| File name: | 1 (608) |
| Full analysis: | https://app.any.run/tasks/aac44fb8-5141-4ab6-859b-3ea46ede3af4 |
| Verdict: | Malicious activity |
| Analysis date: | March 25, 2025, 02:51:25 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | 54E856E1CCE0238147FD60D8C39DCC00 |
| SHA1: | 6716AAB9A74307ABAFE308618400A80523325B33 |
| SHA256: | 7137D7B3B1C68F55DCF2DBF401FFE424B8E4ED8F9475D3A05B332B26EE04E13D |
| SSDEEP: | 6144:PTKg4VHJoDoWA5l66he/Rafx5tBwcvJGBc/WyeO/gk/8SwjwpyAvEhIReqTnsPsa:PWJxBWA5E6giBDhacOyeO/xx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- 1 (608).exe (PID: 6268)
- Unicorn-16642.exe (PID: 4336)
- Unicorn-32994.exe (PID: 5116)
- Unicorn-58275.exe (PID: 5892)
- Unicorn-61068.exe (PID: 5640)
- Unicorn-721.exe (PID: 5720)
- Unicorn-46201.exe (PID: 4724)
- Unicorn-49154.exe (PID: 5380)
- Unicorn-49330.exe (PID: 672)
- Unicorn-64841.exe (PID: 3096)
- Unicorn-45904.exe (PID: 4268)
- Unicorn-13185.exe (PID: 6808)
- Unicorn-24923.exe (PID: 960)
- Unicorn-41579.exe (PID: 516)
- Unicorn-30885.exe (PID: 6676)
- Unicorn-32818.exe (PID: 5164)
- Unicorn-25243.exe (PID: 5064)
- Unicorn-25247.exe (PID: 2268)
- Unicorn-27730.exe (PID: 5756)
- Unicorn-19941.exe (PID: 1568)
- Unicorn-34392.exe (PID: 5056)
- Unicorn-54258.exe (PID: 1912)
- Unicorn-75.exe (PID: 5436)
- Unicorn-19483.exe (PID: 856)
- Unicorn-51186.exe (PID: 2092)
- Unicorn-25154.exe (PID: 5324)
- Unicorn-12187.exe (PID: 4112)
- Unicorn-11122.exe (PID: 6228)
- Unicorn-2369.exe (PID: 3300)
- Unicorn-65218.exe (PID: 5556)
- Unicorn-30059.exe (PID: 3332)
- Unicorn-64080.exe (PID: 6576)
- Unicorn-18405.exe (PID: 7220)
- Unicorn-46396.exe (PID: 2908)
- Unicorn-16027.exe (PID: 7200)
- Unicorn-63692.exe (PID: 7228)
- Unicorn-16485.exe (PID: 7192)
- Unicorn-65405.exe (PID: 7252)
- Unicorn-51123.exe (PID: 7268)
- Unicorn-51769.exe (PID: 6800)
- Unicorn-5441.exe (PID: 4068)
- Unicorn-52940.exe (PID: 7304)
- Unicorn-1327.exe (PID: 7380)
- Unicorn-27532.exe (PID: 7364)
- Unicorn-25250.exe (PID: 7260)
- Unicorn-50531.exe (PID: 7284)
- Unicorn-18155.exe (PID: 7612)
- Unicorn-21301.exe (PID: 7636)
- Unicorn-51321.exe (PID: 7656)
- Unicorn-36499.exe (PID: 7340)
- Unicorn-47133.exe (PID: 7388)
- Unicorn-5746.exe (PID: 7484)
- Unicorn-47398.exe (PID: 7372)
- Unicorn-20149.exe (PID: 7536)
- Unicorn-19115.exe (PID: 7580)
- Unicorn-19115.exe (PID: 7588)
- Unicorn-20642.exe (PID: 7548)
- Unicorn-42629.exe (PID: 7348)
- Unicorn-4673.exe (PID: 5228)
- Unicorn-48716.exe (PID: 7572)
- Unicorn-19765.exe (PID: 7564)
- Unicorn-9214.exe (PID: 7312)
- Unicorn-14964.exe (PID: 7940)
- Unicorn-44933.exe (PID: 7476)
- Unicorn-24098.exe (PID: 7708)
- Unicorn-3163.exe (PID: 7716)
- Unicorn-56002.exe (PID: 7732)
- Unicorn-55618.exe (PID: 7600)
- Unicorn-8628.exe (PID: 8284)
- Unicorn-20367.exe (PID: 7776)
- Unicorn-11736.exe (PID: 7800)
- Unicorn-40547.exe (PID: 7808)
- Unicorn-8244.exe (PID: 8320)
- Unicorn-12084.exe (PID: 7760)
- Unicorn-63506.exe (PID: 7824)
- Unicorn-41410.exe (PID: 8184)
- Unicorn-61970.exe (PID: 7768)
- Unicorn-41145.exe (PID: 5084)
- Unicorn-64274.exe (PID: 7792)
- Unicorn-16370.exe (PID: 7988)
- Unicorn-5954.exe (PID: 7752)
- Unicorn-4082.exe (PID: 7968)
- Unicorn-7268.exe (PID: 7296)
- Unicorn-14635.exe (PID: 8928)
- Unicorn-36810.exe (PID: 8912)
- Unicorn-58514.exe (PID: 8296)
- Unicorn-17682.exe (PID: 644)
- Unicorn-53152.exe (PID: 8224)
- Unicorn-27521.exe (PID: 8068)
- Unicorn-10091.exe (PID: 7816)
- Unicorn-64949.exe (PID: 8480)
- Unicorn-9794.exe (PID: 8032)
- Unicorn-15400.exe (PID: 8556)
- Unicorn-673.exe (PID: 8460)
- Unicorn-38731.exe (PID: 8212)
- Unicorn-62348.exe (PID: 8096)
- Unicorn-36811.exe (PID: 8168)
- Unicorn-51721.exe (PID: 8496)
- Unicorn-10015.exe (PID: 8952)
- Unicorn-50569.exe (PID: 8684)
- Unicorn-42562.exe (PID: 8248)
- Unicorn-10164.exe (PID: 8424)
- Unicorn-60281.exe (PID: 8892)
- Unicorn-58419.exe (PID: 7876)
- Unicorn-61504.exe (PID: 8676)
- Unicorn-6161.exe (PID: 9172)
- Unicorn-29877.exe (PID: 8884)
- Unicorn-3252.exe (PID: 8572)
- Unicorn-52684.exe (PID: 9188)
- Unicorn-55909.exe (PID: 2244)
- Unicorn-5009.exe (PID: 9096)
- Unicorn-30667.exe (PID: 8540)
- Unicorn-13423.exe (PID: 8048)
- Unicorn-18088.exe (PID: 8664)
- Unicorn-14692.exe (PID: 8964)
- Unicorn-6132.exe (PID: 8076)
- Unicorn-20904.exe (PID: 10144)
- Unicorn-40386.exe (PID: 10180)
- Unicorn-17919.exe (PID: 10172)
- Unicorn-22524.exe (PID: 10216)
- Unicorn-24885.exe (PID: 7896)
- Unicorn-15400.exe (PID: 8548)
- Unicorn-10785.exe (PID: 9664)
- Unicorn-11148.exe (PID: 9708)
- Unicorn-61596.exe (PID: 8040)
- Unicorn-22021.exe (PID: 6392)
- Unicorn-11371.exe (PID: 9360)
- Unicorn-16546.exe (PID: 9308)
- Unicorn-56019.exe (PID: 8472)
- Unicorn-7256.exe (PID: 9688)
- Unicorn-48341.exe (PID: 9300)
- Unicorn-7780.exe (PID: 2136)
- Unicorn-36236.exe (PID: 7980)
- Unicorn-35112.exe (PID: 9148)
- Unicorn-29829.exe (PID: 11244)
- Unicorn-11188.exe (PID: 11184)
- Unicorn-29829.exe (PID: 11236)
- Unicorn-34344.exe (PID: 9132)
- Unicorn-62866.exe (PID: 9884)
- Unicorn-29119.exe (PID: 8904)
- Unicorn-59228.exe (PID: 9276)
- Unicorn-2907.exe (PID: 6036)
- Unicorn-47781.exe (PID: 10364)
- Unicorn-46594.exe (PID: 7856)
- Unicorn-59621.exe (PID: 11036)
- Unicorn-64028.exe (PID: 9512)
- Unicorn-2020.exe (PID: 9468)
- Unicorn-6379.exe (PID: 9672)
- Unicorn-39381.exe (PID: 8204)
- Unicorn-53561.exe (PID: 9156)
- Unicorn-51337.exe (PID: 8524)
- Unicorn-11032.exe (PID: 11064)
- Unicorn-42450.exe (PID: 9656)
- Unicorn-58112.exe (PID: 12672)
- Unicorn-42267.exe (PID: 12720)
- Unicorn-59420.exe (PID: 9252)
- Unicorn-10664.exe (PID: 12696)
- Unicorn-42098.exe (PID: 896)
- Unicorn-30594.exe (PID: 10312)
- Unicorn-54245.exe (PID: 11596)
- Unicorn-30146.exe (PID: 12728)
- Unicorn-61292.exe (PID: 11924)
- Unicorn-20427.exe (PID: 10592)
- Unicorn-31736.exe (PID: 8532)
- Unicorn-33858.exe (PID: 10492)
- Unicorn-48229.exe (PID: 8488)
- Unicorn-3215.exe (PID: 10808)
- Unicorn-44138.exe (PID: 7960)
- Unicorn-58761.exe (PID: 9744)
- Unicorn-35019.exe (PID: 6436)
- Unicorn-11713.exe (PID: 13832)
- Unicorn-26332.exe (PID: 13864)
- Unicorn-26405.exe (PID: 13896)
- Unicorn-56677.exe (PID: 8176)
- Unicorn-32322.exe (PID: 10388)
- Unicorn-52684.exe (PID: 9196)
- Unicorn-33995.exe (PID: 11632)
- Unicorn-31634.exe (PID: 9140)
- Unicorn-64501.exe (PID: 10352)
- Unicorn-36627.exe (PID: 12112)
- Unicorn-26527.exe (PID: 13376)
- Unicorn-35029.exe (PID: 11436)
- Unicorn-56373.exe (PID: 12532)
- Unicorn-42699.exe (PID: 9268)
- Unicorn-49717.exe (PID: 10944)
- Unicorn-28623.exe (PID: 12128)
- Unicorn-29119.exe (PID: 8924)
- Unicorn-50405.exe (PID: 12032)
- Unicorn-33884.exe (PID: 10448)
- Unicorn-64403.exe (PID: 9632)
- Unicorn-64869.exe (PID: 9292)
