| File name: | 1 (309) |
| Full analysis: | https://app.any.run/tasks/b93c4807-0ea0-4ecc-aa8e-ded1f8ac1a43 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 17:41:01 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 6D3E81CDF60704A4BA9E4D13F956BDA0 |
| SHA1: | 5A39BCA4A25C4174FF560B8E2DB4AABB5C0CF7CE |
| SHA256: | E24F4A2AC3D04F5A128CC36264C0F1E775173D90BA830401F2D38491A9AA1144 |
| SSDEEP: | 6144:47ugl5IjNDb5A5RsT4mqJkpx5tllEp8GBV/KyVTqRk/8SwjwpyAvEh4SvgQ6N3Ba:4KYKp5A5qT7vlC+aViyVTqSx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- Unicorn-34656.exe (PID: 7424)
- 1 (309).exe (PID: 7372)
- Unicorn-65128.exe (PID: 7796)
- Unicorn-37094.exe (PID: 7816)
- Unicorn-2855.exe (PID: 1276)
- Unicorn-52056.exe (PID: 4300)
- Unicorn-32190.exe (PID: 5352)
- Unicorn-33673.exe (PID: 7356)
- Unicorn-21748.exe (PID: 1676)
- Unicorn-42914.exe (PID: 4008)
- Unicorn-34192.exe (PID: 4424)
- Unicorn-34192.exe (PID: 4784)
- Unicorn-21172.exe (PID: 680)
- Unicorn-28362.exe (PID: 4608)
- Unicorn-34228.exe (PID: 1812)
- Unicorn-14627.exe (PID: 4488)
- Unicorn-12546.exe (PID: 904)
- Unicorn-123.exe (PID: 920)
- Unicorn-33542.exe (PID: 516)
- Unicorn-35427.exe (PID: 1052)
- Unicorn-1009.exe (PID: 5800)
- Unicorn-32713.exe (PID: 5720)
- Unicorn-123.exe (PID: 3676)
- Unicorn-53408.exe (PID: 2236)
- Unicorn-24820.exe (PID: 5376)
- Unicorn-24820.exe (PID: 6736)
- Unicorn-33542.exe (PID: 2980)
- Unicorn-17206.exe (PID: 6372)
- Unicorn-14605.exe (PID: 6808)
- Unicorn-20470.exe (PID: 7152)
- Unicorn-24820.exe (PID: 5204)
- Unicorn-5359.exe (PID: 7404)
- Unicorn-11805.exe (PID: 7396)
- Unicorn-34694.exe (PID: 7292)
- Unicorn-58836.exe (PID: 7760)
- Unicorn-34332.exe (PID: 7788)
- Unicorn-60315.exe (PID: 7708)
- Unicorn-34332.exe (PID: 7748)
- Unicorn-14378.exe (PID: 7924)
- Unicorn-48622.exe (PID: 7916)
- Unicorn-22812.exe (PID: 5868)
- Unicorn-31940.exe (PID: 7184)
- Unicorn-44747.exe (PID: 8008)
- Unicorn-32132.exe (PID: 8080)
- Unicorn-23964.exe (PID: 8060)
- Unicorn-36194.exe (PID: 7964)
- Unicorn-15027.exe (PID: 8116)
- Unicorn-59075.exe (PID: 8148)
- Unicorn-52945.exe (PID: 8152)
- Unicorn-17166.exe (PID: 7216)
- Unicorn-39724.exe (PID: 4736)
- Unicorn-49930.exe (PID: 7960)
- Unicorn-54014.exe (PID: 8028)
- Unicorn-25011.exe (PID: 6108)
- Unicorn-60144.exe (PID: 7896)
- Unicorn-3522.exe (PID: 7224)
- Unicorn-19304.exe (PID: 7012)
- Unicorn-47322.exe (PID: 8168)
- Unicorn-38954.exe (PID: 8172)
- Unicorn-44877.exe (PID: 4180)
- Unicorn-44877.exe (PID: 1272)
- Unicorn-55987.exe (PID: 4776)
- Unicorn-52723.exe (PID: 2320)
- Unicorn-11903.exe (PID: 2420)
- Unicorn-41238.exe (PID: 4980)
- Unicorn-2649.exe (PID: 5260)
- Unicorn-50004.exe (PID: 6752)
- Unicorn-13802.exe (PID: 6576)
- Unicorn-16298.exe (PID: 6228)
- Unicorn-13226.exe (PID: 7476)
- Unicorn-41260.exe (PID: 6584)
- Unicorn-25500.exe (PID: 2040)
- Unicorn-41260.exe (PID: 6712)
- Unicorn-53604.exe (PID: 7644)
- Unicorn-49428.exe (PID: 3332)
- Unicorn-23615.exe (PID: 7252)
- Unicorn-24161.exe (PID: 7468)
- Unicorn-41260.exe (PID: 4932)
- Unicorn-9739.exe (PID: 7456)
- Unicorn-16546.exe (PID: 4228)
- Unicorn-46667.exe (PID: 6436)
- Unicorn-34244.exe (PID: 2284)
- Unicorn-52810.exe (PID: 812)
- Unicorn-26268.exe (PID: 6512)
- Unicorn-6148.exe (PID: 2644)
- Unicorn-65359.exe (PID: 7192)
- Unicorn-59900.exe (PID: 8320)
- Unicorn-25478.exe (PID: 1132)
- Unicorn-27804.exe (PID: 8272)
- Unicorn-19806.exe (PID: 8420)
- Unicorn-49869.exe (PID: 8476)
- Unicorn-3278.exe (PID: 8368)
- Unicorn-61244.exe (PID: 8504)
- Unicorn-53076.exe (PID: 8532)
- Unicorn-40824.exe (PID: 8556)
- Unicorn-3299.exe (PID: 8584)
- Unicorn-14181.exe (PID: 8548)
- Unicorn-54538.exe (PID: 8600)
- Unicorn-1031.exe (PID: 8628)
- Unicorn-57435.exe (PID: 8680)
- Unicorn-8322.exe (PID: 8660)
- Unicorn-8322.exe (PID: 8668)
- Unicorn-37834.exe (PID: 8688)
- Unicorn-24955.exe (PID: 8772)
- Unicorn-37280.exe (PID: 8728)
- Unicorn-49148.exe (PID: 8804)
- Unicorn-523.exe (PID: 8748)
- Unicorn-41556.exe (PID: 8764)
- Unicorn-59546.exe (PID: 8852)
- Unicorn-37965.exe (PID: 8836)
- Unicorn-49340.exe (PID: 8876)
- Unicorn-139.exe (PID: 8856)
- Unicorn-28728.exe (PID: 8828)
- Unicorn-57316.exe (PID: 8796)
- Unicorn-139.exe (PID: 8868)
- Unicorn-3137.exe (PID: 8972)
- Unicorn-43755.exe (PID: 9080)
- Unicorn-36631.exe (PID: 8820)
- Unicorn-30434.exe (PID: 8984)
- Unicorn-50300.exe (PID: 9016)
- Unicorn-44825.exe (PID: 9008)
- Unicorn-41562.exe (PID: 9032)
- Unicorn-40278.exe (PID: 9072)
- Unicorn-5183.exe (PID: 8968)
- Unicorn-56290.exe (PID: 9024)
- Unicorn-24834.exe (PID: 9000)
- Unicorn-1867.exe (PID: 9164)
- Unicorn-43092.exe (PID: 2340)
- Unicorn-24348.exe (PID: 1568)
- Unicorn-5567.exe (PID: 8280)
- Unicorn-38432.exe (PID: 7196)
- Unicorn-64067.exe (PID: 9192)
- Unicorn-24325.exe (PID: 8232)
- Unicorn-10590.exe (PID: 9224)
- Unicorn-64015.exe (PID: 9264)
- Unicorn-60772.exe (PID: 9416)
- Unicorn-60772.exe (PID: 9424)
- Unicorn-3403.exe (PID: 9396)
- Unicorn-3595.exe (PID: 9456)
- Unicorn-559.exe (PID: 9472)
- Unicorn-52220.exe (PID: 9496)
- Unicorn-52220.exe (PID: 9500)
- Unicorn-23061.exe (PID: 9576)
- Unicorn-44244.exe (PID: 9532)
- Unicorn-8042.exe (PID: 9568)
- Unicorn-48328.exe (PID: 9540)
- Unicorn-23824.exe (PID: 9612)
- Unicorn-13609.exe (PID: 9592)
- Unicorn-49023.exe (PID: 9664)
- Unicorn-41866.exe (PID: 9732)
- Unicorn-29422.exe (PID: 9672)
- Unicorn-41120.exe (PID: 9688)
- Unicorn-2125.exe (PID: 9644)
- Unicorn-57648.exe (PID: 9776)
- Unicorn-32182.exe (PID: 9768)
- Unicorn-4363.exe (PID: 9716)
- Unicorn-55026.exe (PID: 9812)
- Unicorn-34605.exe (PID: 9848)
- Unicorn-20316.exe (PID: 9864)
- Unicorn-17192.exe (PID: 9940)
- Unicorn-58333.exe (PID: 9920)
- Unicorn-61903.exe (PID: 9896)
- Unicorn-1794.exe (PID: 10076)
- Unicorn-62500.exe (PID: 10016)
- Unicorn-41888.exe (PID: 9980)
- Unicorn-48202.exe (PID: 10024)
- Unicorn-17938.exe (PID: 9968)
- Unicorn-58224.exe (PID: 9956)
- Unicorn-45899.exe (PID: 10056)
- Unicorn-4290.exe (PID: 10100)
- Unicorn-60533.exe (PID: 10120)
- Unicorn-45780.exe (PID: 10152)
- Unicorn-30958.exe (PID: 10168)
- Unicorn-54939.exe (PID: 8960)
- Unicorn-48733.exe (PID: 10192)
- Unicorn-39392.exe (PID: 9372)
- Unicorn-47088.exe (PID: 10208)
- Unicorn-27414.exe (PID: 10236)
- Unicorn-64384.exe (PID: 6940)
Executable content was dropped or overwritten
- 1 (309).exe (PID: 7372)
- Unicorn-34656.exe (PID: 7424)
- Unicorn-37094.exe (PID: 7816)
- Unicorn-65128.exe (PID: 7796)
- Unicorn-2855.exe (PID: 1276)
- Unicorn-52056.exe (PID: 4300)
- Unicorn-33673.exe (PID: 7356)
- Unicorn-21748.exe (PID: 1676)
- Unicorn-21172.exe (PID: 680)
- Unicorn-34192.exe (PID: 4784)
- Unicorn-42914.exe (PID: 4008)
- Unicorn-14627.exe (PID: 4488)
- Unicorn-35427.exe (PID: 1052)
- Unicorn-12546.exe (PID: 904)
- Unicorn-32713.exe (PID: 5720)
- Unicorn-123.exe (PID: 920)
- Unicorn-34192.exe (PID: 4424)
- Unicorn-123.exe (PID: 3676)
- Unicorn-17206.exe (PID: 6372)
- Unicorn-32190.exe (PID: 5352)
- Unicorn-33542.exe (PID: 516)
- Unicorn-53408.exe (PID: 2236)
- Unicorn-33542.exe (PID: 2980)
- Unicorn-24820.exe (PID: 5376)
- Unicorn-24820.exe (PID: 6736)
- Unicorn-24820.exe (PID: 5204)
- Unicorn-20470.exe (PID: 7152)
- Unicorn-28362.exe (PID: 4608)
- Unicorn-14605.exe (PID: 6808)
- Unicorn-34228.exe (PID: 1812)
- Unicorn-5359.exe (PID: 7404)
- Unicorn-34694.exe (PID: 7292)
- Unicorn-58836.exe (PID: 7760)
- Unicorn-48622.exe (PID: 7916)
- Unicorn-14378.exe (PID: 7924)
- Unicorn-22812.exe (PID: 5868)
- Unicorn-1009.exe (PID: 5800)
- Unicorn-44747.exe (PID: 8008)
- Unicorn-31940.exe (PID: 7184)
- Unicorn-65359.exe (PID: 7192)
- Unicorn-32132.exe (PID: 8080)
- Unicorn-23964.exe (PID: 8060)
- Unicorn-36194.exe (PID: 7964)
- Unicorn-17166.exe (PID: 7216)
- Unicorn-52945.exe (PID: 8152)
- Unicorn-59075.exe (PID: 8148)
- Unicorn-15027.exe (PID: 8116)
- Unicorn-39724.exe (PID: 4736)
- Unicorn-49930.exe (PID: 7960)
- Unicorn-54014.exe (PID: 8028)
- Unicorn-25011.exe (PID: 6108)
- Unicorn-19304.exe (PID: 7012)
- Unicorn-60144.exe (PID: 7896)
- Unicorn-47322.exe (PID: 8168)
- Unicorn-3522.exe (PID: 7224)
- Unicorn-34332.exe (PID: 7788)
- Unicorn-44877.exe (PID: 4180)
- Unicorn-44877.exe (PID: 1272)
- Unicorn-55987.exe (PID: 4776)
- Unicorn-52723.exe (PID: 2320)
- Unicorn-11903.exe (PID: 2420)
- Unicorn-11805.exe (PID: 7396)
- Unicorn-24348.exe (PID: 1568)
- Unicorn-2649.exe (PID: 5260)
- Unicorn-41238.exe (PID: 4980)
- Unicorn-50004.exe (PID: 6752)
- Unicorn-13802.exe (PID: 6576)
- Unicorn-16298.exe (PID: 6228)
- Unicorn-13226.exe (PID: 7476)
- Unicorn-41260.exe (PID: 6584)
- Unicorn-41260.exe (PID: 6712)
- Unicorn-49428.exe (PID: 3332)
- Unicorn-60315.exe (PID: 7708)
- Unicorn-25478.exe (PID: 1132)
- Unicorn-24161.exe (PID: 7468)
- Unicorn-23615.exe (PID: 7252)
- Unicorn-41260.exe (PID: 4932)
- Unicorn-9739.exe (PID: 7456)
- Unicorn-34332.exe (PID: 7748)
- Unicorn-46667.exe (PID: 6436)
- Unicorn-16546.exe (PID: 4228)
- Unicorn-34244.exe (PID: 2284)
- Unicorn-26268.exe (PID: 6512)
- Unicorn-52810.exe (PID: 812)
- Unicorn-6148.exe (PID: 2644)
- Unicorn-59900.exe (PID: 8320)
- Unicorn-27804.exe (PID: 8272)
- Unicorn-3278.exe (PID: 8368)
- Unicorn-19806.exe (PID: 8420)
- Unicorn-49869.exe (PID: 8476)
- Unicorn-53076.exe (PID: 8532)
- Unicorn-61244.exe (PID: 8504)
- Unicorn-40824.exe (PID: 8556)
- Unicorn-3299.exe (PID: 8584)
- Unicorn-14181.exe (PID: 8548)
- Unicorn-54538.exe (PID: 8600)
- Unicorn-57435.exe (PID: 8680)
- Unicorn-8322.exe (PID: 8660)
- Unicorn-37834.exe (PID: 8688)
- Unicorn-523.exe (PID: 8748)
- Unicorn-8322.exe (PID: 8668)
- Unicorn-24955.exe (PID: 8772)
- Unicorn-49148.exe (PID: 8804)
- Unicorn-59546.exe (PID: 8852)
- Unicorn-57316.exe (PID: 8796)
- Unicorn-28728.exe (PID: 8828)
- Unicorn-41556.exe (PID: 8764)
- Unicorn-37965.exe (PID: 8836)
- Unicorn-49340.exe (PID: 8876)
- Unicorn-139.exe (PID: 8868)
- Unicorn-30434.exe (PID: 8984)
- Unicorn-43755.exe (PID: 9080)
- Unicorn-36631.exe (PID: 8820)
- Unicorn-50300.exe (PID: 9016)
- Unicorn-24834.exe (PID: 9000)
- Unicorn-38954.exe (PID: 8172)
- Unicorn-44825.exe (PID: 9008)
- Unicorn-5183.exe (PID: 8968)
- Unicorn-54939.exe (PID: 8960)
- Unicorn-40278.exe (PID: 9072)
- Unicorn-1867.exe (PID: 9164)
- Unicorn-64067.exe (PID: 9192)
- Unicorn-38432.exe (PID: 7196)
- Unicorn-43092.exe (PID: 2340)
- Unicorn-5567.exe (PID: 8280)
- Unicorn-10590.exe (PID: 9224)
- Unicorn-64015.exe (PID: 9264)
- Unicorn-24325.exe (PID: 8232)
- Unicorn-53604.exe (PID: 7644)
- Unicorn-39392.exe (PID: 9372)
- Unicorn-60772.exe (PID: 9424)
- Unicorn-3403.exe (PID: 9396)
- Unicorn-3595.exe (PID: 9456)
- Unicorn-559.exe (PID: 9472)
- Unicorn-52220.exe (PID: 9500)
- Unicorn-23061.exe (PID: 9576)
- Unicorn-52220.exe (PID: 9496)
- Unicorn-44244.exe (PID: 9532)
- Unicorn-8042.exe (PID: 9568)
- Unicorn-23824.exe (PID: 9612)
- Unicorn-48328.exe (PID: 9540)
- Unicorn-13609.exe (PID: 9592)
- Unicorn-49023.exe (PID: 9664)
- Unicorn-2125.exe (PID: 9644)
- Unicorn-41866.exe (PID: 9732)
- Unicorn-29422.exe (PID: 9672)
- Unicorn-41120.exe (PID: 9688)
- Unicorn-54119.exe (PID: 9724)
- Unicorn-4363.exe (PID: 9716)
- Unicorn-32182.exe (PID: 9768)
- Unicorn-55026.exe (PID: 9812)
- Unicorn-34605.exe (PID: 9848)
- Unicorn-20316.exe (PID: 9864)
- Unicorn-17192.exe (PID: 9940)
- Unicorn-58333.exe (PID: 9920)
- Unicorn-1794.exe (PID: 10076)
- Unicorn-17938.exe (PID: 9968)
- Unicorn-61903.exe (PID: 9896)
- Unicorn-62500.exe (PID: 10016)
- Unicorn-48202.exe (PID: 10024)
- Unicorn-41888.exe (PID: 9980)
- Unicorn-45899.exe (PID: 10056)
- Unicorn-1031.exe (PID: 8628)
- Unicorn-4290.exe (PID: 10100)
- Unicorn-37280.exe (PID: 8728)
- Unicorn-60533.exe (PID: 10120)
- Unicorn-139.exe (PID: 8856)
- Unicorn-45780.exe (PID: 10152)
- Unicorn-30958.exe (PID: 10168)
- Unicorn-56290.exe (PID: 9024)
- Unicorn-25500.exe (PID: 2040)
- Unicorn-48733.exe (PID: 10192)
- Unicorn-47088.exe (PID: 10208)
- Unicorn-27414.exe (PID: 10236)
- Unicorn-61239.exe (PID: 8300)
- Unicorn-55322.exe (PID: 10256)
- Unicorn-64384.exe (PID: 6940)
- Unicorn-64960.exe (PID: 10288)
- Unicorn-40456.exe (PID: 10308)
- Unicorn-24312.exe (PID: 10364)
- Unicorn-5598.exe (PID: 10468)
- Unicorn-767.exe (PID: 10440)
- Unicorn-21742.exe (PID: 10396)
- Unicorn-47730.exe (PID: 10380)
- Unicorn-3137.exe (PID: 8972)
- Unicorn-41562.exe (PID: 9032)
- Unicorn-29718.exe (PID: 10520)
- Unicorn-9703.exe (PID: 10592)
- Unicorn-12635.exe (PID: 10492)
- Unicorn-58712.exe (PID: 10556)
- Unicorn-60772.exe (PID: 9416)
- Unicorn-29740.exe (PID: 10732)
- Unicorn-9127.exe (PID: 10680)
- Unicorn-6366.exe (PID: 10636)
- Unicorn-9127.exe (PID: 10684)
- Unicorn-13595.exe (PID: 10816)
- Unicorn-63180.exe (PID: 11068)
- Unicorn-34976.exe (PID: 10920)
- Unicorn-63564.exe (PID: 10852)
- Unicorn-7465.exe (PID: 10800)
- Unicorn-25391.exe (PID: 10748)
- Unicorn-4665.exe (PID: 10808)
- Unicorn-45182.exe (PID: 10892)
- Unicorn-55396.exe (PID: 10860)
- Unicorn-50352.exe (PID: 10772)
- Unicorn-22916.exe (PID: 11004)
- Unicorn-55396.exe (PID: 10868)
- Unicorn-1234.exe (PID: 10944)
- Unicorn-50166.exe (PID: 11084)
- Unicorn-51675.exe (PID: 11152)
- Unicorn-18618.exe (PID: 10608)
- Unicorn-48882.exe (PID: 11060)
- Unicorn-63927.exe (PID: 11144)
- Unicorn-45374.exe (PID: 10968)
- Unicorn-22916.exe (PID: 11012)
- Unicorn-27000.exe (PID: 11040)
- Unicorn-26210.exe (PID: 10716)
- Unicorn-58224.exe (PID: 9956)
- Unicorn-26616.exe (PID: 11236)
- Unicorn-22266.exe (PID: 11220)
- Unicorn-2666.exe (PID: 11204)
- Unicorn-52635.exe (PID: 11244)
- Unicorn-7155.exe (PID: 208)
- Unicorn-3071.exe (PID: 11304)
INFO
Checks supported languages
- 1 (309).exe (PID: 7372)
- Unicorn-34656.exe (PID: 7424)
- Unicorn-37094.exe (PID: 7816)
- Unicorn-65128.exe (PID: 7796)
- Unicorn-2855.exe (PID: 1276)
- Unicorn-32190.exe (PID: 5352)
- Unicorn-52056.exe (PID: 4300)
- Unicorn-33673.exe (PID: 7356)
- Unicorn-21748.exe (PID: 1676)
- Unicorn-42914.exe (PID: 4008)
- Unicorn-21172.exe (PID: 680)
- Unicorn-34192.exe (PID: 4784)
- Unicorn-34228.exe (PID: 1812)
- Unicorn-28362.exe (PID: 4608)
- Unicorn-35427.exe (PID: 1052)
- Unicorn-34192.exe (PID: 4424)
- Unicorn-14627.exe (PID: 4488)
- Unicorn-12546.exe (PID: 904)
- Unicorn-32713.exe (PID: 5720)
- Unicorn-53408.exe (PID: 2236)
- Unicorn-1009.exe (PID: 5800)
- Unicorn-123.exe (PID: 3676)
- Unicorn-123.exe (PID: 920)
- Unicorn-24820.exe (PID: 5204)
- Unicorn-24820.exe (PID: 5376)
- Unicorn-11805.exe (PID: 7396)
- Unicorn-24820.exe (PID: 6736)
- Unicorn-20470.exe (PID: 7152)
- Unicorn-14605.exe (PID: 6808)
- Unicorn-33542.exe (PID: 2980)
- Unicorn-17206.exe (PID: 6372)
- Unicorn-33542.exe (PID: 516)
- Unicorn-5359.exe (PID: 7404)
- Unicorn-58836.exe (PID: 7760)
- Unicorn-48622.exe (PID: 7916)
- Unicorn-34332.exe (PID: 7748)
- Unicorn-34332.exe (PID: 7788)
- Unicorn-60315.exe (PID: 7708)
- Unicorn-22812.exe (PID: 5868)
- Unicorn-34694.exe (PID: 7292)
- Unicorn-14378.exe (PID: 7924)
- Unicorn-31940.exe (PID: 7184)
- Unicorn-44747.exe (PID: 8008)
- Unicorn-65359.exe (PID: 7192)
- Unicorn-23964.exe (PID: 8060)
- Unicorn-36194.exe (PID: 7964)
- Unicorn-49930.exe (PID: 7960)
- Unicorn-15027.exe (PID: 8116)
- Unicorn-52945.exe (PID: 8152)
- Unicorn-32132.exe (PID: 8080)
- Unicorn-39724.exe (PID: 4736)
- Unicorn-17166.exe (PID: 7216)
- Unicorn-60144.exe (PID: 7896)
- Unicorn-54014.exe (PID: 8028)
- Unicorn-59075.exe (PID: 8148)
- Unicorn-25011.exe (PID: 6108)
- Unicorn-44877.exe (PID: 1272)
- Unicorn-19304.exe (PID: 7012)
- Unicorn-44877.exe (PID: 4180)
- Unicorn-52723.exe (PID: 2320)
- Unicorn-3522.exe (PID: 7224)
- Unicorn-55987.exe (PID: 4776)
- Unicorn-38954.exe (PID: 8172)
- Unicorn-47322.exe (PID: 8168)
- Unicorn-11903.exe (PID: 2420)
- Unicorn-41238.exe (PID: 4980)
- Unicorn-24348.exe (PID: 1568)
- Unicorn-2649.exe (PID: 5260)
- Unicorn-13802.exe (PID: 6576)
- Unicorn-50004.exe (PID: 6752)
- Unicorn-16298.exe (PID: 6228)
- Unicorn-25500.exe (PID: 2040)
- Unicorn-41260.exe (PID: 4932)
- Unicorn-49428.exe (PID: 3332)
- Unicorn-41260.exe (PID: 6712)
- Unicorn-53604.exe (PID: 7644)
- Unicorn-41260.exe (PID: 6584)
- Unicorn-34244.exe (PID: 2284)
- Unicorn-25478.exe (PID: 1132)
- Unicorn-24161.exe (PID: 7468)
- Unicorn-23615.exe (PID: 7252)
- Unicorn-13226.exe (PID: 7476)
- Unicorn-9739.exe (PID: 7456)
- Unicorn-52810.exe (PID: 812)
- Unicorn-46667.exe (PID: 6436)
- Unicorn-6148.exe (PID: 2644)
- Unicorn-16546.exe (PID: 4228)
- Unicorn-26268.exe (PID: 6512)
- Unicorn-27804.exe (PID: 8272)
- Unicorn-59900.exe (PID: 8320)
- Unicorn-3278.exe (PID: 8368)
- Unicorn-19806.exe (PID: 8420)
- Unicorn-49869.exe (PID: 8476)
- Unicorn-53076.exe (PID: 8532)
- Unicorn-14181.exe (PID: 8548)
- Unicorn-40824.exe (PID: 8556)
- Unicorn-61244.exe (PID: 8504)
- Unicorn-3299.exe (PID: 8584)
- Unicorn-54538.exe (PID: 8600)
- Unicorn-1031.exe (PID: 8628)
- Unicorn-8322.exe (PID: 8660)
- Unicorn-8322.exe (PID: 8668)
- Unicorn-37834.exe (PID: 8688)
- Unicorn-37280.exe (PID: 8728)
- Unicorn-24955.exe (PID: 8772)
- Unicorn-57435.exe (PID: 8680)
- Unicorn-523.exe (PID: 8748)
- Unicorn-41556.exe (PID: 8764)
- Unicorn-57316.exe (PID: 8796)
- Unicorn-49148.exe (PID: 8804)
- Unicorn-139.exe (PID: 8856)
- Unicorn-28728.exe (PID: 8828)
- Unicorn-59546.exe (PID: 8852)
- Unicorn-37965.exe (PID: 8836)
- Unicorn-49340.exe (PID: 8876)
- Unicorn-139.exe (PID: 8868)
- Unicorn-36631.exe (PID: 8820)
- Unicorn-3137.exe (PID: 8972)
- Unicorn-24834.exe (PID: 9000)
- Unicorn-54939.exe (PID: 8960)
- Unicorn-50300.exe (PID: 9016)
- Unicorn-5183.exe (PID: 8968)
- Unicorn-41562.exe (PID: 9032)
- Unicorn-30434.exe (PID: 8984)
- Unicorn-44825.exe (PID: 9008)
- Unicorn-40278.exe (PID: 9072)
- Unicorn-43755.exe (PID: 9080)
- Unicorn-1867.exe (PID: 9164)
- Unicorn-64067.exe (PID: 9192)
- Unicorn-56290.exe (PID: 9024)
- Unicorn-43092.exe (PID: 2340)
- Unicorn-5567.exe (PID: 8280)
- Unicorn-38432.exe (PID: 7196)
- Unicorn-64015.exe (PID: 9264)
- Unicorn-39392.exe (PID: 9372)
- Unicorn-24325.exe (PID: 8232)
- Unicorn-10590.exe (PID: 9224)
- Unicorn-60772.exe (PID: 9424)
- Unicorn-3595.exe (PID: 9456)
- Unicorn-559.exe (PID: 9472)
- Unicorn-3403.exe (PID: 9396)
- Unicorn-60772.exe (PID: 9416)
- Unicorn-23061.exe (PID: 9576)
- Unicorn-44244.exe (PID: 9532)
- Unicorn-48328.exe (PID: 9540)
- Unicorn-8042.exe (PID: 9568)
- Unicorn-52220.exe (PID: 9496)
- Unicorn-52220.exe (PID: 9500)
- Unicorn-23824.exe (PID: 9612)
- Unicorn-2125.exe (PID: 9644)
- Unicorn-49023.exe (PID: 9664)
- Unicorn-41120.exe (PID: 9688)
- Unicorn-29422.exe (PID: 9672)
- Unicorn-13609.exe (PID: 9592)
- Unicorn-32182.exe (PID: 9768)
- Unicorn-4363.exe (PID: 9716)
- Unicorn-54119.exe (PID: 9724)
- Unicorn-41866.exe (PID: 9732)
- Unicorn-55026.exe (PID: 9812)
- Unicorn-57648.exe (PID: 9776)
- Unicorn-34605.exe (PID: 9848)
- Unicorn-58333.exe (PID: 9920)
- Unicorn-17192.exe (PID: 9940)
- Unicorn-20316.exe (PID: 9864)
- Unicorn-61903.exe (PID: 9896)
- Unicorn-41888.exe (PID: 9980)
- Unicorn-17938.exe (PID: 9968)
- Unicorn-58224.exe (PID: 9956)
- Unicorn-48202.exe (PID: 10024)
- Unicorn-62500.exe (PID: 10016)
- Unicorn-45899.exe (PID: 10056)
- Unicorn-45780.exe (PID: 10152)
- Unicorn-30958.exe (PID: 10168)
- Unicorn-60533.exe (PID: 10120)
- Unicorn-1794.exe (PID: 10076)
- Unicorn-4290.exe (PID: 10100)
- Unicorn-48733.exe (PID: 10192)
- Unicorn-27414.exe (PID: 10236)
- Unicorn-47088.exe (PID: 10208)
- Unicorn-61239.exe (PID: 8300)
- Unicorn-55322.exe (PID: 10256)
- Unicorn-64384.exe (PID: 6940)
- Unicorn-64960.exe (PID: 10288)
- Unicorn-40456.exe (PID: 10308)
- Unicorn-21742.exe (PID: 10396)
- Unicorn-47730.exe (PID: 10380)
- Unicorn-24312.exe (PID: 10364)
- Unicorn-12635.exe (PID: 10492)
- Unicorn-767.exe (PID: 10440)
- Unicorn-5598.exe (PID: 10468)
- Unicorn-37332.exe (PID: 10528)
- Unicorn-58712.exe (PID: 10556)
- Unicorn-29718.exe (PID: 10520)
- Unicorn-18618.exe (PID: 10608)
- Unicorn-9127.exe (PID: 10680)
- Unicorn-26210.exe (PID: 10716)
- Unicorn-9127.exe (PID: 10684)
- Unicorn-9703.exe (PID: 10592)
- Unicorn-6366.exe (PID: 10636)
- Unicorn-50352.exe (PID: 10772)
- Unicorn-13595.exe (PID: 10816)
- Unicorn-7465.exe (PID: 10800)
- Unicorn-25391.exe (PID: 10748)
- Unicorn-29740.exe (PID: 10732)
- Unicorn-4665.exe (PID: 10808)
- Unicorn-55396.exe (PID: 10868)
- Unicorn-63564.exe (PID: 10852)
- Unicorn-45182.exe (PID: 10892)
- Unicorn-55396.exe (PID: 10860)
- Unicorn-1234.exe (PID: 10944)
- Unicorn-34976.exe (PID: 10920)
- Unicorn-44213.exe (PID: 10936)
- Unicorn-45374.exe (PID: 10968)
- Unicorn-51504.exe (PID: 10976)
- Unicorn-22916.exe (PID: 11012)
- Unicorn-22916.exe (PID: 11004)
- Unicorn-27000.exe (PID: 11040)
- Unicorn-63180.exe (PID: 11068)
- Unicorn-48882.exe (PID: 11060)
- Unicorn-51675.exe (PID: 11152)
- Unicorn-22266.exe (PID: 11220)
- Unicorn-26616.exe (PID: 11236)
- Unicorn-2666.exe (PID: 11204)
- Unicorn-24046.exe (PID: 7280)
- Unicorn-52635.exe (PID: 11244)
- Unicorn-50166.exe (PID: 11084)
- Unicorn-63927.exe (PID: 11144)
- Unicorn-19408.exe (PID: 2332)
- Unicorn-48743.exe (PID: 11288)
- Unicorn-19408.exe (PID: 872)
- Unicorn-7155.exe (PID: 208)
- Unicorn-48743.exe (PID: 11284)
- Unicorn-3071.exe (PID: 11304)
- Unicorn-39258.exe (PID: 11336)
- Unicorn-24238.exe (PID: 11352)
- Unicorn-3818.exe (PID: 11372)
- Unicorn-52251.exe (PID: 11392)
- Unicorn-2495.exe (PID: 11412)
- Unicorn-43528.exe (PID: 11468)
- Unicorn-27192.exe (PID: 11500)
- Unicorn-19024.exe (PID: 11516)
- Unicorn-47612.exe (PID: 11420)
- Unicorn-2422.exe (PID: 11564)
- Unicorn-1710.exe (PID: 11600)
- Unicorn-19770.exe (PID: 11616)
- Unicorn-13789.exe (PID: 11660)
- Unicorn-33505.exe (PID: 11608)
- Unicorn-63371.exe (PID: 11644)
- Unicorn-35320.exe (PID: 11652)
- Unicorn-58970.exe (PID: 11744)
- Unicorn-56932.exe (PID: 11760)
- Unicorn-10855.exe (PID: 11524)
- Unicorn-10855.exe (PID: 11528)
- Unicorn-62094.exe (PID: 11624)
- Unicorn-64835.exe (PID: 11736)
- Unicorn-16646.exe (PID: 11800)
- Unicorn-44296.exe (PID: 11876)
- Unicorn-3263.exe (PID: 11856)
- Unicorn-61748.exe (PID: 11960)
- Unicorn-13294.exe (PID: 12004)
- Unicorn-58778.exe (PID: 11920)
- Unicorn-61571.exe (PID: 11940)
- Unicorn-23876.exe (PID: 11896)
- Unicorn-52931.exe (PID: 12108)
- Unicorn-53388.exe (PID: 12144)
- Unicorn-15869.exe (PID: 12164)
- Unicorn-8463.exe (PID: 12180)
- Unicorn-55287.exe (PID: 12204)
- Unicorn-59318.exe (PID: 12100)
- Unicorn-32649.exe (PID: 12312)
- Unicorn-26999.exe (PID: 12244)
- Unicorn-58048.exe (PID: 12220)
- Unicorn-26999.exe (PID: 12252)
- Unicorn-17762.exe (PID: 12236)
- Unicorn-9786.exe (PID: 12296)
- Unicorn-59947.exe (PID: 12320)
- Unicorn-59947.exe (PID: 12328)
- Unicorn-46370.exe (PID: 12368)
- Unicorn-169.exe (PID: 12360)
- Unicorn-60139.exe (PID: 12376)
- Unicorn-60139.exe (PID: 12384)
- Unicorn-42215.exe (PID: 12452)
- Unicorn-24289.exe (PID: 12528)
- Unicorn-10554.exe (PID: 12536)
- Unicorn-65130.exe (PID: 12520)
- Unicorn-47311.exe (PID: 12544)
- Unicorn-28373.exe (PID: 12580)
- Unicorn-5683.exe (PID: 12552)
- Unicorn-15043.exe (PID: 12668)
- Unicorn-55811.exe (PID: 12684)
- Unicorn-41778.exe (PID: 12708)
- Unicorn-34866.exe (PID: 12408)
- Unicorn-54467.exe (PID: 12416)
- Unicorn-62330.exe (PID: 12512)
- Unicorn-64991.exe (PID: 12732)
- Unicorn-35007.exe (PID: 12864)
- Unicorn-64415.exe (PID: 12776)
- Unicorn-4445.exe (PID: 12784)
- Unicorn-15406.exe (PID: 12856)
- Unicorn-5921.exe (PID: 12880)
- Unicorn-10767.exe (PID: 12936)
- Unicorn-27466.exe (PID: 12756)
- Unicorn-13765.exe (PID: 13008)
- Unicorn-23217.exe (PID: 12984)
- Unicorn-7835.exe (PID: 13064)
- Unicorn-2790.exe (PID: 13040)
- Unicorn-56268.exe (PID: 13104)
- Unicorn-10767.exe (PID: 12944)
- Unicorn-50522.exe (PID: 12952)
- Unicorn-53507.exe (PID: 13052)
- Unicorn-15620.exe (PID: 13196)
- Unicorn-40700.exe (PID: 13264)
- Unicorn-13381.exe (PID: 13152)
- Unicorn-3943.exe (PID: 13288)
- Unicorn-16388.exe (PID: 12560)
- Unicorn-21986.exe (PID: 7268)
- Unicorn-17348.exe (PID: 3396)
- Unicorn-13263.exe (PID: 11188)
- Unicorn-58380.exe (PID: 11300)
- Unicorn-50212.exe (PID: 11496)
- Unicorn-15493.exe (PID: 11116)
- Unicorn-23469.exe (PID: 1600)
- Unicorn-1566.exe (PID: 4212)
- Unicorn-45744.exe (PID: 13336)
- Unicorn-43698.exe (PID: 7860)
- Unicorn-49828.exe (PID: 13316)
- Unicorn-1587.exe (PID: 13380)
- Unicorn-34452.exe (PID: 13416)
- Unicorn-22200.exe (PID: 13448)
- Unicorn-22200.exe (PID: 13456)
- Unicorn-59895.exe (PID: 13516)
- Unicorn-17732.exe (PID: 13564)
- Unicorn-29984.exe (PID: 13556)
- Unicorn-38079.exe (PID: 13596)
- Unicorn-18848.exe (PID: 13648)
- Unicorn-35930.exe (PID: 13672)
- Unicorn-64519.exe (PID: 13636)
- Unicorn-31292.exe (PID: 13708)
- Unicorn-31270.exe (PID: 13740)
- Unicorn-42968.exe (PID: 13756)
- Unicorn-5946.exe (PID: 13784)
- Unicorn-63580.exe (PID: 13804)
- Unicorn-56159.exe (PID: 13904)
- Unicorn-30908.exe (PID: 13856)
- Unicorn-49282.exe (PID: 13812)
- Unicorn-11447.exe (PID: 13964)
- Unicorn-39076.exe (PID: 13848)
- Unicorn-46158.exe (PID: 13932)
- Unicorn-56564.exe (PID: 13988)
- Unicorn-20362.exe (PID: 14012)
- Unicorn-56564.exe (PID: 13980)
- Unicorn-40206.exe (PID: 14044)
- Unicorn-51904.exe (PID: 14092)
- Unicorn-60819.exe (PID: 14116)
- Unicorn-65095.exe (PID: 14156)
- Unicorn-34673.exe (PID: 14216)
- Unicorn-62494.exe (PID: 14200)
- Unicorn-8686.exe (PID: 14232)
- Unicorn-518.exe (PID: 14252)
- Unicorn-27400.exe (PID: 14108)
- Unicorn-11255.exe (PID: 14172)
- Unicorn-8131.exe (PID: 14268)
- Unicorn-24638.exe (PID: 14376)
- Unicorn-63454.exe (PID: 14284)
- Unicorn-45827.exe (PID: 1012)
- Unicorn-44239.exe (PID: 14364)
- Unicorn-49164.exe (PID: 14312)
- Unicorn-33382.exe (PID: 14332)
- Unicorn-61587.exe (PID: 14412)
- Unicorn-19038.exe (PID: 14384)
- Unicorn-45251.exe (PID: 14448)
- Unicorn-44318.exe (PID: 6404)
- Unicorn-8494.exe (PID: 14532)
- Unicorn-65043.exe (PID: 14572)
- Unicorn-45443.exe (PID: 14564)
- Unicorn-21706.exe (PID: 14604)
- Unicorn-41572.exe (PID: 14612)
- Unicorn-35027.exe (PID: 14636)
- Unicorn-20886.exe (PID: 14688)
- Unicorn-41166.exe (PID: 14492)
- Unicorn-64851.exe (PID: 14456)
- Unicorn-16662.exe (PID: 14508)
- Unicorn-21706.exe (PID: 14596)
- Unicorn-11129.exe (PID: 14740)
- Unicorn-47502.exe (PID: 14864)
- Unicorn-62355.exe (PID: 14816)
- Unicorn-14637.exe (PID: 14824)
- Unicorn-27081.exe (PID: 14896)
- Unicorn-13346.exe (PID: 14880)
- Unicorn-27081.exe (PID: 14888)
- Unicorn-9262.exe (PID: 14964)
- Unicorn-56947.exe (PID: 14956)
- Unicorn-44378.exe (PID: 15008)
- Unicorn-44378.exe (PID: 15016)
- Unicorn-6138.exe (PID: 15052)
- Unicorn-21920.exe (PID: 15104)
- Unicorn-38234.exe (PID: 14700)
- Unicorn-36718.exe (PID: 14708)
- Unicorn-24089.exe (PID: 14768)
- Unicorn-26889.exe (PID: 14780)
- Unicorn-43086.exe (PID: 15160)
- Unicorn-43086.exe (PID: 15152)
- Unicorn-18582.exe (PID: 15200)
- Unicorn-18582.exe (PID: 15192)
- Unicorn-58298.exe (PID: 15244)
- Unicorn-48078.exe (PID: 15276)
- Unicorn-28941.exe (PID: 15340)
- Unicorn-48078.exe (PID: 15284)
- Unicorn-33556.exe (PID: 15356)
- Unicorn-53943.exe (PID: 15312)
- Unicorn-53943.exe (PID: 15292)
- Unicorn-6690.exe (PID: 15320)
- Unicorn-52354.exe (PID: 15440)
- Unicorn-37607.exe (PID: 15348)
- Unicorn-64275.exe (PID: 15500)
- Unicorn-24277.exe (PID: 15268)
- Unicorn-14446.exe (PID: 15556)
- Unicorn-35686.exe (PID: 15544)
- Unicorn-36594.exe (PID: 15580)
- Unicorn-31602.exe (PID: 15536)
- Unicorn-65374.exe (PID: 15644)
- Unicorn-20449.exe (PID: 15676)
- Unicorn-31359.exe (PID: 15720)
- Unicorn-22693.exe (PID: 15728)
- Unicorn-7866.exe (PID: 15756)
- Unicorn-30975.exe (PID: 15804)
- Unicorn-8965.exe (PID: 15888)
- Unicorn-9925.exe (PID: 15940)
- Unicorn-50574.exe (PID: 15964)
- Unicorn-34237.exe (PID: 15980)
- Unicorn-63402.exe (PID: 15920)
- Unicorn-46874.exe (PID: 15972)
- Unicorn-55042.exe (PID: 16008)
- Unicorn-61142.exe (PID: 16220)
- Unicorn-4303.exe (PID: 16156)
- Unicorn-63942.exe (PID: 16212)
- Unicorn-6573.exe (PID: 16148)
- Unicorn-32553.exe (PID: 16232)
- Unicorn-32475.exe (PID: 16268)
- Unicorn-7274.exe (PID: 16284)
- Unicorn-26609.exe (PID: 16316)
- Unicorn-21064.exe (PID: 16308)
- Unicorn-65339.exe (PID: 16360)
- Unicorn-32475.exe (PID: 16260)
- Unicorn-51306.exe (PID: 16368)
- Unicorn-17399.exe (PID: 16452)
- Unicorn-11534.exe (PID: 16460)
- Unicorn-65034.exe (PID: 16468)
- Unicorn-65034.exe (PID: 16476)
- Unicorn-3257.exe (PID: 16484)
- Unicorn-64710.exe (PID: 16520)
- Unicorn-5303.exe (PID: 16528)
- Unicorn-15701.exe (PID: 16636)
- Unicorn-62843.exe (PID: 16692)
- Unicorn-8042.exe (PID: 16616)
- Unicorn-54099.exe (PID: 16412)
- Unicorn-8738.exe (PID: 16672)
- Unicorn-27377.exe (PID: 16684)
- Unicorn-62843.exe (PID: 16700)
- Unicorn-17172.exe (PID: 16660)
- Unicorn-24577.exe (PID: 16652)
- Unicorn-20486.exe (PID: 16772)
- Unicorn-33435.exe (PID: 16788)
- Unicorn-21566.exe (PID: 16644)
- Unicorn-16277.exe (PID: 16860)
- Unicorn-30344.exe (PID: 16840)
- Unicorn-55827.exe (PID: 16868)
- Unicorn-59911.exe (PID: 16888)
- Unicorn-18250.exe (PID: 16916)
- Unicorn-14410.exe (PID: 16940)
- Unicorn-30938.exe (PID: 16968)
- Unicorn-23869.exe (PID: 16608)
- Unicorn-1795.exe (PID: 16996)
- Unicorn-19838.exe (PID: 17052)
- Unicorn-19262.exe (PID: 17068)
- Unicorn-37274.exe (PID: 17136)
The sample compiled with chinese language support
- 1 (309).exe (PID: 7372)
- Unicorn-32713.exe (PID: 5720)
- Unicorn-65128.exe (PID: 7796)
- Unicorn-34192.exe (PID: 4424)
- Unicorn-42914.exe (PID: 4008)
- Unicorn-33542.exe (PID: 2980)
- Unicorn-24820.exe (PID: 5204)
- Unicorn-33673.exe (PID: 7356)
- Unicorn-32190.exe (PID: 5352)
- Unicorn-28362.exe (PID: 4608)
- Unicorn-20470.exe (PID: 7152)
- Unicorn-34228.exe (PID: 1812)
- Unicorn-14605.exe (PID: 6808)
- Unicorn-14627.exe (PID: 4488)
- Unicorn-37094.exe (PID: 7816)
- Unicorn-34656.exe (PID: 7424)
- Unicorn-5359.exe (PID: 7404)
- Unicorn-34694.exe (PID: 7292)
- Unicorn-21748.exe (PID: 1676)
- Unicorn-58836.exe (PID: 7760)
- Unicorn-12546.exe (PID: 904)
- Unicorn-48622.exe (PID: 7916)
- Unicorn-35427.exe (PID: 1052)
- Unicorn-2855.exe (PID: 1276)
- Unicorn-34332.exe (PID: 7788)
- Unicorn-14378.exe (PID: 7924)
- Unicorn-22812.exe (PID: 5868)
- Unicorn-123.exe (PID: 920)
- Unicorn-1009.exe (PID: 5800)
- Unicorn-44747.exe (PID: 8008)
- Unicorn-34192.exe (PID: 4784)
- Unicorn-31940.exe (PID: 7184)
- Unicorn-123.exe (PID: 3676)
- Unicorn-65359.exe (PID: 7192)
- Unicorn-32132.exe (PID: 8080)
- Unicorn-23964.exe (PID: 8060)
- Unicorn-33542.exe (PID: 516)
- Unicorn-53408.exe (PID: 2236)
- Unicorn-36194.exe (PID: 7964)
- Unicorn-15027.exe (PID: 8116)
- Unicorn-59075.exe (PID: 8148)
- Unicorn-52945.exe (PID: 8152)
- Unicorn-17166.exe (PID: 7216)
- Unicorn-21172.exe (PID: 680)
- Unicorn-17206.exe (PID: 6372)
- Unicorn-24820.exe (PID: 5376)
- Unicorn-24820.exe (PID: 6736)
- Unicorn-52056.exe (PID: 4300)
- Unicorn-39724.exe (PID: 4736)
- Unicorn-54014.exe (PID: 8028)
- Unicorn-25011.exe (PID: 6108)
- Unicorn-49930.exe (PID: 7960)
- Unicorn-19304.exe (PID: 7012)
- Unicorn-60144.exe (PID: 7896)
- Unicorn-47322.exe (PID: 8168)
- Unicorn-3522.exe (PID: 7224)
- Unicorn-44877.exe (PID: 1272)
- Unicorn-44877.exe (PID: 4180)
- Unicorn-55987.exe (PID: 4776)
- Unicorn-52723.exe (PID: 2320)
- Unicorn-11805.exe (PID: 7396)
- Unicorn-11903.exe (PID: 2420)
- Unicorn-2649.exe (PID: 5260)
- Unicorn-41238.exe (PID: 4980)
- Unicorn-24348.exe (PID: 1568)
- Unicorn-50004.exe (PID: 6752)
- Unicorn-13802.exe (PID: 6576)
- Unicorn-13226.exe (PID: 7476)
- Unicorn-41260.exe (PID: 6584)
- Unicorn-16298.exe (PID: 6228)
- Unicorn-41260.exe (PID: 6712)
- Unicorn-49428.exe (PID: 3332)
- Unicorn-60315.exe (PID: 7708)
- Unicorn-23615.exe (PID: 7252)
- Unicorn-25478.exe (PID: 1132)
- Unicorn-24161.exe (PID: 7468)
- Unicorn-41260.exe (PID: 4932)
- Unicorn-9739.exe (PID: 7456)
- Unicorn-34332.exe (PID: 7748)
- Unicorn-46667.exe (PID: 6436)
- Unicorn-34244.exe (PID: 2284)
- Unicorn-16546.exe (PID: 4228)
- Unicorn-26268.exe (PID: 6512)
- Unicorn-52810.exe (PID: 812)
- Unicorn-6148.exe (PID: 2644)
- Unicorn-59900.exe (PID: 8320)
- Unicorn-27804.exe (PID: 8272)
- Unicorn-3278.exe (PID: 8368)
- Unicorn-49869.exe (PID: 8476)
- Unicorn-19806.exe (PID: 8420)
- Unicorn-53076.exe (PID: 8532)
- Unicorn-61244.exe (PID: 8504)
- Unicorn-40824.exe (PID: 8556)
- Unicorn-3299.exe (PID: 8584)
- Unicorn-14181.exe (PID: 8548)
- Unicorn-54538.exe (PID: 8600)
- Unicorn-57435.exe (PID: 8680)
- Unicorn-8322.exe (PID: 8660)
- Unicorn-8322.exe (PID: 8668)
- Unicorn-37834.exe (PID: 8688)
- Unicorn-49148.exe (PID: 8804)
- Unicorn-523.exe (PID: 8748)
- Unicorn-24955.exe (PID: 8772)
- Unicorn-28728.exe (PID: 8828)
- Unicorn-41556.exe (PID: 8764)
- Unicorn-59546.exe (PID: 8852)
- Unicorn-37965.exe (PID: 8836)
- Unicorn-49340.exe (PID: 8876)
- Unicorn-57316.exe (PID: 8796)
- Unicorn-139.exe (PID: 8868)
- Unicorn-30434.exe (PID: 8984)
- Unicorn-36631.exe (PID: 8820)
- Unicorn-43755.exe (PID: 9080)
- Unicorn-50300.exe (PID: 9016)
- Unicorn-44825.exe (PID: 9008)
- Unicorn-24834.exe (PID: 9000)
- Unicorn-38954.exe (PID: 8172)
- Unicorn-54939.exe (PID: 8960)
- Unicorn-40278.exe (PID: 9072)
- Unicorn-5183.exe (PID: 8968)
- Unicorn-1867.exe (PID: 9164)
- Unicorn-43092.exe (PID: 2340)
- Unicorn-5567.exe (PID: 8280)
- Unicorn-38432.exe (PID: 7196)
- Unicorn-64067.exe (PID: 9192)
- Unicorn-24325.exe (PID: 8232)
- Unicorn-10590.exe (PID: 9224)
- Unicorn-64015.exe (PID: 9264)
- Unicorn-53604.exe (PID: 7644)
- Unicorn-39392.exe (PID: 9372)
- Unicorn-60772.exe (PID: 9424)
- Unicorn-3403.exe (PID: 9396)
- Unicorn-3595.exe (PID: 9456)
- Unicorn-559.exe (PID: 9472)
- Unicorn-52220.exe (PID: 9496)
- Unicorn-52220.exe (PID: 9500)
- Unicorn-23061.exe (PID: 9576)
- Unicorn-44244.exe (PID: 9532)
- Unicorn-8042.exe (PID: 9568)
- Unicorn-23824.exe (PID: 9612)
- Unicorn-48328.exe (PID: 9540)
- Unicorn-13609.exe (PID: 9592)
- Unicorn-49023.exe (PID: 9664)
- Unicorn-2125.exe (PID: 9644)
- Unicorn-41866.exe (PID: 9732)
- Unicorn-29422.exe (PID: 9672)
- Unicorn-41120.exe (PID: 9688)
- Unicorn-54119.exe (PID: 9724)
- Unicorn-32182.exe (PID: 9768)
- Unicorn-4363.exe (PID: 9716)
- Unicorn-55026.exe (PID: 9812)
- Unicorn-34605.exe (PID: 9848)
- Unicorn-20316.exe (PID: 9864)
- Unicorn-17192.exe (PID: 9940)
- Unicorn-61903.exe (PID: 9896)
- Unicorn-1794.exe (PID: 10076)
- Unicorn-17938.exe (PID: 9968)
- Unicorn-58333.exe (PID: 9920)
- Unicorn-62500.exe (PID: 10016)
- Unicorn-41888.exe (PID: 9980)
- Unicorn-48202.exe (PID: 10024)
- Unicorn-1031.exe (PID: 8628)
- Unicorn-4290.exe (PID: 10100)
- Unicorn-45899.exe (PID: 10056)
- Unicorn-37280.exe (PID: 8728)
- Unicorn-60533.exe (PID: 10120)
- Unicorn-45780.exe (PID: 10152)
- Unicorn-139.exe (PID: 8856)
- Unicorn-30958.exe (PID: 10168)
- Unicorn-56290.exe (PID: 9024)
- Unicorn-25500.exe (PID: 2040)
- Unicorn-48733.exe (PID: 10192)
- Unicorn-47088.exe (PID: 10208)
- Unicorn-27414.exe (PID: 10236)
- Unicorn-61239.exe (PID: 8300)
- Unicorn-64384.exe (PID: 6940)
- Unicorn-55322.exe (PID: 10256)
- Unicorn-64960.exe (PID: 10288)
- Unicorn-40456.exe (PID: 10308)
- Unicorn-24312.exe (PID: 10364)
- Unicorn-5598.exe (PID: 10468)
- Unicorn-767.exe (PID: 10440)
- Unicorn-21742.exe (PID: 10396)
- Unicorn-47730.exe (PID: 10380)
- Unicorn-3137.exe (PID: 8972)
- Unicorn-41562.exe (PID: 9032)
- Unicorn-29718.exe (PID: 10520)
- Unicorn-9703.exe (PID: 10592)
- Unicorn-12635.exe (PID: 10492)
- Unicorn-60772.exe (PID: 9416)
- Unicorn-58712.exe (PID: 10556)
- Unicorn-29740.exe (PID: 10732)
- Unicorn-9127.exe (PID: 10684)
- Unicorn-9127.exe (PID: 10680)
- Unicorn-6366.exe (PID: 10636)
- Unicorn-13595.exe (PID: 10816)
- Unicorn-34976.exe (PID: 10920)
- Unicorn-63180.exe (PID: 11068)
- Unicorn-25391.exe (PID: 10748)
- Unicorn-55396.exe (PID: 10860)
- Unicorn-63564.exe (PID: 10852)
- Unicorn-50352.exe (PID: 10772)
- Unicorn-45182.exe (PID: 10892)
- Unicorn-4665.exe (PID: 10808)
- Unicorn-7465.exe (PID: 10800)
- Unicorn-1234.exe (PID: 10944)
- Unicorn-50166.exe (PID: 11084)
- Unicorn-55396.exe (PID: 10868)
- Unicorn-22916.exe (PID: 11004)
- Unicorn-48882.exe (PID: 11060)
- Unicorn-51675.exe (PID: 11152)
- Unicorn-22916.exe (PID: 11012)
- Unicorn-18618.exe (PID: 10608)
- Unicorn-45374.exe (PID: 10968)
- Unicorn-63927.exe (PID: 11144)
- Unicorn-27000.exe (PID: 11040)
- Unicorn-26210.exe (PID: 10716)
- Unicorn-22266.exe (PID: 11220)
- Unicorn-2666.exe (PID: 11204)
- Unicorn-58224.exe (PID: 9956)
- Unicorn-7155.exe (PID: 208)
- Unicorn-26616.exe (PID: 11236)
- Unicorn-52635.exe (PID: 11244)
- Unicorn-3071.exe (PID: 11304)
Reads the computer name
- 1 (309).exe (PID: 7372)
- Unicorn-34656.exe (PID: 7424)
- Unicorn-65128.exe (PID: 7796)
- Unicorn-37094.exe (PID: 7816)
- Unicorn-2855.exe (PID: 1276)
- Unicorn-52056.exe (PID: 4300)
- Unicorn-32190.exe (PID: 5352)
- Unicorn-21748.exe (PID: 1676)
- Unicorn-42914.exe (PID: 4008)
- Unicorn-33673.exe (PID: 7356)
- Unicorn-28362.exe (PID: 4608)
- Unicorn-34192.exe (PID: 4784)
- Unicorn-34192.exe (PID: 4424)
- Unicorn-21172.exe (PID: 680)
- Unicorn-14627.exe (PID: 4488)
- Unicorn-34228.exe (PID: 1812)
- Unicorn-12546.exe (PID: 904)
- Unicorn-1009.exe (PID: 5800)
- Unicorn-32713.exe (PID: 5720)
- Unicorn-35427.exe (PID: 1052)
- Unicorn-123.exe (PID: 920)
- Unicorn-123.exe (PID: 3676)
- Unicorn-33542.exe (PID: 516)
- Unicorn-53408.exe (PID: 2236)
- Unicorn-24820.exe (PID: 6736)
- Unicorn-24820.exe (PID: 5204)
- Unicorn-11805.exe (PID: 7396)
- Unicorn-14605.exe (PID: 6808)
- Unicorn-20470.exe (PID: 7152)
- Unicorn-33542.exe (PID: 2980)
- Unicorn-17206.exe (PID: 6372)
- Unicorn-24820.exe (PID: 5376)
- Unicorn-5359.exe (PID: 7404)
- Unicorn-34332.exe (PID: 7748)
- Unicorn-58836.exe (PID: 7760)
- Unicorn-48622.exe (PID: 7916)
- Unicorn-34332.exe (PID: 7788)
- Unicorn-14378.exe (PID: 7924)
- Unicorn-60315.exe (PID: 7708)
- Unicorn-22812.exe (PID: 5868)
- Unicorn-44747.exe (PID: 8008)
- Unicorn-34694.exe (PID: 7292)
- Unicorn-31940.exe (PID: 7184)
- Unicorn-65359.exe (PID: 7192)
- Unicorn-32132.exe (PID: 8080)
- Unicorn-23964.exe (PID: 8060)
- Unicorn-36194.exe (PID: 7964)
- Unicorn-17166.exe (PID: 7216)
- Unicorn-59075.exe (PID: 8148)
- Unicorn-52945.exe (PID: 8152)
- Unicorn-49930.exe (PID: 7960)
- Unicorn-54014.exe (PID: 8028)
- Unicorn-39724.exe (PID: 4736)
- Unicorn-15027.exe (PID: 8116)
- Unicorn-38954.exe (PID: 8172)
- Unicorn-44877.exe (PID: 4180)
- Unicorn-55987.exe (PID: 4776)
- Unicorn-25011.exe (PID: 6108)
- Unicorn-3522.exe (PID: 7224)
- Unicorn-19304.exe (PID: 7012)
- Unicorn-60144.exe (PID: 7896)
- Unicorn-47322.exe (PID: 8168)
- Unicorn-44877.exe (PID: 1272)
- Unicorn-52723.exe (PID: 2320)
- Unicorn-11903.exe (PID: 2420)
- Unicorn-41238.exe (PID: 4980)
- Unicorn-24348.exe (PID: 1568)
- Unicorn-2649.exe (PID: 5260)
- Unicorn-25500.exe (PID: 2040)
- Unicorn-16298.exe (PID: 6228)
- Unicorn-50004.exe (PID: 6752)
- Unicorn-13802.exe (PID: 6576)
- Unicorn-49428.exe (PID: 3332)
- Unicorn-41260.exe (PID: 6584)
- Unicorn-13226.exe (PID: 7476)
- Unicorn-53604.exe (PID: 7644)
- Unicorn-41260.exe (PID: 6712)
- Unicorn-24161.exe (PID: 7468)
- Unicorn-23615.exe (PID: 7252)
- Unicorn-25478.exe (PID: 1132)
- Unicorn-41260.exe (PID: 4932)
- Unicorn-9739.exe (PID: 7456)
- Unicorn-16546.exe (PID: 4228)
- Unicorn-34244.exe (PID: 2284)
- Unicorn-26268.exe (PID: 6512)
- Unicorn-6148.exe (PID: 2644)
- Unicorn-46667.exe (PID: 6436)
- Unicorn-52810.exe (PID: 812)
- Unicorn-59900.exe (PID: 8320)
- Unicorn-27804.exe (PID: 8272)
- Unicorn-19806.exe (PID: 8420)
- Unicorn-3278.exe (PID: 8368)
- Unicorn-61244.exe (PID: 8504)
- Unicorn-49869.exe (PID: 8476)
- Unicorn-53076.exe (PID: 8532)
- Unicorn-3299.exe (PID: 8584)
- Unicorn-40824.exe (PID: 8556)
- Unicorn-1031.exe (PID: 8628)
- Unicorn-14181.exe (PID: 8548)
- Unicorn-54538.exe (PID: 8600)
- Unicorn-57435.exe (PID: 8680)
- Unicorn-8322.exe (PID: 8660)
- Unicorn-8322.exe (PID: 8668)
- Unicorn-523.exe (PID: 8748)
- Unicorn-59546.exe (PID: 8852)
- Unicorn-37280.exe (PID: 8728)
- Unicorn-57316.exe (PID: 8796)
- Unicorn-41556.exe (PID: 8764)
- Unicorn-37834.exe (PID: 8688)
- Unicorn-24955.exe (PID: 8772)
- Unicorn-49148.exe (PID: 8804)
- Unicorn-49340.exe (PID: 8876)
- Unicorn-37965.exe (PID: 8836)
- Unicorn-139.exe (PID: 8856)
- Unicorn-28728.exe (PID: 8828)
- Unicorn-36631.exe (PID: 8820)
- Unicorn-30434.exe (PID: 8984)
- Unicorn-43755.exe (PID: 9080)
- Unicorn-50300.exe (PID: 9016)
- Unicorn-139.exe (PID: 8868)
- Unicorn-3137.exe (PID: 8972)
- Unicorn-24834.exe (PID: 9000)
- Unicorn-54939.exe (PID: 8960)
- Unicorn-40278.exe (PID: 9072)
- Unicorn-56290.exe (PID: 9024)
- Unicorn-44825.exe (PID: 9008)
- Unicorn-41562.exe (PID: 9032)
- Unicorn-5183.exe (PID: 8968)
- Unicorn-64067.exe (PID: 9192)
- Unicorn-1867.exe (PID: 9164)
- Unicorn-43092.exe (PID: 2340)
- Unicorn-5567.exe (PID: 8280)
- Unicorn-38432.exe (PID: 7196)
- Unicorn-24325.exe (PID: 8232)
- Unicorn-64015.exe (PID: 9264)
- Unicorn-39392.exe (PID: 9372)
- Unicorn-60772.exe (PID: 9416)
- Unicorn-60772.exe (PID: 9424)
- Unicorn-3595.exe (PID: 9456)
- Unicorn-559.exe (PID: 9472)
- Unicorn-52220.exe (PID: 9496)
- Unicorn-15869.exe (PID: 12164)
- Unicorn-52220.exe (PID: 9500)
- Unicorn-3403.exe (PID: 9396)
- Unicorn-48328.exe (PID: 9540)
- Unicorn-13609.exe (PID: 9592)
- Unicorn-49023.exe (PID: 9664)
- Unicorn-23824.exe (PID: 9612)
- Unicorn-41120.exe (PID: 9688)
- Unicorn-54119.exe (PID: 9724)
- Unicorn-2125.exe (PID: 9644)
- Unicorn-32182.exe (PID: 9768)
- Unicorn-4363.exe (PID: 9716)
- Unicorn-57648.exe (PID: 9776)
- Unicorn-58333.exe (PID: 9920)
- Unicorn-17192.exe (PID: 9940)
- Unicorn-17938.exe (PID: 9968)
- Unicorn-41888.exe (PID: 9980)
- Unicorn-45899.exe (PID: 10056)
- Unicorn-4290.exe (PID: 10100)
- Unicorn-60533.exe (PID: 10120)
- Unicorn-45780.exe (PID: 10152)
- Unicorn-30958.exe (PID: 10168)
- Unicorn-47088.exe (PID: 10208)
- Unicorn-27414.exe (PID: 10236)
- Unicorn-61239.exe (PID: 8300)
- Unicorn-64384.exe (PID: 6940)
Create files in a temporary directory
- 1 (309).exe (PID: 7372)
- Unicorn-65128.exe (PID: 7796)
- Unicorn-52056.exe (PID: 4300)
- Unicorn-34656.exe (PID: 7424)
- Unicorn-37094.exe (PID: 7816)
- Unicorn-21748.exe (PID: 1676)
- Unicorn-42914.exe (PID: 4008)
- Unicorn-33673.exe (PID: 7356)
- Unicorn-32713.exe (PID: 5720)
- Unicorn-123.exe (PID: 920)
- Unicorn-34192.exe (PID: 4784)
- Unicorn-33542.exe (PID: 516)
- Unicorn-34192.exe (PID: 4424)
- Unicorn-12546.exe (PID: 904)
- Unicorn-33542.exe (PID: 2980)
- Unicorn-17206.exe (PID: 6372)
- Unicorn-32190.exe (PID: 5352)
- Unicorn-24820.exe (PID: 6736)
- Unicorn-24820.exe (PID: 5376)
- Unicorn-34228.exe (PID: 1812)
- Unicorn-20470.exe (PID: 7152)
- Unicorn-14605.exe (PID: 6808)
- Unicorn-35427.exe (PID: 1052)
- Unicorn-14627.exe (PID: 4488)
- Unicorn-58836.exe (PID: 7760)
- Unicorn-34332.exe (PID: 7788)
- Unicorn-14378.exe (PID: 7924)
- Unicorn-1009.exe (PID: 5800)
- Unicorn-2855.exe (PID: 1276)
- Unicorn-31940.exe (PID: 7184)
- Unicorn-44747.exe (PID: 8008)
- Unicorn-65359.exe (PID: 7192)
- Unicorn-32132.exe (PID: 8080)
- Unicorn-23964.exe (PID: 8060)
- Unicorn-53408.exe (PID: 2236)
- Unicorn-36194.exe (PID: 7964)
- Unicorn-52945.exe (PID: 8152)
- Unicorn-39724.exe (PID: 4736)
- Unicorn-17166.exe (PID: 7216)
- Unicorn-21172.exe (PID: 680)
- Unicorn-54014.exe (PID: 8028)
- Unicorn-49930.exe (PID: 7960)
- Unicorn-47322.exe (PID: 8168)
- Unicorn-28362.exe (PID: 4608)
- Unicorn-3522.exe (PID: 7224)
- Unicorn-19304.exe (PID: 7012)
- Unicorn-60144.exe (PID: 7896)
- Unicorn-44877.exe (PID: 4180)
- Unicorn-44877.exe (PID: 1272)
- Unicorn-52723.exe (PID: 2320)
- Unicorn-55987.exe (PID: 4776)
- Unicorn-24820.exe (PID: 5204)
- Unicorn-11903.exe (PID: 2420)
- Unicorn-5359.exe (PID: 7404)
- Unicorn-2649.exe (PID: 5260)
- Unicorn-34694.exe (PID: 7292)
- Unicorn-50004.exe (PID: 6752)
- Unicorn-13802.exe (PID: 6576)
- Unicorn-13226.exe (PID: 7476)
- Unicorn-41260.exe (PID: 6584)
- Unicorn-49428.exe (PID: 3332)
- Unicorn-48622.exe (PID: 7916)
- Unicorn-24161.exe (PID: 7468)
- Unicorn-41260.exe (PID: 6712)
- Unicorn-60315.exe (PID: 7708)
- Unicorn-23615.exe (PID: 7252)
- Unicorn-34332.exe (PID: 7748)
- Unicorn-25478.exe (PID: 1132)
- Unicorn-41260.exe (PID: 4932)
- Unicorn-9739.exe (PID: 7456)
- Unicorn-34244.exe (PID: 2284)
- Unicorn-46667.exe (PID: 6436)
- Unicorn-123.exe (PID: 3676)
- Unicorn-26268.exe (PID: 6512)
- Unicorn-22812.exe (PID: 5868)
- Unicorn-52810.exe (PID: 812)
- Unicorn-59900.exe (PID: 8320)
- Unicorn-6148.exe (PID: 2644)
- Unicorn-27804.exe (PID: 8272)
- Unicorn-3278.exe (PID: 8368)
- Unicorn-19806.exe (PID: 8420)
- Unicorn-49869.exe (PID: 8476)
- Unicorn-61244.exe (PID: 8504)
- Unicorn-53076.exe (PID: 8532)
- Unicorn-40824.exe (PID: 8556)
- Unicorn-15027.exe (PID: 8116)
- Unicorn-3299.exe (PID: 8584)
- Unicorn-54538.exe (PID: 8600)
- Unicorn-14181.exe (PID: 8548)
- Unicorn-57435.exe (PID: 8680)
- Unicorn-59075.exe (PID: 8148)
- Unicorn-8322.exe (PID: 8660)
- Unicorn-8322.exe (PID: 8668)
- Unicorn-37834.exe (PID: 8688)
- Unicorn-24955.exe (PID: 8772)
- Unicorn-49148.exe (PID: 8804)
- Unicorn-41556.exe (PID: 8764)
- Unicorn-59546.exe (PID: 8852)
- Unicorn-523.exe (PID: 8748)
- Unicorn-57316.exe (PID: 8796)
- Unicorn-49340.exe (PID: 8876)
- Unicorn-28728.exe (PID: 8828)
- Unicorn-37965.exe (PID: 8836)
- Unicorn-139.exe (PID: 8868)
- Unicorn-25011.exe (PID: 6108)
- Unicorn-30434.exe (PID: 8984)
- Unicorn-43755.exe (PID: 9080)
- Unicorn-36631.exe (PID: 8820)
- Unicorn-50300.exe (PID: 9016)
- Unicorn-44825.exe (PID: 9008)
- Unicorn-38954.exe (PID: 8172)
- Unicorn-24834.exe (PID: 9000)
- Unicorn-54939.exe (PID: 8960)
- Unicorn-40278.exe (PID: 9072)
- Unicorn-5183.exe (PID: 8968)
- Unicorn-11805.exe (PID: 7396)
- Unicorn-1867.exe (PID: 9164)
- Unicorn-64067.exe (PID: 9192)
- Unicorn-41238.exe (PID: 4980)
- Unicorn-43092.exe (PID: 2340)
- Unicorn-38432.exe (PID: 7196)
- Unicorn-24348.exe (PID: 1568)
- Unicorn-5567.exe (PID: 8280)
- Unicorn-10590.exe (PID: 9224)
- Unicorn-64015.exe (PID: 9264)
- Unicorn-24325.exe (PID: 8232)
- Unicorn-16298.exe (PID: 6228)
- Unicorn-39392.exe (PID: 9372)
- Unicorn-16546.exe (PID: 4228)
- Unicorn-52220.exe (PID: 9500)
- Unicorn-23061.exe (PID: 9576)
- Unicorn-52220.exe (PID: 9496)
- Unicorn-8042.exe (PID: 9568)
- Unicorn-23824.exe (PID: 9612)
- Unicorn-48328.exe (PID: 9540)
- Unicorn-13609.exe (PID: 9592)
- Unicorn-49023.exe (PID: 9664)
- Unicorn-2125.exe (PID: 9644)
- Unicorn-41120.exe (PID: 9688)
- Unicorn-29422.exe (PID: 9672)
- Unicorn-41866.exe (PID: 9732)
- Unicorn-4363.exe (PID: 9716)
- Unicorn-54119.exe (PID: 9724)
- Unicorn-34605.exe (PID: 9848)
- Unicorn-55026.exe (PID: 9812)
- Unicorn-20316.exe (PID: 9864)
- Unicorn-17192.exe (PID: 9940)
- Unicorn-61903.exe (PID: 9896)
- Unicorn-58333.exe (PID: 9920)
- Unicorn-1794.exe (PID: 10076)
- Unicorn-62500.exe (PID: 10016)
- Unicorn-48202.exe (PID: 10024)
- Unicorn-41888.exe (PID: 9980)
- Unicorn-45899.exe (PID: 10056)
- Unicorn-1031.exe (PID: 8628)
- Unicorn-4290.exe (PID: 10100)
- Unicorn-60533.exe (PID: 10120)
- Unicorn-37280.exe (PID: 8728)
- Unicorn-45780.exe (PID: 10152)
- Unicorn-56290.exe (PID: 9024)
- Unicorn-25500.exe (PID: 2040)
- Unicorn-48733.exe (PID: 10192)
- Unicorn-47088.exe (PID: 10208)
- Unicorn-27414.exe (PID: 10236)
- Unicorn-3595.exe (PID: 9456)
- Unicorn-61239.exe (PID: 8300)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable (generic) (52.9) |
|---|---|---|
| .exe | | | Generic Win/DOS Executable (23.5) |
| .exe | | | DOS Executable Generic (23.5) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicrn.exe |
Total processes
671
Monitored processes
536
Malicious processes
89
Suspicious processes
70
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 208 | C:\Users\admin\AppData\Local\Temp\Unicorn-7155.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-7155.exe | Unicorn-36631.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 516 | C:\Users\admin\AppData\Local\Temp\Unicorn-33542.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-33542.exe | Unicorn-52056.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 680 | C:\Users\admin\AppData\Local\Temp\Unicorn-21172.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-21172.exe | Unicorn-33673.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 812 | C:\Users\admin\AppData\Local\Temp\Unicorn-52810.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-52810.exe | Unicorn-34192.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 872 | C:\Users\admin\AppData\Local\Temp\Unicorn-19408.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-19408.exe | — | Unicorn-3137.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 904 | C:\Users\admin\AppData\Local\Temp\Unicorn-12546.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-12546.exe | Unicorn-2855.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 920 | C:\Users\admin\AppData\Local\Temp\Unicorn-123.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-123.exe | Unicorn-34192.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1012 | C:\Users\admin\AppData\Local\Temp\Unicorn-45827.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-45827.exe | — | Unicorn-8322.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1052 | C:\Users\admin\AppData\Local\Temp\Unicorn-35427.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-35427.exe | Unicorn-21748.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1132 | C:\Users\admin\AppData\Local\Temp\Unicorn-25478.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-25478.exe | Unicorn-32713.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
10 756
Read events
10 756
Write events
0
Delete events
0
Modification events
Executable files
857
Suspicious files
0
Text files
0
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7424 | Unicorn-34656.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-65128.exe | executable | |
MD5:E4632E895A777888772F670AD35BF336 | SHA256:58EB6E3E3145C31D4B852AAAC5DEA1E7645C75D211A110E7B56A35685802B524 | |||
| 7372 | 1 (309).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-34656.exe | executable | |
MD5:1815AA85727EDA06BBDA6637E7DFFF9E | SHA256:314635A9E381F11920FC9F401220F7C0FB7DBDD65A95326D82C3CC0432980046 | |||
| 7372 | 1 (309).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-37094.exe | executable | |
MD5:B4A28A22E371EF8F739037EF3ADAA8D1 | SHA256:356A75EE66E95B4746316B22C85C625F558405E4F96F2E77C07C7F3F9EBC9D92 | |||
| 7816 | Unicorn-37094.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-52056.exe | executable | |
MD5:EFA02CC3859EF1B2915E6765E0DED7F2 | SHA256:581DFBBFEFC8BE636EC07428821C51AF37F58318142FB637954C9F09B23ABD09 | |||
| 7424 | Unicorn-34656.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-28362.exe | executable | |
MD5:5B442AD13664588DBD19D4F93D53B20C | SHA256:39654DEFCA31AC6192F40B00F346C21E0301F264D94F30012F3D5FF27A24384B | |||
| 1676 | Unicorn-21748.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-35427.exe | executable | |
MD5:9EFD7152D6DBC4C4068C5AD120494BDB | SHA256:B65F735DA7D3BF9E93DC537C4988ED6E917221F20283D7F3A5D75318ADEFFAD1 | |||
| 7372 | 1 (309).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-34228.exe | executable | |
MD5:E1021AD673A30616C16085BE57C65299 | SHA256:0C5F8123BE226545AA921AB3034E793596FACD8A0268BDCE82E0C1B1BDA7FC11 | |||
| 4008 | Unicorn-42914.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-32713.exe | executable | |
MD5:08CBBA15DBBC375FA16FB75614D69691 | SHA256:68D8C129B6C9A15B3D344BE536E78983AFE5617880F2722588F7E2ADE67FDEB2 | |||
| 7816 | Unicorn-37094.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-14627.exe | executable | |
MD5:DB19BACE7CC4A13E7E430F309C05C5E9 | SHA256:02FDACD0D8D16775118CE4E11C5A5D8CCF20F5EDB0F1886E6BF58C2369849FCD | |||
| 7372 | 1 (309).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-33673.exe | executable | |
MD5:ADFC767A16B7187B38498A79B688A23C | SHA256:D121E7FA1CB0BABBED07CA3FCDEAEF23341B07CA77FC312C28E265224D4A8C33 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
25
DNS requests
15
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
5496 | MoUsoCoreWorker.exe | GET | 200 | 2.16.164.113:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
7464 | backgroundTaskHost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
8264 | SIHClient.exe | GET | 200 | 23.209.214.100:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
8264 | SIHClient.exe | GET | 200 | 23.209.214.100:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 4.231.128.59:443 | — | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
5496 | MoUsoCoreWorker.exe | 2.16.164.113:80 | crl.microsoft.com | Akamai International B.V. | NL | whitelisted |
2104 | svchost.exe | 4.231.128.59:443 | — | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
3216 | svchost.exe | 40.115.3.253:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.159.128:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 2.23.77.188:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
1244 | RUXIMICS.exe | 4.231.128.59:443 | — | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
2112 | svchost.exe | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |