| File name: | 1 (1141) |
| Full analysis: | https://app.any.run/tasks/3cd48f0b-628b-4bbd-8e0a-2ee89a8341c1 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 08:51:39 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | 7982556FE103085E5D7577F5C819F650 |
| SHA1: | BBA311C96A478CE23AD77E09B15ACFDC49002EB4 |
| SHA256: | 769E71ADB89764610A3CD9DEF37E2ABAE3F03C8684DBE8C6C21531AC77E62BFB |
| SSDEEP: | 6144:NwK5tNIPkDUHA5dotMevyo2xotB1lvJGBR//yGICZk/8SwjwpyA4EhE2xDWXGFuN:N9veHHA5qtvzBHhaR3yGICpx4QNmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- Unicorn-61366.exe (PID: 7784)
- 1 (1141).exe (PID: 7428)
- Unicorn-50863.exe (PID: 8136)
- Unicorn-36150.exe (PID: 8148)
- Unicorn-45046.exe (PID: 7220)
- Unicorn-676.exe (PID: 7228)
- Unicorn-11396.exe (PID: 5112)
- Unicorn-17527.exe (PID: 300)
- Unicorn-47023.exe (PID: 2340)
- Unicorn-54869.exe (PID: 5048)
- Unicorn-20319.exe (PID: 6300)
- Unicorn-14188.exe (PID: 5428)
- Unicorn-61086.exe (PID: 7312)
- Unicorn-61351.exe (PID: 7336)
- Unicorn-3437.exe (PID: 4880)
- Unicorn-25119.exe (PID: 7424)
- Unicorn-46094.exe (PID: 6248)
- Unicorn-14027.exe (PID: 7180)
- Unicorn-20629.exe (PID: 5304)
- Unicorn-43510.exe (PID: 6972)
- Unicorn-91.exe (PID: 7316)
- Unicorn-32903.exe (PID: 2568)
- Unicorn-27496.exe (PID: 6944)
- Unicorn-24572.exe (PID: 4452)
- Unicorn-54750.exe (PID: 4736)
- Unicorn-6753.exe (PID: 6240)
- Unicorn-63183.exe (PID: 4040)
- Unicorn-10837.exe (PID: 5728)
- Unicorn-58663.exe (PID: 2432)
- Unicorn-57511.exe (PID: 6712)
- Unicorn-19996.exe (PID: 7352)
- Unicorn-5387.exe (PID: 4696)
- Unicorn-60910.exe (PID: 5392)
- Unicorn-41294.exe (PID: 1088)
- Unicorn-334.exe (PID: 2236)
- Unicorn-29669.exe (PID: 6372)
- Unicorn-63214.exe (PID: 5024)
- Unicorn-39949.exe (PID: 5936)
- Unicorn-62062.exe (PID: 4212)
- Unicorn-14869.exe (PID: 5868)
- Unicorn-49063.exe (PID: 744)
- Unicorn-59326.exe (PID: 8092)
- Unicorn-61159.exe (PID: 1760)
- Unicorn-10334.exe (PID: 7196)
- Unicorn-18429.exe (PID: 632)
- Unicorn-53894.exe (PID: 6040)
- Unicorn-26420.exe (PID: 2392)
- Unicorn-18638.exe (PID: 7708)
- Unicorn-26759.exe (PID: 7448)
- Unicorn-55740.exe (PID: 720)
- Unicorn-6669.exe (PID: 7668)
- Unicorn-46656.exe (PID: 7628)
- Unicorn-15430.exe (PID: 7460)
- Unicorn-12799.exe (PID: 7716)
- Unicorn-25623.exe (PID: 660)
- Unicorn-49125.exe (PID: 7652)
- Unicorn-2175.exe (PID: 7904)
- Unicorn-53479.exe (PID: 1012)
- Unicorn-55150.exe (PID: 4920)
- Unicorn-32980.exe (PID: 6824)
- Unicorn-26349.exe (PID: 7484)
- Unicorn-50511.exe (PID: 5324)
- Unicorn-26435.exe (PID: 2040)
- Unicorn-23983.exe (PID: 7752)
- Unicorn-36811.exe (PID: 6228)
- Unicorn-45591.exe (PID: 8096)
- Unicorn-57615.exe (PID: 7724)
- Unicorn-37143.exe (PID: 1040)
- Unicorn-44989.exe (PID: 5436)
- Unicorn-36213.exe (PID: 6632)
- Unicorn-27469.exe (PID: 8260)
- Unicorn-47911.exe (PID: 8284)
- Unicorn-41340.exe (PID: 7884)
- Unicorn-4574.exe (PID: 8224)
- Unicorn-26260.exe (PID: 3896)
- Unicorn-49782.exe (PID: 8468)
- Unicorn-46598.exe (PID: 2420)
- Unicorn-33997.exe (PID: 4464)
- Unicorn-26230.exe (PID: 8272)
- Unicorn-14238.exe (PID: 8312)
- Unicorn-21981.exe (PID: 8904)
- Unicorn-19413.exe (PID: 8920)
- Unicorn-63015.exe (PID: 8992)
- Unicorn-24973.exe (PID: 7928)
- Unicorn-45607.exe (PID: 8232)
- Unicorn-57070.exe (PID: 6576)
- Unicorn-44847.exe (PID: 8336)
- Unicorn-48741.exe (PID: 1912)
- Unicorn-18415.exe (PID: 668)
- Unicorn-29973.exe (PID: 8664)
- Unicorn-11245.exe (PID: 8840)
- Unicorn-1261.exe (PID: 8896)
- Unicorn-28821.exe (PID: 8760)
- Unicorn-47470.exe (PID: 7872)
- Unicorn-44463.exe (PID: 8412)
- Unicorn-12366.exe (PID: 8368)
- Unicorn-12942.exe (PID: 8528)
- Unicorn-24981.exe (PID: 8328)
- Unicorn-11813.exe (PID: 7720)
- Unicorn-22219.exe (PID: 8696)
- Unicorn-35645.exe (PID: 6564)
- Unicorn-14670.exe (PID: 8752)
- Unicorn-49766.exe (PID: 8704)
- Unicorn-55572.exe (PID: 5352)
- Unicorn-33311.exe (PID: 8720)
- Unicorn-48814.exe (PID: 7012)
- Unicorn-6885.exe (PID: 8776)
- Unicorn-4068.exe (PID: 1300)
- Unicorn-28438.exe (PID: 8360)
- Unicorn-42175.exe (PID: 9900)
- Unicorn-4541.exe (PID: 9928)
- Unicorn-14525.exe (PID: 9944)
- Unicorn-33111.exe (PID: 664)
- Unicorn-3684.exe (PID: 7036)
- Unicorn-8484.exe (PID: 8688)
- Unicorn-50830.exe (PID: 8804)
- Unicorn-65215.exe (PID: 8788)
- Unicorn-64167.exe (PID: 9164)
- Unicorn-8088.exe (PID: 8252)
- Unicorn-43695.exe (PID: 9232)
- Unicorn-16253.exe (PID: 9988)
- Unicorn-54359.exe (PID: 8728)
- Unicorn-49071.exe (PID: 8828)
- Unicorn-34380.exe (PID: 7664)
- Unicorn-40623.exe (PID: 9096)
- Unicorn-33503.exe (PID: 8680)
- Unicorn-46902.exe (PID: 9252)
- Unicorn-358.exe (PID: 7972)
- Unicorn-52557.exe (PID: 4776)
- Unicorn-28085.exe (PID: 8672)
- Unicorn-10477.exe (PID: 8744)
- Unicorn-62205.exe (PID: 9352)
- Unicorn-53318.exe (PID: 7604)
- Unicorn-20652.exe (PID: 9360)
- Unicorn-166.exe (PID: 7472)
- Unicorn-44197.exe (PID: 8004)
- Unicorn-41665.exe (PID: 9368)
- Unicorn-15548.exe (PID: 7276)
- Unicorn-42604.exe (PID: 9344)
- Unicorn-9901.exe (PID: 8736)
- Unicorn-62373.exe (PID: 10928)
- Unicorn-38439.exe (PID: 10512)
- Unicorn-55676.exe (PID: 9476)
- Unicorn-45837.exe (PID: 10988)
- Unicorn-5573.exe (PID: 4336)
- Unicorn-36797.exe (PID: 9308)
- Unicorn-49621.exe (PID: 4620)
- Unicorn-11053.exe (PID: 8812)
- Unicorn-2470.exe (PID: 684)
- Unicorn-43156.exe (PID: 8820)
- Unicorn-8334.exe (PID: 8512)
- Unicorn-64463.exe (PID: 9416)
- Unicorn-16860.exe (PID: 9520)
- Unicorn-20436.exe (PID: 4572)
- Unicorn-27655.exe (PID: 9612)
- Unicorn-41775.exe (PID: 960)
- Unicorn-61215.exe (PID: 12304)
- Unicorn-61334.exe (PID: 12360)
- Unicorn-32086.exe (PID: 8768)
- Unicorn-15661.exe (PID: 9240)
- Unicorn-19149.exe (PID: 6392)
- Unicorn-8572.exe (PID: 4268)
- Unicorn-5.exe (PID: 9632)
- Unicorn-7758.exe (PID: 9064)
- Unicorn-17493.exe (PID: 9468)
- Unicorn-48142.exe (PID: 8056)
- Unicorn-63534.exe (PID: 9600)
- Unicorn-47566.exe (PID: 9300)
- Unicorn-8422.exe (PID: 8712)
- Unicorn-41070.exe (PID: 8052)
- Unicorn-33239.exe (PID: 11240)
- Unicorn-14525.exe (PID: 9952)
- Unicorn-35159.exe (PID: 9892)
- Unicorn-14525.exe (PID: 9960)
- Unicorn-28278.exe (PID: 11248)
- Unicorn-34492.exe (PID: 9104)
- Unicorn-63157.exe (PID: 9268)
- Unicorn-14878.exe (PID: 10316)
- Unicorn-32694.exe (PID: 5212)
- Unicorn-40885.exe (PID: 13916)
- Unicorn-16188.exe (PID: 13880)
- Unicorn-54918.exe (PID: 13900)
- Unicorn-25278.exe (PID: 8480)
- Unicorn-11173.exe (PID: 5064)
- Unicorn-44581.exe (PID: 10584)
- Unicorn-34404.exe (PID: 9440)
- Unicorn-31267.exe (PID: 10132)
- Unicorn-37551.exe (PID: 9740)
- Unicorn-48879.exe (PID: 8796)
- Unicorn-58734.exe (PID: 10284)
- Unicorn-23373.exe (PID: 11660)
- Unicorn-20404.exe (PID: 15704)
- Unicorn-5022.exe (PID: 15732)
- Unicorn-1230.exe (PID: 9456)
- Unicorn-16485.exe (PID: 15752)
- Unicorn-7006.exe (PID: 11032)
- Unicorn-46935.exe (PID: 10416)
- Unicorn-15588.exe (PID: 2344)
- Unicorn-63238.exe (PID: 9560)
- Unicorn-36399.exe (PID: 9772)
- Unicorn-52263.exe (PID: 10224)
- Unicorn-51076.exe (PID: 11384)
- Unicorn-65511.exe (PID: 7996)
Executable content was dropped or overwritten
- Unicorn-61366.exe (PID: 7784)
- Unicorn-36150.exe (PID: 8148)
- 1 (1141).exe (PID: 7428)
- Unicorn-50863.exe (PID: 8136)
- Unicorn-45046.exe (PID: 7220)
- Unicorn-676.exe (PID: 7228)
- Unicorn-11396.exe (PID: 5112)
- Unicorn-17527.exe (PID: 300)
- Unicorn-47023.exe (PID: 2340)
- Unicorn-54869.exe (PID: 5048)
- Unicorn-20319.exe (PID: 6300)
- Unicorn-14188.exe (PID: 5428)
- Unicorn-61086.exe (PID: 7312)
- Unicorn-61159.exe (PID: 1760)
- Unicorn-3437.exe (PID: 4880)
- Unicorn-46094.exe (PID: 6248)
- Unicorn-25119.exe (PID: 7424)
- Unicorn-14027.exe (PID: 7180)
- Unicorn-19996.exe (PID: 7352)
- Unicorn-20629.exe (PID: 5304)
- Unicorn-43510.exe (PID: 6972)
- Unicorn-91.exe (PID: 7316)
- Unicorn-27496.exe (PID: 6944)
- Unicorn-32903.exe (PID: 2568)
- Unicorn-54750.exe (PID: 4736)
- Unicorn-63183.exe (PID: 4040)
- Unicorn-6753.exe (PID: 6240)
- Unicorn-10837.exe (PID: 5728)
- Unicorn-24572.exe (PID: 4452)
- Unicorn-61351.exe (PID: 7336)
- Unicorn-58663.exe (PID: 2432)
- Unicorn-57511.exe (PID: 6712)
- Unicorn-5387.exe (PID: 4696)
- Unicorn-60910.exe (PID: 5392)
- Unicorn-334.exe (PID: 2236)
- Unicorn-41294.exe (PID: 1088)
- Unicorn-29669.exe (PID: 6372)
- Unicorn-39949.exe (PID: 5936)
- Unicorn-63214.exe (PID: 5024)
- Unicorn-62062.exe (PID: 4212)
- Unicorn-49063.exe (PID: 744)
- Unicorn-59326.exe (PID: 8092)
- Unicorn-14869.exe (PID: 5868)
- Unicorn-18429.exe (PID: 632)
- Unicorn-53894.exe (PID: 6040)
- Unicorn-10334.exe (PID: 7196)
- Unicorn-26420.exe (PID: 2392)
- Unicorn-55740.exe (PID: 720)
- Unicorn-18638.exe (PID: 7708)
- Unicorn-26759.exe (PID: 7448)
- Unicorn-46656.exe (PID: 7628)
- Unicorn-12799.exe (PID: 7716)
- Unicorn-6669.exe (PID: 7668)
- Unicorn-15430.exe (PID: 7460)
- Unicorn-25623.exe (PID: 660)
- Unicorn-49125.exe (PID: 7652)
- Unicorn-2175.exe (PID: 7904)
- Unicorn-26435.exe (PID: 2040)
- Unicorn-26349.exe (PID: 7484)
- Unicorn-50511.exe (PID: 5324)
- Unicorn-55150.exe (PID: 4920)
- Unicorn-32980.exe (PID: 6824)
- Unicorn-53479.exe (PID: 1012)
- Unicorn-23983.exe (PID: 7752)
- Unicorn-36811.exe (PID: 6228)
- Unicorn-53318.exe (PID: 7604)
- Unicorn-45591.exe (PID: 8096)
- Unicorn-57615.exe (PID: 7724)
- Unicorn-27469.exe (PID: 8260)
- Unicorn-37143.exe (PID: 1040)
- Unicorn-44989.exe (PID: 5436)
- Unicorn-36213.exe (PID: 6632)
- Unicorn-15548.exe (PID: 7276)
- Unicorn-4574.exe (PID: 8224)
- Unicorn-24973.exe (PID: 7928)
- Unicorn-41340.exe (PID: 7884)
- Unicorn-45607.exe (PID: 8232)
- Unicorn-18415.exe (PID: 668)
- Unicorn-47911.exe (PID: 8284)
- Unicorn-33997.exe (PID: 4464)
- Unicorn-46598.exe (PID: 2420)
- Unicorn-14238.exe (PID: 8312)
- Unicorn-19413.exe (PID: 8920)
- Unicorn-21981.exe (PID: 8904)
- Unicorn-63015.exe (PID: 8992)
- Unicorn-57070.exe (PID: 6576)
- Unicorn-48741.exe (PID: 1912)
- Unicorn-44847.exe (PID: 8336)
- Unicorn-29973.exe (PID: 8664)
- Unicorn-11245.exe (PID: 8840)
- Unicorn-1261.exe (PID: 8896)
- Unicorn-28821.exe (PID: 8760)
- Unicorn-47470.exe (PID: 7872)
- Unicorn-44463.exe (PID: 8412)
- Unicorn-12366.exe (PID: 8368)
- Unicorn-12942.exe (PID: 8528)
- Unicorn-24981.exe (PID: 8328)
- Unicorn-11813.exe (PID: 7720)
- Unicorn-22219.exe (PID: 8696)
- Unicorn-35645.exe (PID: 6564)
- Unicorn-55572.exe (PID: 5352)
- Unicorn-14670.exe (PID: 8752)
- Unicorn-49766.exe (PID: 8704)
- Unicorn-33311.exe (PID: 8720)
- Unicorn-6885.exe (PID: 8776)
- Unicorn-4068.exe (PID: 1300)
- Unicorn-42175.exe (PID: 9900)
- Unicorn-4541.exe (PID: 9928)
- Unicorn-14525.exe (PID: 9944)
- Unicorn-28438.exe (PID: 8360)
- Unicorn-65511.exe (PID: 7996)
- Unicorn-3684.exe (PID: 7036)
- Unicorn-8484.exe (PID: 8688)
- Unicorn-50830.exe (PID: 8804)
- Unicorn-65215.exe (PID: 8788)
- Unicorn-54359.exe (PID: 8728)
- Unicorn-8088.exe (PID: 8252)
- Unicorn-16253.exe (PID: 9988)
- Unicorn-43695.exe (PID: 9232)
- Unicorn-64167.exe (PID: 9164)
- Unicorn-49071.exe (PID: 8828)
- Unicorn-40623.exe (PID: 9096)
- Unicorn-358.exe (PID: 7972)
- Unicorn-33503.exe (PID: 8680)
- Unicorn-46902.exe (PID: 9252)
- Unicorn-10477.exe (PID: 8744)
- Unicorn-34380.exe (PID: 7664)
- Unicorn-62205.exe (PID: 9352)
- Unicorn-52557.exe (PID: 4776)
- Unicorn-28085.exe (PID: 8672)
- Unicorn-20652.exe (PID: 9360)
- Unicorn-44197.exe (PID: 8004)
- Unicorn-166.exe (PID: 7472)
- Unicorn-26230.exe (PID: 8272)
- Unicorn-42604.exe (PID: 9344)
- Unicorn-9901.exe (PID: 8736)
- Unicorn-41665.exe (PID: 9368)
- Unicorn-62373.exe (PID: 10928)
- Unicorn-45837.exe (PID: 10988)
- Unicorn-38439.exe (PID: 10512)
- Unicorn-55676.exe (PID: 9476)
- Unicorn-5573.exe (PID: 4336)
- Unicorn-36797.exe (PID: 9308)
- Unicorn-64463.exe (PID: 9416)
- Unicorn-49621.exe (PID: 4620)
- Unicorn-8334.exe (PID: 8512)
- Unicorn-11053.exe (PID: 8812)
- Unicorn-6414.exe (PID: 8888)
- Unicorn-2470.exe (PID: 684)
- Unicorn-43156.exe (PID: 8820)
- Unicorn-20436.exe (PID: 4572)
- Unicorn-61215.exe (PID: 12304)
- Unicorn-16860.exe (PID: 9520)
- Unicorn-27655.exe (PID: 9612)
- Unicorn-15661.exe (PID: 9240)
- Unicorn-63238.exe (PID: 9560)
- Unicorn-41775.exe (PID: 960)
- Unicorn-61334.exe (PID: 12360)
- Unicorn-32086.exe (PID: 8768)
- Unicorn-7758.exe (PID: 9064)
- Unicorn-19149.exe (PID: 6392)
- Unicorn-8572.exe (PID: 4268)
- Unicorn-41070.exe (PID: 8052)
- Unicorn-5.exe (PID: 9632)
- Unicorn-63534.exe (PID: 9600)
- Unicorn-47566.exe (PID: 9300)
- Unicorn-8422.exe (PID: 8712)
- Unicorn-17493.exe (PID: 9468)
- Unicorn-48142.exe (PID: 8056)
- Unicorn-33239.exe (PID: 11240)
- Unicorn-14525.exe (PID: 9960)
- Unicorn-35159.exe (PID: 9892)
- Unicorn-26887.exe (PID: 9644)
- Unicorn-14525.exe (PID: 9952)
- Unicorn-63157.exe (PID: 9268)
- Unicorn-25943.exe (PID: 11492)
- Unicorn-34492.exe (PID: 9104)
- Unicorn-28278.exe (PID: 11248)
- Unicorn-14878.exe (PID: 10316)
- Unicorn-32694.exe (PID: 5212)
- Unicorn-11173.exe (PID: 5064)
- Unicorn-25278.exe (PID: 8480)
- Unicorn-44581.exe (PID: 10584)
- Unicorn-37551.exe (PID: 9740)
- Unicorn-49782.exe (PID: 8468)
- Unicorn-34404.exe (PID: 9440)
- Unicorn-31267.exe (PID: 10132)
- Unicorn-48879.exe (PID: 8796)
- Unicorn-26260.exe (PID: 3896)
- Unicorn-23373.exe (PID: 11660)
- Unicorn-58734.exe (PID: 10284)
- Unicorn-1230.exe (PID: 9456)
- Unicorn-46935.exe (PID: 10416)
- Unicorn-36399.exe (PID: 9772)
- Unicorn-7006.exe (PID: 11032)
- Unicorn-15588.exe (PID: 2344)
- Unicorn-51076.exe (PID: 11384)
- Unicorn-52263.exe (PID: 10224)
- Unicorn-36958.exe (PID: 17168)
- Unicorn-32943.exe (PID: 9376)
- Unicorn-40885.exe (PID: 13916)
- Unicorn-5022.exe (PID: 15732)
- Unicorn-16485.exe (PID: 15752)
- Unicorn-36958.exe (PID: 17148)
- Unicorn-47271.exe (PID: 11148)
- Unicorn-29771.exe (PID: 17136)
- Unicorn-14036.exe (PID: 10016)
- Unicorn-4526.exe (PID: 12912)
- Unicorn-31463.exe (PID: 10484)
- Unicorn-31063.exe (PID: 14008)
- Unicorn-60373.exe (PID: 12112)
- Unicorn-6589.exe (PID: 13228)
- Unicorn-32309.exe (PID: 10604)
- Unicorn-22029.exe (PID: 11412)
- Unicorn-35855.exe (PID: 12708)
- Unicorn-15892.exe (PID: 7580)
- Unicorn-1957.exe (PID: 12412)
- Unicorn-12413.exe (PID: 10576)
- Unicorn-19887.exe (PID: 10640)
- Unicorn-16188.exe (PID: 13880)
- Unicorn-12844.exe (PID: 12024)
- Unicorn-61301.exe (PID: 9292)
- Unicorn-14892.exe (PID: 9724)
- Unicorn-38615.exe (PID: 10400)
- Unicorn-5677.exe (PID: 9528)
- Unicorn-19316.exe (PID: 10672)
- Unicorn-60675.exe (PID: 11104)
- Unicorn-55982.exe (PID: 13088)
- Unicorn-49239.exe (PID: 9396)
- Unicorn-30966.exe (PID: 9980)
- Unicorn-40117.exe (PID: 14540)
- Unicorn-31895.exe (PID: 11076)
- Unicorn-19519.exe (PID: 12716)
- Unicorn-22108.exe (PID: 1312)
- Unicorn-51438.exe (PID: 2148)
- Unicorn-40788.exe (PID: 10176)
- Unicorn-22959.exe (PID: 11284)
- Unicorn-13861.exe (PID: 11452)
- Unicorn-8893.exe (PID: 13348)
- Unicorn-47581.exe (PID: 13764)
- Unicorn-972.exe (PID: 11988)
- Unicorn-16533.exe (PID: 9764)
- Unicorn-56103.exe (PID: 10356)
- Unicorn-61711.exe (PID: 13180)
- Unicorn-27214.exe (PID: 11720)
- Unicorn-18439.exe (PID: 9856)
- Unicorn-19684.exe (PID: 9800)
- Unicorn-54545.exe (PID: 11096)
- Unicorn-60447.exe (PID: 12184)
- Unicorn-24908.exe (PID: 5736)
- Unicorn-47831.exe (PID: 9172)
- Unicorn-9637.exe (PID: 12004)
- Unicorn-42662.exe (PID: 9316)
- Unicorn-5573.exe (PID: 968)
- Unicorn-45806.exe (PID: 15484)
- Unicorn-10213.exe (PID: 11064)
- Unicorn-37372.exe (PID: 15376)
- Unicorn-19991.exe (PID: 7364)
- Unicorn-38631.exe (PID: 5020)
- Unicorn-7918.exe (PID: 16832)
- Unicorn-47628.exe (PID: 11960)
- Unicorn-30255.exe (PID: 10376)
- Unicorn-60757.exe (PID: 11940)
- Unicorn-33111.exe (PID: 664)
- Unicorn-26940.exe (PID: 13692)
- Unicorn-45927.exe (PID: 10844)
- Unicorn-5140.exe (PID: 15596)
- Unicorn-61053.exe (PID: 12568)
- Unicorn-57902.exe (PID: 13328)
- Unicorn-29348.exe (PID: 14556)
- Unicorn-5790.exe (PID: 14076)
- Unicorn-29999.exe (PID: 13304)
Executes application which crashes
- Unicorn-63494.exe (PID: 2152)
- Unicorn-29279.exe (PID: 8516)
- Unicorn-29575.exe (PID: 9756)
INFO
Reads the computer name
- 1 (1141).exe (PID: 7428)
- Unicorn-61366.exe (PID: 7784)
- Unicorn-36150.exe (PID: 8148)
- Unicorn-45046.exe (PID: 7220)
- Unicorn-50863.exe (PID: 8136)
- Unicorn-676.exe (PID: 7228)
- Unicorn-47023.exe (PID: 2340)
- Unicorn-54869.exe (PID: 5048)
- Unicorn-11396.exe (PID: 5112)
- Unicorn-17527.exe (PID: 300)
- Unicorn-20319.exe (PID: 6300)
- Unicorn-14188.exe (PID: 5428)
- Unicorn-19996.exe (PID: 7352)
- Unicorn-61351.exe (PID: 7336)
- Unicorn-61159.exe (PID: 1760)
- Unicorn-61086.exe (PID: 7312)
- Unicorn-25119.exe (PID: 7424)
- Unicorn-46094.exe (PID: 6248)
- Unicorn-14027.exe (PID: 7180)
- Unicorn-20629.exe (PID: 5304)
- Unicorn-43510.exe (PID: 6972)
- Unicorn-24572.exe (PID: 4452)
- Unicorn-27496.exe (PID: 6944)
- Unicorn-6753.exe (PID: 6240)
- Unicorn-63183.exe (PID: 4040)
- Unicorn-10837.exe (PID: 5728)
- Unicorn-58663.exe (PID: 2432)
- Unicorn-91.exe (PID: 7316)
- Unicorn-32903.exe (PID: 2568)
- Unicorn-63494.exe (PID: 2152)
- Unicorn-57511.exe (PID: 6712)
- Unicorn-60910.exe (PID: 5392)
- Unicorn-41294.exe (PID: 1088)
- Unicorn-334.exe (PID: 2236)
- Unicorn-39949.exe (PID: 5936)
- Unicorn-49063.exe (PID: 744)
- Unicorn-63214.exe (PID: 5024)
- Unicorn-59326.exe (PID: 8092)
- Unicorn-26420.exe (PID: 2392)
- Unicorn-10334.exe (PID: 7196)
- Unicorn-18429.exe (PID: 632)
- Unicorn-55740.exe (PID: 720)
- Unicorn-18638.exe (PID: 7708)
- Unicorn-26759.exe (PID: 7448)
- Unicorn-46656.exe (PID: 7628)
- Unicorn-6669.exe (PID: 7668)
- Unicorn-53479.exe (PID: 1012)
- Unicorn-2175.exe (PID: 7904)
- Unicorn-25623.exe (PID: 660)
- Unicorn-50511.exe (PID: 5324)
- Unicorn-57615.exe (PID: 7724)
- Unicorn-23983.exe (PID: 7752)
- Unicorn-26349.exe (PID: 7484)
- Unicorn-53318.exe (PID: 7604)
- Unicorn-37143.exe (PID: 1040)
- Unicorn-44989.exe (PID: 5436)
- Unicorn-15548.exe (PID: 7276)
- Unicorn-33111.exe (PID: 664)
- Unicorn-4574.exe (PID: 8224)
- Unicorn-49782.exe (PID: 8468)
- Unicorn-14238.exe (PID: 8312)
- Unicorn-24973.exe (PID: 7928)
- Unicorn-33997.exe (PID: 4464)
- Unicorn-19413.exe (PID: 8920)
- Unicorn-63015.exe (PID: 8992)
- Unicorn-44847.exe (PID: 8336)
- Unicorn-48741.exe (PID: 1912)
- Unicorn-57070.exe (PID: 6576)
- Unicorn-29973.exe (PID: 8664)
- Unicorn-11245.exe (PID: 8840)
- Unicorn-12366.exe (PID: 8368)
- Unicorn-44463.exe (PID: 8412)
- Unicorn-24981.exe (PID: 8328)
- Unicorn-22219.exe (PID: 8696)
- Unicorn-12942.exe (PID: 8528)
- Unicorn-35645.exe (PID: 6564)
- Unicorn-64167.exe (PID: 9164)
- Unicorn-4068.exe (PID: 1300)
- Unicorn-33311.exe (PID: 8720)
- Unicorn-48814.exe (PID: 7012)
- Unicorn-34380.exe (PID: 7664)
- Unicorn-28438.exe (PID: 8360)
- Unicorn-54359.exe (PID: 8728)
- Unicorn-10477.exe (PID: 8744)
- Unicorn-16253.exe (PID: 9988)
- Unicorn-43695.exe (PID: 9232)
- Unicorn-40623.exe (PID: 9096)
- Unicorn-52557.exe (PID: 4776)
- Unicorn-20652.exe (PID: 9360)
- Unicorn-42604.exe (PID: 9344)
- Unicorn-41665.exe (PID: 9368)
- Unicorn-8422.exe (PID: 8712)
- Unicorn-38439.exe (PID: 10512)
- Unicorn-45837.exe (PID: 10988)
- Unicorn-55676.exe (PID: 9476)
- Unicorn-49621.exe (PID: 4620)
- Unicorn-5573.exe (PID: 4336)
- Unicorn-63157.exe (PID: 9268)
- Unicorn-36797.exe (PID: 9308)
- Unicorn-32086.exe (PID: 8768)
- Unicorn-43156.exe (PID: 8820)
- Unicorn-64463.exe (PID: 9416)
- Unicorn-8334.exe (PID: 8512)
- Unicorn-8572.exe (PID: 4268)
- Unicorn-41070.exe (PID: 8052)
- Unicorn-41775.exe (PID: 960)
- Unicorn-7758.exe (PID: 9064)
- Unicorn-34404.exe (PID: 9440)
- Unicorn-26887.exe (PID: 9644)
- Unicorn-25943.exe (PID: 11492)
- Unicorn-44581.exe (PID: 10584)
- Unicorn-16188.exe (PID: 13880)
- Unicorn-11173.exe (PID: 5064)
- Unicorn-31267.exe (PID: 10132)
- Unicorn-48879.exe (PID: 8796)
- Unicorn-31463.exe (PID: 10484)
- Unicorn-54545.exe (PID: 11096)
- Unicorn-60675.exe (PID: 11104)
- Unicorn-19684.exe (PID: 9800)
- Unicorn-36399.exe (PID: 9772)
- Unicorn-47271.exe (PID: 11148)
- Unicorn-42662.exe (PID: 9316)
- Unicorn-1230.exe (PID: 9456)
- Unicorn-32131.exe (PID: 9656)
- Unicorn-9637.exe (PID: 12004)
- Unicorn-61301.exe (PID: 9292)
- Unicorn-25174.exe (PID: 2152)
- Unicorn-30255.exe (PID: 10376)
- Unicorn-30966.exe (PID: 9980)
- Unicorn-11173.exe (PID: 976)
- Unicorn-11173.exe (PID: 2968)
Checks supported languages
- 1 (1141).exe (PID: 7428)
- Unicorn-61366.exe (PID: 7784)
- Unicorn-50863.exe (PID: 8136)
- Unicorn-36150.exe (PID: 8148)
- Unicorn-11396.exe (PID: 5112)
- Unicorn-45046.exe (PID: 7220)
- Unicorn-676.exe (PID: 7228)
- Unicorn-17527.exe (PID: 300)
- Unicorn-54869.exe (PID: 5048)
- Unicorn-47023.exe (PID: 2340)
- Unicorn-61159.exe (PID: 1760)
- Unicorn-20319.exe (PID: 6300)
- Unicorn-61351.exe (PID: 7336)
- Unicorn-19996.exe (PID: 7352)
- Unicorn-46094.exe (PID: 6248)
- Unicorn-25119.exe (PID: 7424)
- Unicorn-14027.exe (PID: 7180)
- Unicorn-14188.exe (PID: 5428)
- Unicorn-61086.exe (PID: 7312)
- Unicorn-43510.exe (PID: 6972)
- Unicorn-20629.exe (PID: 5304)
- Unicorn-63183.exe (PID: 4040)
- Unicorn-24572.exe (PID: 4452)
- Unicorn-63494.exe (PID: 2152)
- Unicorn-10837.exe (PID: 5728)
- Unicorn-6753.exe (PID: 6240)
- Unicorn-5387.exe (PID: 4696)
- Unicorn-60910.exe (PID: 5392)
- Unicorn-334.exe (PID: 2236)
- Unicorn-41294.exe (PID: 1088)
- Unicorn-39949.exe (PID: 5936)
- Unicorn-55740.exe (PID: 720)
- Unicorn-53894.exe (PID: 6040)
- Unicorn-26420.exe (PID: 2392)
- Unicorn-14869.exe (PID: 5868)
- Unicorn-26759.exe (PID: 7448)
- Unicorn-63214.exe (PID: 5024)
- Unicorn-49063.exe (PID: 744)
- Unicorn-62062.exe (PID: 4212)
- Unicorn-49125.exe (PID: 7652)
- Unicorn-18638.exe (PID: 7708)
- Unicorn-26349.exe (PID: 7484)
- Unicorn-15430.exe (PID: 7460)
- Unicorn-46656.exe (PID: 7628)
- Unicorn-23983.exe (PID: 7752)
- Unicorn-6669.exe (PID: 7668)
- Unicorn-34380.exe (PID: 7664)
- Unicorn-11813.exe (PID: 7720)
- Unicorn-59326.exe (PID: 8092)
- Unicorn-2175.exe (PID: 7904)
- Unicorn-45591.exe (PID: 8096)
- Unicorn-18429.exe (PID: 632)
- Unicorn-32980.exe (PID: 6824)
- Unicorn-55150.exe (PID: 4920)
- Unicorn-10334.exe (PID: 7196)
- Unicorn-33997.exe (PID: 4464)
- Unicorn-44989.exe (PID: 5436)
- Unicorn-53479.exe (PID: 1012)
- Unicorn-36811.exe (PID: 6228)
- Unicorn-36213.exe (PID: 6632)
- Unicorn-36951.exe (PID: 5720)
- Unicorn-47470.exe (PID: 7872)
- Unicorn-41340.exe (PID: 7884)
- Unicorn-24973.exe (PID: 7928)
- Unicorn-18415.exe (PID: 668)
- Unicorn-48741.exe (PID: 1912)
- Unicorn-15548.exe (PID: 7276)
- Unicorn-48814.exe (PID: 7012)
- Unicorn-8088.exe (PID: 8252)
- Unicorn-26230.exe (PID: 8272)
- Unicorn-47911.exe (PID: 8284)
- Unicorn-14238.exe (PID: 8312)
- Unicorn-4574.exe (PID: 8224)
- Unicorn-24981.exe (PID: 8328)
- Unicorn-44463.exe (PID: 8412)
- Unicorn-49782.exe (PID: 8468)
- Unicorn-44847.exe (PID: 8336)
- Unicorn-25278.exe (PID: 8480)
- Unicorn-12942.exe (PID: 8528)
- Unicorn-29279.exe (PID: 8516)
- Unicorn-29973.exe (PID: 8664)
- Unicorn-49766.exe (PID: 8704)
- Unicorn-33311.exe (PID: 8720)
- Unicorn-8422.exe (PID: 8712)
- Unicorn-10477.exe (PID: 8744)
- Unicorn-9901.exe (PID: 8736)
- Unicorn-32086.exe (PID: 8768)
- Unicorn-14670.exe (PID: 8752)
- Unicorn-21981.exe (PID: 8904)
- Unicorn-19413.exe (PID: 8920)
- Unicorn-33503.exe (PID: 8680)
- Unicorn-22219.exe (PID: 8696)
- Unicorn-7758.exe (PID: 9064)
- Unicorn-65215.exe (PID: 8788)
- Unicorn-48879.exe (PID: 8796)
- Unicorn-50830.exe (PID: 8804)
- Unicorn-6414.exe (PID: 8888)
- Unicorn-40623.exe (PID: 9096)
- Unicorn-64167.exe (PID: 9164)
- Unicorn-47831.exe (PID: 9172)
- Unicorn-35645.exe (PID: 6564)
- Unicorn-41775.exe (PID: 960)
- Unicorn-5573.exe (PID: 968)
- Unicorn-44197.exe (PID: 8004)
- Unicorn-4068.exe (PID: 1300)
- Unicorn-3684.exe (PID: 7036)
- Unicorn-49621.exe (PID: 4620)
- Unicorn-166.exe (PID: 7472)
- Unicorn-358.exe (PID: 7972)
- Unicorn-25247.exe (PID: 8028)
- Unicorn-55572.exe (PID: 5352)
- Unicorn-52557.exe (PID: 4776)
- Unicorn-8334.exe (PID: 8512)
- Unicorn-63157.exe (PID: 9268)
- Unicorn-61301.exe (PID: 9292)
- Unicorn-25174.exe (PID: 2152)
- Unicorn-48142.exe (PID: 8056)
- Unicorn-46902.exe (PID: 9252)
- Unicorn-42604.exe (PID: 9344)
- Unicorn-32943.exe (PID: 9376)
- Unicorn-1230.exe (PID: 9456)
- Unicorn-17493.exe (PID: 9468)
- Unicorn-55676.exe (PID: 9476)
- Unicorn-49239.exe (PID: 9396)
- Unicorn-34404.exe (PID: 9440)
- Unicorn-46326.exe (PID: 9512)
- Unicorn-4541.exe (PID: 9928)
- Unicorn-16860.exe (PID: 9520)
- Unicorn-14525.exe (PID: 9944)
- Unicorn-63238.exe (PID: 9560)
- Unicorn-5677.exe (PID: 9528)
- Unicorn-42175.exe (PID: 9900)
- Unicorn-32131.exe (PID: 9656)
- Unicorn-37551.exe (PID: 9740)
- Unicorn-63534.exe (PID: 9600)
- Unicorn-5.exe (PID: 9632)
- Unicorn-26887.exe (PID: 9644)
- Unicorn-36399.exe (PID: 9772)
- Unicorn-16533.exe (PID: 9764)
- Unicorn-26415.exe (PID: 9836)
- Unicorn-18439.exe (PID: 9856)
- Unicorn-31437.exe (PID: 9868)
- Unicorn-35159.exe (PID: 9892)
- Unicorn-30966.exe (PID: 9980)
- Unicorn-14036.exe (PID: 10016)
- Unicorn-14525.exe (PID: 9952)
- Unicorn-14525.exe (PID: 9960)
- Unicorn-1261.exe (PID: 8896)
- Unicorn-40788.exe (PID: 10176)
- Unicorn-27052.exe (PID: 10184)
- Unicorn-14892.exe (PID: 9724)
- Unicorn-15974.exe (PID: 10256)
- Unicorn-52263.exe (PID: 10224)
- Unicorn-32694.exe (PID: 5212)
- Unicorn-14878.exe (PID: 10316)
- Unicorn-54545.exe (PID: 11096)
- Unicorn-45837.exe (PID: 10988)
- Unicorn-62373.exe (PID: 10928)
- Unicorn-28278.exe (PID: 11248)
- Unicorn-56103.exe (PID: 10356)
- Unicorn-38615.exe (PID: 10400)
- Unicorn-38631.exe (PID: 5020)
- Unicorn-50653.exe (PID: 7940)
- Unicorn-10213.exe (PID: 11064)
- Unicorn-45927.exe (PID: 10844)
- Unicorn-21807.exe (PID: 10688)
- Unicorn-19316.exe (PID: 10672)
- Unicorn-46757.exe (PID: 10612)
- Unicorn-44126.exe (PID: 10628)
- Unicorn-31463.exe (PID: 10484)
- Unicorn-24303.exe (PID: 5136)
- Unicorn-24700.exe (PID: 10428)
- Unicorn-19149.exe (PID: 6392)
- Unicorn-44581.exe (PID: 10584)
- Unicorn-12413.exe (PID: 10576)
- Unicorn-45351.exe (PID: 10564)
- Unicorn-8572.exe (PID: 4268)
- Unicorn-4901.exe (PID: 10896)
- Unicorn-22108.exe (PID: 1312)
- Unicorn-62373.exe (PID: 10808)
- Unicorn-15588.exe (PID: 2344)
- Unicorn-40477.exe (PID: 10468)
- Unicorn-51438.exe (PID: 2148)
- Unicorn-22959.exe (PID: 11284)
- Unicorn-14510.exe (PID: 5056)
- Unicorn-41070.exe (PID: 8052)
- Unicorn-65247.exe (PID: 11300)
- Unicorn-41895.exe (PID: 11420)
- Unicorn-22029.exe (PID: 11412)
- Unicorn-13861.exe (PID: 11452)
- Unicorn-7884.exe (PID: 11544)
- Unicorn-16549.exe (PID: 11600)
- Unicorn-37109.exe (PID: 11640)
- Unicorn-23373.exe (PID: 11652)
- Unicorn-31157.exe (PID: 11756)
- Unicorn-61805.exe (PID: 11684)
- Unicorn-21069.exe (PID: 11508)
- Unicorn-26356.exe (PID: 11816)
- Unicorn-26356.exe (PID: 11832)
- Unicorn-10924.exe (PID: 11848)
- Unicorn-64214.exe (PID: 11792)
- Unicorn-47628.exe (PID: 11960)
- Unicorn-3772.exe (PID: 11972)
- Unicorn-32871.exe (PID: 11860)
- Unicorn-9637.exe (PID: 12004)
- Unicorn-14453.exe (PID: 12208)
- Unicorn-42959.exe (PID: 12244)
- Unicorn-62486.exe (PID: 11552)
- Unicorn-62486.exe (PID: 11568)
- Unicorn-37095.exe (PID: 8076)
- Unicorn-42493.exe (PID: 12432)
- Unicorn-55486.exe (PID: 12552)
- Unicorn-46076.exe (PID: 12696)
- Unicorn-52637.exe (PID: 12644)
- Unicorn-26356.exe (PID: 11840)
- Unicorn-35855.exe (PID: 12708)
- Unicorn-42605.exe (PID: 12764)
- Unicorn-9814.exe (PID: 12560)
- Unicorn-61053.exe (PID: 12568)
- Unicorn-4526.exe (PID: 12912)
- Unicorn-33477.exe (PID: 12872)
- Unicorn-28837.exe (PID: 12780)
- Unicorn-35118.exe (PID: 11872)
- Unicorn-55214.exe (PID: 13196)
- Unicorn-6589.exe (PID: 13228)
- Unicorn-15892.exe (PID: 13320)
- Unicorn-9972.exe (PID: 13504)
- Unicorn-39188.exe (PID: 13464)
- Unicorn-39511.exe (PID: 13668)
- Unicorn-5790.exe (PID: 14076)
- Unicorn-26364.exe (PID: 13828)
- Unicorn-24815.exe (PID: 14404)
- Unicorn-756.exe (PID: 13960)
- Unicorn-31063.exe (PID: 14008)
- Unicorn-20547.exe (PID: 14296)
- Unicorn-24431.exe (PID: 14184)
- Unicorn-27949.exe (PID: 14460)
- Unicorn-28301.exe (PID: 14280)
- Unicorn-19991.exe (PID: 7364)
- Unicorn-36470.exe (PID: 13704)
- Unicorn-60974.exe (PID: 14264)
- Unicorn-19173.exe (PID: 13992)
- Unicorn-17791.exe (PID: 12588)
- Unicorn-14622.exe (PID: 13608)
- Unicorn-45951.exe (PID: 13412)
- Unicorn-15879.exe (PID: 14144)
- Unicorn-42037.exe (PID: 14288)
- Unicorn-40117.exe (PID: 14540)
- Unicorn-56973.exe (PID: 14372)
- Unicorn-46439.exe (PID: 14060)
- Unicorn-20429.exe (PID: 8160)
- Unicorn-43310.exe (PID: 7236)
- Unicorn-43310.exe (PID: 12396)
- Unicorn-19956.exe (PID: 15400)
- Unicorn-17844.exe (PID: 13820)
- Unicorn-50397.exe (PID: 14100)
- Unicorn-52317.exe (PID: 4884)
- Unicorn-43310.exe (PID: 13648)
- Unicorn-20404.exe (PID: 15704)
- Unicorn-29348.exe (PID: 14556)
- Unicorn-5022.exe (PID: 15732)
- Unicorn-29667.exe (PID: 15560)
- Unicorn-32303.exe (PID: 13800)
- Unicorn-5140.exe (PID: 15596)
- Unicorn-18732.exe (PID: 15584)
- Unicorn-15406.exe (PID: 15320)
- Unicorn-28245.exe (PID: 15532)
- Unicorn-38333.exe (PID: 15552)
- Unicorn-3221.exe (PID: 15612)
- Unicorn-37372.exe (PID: 15376)
- Unicorn-45806.exe (PID: 15484)
- Unicorn-32516.exe (PID: 15500)
- Unicorn-35317.exe (PID: 15508)
- Unicorn-18381.exe (PID: 15688)
- Unicorn-2718.exe (PID: 15668)
- Unicorn-47133.exe (PID: 15952)
- Unicorn-7741.exe (PID: 15888)
- Unicorn-3486.exe (PID: 15632)
- Unicorn-35317.exe (PID: 15516)
- Unicorn-53694.exe (PID: 16124)
- Unicorn-15437.exe (PID: 16224)
- Unicorn-57430.exe (PID: 16196)
- Unicorn-47133.exe (PID: 15904)
- Unicorn-12276.exe (PID: 15924)
- Unicorn-8997.exe (PID: 16156)
- Unicorn-48338.exe (PID: 16068)
- Unicorn-23798.exe (PID: 15680)
- Unicorn-7741.exe (PID: 15872)
- Unicorn-36958.exe (PID: 17148)
- Unicorn-36958.exe (PID: 17168)
- Unicorn-7918.exe (PID: 16824)
- Unicorn-7918.exe (PID: 16832)
- Unicorn-14036.exe (PID: 16852)
- Unicorn-54860.exe (PID: 15524)
- Unicorn-5156.exe (PID: 16880)
- Unicorn-58462.exe (PID: 16096)
- Unicorn-22366.exe (PID: 16252)
- Unicorn-31611.exe (PID: 15880)
- Unicorn-57710.exe (PID: 16060)
The sample compiled with chinese language support
- 1 (1141).exe (PID: 7428)
Create files in a temporary directory
- 1 (1141).exe (PID: 7428)
- Unicorn-36150.exe (PID: 8148)
- Unicorn-61366.exe (PID: 7784)
- Unicorn-50863.exe (PID: 8136)
- Unicorn-45046.exe (PID: 7220)
- Unicorn-676.exe (PID: 7228)
- Unicorn-17527.exe (PID: 300)
- Unicorn-47023.exe (PID: 2340)
- Unicorn-54869.exe (PID: 5048)
- Unicorn-61086.exe (PID: 7312)
- Unicorn-61159.exe (PID: 1760)
- Unicorn-11396.exe (PID: 5112)
- Unicorn-3437.exe (PID: 4880)
- Unicorn-46094.exe (PID: 6248)
- Unicorn-14027.exe (PID: 7180)
- Unicorn-19996.exe (PID: 7352)
- Unicorn-43510.exe (PID: 6972)
- Unicorn-20319.exe (PID: 6300)
- Unicorn-14188.exe (PID: 5428)
- Unicorn-32903.exe (PID: 2568)
- Unicorn-61351.exe (PID: 7336)
- Unicorn-54750.exe (PID: 4736)
- Unicorn-63183.exe (PID: 4040)
- Unicorn-24572.exe (PID: 4452)
- Unicorn-58663.exe (PID: 2432)
- Unicorn-57511.exe (PID: 6712)
- Unicorn-41294.exe (PID: 1088)
- Unicorn-334.exe (PID: 2236)
- Unicorn-25119.exe (PID: 7424)
- Unicorn-5387.exe (PID: 4696)
- Unicorn-29669.exe (PID: 6372)
- Unicorn-20629.exe (PID: 5304)
- Unicorn-63214.exe (PID: 5024)
- Unicorn-62062.exe (PID: 4212)
- Unicorn-14869.exe (PID: 5868)
- Unicorn-53894.exe (PID: 6040)
- Unicorn-26420.exe (PID: 2392)
- Unicorn-55740.exe (PID: 720)
- Unicorn-18429.exe (PID: 632)
- Unicorn-10334.exe (PID: 7196)
- Unicorn-18638.exe (PID: 7708)
- Unicorn-26759.exe (PID: 7448)
- Unicorn-6669.exe (PID: 7668)
- Unicorn-15430.exe (PID: 7460)
- Unicorn-46656.exe (PID: 7628)
- Unicorn-91.exe (PID: 7316)
- Unicorn-55150.exe (PID: 4920)
- Unicorn-53479.exe (PID: 1012)
- Unicorn-26435.exe (PID: 2040)
- Unicorn-49125.exe (PID: 7652)
- Unicorn-2175.exe (PID: 7904)
- Unicorn-25623.exe (PID: 660)
- Unicorn-32980.exe (PID: 6824)
- Unicorn-50511.exe (PID: 5324)
- Unicorn-26349.exe (PID: 7484)
- Unicorn-45591.exe (PID: 8096)
- Unicorn-57615.exe (PID: 7724)
- Unicorn-53318.exe (PID: 7604)
- Unicorn-36811.exe (PID: 6228)
- Unicorn-6753.exe (PID: 6240)
- Unicorn-37143.exe (PID: 1040)
- Unicorn-47911.exe (PID: 8284)
- Unicorn-27469.exe (PID: 8260)
- Unicorn-4574.exe (PID: 8224)
- Unicorn-45607.exe (PID: 8232)
- Unicorn-10837.exe (PID: 5728)
- Unicorn-33997.exe (PID: 4464)
- Unicorn-18415.exe (PID: 668)
- Unicorn-21981.exe (PID: 8904)
- Unicorn-19413.exe (PID: 8920)
- Unicorn-15548.exe (PID: 7276)
- Unicorn-27496.exe (PID: 6944)
- Unicorn-24973.exe (PID: 7928)
- Unicorn-63015.exe (PID: 8992)
- Unicorn-44847.exe (PID: 8336)
- Unicorn-57070.exe (PID: 6576)
- Unicorn-1261.exe (PID: 8896)
- Unicorn-11245.exe (PID: 8840)
- Unicorn-59326.exe (PID: 8092)
- Unicorn-36951.exe (PID: 5720)
- Unicorn-28821.exe (PID: 8760)
- Unicorn-12366.exe (PID: 8368)
- Unicorn-12942.exe (PID: 8528)
- Unicorn-49063.exe (PID: 744)
- Unicorn-24981.exe (PID: 8328)
- Unicorn-60910.exe (PID: 5392)
- Unicorn-11813.exe (PID: 7720)
- Unicorn-22219.exe (PID: 8696)
- Unicorn-35645.exe (PID: 6564)
- Unicorn-23983.exe (PID: 7752)
- Unicorn-14670.exe (PID: 8752)
- Unicorn-39949.exe (PID: 5936)
- Unicorn-49766.exe (PID: 8704)
- Unicorn-33311.exe (PID: 8720)
- Unicorn-6885.exe (PID: 8776)
- Unicorn-28438.exe (PID: 8360)
- Unicorn-14525.exe (PID: 9944)
- Unicorn-65511.exe (PID: 7996)
- Unicorn-8484.exe (PID: 8688)
- Unicorn-50830.exe (PID: 8804)
- Unicorn-65215.exe (PID: 8788)
- Unicorn-3684.exe (PID: 7036)
- Unicorn-54359.exe (PID: 8728)
- Unicorn-8088.exe (PID: 8252)
- Unicorn-16253.exe (PID: 9988)
- Unicorn-44463.exe (PID: 8412)
- Unicorn-49071.exe (PID: 8828)
- Unicorn-64167.exe (PID: 9164)
- Unicorn-358.exe (PID: 7972)
- Unicorn-46902.exe (PID: 9252)
- Unicorn-52557.exe (PID: 4776)
- Unicorn-46598.exe (PID: 2420)
- Unicorn-28085.exe (PID: 8672)
- Unicorn-62205.exe (PID: 9352)
- Unicorn-41340.exe (PID: 7884)
- Unicorn-36213.exe (PID: 6632)
- Unicorn-44989.exe (PID: 5436)
- Unicorn-26230.exe (PID: 8272)
- Unicorn-44197.exe (PID: 8004)
- Unicorn-42604.exe (PID: 9344)
- Unicorn-14238.exe (PID: 8312)
- Unicorn-41665.exe (PID: 9368)
- Unicorn-62373.exe (PID: 10928)
- Unicorn-45837.exe (PID: 10988)
- Unicorn-55676.exe (PID: 9476)
- Unicorn-34492.exe (PID: 9104)
- Unicorn-5573.exe (PID: 4336)
- Unicorn-64463.exe (PID: 9416)
- Unicorn-48741.exe (PID: 1912)
- Unicorn-11053.exe (PID: 8812)
- Unicorn-2470.exe (PID: 684)
- Unicorn-16860.exe (PID: 9520)
- Unicorn-42175.exe (PID: 9900)
- Unicorn-61215.exe (PID: 12304)
- Unicorn-27655.exe (PID: 9612)
- Unicorn-41775.exe (PID: 960)
- Unicorn-29973.exe (PID: 8664)
- Unicorn-19149.exe (PID: 6392)
- Unicorn-8572.exe (PID: 4268)
- Unicorn-5.exe (PID: 9632)
- Unicorn-48142.exe (PID: 8056)
- Unicorn-47566.exe (PID: 9300)
- Unicorn-8422.exe (PID: 8712)
- Unicorn-33239.exe (PID: 11240)
- Unicorn-40623.exe (PID: 9096)
- Unicorn-28278.exe (PID: 11248)
- Unicorn-63157.exe (PID: 9268)
- Unicorn-55572.exe (PID: 5352)
- Unicorn-4068.exe (PID: 1300)
- Unicorn-12799.exe (PID: 7716)
- Unicorn-14878.exe (PID: 10316)
- Unicorn-38439.exe (PID: 10512)
- Unicorn-34380.exe (PID: 7664)
- Unicorn-20436.exe (PID: 4572)
- Unicorn-49621.exe (PID: 4620)
- Unicorn-49782.exe (PID: 8468)
- Unicorn-48879.exe (PID: 8796)
- Unicorn-23373.exe (PID: 11660)
- Unicorn-58734.exe (PID: 10284)
- Unicorn-1230.exe (PID: 9456)
- Unicorn-36399.exe (PID: 9772)
- Unicorn-7006.exe (PID: 11032)
Creates files or folders in the user directory
- WerFault.exe (PID: 8188)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
680
Monitored processes
544
Malicious processes
80
Suspicious processes
75
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 300 | C:\Users\admin\AppData\Local\Temp\Unicorn-17527.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-17527.exe | Unicorn-36150.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 632 | C:\Users\admin\AppData\Local\Temp\Unicorn-18429.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-18429.exe | Unicorn-45046.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 660 | C:\Users\admin\AppData\Local\Temp\Unicorn-25623.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-25623.exe | Unicorn-62062.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 664 | C:\Users\admin\AppData\Local\Temp\Unicorn-33111.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-33111.exe | Unicorn-24572.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 668 | C:\Users\admin\AppData\Local\Temp\Unicorn-18415.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-18415.exe | Unicorn-63214.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 684 | C:\Users\admin\AppData\Local\Temp\Unicorn-2470.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2470.exe | Unicorn-14238.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 720 | C:\Users\admin\AppData\Local\Temp\Unicorn-55740.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-55740.exe | Unicorn-11396.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 744 | C:\Users\admin\AppData\Local\Temp\Unicorn-49063.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-49063.exe | Unicorn-32903.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 960 | C:\Users\admin\AppData\Local\Temp\Unicorn-41775.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-41775.exe | Unicorn-47911.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 968 | C:\Users\admin\AppData\Local\Temp\Unicorn-5573.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-5573.exe | Unicorn-334.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
Total events
15 572
Read events
15 572
Write events
0
Delete events
0
Modification events
Executable files
722
Suspicious files
21
Text files
4
Unknown types
1
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7428 | 1 (1141).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-61366.exe | executable | |
MD5:AF96FCC5AE906FA81028EB1C5DC90582 | SHA256:834EE513C4B4A456D39918EE10E86C520AEFB8A97342E4557C965F75F41E7DB8 | |||
| 8136 | Unicorn-50863.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-45046.exe | executable | |
MD5:A45DBC92188CEBF93935B5DC4CBF529A | SHA256:6D74579C5C7EA54EFC3F6C317767A5317B0DDDD3D9D01822B3A58528EE40A8F0 | |||
| 7784 | Unicorn-61366.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-50863.exe | executable | |
MD5:AE67186FAB4A7F0A5A6D9BB990F872B9 | SHA256:02AA604F5F594D51D60912EB9AFC3326AA97EA926D61B497107479FF5458C3BB | |||
| 7428 | 1 (1141).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-36150.exe | executable | |
MD5:18F86D275EF797CFD614A8E111A62CDD | SHA256:02870981582FD5FFCAE546106AA5707D72A20CD1954034DCF59CE9854136A571 | |||
| 8136 | Unicorn-50863.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-54869.exe | executable | |
MD5:886F7D8B7289311BAFDE0CD38C8FDC61 | SHA256:3E9558D2E4496E9C3B5829D23AAFBE5731A0D61E10D10E56C6D5596138C21613 | |||
| 5112 | Unicorn-11396.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-20319.exe | executable | |
MD5:5C072D74471004058003D897C0A003A0 | SHA256:1038C8851AAF01F471C975F92BF4FF97EBE8FDC03891527B04DF5EBFFD6987CD | |||
| 7220 | Unicorn-45046.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-47023.exe | executable | |
MD5:A407B939A990CA4CEB18DDD4CFB55A6E | SHA256:7DE6F4DFDCD8441637D633604D23F206AF27A9D359B13321E1EC025A53B22B4C | |||
| 7428 | 1 (1141).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-61086.exe | executable | |
MD5:E13CD494DEB486226AD362947D2B20F3 | SHA256:90418F6D419A0D4D7DE036F1107E7A6ED6D2B249D722DA45AB81FE3C054EE976 | |||
| 8148 | Unicorn-36150.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-19996.exe | executable | |
MD5:5552AC147565598248AECFE5F1FB96A6 | SHA256:A56B70E2132428BEE7C2DC3364C0B3F19022D9F9DB798473F65B7015490FB4CD | |||
| 7784 | Unicorn-61366.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-14188.exe | executable | |
MD5:1E2D30C62BCD6771740FD098AA31D0B1 | SHA256:D93EC27E874958CBD1B3E7DD4B163E57CD68CAD8F1AADF8508ABACEDBC024A0E | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
26
DNS requests
19
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
7816 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
5352 | SIHClient.exe | GET | 200 | 2.23.246.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
5352 | SIHClient.exe | GET | 200 | 2.23.246.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
3284 | svchost.exe | GET | 200 | 2.16.164.11:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
3284 | svchost.exe | GET | 200 | 2.23.246.101:80 | http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
2104 | svchost.exe | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
2112 | svchost.exe | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
3216 | svchost.exe | 40.113.110.67:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 40.126.32.140:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
7816 | backgroundTaskHost.exe | 20.223.35.26:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
7816 | backgroundTaskHost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |
watson.events.data.microsoft.com |
| whitelisted |