File name:

1 (1330)

Full analysis: https://app.any.run/tasks/8fa2585c-174b-41d6-8b3e-04b3663c80bd
Verdict: Malicious activity
Analysis date: March 24, 2025, 12:25:03
OS: Windows 10 Professional (build: 19045, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections
MD5:

BFC1305FB035F6C6B183DBA9D1F75B70

SHA1:

384E2FA61B17A62475D6AF31F28A1616A48AA7AB

SHA256:

79E3CD1304B64A013F239449DDD89F1D42E46F0865D4F857ED7CEF4FACF52AE2

SSDEEP:

6144:P7K4TJ/IvDnH05l/81e/CbfxdtBqcvJGB9/WgeOxTk/8SwjwpyAvEh/bfuJ0sy+a:P+iVIH0598s4Bdha9OgeOx2x4DxmDsR

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Starts itself from another location

      • Unicorn-42554.exe (PID: 5968)
      • 1 (1330).exe (PID: 1276)
      • Unicorn-65138.exe (PID: 5164)
      • Unicorn-8205.exe (PID: 1672)
      • Unicorn-35132.exe (PID: 5392)
      • Unicorn-29040.exe (PID: 5640)
      • Unicorn-37400.exe (PID: 6004)
      • Unicorn-41188.exe (PID: 5124)
      • Unicorn-48868.exe (PID: 680)
      • Unicorn-65242.exe (PID: 6964)
      • Unicorn-19668.exe (PID: 4268)
      • Unicorn-19934.exe (PID: 1052)
      • Unicorn-13803.exe (PID: 5508)
      • Unicorn-18346.exe (PID: 5596)
      • Unicorn-51765.exe (PID: 672)
      • Unicorn-6093.exe (PID: 6272)
      • Unicorn-56446.exe (PID: 4652)
      • Unicorn-36720.exe (PID: 1312)
      • Unicorn-20126.exe (PID: 6644)
      • Unicorn-1817.exe (PID: 5176)
      • Unicorn-43810.exe (PID: 6512)
      • Unicorn-36388.exe (PID: 2420)
      • Unicorn-31558.exe (PID: 2772)
      • Unicorn-47821.exe (PID: 3884)
      • Unicorn-28412.exe (PID: 4696)
      • Unicorn-193.exe (PID: 1240)
      • Unicorn-37696.exe (PID: 6108)
      • Unicorn-36685.exe (PID: 5324)
      • Unicorn-61224.exe (PID: 4892)
      • Unicorn-13597.exe (PID: 3768)
      • Unicorn-20422.exe (PID: 7000)
      • Unicorn-58065.exe (PID: 5084)
      • Unicorn-19719.exe (PID: 2096)
      • Unicorn-43240.exe (PID: 6192)
      • Unicorn-1345.exe (PID: 2340)
      • Unicorn-62969.exe (PID: 1300)
      • Unicorn-56254.exe (PID: 2240)
      • Unicorn-46078.exe (PID: 2108)
      • Unicorn-14365.exe (PID: 7220)
      • Unicorn-58330.exe (PID: 7176)
      • Unicorn-38464.exe (PID: 7184)
      • Unicorn-34594.exe (PID: 7260)
      • Unicorn-55761.exe (PID: 7252)
      • Unicorn-49970.exe (PID: 7204)
      • Unicorn-6891.exe (PID: 7196)
      • Unicorn-59653.exe (PID: 7312)
      • Unicorn-46846.exe (PID: 7328)
      • Unicorn-47038.exe (PID: 7292)
      • Unicorn-23280.exe (PID: 7232)
      • Unicorn-7851.exe (PID: 7304)
      • Unicorn-45450.exe (PID: 7604)
      • Unicorn-48745.exe (PID: 7560)
      • Unicorn-61024.exe (PID: 7620)
      • Unicorn-38360.exe (PID: 7496)
      • Unicorn-30894.exe (PID: 7448)
      • Unicorn-21572.exe (PID: 7284)
      • Unicorn-28516.exe (PID: 7520)
      • Unicorn-37068.exe (PID: 7480)
      • Unicorn-28730.exe (PID: 7684)
      • Unicorn-54252.exe (PID: 7344)
      • Unicorn-29284.exe (PID: 7712)
      • Unicorn-11241.exe (PID: 7532)
      • Unicorn-27556.exe (PID: 7456)
      • Unicorn-44490.exe (PID: 7488)
      • Unicorn-36322.exe (PID: 7464)
      • Unicorn-12009.exe (PID: 7740)
      • Unicorn-10037.exe (PID: 7952)
      • Unicorn-60064.exe (PID: 7504)
      • Unicorn-49150.exe (PID: 7720)
      • Unicorn-31535.exe (PID: 7812)
      • Unicorn-3649.exe (PID: 7472)
      • Unicorn-37474.exe (PID: 7860)
      • Unicorn-13929.exe (PID: 7996)
      • Unicorn-5953.exe (PID: 7988)
      • Unicorn-17822.exe (PID: 8024)
      • Unicorn-54386.exe (PID: 7804)
      • Unicorn-43316.exe (PID: 7336)
      • Unicorn-17032.exe (PID: 7676)
      • Unicorn-61210.exe (PID: 7768)
      • Unicorn-4225.exe (PID: 7696)
      • Unicorn-23092.exe (PID: 8696)
      • Unicorn-2763.exe (PID: 8716)
      • Unicorn-33944.exe (PID: 7924)
      • Unicorn-35436.exe (PID: 8676)
      • Unicorn-29092.exe (PID: 7752)
      • Unicorn-32246.exe (PID: 8556)
      • Unicorn-11123.exe (PID: 8660)
      • Unicorn-14373.exe (PID: 8296)
      • Unicorn-60892.exe (PID: 8044)
      • Unicorn-62362.exe (PID: 7852)
      • Unicorn-7528.exe (PID: 8452)
      • Unicorn-14564.exe (PID: 8332)
      • Unicorn-53168.exe (PID: 8284)
      • Unicorn-40523.exe (PID: 8168)
      • Unicorn-44106.exe (PID: 7552)
      • Unicorn-24957.exe (PID: 7868)
      • Unicorn-42312.exe (PID: 8620)
      • Unicorn-7357.exe (PID: 8352)
      • Unicorn-62177.exe (PID: 8916)
      • Unicorn-22734.exe (PID: 8264)
      • Unicorn-1677.exe (PID: 8008)
      • Unicorn-52933.exe (PID: 7876)
      • Unicorn-20570.exe (PID: 8496)
      • Unicorn-39180.exe (PID: 8016)
      • Unicorn-53434.exe (PID: 8836)
      • Unicorn-46581.exe (PID: 7836)
      • Unicorn-36330.exe (PID: 8544)
      • Unicorn-43029.exe (PID: 9116)
      • Unicorn-52969.exe (PID: 7704)
      • Unicorn-25016.exe (PID: 8488)
      • Unicorn-44166.exe (PID: 9868)
      • Unicorn-45001.exe (PID: 9252)
      • Unicorn-27638.exe (PID: 9900)
      • Unicorn-53486.exe (PID: 9960)
      • Unicorn-28494.exe (PID: 7944)
      • Unicorn-29120.exe (PID: 8940)
      • Unicorn-25400.exe (PID: 8824)
      • Unicorn-29122.exe (PID: 8800)
      • Unicorn-651.exe (PID: 8132)
      • Unicorn-2624.exe (PID: 9184)
      • Unicorn-30274.exe (PID: 8908)
      • Unicorn-23672.exe (PID: 8092)
      • Unicorn-5769.exe (PID: 9436)
      • Unicorn-62925.exe (PID: 8668)
      • Unicorn-38412.exe (PID: 7844)
      • Unicorn-55141.exe (PID: 9004)
      • Unicorn-9632.exe (PID: 7820)
      • Unicorn-36832.exe (PID: 9260)
      • Unicorn-6131.exe (PID: 10084)
      • Unicorn-54289.exe (PID: 9584)
      • Unicorn-60398.exe (PID: 5776)
      • Unicorn-14107.exe (PID: 10236)
      • Unicorn-30244.exe (PID: 7828)
      • Unicorn-11510.exe (PID: 8200)
      • Unicorn-15219.exe (PID: 9512)
      • Unicorn-7387.exe (PID: 11236)
      • Unicorn-7039.exe (PID: 8632)
      • Unicorn-21058.exe (PID: 9340)
      • Unicorn-46803.exe (PID: 7884)
      • Unicorn-21917.exe (PID: 9452)
      • Unicorn-11612.exe (PID: 9804)
      • Unicorn-18946.exe (PID: 11880)
      • Unicorn-60388.exe (PID: 5020)
      • Unicorn-22646.exe (PID: 11376)
      • Unicorn-64202.exe (PID: 9724)
      • Unicorn-11877.exe (PID: 9824)
      • Unicorn-36626.exe (PID: 11888)
      • Unicorn-61580.exe (PID: 9596)
      • Unicorn-6376.exe (PID: 10412)
      • Unicorn-5297.exe (PID: 9476)
      • Unicorn-2780.exe (PID: 11408)
      • Unicorn-58020.exe (PID: 8188)
      • Unicorn-667.exe (PID: 12468)
      • Unicorn-65385.exe (PID: 12076)
      • Unicorn-42402.exe (PID: 12368)
      • Unicorn-49661.exe (PID: 7908)
      • Unicorn-58146.exe (PID: 6044)
      • Unicorn-34576.exe (PID: 9680)
      • Unicorn-12121.exe (PID: 11948)
      • Unicorn-11773.exe (PID: 9280)
      • Unicorn-48930.exe (PID: 10908)
      • Unicorn-24901.exe (PID: 11140)
      • Unicorn-39536.exe (PID: 11468)
      • Unicorn-33096.exe (PID: 11928)
      • Unicorn-15333.exe (PID: 8420)
      • Unicorn-4721.exe (PID: 9316)
      • Unicorn-48162.exe (PID: 10728)
      • Unicorn-6345.exe (PID: 9160)
      • Unicorn-5660.exe (PID: 11604)
      • Unicorn-12396.exe (PID: 12100)
      • Unicorn-32698.exe (PID: 12236)
      • Unicorn-57549.exe (PID: 9816)
      • Unicorn-43480.exe (PID: 12152)
      • Unicorn-51759.exe (PID: 10212)
      • Unicorn-53117.exe (PID: 3396)
      • Unicorn-59801.exe (PID: 9208)
      • Unicorn-40680.exe (PID: 12144)
      • Unicorn-7601.exe (PID: 9840)
      • Unicorn-55546.exe (PID: 9124)
      • Unicorn-51597.exe (PID: 11588)
      • Unicorn-7741.exe (PID: 8568)
      • Unicorn-42312.exe (PID: 8612)
      • Unicorn-6516.exe (PID: 8144)
      • Unicorn-56676.exe (PID: 10580)
      • Unicorn-37898.exe (PID: 14564)
      • Unicorn-33549.exe (PID: 14552)
      • Unicorn-41982.exe (PID: 14544)
      • Unicorn-20128.exe (PID: 10736)
      • Unicorn-18562.exe (PID: 11448)
      • Unicorn-32956.exe (PID: 11012)
      • Unicorn-59923.exe (PID: 8032)
      • Unicorn-58854.exe (PID: 8056)
      • Unicorn-56885.exe (PID: 10824)
      • Unicorn-65354.exe (PID: 10168)
      • Unicorn-8068.exe (PID: 10688)
      • Unicorn-15659.exe (PID: 12264)
      • Unicorn-14010.exe (PID: 11080)
      • Unicorn-18104.exe (PID: 11488)
      • Unicorn-12573.exe (PID: 15300)
      • Unicorn-65385.exe (PID: 12064)
      • Unicorn-18416.exe (PID: 15288)
      • Unicorn-13273.exe (PID: 9536)
      • Unicorn-7911.exe (PID: 9664)
      • Unicorn-6915.exe (PID: 5036)
      • Unicorn-59454.exe (PID: 10676)
      • Unicorn-24299.exe (PID: 11568)
      • Unicorn-12780.exe (PID: 4224)
      • Unicorn-27410.exe (PID: 12392)
      • Unicorn-51955.exe (PID: 9200)
      • Unicorn-8691.exe (PID: 10600)
      • Unicorn-9853.exe (PID: 8900)
      • Unicorn-44306.exe (PID: 8304)
      • Unicorn-56676.exe (PID: 10572)
      • Unicorn-22490.exe (PID: 9176)
      • Unicorn-46832.exe (PID: 11904)
      • Unicorn-43886.exe (PID: 10776)
      • Unicorn-49725.exe (PID: 12188)
      • Unicorn-33096.exe (PID: 11920)
      • Unicorn-29152.exe (PID: 10048)
      • Unicorn-55540.exe (PID: 12216)
      • Unicorn-4285.exe (PID: 10016)
      • Unicorn-52858.exe (PID: 8524)
      • Unicorn-31826.exe (PID: 10716)
      • Unicorn-27423.exe (PID: 11056)
      • Unicorn-20600.exe (PID: 9380)
      • Unicorn-49128.exe (PID: 12504)
      • Unicorn-64166.exe (PID: 12476)
      • Unicorn-18104.exe (PID: 11480)
      • Unicorn-8592.exe (PID: 11896)
      • Unicorn-62541.exe (PID: 10556)
      • Unicorn-53856.exe (PID: 15324)

    • Executable content was dropped or overwritten

      • 1 (1330).exe (PID: 1276)
      • Unicorn-41188.exe (PID: 5124)
      • Unicorn-8205.exe (PID: 1672)
      • Unicorn-42554.exe (PID: 5968)
      • Unicorn-65138.exe (PID: 5164)
      • Unicorn-35132.exe (PID: 5392)
      • Unicorn-37400.exe (PID: 6004)
      • Unicorn-48868.exe (PID: 680)
      • Unicorn-20126.exe (PID: 6644)
      • Unicorn-29040.exe (PID: 5640)
      • Unicorn-65242.exe (PID: 6964)
      • Unicorn-19934.exe (PID: 1052)
      • Unicorn-19668.exe (PID: 4268)
      • Unicorn-13803.exe (PID: 5508)
      • Unicorn-18346.exe (PID: 5596)
      • Unicorn-36720.exe (PID: 1312)
      • Unicorn-51765.exe (PID: 672)
      • Unicorn-6093.exe (PID: 6272)
      • Unicorn-61224.exe (PID: 4892)
      • Unicorn-28412.exe (PID: 4696)
      • Unicorn-43810.exe (PID: 6512)
      • Unicorn-31558.exe (PID: 2772)
      • Unicorn-43240.exe (PID: 6192)
      • Unicorn-56254.exe (PID: 2240)
      • Unicorn-1817.exe (PID: 5176)
      • Unicorn-193.exe (PID: 1240)
      • Unicorn-20422.exe (PID: 7000)
      • Unicorn-37696.exe (PID: 6108)
      • Unicorn-36685.exe (PID: 5324)
      • Unicorn-13597.exe (PID: 3768)
      • Unicorn-19719.exe (PID: 2096)
      • Unicorn-58065.exe (PID: 5084)
      • Unicorn-1345.exe (PID: 2340)
      • Unicorn-62969.exe (PID: 1300)
      • Unicorn-46078.exe (PID: 2108)
      • Unicorn-14365.exe (PID: 7220)
      • Unicorn-58330.exe (PID: 7176)
      • Unicorn-49970.exe (PID: 7204)
      • Unicorn-6891.exe (PID: 7196)
      • Unicorn-38464.exe (PID: 7184)
      • Unicorn-34594.exe (PID: 7260)
      • Unicorn-36388.exe (PID: 2420)
      • Unicorn-55761.exe (PID: 7252)
      • Unicorn-43316.exe (PID: 7336)
      • Unicorn-59653.exe (PID: 7312)
      • Unicorn-56446.exe (PID: 4652)
      • Unicorn-23280.exe (PID: 7232)
      • Unicorn-46846.exe (PID: 7328)
      • Unicorn-47038.exe (PID: 7292)
      • Unicorn-47821.exe (PID: 3884)
      • Unicorn-7851.exe (PID: 7304)
      • Unicorn-21572.exe (PID: 7284)
      • Unicorn-48745.exe (PID: 7560)
      • Unicorn-45450.exe (PID: 7604)
      • Unicorn-30894.exe (PID: 7448)
      • Unicorn-61024.exe (PID: 7620)
      • Unicorn-44106.exe (PID: 7552)
      • Unicorn-38360.exe (PID: 7496)
      • Unicorn-27556.exe (PID: 7456)
      • Unicorn-37068.exe (PID: 7480)
      • Unicorn-28730.exe (PID: 7684)
      • Unicorn-29284.exe (PID: 7712)
      • Unicorn-11241.exe (PID: 7532)
      • Unicorn-28516.exe (PID: 7520)
      • Unicorn-54252.exe (PID: 7344)
      • Unicorn-44490.exe (PID: 7488)
      • Unicorn-36322.exe (PID: 7464)
      • Unicorn-12009.exe (PID: 7740)
      • Unicorn-10037.exe (PID: 7952)
      • Unicorn-13929.exe (PID: 7996)
      • Unicorn-49150.exe (PID: 7720)
      • Unicorn-31535.exe (PID: 7812)
      • Unicorn-3649.exe (PID: 7472)
      • Unicorn-46803.exe (PID: 7884)
      • Unicorn-60064.exe (PID: 7504)
      • Unicorn-37474.exe (PID: 7860)
      • Unicorn-5953.exe (PID: 7988)
      • Unicorn-4225.exe (PID: 7696)
      • Unicorn-17822.exe (PID: 8024)
      • Unicorn-54386.exe (PID: 7804)
      • Unicorn-17032.exe (PID: 7676)
      • Unicorn-61210.exe (PID: 7768)
      • Unicorn-29092.exe (PID: 7752)
      • Unicorn-23092.exe (PID: 8696)
      • Unicorn-2763.exe (PID: 8716)
      • Unicorn-24957.exe (PID: 7868)
      • Unicorn-35436.exe (PID: 8676)
      • Unicorn-33944.exe (PID: 7924)
      • Unicorn-32246.exe (PID: 8556)
      • Unicorn-14373.exe (PID: 8296)
      • Unicorn-11123.exe (PID: 8660)
      • Unicorn-60892.exe (PID: 8044)
      • Unicorn-62362.exe (PID: 7852)
      • Unicorn-14564.exe (PID: 8332)
      • Unicorn-40523.exe (PID: 8168)
      • Unicorn-59923.exe (PID: 8032)
      • Unicorn-42312.exe (PID: 8620)
      • Unicorn-7357.exe (PID: 8352)
      • Unicorn-53168.exe (PID: 8284)
      • Unicorn-52933.exe (PID: 7876)
      • Unicorn-45001.exe (PID: 9252)
      • Unicorn-39180.exe (PID: 8016)
      • Unicorn-62177.exe (PID: 8916)
      • Unicorn-22734.exe (PID: 8264)
      • Unicorn-1677.exe (PID: 8008)
      • Unicorn-20570.exe (PID: 8496)
      • Unicorn-46581.exe (PID: 7836)
      • Unicorn-29120.exe (PID: 8940)
      • Unicorn-36330.exe (PID: 8544)
      • Unicorn-43029.exe (PID: 9116)
      • Unicorn-52969.exe (PID: 7704)
      • Unicorn-29122.exe (PID: 8800)
      • Unicorn-25016.exe (PID: 8488)
      • Unicorn-27638.exe (PID: 9900)
      • Unicorn-28494.exe (PID: 7944)
      • Unicorn-53486.exe (PID: 9960)
      • Unicorn-25400.exe (PID: 8824)
      • Unicorn-44166.exe (PID: 9868)
      • Unicorn-651.exe (PID: 8132)
      • Unicorn-2624.exe (PID: 9184)
      • Unicorn-30274.exe (PID: 8908)
      • Unicorn-23672.exe (PID: 8092)
      • Unicorn-7741.exe (PID: 8568)
      • Unicorn-62925.exe (PID: 8668)
      • Unicorn-55141.exe (PID: 9004)
      • Unicorn-38412.exe (PID: 7844)
      • Unicorn-9632.exe (PID: 7820)
      • Unicorn-15333.exe (PID: 8420)
      • Unicorn-36832.exe (PID: 9260)
      • Unicorn-6131.exe (PID: 10084)
      • Unicorn-54289.exe (PID: 9584)
      • Unicorn-30244.exe (PID: 7828)
      • Unicorn-60398.exe (PID: 5776)
      • Unicorn-14107.exe (PID: 10236)
      • Unicorn-21058.exe (PID: 9340)
      • Unicorn-15219.exe (PID: 9512)
      • Unicorn-7528.exe (PID: 8452)
      • Unicorn-7387.exe (PID: 11236)
      • Unicorn-11510.exe (PID: 8200)
      • Unicorn-21917.exe (PID: 9452)
      • Unicorn-64202.exe (PID: 9724)
      • Unicorn-11612.exe (PID: 9804)
      • Unicorn-18946.exe (PID: 11880)
      • Unicorn-60388.exe (PID: 5020)
      • Unicorn-22646.exe (PID: 11376)
      • Unicorn-6376.exe (PID: 10412)
      • Unicorn-11877.exe (PID: 9824)
      • Unicorn-36626.exe (PID: 11888)
      • Unicorn-61580.exe (PID: 9596)
      • Unicorn-5297.exe (PID: 9476)
      • Unicorn-2780.exe (PID: 11408)
      • Unicorn-42402.exe (PID: 12368)
      • Unicorn-12121.exe (PID: 11948)
      • Unicorn-58020.exe (PID: 8188)
      • Unicorn-64166.exe (PID: 12476)
      • Unicorn-7601.exe (PID: 9840)
      • Unicorn-49661.exe (PID: 7908)
      • Unicorn-58146.exe (PID: 6044)
      • Unicorn-39536.exe (PID: 11468)
      • Unicorn-34576.exe (PID: 9680)
      • Unicorn-48930.exe (PID: 10908)
      • Unicorn-53434.exe (PID: 8836)
      • Unicorn-24901.exe (PID: 11140)
      • Unicorn-11773.exe (PID: 9280)
      • Unicorn-4721.exe (PID: 9316)
      • Unicorn-48162.exe (PID: 10728)
      • Unicorn-6345.exe (PID: 9160)
      • Unicorn-61270.exe (PID: 10184)
      • Unicorn-20164.exe (PID: 8324)
      • Unicorn-12396.exe (PID: 12100)
      • Unicorn-32698.exe (PID: 12236)
      • Unicorn-27150.exe (PID: 5328)
      • Unicorn-43480.exe (PID: 12152)
      • Unicorn-57549.exe (PID: 9816)
      • Unicorn-40680.exe (PID: 12144)
      • Unicorn-42312.exe (PID: 8612)
      • Unicorn-55546.exe (PID: 9124)
      • Unicorn-51597.exe (PID: 11588)
      • Unicorn-56676.exe (PID: 10580)
      • Unicorn-37898.exe (PID: 14564)
      • Unicorn-33549.exe (PID: 14552)
      • Unicorn-41982.exe (PID: 14544)
      • Unicorn-20128.exe (PID: 10736)
      • Unicorn-55540.exe (PID: 12216)
      • Unicorn-18562.exe (PID: 11448)
      • Unicorn-65354.exe (PID: 10168)
      • Unicorn-13273.exe (PID: 9536)
      • Unicorn-58854.exe (PID: 8056)
      • Unicorn-32956.exe (PID: 11012)
      • Unicorn-56885.exe (PID: 10824)
      • Unicorn-14010.exe (PID: 11080)
      • Unicorn-18416.exe (PID: 15288)
      • Unicorn-65385.exe (PID: 12064)
      • Unicorn-7911.exe (PID: 9664)
      • Unicorn-8068.exe (PID: 10688)
      • Unicorn-27410.exe (PID: 12392)
      • Unicorn-24299.exe (PID: 11568)
      • Unicorn-22490.exe (PID: 9176)
      • Unicorn-51955.exe (PID: 9200)
      • Unicorn-44306.exe (PID: 8304)
      • Unicorn-46832.exe (PID: 11904)
      • Unicorn-56676.exe (PID: 10572)
      • Unicorn-6915.exe (PID: 5036)
      • Unicorn-27423.exe (PID: 11056)
      • Unicorn-20600.exe (PID: 9380)
      • Unicorn-43886.exe (PID: 10776)
      • Unicorn-49725.exe (PID: 12188)
      • Unicorn-667.exe (PID: 12468)
      • Unicorn-29152.exe (PID: 10048)
      • Unicorn-52858.exe (PID: 8524)
      • Unicorn-18104.exe (PID: 11480)
      • Unicorn-1524.exe (PID: 10280)
      • Unicorn-8592.exe (PID: 11896)
      • Unicorn-12780.exe (PID: 5528)
      • Unicorn-62541.exe (PID: 10556)
      • Unicorn-9448.exe (PID: 8752)
      • Unicorn-49345.exe (PID: 12136)
      • Unicorn-37424.exe (PID: 10916)
      • Unicorn-51898.exe (PID: 8432)
      • Unicorn-9500.exe (PID: 10296)
      • Unicorn-53856.exe (PID: 15324)
      • Unicorn-27394.exe (PID: 8444)
      • Unicorn-57954.exe (PID: 10304)
      • Unicorn-32070.exe (PID: 12656)
      • Unicorn-31919.exe (PID: 8072)
      • Unicorn-14093.exe (PID: 11612)
      • Unicorn-47404.exe (PID: 8864)
      • Unicorn-52277.exe (PID: 9428)
      • Unicorn-24020.exe (PID: 10788)
      • Unicorn-41804.exe (PID: 12208)
      • Unicorn-5769.exe (PID: 9436)
      • Unicorn-33096.exe (PID: 11928)
      • Unicorn-42920.exe (PID: 16464)
      • Unicorn-38017.exe (PID: 16456)
      • Unicorn-5660.exe (PID: 11604)
      • Unicorn-65385.exe (PID: 12076)
      • Unicorn-49128.exe (PID: 12504)
      • Unicorn-22262.exe (PID: 11576)
      • Unicorn-15659.exe (PID: 12264)
      • Unicorn-65214.exe (PID: 11964)
      • Unicorn-6516.exe (PID: 8144)
      • Unicorn-48893.exe (PID: 8348)
      • Unicorn-59454.exe (PID: 10676)
      • Unicorn-56656.exe (PID: 16448)
      • Unicorn-21669.exe (PID: 9392)
      • Unicorn-7039.exe (PID: 8632)
      • Unicorn-18104.exe (PID: 11488)
      • Unicorn-2593.exe (PID: 10252)
      • Unicorn-8691.exe (PID: 10600)
      • Unicorn-12780.exe (PID: 4224)
      • Unicorn-12573.exe (PID: 15300)
      • Unicorn-58421.exe (PID: 11128)
      • Unicorn-55052.exe (PID: 10956)
      • Unicorn-28546.exe (PID: 8504)
      • Unicorn-9853.exe (PID: 8900)
      • Unicorn-53117.exe (PID: 3396)
      • Unicorn-59713.exe (PID: 9672)
      • Unicorn-4285.exe (PID: 10016)
      • Unicorn-33096.exe (PID: 11920)
      • Unicorn-44301.exe (PID: 17352)
      • Unicorn-6117.exe (PID: 11552)
      • Unicorn-2780.exe (PID: 11384)
      • Unicorn-51759.exe (PID: 10212)
      • Unicorn-65052.exe (PID: 12376)

  • INFO

    • Checks supported languages

      • 1 (1330).exe (PID: 1276)
      • Unicorn-8205.exe (PID: 1672)
      • Unicorn-65138.exe (PID: 5164)
      • Unicorn-41188.exe (PID: 5124)
      • Unicorn-20126.exe (PID: 6644)
      • Unicorn-19934.exe (PID: 1052)
      • Unicorn-36720.exe (PID: 1312)
      • Unicorn-51765.exe (PID: 672)
      • Unicorn-56446.exe (PID: 4652)
      • Unicorn-56254.exe (PID: 2240)
      • Unicorn-43240.exe (PID: 6192)
      • Unicorn-28412.exe (PID: 4696)
      • Unicorn-1345.exe (PID: 2340)
      • Unicorn-58065.exe (PID: 5084)
      • Unicorn-21572.exe (PID: 7284)
      • Unicorn-55761.exe (PID: 7252)
      • Unicorn-36322.exe (PID: 7464)
      • Unicorn-60064.exe (PID: 7504)
      • Unicorn-29284.exe (PID: 7712)
      • Unicorn-44106.exe (PID: 7552)
      • Unicorn-17032.exe (PID: 7676)
      • Unicorn-61210.exe (PID: 7768)
      • Unicorn-31535.exe (PID: 7812)
      • Unicorn-38412.exe (PID: 7844)
      • Unicorn-46581.exe (PID: 7836)
      • Unicorn-10037.exe (PID: 7952)
      • Unicorn-33944.exe (PID: 7924)
      • Unicorn-60892.exe (PID: 8044)
      • Unicorn-37474.exe (PID: 7860)
      • Unicorn-53434.exe (PID: 8836)
      • Unicorn-47404.exe (PID: 8864)
      • Unicorn-55546.exe (PID: 9124)
      • Unicorn-45001.exe (PID: 9252)
      • Unicorn-4721.exe (PID: 9316)
      • Unicorn-44166.exe (PID: 9868)
      • Unicorn-5769.exe (PID: 9436)
      • Unicorn-34576.exe (PID: 9680)
      • Unicorn-26870.exe (PID: 9756)
      • Unicorn-65354.exe (PID: 10168)
      • Unicorn-51759.exe (PID: 10212)
      • Unicorn-62541.exe (PID: 10556)
      • Unicorn-6376.exe (PID: 10412)
      • Unicorn-56676.exe (PID: 10580)
      • Unicorn-17659.exe (PID: 10660)
      • Unicorn-42940.exe (PID: 10564)
      • Unicorn-50309.exe (PID: 10644)
      • Unicorn-35208.exe (PID: 11108)
      • Unicorn-2780.exe (PID: 11392)
      • Unicorn-56885.exe (PID: 10816)
      • Unicorn-60388.exe (PID: 5020)
      • Unicorn-39536.exe (PID: 11468)
      • Unicorn-12837.exe (PID: 10344)
      • Unicorn-36221.exe (PID: 10940)
      • Unicorn-20111.exe (PID: 10432)
      • Unicorn-36626.exe (PID: 11888)
      • Unicorn-33096.exe (PID: 11920)
      • Unicorn-6117.exe (PID: 11552)
      • Unicorn-30355.exe (PID: 10972)
      • Unicorn-55540.exe (PID: 12228)
      • Unicorn-42402.exe (PID: 12368)
      • Unicorn-24862.exe (PID: 12796)
      • Unicorn-51059.exe (PID: 13300)
      • Unicorn-29744.exe (PID: 12160)
      • Unicorn-64602.exe (PID: 14156)
      • Unicorn-48074.exe (PID: 14196)
      • Unicorn-48406.exe (PID: 12700)
      • Unicorn-5972.exe (PID: 14476)
      • Unicorn-18416.exe (PID: 15280)
      • Unicorn-52572.exe (PID: 15820)
      • Unicorn-30232.exe (PID: 15888)
      • Unicorn-42728.exe (PID: 14512)
      • Unicorn-34868.exe (PID: 15636)
      • Unicorn-373.exe (PID: 14972)
      • Unicorn-247.exe (PID: 15048)
      • Unicorn-45874.exe (PID: 14620)

    • Reads the computer name

      • 1 (1330).exe (PID: 1276)
      • Unicorn-8205.exe (PID: 1672)
      • Unicorn-41188.exe (PID: 5124)
      • Unicorn-65138.exe (PID: 5164)
      • Unicorn-29040.exe (PID: 5640)
      • Unicorn-36720.exe (PID: 1312)
      • Unicorn-20126.exe (PID: 6644)
      • Unicorn-1817.exe (PID: 5176)
      • Unicorn-193.exe (PID: 1240)
      • Unicorn-20422.exe (PID: 7000)
      • Unicorn-14365.exe (PID: 7220)
      • Unicorn-49970.exe (PID: 7204)
      • Unicorn-59653.exe (PID: 7312)
      • Unicorn-28730.exe (PID: 7684)
      • Unicorn-60064.exe (PID: 7504)
      • Unicorn-46803.exe (PID: 7884)
      • Unicorn-54386.exe (PID: 7804)
      • Unicorn-35436.exe (PID: 8676)
      • Unicorn-62362.exe (PID: 7852)
      • Unicorn-5769.exe (PID: 9436)
      • Unicorn-58020.exe (PID: 8188)
      • Unicorn-51955.exe (PID: 9200)
      • Unicorn-42402.exe (PID: 12368)
      • Unicorn-37778.exe (PID: 9500)
      • Unicorn-5297.exe (PID: 9476)
      • Unicorn-58854.exe (PID: 8056)
      • Unicorn-29152.exe (PID: 10048)
      • Unicorn-32956.exe (PID: 11012)
      • Unicorn-62541.exe (PID: 10556)
      • Unicorn-41982.exe (PID: 14544)
      • Unicorn-51898.exe (PID: 8432)
      • Unicorn-48893.exe (PID: 8348)

    • The sample compiled with chinese language support

      • 1 (1330).exe (PID: 1276)
      • Unicorn-18416.exe (PID: 15288)
      • Unicorn-53856.exe (PID: 15324)
      • Unicorn-31919.exe (PID: 8072)
      • Unicorn-7387.exe (PID: 11236)
      • Unicorn-60388.exe (PID: 5020)
      • Unicorn-47404.exe (PID: 8864)
      • Unicorn-52277.exe (PID: 9428)
      • Unicorn-2624.exe (PID: 9184)
      • Unicorn-24957.exe (PID: 7868)
      • Unicorn-24020.exe (PID: 10788)
      • Unicorn-32070.exe (PID: 12656)
      • Unicorn-5769.exe (PID: 9436)
      • Unicorn-56656.exe (PID: 16448)
      • Unicorn-33549.exe (PID: 14552)
      • Unicorn-38017.exe (PID: 16456)
      • Unicorn-37898.exe (PID: 14564)
      • Unicorn-39536.exe (PID: 11468)
      • Unicorn-58330.exe (PID: 7176)
      • Unicorn-33096.exe (PID: 11928)
      • Unicorn-42920.exe (PID: 16464)
      • Unicorn-32698.exe (PID: 12236)
      • Unicorn-8205.exe (PID: 1672)
      • Unicorn-29120.exe (PID: 8940)
      • Unicorn-6891.exe (PID: 7196)
      • Unicorn-40680.exe (PID: 12144)
      • Unicorn-4721.exe (PID: 9316)
      • Unicorn-42402.exe (PID: 12368)
      • Unicorn-61024.exe (PID: 7620)
      • Unicorn-14107.exe (PID: 10236)
      • Unicorn-5660.exe (PID: 11604)
      • Unicorn-12396.exe (PID: 12100)
      • Unicorn-65385.exe (PID: 12076)
      • Unicorn-49150.exe (PID: 7720)
      • Unicorn-22734.exe (PID: 8264)
      • Unicorn-57549.exe (PID: 9816)
      • Unicorn-30894.exe (PID: 7448)
      • Unicorn-10037.exe (PID: 7952)
      • Unicorn-6131.exe (PID: 10084)
      • Unicorn-58065.exe (PID: 5084)
      • Unicorn-27638.exe (PID: 9900)
      • Unicorn-11241.exe (PID: 7532)
      • Unicorn-45450.exe (PID: 7604)
      • Unicorn-28494.exe (PID: 7944)
      • Unicorn-49725.exe (PID: 12188)
      • Unicorn-43240.exe (PID: 6192)
      • Unicorn-4225.exe (PID: 7696)
      • Unicorn-65242.exe (PID: 6964)
      • Unicorn-17822.exe (PID: 8024)
      • Unicorn-40523.exe (PID: 8168)
      • Unicorn-22646.exe (PID: 11376)
      • Unicorn-36322.exe (PID: 7464)
      • Unicorn-34576.exe (PID: 9680)
      • Unicorn-65138.exe (PID: 5164)
      • Unicorn-49128.exe (PID: 12504)
      • Unicorn-23092.exe (PID: 8696)
      • Unicorn-22262.exe (PID: 11576)
      • Unicorn-11510.exe (PID: 8200)
      • Unicorn-55141.exe (PID: 9004)
      • Unicorn-34594.exe (PID: 7260)
      • Unicorn-20164.exe (PID: 8324)
      • Unicorn-15659.exe (PID: 12264)
      • Unicorn-9500.exe (PID: 10296)
      • Unicorn-48745.exe (PID: 7560)
      • Unicorn-18946.exe (PID: 11880)
      • Unicorn-52858.exe (PID: 8524)
      • Unicorn-15333.exe (PID: 8420)
      • Unicorn-61210.exe (PID: 7768)
      • Unicorn-33944.exe (PID: 7924)
      • Unicorn-13929.exe (PID: 7996)
      • Unicorn-42554.exe (PID: 5968)
      • Unicorn-62362.exe (PID: 7852)
      • Unicorn-37400.exe (PID: 6004)
      • Unicorn-44490.exe (PID: 7488)
      • Unicorn-23672.exe (PID: 8092)
      • Unicorn-56676.exe (PID: 10580)
      • Unicorn-36626.exe (PID: 11888)
      • Unicorn-6516.exe (PID: 8144)
      • Unicorn-60064.exe (PID: 7504)
      • Unicorn-36330.exe (PID: 8544)
      • Unicorn-55546.exe (PID: 9124)
      • Unicorn-58854.exe (PID: 8056)
      • Unicorn-35132.exe (PID: 5392)
      • Unicorn-65214.exe (PID: 11964)
      • Unicorn-51597.exe (PID: 11588)
      • Unicorn-18104.exe (PID: 11480)
      • Unicorn-46846.exe (PID: 7328)
      • Unicorn-36388.exe (PID: 2420)
      • Unicorn-8068.exe (PID: 10688)
      • Unicorn-59454.exe (PID: 10676)
      • Unicorn-62177.exe (PID: 8916)
      • Unicorn-61224.exe (PID: 4892)
      • Unicorn-62925.exe (PID: 8668)
      • Unicorn-31535.exe (PID: 7812)
      • Unicorn-5953.exe (PID: 7988)
      • Unicorn-53434.exe (PID: 8836)
      • Unicorn-27150.exe (PID: 5328)
      • Unicorn-7039.exe (PID: 8632)
      • Unicorn-48893.exe (PID: 8348)
      • Unicorn-20126.exe (PID: 6644)
      • Unicorn-30274.exe (PID: 8908)
      • Unicorn-55540.exe (PID: 12216)
      • Unicorn-59653.exe (PID: 7312)
      • Unicorn-7911.exe (PID: 9664)
      • Unicorn-18104.exe (PID: 11488)
      • Unicorn-12780.exe (PID: 5528)
      • Unicorn-51955.exe (PID: 9200)
      • Unicorn-21669.exe (PID: 9392)
      • Unicorn-6915.exe (PID: 5036)
      • Unicorn-11123.exe (PID: 8660)
      • Unicorn-7357.exe (PID: 8352)
      • Unicorn-51898.exe (PID: 8432)
      • Unicorn-14564.exe (PID: 8332)
      • Unicorn-5297.exe (PID: 9476)
      • Unicorn-20570.exe (PID: 8496)
      • Unicorn-19719.exe (PID: 2096)
      • Unicorn-13273.exe (PID: 9536)
      • Unicorn-37424.exe (PID: 10916)
      • Unicorn-2593.exe (PID: 10252)
      • Unicorn-27410.exe (PID: 12392)
      • Unicorn-6093.exe (PID: 6272)
      • Unicorn-193.exe (PID: 1240)
      • Unicorn-1677.exe (PID: 8008)
      • Unicorn-32956.exe (PID: 11012)
      • Unicorn-25016.exe (PID: 8488)
      • Unicorn-56446.exe (PID: 4652)
      • Unicorn-60398.exe (PID: 5776)
      • Unicorn-24299.exe (PID: 11568)
      • Unicorn-27556.exe (PID: 7456)
      • Unicorn-29040.exe (PID: 5640)
      • Unicorn-9632.exe (PID: 7820)
      • Unicorn-13803.exe (PID: 5508)
      • Unicorn-8592.exe (PID: 11896)
      • Unicorn-58146.exe (PID: 6044)
      • Unicorn-37474.exe (PID: 7860)
      • Unicorn-38464.exe (PID: 7184)
      • Unicorn-49345.exe (PID: 12136)
      • Unicorn-59923.exe (PID: 8032)
      • Unicorn-18562.exe (PID: 11448)
      • Unicorn-21917.exe (PID: 9452)
      • Unicorn-8691.exe (PID: 10600)
      • Unicorn-38412.exe (PID: 7844)
      • Unicorn-31558.exe (PID: 2772)
      • Unicorn-12780.exe (PID: 4224)
      • Unicorn-48930.exe (PID: 10908)
      • Unicorn-43810.exe (PID: 6512)
      • Unicorn-22490.exe (PID: 9176)
      • Unicorn-11612.exe (PID: 9804)
      • Unicorn-54289.exe (PID: 9584)
      • Unicorn-42312.exe (PID: 8612)
      • Unicorn-46581.exe (PID: 7836)
      • Unicorn-43316.exe (PID: 7336)
      • Unicorn-41804.exe (PID: 12208)
      • Unicorn-24901.exe (PID: 11140)
      • Unicorn-12573.exe (PID: 15300)
      • Unicorn-20128.exe (PID: 10736)
      • Unicorn-19934.exe (PID: 1052)
      • Unicorn-17032.exe (PID: 7676)
      • Unicorn-6376.exe (PID: 10412)
      • Unicorn-51765.exe (PID: 672)
      • Unicorn-25400.exe (PID: 8824)
      • Unicorn-58421.exe (PID: 11128)
      • Unicorn-49970.exe (PID: 7204)
      • Unicorn-2763.exe (PID: 8716)
      • Unicorn-44166.exe (PID: 9868)
      • Unicorn-64202.exe (PID: 9724)
      • Unicorn-44306.exe (PID: 8304)
      • Unicorn-3649.exe (PID: 7472)
      • Unicorn-47038.exe (PID: 7292)
      • Unicorn-1524.exe (PID: 10280)
      • Unicorn-12009.exe (PID: 7740)
      • Unicorn-39180.exe (PID: 8016)
      • Unicorn-55052.exe (PID: 10956)
      • Unicorn-19668.exe (PID: 4268)
      • Unicorn-42312.exe (PID: 8620)
      • Unicorn-28412.exe (PID: 4696)
      • Unicorn-43029.exe (PID: 9116)
      • Unicorn-36720.exe (PID: 1312)
      • Unicorn-28546.exe (PID: 8504)
      • Unicorn-58020.exe (PID: 8188)
      • Unicorn-61270.exe (PID: 10184)
      • Unicorn-53117.exe (PID: 3396)
      • Unicorn-53168.exe (PID: 8284)
      • Unicorn-47821.exe (PID: 3884)
      • Unicorn-7528.exe (PID: 8452)
      • Unicorn-59713.exe (PID: 9672)
      • Unicorn-15219.exe (PID: 9512)
      • Unicorn-56254.exe (PID: 2240)
      • Unicorn-29092.exe (PID: 7752)
      • Unicorn-4285.exe (PID: 10016)
      • Unicorn-54386.exe (PID: 7804)
      • Unicorn-49661.exe (PID: 7908)
      • Unicorn-46832.exe (PID: 11904)
      • Unicorn-9853.exe (PID: 8900)
      • Unicorn-55761.exe (PID: 7252)
      • Unicorn-1817.exe (PID: 5176)
      • Unicorn-44106.exe (PID: 7552)
      • Unicorn-7851.exe (PID: 7304)
      • Unicorn-14093.exe (PID: 11612)
      • Unicorn-51759.exe (PID: 10212)
      • Unicorn-56676.exe (PID: 10572)
      • Unicorn-65052.exe (PID: 12376)
      • Unicorn-14365.exe (PID: 7220)
      • Unicorn-33096.exe (PID: 11920)
      • Unicorn-6117.exe (PID: 11552)
      • Unicorn-41188.exe (PID: 5124)
      • Unicorn-62969.exe (PID: 1300)
      • Unicorn-38360.exe (PID: 7496)
      • Unicorn-45001.exe (PID: 9252)
      • Unicorn-2780.exe (PID: 11384)
      • Unicorn-27423.exe (PID: 11056)
      • Unicorn-52933.exe (PID: 7876)
      • Unicorn-44301.exe (PID: 17352)

    • Create files in a temporary directory

      • Unicorn-8205.exe (PID: 1672)
      • 1 (1330).exe (PID: 1276)
      • Unicorn-42554.exe (PID: 5968)
      • Unicorn-41188.exe (PID: 5124)
      • Unicorn-35132.exe (PID: 5392)
      • Unicorn-65242.exe (PID: 6964)
      • Unicorn-19934.exe (PID: 1052)
      • Unicorn-19668.exe (PID: 4268)
      • Unicorn-48868.exe (PID: 680)
      • Unicorn-18346.exe (PID: 5596)
      • Unicorn-36720.exe (PID: 1312)
      • Unicorn-6093.exe (PID: 6272)
      • Unicorn-65138.exe (PID: 5164)
      • Unicorn-51765.exe (PID: 672)
      • Unicorn-20126.exe (PID: 6644)
      • Unicorn-61224.exe (PID: 4892)
      • Unicorn-37400.exe (PID: 6004)
      • Unicorn-1817.exe (PID: 5176)
      • Unicorn-28412.exe (PID: 4696)
      • Unicorn-193.exe (PID: 1240)
      • Unicorn-20422.exe (PID: 7000)
      • Unicorn-13597.exe (PID: 3768)
      • Unicorn-43240.exe (PID: 6192)
      • Unicorn-19719.exe (PID: 2096)
      • Unicorn-46078.exe (PID: 2108)
      • Unicorn-14365.exe (PID: 7220)
      • Unicorn-43810.exe (PID: 6512)
      • Unicorn-36388.exe (PID: 2420)
      • Unicorn-55761.exe (PID: 7252)
      • Unicorn-43316.exe (PID: 7336)
      • Unicorn-59653.exe (PID: 7312)
      • Unicorn-56446.exe (PID: 4652)
      • Unicorn-23280.exe (PID: 7232)
      • Unicorn-31558.exe (PID: 2772)
      • Unicorn-21572.exe (PID: 7284)
      • Unicorn-45450.exe (PID: 7604)
      • Unicorn-58065.exe (PID: 5084)
      • Unicorn-37068.exe (PID: 7480)
      • Unicorn-28730.exe (PID: 7684)
      • Unicorn-29284.exe (PID: 7712)
      • Unicorn-54252.exe (PID: 7344)
      • Unicorn-56254.exe (PID: 2240)
      • Unicorn-1345.exe (PID: 2340)
      • Unicorn-37696.exe (PID: 6108)
      • Unicorn-12009.exe (PID: 7740)
      • Unicorn-13929.exe (PID: 7996)
      • Unicorn-44490.exe (PID: 7488)
      • Unicorn-36322.exe (PID: 7464)
      • Unicorn-31535.exe (PID: 7812)
      • Unicorn-49150.exe (PID: 7720)
      • Unicorn-4225.exe (PID: 7696)
      • Unicorn-46803.exe (PID: 7884)
      • Unicorn-58330.exe (PID: 7176)
      • Unicorn-29092.exe (PID: 7752)
      • Unicorn-47038.exe (PID: 7292)
      • Unicorn-35436.exe (PID: 8676)
      • Unicorn-14564.exe (PID: 8332)
      • Unicorn-11123.exe (PID: 8660)
      • Unicorn-44106.exe (PID: 7552)
      • Unicorn-53168.exe (PID: 8284)
      • Unicorn-40523.exe (PID: 8168)
      • Unicorn-11241.exe (PID: 7532)
      • Unicorn-52933.exe (PID: 7876)
      • Unicorn-20570.exe (PID: 8496)
      • Unicorn-47821.exe (PID: 3884)
      • Unicorn-1677.exe (PID: 8008)
      • Unicorn-45001.exe (PID: 9252)
      • Unicorn-10037.exe (PID: 7952)
      • Unicorn-6891.exe (PID: 7196)
      • Unicorn-30894.exe (PID: 7448)
      • Unicorn-34594.exe (PID: 7260)
      • Unicorn-25016.exe (PID: 8488)
      • Unicorn-28494.exe (PID: 7944)
      • Unicorn-13803.exe (PID: 5508)
      • Unicorn-29040.exe (PID: 5640)
      • Unicorn-46846.exe (PID: 7328)
      • Unicorn-651.exe (PID: 8132)
      • Unicorn-62177.exe (PID: 8916)
      • Unicorn-9632.exe (PID: 7820)
      • Unicorn-6131.exe (PID: 10084)
      • Unicorn-30244.exe (PID: 7828)
      • Unicorn-7528.exe (PID: 8452)
      • Unicorn-11510.exe (PID: 8200)
      • Unicorn-17822.exe (PID: 8024)
      • Unicorn-61024.exe (PID: 7620)
      • Unicorn-18946.exe (PID: 11880)
      • Unicorn-48745.exe (PID: 7560)
      • Unicorn-29120.exe (PID: 8940)
      • Unicorn-57549.exe (PID: 9816)
      • Unicorn-6345.exe (PID: 9160)
      • Unicorn-3649.exe (PID: 7472)
      • Unicorn-14373.exe (PID: 8296)
      • Unicorn-65354.exe (PID: 10168)
      • Unicorn-56885.exe (PID: 10824)
      • Unicorn-11877.exe (PID: 9824)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable (generic) (52.9)
.exe | Generic Win/DOS Executable (23.5)
.exe | DOS Executable Generic (23.5)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:01:19 13:34:56+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 299008
UninitializedDataSize: -
EntryPoint: 0x13d4
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
InternalName: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
741
Monitored processes
605
Malicious processes
88
Suspicious processes
60

Behavior graph

Click at the process to see the details
start 1 (1330).exe sppextcomobj.exe no specs slui.exe unicorn-8205.exe unicorn-65138.exe unicorn-41188.exe unicorn-42554.exe unicorn-35132.exe unicorn-48868.exe unicorn-37400.exe unicorn-20126.exe unicorn-29040.exe unicorn-65242.exe unicorn-13803.exe unicorn-19668.exe unicorn-19934.exe unicorn-18346.exe unicorn-36720.exe unicorn-51765.exe unicorn-6093.exe unicorn-61224.exe unicorn-1817.exe unicorn-56446.exe unicorn-28412.exe unicorn-43810.exe unicorn-31558.exe unicorn-36388.exe unicorn-56254.exe unicorn-43240.exe unicorn-47821.exe unicorn-193.exe unicorn-37696.exe unicorn-20422.exe unicorn-36685.exe unicorn-13597.exe unicorn-19719.exe unicorn-1345.exe unicorn-62969.exe unicorn-46078.exe unicorn-58065.exe unicorn-58330.exe unicorn-38464.exe unicorn-6891.exe unicorn-49970.exe unicorn-14365.exe unicorn-23280.exe unicorn-55761.exe unicorn-34594.exe unicorn-21572.exe unicorn-47038.exe unicorn-7851.exe unicorn-59653.exe unicorn-46846.exe unicorn-43316.exe unicorn-54252.exe unicorn-30894.exe unicorn-27556.exe unicorn-36322.exe unicorn-3649.exe unicorn-37068.exe unicorn-44490.exe unicorn-38360.exe unicorn-60064.exe unicorn-28516.exe unicorn-11241.exe unicorn-44106.exe unicorn-48745.exe unicorn-45450.exe unicorn-61024.exe unicorn-17032.exe unicorn-28730.exe unicorn-4225.exe unicorn-52969.exe unicorn-29284.exe unicorn-49150.exe unicorn-12009.exe unicorn-29092.exe unicorn-61210.exe unicorn-54386.exe unicorn-31535.exe unicorn-9632.exe unicorn-30244.exe unicorn-46581.exe unicorn-38412.exe unicorn-62362.exe unicorn-37474.exe unicorn-24957.exe unicorn-52933.exe unicorn-46803.exe unicorn-33944.exe unicorn-10037.exe unicorn-5953.exe unicorn-13929.exe unicorn-1677.exe unicorn-39180.exe unicorn-17822.exe unicorn-59923.exe unicorn-60892.exe unicorn-58854.exe unicorn-31919.exe unicorn-23672.exe unicorn-651.exe unicorn-6516.exe unicorn-40523.exe unicorn-58020.exe unicorn-11510.exe unicorn-22734.exe unicorn-53168.exe unicorn-14373.exe unicorn-44306.exe unicorn-20164.exe unicorn-14564.exe unicorn-7357.exe unicorn-3081.exe no specs unicorn-15333.exe unicorn-51898.exe unicorn-27394.exe unicorn-7528.exe unicorn-25016.exe unicorn-20570.exe unicorn-28546.exe unicorn-52858.exe unicorn-36330.exe unicorn-32246.exe unicorn-7741.exe unicorn-42312.exe unicorn-42312.exe unicorn-7039.exe unicorn-11123.exe unicorn-62925.exe unicorn-35436.exe unicorn-23092.exe unicorn-2763.exe unicorn-9448.exe unicorn-29122.exe unicorn-25400.exe unicorn-53434.exe unicorn-47404.exe unicorn-9853.exe unicorn-30274.exe unicorn-62177.exe unicorn-29120.exe unicorn-55141.exe unicorn-25806.exe no specs unicorn-43029.exe unicorn-55546.exe unicorn-45240.exe no specs unicorn-6345.exe unicorn-22490.exe unicorn-2624.exe unicorn-46802.exe no specs unicorn-51955.exe unicorn-59801.exe no specs unicorn-60398.exe unicorn-48893.exe unicorn-27150.exe unicorn-49661.exe unicorn-28494.exe unicorn-48530.exe no specs unicorn-28664.exe no specs unicorn-45001.exe unicorn-36832.exe unicorn-11773.exe unicorn-43989.exe no specs unicorn-4721.exe unicorn-21058.exe unicorn-372.exe no specs unicorn-20600.exe unicorn-21669.exe unicorn-52277.exe unicorn-5769.exe unicorn-21917.exe unicorn-5297.exe unicorn-37778.exe no specs unicorn-15219.exe unicorn-13273.exe unicorn-829.exe no specs unicorn-38332.exe no specs unicorn-54289.exe unicorn-61580.exe unicorn-12379.exe no specs unicorn-7911.exe unicorn-59713.exe unicorn-34576.exe unicorn-34545.exe no specs unicorn-64202.exe unicorn-26830.exe no specs unicorn-26870.exe no specs unicorn-22786.exe no specs unicorn-11612.exe unicorn-57549.exe unicorn-11877.exe unicorn-7601.exe unicorn-49189.exe no specs unicorn-44166.exe unicorn-27638.exe unicorn-53486.exe unicorn-4285.exe unicorn-29152.exe unicorn-20430.exe no specs unicorn-6131.exe unicorn-65354.exe unicorn-61270.exe unicorn-51759.exe unicorn-14107.exe unicorn-58146.exe unicorn-2593.exe unicorn-21124.exe no specs unicorn-1524.exe unicorn-9500.exe unicorn-57954.exe unicorn-4669.exe no specs unicorn-12837.exe no specs unicorn-18628.exe no specs unicorn-6376.exe unicorn-20111.exe no specs unicorn-22158.exe no specs unicorn-62541.exe unicorn-42940.exe no specs unicorn-56676.exe unicorn-56676.exe unicorn-23082.exe no specs unicorn-8691.exe unicorn-291.exe no specs unicorn-50309.exe no specs unicorn-17659.exe no specs unicorn-59454.exe unicorn-8068.exe unicorn-31826.exe no specs unicorn-48162.exe unicorn-20128.exe unicorn-43886.exe unicorn-24020.exe unicorn-2283.exe no specs unicorn-56885.exe no specs unicorn-56885.exe unicorn-10948.exe no specs unicorn-64306.exe no specs unicorn-43654.exe no specs unicorn-16450.exe no specs unicorn-48930.exe unicorn-37424.exe unicorn-36221.exe no specs unicorn-27555.exe no specs unicorn-55052.exe unicorn-30355.exe no specs unicorn-30355.exe no specs unicorn-49485.exe no specs unicorn-22158.exe no specs unicorn-32956.exe unicorn-23777.exe no specs unicorn-27423.exe unicorn-14010.exe unicorn-29086.exe no specs unicorn-35208.exe no specs unicorn-58421.exe unicorn-24901.exe unicorn-22890.exe no specs unicorn-7387.exe unicorn-60388.exe unicorn-22646.exe unicorn-2780.exe unicorn-2780.exe no specs unicorn-2780.exe no specs unicorn-2780.exe unicorn-18562.exe unicorn-39536.exe unicorn-18104.exe unicorn-18104.exe unicorn-6117.exe unicorn-10564.exe no specs unicorn-24299.exe unicorn-22262.exe unicorn-51597.exe unicorn-65332.exe no specs unicorn-5660.exe unicorn-14093.exe unicorn-18946.exe unicorn-36626.exe unicorn-8592.exe unicorn-46832.exe unicorn-46832.exe no specs unicorn-33096.exe unicorn-33096.exe unicorn-12121.exe unicorn-65214.exe unicorn-13967.exe no specs unicorn-34195.exe no specs unicorn-52386.exe no specs unicorn-65385.exe unicorn-65385.exe unicorn-25106.exe no specs unicorn-12396.exe unicorn-21384.exe no specs unicorn-49345.exe unicorn-40680.exe unicorn-43480.exe unicorn-29744.exe no specs unicorn-49725.exe unicorn-217.exe no specs unicorn-41804.exe unicorn-55540.exe unicorn-55540.exe no specs unicorn-32698.exe unicorn-15659.exe unicorn-58717.exe no specs unicorn-58717.exe no specs unicorn-6915.exe unicorn-53117.exe unicorn-12780.exe unicorn-12780.exe no specs unicorn-12780.exe unicorn-12780.exe no specs unicorn-12780.exe no specs unicorn-24595.exe no specs unicorn-42402.exe unicorn-65052.exe unicorn-27410.exe unicorn-50060.exe no specs unicorn-35386.exe no specs unicorn-50953.exe no specs unicorn-6532.exe no specs unicorn-667.exe unicorn-64166.exe unicorn-49128.exe unicorn-3932.exe no specs unicorn-12535.exe no specs unicorn-8451.exe no specs unicorn-14316.exe no specs unicorn-19744.exe no specs unicorn-50828.exe no specs unicorn-32070.exe unicorn-52682.exe no specs unicorn-21384.exe no specs unicorn-60658.exe no specs unicorn-48406.exe no specs unicorn-3289.exe no specs unicorn-40680.exe no specs unicorn-37808.exe no specs unicorn-37808.exe no specs unicorn-24862.exe no specs unicorn-1426.exe no specs unicorn-51059.exe no specs unicorn-31384.exe no specs unicorn-17491.exe no specs unicorn-40320.exe no specs unicorn-57181.exe no specs unicorn-38872.exe no specs unicorn-57254.exe no specs unicorn-26555.exe no specs unicorn-40680.exe no specs unicorn-31140.exe no specs unicorn-31140.exe no specs slui.exe no specs unicorn-34671.exe no specs unicorn-64337.exe no specs unicorn-58472.exe no specs unicorn-58472.exe no specs unicorn-64602.exe no specs unicorn-64602.exe no specs unicorn-44737.exe no specs unicorn-64602.exe no specs unicorn-58472.exe no specs unicorn-64602.exe no specs unicorn-52158.exe no specs unicorn-48074.exe no specs unicorn-64602.exe no specs unicorn-7041.exe no specs unicorn-32781.exe no specs unicorn-38976.exe no specs unicorn-54021.exe no specs unicorn-25240.exe no specs unicorn-3533.exe no specs unicorn-27275.exe no specs unicorn-25240.exe no specs unicorn-49397.exe no specs unicorn-49397.exe no specs unicorn-39904.exe no specs unicorn-15572.exe no specs unicorn-23023.exe no specs unicorn-43798.exe no specs unicorn-5972.exe no specs unicorn-7216.exe no specs unicorn-18416.exe no specs unicorn-42728.exe no specs unicorn-42174.exe no specs unicorn-30476.exe no specs unicorn-41982.exe unicorn-33549.exe unicorn-37898.exe unicorn-757.exe no specs unicorn-31354.exe no specs unicorn-45874.exe no specs unicorn-54213.exe no specs unicorn-23932.exe no specs unicorn-41790.exe no specs unicorn-59780.exe no specs unicorn-57669.exe no specs unicorn-49958.exe no specs unicorn-13564.exe no specs unicorn-2219.exe no specs unicorn-15593.exe no specs unicorn-28835.exe no specs unicorn-55386.exe no specs unicorn-55386.exe no specs unicorn-61316.exe no specs unicorn-10077.exe no specs unicorn-1909.exe no specs unicorn-47026.exe no specs unicorn-47026.exe no specs unicorn-42942.exe no specs unicorn-59278.exe no specs unicorn-9885.exe no specs unicorn-5801.exe no specs unicorn-55194.exe no specs unicorn-55194.exe no specs unicorn-55194.exe no specs unicorn-55194.exe no specs unicorn-46834.exe no specs unicorn-373.exe no specs unicorn-12816.exe no specs unicorn-31961.exe no specs unicorn-38017.exe no specs unicorn-9699.exe no specs unicorn-51421.exe no specs unicorn-247.exe no specs unicorn-63514.exe no specs unicorn-6112.exe no specs unicorn-6112.exe no specs unicorn-5012.exe no specs unicorn-17648.exe no specs unicorn-36864.exe no specs unicorn-62984.exe no specs unicorn-38666.exe no specs unicorn-15593.exe no specs unicorn-38017.exe no specs unicorn-51804.exe no specs unicorn-37320.exe no specs unicorn-53856.exe no specs unicorn-18416.exe no specs unicorn-38017.exe no specs unicorn-928.exe no specs unicorn-50302.exe no specs unicorn-9288.exe no specs unicorn-53856.exe no specs unicorn-39818.exe no specs unicorn-53856.exe no specs unicorn-38017.exe no specs unicorn-38017.exe no specs unicorn-18416.exe no specs unicorn-18416.exe no specs unicorn-18416.exe unicorn-12573.exe unicorn-53856.exe unicorn-29351.exe no specs unicorn-42920.exe no specs unicorn-62521.exe no specs unicorn-62521.exe no specs unicorn-13372.exe no specs unicorn-62521.exe no specs unicorn-62521.exe no specs unicorn-34868.exe no specs unicorn-54380.exe no specs unicorn-28207.exe no specs unicorn-50866.exe no specs unicorn-29491.exe no specs unicorn-52572.exe no specs unicorn-35262.exe no specs unicorn-56656.exe no specs unicorn-51790.exe no specs unicorn-22818.exe no specs unicorn-30232.exe no specs unicorn-26798.exe no specs unicorn-43518.exe no specs unicorn-20579.exe no specs unicorn-47410.exe no specs unicorn-38836.exe no specs unicorn-21508.exe no specs unicorn-8303.exe no specs unicorn-37078.exe no specs unicorn-42920.exe no specs unicorn-56656.exe no specs unicorn-42920.exe no specs unicorn-53856.exe no specs unicorn-21508.exe no specs unicorn-43628.exe no specs unicorn-60732.exe no specs unicorn-16340.exe no specs unicorn-16378.exe no specs unicorn-61229.exe no specs unicorn-49242.exe no specs unicorn-1110.exe no specs unicorn-20056.exe no specs unicorn-57218.exe no specs unicorn-57218.exe no specs unicorn-61473.exe no specs unicorn-57389.exe no specs unicorn-3933.exe no specs unicorn-1110.exe no specs unicorn-41842.exe no specs unicorn-61494.exe no specs unicorn-41842.exe no specs unicorn-21508.exe no specs unicorn-42890.exe no specs unicorn-26990.exe no specs unicorn-7617.exe no specs unicorn-60902.exe no specs unicorn-17648.exe no specs unicorn-7617.exe no specs unicorn-60902.exe no specs unicorn-64986.exe no specs unicorn-56626.exe no specs unicorn-15593.exe no specs unicorn-56626.exe no specs unicorn-55889.exe no specs unicorn-56656.exe unicorn-38017.exe unicorn-42920.exe unicorn-62521.exe no specs unicorn-54353.exe no specs unicorn-42920.exe no specs unicorn-49772.exe no specs unicorn-62521.exe no specs unicorn-56656.exe no specs unicorn-12816.exe no specs unicorn-38017.exe no specs unicorn-42920.exe no specs unicorn-29351.exe no specs unicorn-29351.exe no specs unicorn-56656.exe no specs unicorn-55194.exe no specs unicorn-42174.exe no specs unicorn-42920.exe no specs unicorn-56656.exe no specs unicorn-29154.exe no specs unicorn-62521.exe no specs unicorn-37320.exe no specs unicorn-60902.exe no specs unicorn-64794.exe no specs unicorn-55002.exe no specs unicorn-54737.exe no specs unicorn-44566.exe no specs unicorn-4125.exe no specs unicorn-572.exe no specs unicorn-36990.exe no specs unicorn-10372.exe no specs unicorn-32151.exe no specs unicorn-32151.exe no specs unicorn-32151.exe no specs unicorn-32151.exe no specs unicorn-32151.exe no specs unicorn-56626.exe no specs unicorn-4213.exe no specs unicorn-18416.exe no specs unicorn-38017.exe no specs unicorn-32151.exe no specs unicorn-56656.exe no specs unicorn-32151.exe no specs unicorn-62521.exe no specs unicorn-18416.exe no specs unicorn-36206.exe no specs unicorn-36206.exe no specs unicorn-27846.exe no specs unicorn-31383.exe no specs unicorn-32151.exe no specs unicorn-56656.exe no specs unicorn-56056.exe no specs unicorn-24632.exe no specs unicorn-30232.exe no specs unicorn-56656.exe no specs unicorn-21715.exe no specs unicorn-44920.exe no specs unicorn-18416.exe no specs unicorn-32151.exe no specs unicorn-62905.exe no specs unicorn-30232.exe no specs unicorn-49833.exe no specs unicorn-30232.exe no specs unicorn-49833.exe no specs unicorn-30232.exe no specs unicorn-44301.exe unicorn-42920.exe no specs unicorn-62521.exe no specs unicorn-30860.exe no specs unicorn-17648.exe no specs unicorn-44929.exe no specs unicorn-25816.exe no specs unicorn-49004.exe no specs unicorn-17648.exe no specs unicorn-33984.exe no specs unicorn-59117.exe no specs unicorn-59117.exe no specs unicorn-36096.exe no specs unicorn-36096.exe no specs unicorn-42226.exe no specs unicorn-22360.exe no specs unicorn-41961.exe no specs unicorn-13180.exe no specs unicorn-33295.exe no specs unicorn-41961.exe no specs unicorn-43716.exe no specs unicorn-7315.exe no specs unicorn-37758.exe no specs unicorn-42034.exe no specs unicorn-4701.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
672C:\Users\admin\AppData\Local\Temp\Unicorn-51765.exeC:\Users\admin\AppData\Local\Temp\Unicorn-51765.exe
Unicorn-42554.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-51765.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
680C:\Users\admin\AppData\Local\Temp\Unicorn-48868.exeC:\Users\admin\AppData\Local\Temp\Unicorn-48868.exe
1 (1330).exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-48868.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
728C:\Users\admin\AppData\Local\Temp\Unicorn-42890.exeC:\Users\admin\AppData\Local\Temp\Unicorn-42890.exe—Unicorn-56676.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
1052C:\Users\admin\AppData\Local\Temp\Unicorn-19934.exeC:\Users\admin\AppData\Local\Temp\Unicorn-19934.exe
Unicorn-48868.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-19934.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1240C:\Users\admin\AppData\Local\Temp\Unicorn-193.exeC:\Users\admin\AppData\Local\Temp\Unicorn-193.exe
Unicorn-18346.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-193.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1244C:\Users\admin\AppData\Local\Temp\Unicorn-17648.exeC:\Users\admin\AppData\Local\Temp\Unicorn-17648.exe—Unicorn-36330.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
1276"C:\Users\admin\AppData\Local\Temp\1 (1330).exe" C:\Users\admin\AppData\Local\Temp\1 (1330).exe
explorer.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\1 (1330).exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1300C:\Users\admin\AppData\Local\Temp\Unicorn-62969.exeC:\Users\admin\AppData\Local\Temp\Unicorn-62969.exe
Unicorn-20126.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-62969.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1312C:\Users\admin\AppData\Local\Temp\Unicorn-36720.exeC:\Users\admin\AppData\Local\Temp\Unicorn-36720.exe
Unicorn-65138.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-36720.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1600C:\Users\admin\AppData\Local\Temp\Unicorn-58717.exeC:\Users\admin\AppData\Local\Temp\Unicorn-58717.exe—Unicorn-14564.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-58717.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
Total events
9 986
Read events
9 986
Write events
0
Delete events
0

Modification events

No data
Executable files
785
Suspicious files
0
Text files
0
Unknown types
0

Dropped files

PID
Process
Filename
Type
12761 (1330).exeC:\Users\admin\AppData\Local\Temp\Unicorn-48868.exeexecutable
MD5:017B91559B931C5EBA348AD93EC88908
SHA256:1C0C325955B1624C3602B9B30E0DF4DBA7DE5D146710686F1D3681B2719A3933
12761 (1330).exeC:\Users\admin\AppData\Local\Temp\Unicorn-41188.exeexecutable
MD5:78B6761C2876CAC52E49B1B8082BAF83
SHA256:ADCEAFCD9728FC21F08C79D8800D7DED3B044D9FD9EA8492B9091810B0624A05
5124Unicorn-41188.exeC:\Users\admin\AppData\Local\Temp\Unicorn-42554.exeexecutable
MD5:BFEDD6B335C2C07101BDDB26419AC009
SHA256:EEF600042CC6ACB84E70AEEDBEAAA05C8D5728188656B3C9F240430041BBE820
1672Unicorn-8205.exeC:\Users\admin\AppData\Local\Temp\Unicorn-35132.exeexecutable
MD5:96E71DBAF05F08943FC18ABB477FC3FE
SHA256:0943D8638D5822FB426AD111AAE65DF6FB5607F07351A2D805D051230F15689D
5968Unicorn-42554.exeC:\Users\admin\AppData\Local\Temp\Unicorn-20126.exeexecutable
MD5:ABBF6065063D25B0341247D4EA1F0456
SHA256:C2AD97F2CBD36D4E457089706FC920C3E10C3236FBACC3185F4CBC14F55BDDA5
5124Unicorn-41188.exeC:\Users\admin\AppData\Local\Temp\Unicorn-29040.exeexecutable
MD5:D85577467B8D44E7111A8DC853AE24BE
SHA256:C444A9143B88CAD291F6B06C704CA5628DB20DDD5B0B7627F474337931751960
1672Unicorn-8205.exeC:\Users\admin\AppData\Local\Temp\Unicorn-65138.exeexecutable
MD5:5655831730B8ACB4632446CDFAC3F443
SHA256:3644C6B9BCFDD3C9BC6C316911781022B9CFDF82439DFBB936575FB0738EE7EC
5392Unicorn-35132.exeC:\Users\admin\AppData\Local\Temp\Unicorn-65242.exeexecutable
MD5:11448C829F1042FBA61B683717D50A96
SHA256:0534E792954EFA103C041C2F510CF96E9EAD5EC2E110F553A56608268EAC8E1A
6644Unicorn-20126.exeC:\Users\admin\AppData\Local\Temp\Unicorn-6093.exeexecutable
MD5:86E7130999CE3F2BCFEC73EB3592423F
SHA256:39DAA272274F5590AB51598F6D2E1054F6C740B6C75A28659C633F216FC7F694
5968Unicorn-42554.exeC:\Users\admin\AppData\Local\Temp\Unicorn-51765.exeexecutable
MD5:24682A87D859A4F324B4EFE39E315636
SHA256:DADAA2A3701612DF8D9537FB301D74C0E2AA21CFCD20AD8ED69605CB09E60CD5
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
22
DNS requests
16
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
5496
MoUsoCoreWorker.exe
GET
200
2.16.164.9:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
2284
backgroundTaskHost.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
whitelisted
8116
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
6544
svchost.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
8116
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:137
—
—
—
whitelisted
—
—
51.124.78.146:443
—
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
5496
MoUsoCoreWorker.exe
2.16.164.9:80
crl.microsoft.com
Akamai International B.V.
NL
whitelisted
2104
svchost.exe
51.124.78.146:443
—
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
5364
RUXIMICS.exe
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
2112
svchost.exe
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
6544
svchost.exe
20.190.160.22:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
184.30.131.245:80
ocsp.digicert.com
AKAMAI-AS
US
whitelisted
3216
svchost.exe
40.115.3.253:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted

DNS requests

Domain
IP
Reputation
google.com
  • 216.58.206.46
whitelisted
crl.microsoft.com
  • 2.16.164.9
  • 2.16.164.120
  • 2.16.164.106
  • 2.16.164.51
whitelisted
settings-win.data.microsoft.com
  • 40.127.240.158
whitelisted
login.live.com
  • 20.190.160.22
  • 20.190.160.66
  • 20.190.160.4
  • 20.190.160.14
  • 20.190.160.65
  • 40.126.32.68
  • 40.126.32.74
  • 40.126.32.133
whitelisted
ocsp.digicert.com
  • 184.30.131.245
whitelisted
client.wns.windows.com
  • 40.115.3.253
whitelisted
arc.msn.com
  • 20.31.169.57
whitelisted
slscr.update.microsoft.com
  • 52.149.20.212
whitelisted
www.microsoft.com
  • 184.30.21.171
whitelisted
fe3cr.delivery.mp.microsoft.com
  • 20.3.187.198
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
1 (1330)