- Unicorn-25410.exe (PID: 10580)
- Unicorn-10769.exe (PID: 8436)
- Unicorn-59237.exe (PID: 11072)
- Unicorn-8756.exe (PID: 9764)
- Unicorn-56322.exe (PID: 7920)
- Unicorn-9768.exe (PID: 9760)
- Unicorn-61484.exe (PID: 12776)
- Unicorn-57376.exe (PID: 7832)
- Unicorn-53369.exe (PID: 9212)
- Unicorn-55619.exe (PID: 12760)
- Unicorn-34706.exe (PID: 15240)
- Unicorn-18370.exe (PID: 15264)
- Unicorn-17720.exe (PID: 15344)
- Unicorn-33528.exe (PID: 11424)
- Unicorn-7064.exe (PID: 10196)
- Unicorn-60572.exe (PID: 9348)
- Unicorn-28235.exe (PID: 11940)
- Unicorn-19419.exe (PID: 13588)
- Unicorn-15819.exe (PID: 10972)
- Unicorn-52965.exe (PID: 10000)
- Unicorn-2834.exe (PID: 10736)
- Unicorn-65077.exe (PID: 10512)
- Unicorn-56322.exe (PID: 8332)
- Unicorn-63397.exe (PID: 10232)
- Unicorn-53826.exe (PID: 9164)
- Unicorn-56322.exe (PID: 8276)
- Unicorn-44562.exe (PID: 12632)
- Unicorn-8136.exe (PID: 13704)
- Unicorn-34901.exe (PID: 9932)
- Unicorn-25269.exe (PID: 8444)
- Unicorn-17208.exe (PID: 13496)
- Unicorn-62848.exe (PID: 12848)
- Unicorn-27074.exe (PID: 12564)
- Unicorn-4639.exe (PID: 5740)
- Unicorn-2027.exe (PID: 7888)
- Unicorn-26335.exe (PID: 8516)
- Unicorn-42855.exe (PID: 10256)
- Unicorn-17083.exe (PID: 11276)
- Unicorn-12386.exe (PID: 12856)
- Unicorn-34565.exe (PID: 16620)
- Unicorn-53808.exe (PID: 15076)
- Unicorn-37058.exe (PID: 11448)
- Unicorn-18342.exe (PID: 10300)
- Unicorn-14401.exe (PID: 13356)
- Unicorn-62316.exe (PID: 9648)
- Unicorn-46297.exe (PID: 10848)
- Unicorn-26146.exe (PID: 8760)
- Unicorn-51011.exe (PID: 12584)
- Unicorn-54281.exe (PID: 4376)
- Unicorn-10740.exe (PID: 9060)
- Unicorn-17522.exe (PID: 15888)
- Unicorn-31515.exe (PID: 12872)
- Unicorn-13169.exe (PID: 14404)
- Unicorn-15947.exe (PID: 13052)
- Unicorn-57504.exe (PID: 9260)
- Unicorn-20815.exe (PID: 10668)
- Unicorn-55733.exe (PID: 14948)
- Unicorn-34767.exe (PID: 11880)
- Unicorn-29548.exe (PID: 17108)
- Unicorn-59938.exe (PID: 12548)
- Unicorn-58268.exe (PID: 9900)
- Unicorn-15682.exe (PID: 15036)
- Unicorn-29279.exe (PID: 11300)
- Unicorn-38466.exe (PID: 10096)
- Unicorn-14852.exe (PID: 12000)
- Unicorn-28011.exe (PID: 7048)
- Unicorn-39403.exe (PID: 13924)
- Unicorn-12321.exe (PID: 9776)
- Unicorn-37445.exe (PID: 7676)
- Unicorn-14145.exe (PID: 16316)
- Unicorn-62571.exe (PID: 12640)
- Unicorn-65138.exe (PID: 13428)
- Unicorn-29548.exe (PID: 17100)
- Unicorn-43579.exe (PID: 18032)
- Unicorn-28024.exe (PID: 10272)
- Unicorn-9722.exe (PID: 17996)
- Unicorn-47228.exe (PID: 18040)
Starts itself from another location
- 1 (608).exe (PID: 6268)
- Unicorn-16642.exe (PID: 4336)
- Unicorn-24923.exe (PID: 960)
- Unicorn-32994.exe (PID: 5116)
- Unicorn-49330.exe (PID: 672)
- Unicorn-61068.exe (PID: 5640)
- Unicorn-721.exe (PID: 5720)
- Unicorn-46201.exe (PID: 4724)
- Unicorn-51769.exe (PID: 6800)
- Unicorn-64841.exe (PID: 3096)
- Unicorn-45904.exe (PID: 4268)
- Unicorn-13185.exe (PID: 6808)
- Unicorn-30885.exe (PID: 6676)
- Unicorn-41579.exe (PID: 516)
- Unicorn-58275.exe (PID: 5892)
- Unicorn-32818.exe (PID: 5164)
- Unicorn-25243.exe (PID: 5064)
- Unicorn-25247.exe (PID: 2268)
- Unicorn-49154.exe (PID: 5380)
- Unicorn-5441.exe (PID: 4068)
- Unicorn-34392.exe (PID: 5056)
- Unicorn-75.exe (PID: 5436)
- Unicorn-4673.exe (PID: 5228)
- Unicorn-19941.exe (PID: 1568)
- Unicorn-19483.exe (PID: 856)
- Unicorn-25154.exe (PID: 5324)
- Unicorn-12187.exe (PID: 4112)
- Unicorn-51186.exe (PID: 2092)
- Unicorn-27730.exe (PID: 5756)
- Unicorn-65218.exe (PID: 5556)
- Unicorn-2369.exe (PID: 3300)
- Unicorn-11122.exe (PID: 6228)
- Unicorn-30059.exe (PID: 3332)
- Unicorn-46396.exe (PID: 2908)
- Unicorn-64080.exe (PID: 6576)
- Unicorn-63692.exe (PID: 7228)
- Unicorn-16027.exe (PID: 7200)
- Unicorn-16485.exe (PID: 7192)
- Unicorn-18405.exe (PID: 7220)
- Unicorn-51123.exe (PID: 7268)
- Unicorn-9214.exe (PID: 7312)
- Unicorn-65405.exe (PID: 7252)
- Unicorn-7268.exe (PID: 7296)
- Unicorn-25250.exe (PID: 7260)
- Unicorn-27532.exe (PID: 7364)
- Unicorn-1327.exe (PID: 7380)
- Unicorn-36499.exe (PID: 7340)
- Unicorn-21301.exe (PID: 7636)
- Unicorn-51321.exe (PID: 7656)
- Unicorn-18155.exe (PID: 7612)
- Unicorn-20149.exe (PID: 7536)
- Unicorn-47133.exe (PID: 7388)
- Unicorn-5746.exe (PID: 7484)
- Unicorn-47398.exe (PID: 7372)
- Unicorn-19115.exe (PID: 7580)
- Unicorn-20642.exe (PID: 7548)
- Unicorn-19115.exe (PID: 7588)
- Unicorn-52940.exe (PID: 7304)
- Unicorn-54258.exe (PID: 1912)
- Unicorn-48716.exe (PID: 7572)
- Unicorn-42629.exe (PID: 7348)
- Unicorn-44933.exe (PID: 7476)
- Unicorn-14964.exe (PID: 7940)
- Unicorn-56002.exe (PID: 7732)
- Unicorn-3163.exe (PID: 7716)
- Unicorn-24098.exe (PID: 7708)
- Unicorn-55618.exe (PID: 7600)
- Unicorn-19765.exe (PID: 7564)
- Unicorn-50531.exe (PID: 7284)
- Unicorn-12084.exe (PID: 7760)
- Unicorn-20367.exe (PID: 7776)
- Unicorn-40547.exe (PID: 7808)
- Unicorn-46594.exe (PID: 7856)
- Unicorn-37445.exe (PID: 7676)
- Unicorn-64274.exe (PID: 7792)
- Unicorn-63506.exe (PID: 7824)
- Unicorn-41145.exe (PID: 5084)
- Unicorn-61970.exe (PID: 7768)
- Unicorn-8244.exe (PID: 8320)
- Unicorn-16370.exe (PID: 7988)
- Unicorn-5954.exe (PID: 7752)
- Unicorn-4082.exe (PID: 7968)
- Unicorn-36236.exe (PID: 7980)
- Unicorn-11736.exe (PID: 7800)
- Unicorn-14635.exe (PID: 8928)
- Unicorn-36810.exe (PID: 8912)
- Unicorn-57376.exe (PID: 7832)
- Unicorn-8628.exe (PID: 8284)
- Unicorn-17682.exe (PID: 644)
- Unicorn-53152.exe (PID: 8224)
- Unicorn-27521.exe (PID: 8068)
- Unicorn-9794.exe (PID: 8032)
- Unicorn-10091.exe (PID: 7816)
- Unicorn-64949.exe (PID: 8480)
- Unicorn-673.exe (PID: 8460)
- Unicorn-51337.exe (PID: 8524)
- Unicorn-15400.exe (PID: 8556)
- Unicorn-41410.exe (PID: 8184)
- Unicorn-39381.exe (PID: 8204)
- Unicorn-62348.exe (PID: 8096)
- Unicorn-58514.exe (PID: 8296)
- Unicorn-50569.exe (PID: 8684)
- Unicorn-36811.exe (PID: 8168)
- Unicorn-51721.exe (PID: 8496)
- Unicorn-61504.exe (PID: 8676)
- Unicorn-42562.exe (PID: 8248)
- Unicorn-10164.exe (PID: 8424)
- Unicorn-60281.exe (PID: 8892)
- Unicorn-58419.exe (PID: 7876)
- Unicorn-10015.exe (PID: 8952)
- Unicorn-29877.exe (PID: 8884)
- Unicorn-5009.exe (PID: 9096)
- Unicorn-2027.exe (PID: 7888)
- Unicorn-6161.exe (PID: 9172)
- Unicorn-52684.exe (PID: 9188)
- Unicorn-55909.exe (PID: 2244)
- Unicorn-3252.exe (PID: 8572)
- Unicorn-30667.exe (PID: 8540)
- Unicorn-38731.exe (PID: 8212)
- Unicorn-13423.exe (PID: 8048)
- Unicorn-18088.exe (PID: 8664)
- Unicorn-14692.exe (PID: 8964)
- Unicorn-20904.exe (PID: 10144)
- Unicorn-6132.exe (PID: 8076)
- Unicorn-40386.exe (PID: 10180)
- Unicorn-17919.exe (PID: 10172)
- Unicorn-15400.exe (PID: 8548)
- Unicorn-22524.exe (PID: 10216)
- Unicorn-24885.exe (PID: 7896)
- Unicorn-11148.exe (PID: 9708)
- Unicorn-10785.exe (PID: 9664)
- Unicorn-12321.exe (PID: 9776)
- Unicorn-61596.exe (PID: 8040)
- Unicorn-22021.exe (PID: 6392)
- Unicorn-56322.exe (PID: 7920)
- Unicorn-16546.exe (PID: 9308)
- Unicorn-7780.exe (PID: 2136)
- Unicorn-56019.exe (PID: 8472)
- Unicorn-48341.exe (PID: 9300)
- Unicorn-7256.exe (PID: 9688)
- Unicorn-35112.exe (PID: 9148)
- Unicorn-11188.exe (PID: 11184)
- Unicorn-11371.exe (PID: 9360)
- Unicorn-29829.exe (PID: 11244)
- Unicorn-29829.exe (PID: 11236)
- Unicorn-34344.exe (PID: 9132)
- Unicorn-8756.exe (PID: 9764)
- Unicorn-29119.exe (PID: 8904)
- Unicorn-59228.exe (PID: 9276)
- Unicorn-2907.exe (PID: 6036)
- Unicorn-38466.exe (PID: 10096)
- Unicorn-6379.exe (PID: 9672)
- Unicorn-64028.exe (PID: 9512)
- Unicorn-59621.exe (PID: 11036)
- Unicorn-47781.exe (PID: 10364)
- Unicorn-53561.exe (PID: 9156)
- Unicorn-2020.exe (PID: 9468)
- Unicorn-42450.exe (PID: 9656)
- Unicorn-11032.exe (PID: 11064)
- Unicorn-58112.exe (PID: 12672)
- Unicorn-59420.exe (PID: 9252)
- Unicorn-42267.exe (PID: 12720)
- Unicorn-42098.exe (PID: 896)
- Unicorn-56677.exe (PID: 8176)
- Unicorn-30594.exe (PID: 10312)
- Unicorn-54245.exe (PID: 11596)
- Unicorn-30146.exe (PID: 12728)
- Unicorn-61292.exe (PID: 11924)
- Unicorn-33858.exe (PID: 10492)
- Unicorn-20427.exe (PID: 10592)
- Unicorn-58761.exe (PID: 9744)
- Unicorn-44138.exe (PID: 7960)
- Unicorn-48229.exe (PID: 8488)
- Unicorn-3215.exe (PID: 10808)
- Unicorn-11713.exe (PID: 13832)
- Unicorn-35019.exe (PID: 6436)
- Unicorn-26332.exe (PID: 13864)
- Unicorn-26405.exe (PID: 13896)
- Unicorn-32322.exe (PID: 10388)
- Unicorn-52684.exe (PID: 9196)
- Unicorn-33995.exe (PID: 11632)
- Unicorn-31634.exe (PID: 9140)
- Unicorn-36627.exe (PID: 12112)
- Unicorn-26527.exe (PID: 13376)
- Unicorn-35029.exe (PID: 11436)
- Unicorn-64501.exe (PID: 10352)
- Unicorn-56373.exe (PID: 12532)
- Unicorn-42699.exe (PID: 9268)
- Unicorn-49717.exe (PID: 10944)
- Unicorn-28623.exe (PID: 12128)
- Unicorn-50405.exe (PID: 12032)
- Unicorn-29119.exe (PID: 8924)
- Unicorn-33884.exe (PID: 10448)
- Unicorn-64403.exe (PID: 9632)
- Unicorn-64869.exe (PID: 9292)
- Unicorn-59237.exe (PID: 11072)
- Unicorn-25410.exe (PID: 10580)
- Unicorn-10769.exe (PID: 8436)
- Unicorn-10664.exe (PID: 12696)
- Unicorn-9768.exe (PID: 9760)
- Unicorn-61484.exe (PID: 12776)
- Unicorn-53369.exe (PID: 9212)
- Unicorn-55619.exe (PID: 12760)
- Unicorn-34706.exe (PID: 15240)
- Unicorn-31736.exe (PID: 8532)
- Unicorn-7064.exe (PID: 10196)
- Unicorn-17720.exe (PID: 15344)
- Unicorn-33528.exe (PID: 11424)
- Unicorn-18370.exe (PID: 15264)
- Unicorn-60572.exe (PID: 9348)
- Unicorn-28235.exe (PID: 11940)
- Unicorn-19419.exe (PID: 13588)
- Unicorn-15819.exe (PID: 10972)
- Unicorn-52965.exe (PID: 10000)
- Unicorn-62866.exe (PID: 9884)
- Unicorn-2834.exe (PID: 10736)
Executes application which crashes
- Unicorn-29301.exe (PID: 8900)
INFO
The sample compiled with chinese language support
- 1 (608).exe (PID: 6268)
Create files in a temporary directory
- Unicorn-16642.exe (PID: 4336)
- 1 (608).exe (PID: 6268)
- Unicorn-24923.exe (PID: 960)
- Unicorn-32994.exe (PID: 5116)
- Unicorn-58275.exe (PID: 5892)
- Unicorn-61068.exe (PID: 5640)
- Unicorn-46201.exe (PID: 4724)
- Unicorn-49154.exe (PID: 5380)
- Unicorn-32818.exe (PID: 5164)
- Unicorn-45904.exe (PID: 4268)
- Unicorn-49330.exe (PID: 672)
- Unicorn-64841.exe (PID: 3096)
- Unicorn-13185.exe (PID: 6808)
- Unicorn-28773.exe (PID: 6964)
- Unicorn-721.exe (PID: 5720)
- Unicorn-25243.exe (PID: 5064)
- Unicorn-41579.exe (PID: 516)
- Unicorn-30885.exe (PID: 6676)
- Unicorn-27730.exe (PID: 5756)
- Unicorn-34392.exe (PID: 5056)
- Unicorn-51769.exe (PID: 6800)
- Unicorn-54258.exe (PID: 1912)
- Unicorn-64080.exe (PID: 6576)
- Unicorn-19483.exe (PID: 856)
- Unicorn-19941.exe (PID: 1568)
- Unicorn-25154.exe (PID: 5324)
- Unicorn-11122.exe (PID: 6228)
- Unicorn-12187.exe (PID: 4112)
- Unicorn-65218.exe (PID: 5556)
- Unicorn-2369.exe (PID: 3300)
- Unicorn-51186.exe (PID: 2092)
- Unicorn-30059.exe (PID: 3332)
- Unicorn-18405.exe (PID: 7220)
- Unicorn-46396.exe (PID: 2908)
- Unicorn-63692.exe (PID: 7228)
- Unicorn-16485.exe (PID: 7192)
- Unicorn-25247.exe (PID: 2268)
- Unicorn-51123.exe (PID: 7268)
- Unicorn-9214.exe (PID: 7312)
- Unicorn-27532.exe (PID: 7364)
- Unicorn-5441.exe (PID: 4068)
- Unicorn-65405.exe (PID: 7252)
- Unicorn-1327.exe (PID: 7380)
- Unicorn-75.exe (PID: 5436)
- Unicorn-25250.exe (PID: 7260)
- Unicorn-50531.exe (PID: 7284)
- Unicorn-18155.exe (PID: 7612)
- Unicorn-51321.exe (PID: 7656)
- Unicorn-36499.exe (PID: 7340)
- Unicorn-21301.exe (PID: 7636)
- Unicorn-47133.exe (PID: 7388)
- Unicorn-47398.exe (PID: 7372)
- Unicorn-5746.exe (PID: 7484)
- Unicorn-20149.exe (PID: 7536)
- Unicorn-19115.exe (PID: 7580)
- Unicorn-19115.exe (PID: 7588)
- Unicorn-20642.exe (PID: 7548)
- Unicorn-4673.exe (PID: 5228)
- Unicorn-52940.exe (PID: 7304)
- Unicorn-48716.exe (PID: 7572)
- Unicorn-42629.exe (PID: 7348)
- Unicorn-19765.exe (PID: 7564)
- Unicorn-14964.exe (PID: 7940)
- Unicorn-44933.exe (PID: 7476)
- Unicorn-24098.exe (PID: 7708)
- Unicorn-55618.exe (PID: 7600)
- Unicorn-3163.exe (PID: 7716)
- Unicorn-56002.exe (PID: 7732)
- Unicorn-12084.exe (PID: 7760)
- Unicorn-16027.exe (PID: 7200)
- Unicorn-20367.exe (PID: 7776)
- Unicorn-11736.exe (PID: 7800)
- Unicorn-8628.exe (PID: 8284)
- Unicorn-40547.exe (PID: 7808)
- Unicorn-8244.exe (PID: 8320)
- Unicorn-63506.exe (PID: 7824)
- Unicorn-41410.exe (PID: 8184)
- Unicorn-41145.exe (PID: 5084)
- Unicorn-61970.exe (PID: 7768)
- Unicorn-64274.exe (PID: 7792)
- Unicorn-5954.exe (PID: 7752)
- Unicorn-4082.exe (PID: 7968)
- Unicorn-10091.exe (PID: 7816)
- Unicorn-16370.exe (PID: 7988)
- Unicorn-7268.exe (PID: 7296)
- Unicorn-14635.exe (PID: 8928)
- Unicorn-36810.exe (PID: 8912)
- Unicorn-58514.exe (PID: 8296)
- Unicorn-27521.exe (PID: 8068)
- Unicorn-17682.exe (PID: 644)
- Unicorn-64949.exe (PID: 8480)
- Unicorn-53152.exe (PID: 8224)
- Unicorn-9794.exe (PID: 8032)
- Unicorn-15400.exe (PID: 8556)
- Unicorn-673.exe (PID: 8460)
- Unicorn-38731.exe (PID: 8212)
- Unicorn-62348.exe (PID: 8096)
- Unicorn-36811.exe (PID: 8168)
- Unicorn-51721.exe (PID: 8496)
- Unicorn-10015.exe (PID: 8952)
- Unicorn-50569.exe (PID: 8684)
- Unicorn-10164.exe (PID: 8424)
- Unicorn-42562.exe (PID: 8248)
- Unicorn-60281.exe (PID: 8892)
- Unicorn-58419.exe (PID: 7876)
- Unicorn-5009.exe (PID: 9096)
- Unicorn-61504.exe (PID: 8676)
- Unicorn-29877.exe (PID: 8884)
- Unicorn-6161.exe (PID: 9172)
- Unicorn-52684.exe (PID: 9188)
- Unicorn-55909.exe (PID: 2244)
- Unicorn-3252.exe (PID: 8572)
- Unicorn-13423.exe (PID: 8048)
- Unicorn-18088.exe (PID: 8664)
- Unicorn-14692.exe (PID: 8964)
- Unicorn-6132.exe (PID: 8076)
- Unicorn-30667.exe (PID: 8540)
- Unicorn-20904.exe (PID: 10144)
- Unicorn-40386.exe (PID: 10180)
- Unicorn-17919.exe (PID: 10172)
- Unicorn-22524.exe (PID: 10216)
- Unicorn-24885.exe (PID: 7896)
- Unicorn-15400.exe (PID: 8548)
- Unicorn-11148.exe (PID: 9708)
- Unicorn-10785.exe (PID: 9664)
- Unicorn-61596.exe (PID: 8040)
- Unicorn-22021.exe (PID: 6392)
- Unicorn-11371.exe (PID: 9360)
- Unicorn-16546.exe (PID: 9308)
- Unicorn-7256.exe (PID: 9688)
- Unicorn-48341.exe (PID: 9300)
- Unicorn-7780.exe (PID: 2136)
- Unicorn-56019.exe (PID: 8472)
- Unicorn-35112.exe (PID: 9148)
- Unicorn-36236.exe (PID: 7980)
- Unicorn-29829.exe (PID: 11244)
- Unicorn-29829.exe (PID: 11236)
- Unicorn-11188.exe (PID: 11184)
- Unicorn-34344.exe (PID: 9132)
- Unicorn-62866.exe (PID: 9884)
- Unicorn-29119.exe (PID: 8904)
- Unicorn-46594.exe (PID: 7856)
- Unicorn-2907.exe (PID: 6036)
- Unicorn-59228.exe (PID: 9276)
- Unicorn-6379.exe (PID: 9672)
- Unicorn-2020.exe (PID: 9468)
- Unicorn-64028.exe (PID: 9512)
- Unicorn-59621.exe (PID: 11036)
- Unicorn-47781.exe (PID: 10364)
- Unicorn-39381.exe (PID: 8204)
- Unicorn-53561.exe (PID: 9156)
- Unicorn-51337.exe (PID: 8524)
- Unicorn-42450.exe (PID: 9656)
- Unicorn-11032.exe (PID: 11064)
- Unicorn-58112.exe (PID: 12672)
- Unicorn-42267.exe (PID: 12720)
- Unicorn-59420.exe (PID: 9252)
- Unicorn-10664.exe (PID: 12696)
- Unicorn-56677.exe (PID: 8176)
- Unicorn-61292.exe (PID: 11924)
- Unicorn-42098.exe (PID: 896)
- Unicorn-30594.exe (PID: 10312)
- Unicorn-54245.exe (PID: 11596)
- Unicorn-30146.exe (PID: 12728)
- Unicorn-31736.exe (PID: 8532)
- Unicorn-20427.exe (PID: 10592)
- Unicorn-33858.exe (PID: 10492)
- Unicorn-58761.exe (PID: 9744)
- Unicorn-48229.exe (PID: 8488)
- Unicorn-44138.exe (PID: 7960)
- Unicorn-3215.exe (PID: 10808)
- Unicorn-35019.exe (PID: 6436)
- Unicorn-11713.exe (PID: 13832)
- Unicorn-26332.exe (PID: 13864)
- Unicorn-26405.exe (PID: 13896)
- Unicorn-32322.exe (PID: 10388)
- Unicorn-52684.exe (PID: 9196)
- Unicorn-33995.exe (PID: 11632)
- Unicorn-31634.exe (PID: 9140)
- Unicorn-64501.exe (PID: 10352)
- Unicorn-26527.exe (PID: 13376)
- Unicorn-35029.exe (PID: 11436)
- Unicorn-36627.exe (PID: 12112)
- Unicorn-56373.exe (PID: 12532)
- Unicorn-42699.exe (PID: 9268)
- Unicorn-49717.exe (PID: 10944)
- Unicorn-28623.exe (PID: 12128)
- Unicorn-29119.exe (PID: 8924)
- Unicorn-50405.exe (PID: 12032)
- Unicorn-33884.exe (PID: 10448)
- Unicorn-64403.exe (PID: 9632)
- Unicorn-64869.exe (PID: 9292)
- Unicorn-25410.exe (PID: 10580)
- Unicorn-10769.exe (PID: 8436)
- Unicorn-59237.exe (PID: 11072)
- Unicorn-8756.exe (PID: 9764)
- Unicorn-9768.exe (PID: 9760)
- Unicorn-61484.exe (PID: 12776)
- Unicorn-57376.exe (PID: 7832)
- Unicorn-53369.exe (PID: 9212)
- Unicorn-55619.exe (PID: 12760)
- Unicorn-34706.exe (PID: 15240)
- Unicorn-18370.exe (PID: 15264)
- Unicorn-17720.exe (PID: 15344)
- Unicorn-19419.exe (PID: 13588)
- Unicorn-33528.exe (PID: 11424)
- Unicorn-7064.exe (PID: 10196)
- Unicorn-28235.exe (PID: 11940)
- Unicorn-60572.exe (PID: 9348)
- Unicorn-15819.exe (PID: 10972)
Checks supported languages
- Unicorn-16642.exe (PID: 4336)
- 1 (608).exe (PID: 6268)
- Unicorn-13185.exe (PID: 6808)
- Unicorn-61068.exe (PID: 5640)
- Unicorn-49330.exe (PID: 672)
- Unicorn-58275.exe (PID: 5892)
- Unicorn-32818.exe (PID: 5164)
- Unicorn-64841.exe (PID: 3096)
- Unicorn-49154.exe (PID: 5380)
- Unicorn-721.exe (PID: 5720)
- Unicorn-46201.exe (PID: 4724)
- Unicorn-51769.exe (PID: 6800)
- Unicorn-45904.exe (PID: 4268)
- Unicorn-28773.exe (PID: 6964)
- Unicorn-41579.exe (PID: 516)
- Unicorn-25243.exe (PID: 5064)
- Unicorn-30885.exe (PID: 6676)
- Unicorn-25247.exe (PID: 2268)
- Unicorn-34392.exe (PID: 5056)
- Unicorn-27730.exe (PID: 5756)
- Unicorn-5441.exe (PID: 4068)
- Unicorn-75.exe (PID: 5436)
- Unicorn-54258.exe (PID: 1912)
- Unicorn-19941.exe (PID: 1568)
- Unicorn-64080.exe (PID: 6576)
- Unicorn-19483.exe (PID: 856)
- Unicorn-4673.exe (PID: 5228)
- Unicorn-24923.exe (PID: 960)
- Unicorn-32994.exe (PID: 5116)
- Unicorn-12187.exe (PID: 4112)
- Unicorn-65218.exe (PID: 5556)
- Unicorn-25154.exe (PID: 5324)
- Unicorn-11122.exe (PID: 6228)
- Unicorn-51186.exe (PID: 2092)
- Unicorn-46396.exe (PID: 2908)
- Unicorn-2369.exe (PID: 3300)
- Unicorn-30059.exe (PID: 3332)
- Unicorn-16027.exe (PID: 7200)
- Unicorn-16485.exe (PID: 7192)
- Unicorn-18405.exe (PID: 7220)
- Unicorn-65405.exe (PID: 7252)
- Unicorn-25250.exe (PID: 7260)
- Unicorn-51123.exe (PID: 7268)
- Unicorn-63692.exe (PID: 7228)
- Unicorn-7268.exe (PID: 7296)
- Unicorn-50531.exe (PID: 7284)
- Unicorn-52940.exe (PID: 7304)
- Unicorn-9214.exe (PID: 7312)
- Unicorn-40360.exe (PID: 7332)
- Unicorn-27532.exe (PID: 7364)
- Unicorn-36499.exe (PID: 7340)
- Unicorn-42629.exe (PID: 7348)
- Unicorn-47398.exe (PID: 7372)
- Unicorn-5746.exe (PID: 7484)
- Unicorn-44933.exe (PID: 7476)
- Unicorn-47133.exe (PID: 7388)
- Unicorn-1327.exe (PID: 7380)
- Unicorn-18155.exe (PID: 7612)
- Unicorn-21301.exe (PID: 7636)
- Unicorn-20149.exe (PID: 7536)
- Unicorn-19115.exe (PID: 7580)
- Unicorn-20642.exe (PID: 7548)
- Unicorn-48716.exe (PID: 7572)
- Unicorn-19115.exe (PID: 7588)
- Unicorn-37445.exe (PID: 7676)
- Unicorn-51321.exe (PID: 7656)
- Unicorn-19765.exe (PID: 7564)
- Unicorn-55618.exe (PID: 7600)
- Unicorn-24098.exe (PID: 7708)
- Unicorn-3163.exe (PID: 7716)
- Unicorn-56002.exe (PID: 7732)
- Unicorn-12084.exe (PID: 7760)
- Unicorn-5954.exe (PID: 7752)
- Unicorn-20367.exe (PID: 7776)
- Unicorn-61970.exe (PID: 7768)
- Unicorn-11736.exe (PID: 7800)
- Unicorn-40547.exe (PID: 7808)
- Unicorn-63506.exe (PID: 7824)
- Unicorn-10091.exe (PID: 7816)
- Unicorn-46594.exe (PID: 7856)
- Unicorn-2027.exe (PID: 7888)
- Unicorn-14964.exe (PID: 7940)
- Unicorn-4082.exe (PID: 7968)
- Unicorn-44138.exe (PID: 7960)
- Unicorn-57376.exe (PID: 7832)
- Unicorn-36236.exe (PID: 7980)
- Unicorn-16370.exe (PID: 7988)
- Unicorn-13423.exe (PID: 8048)
- Unicorn-9794.exe (PID: 8032)
- Unicorn-61596.exe (PID: 8040)
- Unicorn-27521.exe (PID: 8068)
- Unicorn-6132.exe (PID: 8076)
- Unicorn-62348.exe (PID: 8096)
- Unicorn-63570.exe (PID: 8124)
- Unicorn-58419.exe (PID: 7876)
- Unicorn-56677.exe (PID: 8176)
- Unicorn-41410.exe (PID: 8184)
- Unicorn-41145.exe (PID: 5084)
- Unicorn-55909.exe (PID: 2244)
- Unicorn-39381.exe (PID: 8204)
- Unicorn-64274.exe (PID: 7792)
- Unicorn-17682.exe (PID: 644)
- Unicorn-8628.exe (PID: 8284)
- Unicorn-58514.exe (PID: 8296)
- Unicorn-8244.exe (PID: 8320)
- Unicorn-38731.exe (PID: 8212)
- Unicorn-53152.exe (PID: 8224)
- Unicorn-673.exe (PID: 8460)
- Unicorn-14635.exe (PID: 8928)
- Unicorn-36811.exe (PID: 8168)
- Unicorn-50569.exe (PID: 8684)
- Unicorn-61504.exe (PID: 8676)
- Unicorn-36810.exe (PID: 8912)
- Unicorn-14692.exe (PID: 8964)
- Unicorn-29301.exe (PID: 8900)
- Unicorn-18088.exe (PID: 8664)
- Unicorn-60281.exe (PID: 8892)
- Unicorn-29877.exe (PID: 8884)
- Unicorn-63426.exe (PID: 8872)
- Unicorn-48229.exe (PID: 8488)
- Unicorn-56019.exe (PID: 8472)
- Unicorn-64949.exe (PID: 8480)
- Unicorn-26335.exe (PID: 8516)
- Unicorn-51337.exe (PID: 8524)
- Unicorn-51721.exe (PID: 8496)
- Unicorn-31736.exe (PID: 8532)
- Unicorn-10164.exe (PID: 8424)
- Unicorn-42562.exe (PID: 8248)
- Unicorn-10015.exe (PID: 8952)
- Unicorn-30667.exe (PID: 8540)
- Unicorn-3252.exe (PID: 8572)
- Unicorn-15400.exe (PID: 8548)
- Unicorn-15400.exe (PID: 8556)
- Unicorn-10740.exe (PID: 9060)
- Unicorn-5009.exe (PID: 9096)
- Unicorn-10587.exe (PID: 9088)
- Unicorn-26715.exe (PID: 9104)
- Unicorn-34344.exe (PID: 9132)
- Unicorn-31634.exe (PID: 9140)
- Unicorn-35112.exe (PID: 9148)
- Unicorn-53561.exe (PID: 9156)
- Unicorn-53826.exe (PID: 9164)
- Unicorn-6161.exe (PID: 9172)
- Unicorn-52684.exe (PID: 9196)
- Unicorn-53369.exe (PID: 9212)
- Unicorn-52684.exe (PID: 9188)
- Unicorn-2907.exe (PID: 6036)
- Unicorn-56322.exe (PID: 8332)
- Unicorn-56322.exe (PID: 7920)
- Unicorn-10769.exe (PID: 8436)
- Unicorn-42098.exe (PID: 896)
- Unicorn-7780.exe (PID: 2136)
- Unicorn-64786.exe (PID: 9224)
- Unicorn-57504.exe (PID: 9260)
- Unicorn-59420.exe (PID: 9252)
- Unicorn-42699.exe (PID: 9268)
- Unicorn-59228.exe (PID: 9276)
- Unicorn-16546.exe (PID: 9308)
- Unicorn-48341.exe (PID: 9300)
- Unicorn-11371.exe (PID: 9360)
- Unicorn-53442.exe (PID: 9400)
- Unicorn-64869.exe (PID: 9292)
- Unicorn-60572.exe (PID: 9348)
- Unicorn-4639.exe (PID: 5740)
- Unicorn-2020.exe (PID: 9468)
- Unicorn-64028.exe (PID: 9512)
- Unicorn-29156.exe (PID: 9544)
- Unicorn-64403.exe (PID: 9632)
- Unicorn-25269.exe (PID: 8444)
- Unicorn-53468.exe (PID: 9640)
- Unicorn-46156.exe (PID: 9412)
- Unicorn-56322.exe (PID: 8276)
- Unicorn-20904.exe (PID: 10144)
- Unicorn-42450.exe (PID: 9656)
- Unicorn-62316.exe (PID: 9648)
- Unicorn-53280.exe (PID: 9724)
- Unicorn-26146.exe (PID: 8760)
- Unicorn-40386.exe (PID: 10180)
- Unicorn-17919.exe (PID: 10172)
- Unicorn-11148.exe (PID: 9708)
- Unicorn-53280.exe (PID: 9732)
- Unicorn-10785.exe (PID: 9664)
- Unicorn-7256.exe (PID: 9688)
- Unicorn-8756.exe (PID: 9764)
- Unicorn-34901.exe (PID: 9940)
- Unicorn-34901.exe (PID: 9932)
- Unicorn-58268.exe (PID: 9900)
- Unicorn-58761.exe (PID: 9744)
- Unicorn-12321.exe (PID: 9776)
- Unicorn-44034.exe (PID: 9864)
- Unicorn-52965.exe (PID: 10000)
- Unicorn-38466.exe (PID: 10096)
- Unicorn-6379.exe (PID: 9672)
- Unicorn-7064.exe (PID: 10196)
- Unicorn-22524.exe (PID: 10216)
- Unicorn-24885.exe (PID: 7896)
- Unicorn-63397.exe (PID: 10232)
- Unicorn-9768.exe (PID: 9760)
- Unicorn-22021.exe (PID: 6392)
- Unicorn-62866.exe (PID: 9884)
- Unicorn-35019.exe (PID: 6436)
- Unicorn-29119.exe (PID: 8900)
- Unicorn-48720.exe (PID: 10248)
- Unicorn-42855.exe (PID: 10256)
- Unicorn-41480.exe (PID: 10264)
- Unicorn-28024.exe (PID: 10272)
- Unicorn-18342.exe (PID: 10300)
- Unicorn-29119.exe (PID: 8904)
- Unicorn-30293.exe (PID: 10288)
- Unicorn-32322.exe (PID: 10388)
- Unicorn-64501.exe (PID: 10352)
- Unicorn-47781.exe (PID: 10364)
- Unicorn-33884.exe (PID: 10448)
- Unicorn-30594.exe (PID: 10312)
- Unicorn-47205.exe (PID: 10428)
- Unicorn-57205.exe (PID: 10572)
- Unicorn-801.exe (PID: 10500)
- Unicorn-11188.exe (PID: 11184)
- Unicorn-40210.exe (PID: 10528)
- Unicorn-21461.exe (PID: 10556)
- Unicorn-40386.exe (PID: 10468)
- Unicorn-33858.exe (PID: 10492)
- Unicorn-29829.exe (PID: 11236)
- Unicorn-29829.exe (PID: 11244)
- Unicorn-7080.exe (PID: 10656)
- Unicorn-34463.exe (PID: 10624)
- Unicorn-26681.exe (PID: 10684)
- Unicorn-20815.exe (PID: 10676)
- Unicorn-20815.exe (PID: 10668)
- Unicorn-24954.exe (PID: 4120)
- Unicorn-25410.exe (PID: 10580)
- Unicorn-20427.exe (PID: 10592)
- Unicorn-3711.exe (PID: 10752)
- Unicorn-2834.exe (PID: 10724)
- Unicorn-911.exe (PID: 10764)
- Unicorn-3215.exe (PID: 10808)
- Unicorn-17247.exe (PID: 10772)
- Unicorn-46297.exe (PID: 10848)
- Unicorn-28757.exe (PID: 9528)
- Unicorn-54636.exe (PID: 10712)
- Unicorn-2834.exe (PID: 10736)
- Unicorn-3240.exe (PID: 10544)
- Unicorn-40055.exe (PID: 9772)
- Unicorn-49717.exe (PID: 10944)
- Unicorn-29119.exe (PID: 8924)
- Unicorn-11032.exe (PID: 11064)
- Unicorn-59621.exe (PID: 11036)
- Unicorn-59237.exe (PID: 11072)
- Unicorn-2367.exe (PID: 11056)
- Unicorn-33765.exe (PID: 10924)
- Unicorn-65077.exe (PID: 10512)
- Unicorn-29080.exe (PID: 6816)
- Unicorn-59932.exe (PID: 5156)
- Unicorn-8130.exe (PID: 11136)
- Unicorn-11115.exe (PID: 5136)
- Unicorn-14260.exe (PID: 2980)
- Unicorn-54281.exe (PID: 4376)
- Unicorn-17083.exe (PID: 11276)
- Unicorn-15819.exe (PID: 10972)
- Unicorn-18344.exe (PID: 11292)
- Unicorn-17083.exe (PID: 11284)
- Unicorn-29279.exe (PID: 11300)
- Unicorn-30818.exe (PID: 11328)
- Unicorn-30818.exe (PID: 11316)
- Unicorn-33528.exe (PID: 11424)
- Unicorn-49756.exe (PID: 11344)
- Unicorn-37058.exe (PID: 11448)
- Unicorn-54332.exe (PID: 6760)
- Unicorn-23410.exe (PID: 11520)
- Unicorn-40978.exe (PID: 10600)
- Unicorn-29938.exe (PID: 2064)
- Unicorn-36949.exe (PID: 11308)
- Unicorn-1185.exe (PID: 10484)
- Unicorn-50069.exe (PID: 11112)
- Unicorn-15906.exe (PID: 2800)
- Unicorn-35029.exe (PID: 11416)
- Unicorn-33218.exe (PID: 11892)
- Unicorn-35029.exe (PID: 11436)
- Unicorn-33995.exe (PID: 11632)
- Unicorn-48296.exe (PID: 11640)
- Unicorn-58691.exe (PID: 11908)
- Unicorn-50405.exe (PID: 12032)
- Unicorn-28235.exe (PID: 11940)
- Unicorn-14852.exe (PID: 12000)
- Unicorn-15407.exe (PID: 11992)
- Unicorn-9490.exe (PID: 11956)
- Unicorn-36627.exe (PID: 12112)
- Unicorn-32213.exe (PID: 10520)
- Unicorn-52060.exe (PID: 11752)
- Unicorn-54245.exe (PID: 11596)
- Unicorn-61292.exe (PID: 11924)
- Unicorn-39253.exe (PID: 11764)
- Unicorn-34767.exe (PID: 11880)
- Unicorn-52745.exe (PID: 11720)
- Unicorn-44956.exe (PID: 11948)
- Unicorn-19387.exe (PID: 11704)
- Unicorn-6690.exe (PID: 11932)
- Unicorn-58112.exe (PID: 12672)
- Unicorn-2436.exe (PID: 10984)
- Unicorn-53792.exe (PID: 11084)
- Unicorn-42267.exe (PID: 12720)
- Unicorn-28623.exe (PID: 12128)
- Unicorn-20264.exe (PID: 11744)
- Unicorn-28011.exe (PID: 7048)
- Unicorn-40613.exe (PID: 12460)
- Unicorn-57701.exe (PID: 1600)
- Unicorn-41874.exe (PID: 12432)
- Unicorn-40348.exe (PID: 12440)
- Unicorn-20747.exe (PID: 12448)
- Unicorn-10664.exe (PID: 12696)
- Unicorn-51011.exe (PID: 12584)
- Unicorn-56373.exe (PID: 12532)
- Unicorn-25989.exe (PID: 11096)
- Unicorn-40805.exe (PID: 12524)
- Unicorn-59938.exe (PID: 12548)
- Unicorn-27074.exe (PID: 12564)
- Unicorn-51011.exe (PID: 12468)
- Unicorn-51011.exe (PID: 12476)
- Unicorn-51011.exe (PID: 12484)
- Unicorn-37275.exe (PID: 12516)
- Unicorn-62571.exe (PID: 12640)
- Unicorn-10628.exe (PID: 12664)
- Unicorn-30146.exe (PID: 12728)
- Unicorn-44562.exe (PID: 12632)
- Unicorn-61484.exe (PID: 12776)
- Unicorn-41883.exe (PID: 12788)
- Unicorn-8251.exe (PID: 12824)
- Unicorn-41115.exe (PID: 12832)
- Unicorn-62848.exe (PID: 12848)
- Unicorn-12386.exe (PID: 12856)
- Unicorn-12386.exe (PID: 12864)
- Unicorn-31515.exe (PID: 12872)
- Unicorn-55619.exe (PID: 12744)
- Unicorn-55619.exe (PID: 12760)
- Unicorn-55619.exe (PID: 12768)
- Unicorn-55619.exe (PID: 12752)
- Unicorn-13922.exe (PID: 13012)
- Unicorn-11713.exe (PID: 13832)
- Unicorn-47280.exe (PID: 13024)
- Unicorn-15947.exe (PID: 13060)
- Unicorn-15947.exe (PID: 13052)
- Unicorn-29682.exe (PID: 13044)
- Unicorn-29682.exe (PID: 13036)
- Unicorn-26332.exe (PID: 13864)
- Unicorn-26405.exe (PID: 13896)
- Unicorn-15947.exe (PID: 13068)
- Unicorn-35548.exe (PID: 13076)
- Unicorn-10347.exe (PID: 13084)
- Unicorn-26882.exe (PID: 13092)
- Unicorn-40348.exe (PID: 13112)
- Unicorn-51011.exe (PID: 13136)
- Unicorn-18635.exe (PID: 13272)
- Unicorn-35163.exe (PID: 13280)
- Unicorn-23538.exe (PID: 13348)
- Unicorn-36123.exe (PID: 13236)
- Unicorn-51692.exe (PID: 13256)
- Unicorn-51692.exe (PID: 13264)
- Unicorn-42200.exe (PID: 13316)
- Unicorn-14401.exe (PID: 13356)
- Unicorn-26527.exe (PID: 13376)
- Unicorn-65138.exe (PID: 13428)
- Unicorn-8543.exe (PID: 13512)
- Unicorn-17208.exe (PID: 13488)
- Unicorn-17208.exe (PID: 13504)
- Unicorn-32092.exe (PID: 13544)
- Unicorn-23426.exe (PID: 13528)
- Unicorn-26226.exe (PID: 13552)
- Unicorn-17208.exe (PID: 13496)
- Unicorn-19419.exe (PID: 13588)
- Unicorn-38937.exe (PID: 13696)
- Unicorn-8136.exe (PID: 13704)
- Unicorn-6337.exe (PID: 13728)
- Unicorn-5496.exe (PID: 13740)
- Unicorn-18079.exe (PID: 13788)
- Unicorn-40437.exe (PID: 13764)
- Unicorn-5579.exe (PID: 13812)
- Unicorn-5579.exe (PID: 13804)
- Unicorn-16514.exe (PID: 13820)
- Unicorn-42933.exe (PID: 13916)
- Unicorn-39403.exe (PID: 13924)
- Unicorn-33141.exe (PID: 13952)
- Unicorn-13576.exe (PID: 13980)
- Unicorn-46249.exe (PID: 13988)
- Unicorn-13576.exe (PID: 13972)
- Unicorn-34706.exe (PID: 15240)
- Unicorn-18370.exe (PID: 15264)
- Unicorn-961.exe (PID: 13964)
- Unicorn-17867.exe (PID: 13148)
- Unicorn-15951.exe (PID: 13180)
- Unicorn-15951.exe (PID: 13188)
- Unicorn-15951.exe (PID: 13196)
- Unicorn-15951.exe (PID: 13204)
- Unicorn-65001.exe (PID: 15224)
- Unicorn-56336.exe (PID: 15216)
- Unicorn-56866.exe (PID: 15200)
- Unicorn-31797.exe (PID: 14000)
- Unicorn-17765.exe (PID: 14048)
- Unicorn-38153.exe (PID: 13172)
- Unicorn-17720.exe (PID: 15344)
- Unicorn-26271.exe (PID: 15184)
- Unicorn-52393.exe (PID: 13680)
- Unicorn-46528.exe (PID: 15168)
- Unicorn-31068.exe (PID: 15192)
- Unicorn-23471.exe (PID: 15176)
- Unicorn-38709.exe (PID: 13652)
- Unicorn-53125.exe (PID: 14316)
- Unicorn-51973.exe (PID: 14200)
- Unicorn-61795.exe (PID: 14212)
- Unicorn-45459.exe (PID: 14224)
- Unicorn-57068.exe (PID: 14132)
- Unicorn-44389.exe (PID: 15160)
- Unicorn-11944.exe (PID: 14612)
- Unicorn-44425.exe (PID: 14604)
- Unicorn-37010.exe (PID: 14744)
- Unicorn-56336.exe (PID: 15208)
- Unicorn-22882.exe (PID: 14508)
- Unicorn-45541.exe (PID: 14496)
- Unicorn-39411.exe (PID: 14484)
- Unicorn-19413.exe (PID: 14752)
- Unicorn-13169.exe (PID: 14404)
- Unicorn-57283.exe (PID: 14640)
- Unicorn-26226.exe (PID: 13560)
- Unicorn-43538.exe (PID: 14332)
- Unicorn-6344.exe (PID: 14588)
- Unicorn-23554.exe (PID: 14960)
- Unicorn-34056.exe (PID: 14732)
- Unicorn-37947.exe (PID: 14632)
- Unicorn-38560.exe (PID: 14444)
- Unicorn-31545.exe (PID: 14596)
- Unicorn-6788.exe (PID: 15144)
- Unicorn-24139.exe (PID: 14428)
- Unicorn-21029.exe (PID: 14268)
- Unicorn-64025.exe (PID: 14656)
- Unicorn-36626.exe (PID: 13752)
- Unicorn-65001.exe (PID: 15520)
- Unicorn-5691.exe (PID: 14388)
- Unicorn-65001.exe (PID: 15512)
- Unicorn-43547.exe (PID: 14668)
- Unicorn-35977.exe (PID: 15600)
- Unicorn-55733.exe (PID: 14948)
- Unicorn-52697.exe (PID: 14768)
- Unicorn-35976.exe (PID: 14792)
- Unicorn-47096.exe (PID: 14776)
- Unicorn-19147.exe (PID: 14940)
- Unicorn-15682.exe (PID: 15036)
- Unicorn-30215.exe (PID: 13940)
- Unicorn-53808.exe (PID: 15076)
- Unicorn-49314.exe (PID: 15112)
- Unicorn-56131.exe (PID: 14468)
- Unicorn-20837.exe (PID: 14280)
- Unicorn-10594.exe (PID: 15700)
- Unicorn-63632.exe (PID: 14784)
- Unicorn-54965.exe (PID: 14800)
- Unicorn-51628.exe (PID: 15592)
- Unicorn-19640.exe (PID: 15612)
- Unicorn-16997.exe (PID: 15620)
- Unicorn-58629.exe (PID: 15960)
- Unicorn-39989.exe (PID: 15932)
- Unicorn-17522.exe (PID: 15888)
- Unicorn-2255.exe (PID: 15900)
- Unicorn-42677.exe (PID: 15944)
- Unicorn-19906.exe (PID: 15824)
- Unicorn-45458.exe (PID: 14412)
- Unicorn-54483.exe (PID: 14620)
- Unicorn-65001.exe (PID: 15528)
- Unicorn-56709.exe (PID: 15924)
- Unicorn-38851.exe (PID: 16340)
- Unicorn-27301.exe (PID: 16264)
- Unicorn-14145.exe (PID: 16316)
- Unicorn-59781.exe (PID: 16300)
- Unicorn-27996.exe (PID: 16356)
- Unicorn-63148.exe (PID: 14648)
- Unicorn-12801.exe (PID: 16524)
- Unicorn-10964.exe (PID: 16256)
- Unicorn-48956.exe (PID: 16644)
- Unicorn-34565.exe (PID: 16620)
- Unicorn-62691.exe (PID: 16636)
- Unicorn-60421.exe (PID: 16660)
- Unicorn-63952.exe (PID: 16676)
- Unicorn-4280.exe (PID: 16668)
- Unicorn-50217.exe (PID: 16684)
- Unicorn-20232.exe (PID: 16852)
- Unicorn-43355.exe (PID: 16628)
- Unicorn-25106.exe (PID: 16580)
- Unicorn-1016.exe (PID: 16600)
- Unicorn-13633.exe (PID: 16796)
- Unicorn-28517.exe (PID: 16828)
- Unicorn-61152.exe (PID: 16652)
- Unicorn-36652.exe (PID: 16820)
- Unicorn-14450.exe (PID: 16836)
- Unicorn-62691.exe (PID: 16612)
- Unicorn-29548.exe (PID: 17108)
- Unicorn-29548.exe (PID: 17100)
- Unicorn-57424.exe (PID: 17116)
- Unicorn-63289.exe (PID: 17136)
- Unicorn-4347.exe (PID: 17188)
- Unicorn-29237.exe (PID: 17196)
- Unicorn-29548.exe (PID: 17092)
- Unicorn-63289.exe (PID: 17124)
- Unicorn-29548.exe (PID: 17084)
- Unicorn-21412.exe (PID: 17056)
- Unicorn-29548.exe (PID: 17076)
- Unicorn-20882.exe (PID: 17064)
- Unicorn-15121.exe (PID: 17036)
- Unicorn-9947.exe (PID: 17048)
- Unicorn-57424.exe (PID: 17144)
- Unicorn-63289.exe (PID: 17172)
- Unicorn-9722.exe (PID: 17996)
- Unicorn-23682.exe (PID: 17212)
- Unicorn-23682.exe (PID: 17220)
- Unicorn-43579.exe (PID: 18032)
- Unicorn-4347.exe (PID: 17204)
- Unicorn-63289.exe (PID: 17180)
- Unicorn-47228.exe (PID: 18040)
- Unicorn-46065.exe (PID: 16932)
- Unicorn-18587.exe (PID: 16964)
- Unicorn-32322.exe (PID: 16988)
- Unicorn-11556.exe (PID: 17008)
- Unicorn-2635.exe (PID: 16860)
- Unicorn-40098.exe (PID: 16916)
- Unicorn-35308.exe (PID: 16908)
- Unicorn-33199.exe (PID: 16924)
- Unicorn-63568.exe (PID: 16948)
Reads the computer name
- 1 (608).exe (PID: 6268)
- Unicorn-16642.exe (PID: 4336)
- Unicorn-13185.exe (PID: 6808)
- Unicorn-24923.exe (PID: 960)
- Unicorn-49330.exe (PID: 672)
- Unicorn-58275.exe (PID: 5892)
- Unicorn-32994.exe (PID: 5116)
- Unicorn-61068.exe (PID: 5640)
- Unicorn-721.exe (PID: 5720)
- Unicorn-49154.exe (PID: 5380)
- Unicorn-46201.exe (PID: 4724)
- Unicorn-32818.exe (PID: 5164)
- Unicorn-64841.exe (PID: 3096)
- Unicorn-51769.exe (PID: 6800)
- Unicorn-45904.exe (PID: 4268)
- Unicorn-28773.exe (PID: 6964)
- Unicorn-41579.exe (PID: 516)
- Unicorn-25243.exe (PID: 5064)
- Unicorn-30885.exe (PID: 6676)
- Unicorn-25247.exe (PID: 2268)
- Unicorn-5441.exe (PID: 4068)
- Unicorn-27730.exe (PID: 5756)
- Unicorn-34392.exe (PID: 5056)
- Unicorn-19941.exe (PID: 1568)
- Unicorn-12187.exe (PID: 4112)
- Unicorn-64080.exe (PID: 6576)
- Unicorn-19483.exe (PID: 856)
- Unicorn-4673.exe (PID: 5228)
- Unicorn-75.exe (PID: 5436)
- Unicorn-54258.exe (PID: 1912)
- Unicorn-51186.exe (PID: 2092)
- Unicorn-25154.exe (PID: 5324)
- Unicorn-11122.exe (PID: 6228)
- Unicorn-65218.exe (PID: 5556)
- Unicorn-30059.exe (PID: 3332)
- Unicorn-2369.exe (PID: 3300)
- Unicorn-46396.exe (PID: 2908)
- Unicorn-63692.exe (PID: 7228)
- Unicorn-16485.exe (PID: 7192)
- Unicorn-65405.exe (PID: 7252)
- Unicorn-18405.exe (PID: 7220)
- Unicorn-16027.exe (PID: 7200)
- Unicorn-9214.exe (PID: 7312)
- Unicorn-27532.exe (PID: 7364)
- Unicorn-25250.exe (PID: 7260)
- Unicorn-40360.exe (PID: 7332)
- Unicorn-51123.exe (PID: 7268)
- Unicorn-7268.exe (PID: 7296)
- Unicorn-50531.exe (PID: 7284)
- Unicorn-52940.exe (PID: 7304)
- Unicorn-1327.exe (PID: 7380)
- Unicorn-18155.exe (PID: 7612)
- Unicorn-21301.exe (PID: 7636)
- Unicorn-36499.exe (PID: 7340)
- Unicorn-47133.exe (PID: 7388)
- Unicorn-5746.exe (PID: 7484)
- Unicorn-20149.exe (PID: 7536)
- Unicorn-47398.exe (PID: 7372)
- Unicorn-51321.exe (PID: 7656)
- Unicorn-19115.exe (PID: 7580)
- Unicorn-19115.exe (PID: 7588)
- Unicorn-19765.exe (PID: 7564)
- Unicorn-42629.exe (PID: 7348)
- Unicorn-20642.exe (PID: 7548)
- Unicorn-48716.exe (PID: 7572)
- Unicorn-40547.exe (PID: 7808)
- Unicorn-24098.exe (PID: 7708)
- Unicorn-14964.exe (PID: 7940)
- Unicorn-44933.exe (PID: 7476)
- Unicorn-3163.exe (PID: 7716)
- Unicorn-55618.exe (PID: 7600)
- Unicorn-56002.exe (PID: 7732)
- Unicorn-12084.exe (PID: 7760)
- Unicorn-6132.exe (PID: 8076)
- Unicorn-8628.exe (PID: 8284)
- Unicorn-46594.exe (PID: 7856)
- Unicorn-37445.exe (PID: 7676)
- Unicorn-8244.exe (PID: 8320)
- Unicorn-63506.exe (PID: 7824)
- Unicorn-64274.exe (PID: 7792)
- Unicorn-41410.exe (PID: 8184)
- Unicorn-20367.exe (PID: 7776)
- Unicorn-11736.exe (PID: 7800)
- Unicorn-16370.exe (PID: 7988)
- Unicorn-5954.exe (PID: 7752)
- Unicorn-41145.exe (PID: 5084)
- Unicorn-61970.exe (PID: 7768)
- Unicorn-4082.exe (PID: 7968)
- Unicorn-10091.exe (PID: 7816)
- Unicorn-36236.exe (PID: 7980)
- Unicorn-14635.exe (PID: 8928)
- Unicorn-36810.exe (PID: 8912)
- Unicorn-29301.exe (PID: 8900)
- Unicorn-27521.exe (PID: 8068)
- Unicorn-53152.exe (PID: 8224)
- Unicorn-64949.exe (PID: 8480)
- Unicorn-9794.exe (PID: 8032)
- Unicorn-17682.exe (PID: 644)
- Unicorn-673.exe (PID: 8460)
- Unicorn-51337.exe (PID: 8524)
- Unicorn-15400.exe (PID: 8556)
- Unicorn-39381.exe (PID: 8204)
- Unicorn-38731.exe (PID: 8212)
- Unicorn-58514.exe (PID: 8296)
- Unicorn-57376.exe (PID: 7832)
- Unicorn-62348.exe (PID: 8096)
- Unicorn-50569.exe (PID: 8684)
- Unicorn-2027.exe (PID: 7888)
- Unicorn-36811.exe (PID: 8168)
- Unicorn-42562.exe (PID: 8248)
- Unicorn-51721.exe (PID: 8496)
- Unicorn-10164.exe (PID: 8424)
- Unicorn-60281.exe (PID: 8892)
- Unicorn-58419.exe (PID: 7876)
- Unicorn-5009.exe (PID: 9096)
- Unicorn-61504.exe (PID: 8676)
- Unicorn-10015.exe (PID: 8952)
- Unicorn-52684.exe (PID: 9188)
- Unicorn-6161.exe (PID: 9172)
- Unicorn-3252.exe (PID: 8572)
- Unicorn-55909.exe (PID: 2244)
- Unicorn-13423.exe (PID: 8048)
- Unicorn-15400.exe (PID: 8548)
- Unicorn-30667.exe (PID: 8540)
- Unicorn-29877.exe (PID: 8884)
- Unicorn-18088.exe (PID: 8664)
- Unicorn-20904.exe (PID: 10144)
- Unicorn-14692.exe (PID: 8964)
- Unicorn-40386.exe (PID: 10180)
- Unicorn-17919.exe (PID: 10172)
- Unicorn-22524.exe (PID: 10216)
- Unicorn-11371.exe (PID: 9360)
- Unicorn-56322.exe (PID: 7920)
- Unicorn-10785.exe (PID: 9664)
- Unicorn-11148.exe (PID: 9708)
- Unicorn-22021.exe (PID: 6392)
- Unicorn-12321.exe (PID: 9776)
- Unicorn-7256.exe (PID: 9688)
- Unicorn-24885.exe (PID: 7896)
- Unicorn-7780.exe (PID: 2136)
- Unicorn-61596.exe (PID: 8040)
- Unicorn-16546.exe (PID: 9308)
- Unicorn-48341.exe (PID: 9300)
- Unicorn-56019.exe (PID: 8472)
- Unicorn-2907.exe (PID: 6036)
- Unicorn-34344.exe (PID: 9132)
- Unicorn-35112.exe (PID: 9148)
- Unicorn-11188.exe (PID: 11184)
- Unicorn-29829.exe (PID: 11244)
- Unicorn-62866.exe (PID: 9884)
- Unicorn-8756.exe (PID: 9764)
- Unicorn-29119.exe (PID: 8904)
- Unicorn-29829.exe (PID: 11236)
- Unicorn-47781.exe (PID: 10364)
- Unicorn-64028.exe (PID: 9512)
- Unicorn-2020.exe (PID: 9468)
- Unicorn-38466.exe (PID: 10096)
- Unicorn-6379.exe (PID: 9672)
- Unicorn-59621.exe (PID: 11036)
- Unicorn-59228.exe (PID: 9276)
- Unicorn-53561.exe (PID: 9156)
- Unicorn-42450.exe (PID: 9656)
- Unicorn-11032.exe (PID: 11064)
- Unicorn-42267.exe (PID: 12720)
- Unicorn-3215.exe (PID: 10808)
- Unicorn-59420.exe (PID: 9252)
- Unicorn-58112.exe (PID: 12672)
- Unicorn-10664.exe (PID: 12696)
- Unicorn-42098.exe (PID: 896)
- Unicorn-56677.exe (PID: 8176)
- Unicorn-30594.exe (PID: 10312)
- Unicorn-61292.exe (PID: 11924)
- Unicorn-53369.exe (PID: 9212)
- Unicorn-7064.exe (PID: 10196)
- Unicorn-54245.exe (PID: 11596)
- Unicorn-30146.exe (PID: 12728)
- Unicorn-42699.exe (PID: 9268)
- Unicorn-20427.exe (PID: 10592)
- Unicorn-32322.exe (PID: 10388)
- Unicorn-33858.exe (PID: 10492)
- Unicorn-31736.exe (PID: 8532)
- Unicorn-58761.exe (PID: 9744)
- Unicorn-64501.exe (PID: 10352)
- Unicorn-44138.exe (PID: 7960)
- Unicorn-48229.exe (PID: 8488)
- Unicorn-36627.exe (PID: 12112)
- Unicorn-35019.exe (PID: 6436)
- Unicorn-11713.exe (PID: 13832)
- Unicorn-26332.exe (PID: 13864)
- Unicorn-26405.exe (PID: 13896)
- Unicorn-52684.exe (PID: 9196)
- Unicorn-33995.exe (PID: 11632)
- Unicorn-31634.exe (PID: 9140)
- Unicorn-26527.exe (PID: 13376)
- Unicorn-35029.exe (PID: 11436)
- Unicorn-54281.exe (PID: 4376)
- Unicorn-55619.exe (PID: 12760)
- Unicorn-61484.exe (PID: 12776)
- Unicorn-28235.exe (PID: 11940)
- Unicorn-56373.exe (PID: 12532)
- Unicorn-10769.exe (PID: 8436)
- Unicorn-49717.exe (PID: 10944)
- Unicorn-28623.exe (PID: 12128)
- Unicorn-26335.exe (PID: 8516)
- Unicorn-29119.exe (PID: 8924)
- Unicorn-50405.exe (PID: 12032)
- Unicorn-33884.exe (PID: 10448)
- Unicorn-64403.exe (PID: 9632)
- Unicorn-64869.exe (PID: 9292)
- Unicorn-25410.exe (PID: 10580)
- Unicorn-2834.exe (PID: 10736)
- Unicorn-52965.exe (PID: 10000)
- Unicorn-59237.exe (PID: 11072)
- Unicorn-9768.exe (PID: 9760)
- Unicorn-15819.exe (PID: 10972)
- Unicorn-42855.exe (PID: 10256)
- Unicorn-33528.exe (PID: 11424)
- Unicorn-17720.exe (PID: 15344)
- Unicorn-19419.exe (PID: 13588)
- Unicorn-34706.exe (PID: 15240)
- Unicorn-18370.exe (PID: 15264)
- Unicorn-60572.exe (PID: 9348)
- Unicorn-65077.exe (PID: 10512)
- Unicorn-57504.exe (PID: 9260)
- Unicorn-14852.exe (PID: 12000)
- Unicorn-34901.exe (PID: 9932)
- Unicorn-29548.exe (PID: 17108)
- Unicorn-57424.exe (PID: 17116)
- Unicorn-29548.exe (PID: 17100)
Creates files or folders in the user directory
- WerFault.exe (PID: 9564)
Reads the software policy settings
- slui.exe (PID: 2392)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable (generic) (52.9) |
|---|---|---|
| .exe | | | Generic Win/DOS Executable (23.5) |
| .exe | | | DOS Executable Generic (23.5) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
772
Monitored processes
634
Malicious processes
101
Suspicious processes
73
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 516 | C:\Users\admin\AppData\Local\Temp\Unicorn-41579.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-41579.exe | Unicorn-58275.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 632 | C:\Users\admin\AppData\Local\Temp\Unicorn-898.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-898.exe | — | Unicorn-5954.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 | |||||||||||||||
| 644 | C:\Users\admin\AppData\Local\Temp\Unicorn-17682.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-17682.exe | Unicorn-41579.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 672 | C:\Users\admin\AppData\Local\Temp\Unicorn-49330.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-49330.exe | Unicorn-24923.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 856 | C:\Users\admin\AppData\Local\Temp\Unicorn-19483.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-19483.exe | Unicorn-16642.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 896 | C:\Users\admin\AppData\Local\Temp\Unicorn-42098.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-42098.exe | Unicorn-41145.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 960 | C:\Users\admin\AppData\Local\Temp\Unicorn-24923.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-24923.exe | 1 (608).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1040 | C:\Users\admin\AppData\Local\Temp\Unicorn-63180.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-63180.exe | — | Unicorn-51123.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 | |||||||||||||||
| 1088 | C:\Users\admin\AppData\Local\Temp\Unicorn-9563.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-9563.exe | — | Unicorn-11736.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 | |||||||||||||||
| 1568 | C:\Users\admin\AppData\Local\Temp\Unicorn-19941.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-19941.exe | Unicorn-64841.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
13 529
Read events
13 529
Write events
0
Delete events
0
Modification events
Executable files
825
Suspicious files
3
Text files
1
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 4336 | Unicorn-16642.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-61068.exe | executable | |
MD5:F7E2F033DE78B84959CF03556993324E | SHA256:CCD87FF718680B9ABE2103C34507CA2CCD644F75D86F9BB162B2B2A40DF47927 | |||
| 5640 | Unicorn-61068.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-49154.exe | executable | |
MD5:AE92A145C41D5EA520D4EFA0FC4E6ABB | SHA256:142D00DDE170C326A54A865A196C5ACE63CB44949E0B4E75618A57A5B6F897E7 | |||
| 6808 | Unicorn-13185.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-32994.exe | executable | |
MD5:830F2095CED79B5975BAF88392DB011A | SHA256:14E7C0F471A2D41658F1792C9079C630FFF09A06C689D3CFDFF8D9873FC6BBDD | |||
| 5892 | Unicorn-58275.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-32818.exe | executable | |
MD5:243D88ABA737EF644D077DAA6987711F | SHA256:71F67BD764C6475CA4E7CAEF846099474B86E0172A661A73BA835DFFC0BDFD46 | |||
| 4336 | Unicorn-16642.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-45904.exe | executable | |
MD5:69AFAF6DAD1A8906329F5B35C489D78C | SHA256:7FC0D56829ADF230605277ED4CB8B2429FBCB64F26DE9B2605FD5CCEF9E415C8 | |||
| 6268 | 1 (608).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-51769.exe | executable | |
MD5:CBE638DA416BAC62707D8D1470A1720D | SHA256:B4757297EDF48CCC805336022D8570AEB1C728528718EC6273A88EA654B55E47 | |||
| 6268 | 1 (608).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-58275.exe | executable | |
MD5:01286BE0FB0DE975A0A6EC072142076D | SHA256:721677522C36D353964072705C4F2D546A69A252CF501A6C4462677392349B11 | |||
| 6268 | 1 (608).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-24923.exe | executable | |
MD5:190848443B497DAFC4ED7091E41760D6 | SHA256:036432AD1B40B46E0B52352F1F52635FC87AA1AE7EE07A5B0A3DDDDE80B4F6AE | |||
| 6808 | Unicorn-13185.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-46201.exe | executable | |
MD5:B4737E0C2DA8130B129A949A546712CB | SHA256:65AE700CA48A9670E01BFADA269049DF300010F9D0B6DABF1F55032078819D80 | |||
| 4336 | Unicorn-16642.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13185.exe | executable | |
MD5:7709885FFD71A3F8C08A0A46560DF6C3 | SHA256:BCFCBAFDB90880F12713E7A4E3EEA0A79275966C1D9AD977D9990822B5BDCF57 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
24
DNS requests
15
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
6544 | svchost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
— | — | GET | 200 | 2.16.164.72:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
8256 | SIHClient.exe | GET | 200 | 23.35.229.160:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
5404 | backgroundTaskHost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
8256 | SIHClient.exe | GET | 200 | 23.35.229.160:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 2.16.164.72:80 | crl.microsoft.com | Akamai International B.V. | NL | whitelisted |
2104 | svchost.exe | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
5496 | MoUsoCoreWorker.exe | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.159.23:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 2.23.77.188:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
3216 | svchost.exe | 40.113.103.199:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
5404 | backgroundTaskHost.exe | 20.31.169.57:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |