| File name: | 1 (1169) |
| Full analysis: | https://app.any.run/tasks/ec77f2b6-ffc8-4b90-b1ce-1822f53f0563 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 08:11:36 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | 73970168073E4E3A32F37CE5C37CBD60 |
| SHA1: | F8815F0EFDCA6DB77EE4F0987F119991464146B3 |
| SHA256: | 8DD6486C54574ECA1F3232A0BBB9FE9CAC9F56FABC3A3A9C7E590A0634A40F73 |
| SSDEEP: | 6144:a7K8I76JeDNHA5DeUse+1Afx/tBQlvJGB//WweOmFk/8SwjwpyAvEhoAsAW+svRa:a+1eaHA5KUPTBmha/OweOmEx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- Unicorn-13492.exe (PID: 1228)
- 1 (1169).exe (PID: 2384)
- Unicorn-14172.exe (PID: 7336)
- Unicorn-9299.exe (PID: 7348)
- Unicorn-21677.exe (PID: 7484)
- Unicorn-26315.exe (PID: 7496)
- Unicorn-64747.exe (PID: 7508)
- Unicorn-50981.exe (PID: 7564)
- Unicorn-63980.exe (PID: 7580)
- Unicorn-16109.exe (PID: 7596)
- Unicorn-16493.exe (PID: 7636)
- Unicorn-10170.exe (PID: 7612)
- Unicorn-12963.exe (PID: 7644)
- Unicorn-16227.exe (PID: 7628)
- Unicorn-65501.exe (PID: 7620)
- Unicorn-5340.exe (PID: 7532)
- Unicorn-20909.exe (PID: 7736)
- Unicorn-2652.exe (PID: 7712)
- Unicorn-41883.exe (PID: 7728)
- Unicorn-55811.exe (PID: 7752)
- Unicorn-42267.exe (PID: 7780)
- Unicorn-61365.exe (PID: 7808)
- Unicorn-9699.exe (PID: 7852)
- Unicorn-37437.exe (PID: 7768)
- Unicorn-44837.exe (PID: 7816)
- Unicorn-25163.exe (PID: 7832)
- Unicorn-39299.exe (PID: 7896)
- Unicorn-28338.exe (PID: 7876)
- Unicorn-12356.exe (PID: 7868)
- Unicorn-50235.exe (PID: 7888)
- Unicorn-26301.exe (PID: 7860)
- Unicorn-42563.exe (PID: 8012)
- Unicorn-46477.exe (PID: 8028)
- Unicorn-45325.exe (PID: 8064)
- Unicorn-571.exe (PID: 8048)
- Unicorn-47555.exe (PID: 8092)
- Unicorn-12579.exe (PID: 8104)
- Unicorn-58516.exe (PID: 8116)
- Unicorn-38309.exe (PID: 8168)
- Unicorn-63197.exe (PID: 6132)
- Unicorn-21786.exe (PID: 6032)
- Unicorn-22165.exe (PID: 8176)
- Unicorn-32370.exe (PID: 8184)
- Unicorn-35355.exe (PID: 2560)
- Unicorn-17203.exe (PID: 896)
- Unicorn-63109.exe (PID: 7288)
- Unicorn-53789.exe (PID: 4180)
- Unicorn-7970.exe (PID: 7284)
- Unicorn-28517.exe (PID: 7180)
- Unicorn-61573.exe (PID: 5008)
- Unicorn-35844.exe (PID: 4812)
- Unicorn-44972.exe (PID: 5392)
- Unicorn-7276.exe (PID: 7376)
- Unicorn-32387.exe (PID: 6744)
- Unicorn-40747.exe (PID: 2904)
- Unicorn-59964.exe (PID: 2108)
- Unicorn-30717.exe (PID: 5024)
- Unicorn-23346.exe (PID: 7320)
- Unicorn-53597.exe (PID: 516)
- Unicorn-45029.exe (PID: 7824)
- Unicorn-3244.exe (PID: 7248)
- Unicorn-45429.exe (PID: 3888)
- Unicorn-58812.exe (PID: 7308)
- Unicorn-18547.exe (PID: 6768)
- Unicorn-43507.exe (PID: 5164)
- Unicorn-6434.exe (PID: 6156)
- Unicorn-53981.exe (PID: 5048)
- Unicorn-836.exe (PID: 3132)
- Unicorn-16714.exe (PID: 7212)
- Unicorn-8355.exe (PID: 7232)
- Unicorn-675.exe (PID: 7196)
- Unicorn-55709.exe (PID: 7316)
- Unicorn-4292.exe (PID: 8072)
- Unicorn-13259.exe (PID: 7480)
- Unicorn-37157.exe (PID: 8084)
- Unicorn-37955.exe (PID: 2148)
- Unicorn-34026.exe (PID: 8900)
- Unicorn-7276.exe (PID: 7372)
- Unicorn-17085.exe (PID: 8244)
- Unicorn-44277.exe (PID: 6944)
- Unicorn-43997.exe (PID: 8952)
- Unicorn-19493.exe (PID: 8996)
- Unicorn-33509.exe (PID: 5640)
- Unicorn-2123.exe (PID: 7696)
- Unicorn-53047.exe (PID: 8564)
- Unicorn-98.exe (PID: 5360)
- Unicorn-22874.exe (PID: 9092)
- Unicorn-18163.exe (PID: 8472)
- Unicorn-39403.exe (PID: 8464)
- Unicorn-16931.exe (PID: 9232)
- Unicorn-4832.exe (PID: 8632)
- Unicorn-5956.exe (PID: 9608)
- Unicorn-36448.exe (PID: 9352)
- Unicorn-48693.exe (PID: 6512)
- Unicorn-42963.exe (PID: 1240)
- Unicorn-8340.exe (PID: 8336)
- Unicorn-42378.exe (PID: 8596)
- Unicorn-28740.exe (PID: 9100)
- Unicorn-18567.exe (PID: 8624)
- Unicorn-62886.exe (PID: 8356)
- Unicorn-34381.exe (PID: 8416)
- Unicorn-48340.exe (PID: 3300)
- Unicorn-9139.exe (PID: 9108)
- Unicorn-17794.exe (PID: 6572)
- Unicorn-3322.exe (PID: 9532)
- Unicorn-58634.exe (PID: 10232)
- Unicorn-10561.exe (PID: 8324)
- Unicorn-30157.exe (PID: 736)
- Unicorn-57964.exe (PID: 9912)
- Unicorn-40245.exe (PID: 2092)
- Unicorn-62763.exe (PID: 8260)
- Unicorn-38419.exe (PID: 7224)
- Unicorn-38709.exe (PID: 6576)
- Unicorn-57261.exe (PID: 8520)
- Unicorn-35178.exe (PID: 668)
- Unicorn-59373.exe (PID: 9028)
- Unicorn-34986.exe (PID: 8588)
- Unicorn-37555.exe (PID: 7692)
- Unicorn-43651.exe (PID: 9812)
- Unicorn-10817.exe (PID: 8772)
- Unicorn-25971.exe (PID: 9692)
- Unicorn-40260.exe (PID: 1128)
- Unicorn-55813.exe (PID: 5776)
- Unicorn-39603.exe (PID: 7184)
- Unicorn-14508.exe (PID: 9836)
- Unicorn-56236.exe (PID: 9208)
- Unicorn-41693.exe (PID: 8836)
- Unicorn-30978.exe (PID: 11284)
- Unicorn-28178.exe (PID: 11276)
- Unicorn-16213.exe (PID: 5984)
- Unicorn-18538.exe (PID: 8300)
- Unicorn-41819.exe (PID: 9248)
- Unicorn-18645.exe (PID: 2064)
- Unicorn-59963.exe (PID: 1300)
- Unicorn-48914.exe (PID: 9496)
- Unicorn-52059.exe (PID: 9704)
- Unicorn-24950.exe (PID: 9472)
- Unicorn-50361.exe (PID: 10452)
- Unicorn-10123.exe (PID: 10060)
- Unicorn-42077.exe (PID: 8844)
- Unicorn-10320.exe (PID: 9620)
- Unicorn-51732.exe (PID: 9992)
- Unicorn-63213.exe (PID: 1096)
- Unicorn-64005.exe (PID: 10112)
- Unicorn-48333.exe (PID: 9764)
- Unicorn-2738.exe (PID: 12576)
- Unicorn-40700.exe (PID: 12624)
- Unicorn-58976.exe (PID: 9596)
- Unicorn-59995.exe (PID: 11756)
- Unicorn-40373.exe (PID: 10432)
- Unicorn-47069.exe (PID: 2984)
- Unicorn-19885.exe (PID: 8280)
- Unicorn-14292.exe (PID: 1180)
- Unicorn-26196.exe (PID: 13104)
- Unicorn-42723.exe (PID: 12892)
- Unicorn-17243.exe (PID: 11304)
- Unicorn-9139.exe (PID: 9116)
- Unicorn-16445.exe (PID: 10388)
- Unicorn-40387.exe (PID: 10324)
- Unicorn-42774.exe (PID: 10180)
- Unicorn-63429.exe (PID: 9980)
- Unicorn-58348.exe (PID: 11016)
- Unicorn-13960.exe (PID: 8556)
- Unicorn-24362.exe (PID: 4304)
- Unicorn-35844.exe (PID: 12508)
- Unicorn-36844.exe (PID: 11268)
- Unicorn-39738.exe (PID: 7356)
- Unicorn-11440.exe (PID: 10668)
- Unicorn-33201.exe (PID: 9636)
- Unicorn-28645.exe (PID: 10976)
- Unicorn-34773.exe (PID: 13256)
- Unicorn-55325.exe (PID: 4724)
- Unicorn-63709.exe (PID: 9848)
- Unicorn-55325.exe (PID: 3096)
- Unicorn-55738.exe (PID: 9360)
- Unicorn-60914.exe (PID: 8400)
- Unicorn-54292.exe (PID: 5344)
- Unicorn-62154.exe (PID: 8496)
- Unicorn-18075.exe (PID: 6080)
- Unicorn-42501.exe (PID: 12808)
- Unicorn-24869.exe (PID: 8348)
- Unicorn-31530.exe (PID: 9580)
- Unicorn-40757.exe (PID: 10364)
- Unicorn-61332.exe (PID: 9776)
- Unicorn-44125.exe (PID: 6960)
- Unicorn-45468.exe (PID: 7260)
- Unicorn-48172.exe (PID: 10416)
- Unicorn-24055.exe (PID: 9664)
- Unicorn-65467.exe (PID: 10008)
- Unicorn-60756.exe (PID: 9740)
- Unicorn-30548.exe (PID: 9444)
- Unicorn-57980.exe (PID: 10960)
- Unicorn-42571.exe (PID: 2332)
- Unicorn-44597.exe (PID: 10836)
- Unicorn-9607.exe (PID: 8292)
- Unicorn-8676.exe (PID: 12700)
- Unicorn-50909.exe (PID: 8428)
- Unicorn-38232.exe (PID: 7796)
- Unicorn-28423.exe (PID: 3620)
- Unicorn-53332.exe (PID: 7548)
- Unicorn-16475.exe (PID: 12156)
- Unicorn-36.exe (PID: 12900)
- Unicorn-5115.exe (PID: 9880)
- Unicorn-56424.exe (PID: 12644)
- Unicorn-5412.exe (PID: 12368)
- Unicorn-40970.exe (PID: 8100)
- Unicorn-10668.exe (PID: 7000)
- Unicorn-7657.exe (PID: 7476)
- Unicorn-5960.exe (PID: 7432)
- Unicorn-46730.exe (PID: 5124)
- Unicorn-49216.exe (PID: 12564)
- Unicorn-48939.exe (PID: 9968)
- Unicorn-40077.exe (PID: 10140)
- Unicorn-9193.exe (PID: 7840)
- Unicorn-10364.exe (PID: 9064)
- Unicorn-11353.exe (PID: 10344)
- Unicorn-26317.exe (PID: 8760)
- Unicorn-35744.exe (PID: 10936)
- Unicorn-45852.exe (PID: 9312)
- Unicorn-16893.exe (PID: 8368)
- Unicorn-63948.exe (PID: 11008)
- Unicorn-11440.exe (PID: 10644)
- Unicorn-10979.exe (PID: 9828)
- Unicorn-16370.exe (PID: 11536)
- Unicorn-4434.exe (PID: 9200)
Starts itself from another location
- Unicorn-13492.exe (PID: 1228)
- Unicorn-9299.exe (PID: 7348)
- 1 (1169).exe (PID: 2384)
- Unicorn-14172.exe (PID: 7336)
- Unicorn-26315.exe (PID: 7496)
- Unicorn-21677.exe (PID: 7484)
- Unicorn-5340.exe (PID: 7532)
- Unicorn-50981.exe (PID: 7564)
- Unicorn-63980.exe (PID: 7580)
- Unicorn-64747.exe (PID: 7508)
- Unicorn-16109.exe (PID: 7596)
- Unicorn-16493.exe (PID: 7636)
- Unicorn-10170.exe (PID: 7612)
- Unicorn-16227.exe (PID: 7628)
- Unicorn-65501.exe (PID: 7620)
- Unicorn-12963.exe (PID: 7644)
- Unicorn-2652.exe (PID: 7712)
- Unicorn-20909.exe (PID: 7736)
- Unicorn-41883.exe (PID: 7728)
- Unicorn-55811.exe (PID: 7752)
- Unicorn-42267.exe (PID: 7780)
- Unicorn-61365.exe (PID: 7808)
- Unicorn-37437.exe (PID: 7768)
- Unicorn-9699.exe (PID: 7852)
- Unicorn-25163.exe (PID: 7832)
- Unicorn-45029.exe (PID: 7824)
- Unicorn-39299.exe (PID: 7896)
- Unicorn-28338.exe (PID: 7876)
- Unicorn-12356.exe (PID: 7868)
- Unicorn-50235.exe (PID: 7888)
- Unicorn-26301.exe (PID: 7860)
- Unicorn-42563.exe (PID: 8012)
- Unicorn-46477.exe (PID: 8028)
- Unicorn-571.exe (PID: 8048)
- Unicorn-58516.exe (PID: 8116)
- Unicorn-37157.exe (PID: 8084)
- Unicorn-47555.exe (PID: 8092)
- Unicorn-44837.exe (PID: 7816)
- Unicorn-12579.exe (PID: 8104)
- Unicorn-38309.exe (PID: 8168)
- Unicorn-63197.exe (PID: 6132)
- Unicorn-22165.exe (PID: 8176)
- Unicorn-32370.exe (PID: 8184)
- Unicorn-35355.exe (PID: 2560)
- Unicorn-17203.exe (PID: 896)
- Unicorn-63109.exe (PID: 7288)
- Unicorn-21786.exe (PID: 6032)
- Unicorn-53789.exe (PID: 4180)
- Unicorn-7970.exe (PID: 7284)
- Unicorn-61573.exe (PID: 5008)
- Unicorn-28517.exe (PID: 7180)
- Unicorn-35844.exe (PID: 4812)
- Unicorn-32387.exe (PID: 6744)
- Unicorn-44972.exe (PID: 5392)
- Unicorn-7276.exe (PID: 7376)
- Unicorn-40747.exe (PID: 2904)
- Unicorn-23346.exe (PID: 7320)
- Unicorn-30717.exe (PID: 5024)
- Unicorn-59964.exe (PID: 2108)
- Unicorn-53597.exe (PID: 516)
- Unicorn-3244.exe (PID: 7248)
- Unicorn-58812.exe (PID: 7308)
- Unicorn-43507.exe (PID: 5164)
- Unicorn-45429.exe (PID: 3888)
- Unicorn-18547.exe (PID: 6768)
- Unicorn-6434.exe (PID: 6156)
- Unicorn-53981.exe (PID: 5048)
- Unicorn-836.exe (PID: 3132)
- Unicorn-16714.exe (PID: 7212)
- Unicorn-8355.exe (PID: 7232)
- Unicorn-45325.exe (PID: 8064)
- Unicorn-13259.exe (PID: 7480)
- Unicorn-675.exe (PID: 7196)
- Unicorn-55709.exe (PID: 7316)
- Unicorn-4292.exe (PID: 8072)
- Unicorn-37955.exe (PID: 2148)
- Unicorn-34026.exe (PID: 8900)
- Unicorn-7276.exe (PID: 7372)
- Unicorn-17085.exe (PID: 8244)
- Unicorn-44277.exe (PID: 6944)
- Unicorn-19493.exe (PID: 8996)
- Unicorn-33509.exe (PID: 5640)
- Unicorn-2123.exe (PID: 7696)
- Unicorn-98.exe (PID: 5360)
- Unicorn-53047.exe (PID: 8564)
- Unicorn-22874.exe (PID: 9092)
- Unicorn-39403.exe (PID: 8464)
- Unicorn-18163.exe (PID: 8472)
- Unicorn-16931.exe (PID: 9232)
- Unicorn-4832.exe (PID: 8632)
- Unicorn-5956.exe (PID: 9608)
- Unicorn-36448.exe (PID: 9352)
- Unicorn-48693.exe (PID: 6512)
- Unicorn-42963.exe (PID: 1240)
- Unicorn-8340.exe (PID: 8336)
- Unicorn-42378.exe (PID: 8596)
- Unicorn-28740.exe (PID: 9100)
- Unicorn-18567.exe (PID: 8624)
- Unicorn-34381.exe (PID: 8416)
- Unicorn-62886.exe (PID: 8356)
- Unicorn-58634.exe (PID: 10232)
- Unicorn-48340.exe (PID: 3300)
- Unicorn-9139.exe (PID: 9108)
- Unicorn-17794.exe (PID: 6572)
- Unicorn-14508.exe (PID: 9836)
- Unicorn-10561.exe (PID: 8324)
- Unicorn-30157.exe (PID: 736)
- Unicorn-57964.exe (PID: 9912)
- Unicorn-62763.exe (PID: 8260)
- Unicorn-40245.exe (PID: 2092)
- Unicorn-38419.exe (PID: 7224)
- Unicorn-16893.exe (PID: 8368)
- Unicorn-35178.exe (PID: 668)
- Unicorn-57261.exe (PID: 8520)
- Unicorn-34986.exe (PID: 8588)
- Unicorn-59373.exe (PID: 9028)
- Unicorn-37555.exe (PID: 7692)
- Unicorn-43651.exe (PID: 9812)
- Unicorn-10817.exe (PID: 8772)
- Unicorn-40260.exe (PID: 1128)
- Unicorn-55813.exe (PID: 5776)
- Unicorn-39603.exe (PID: 7184)
- Unicorn-3322.exe (PID: 9532)
- Unicorn-56236.exe (PID: 9208)
- Unicorn-41693.exe (PID: 8836)
- Unicorn-30978.exe (PID: 11284)
- Unicorn-28178.exe (PID: 11276)
- Unicorn-36844.exe (PID: 11268)
- Unicorn-43997.exe (PID: 8952)
- Unicorn-16213.exe (PID: 5984)
- Unicorn-41819.exe (PID: 9248)
- Unicorn-10364.exe (PID: 9064)
- Unicorn-59963.exe (PID: 1300)
- Unicorn-55325.exe (PID: 4724)
- Unicorn-18645.exe (PID: 2064)
- Unicorn-24950.exe (PID: 9472)
- Unicorn-50361.exe (PID: 10452)
- Unicorn-20461.exe (PID: 9224)
- Unicorn-48914.exe (PID: 9496)
- Unicorn-10320.exe (PID: 9620)
- Unicorn-51732.exe (PID: 9992)
- Unicorn-52059.exe (PID: 9704)
- Unicorn-63213.exe (PID: 1096)
- Unicorn-64005.exe (PID: 10112)
- Unicorn-42077.exe (PID: 8844)
- Unicorn-48333.exe (PID: 9764)
- Unicorn-10123.exe (PID: 10060)
- Unicorn-2738.exe (PID: 12576)
- Unicorn-56424.exe (PID: 12644)
- Unicorn-40373.exe (PID: 10432)
- Unicorn-38709.exe (PID: 6576)
- Unicorn-47069.exe (PID: 2984)
- Unicorn-19885.exe (PID: 8280)
- Unicorn-14292.exe (PID: 1180)
- Unicorn-26196.exe (PID: 13104)
- Unicorn-42723.exe (PID: 12892)
- Unicorn-58976.exe (PID: 9596)
- Unicorn-17243.exe (PID: 11304)
- Unicorn-16445.exe (PID: 10388)
- Unicorn-42774.exe (PID: 10180)
- Unicorn-40387.exe (PID: 10324)
- Unicorn-63429.exe (PID: 9980)
- Unicorn-58348.exe (PID: 11016)
- Unicorn-39738.exe (PID: 7356)
- Unicorn-35844.exe (PID: 12508)
- Unicorn-24362.exe (PID: 4304)
- Unicorn-40700.exe (PID: 12624)
- Unicorn-34773.exe (PID: 13256)
- Unicorn-28645.exe (PID: 10976)
- Unicorn-38232.exe (PID: 7796)
- Unicorn-9193.exe (PID: 7840)
- Unicorn-28423.exe (PID: 3620)
- Unicorn-9139.exe (PID: 9116)
- Unicorn-60914.exe (PID: 8400)
- Unicorn-25971.exe (PID: 9692)
- Unicorn-63709.exe (PID: 9848)
- Unicorn-11440.exe (PID: 10668)
- Unicorn-55325.exe (PID: 3096)
- Unicorn-33201.exe (PID: 9636)
Executes application which crashes
- Unicorn-2931.exe (PID: 11736)
- Unicorn-53196.exe (PID: 13336)
INFO
Checks supported languages
- 1 (1169).exe (PID: 2384)
- Unicorn-13492.exe (PID: 1228)
- Unicorn-14172.exe (PID: 7336)
- Unicorn-9299.exe (PID: 7348)
- Unicorn-21677.exe (PID: 7484)
- Unicorn-26315.exe (PID: 7496)
- Unicorn-5340.exe (PID: 7532)
- Unicorn-64747.exe (PID: 7508)
- Unicorn-50981.exe (PID: 7564)
- Unicorn-63980.exe (PID: 7580)
- Unicorn-16109.exe (PID: 7596)
- Unicorn-10170.exe (PID: 7612)
- Unicorn-16227.exe (PID: 7628)
- Unicorn-12963.exe (PID: 7644)
- Unicorn-41883.exe (PID: 7728)
- Unicorn-2652.exe (PID: 7712)
- Unicorn-65501.exe (PID: 7620)
- Unicorn-16493.exe (PID: 7636)
- Unicorn-55811.exe (PID: 7752)
- Unicorn-37437.exe (PID: 7768)
- Unicorn-42267.exe (PID: 7780)
- Unicorn-61365.exe (PID: 7808)
- Unicorn-45029.exe (PID: 7824)
- Unicorn-44837.exe (PID: 7816)
- Unicorn-9699.exe (PID: 7852)
- Unicorn-12356.exe (PID: 7868)
- Unicorn-26301.exe (PID: 7860)
- Unicorn-28338.exe (PID: 7876)
- Unicorn-50235.exe (PID: 7888)
- Unicorn-39299.exe (PID: 7896)
- Unicorn-46477.exe (PID: 8028)
- Unicorn-571.exe (PID: 8048)
- Unicorn-42563.exe (PID: 8012)
- Unicorn-4292.exe (PID: 8072)
- Unicorn-37157.exe (PID: 8084)
- Unicorn-12579.exe (PID: 8104)
- Unicorn-58516.exe (PID: 8116)
- Unicorn-45325.exe (PID: 8064)
- Unicorn-38309.exe (PID: 8168)
- Unicorn-32370.exe (PID: 8184)
- Unicorn-63197.exe (PID: 6132)
- Unicorn-35355.exe (PID: 2560)
- Unicorn-30717.exe (PID: 5024)
- Unicorn-21786.exe (PID: 6032)
- Unicorn-22165.exe (PID: 8176)
- Unicorn-675.exe (PID: 7196)
- Unicorn-6434.exe (PID: 6156)
- Unicorn-37955.exe (PID: 2148)
- Unicorn-45429.exe (PID: 3888)
- Unicorn-63109.exe (PID: 7288)
- Unicorn-32387.exe (PID: 6744)
- Unicorn-3244.exe (PID: 7248)
- Unicorn-35844.exe (PID: 4812)
- Unicorn-61573.exe (PID: 5008)
- Unicorn-53597.exe (PID: 516)
- Unicorn-18547.exe (PID: 6768)
- Unicorn-43507.exe (PID: 5164)
- Unicorn-53981.exe (PID: 5048)
- Unicorn-58812.exe (PID: 7308)
- Unicorn-23346.exe (PID: 7320)
- Unicorn-7276.exe (PID: 7376)
- Unicorn-40747.exe (PID: 2904)
- Unicorn-53789.exe (PID: 4180)
- Unicorn-44277.exe (PID: 6944)
- Unicorn-7276.exe (PID: 7372)
- Unicorn-44972.exe (PID: 5392)
- Unicorn-14292.exe (PID: 1180)
- Unicorn-55325.exe (PID: 3096)
- Unicorn-38419.exe (PID: 7224)
- Unicorn-16714.exe (PID: 7212)
- Unicorn-59964.exe (PID: 2108)
- Unicorn-8355.exe (PID: 7232)
- Unicorn-13259.exe (PID: 7480)
- Unicorn-40260.exe (PID: 1128)
- Unicorn-836.exe (PID: 3132)
- Unicorn-33509.exe (PID: 5640)
- Unicorn-48693.exe (PID: 6512)
- Unicorn-55709.exe (PID: 7316)
- Unicorn-98.exe (PID: 5360)
- Unicorn-48339.exe (PID: 5260)
- Unicorn-18075.exe (PID: 6080)
- Unicorn-16213.exe (PID: 5984)
- Unicorn-63213.exe (PID: 1096)
- Unicorn-38709.exe (PID: 6576)
- Unicorn-30157.exe (PID: 736)
- Unicorn-37555.exe (PID: 7692)
- Unicorn-40245.exe (PID: 2092)
- Unicorn-53332.exe (PID: 7548)
- Unicorn-2123.exe (PID: 7696)
- Unicorn-48340.exe (PID: 3300)
- Unicorn-9607.exe (PID: 8292)
- Unicorn-55325.exe (PID: 4724)
- Unicorn-8340.exe (PID: 8336)
- Unicorn-60914.exe (PID: 8400)
- Unicorn-24869.exe (PID: 8348)
- Unicorn-62886.exe (PID: 8356)
- Unicorn-34381.exe (PID: 8416)
- Unicorn-57261.exe (PID: 8520)
- Unicorn-10561.exe (PID: 8324)
- Unicorn-18163.exe (PID: 8472)
- Unicorn-53047.exe (PID: 8564)
- Unicorn-34986.exe (PID: 8588)
- Unicorn-34026.exe (PID: 8900)
- Unicorn-42378.exe (PID: 8596)
- Unicorn-10817.exe (PID: 8772)
- Unicorn-26317.exe (PID: 8760)
- Unicorn-55813.exe (PID: 5776)
- Unicorn-13960.exe (PID: 8556)
- Unicorn-21251.exe (PID: 8576)
- Unicorn-19493.exe (PID: 8996)
- Unicorn-43997.exe (PID: 8952)
- Unicorn-41693.exe (PID: 8836)
- Unicorn-59373.exe (PID: 9028)
- Unicorn-56236.exe (PID: 9208)
- Unicorn-62763.exe (PID: 8260)
- Unicorn-59963.exe (PID: 1300)
- Unicorn-22874.exe (PID: 9092)
- Unicorn-28740.exe (PID: 9100)
- Unicorn-9139.exe (PID: 9116)
- Unicorn-10364.exe (PID: 9064)
- Unicorn-9139.exe (PID: 9108)
- Unicorn-16931.exe (PID: 9232)
- Unicorn-20461.exe (PID: 9224)
- Unicorn-37181.exe (PID: 9264)
- Unicorn-19885.exe (PID: 8280)
- Unicorn-55738.exe (PID: 9360)
- Unicorn-44107.exe (PID: 9408)
- Unicorn-41819.exe (PID: 9248)
- Unicorn-55821.exe (PID: 9288)
- Unicorn-45852.exe (PID: 9312)
- Unicorn-36448.exe (PID: 9352)
- Unicorn-34086.exe (PID: 9456)
- Unicorn-24950.exe (PID: 9472)
- Unicorn-48914.exe (PID: 9496)
- Unicorn-65259.exe (PID: 9344)
- Unicorn-31530.exe (PID: 9580)
- Unicorn-58976.exe (PID: 9596)
- Unicorn-33201.exe (PID: 9636)
- Unicorn-24055.exe (PID: 9664)
- Unicorn-61332.exe (PID: 9776)
- Unicorn-43651.exe (PID: 9812)
- Unicorn-60180.exe (PID: 9820)
- Unicorn-10979.exe (PID: 9828)
- Unicorn-17794.exe (PID: 6572)
- Unicorn-63429.exe (PID: 9980)
- Unicorn-51732.exe (PID: 9992)
- Unicorn-31765.exe (PID: 9788)
- Unicorn-10123.exe (PID: 10060)
- Unicorn-65467.exe (PID: 10008)
- Unicorn-59107.exe (PID: 3024)
- Unicorn-42774.exe (PID: 10180)
- Unicorn-11353.exe (PID: 10344)
- Unicorn-35557.exe (PID: 10332)
- Unicorn-16445.exe (PID: 10388)
- Unicorn-40757.exe (PID: 10364)
- Unicorn-2146.exe (PID: 10380)
- Unicorn-50361.exe (PID: 10452)
- Unicorn-40387.exe (PID: 10324)
- Unicorn-16829.exe (PID: 10524)
- Unicorn-40373.exe (PID: 10432)
- Unicorn-11440.exe (PID: 10636)
- Unicorn-11440.exe (PID: 10652)
- Unicorn-11440.exe (PID: 10660)
- Unicorn-27612.exe (PID: 10676)
- Unicorn-54882.exe (PID: 10732)
- Unicorn-51613.exe (PID: 10760)
- Unicorn-3080.exe (PID: 10616)
- Unicorn-1810.exe (PID: 10880)
- Unicorn-44597.exe (PID: 10836)
- Unicorn-41259.exe (PID: 10912)
- Unicorn-61125.exe (PID: 10920)
- Unicorn-25115.exe (PID: 10928)
- Unicorn-34981.exe (PID: 10952)
- Unicorn-30978.exe (PID: 11284)
- Unicorn-28645.exe (PID: 10976)
- Unicorn-31083.exe (PID: 10992)
- Unicorn-63948.exe (PID: 11008)
- Unicorn-58348.exe (PID: 11016)
- Unicorn-57099.exe (PID: 11040)
- Unicorn-8945.exe (PID: 10596)
- Unicorn-3284.exe (PID: 11108)
- Unicorn-43701.exe (PID: 3124)
- Unicorn-12028.exe (PID: 11164)
- Unicorn-31297.exe (PID: 11204)
- Unicorn-53947.exe (PID: 11212)
- Unicorn-44125.exe (PID: 6960)
- Unicorn-4820.exe (PID: 3968)
- Unicorn-17243.exe (PID: 11304)
- Unicorn-39116.exe (PID: 11344)
- Unicorn-7425.exe (PID: 11372)
- Unicorn-30669.exe (PID: 11512)
- Unicorn-38675.exe (PID: 11592)
- Unicorn-23042.exe (PID: 11560)
- Unicorn-5234.exe (PID: 11744)
- Unicorn-49060.exe (PID: 11764)
- Unicorn-56424.exe (PID: 12644)
- Unicorn-40700.exe (PID: 12624)
- Unicorn-12708.exe (PID: 11864)
- Unicorn-38173.exe (PID: 11796)
- Unicorn-13860.exe (PID: 11844)
- Unicorn-64213.exe (PID: 11988)
- Unicorn-7420.exe (PID: 12064)
- Unicorn-7155.exe (PID: 12072)
- Unicorn-36480.exe (PID: 12104)
- Unicorn-1098.exe (PID: 12056)
- Unicorn-50216.exe (PID: 12112)
- Unicorn-57690.exe (PID: 12080)
- Unicorn-9650.exe (PID: 12252)
- Unicorn-17348.exe (PID: 12260)
- Unicorn-37893.exe (PID: 12324)
- Unicorn-29917.exe (PID: 12356)
- Unicorn-5412.exe (PID: 12368)
- Unicorn-43107.exe (PID: 12384)
- Unicorn-40859.exe (PID: 12192)
- Unicorn-15515.exe (PID: 12232)
- Unicorn-50403.exe (PID: 12392)
- Unicorn-6211.exe (PID: 13032)
- Unicorn-36170.exe (PID: 12720)
- Unicorn-39720.exe (PID: 11392)
- Unicorn-60181.exe (PID: 12776)
- Unicorn-6595.exe (PID: 13072)
- Unicorn-20330.exe (PID: 13088)
- Unicorn-16475.exe (PID: 12156)
- Unicorn-37642.exe (PID: 13328)
- Unicorn-7555.exe (PID: 13224)
- Unicorn-25309.exe (PID: 13184)
- Unicorn-62812.exe (PID: 13136)
- Unicorn-40442.exe (PID: 13380)
- Unicorn-8676.exe (PID: 12700)
- Unicorn-1307.exe (PID: 13364)
- Unicorn-24362.exe (PID: 4304)
- Unicorn-59901.exe (PID: 6372)
- Unicorn-57716.exe (PID: 13456)
- Unicorn-12279.exe (PID: 13912)
- Unicorn-40685.exe (PID: 12856)
- Unicorn-5913.exe (PID: 14180)
- Unicorn-63592.exe (PID: 14160)
- Unicorn-59634.exe (PID: 13992)
- Unicorn-47138.exe (PID: 14216)
- Unicorn-6595.exe (PID: 13080)
- Unicorn-41541.exe (PID: 12708)
- Unicorn-6499.exe (PID: 5352)
- Unicorn-56961.exe (PID: 14348)
- Unicorn-52737.exe (PID: 14108)
- Unicorn-59634.exe (PID: 13984)
- Unicorn-11511.exe (PID: 14984)
- Unicorn-57912.exe (PID: 15000)
- Unicorn-48394.exe (PID: 14976)
- Unicorn-30064.exe (PID: 15260)
- Unicorn-543.exe (PID: 15040)
- Unicorn-38425.exe (PID: 14820)
- Unicorn-5100.exe (PID: 14048)
- Unicorn-47824.exe (PID: 15192)
- Unicorn-32826.exe (PID: 14960)
- Unicorn-4913.exe (PID: 14496)
- Unicorn-9088.exe (PID: 15048)
- Unicorn-13728.exe (PID: 15276)
- Unicorn-26119.exe (PID: 15132)
- Unicorn-22935.exe (PID: 14968)
- Unicorn-25368.exe (PID: 15932)
- Unicorn-36801.exe (PID: 15956)
- Unicorn-19207.exe (PID: 7944)
- Unicorn-64.exe (PID: 15436)
- Unicorn-32072.exe (PID: 16000)
- Unicorn-44585.exe (PID: 15992)
- Unicorn-51654.exe (PID: 15964)
- Unicorn-16895.exe (PID: 15448)
- Unicorn-14688.exe (PID: 15084)
- Unicorn-13624.exe (PID: 14332)
- Unicorn-29504.exe (PID: 15496)
- Unicorn-13992.exe (PID: 14728)
- Unicorn-37536.exe (PID: 14780)
- Unicorn-62737.exe (PID: 14788)
- Unicorn-54072.exe (PID: 14804)
- Unicorn-14688.exe (PID: 15076)
- Unicorn-14304.exe (PID: 14688)
The sample compiled with chinese language support
- 1 (1169).exe (PID: 2384)
- Unicorn-40260.exe (PID: 1128)
- Unicorn-3244.exe (PID: 7248)
- Unicorn-37437.exe (PID: 7768)
- Unicorn-55813.exe (PID: 5776)
- Unicorn-46477.exe (PID: 8028)
- Unicorn-61365.exe (PID: 7808)
- Unicorn-35355.exe (PID: 2560)
- Unicorn-39603.exe (PID: 7184)
- Unicorn-56236.exe (PID: 9208)
- Unicorn-41693.exe (PID: 8836)
- Unicorn-7276.exe (PID: 7372)
- Unicorn-30978.exe (PID: 11284)
- Unicorn-28178.exe (PID: 11276)
- Unicorn-17085.exe (PID: 8244)
- Unicorn-38309.exe (PID: 8168)
- Unicorn-43997.exe (PID: 8952)
- Unicorn-33509.exe (PID: 5640)
- Unicorn-5956.exe (PID: 9608)
- Unicorn-16493.exe (PID: 7636)
- Unicorn-16109.exe (PID: 7596)
- Unicorn-50235.exe (PID: 7888)
- Unicorn-47555.exe (PID: 8092)
- Unicorn-16213.exe (PID: 5984)
- Unicorn-63197.exe (PID: 6132)
- Unicorn-41819.exe (PID: 9248)
- Unicorn-18645.exe (PID: 2064)
- Unicorn-52059.exe (PID: 9704)
- Unicorn-21786.exe (PID: 6032)
- Unicorn-48914.exe (PID: 9496)
- Unicorn-59963.exe (PID: 1300)
- Unicorn-42077.exe (PID: 8844)
- Unicorn-53981.exe (PID: 5048)
- Unicorn-50361.exe (PID: 10452)
- Unicorn-10123.exe (PID: 10060)
- Unicorn-24950.exe (PID: 9472)
- Unicorn-10320.exe (PID: 9620)
- Unicorn-35844.exe (PID: 4812)
- Unicorn-42563.exe (PID: 8012)
- Unicorn-58634.exe (PID: 10232)
- Unicorn-17794.exe (PID: 6572)
- Unicorn-50981.exe (PID: 7564)
- Unicorn-51732.exe (PID: 9992)
- Unicorn-3322.exe (PID: 9532)
- Unicorn-64005.exe (PID: 10112)
- Unicorn-98.exe (PID: 5360)
- Unicorn-48333.exe (PID: 9764)
- Unicorn-63213.exe (PID: 1096)
- Unicorn-16931.exe (PID: 9232)
- Unicorn-42267.exe (PID: 7780)
- Unicorn-63980.exe (PID: 7580)
- Unicorn-25163.exe (PID: 7832)
- Unicorn-10170.exe (PID: 7612)
- Unicorn-14172.exe (PID: 7336)
- Unicorn-42963.exe (PID: 1240)
- Unicorn-34026.exe (PID: 8900)
- Unicorn-2738.exe (PID: 12576)
- Unicorn-63109.exe (PID: 7288)
- Unicorn-19493.exe (PID: 8996)
- Unicorn-40700.exe (PID: 12624)
- Unicorn-13492.exe (PID: 1228)
- Unicorn-58976.exe (PID: 9596)
- Unicorn-59995.exe (PID: 11756)
- Unicorn-53789.exe (PID: 4180)
- Unicorn-40373.exe (PID: 10432)
- Unicorn-28517.exe (PID: 7180)
- Unicorn-36448.exe (PID: 9352)
- Unicorn-7970.exe (PID: 7284)
- Unicorn-32387.exe (PID: 6744)
- Unicorn-9299.exe (PID: 7348)
- Unicorn-39299.exe (PID: 7896)
- Unicorn-45429.exe (PID: 3888)
- Unicorn-38709.exe (PID: 6576)
- Unicorn-47069.exe (PID: 2984)
- Unicorn-41883.exe (PID: 7728)
- Unicorn-43507.exe (PID: 5164)
- Unicorn-19885.exe (PID: 8280)
- Unicorn-7276.exe (PID: 7376)
- Unicorn-14292.exe (PID: 1180)
- Unicorn-26196.exe (PID: 13104)
- Unicorn-42723.exe (PID: 12892)
- Unicorn-17243.exe (PID: 11304)
- Unicorn-8355.exe (PID: 7232)
- Unicorn-5340.exe (PID: 7532)
- Unicorn-48340.exe (PID: 3300)
- Unicorn-30157.exe (PID: 736)
- Unicorn-21677.exe (PID: 7484)
- Unicorn-12963.exe (PID: 7644)
- Unicorn-9699.exe (PID: 7852)
- Unicorn-23346.exe (PID: 7320)
- Unicorn-9139.exe (PID: 9116)
- Unicorn-16445.exe (PID: 10388)
- Unicorn-42774.exe (PID: 10180)
- Unicorn-62886.exe (PID: 8356)
- Unicorn-6434.exe (PID: 6156)
- Unicorn-10561.exe (PID: 8324)
- Unicorn-63429.exe (PID: 9980)
- Unicorn-16227.exe (PID: 7628)
- Unicorn-58348.exe (PID: 11016)
- Unicorn-12356.exe (PID: 7868)
- Unicorn-40387.exe (PID: 10324)
- Unicorn-4292.exe (PID: 8072)
- Unicorn-18538.exe (PID: 8300)
- Unicorn-2652.exe (PID: 7712)
- Unicorn-20909.exe (PID: 7736)
- Unicorn-55709.exe (PID: 7316)
- Unicorn-571.exe (PID: 8048)
- Unicorn-45325.exe (PID: 8064)
- Unicorn-18163.exe (PID: 8472)
- Unicorn-65501.exe (PID: 7620)
- Unicorn-13960.exe (PID: 8556)
- Unicorn-40747.exe (PID: 2904)
- Unicorn-16714.exe (PID: 7212)
- Unicorn-32370.exe (PID: 8184)
- Unicorn-58812.exe (PID: 7308)
- Unicorn-8340.exe (PID: 8336)
- Unicorn-836.exe (PID: 3132)
- Unicorn-44972.exe (PID: 5392)
- Unicorn-37157.exe (PID: 8084)
- Unicorn-24362.exe (PID: 4304)
- Unicorn-37555.exe (PID: 7692)
- Unicorn-9139.exe (PID: 9108)
- Unicorn-14508.exe (PID: 9836)
- Unicorn-39738.exe (PID: 7356)
- Unicorn-64747.exe (PID: 7508)
- Unicorn-44837.exe (PID: 7816)
- Unicorn-35844.exe (PID: 12508)
- Unicorn-36844.exe (PID: 11268)
- Unicorn-11440.exe (PID: 10668)
- Unicorn-25971.exe (PID: 9692)
- Unicorn-12579.exe (PID: 8104)
- Unicorn-59373.exe (PID: 9028)
- Unicorn-45029.exe (PID: 7824)
- Unicorn-42378.exe (PID: 8596)
- Unicorn-13259.exe (PID: 7480)
- Unicorn-59964.exe (PID: 2108)
- Unicorn-34986.exe (PID: 8588)
- Unicorn-28338.exe (PID: 7876)
- Unicorn-33201.exe (PID: 9636)
- Unicorn-28645.exe (PID: 10976)
- Unicorn-34773.exe (PID: 13256)
- Unicorn-55325.exe (PID: 4724)
- Unicorn-60914.exe (PID: 8400)
- Unicorn-63709.exe (PID: 9848)
- Unicorn-18567.exe (PID: 8624)
- Unicorn-17203.exe (PID: 896)
- Unicorn-55325.exe (PID: 3096)
- Unicorn-57964.exe (PID: 9912)
- Unicorn-22874.exe (PID: 9092)
- Unicorn-48693.exe (PID: 6512)
- Unicorn-62154.exe (PID: 8496)
- Unicorn-42501.exe (PID: 12808)
- Unicorn-2123.exe (PID: 7696)
- Unicorn-18075.exe (PID: 6080)
- Unicorn-24869.exe (PID: 8348)
- Unicorn-55738.exe (PID: 9360)
- Unicorn-54292.exe (PID: 5344)
- Unicorn-26315.exe (PID: 7496)
- Unicorn-675.exe (PID: 7196)
- Unicorn-40757.exe (PID: 10364)
- Unicorn-61332.exe (PID: 9776)
- Unicorn-44125.exe (PID: 6960)
- Unicorn-30548.exe (PID: 9444)
- Unicorn-48172.exe (PID: 10416)
- Unicorn-45468.exe (PID: 7260)
- Unicorn-31530.exe (PID: 9580)
- Unicorn-18547.exe (PID: 6768)
- Unicorn-24055.exe (PID: 9664)
- Unicorn-34381.exe (PID: 8416)
- Unicorn-57980.exe (PID: 10960)
- Unicorn-42571.exe (PID: 2332)
- Unicorn-44597.exe (PID: 10836)
- Unicorn-8676.exe (PID: 12700)
- Unicorn-9607.exe (PID: 8292)
- Unicorn-65467.exe (PID: 10008)
- Unicorn-60756.exe (PID: 9740)
- Unicorn-28423.exe (PID: 3620)
- Unicorn-62763.exe (PID: 8260)
- Unicorn-5115.exe (PID: 9880)
- Unicorn-50909.exe (PID: 8428)
- Unicorn-36.exe (PID: 12900)
- Unicorn-38232.exe (PID: 7796)
- Unicorn-40970.exe (PID: 8100)
- Unicorn-53332.exe (PID: 7548)
- Unicorn-16475.exe (PID: 12156)
- Unicorn-56424.exe (PID: 12644)
- Unicorn-5412.exe (PID: 12368)
- Unicorn-40245.exe (PID: 2092)
- Unicorn-7657.exe (PID: 7476)
- Unicorn-10668.exe (PID: 7000)
- Unicorn-5960.exe (PID: 7432)
- Unicorn-46730.exe (PID: 5124)
- Unicorn-49216.exe (PID: 12564)
- Unicorn-48939.exe (PID: 9968)
- Unicorn-39403.exe (PID: 8464)
- Unicorn-40077.exe (PID: 10140)
- Unicorn-26317.exe (PID: 8760)
- Unicorn-26301.exe (PID: 7860)
- Unicorn-11353.exe (PID: 10344)
- Unicorn-35744.exe (PID: 10936)
- Unicorn-10364.exe (PID: 9064)
- Unicorn-55811.exe (PID: 7752)
- Unicorn-61573.exe (PID: 5008)
- Unicorn-63948.exe (PID: 11008)
- Unicorn-10817.exe (PID: 8772)
- Unicorn-45852.exe (PID: 9312)
- Unicorn-28740.exe (PID: 9100)
- Unicorn-9193.exe (PID: 7840)
- Unicorn-35178.exe (PID: 668)
- Unicorn-30717.exe (PID: 5024)
- Unicorn-58516.exe (PID: 8116)
- Unicorn-11440.exe (PID: 10644)
- Unicorn-16370.exe (PID: 11536)
- Unicorn-10979.exe (PID: 9828)
- Unicorn-53047.exe (PID: 8564)
- Unicorn-4434.exe (PID: 9200)
- Unicorn-22165.exe (PID: 8176)
- Unicorn-4832.exe (PID: 8632)
- Unicorn-16893.exe (PID: 8368)
Reads the computer name
- 1 (1169).exe (PID: 2384)
- Unicorn-13492.exe (PID: 1228)
- Unicorn-9299.exe (PID: 7348)
- Unicorn-14172.exe (PID: 7336)
- Unicorn-21677.exe (PID: 7484)
- Unicorn-26315.exe (PID: 7496)
- Unicorn-64747.exe (PID: 7508)
- Unicorn-5340.exe (PID: 7532)
- Unicorn-50981.exe (PID: 7564)
- Unicorn-10170.exe (PID: 7612)
- Unicorn-12963.exe (PID: 7644)
- Unicorn-65501.exe (PID: 7620)
- Unicorn-16227.exe (PID: 7628)
- Unicorn-16109.exe (PID: 7596)
- Unicorn-16493.exe (PID: 7636)
- Unicorn-55811.exe (PID: 7752)
- Unicorn-2652.exe (PID: 7712)
- Unicorn-20909.exe (PID: 7736)
- Unicorn-39299.exe (PID: 7896)
- Unicorn-12356.exe (PID: 7868)
- Unicorn-28338.exe (PID: 7876)
- Unicorn-42267.exe (PID: 7780)
- Unicorn-9699.exe (PID: 7852)
- Unicorn-25163.exe (PID: 7832)
- Unicorn-45029.exe (PID: 7824)
- Unicorn-26301.exe (PID: 7860)
- Unicorn-50235.exe (PID: 7888)
- Unicorn-42563.exe (PID: 8012)
- Unicorn-46477.exe (PID: 8028)
- Unicorn-571.exe (PID: 8048)
- Unicorn-12579.exe (PID: 8104)
- Unicorn-37157.exe (PID: 8084)
- Unicorn-58516.exe (PID: 8116)
- Unicorn-45325.exe (PID: 8064)
- Unicorn-22165.exe (PID: 8176)
- Unicorn-47555.exe (PID: 8092)
- Unicorn-32370.exe (PID: 8184)
- Unicorn-38309.exe (PID: 8168)
- Unicorn-63197.exe (PID: 6132)
- Unicorn-21786.exe (PID: 6032)
- Unicorn-35355.exe (PID: 2560)
- Unicorn-17203.exe (PID: 896)
- Unicorn-7970.exe (PID: 7284)
- Unicorn-63109.exe (PID: 7288)
- Unicorn-35844.exe (PID: 4812)
- Unicorn-53789.exe (PID: 4180)
- Unicorn-28517.exe (PID: 7180)
- Unicorn-7276.exe (PID: 7376)
- Unicorn-32387.exe (PID: 6744)
- Unicorn-44972.exe (PID: 5392)
- Unicorn-40747.exe (PID: 2904)
- Unicorn-59964.exe (PID: 2108)
- Unicorn-30717.exe (PID: 5024)
- Unicorn-53597.exe (PID: 516)
- Unicorn-3244.exe (PID: 7248)
- Unicorn-43507.exe (PID: 5164)
- Unicorn-45429.exe (PID: 3888)
- Unicorn-18547.exe (PID: 6768)
- Unicorn-6434.exe (PID: 6156)
- Unicorn-836.exe (PID: 3132)
- Unicorn-7276.exe (PID: 7372)
- Unicorn-17085.exe (PID: 8244)
- Unicorn-33509.exe (PID: 5640)
- Unicorn-19493.exe (PID: 8996)
- Unicorn-2123.exe (PID: 7696)
- Unicorn-98.exe (PID: 5360)
- Unicorn-53047.exe (PID: 8564)
- Unicorn-4832.exe (PID: 8632)
- Unicorn-22874.exe (PID: 9092)
- Unicorn-18163.exe (PID: 8472)
- Unicorn-39403.exe (PID: 8464)
- Unicorn-16931.exe (PID: 9232)
- Unicorn-58976.exe (PID: 9596)
- Unicorn-36448.exe (PID: 9352)
- Unicorn-42378.exe (PID: 8596)
- Unicorn-18567.exe (PID: 8624)
- Unicorn-58634.exe (PID: 10232)
- Unicorn-3322.exe (PID: 9532)
- Unicorn-10561.exe (PID: 8324)
- Unicorn-38709.exe (PID: 6576)
- Unicorn-59373.exe (PID: 9028)
- Unicorn-37555.exe (PID: 7692)
- Unicorn-56236.exe (PID: 9208)
- Unicorn-28178.exe (PID: 11276)
- Unicorn-16213.exe (PID: 5984)
- Unicorn-51732.exe (PID: 9992)
- Unicorn-59963.exe (PID: 1300)
- Unicorn-63213.exe (PID: 1096)
- Unicorn-20461.exe (PID: 9224)
- Unicorn-50361.exe (PID: 10452)
- Unicorn-48333.exe (PID: 9764)
- Unicorn-14292.exe (PID: 1180)
- Unicorn-63709.exe (PID: 9848)
- Unicorn-42774.exe (PID: 10180)
- Unicorn-58348.exe (PID: 11016)
- Unicorn-26196.exe (PID: 13104)
- Unicorn-34773.exe (PID: 13256)
- Unicorn-30548.exe (PID: 9444)
- Unicorn-19885.exe (PID: 8280)
- Unicorn-42723.exe (PID: 12892)
- Unicorn-16445.exe (PID: 10388)
- Unicorn-13960.exe (PID: 8556)
- Unicorn-57980.exe (PID: 10960)
- Unicorn-35844.exe (PID: 12508)
- Unicorn-8676.exe (PID: 12700)
- Unicorn-35744.exe (PID: 10936)
- Unicorn-16829.exe (PID: 10524)
- Unicorn-5412.exe (PID: 12368)
- Unicorn-53332.exe (PID: 7548)
Create files in a temporary directory
- Unicorn-14172.exe (PID: 7336)
- 1 (1169).exe (PID: 2384)
- Unicorn-13492.exe (PID: 1228)
- Unicorn-64747.exe (PID: 7508)
- Unicorn-9299.exe (PID: 7348)
- Unicorn-26315.exe (PID: 7496)
- Unicorn-16493.exe (PID: 7636)
- Unicorn-10170.exe (PID: 7612)
- Unicorn-5340.exe (PID: 7532)
- Unicorn-12963.exe (PID: 7644)
- Unicorn-65501.exe (PID: 7620)
- Unicorn-16227.exe (PID: 7628)
- Unicorn-20909.exe (PID: 7736)
- Unicorn-63980.exe (PID: 7580)
- Unicorn-41883.exe (PID: 7728)
- Unicorn-50981.exe (PID: 7564)
- Unicorn-37437.exe (PID: 7768)
- Unicorn-21677.exe (PID: 7484)
- Unicorn-42267.exe (PID: 7780)
- Unicorn-61365.exe (PID: 7808)
- Unicorn-16109.exe (PID: 7596)
- Unicorn-39299.exe (PID: 7896)
- Unicorn-9699.exe (PID: 7852)
- Unicorn-28338.exe (PID: 7876)
- Unicorn-12356.exe (PID: 7868)
- Unicorn-26301.exe (PID: 7860)
- Unicorn-50235.exe (PID: 7888)
- Unicorn-46477.exe (PID: 8028)
- Unicorn-2652.exe (PID: 7712)
- Unicorn-571.exe (PID: 8048)
- Unicorn-45325.exe (PID: 8064)
- Unicorn-12579.exe (PID: 8104)
- Unicorn-58516.exe (PID: 8116)
- Unicorn-44837.exe (PID: 7816)
- Unicorn-47555.exe (PID: 8092)
- Unicorn-32370.exe (PID: 8184)
- Unicorn-38309.exe (PID: 8168)
- Unicorn-21786.exe (PID: 6032)
- Unicorn-22165.exe (PID: 8176)
- Unicorn-63197.exe (PID: 6132)
- Unicorn-35355.exe (PID: 2560)
- Unicorn-17203.exe (PID: 896)
- Unicorn-63109.exe (PID: 7288)
- Unicorn-7970.exe (PID: 7284)
- Unicorn-53789.exe (PID: 4180)
- Unicorn-42563.exe (PID: 8012)
- Unicorn-61573.exe (PID: 5008)
- Unicorn-7276.exe (PID: 7376)
- Unicorn-35844.exe (PID: 4812)
- Unicorn-28517.exe (PID: 7180)
- Unicorn-40747.exe (PID: 2904)
- Unicorn-32387.exe (PID: 6744)
- Unicorn-44972.exe (PID: 5392)
- Unicorn-59964.exe (PID: 2108)
- Unicorn-30717.exe (PID: 5024)
- Unicorn-23346.exe (PID: 7320)
- Unicorn-25163.exe (PID: 7832)
- Unicorn-53597.exe (PID: 516)
- Unicorn-45029.exe (PID: 7824)
- Unicorn-43507.exe (PID: 5164)
- Unicorn-45429.exe (PID: 3888)
- Unicorn-58812.exe (PID: 7308)
- Unicorn-6434.exe (PID: 6156)
- Unicorn-18547.exe (PID: 6768)
- Unicorn-8355.exe (PID: 7232)
- Unicorn-836.exe (PID: 3132)
- Unicorn-16714.exe (PID: 7212)
- Unicorn-55709.exe (PID: 7316)
- Unicorn-13259.exe (PID: 7480)
- Unicorn-37955.exe (PID: 2148)
- Unicorn-55811.exe (PID: 7752)
- Unicorn-43997.exe (PID: 8952)
- Unicorn-37157.exe (PID: 8084)
- Unicorn-7276.exe (PID: 7372)
- Unicorn-17085.exe (PID: 8244)
- Unicorn-44277.exe (PID: 6944)
- Unicorn-53981.exe (PID: 5048)
- Unicorn-33509.exe (PID: 5640)
- Unicorn-19493.exe (PID: 8996)
- Unicorn-2123.exe (PID: 7696)
- Unicorn-98.exe (PID: 5360)
- Unicorn-53047.exe (PID: 8564)
- Unicorn-22874.exe (PID: 9092)
- Unicorn-18163.exe (PID: 8472)
- Unicorn-39403.exe (PID: 8464)
- Unicorn-16931.exe (PID: 9232)
- Unicorn-5956.exe (PID: 9608)
- Unicorn-36448.exe (PID: 9352)
- Unicorn-48693.exe (PID: 6512)
- Unicorn-4832.exe (PID: 8632)
- Unicorn-42963.exe (PID: 1240)
- Unicorn-8340.exe (PID: 8336)
- Unicorn-42378.exe (PID: 8596)
- Unicorn-28740.exe (PID: 9100)
- Unicorn-18567.exe (PID: 8624)
- Unicorn-34381.exe (PID: 8416)
- Unicorn-4292.exe (PID: 8072)
- Unicorn-62886.exe (PID: 8356)
- Unicorn-48340.exe (PID: 3300)
- Unicorn-9139.exe (PID: 9108)
- Unicorn-17794.exe (PID: 6572)
- Unicorn-14508.exe (PID: 9836)
- Unicorn-3322.exe (PID: 9532)
- Unicorn-30157.exe (PID: 736)
- Unicorn-57964.exe (PID: 9912)
- Unicorn-40245.exe (PID: 2092)
- Unicorn-675.exe (PID: 7196)
- Unicorn-34026.exe (PID: 8900)
- Unicorn-62763.exe (PID: 8260)
- Unicorn-38419.exe (PID: 7224)
- Unicorn-57261.exe (PID: 8520)
- Unicorn-35178.exe (PID: 668)
- Unicorn-34986.exe (PID: 8588)
- Unicorn-59373.exe (PID: 9028)
- Unicorn-3244.exe (PID: 7248)
- Unicorn-43651.exe (PID: 9812)
- Unicorn-25971.exe (PID: 9692)
- Unicorn-10817.exe (PID: 8772)
- Unicorn-40260.exe (PID: 1128)
- Unicorn-55813.exe (PID: 5776)
- Unicorn-30978.exe (PID: 11284)
- Unicorn-28178.exe (PID: 11276)
- Unicorn-18645.exe (PID: 2064)
- Unicorn-42077.exe (PID: 8844)
- Unicorn-24950.exe (PID: 9472)
- Unicorn-59963.exe (PID: 1300)
- Unicorn-10320.exe (PID: 9620)
- Unicorn-64005.exe (PID: 10112)
- Unicorn-63213.exe (PID: 1096)
- Unicorn-52059.exe (PID: 9704)
- Unicorn-10123.exe (PID: 10060)
- Unicorn-48333.exe (PID: 9764)
- Unicorn-2738.exe (PID: 12576)
- Unicorn-58976.exe (PID: 9596)
- Unicorn-40373.exe (PID: 10432)
- Unicorn-38709.exe (PID: 6576)
- Unicorn-47069.exe (PID: 2984)
- Unicorn-19885.exe (PID: 8280)
- Unicorn-58634.exe (PID: 10232)
- Unicorn-17243.exe (PID: 11304)
- Unicorn-26196.exe (PID: 13104)
- Unicorn-41819.exe (PID: 9248)
- Unicorn-9139.exe (PID: 9116)
- Unicorn-16445.exe (PID: 10388)
- Unicorn-42774.exe (PID: 10180)
- Unicorn-10561.exe (PID: 8324)
- Unicorn-63429.exe (PID: 9980)
- Unicorn-13960.exe (PID: 8556)
- Unicorn-37555.exe (PID: 7692)
- Unicorn-18538.exe (PID: 8300)
- Unicorn-24362.exe (PID: 4304)
- Unicorn-39738.exe (PID: 7356)
- Unicorn-40700.exe (PID: 12624)
- Unicorn-41693.exe (PID: 8836)
- Unicorn-33201.exe (PID: 9636)
- Unicorn-34773.exe (PID: 13256)
- Unicorn-60914.exe (PID: 8400)
- Unicorn-55325.exe (PID: 4724)
- Unicorn-9193.exe (PID: 7840)
- Unicorn-28645.exe (PID: 10976)
- Unicorn-63709.exe (PID: 9848)
- Unicorn-55738.exe (PID: 9360)
Creates files or folders in the user directory
- WerFault.exe (PID: 14532)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
692
Monitored processes
557
Malicious processes
80
Suspicious processes
69
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 516 | C:\Users\admin\AppData\Local\Temp\Unicorn-53597.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53597.exe | Unicorn-28338.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 668 | C:\Users\admin\AppData\Local\Temp\Unicorn-35178.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-35178.exe | Unicorn-836.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 736 | C:\Users\admin\AppData\Local\Temp\Unicorn-30157.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30157.exe | Unicorn-63109.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 896 | C:\Users\admin\AppData\Local\Temp\Unicorn-17203.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-17203.exe | Unicorn-12963.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1004 | C:\Users\admin\AppData\Local\Temp\Unicorn-26536.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-26536.exe | — | Unicorn-42774.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1096 | C:\Users\admin\AppData\Local\Temp\Unicorn-63213.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-63213.exe | Unicorn-21786.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1128 | C:\Users\admin\AppData\Local\Temp\Unicorn-40260.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-40260.exe | Unicorn-26315.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1180 | C:\Users\admin\AppData\Local\Temp\Unicorn-14292.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-14292.exe | Unicorn-12579.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1188 | C:\Users\admin\AppData\Local\Temp\Unicorn-31719.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-31719.exe | — | Unicorn-28178.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1228 | C:\Users\admin\AppData\Local\Temp\Unicorn-13492.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13492.exe | 1 (1169).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
13 664
Read events
13 664
Write events
0
Delete events
0
Modification events
Executable files
755
Suspicious files
4
Text files
4
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7336 | Unicorn-14172.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-21677.exe | executable | |
MD5:8EFF3C67DBC7F44AD3C0E53D3D80C356 | SHA256:EC4148A8567E41199A1263A678640DBF90A1B89F4BA6540D669B21434CC30094 | |||
| 2384 | 1 (1169).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-64747.exe | executable | |
MD5:6B340590C12280E053D9EF197D49AEA3 | SHA256:FD178F6263029178ABFB19D8D7A12358D93645ABE9B391602AA8B9EA1242701E | |||
| 7348 | Unicorn-9299.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-5340.exe | executable | |
MD5:EB5D0304248741899FDF93D28D3D8E6A | SHA256:2788DD07948919C01782844E9A39B0A6371840DD951F63CE3050F8E5017B731A | |||
| 7484 | Unicorn-21677.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-50981.exe | executable | |
MD5:8D92A2CAB0896AC688A8B36D61747DCC | SHA256:937D76193FB1C7BECA90C39111C36FF99493E7CCC3F92DC39BBD4849124484CF | |||
| 1228 | Unicorn-13492.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-14172.exe | executable | |
MD5:1FC61FBC59F3CB9395D994973F29B266 | SHA256:69C571AE0BAE95E6773FC16A9B08A46636577BF64AC6F563D63A0623E5F0EACC | |||
| 7348 | Unicorn-9299.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-12963.exe | executable | |
MD5:C7CD43CE8642280BCEE7EE5BB005A6C4 | SHA256:5C5C500EE83FAD64857597DB3BC8F4F87285AB1144C5C1248E68AD5E7237641D | |||
| 2384 | 1 (1169).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-9299.exe | executable | |
MD5:470922E429DE5BE3BDBEAA7D28751837 | SHA256:0DBA347E5E471BDDD3408FFE210D653E08DA12261AF045E52CC974FAE43F1CE0 | |||
| 1228 | Unicorn-13492.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-26315.exe | executable | |
MD5:0352B68101BC99409A1439D1ED462316 | SHA256:EB230B481296B35DCB664A9D606AACC550C66D4E6EFC55E950DEE20CFD3646FE | |||
| 7496 | Unicorn-26315.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-16109.exe | executable | |
MD5:A93208EF1C6DB20C2A6FCAF92B2C52F6 | SHA256:279EA0FC603B2BC6C7E5AB1B7B97AC6582EB774CC33DEF7D26B7A19EF982ECB1 | |||
| 2384 | 1 (1169).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13492.exe | executable | |
MD5:B6439F2E07C8CD7219E83CAE1BDBC615 | SHA256:7015279A42C9B657EFD6622733ED1C575348432C4A9E4876758695D383B211FA | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
23
DNS requests
15
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
5496 | MoUsoCoreWorker.exe | GET | 200 | 23.48.23.156:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
6272 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
2340 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
2340 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 51.104.136.2:443 | — | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
5496 | MoUsoCoreWorker.exe | 23.48.23.156:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
2104 | svchost.exe | 51.104.136.2:443 | — | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
2112 | svchost.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
3216 | svchost.exe | 40.113.103.199:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.159.130:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
6272 | backgroundTaskHost.exe | 20.105.99.58:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
crl.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |