20026.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 664 | C:\Users\admin\AppData\Local\Temp\Unicorn-51266.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-51266.exe | Unicorn-57529.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 728 | C:\Users\admin\AppData\Local\Temp\Unicorn-50425.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-50425.exe | 1 (1464).exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 732 | C:\Users\admin\AppData\Local\Temp\Unicorn-46606.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-46606.exe | Unicorn-5727.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 976 | C:\Users\admin\AppData\Local\Temp\Unicorn-36658.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-36658.exe | Unicorn-36968.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 1184 | C:\Users\admin\AppData\Local\Temp\Unicorn-57529.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-57529.exe | Unicorn-47130.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 1228 | C:\Users\admin\AppData\Local\Temp\Unicorn-36184.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-36184.exe | — | Unicorn-14003.exe | |||||||||||
User: admin Integrity Level: MEDIUM | |||||||||||||||
| 1388 | C:\Users\admin\AppData\Local\Temp\Unicorn-36850.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-36850.exe | Unicorn-55329.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 1600 | C:\Users\admin\AppData\Local\Temp\Unicorn-34653.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-34653.exe | — | Unicorn-46396.exe | |||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 2084 | C:\Users\admin\AppData\Local\Temp\Unicorn-3442.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-3442.exe | Unicorn-23537.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
Total events
10 469
Read events
10 469
Write events
0
Delete events
0
Modification events
Executable files
832
Suspicious files
0
Text files
0
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7020 | 1 (1464).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-42012.exe | executable | |
MD5:DCC14AFE680DF635B386563A4ACDE665 | SHA256:14F1FC91DD3977014E4724828769E15998496C80340E0BFB01262A3AA501FDAE | |||
| 7020 | 1 (1464).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-47130.exe | executable | |
MD5:D3515A0106BF3A5C4CED8151E0E7695E | SHA256:881051E32CC7E88849F726A86C909FFBDC38AF6796F823197CD5BC7B9226519B | |||
| 2504 | Unicorn-20026.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-46606.exe | executable | |
MD5:23DA709CA2D89A257174B269D1D03149 | SHA256:3A17021294D71A9C7F31E7614B96674D7A78C3E94230900DDD400BB7AE19F2D6 | |||
| 6044 | Unicorn-42012.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30824.exe | executable | |
MD5:9F80405785A0AF7E8E4B1CAC58AF5956 | SHA256:47352768C97C4C6D4BA600A4F3C8DA8BD68CB9E1694FA8EB215CF8E26B645857 | |||
| 664 | Unicorn-51266.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-7877.exe | executable | |
MD5:A964C74AB5C929B0D092F925255D702A | SHA256:B251019F197388540D860BF5613892A53D00C7712F6DF021FDD3E9DB74037B3C | |||
| 5064 | Unicorn-20026.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-17826.exe | executable | |
MD5:10F25A308E881CDE8002A3E505EA580E | SHA256:EF03486F63F82398B16632475805FA73D75C4B3557E85BFEE8A9574F73C4757C | |||
| 6044 | Unicorn-42012.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-20026.exe | executable | |
MD5:5C74889D95A0B7E5C5EF60B8B5A1FFB5 | SHA256:DF4EBB5045B9C76CF7EA41E7F9A6DEC5803A2A23863DC4E2C70FEB894B5D4D36 | |||
| 3268 | Unicorn-8593.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-55329.exe | executable | |
MD5:E3B0FE5AD843BC769FC1AC6059D8C796 | SHA256:182B8CFB186307740E68C5EEC13522255B02A5332557704993D692A0D4C8FFA8 | |||
| 1184 | Unicorn-57529.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-51266.exe | executable | |
MD5:2E4BAEFBB6942224BB9D1021ACD56EE0 | SHA256:6C802EDB34353836697EE481C15E310B7B819F687696FCF15788C2C523421D6F | |||
| 7020 | 1 (1464).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-50425.exe | executable | |
MD5:CF8E66EDBD7893351B32D42AF218720F | SHA256:9162E83FA62E043906449BA45C47DA6A940540C3B584BC8DD5536296A24198E1 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
22
DNS requests
15
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
— | — | GET | 200 | 2.19.11.120:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
1452 | SIHClient.exe | GET | 200 | 2.23.246.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
5772 | backgroundTaskHost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
1452 | SIHClient.exe | GET | 200 | 2.23.246.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 52.140.118.28:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IN | whitelisted |
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
5496 | MoUsoCoreWorker.exe | 52.140.118.28:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IN | whitelisted |
— | — | 2.19.11.120:80 | crl.microsoft.com | Elisa Oyj | NL | whitelisted |
2104 | svchost.exe | 52.140.118.28:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IN | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
2104 | svchost.exe | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
3216 | svchost.exe | 40.113.103.199:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.160.67:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 2.23.77.188:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |