| File name: | 1 (565) |
| Full analysis: | https://app.any.run/tasks/755ebd3f-f91d-43ad-bff1-c1a06c61d4b7 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 23:41:06 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 40A9FE5116540C81FAC9B99DBB21AD00 |
| SHA1: | 69E3326ACFA4672002A55C9CAED697330BC1ADF5 |
| SHA256: | E742715DF45EC0AF3D902D532A65FA7A3C88F829E2CEAEE748FCC3084608886F |
| SSDEEP: | 6144:r7w87g9PQDceA5HjpeGEH5ox5wPq5p8GBf/Wy1O+Tk/8SwjwpyAvEh0HuJy6s1fa:rsamFeA5DpdaP0+afOy1O+ux4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- 1 (565).exe (PID: 720)
- Unicorn-41967.exe (PID: 2152)
- Unicorn-47566.exe (PID: 6324)
- Unicorn-64555.exe (PID: 4560)
- Unicorn-58433.exe (PID: 5404)
- Unicorn-5978.exe (PID: 1056)
- Unicorn-43633.exe (PID: 960)
- Unicorn-43633.exe (PID: 1180)
- Unicorn-1401.exe (PID: 1532)
- Unicorn-51993.exe (PID: 6068)
- Unicorn-58433.exe (PID: 5416)
- Unicorn-32127.exe (PID: 2616)
- Unicorn-29170.exe (PID: 5548)
- Unicorn-52953.exe (PID: 5964)
- Unicorn-65205.exe (PID: 2040)
- Unicorn-53508.exe (PID: 7180)
- Unicorn-10529.exe (PID: 4464)
- Unicorn-46731.exe (PID: 7200)
- Unicorn-42647.exe (PID: 7216)
- Unicorn-55475.exe (PID: 7252)
- Unicorn-20665.exe (PID: 7280)
- Unicorn-63378.exe (PID: 7328)
- Unicorn-20665.exe (PID: 7288)
- Unicorn-21267.exe (PID: 4920)
- Unicorn-23304.exe (PID: 1188)
- Unicorn-45261.exe (PID: 7296)
- Unicorn-61266.exe (PID: 7996)
- Unicorn-60711.exe (PID: 7960)
- Unicorn-50820.exe (PID: 2432)
- Unicorn-56990.exe (PID: 5436)
- Unicorn-1204.exe (PID: 3008)
- Unicorn-7234.exe (PID: 8164)
- Unicorn-36015.exe (PID: 7480)
- Unicorn-28322.exe (PID: 4976)
- Unicorn-33968.exe (PID: 5400)
- Unicorn-9948.exe (PID: 2236)
- Unicorn-59704.exe (PID: 7416)
- Unicorn-64987.exe (PID: 7440)
- Unicorn-11702.exe (PID: 7688)
- Unicorn-7618.exe (PID: 7404)
- Unicorn-15787.exe (PID: 7660)
- Unicorn-11702.exe (PID: 7712)
- Unicorn-54873.exe (PID: 7740)
- Unicorn-35007.exe (PID: 7748)
- Unicorn-15787.exe (PID: 7668)
- Unicorn-54713.exe (PID: 7320)
- Unicorn-61458.exe (PID: 7644)
- Unicorn-11702.exe (PID: 7704)
- Unicorn-32050.exe (PID: 7772)
- Unicorn-20617.exe (PID: 7596)
- Unicorn-31552.exe (PID: 7820)
- Unicorn-15017.exe (PID: 3300)
- Unicorn-22100.exe (PID: 7628)
- Unicorn-36517.exe (PID: 7232)
- Unicorn-799.exe (PID: 7268)
- Unicorn-34352.exe (PID: 7872)
- Unicorn-799.exe (PID: 7264)
- Unicorn-12449.exe (PID: 7780)
- Unicorn-5241.exe (PID: 7956)
- Unicorn-59917.exe (PID: 7944)
- Unicorn-29191.exe (PID: 8044)
- Unicorn-20831.exe (PID: 7844)
- Unicorn-62247.exe (PID: 7840)
- Unicorn-45811.exe (PID: 7828)
- Unicorn-7016.exe (PID: 7176)
- Unicorn-57971.exe (PID: 5728)
- Unicorn-2932.exe (PID: 8148)
- Unicorn-49730.exe (PID: 4688)
- Unicorn-41827.exe (PID: 2552)
- Unicorn-337.exe (PID: 5528)
- Unicorn-26045.exe (PID: 7036)
- Unicorn-19077.exe (PID: 8144)
- Unicorn-27876.exe (PID: 8204)
- Unicorn-7919.exe (PID: 8092)
- Unicorn-17671.exe (PID: 644)
- Unicorn-9709.exe (PID: 8172)
- Unicorn-22693.exe (PID: 8240)
- Unicorn-60457.exe (PID: 8220)
- Unicorn-62787.exe (PID: 8260)
- Unicorn-62787.exe (PID: 8276)
- Unicorn-36891.exe (PID: 8312)
- Unicorn-45081.exe (PID: 8436)
- Unicorn-7618.exe (PID: 7492)
- Unicorn-42647.exe (PID: 7224)
- Unicorn-30691.exe (PID: 8452)
- Unicorn-36891.exe (PID: 8304)
- Unicorn-26607.exe (PID: 8468)
- Unicorn-42751.exe (PID: 8500)
- Unicorn-28361.exe (PID: 8544)
- Unicorn-16685.exe (PID: 8688)
- Unicorn-1718.exe (PID: 8584)
- Unicorn-1718.exe (PID: 8576)
- Unicorn-20747.exe (PID: 8552)
- Unicorn-40613.exe (PID: 8560)
- Unicorn-40218.exe (PID: 7812)
- Unicorn-11702.exe (PID: 7696)
- Unicorn-10078.exe (PID: 8620)
- Unicorn-28361.exe (PID: 8536)
- Unicorn-57141.exe (PID: 8636)
- Unicorn-51587.exe (PID: 8776)
- Unicorn-23461.exe (PID: 8712)
- Unicorn-24147.exe (PID: 7732)
- Unicorn-39243.exe (PID: 8824)
- Unicorn-5808.exe (PID: 8760)
- Unicorn-58272.exe (PID: 8696)
- Unicorn-41189.exe (PID: 8740)
- Unicorn-39335.exe (PID: 8768)
- Unicorn-31459.exe (PID: 9084)
- Unicorn-41089.exe (PID: 8852)
- Unicorn-39605.exe (PID: 8940)
- Unicorn-58272.exe (PID: 8704)
- Unicorn-30499.exe (PID: 8660)
- Unicorn-50104.exe (PID: 8860)
- Unicorn-61509.exe (PID: 8992)
- Unicorn-50104.exe (PID: 8844)
- Unicorn-61039.exe (PID: 9028)
- Unicorn-44503.exe (PID: 8920)
- Unicorn-42870.exe (PID: 8876)
- Unicorn-9133.exe (PID: 4452)
- Unicorn-13368.exe (PID: 2980)
- Unicorn-51038.exe (PID: 8928)
- Unicorn-42127.exe (PID: 9188)
- Unicorn-41189.exe (PID: 8800)
- Unicorn-39989.exe (PID: 9132)
- Unicorn-37105.exe (PID: 8748)
- Unicorn-10746.exe (PID: 9100)
- Unicorn-29440.exe (PID: 5304)
- Unicorn-31742.exe (PID: 8840)
- Unicorn-13368.exe (PID: 7020)
- Unicorn-61178.exe (PID: 9224)
- Unicorn-52071.exe (PID: 9300)
- Unicorn-15084.exe (PID: 8108)
- Unicorn-39819.exe (PID: 9344)
- Unicorn-19399.exe (PID: 9324)
- Unicorn-54764.exe (PID: 9428)
- Unicorn-26005.exe (PID: 9384)
- Unicorn-13752.exe (PID: 9368)
- Unicorn-21921.exe (PID: 9396)
- Unicorn-35543.exe (PID: 9092)
- Unicorn-5584.exe (PID: 9468)
- Unicorn-21729.exe (PID: 9496)
- Unicorn-52455.exe (PID: 9488)
- Unicorn-36119.exe (PID: 9620)
- Unicorn-57115.exe (PID: 9648)
- Unicorn-10272.exe (PID: 9608)
- Unicorn-37249.exe (PID: 9640)
- Unicorn-4577.exe (PID: 9716)
- Unicorn-18312.exe (PID: 9708)
- Unicorn-52931.exe (PID: 9796)
- Unicorn-56161.exe (PID: 9760)
- Unicorn-15817.exe (PID: 9784)
- Unicorn-44406.exe (PID: 9744)
- Unicorn-15320.exe (PID: 9812)
- Unicorn-14520.exe (PID: 9884)
- Unicorn-4385.exe (PID: 9820)
- Unicorn-301.exe (PID: 9840)
- Unicorn-28335.exe (PID: 9860)
- Unicorn-47120.exe (PID: 9928)
- Unicorn-27519.exe (PID: 9936)
- Unicorn-20450.exe (PID: 10016)
- Unicorn-25189.exe (PID: 9960)
- Unicorn-65475.exe (PID: 10032)
- Unicorn-60576.exe (PID: 10072)
- Unicorn-33741.exe (PID: 10124)
- Unicorn-33741.exe (PID: 10128)
- Unicorn-39736.exe (PID: 8644)
- Unicorn-29103.exe (PID: 10180)
- Unicorn-19464.exe (PID: 10212)
- Unicorn-38231.exe (PID: 968)
- Unicorn-18195.exe (PID: 9780)
- Unicorn-26917.exe (PID: 9296)
- Unicorn-24587.exe (PID: 8416)
- Unicorn-16441.exe (PID: 8524)
- Unicorn-47167.exe (PID: 9340)
- Unicorn-10118.exe (PID: 10268)
- Unicorn-63503.exe (PID: 4844)
- Unicorn-8635.exe (PID: 10276)
- Unicorn-37245.exe (PID: 10352)
- Unicorn-47067.exe (PID: 10320)
- Unicorn-21323.exe (PID: 8816)
- Unicorn-60187.exe (PID: 10472)
- Unicorn-31407.exe (PID: 10608)
- Unicorn-35491.exe (PID: 10600)
- Unicorn-31961.exe (PID: 10560)
- Unicorn-21641.exe (PID: 10672)
- Unicorn-25725.exe (PID: 10664)
- Unicorn-23239.exe (PID: 10592)
- Unicorn-40115.exe (PID: 10636)
- Unicorn-53114.exe (PID: 10752)
- Unicorn-24801.exe (PID: 10412)
- Unicorn-9019.exe (PID: 10396)
- Unicorn-9595.exe (PID: 10464)
- Unicorn-58952.exe (PID: 10912)
- Unicorn-13280.exe (PID: 10920)
- Unicorn-7150.exe (PID: 10892)
- Unicorn-7150.exe (PID: 10888)
- Unicorn-26279.exe (PID: 10996)
- Unicorn-32931.exe (PID: 11020)
- Unicorn-46145.exe (PID: 11008)
- Unicorn-26279.exe (PID: 10992)
- Unicorn-42061.exe (PID: 10972)
- Unicorn-57198.exe (PID: 10760)
- Unicorn-49030.exe (PID: 10744)
- Unicorn-49030.exe (PID: 10736)
- Unicorn-53114.exe (PID: 10720)
- Unicorn-1312.exe (PID: 10712)
- Unicorn-3913.exe (PID: 10792)
- Unicorn-3913.exe (PID: 10804)
- Unicorn-53114.exe (PID: 10728)
- Unicorn-3913.exe (PID: 10772)
- Unicorn-7150.exe (PID: 10904)
- Unicorn-55444.exe (PID: 11096)
- Unicorn-7826.exe (PID: 11308)
- Unicorn-16549.exe (PID: 11112)
- Unicorn-13624.exe (PID: 11208)
- Unicorn-21262.exe (PID: 11276)
- Unicorn-7726.exe (PID: 11152)
- Unicorn-54048.exe (PID: 11056)
- Unicorn-47905.exe (PID: 2968)
- Unicorn-38453.exe (PID: 11176)
- Unicorn-13856.exe (PID: 11160)
- Unicorn-44583.exe (PID: 11184)
- Unicorn-50540.exe (PID: 11324)
- Unicorn-24062.exe (PID: 11284)
- Unicorn-24163.exe (PID: 11348)
- Unicorn-44318.exe (PID: 11168)
- Unicorn-44583.exe (PID: 11192)
- Unicorn-30284.exe (PID: 11120)
- Unicorn-45567.exe (PID: 11376)
- Unicorn-17749.exe (PID: 11404)
- Unicorn-6164.exe (PID: 11664)
- Unicorn-58781.exe (PID: 11488)
- Unicorn-21017.exe (PID: 11536)
- Unicorn-1412.exe (PID: 11512)
- Unicorn-37353.exe (PID: 11556)
- Unicorn-22409.exe (PID: 11576)
- Unicorn-53135.exe (PID: 11588)
- Unicorn-22143.exe (PID: 11564)
- Unicorn-22500.exe (PID: 11704)
- Unicorn-4126.exe (PID: 11644)
- Unicorn-9580.exe (PID: 11368)
- Unicorn-17749.exe (PID: 11408)
- Unicorn-44391.exe (PID: 11436)
- Unicorn-11718.exe (PID: 11476)
- Unicorn-14048.exe (PID: 11744)
- Unicorn-24547.exe (PID: 11680)
- Unicorn-18133.exe (PID: 11724)
- Unicorn-54048.exe (PID: 11064)
- Unicorn-43021.exe (PID: 11628)
Starts itself from another location
- 1 (565).exe (PID: 720)
- Unicorn-5978.exe (PID: 1056)
- Unicorn-58433.exe (PID: 5416)
- Unicorn-58433.exe (PID: 5404)
- Unicorn-47566.exe (PID: 6324)
- Unicorn-64555.exe (PID: 4560)
- Unicorn-50820.exe (PID: 2432)
- Unicorn-43633.exe (PID: 1180)
- Unicorn-43633.exe (PID: 960)
- Unicorn-1401.exe (PID: 1532)
- Unicorn-21267.exe (PID: 4920)
- Unicorn-51993.exe (PID: 6068)
- Unicorn-23304.exe (PID: 1188)
- Unicorn-29170.exe (PID: 5548)
- Unicorn-32127.exe (PID: 2616)
- Unicorn-41967.exe (PID: 2152)
- Unicorn-52953.exe (PID: 5964)
- Unicorn-10529.exe (PID: 4464)
- Unicorn-53508.exe (PID: 7180)
- Unicorn-46731.exe (PID: 7200)
- Unicorn-42647.exe (PID: 7216)
- Unicorn-20665.exe (PID: 7280)
- Unicorn-799.exe (PID: 7268)
- Unicorn-54713.exe (PID: 7320)
- Unicorn-20665.exe (PID: 7288)
- Unicorn-799.exe (PID: 7264)
- Unicorn-63378.exe (PID: 7328)
- Unicorn-36517.exe (PID: 7232)
- Unicorn-45261.exe (PID: 7296)
- Unicorn-60711.exe (PID: 7960)
- Unicorn-61266.exe (PID: 7996)
- Unicorn-7234.exe (PID: 8164)
- Unicorn-65205.exe (PID: 2040)
- Unicorn-56990.exe (PID: 5436)
- Unicorn-1204.exe (PID: 3008)
- Unicorn-28322.exe (PID: 4976)
- Unicorn-33968.exe (PID: 5400)
- Unicorn-9948.exe (PID: 2236)
- Unicorn-59704.exe (PID: 7416)
- Unicorn-64987.exe (PID: 7440)
- Unicorn-42647.exe (PID: 7224)
- Unicorn-11702.exe (PID: 7688)
- Unicorn-7618.exe (PID: 7404)
- Unicorn-7618.exe (PID: 7492)
- Unicorn-15787.exe (PID: 7668)
- Unicorn-15787.exe (PID: 7660)
- Unicorn-11702.exe (PID: 7712)
- Unicorn-11702.exe (PID: 7696)
- Unicorn-35007.exe (PID: 7748)
- Unicorn-11702.exe (PID: 7704)
- Unicorn-40218.exe (PID: 7812)
- Unicorn-15017.exe (PID: 3300)
- Unicorn-32050.exe (PID: 7772)
- Unicorn-31552.exe (PID: 7820)
- Unicorn-20617.exe (PID: 7596)
- Unicorn-22100.exe (PID: 7628)
- Unicorn-12449.exe (PID: 7780)
- Unicorn-5241.exe (PID: 7956)
- Unicorn-59917.exe (PID: 7944)
- Unicorn-9133.exe (PID: 4452)
- Unicorn-62247.exe (PID: 7840)
- Unicorn-7016.exe (PID: 7176)
- Unicorn-57971.exe (PID: 5728)
- Unicorn-2932.exe (PID: 8148)
- Unicorn-45811.exe (PID: 7828)
- Unicorn-26045.exe (PID: 7036)
- Unicorn-15084.exe (PID: 8108)
- Unicorn-49730.exe (PID: 4688)
- Unicorn-41827.exe (PID: 2552)
- Unicorn-27876.exe (PID: 8204)
- Unicorn-36015.exe (PID: 7480)
- Unicorn-19077.exe (PID: 8144)
- Unicorn-17671.exe (PID: 644)
- Unicorn-7919.exe (PID: 8092)
- Unicorn-337.exe (PID: 5528)
- Unicorn-9709.exe (PID: 8172)
- Unicorn-60457.exe (PID: 8220)
- Unicorn-62787.exe (PID: 8260)
- Unicorn-22693.exe (PID: 8240)
- Unicorn-62787.exe (PID: 8276)
- Unicorn-45081.exe (PID: 8436)
- Unicorn-36891.exe (PID: 8312)
- Unicorn-55475.exe (PID: 7252)
- Unicorn-36891.exe (PID: 8304)
- Unicorn-26607.exe (PID: 8468)
- Unicorn-30691.exe (PID: 8452)
- Unicorn-42751.exe (PID: 8500)
- Unicorn-28361.exe (PID: 8544)
- Unicorn-1718.exe (PID: 8584)
- Unicorn-16685.exe (PID: 8688)
- Unicorn-1718.exe (PID: 8576)
- Unicorn-20747.exe (PID: 8552)
- Unicorn-40613.exe (PID: 8560)
- Unicorn-61458.exe (PID: 7644)
- Unicorn-10078.exe (PID: 8620)
- Unicorn-34352.exe (PID: 7872)
- Unicorn-57141.exe (PID: 8636)
- Unicorn-24147.exe (PID: 7732)
- Unicorn-23461.exe (PID: 8712)
- Unicorn-39736.exe (PID: 8644)
- Unicorn-39243.exe (PID: 8824)
- Unicorn-5808.exe (PID: 8760)
- Unicorn-31459.exe (PID: 9084)
- Unicorn-21323.exe (PID: 8816)
- Unicorn-41189.exe (PID: 8740)
- Unicorn-39335.exe (PID: 8768)
- Unicorn-41089.exe (PID: 8852)
- Unicorn-39605.exe (PID: 8940)
- Unicorn-30499.exe (PID: 8660)
- Unicorn-50104.exe (PID: 8844)
- Unicorn-50104.exe (PID: 8860)
- Unicorn-61509.exe (PID: 8992)
- Unicorn-58272.exe (PID: 8704)
- Unicorn-61039.exe (PID: 9028)
- Unicorn-44503.exe (PID: 8920)
- Unicorn-20831.exe (PID: 7844)
- Unicorn-13368.exe (PID: 2980)
- Unicorn-42127.exe (PID: 9188)
- Unicorn-42870.exe (PID: 8876)
- Unicorn-10746.exe (PID: 9100)
- Unicorn-39989.exe (PID: 9132)
- Unicorn-37105.exe (PID: 8748)
- Unicorn-51038.exe (PID: 8928)
- Unicorn-29440.exe (PID: 5304)
- Unicorn-31742.exe (PID: 8840)
- Unicorn-13368.exe (PID: 7020)
- Unicorn-61178.exe (PID: 9224)
- Unicorn-52071.exe (PID: 9300)
- Unicorn-39819.exe (PID: 9344)
- Unicorn-58272.exe (PID: 8696)
- Unicorn-54764.exe (PID: 9428)
- Unicorn-26005.exe (PID: 9384)
- Unicorn-13752.exe (PID: 9368)
- Unicorn-19399.exe (PID: 9324)
- Unicorn-21921.exe (PID: 9396)
- Unicorn-5584.exe (PID: 9468)
- Unicorn-35543.exe (PID: 9092)
- Unicorn-21729.exe (PID: 9496)
- Unicorn-52455.exe (PID: 9488)
- Unicorn-36119.exe (PID: 9620)
- Unicorn-10272.exe (PID: 9608)
- Unicorn-37249.exe (PID: 9640)
- Unicorn-4577.exe (PID: 9716)
- Unicorn-18312.exe (PID: 9708)
- Unicorn-57115.exe (PID: 9648)
- Unicorn-44406.exe (PID: 9744)
- Unicorn-52931.exe (PID: 9796)
- Unicorn-56161.exe (PID: 9760)
- Unicorn-15817.exe (PID: 9784)
- Unicorn-301.exe (PID: 9840)
- Unicorn-28335.exe (PID: 9860)
- Unicorn-14520.exe (PID: 9884)
- Unicorn-47120.exe (PID: 9928)
- Unicorn-27519.exe (PID: 9936)
- Unicorn-4385.exe (PID: 9820)
- Unicorn-25189.exe (PID: 9960)
- Unicorn-65475.exe (PID: 10032)
- Unicorn-20450.exe (PID: 10016)
- Unicorn-33741.exe (PID: 10124)
- Unicorn-33741.exe (PID: 10128)
- Unicorn-60576.exe (PID: 10072)
- Unicorn-28361.exe (PID: 8536)
- Unicorn-51587.exe (PID: 8776)
- Unicorn-29103.exe (PID: 10180)
- Unicorn-19464.exe (PID: 10212)
- Unicorn-41189.exe (PID: 8800)
- Unicorn-38231.exe (PID: 968)
- Unicorn-26917.exe (PID: 9296)
- Unicorn-18195.exe (PID: 9780)
- Unicorn-15320.exe (PID: 9812)
- Unicorn-24587.exe (PID: 8416)
- Unicorn-16441.exe (PID: 8524)
- Unicorn-47167.exe (PID: 9340)
- Unicorn-10118.exe (PID: 10268)
- Unicorn-63503.exe (PID: 4844)
- Unicorn-8635.exe (PID: 10276)
- Unicorn-54873.exe (PID: 7740)
- Unicorn-37245.exe (PID: 10352)
- Unicorn-47067.exe (PID: 10320)
Executes application which crashes
- Unicorn-35313.exe (PID: 8060)
INFO
Reads the computer name
- 1 (565).exe (PID: 720)
- Unicorn-41967.exe (PID: 2152)
- Unicorn-5978.exe (PID: 1056)
- Unicorn-47566.exe (PID: 6324)
- Unicorn-58433.exe (PID: 5404)
- Unicorn-64555.exe (PID: 4560)
- Unicorn-58433.exe (PID: 5416)
- Unicorn-50820.exe (PID: 2432)
- Unicorn-43633.exe (PID: 1180)
- Unicorn-43633.exe (PID: 960)
- Unicorn-1401.exe (PID: 1532)
- Unicorn-32127.exe (PID: 2616)
- Unicorn-51993.exe (PID: 6068)
- Unicorn-21267.exe (PID: 4920)
- Unicorn-23304.exe (PID: 1188)
- Unicorn-29170.exe (PID: 5548)
- Unicorn-52953.exe (PID: 5964)
- Unicorn-65205.exe (PID: 2040)
- Unicorn-53508.exe (PID: 7180)
- Unicorn-10529.exe (PID: 4464)
- Unicorn-46731.exe (PID: 7200)
- Unicorn-42647.exe (PID: 7216)
- Unicorn-55475.exe (PID: 7252)
- Unicorn-42647.exe (PID: 7224)
- Unicorn-36517.exe (PID: 7232)
- Unicorn-20665.exe (PID: 7280)
- Unicorn-799.exe (PID: 7268)
- Unicorn-54713.exe (PID: 7320)
- Unicorn-20665.exe (PID: 7288)
- Unicorn-799.exe (PID: 7264)
- Unicorn-63378.exe (PID: 7328)
- Unicorn-45261.exe (PID: 7296)
- Unicorn-60711.exe (PID: 7960)
- Unicorn-61266.exe (PID: 7996)
- Unicorn-7234.exe (PID: 8164)
- Unicorn-56990.exe (PID: 5436)
- Unicorn-1204.exe (PID: 3008)
- Unicorn-33968.exe (PID: 5400)
- Unicorn-36015.exe (PID: 7480)
- Unicorn-28322.exe (PID: 4976)
- Unicorn-9948.exe (PID: 2236)
- Unicorn-64987.exe (PID: 7440)
- Unicorn-59704.exe (PID: 7416)
- Unicorn-7618.exe (PID: 7492)
- Unicorn-11702.exe (PID: 7688)
- Unicorn-7618.exe (PID: 7404)
- Unicorn-15787.exe (PID: 7660)
- Unicorn-11702.exe (PID: 7712)
- Unicorn-15787.exe (PID: 7668)
- Unicorn-35007.exe (PID: 7748)
- Unicorn-54873.exe (PID: 7740)
- Unicorn-40218.exe (PID: 7812)
- Unicorn-61458.exe (PID: 7644)
- Unicorn-15017.exe (PID: 3300)
- Unicorn-11702.exe (PID: 7704)
- Unicorn-31552.exe (PID: 7820)
- Unicorn-32050.exe (PID: 7772)
- Unicorn-20617.exe (PID: 7596)
- Unicorn-22100.exe (PID: 7628)
- Unicorn-11702.exe (PID: 7696)
- Unicorn-34352.exe (PID: 7872)
- Unicorn-24147.exe (PID: 7732)
- Unicorn-12449.exe (PID: 7780)
- Unicorn-5241.exe (PID: 7956)
- Unicorn-59917.exe (PID: 7944)
- Unicorn-29191.exe (PID: 8044)
- Unicorn-35313.exe (PID: 8060)
- Unicorn-9133.exe (PID: 4452)
- Unicorn-20831.exe (PID: 7844)
- Unicorn-62247.exe (PID: 7840)
- Unicorn-45811.exe (PID: 7828)
- Unicorn-57971.exe (PID: 5728)
- Unicorn-2932.exe (PID: 8148)
- Unicorn-49730.exe (PID: 4688)
- Unicorn-7016.exe (PID: 7176)
- Unicorn-41827.exe (PID: 2552)
- Unicorn-15084.exe (PID: 8108)
- Unicorn-337.exe (PID: 5528)
- Unicorn-27876.exe (PID: 8204)
- Unicorn-9709.exe (PID: 8172)
- Unicorn-26045.exe (PID: 7036)
- Unicorn-19077.exe (PID: 8144)
- Unicorn-17671.exe (PID: 644)
- Unicorn-7919.exe (PID: 8092)
- Unicorn-60457.exe (PID: 8220)
- Unicorn-22693.exe (PID: 8240)
- Unicorn-62787.exe (PID: 8276)
- Unicorn-62787.exe (PID: 8260)
- Unicorn-30691.exe (PID: 8452)
- Unicorn-26607.exe (PID: 8468)
- Unicorn-42751.exe (PID: 8500)
- Unicorn-36891.exe (PID: 8312)
- Unicorn-45081.exe (PID: 8436)
- Unicorn-36891.exe (PID: 8304)
- Unicorn-28361.exe (PID: 8544)
- Unicorn-16685.exe (PID: 8688)
- Unicorn-1718.exe (PID: 8576)
- Unicorn-1718.exe (PID: 8584)
- Unicorn-40613.exe (PID: 8560)
- Unicorn-20747.exe (PID: 8552)
- Unicorn-57141.exe (PID: 8636)
- Unicorn-10078.exe (PID: 8620)
- Unicorn-28361.exe (PID: 8536)
- Unicorn-23461.exe (PID: 8712)
- Unicorn-39736.exe (PID: 8644)
- Unicorn-51587.exe (PID: 8776)
- Unicorn-5808.exe (PID: 8760)
- Unicorn-31459.exe (PID: 9084)
- Unicorn-21323.exe (PID: 8816)
- Unicorn-58272.exe (PID: 8696)
- Unicorn-39335.exe (PID: 8768)
- Unicorn-41189.exe (PID: 8740)
- Unicorn-39243.exe (PID: 8824)
- Unicorn-61509.exe (PID: 8992)
- Unicorn-30499.exe (PID: 8660)
- Unicorn-41089.exe (PID: 8852)
- Unicorn-39605.exe (PID: 8940)
- Unicorn-44503.exe (PID: 8920)
- Unicorn-58272.exe (PID: 8704)
- Unicorn-50104.exe (PID: 8844)
- Unicorn-61039.exe (PID: 9028)
- Unicorn-50104.exe (PID: 8860)
- Unicorn-41189.exe (PID: 8800)
- Unicorn-42870.exe (PID: 8876)
- Unicorn-42127.exe (PID: 9188)
- Unicorn-51038.exe (PID: 8928)
- Unicorn-37105.exe (PID: 8748)
- Unicorn-10746.exe (PID: 9100)
- Unicorn-35543.exe (PID: 9092)
- Unicorn-13368.exe (PID: 2980)
- Unicorn-39989.exe (PID: 9132)
- Unicorn-31742.exe (PID: 8840)
- Unicorn-29440.exe (PID: 5304)
- Unicorn-13368.exe (PID: 7020)
- Unicorn-61178.exe (PID: 9224)
- Unicorn-52071.exe (PID: 9300)
- Unicorn-54764.exe (PID: 9428)
- Unicorn-39819.exe (PID: 9344)
- Unicorn-26005.exe (PID: 9384)
- Unicorn-13752.exe (PID: 9368)
- Unicorn-19399.exe (PID: 9324)
- Unicorn-21921.exe (PID: 9396)
- Unicorn-5584.exe (PID: 9468)
- Unicorn-52455.exe (PID: 9488)
- Unicorn-21729.exe (PID: 9496)
- Unicorn-57115.exe (PID: 9648)
- Unicorn-36119.exe (PID: 9620)
- Unicorn-10272.exe (PID: 9608)
- Unicorn-4577.exe (PID: 9716)
- Unicorn-37249.exe (PID: 9640)
- Unicorn-44406.exe (PID: 9744)
- Unicorn-18312.exe (PID: 9708)
- Unicorn-52931.exe (PID: 9796)
- Unicorn-56161.exe (PID: 9760)
- Unicorn-15817.exe (PID: 9784)
- Unicorn-15320.exe (PID: 9812)
- Unicorn-28335.exe (PID: 9860)
- Unicorn-4385.exe (PID: 9820)
- Unicorn-14520.exe (PID: 9884)
- Unicorn-301.exe (PID: 9840)
- Unicorn-20450.exe (PID: 10016)
- Unicorn-25189.exe (PID: 9960)
- Unicorn-47120.exe (PID: 9928)
- Unicorn-27519.exe (PID: 9936)
- Unicorn-65475.exe (PID: 10032)
- Unicorn-60576.exe (PID: 10072)
- Unicorn-33741.exe (PID: 10124)
- Unicorn-33741.exe (PID: 10128)
- Unicorn-29103.exe (PID: 10180)
- Unicorn-19464.exe (PID: 10212)
- Unicorn-38231.exe (PID: 968)
- Unicorn-26917.exe (PID: 9296)
- Unicorn-18195.exe (PID: 9780)
- Unicorn-24587.exe (PID: 8416)
- Unicorn-16441.exe (PID: 8524)
- Unicorn-63503.exe (PID: 4844)
- Unicorn-47167.exe (PID: 9340)
- Unicorn-8635.exe (PID: 10276)
- Unicorn-10118.exe (PID: 10268)
- Unicorn-47067.exe (PID: 10320)
- Unicorn-37245.exe (PID: 10352)
- Unicorn-9019.exe (PID: 10396)
- Unicorn-24801.exe (PID: 10412)
The sample compiled with chinese language support
- 1 (565).exe (PID: 720)
Checks supported languages
- 1 (565).exe (PID: 720)
- Unicorn-41967.exe (PID: 2152)
- Unicorn-5978.exe (PID: 1056)
- Unicorn-47566.exe (PID: 6324)
- Unicorn-58433.exe (PID: 5404)
- Unicorn-58433.exe (PID: 5416)
- Unicorn-43633.exe (PID: 1180)
- Unicorn-43633.exe (PID: 960)
- Unicorn-64555.exe (PID: 4560)
- Unicorn-50820.exe (PID: 2432)
- Unicorn-21267.exe (PID: 4920)
- Unicorn-29170.exe (PID: 5548)
- Unicorn-51993.exe (PID: 6068)
- Unicorn-32127.exe (PID: 2616)
- Unicorn-23304.exe (PID: 1188)
- Unicorn-1401.exe (PID: 1532)
- Unicorn-65205.exe (PID: 2040)
- Unicorn-52953.exe (PID: 5964)
- Unicorn-10529.exe (PID: 4464)
- Unicorn-53508.exe (PID: 7180)
- Unicorn-46731.exe (PID: 7200)
- Unicorn-36517.exe (PID: 7232)
- Unicorn-42647.exe (PID: 7216)
- Unicorn-42647.exe (PID: 7224)
- Unicorn-55475.exe (PID: 7252)
- Unicorn-799.exe (PID: 7268)
- Unicorn-799.exe (PID: 7264)
- Unicorn-45261.exe (PID: 7296)
- Unicorn-63378.exe (PID: 7328)
- Unicorn-20665.exe (PID: 7288)
- Unicorn-20665.exe (PID: 7280)
- Unicorn-54713.exe (PID: 7320)
- Unicorn-60711.exe (PID: 7960)
- Unicorn-61266.exe (PID: 7996)
- Unicorn-1204.exe (PID: 3008)
- Unicorn-33968.exe (PID: 5400)
- Unicorn-36015.exe (PID: 7480)
- Unicorn-56990.exe (PID: 5436)
- Unicorn-7234.exe (PID: 8164)
- Unicorn-9948.exe (PID: 2236)
- Unicorn-59704.exe (PID: 7416)
- Unicorn-64987.exe (PID: 7440)
- Unicorn-28322.exe (PID: 4976)
- Unicorn-61458.exe (PID: 7644)
- Unicorn-15787.exe (PID: 7660)
- Unicorn-7618.exe (PID: 7404)
- Unicorn-7618.exe (PID: 7492)
- Unicorn-11702.exe (PID: 7688)
- Unicorn-11702.exe (PID: 7696)
- Unicorn-11702.exe (PID: 7712)
- Unicorn-54873.exe (PID: 7740)
- Unicorn-24147.exe (PID: 7732)
- Unicorn-35007.exe (PID: 7748)
- Unicorn-11702.exe (PID: 7704)
- Unicorn-32050.exe (PID: 7772)
- Unicorn-22100.exe (PID: 7628)
- Unicorn-15787.exe (PID: 7668)
- Unicorn-12449.exe (PID: 7780)
- Unicorn-40218.exe (PID: 7812)
- Unicorn-31552.exe (PID: 7820)
- Unicorn-15017.exe (PID: 3300)
- Unicorn-59917.exe (PID: 7944)
- Unicorn-5241.exe (PID: 7956)
- Unicorn-29191.exe (PID: 8044)
- Unicorn-35313.exe (PID: 8060)
- Unicorn-20617.exe (PID: 7596)
- Unicorn-9133.exe (PID: 4452)
- Unicorn-20831.exe (PID: 7844)
- Unicorn-62247.exe (PID: 7840)
- Unicorn-45811.exe (PID: 7828)
- Unicorn-2932.exe (PID: 8148)
- Unicorn-9709.exe (PID: 8172)
- Unicorn-49730.exe (PID: 4688)
- Unicorn-41827.exe (PID: 2552)
- Unicorn-26045.exe (PID: 7036)
- Unicorn-7016.exe (PID: 7176)
- Unicorn-337.exe (PID: 5528)
- Unicorn-57971.exe (PID: 5728)
- Unicorn-15084.exe (PID: 8108)
- Unicorn-19077.exe (PID: 8144)
- Unicorn-7919.exe (PID: 8092)
- Unicorn-17671.exe (PID: 644)
- Unicorn-60457.exe (PID: 8220)
- Unicorn-22693.exe (PID: 8240)
- Unicorn-27876.exe (PID: 8204)
- Unicorn-62787.exe (PID: 8276)
- Unicorn-36891.exe (PID: 8304)
- Unicorn-62787.exe (PID: 8260)
- Unicorn-36891.exe (PID: 8312)
- Unicorn-26607.exe (PID: 8468)
- Unicorn-30691.exe (PID: 8452)
- Unicorn-42751.exe (PID: 8500)
- Unicorn-34352.exe (PID: 7872)
- Unicorn-45081.exe (PID: 8436)
- Unicorn-28361.exe (PID: 8544)
- Unicorn-20747.exe (PID: 8552)
- Unicorn-40613.exe (PID: 8560)
- Unicorn-1718.exe (PID: 8584)
- Unicorn-28361.exe (PID: 8536)
- Unicorn-10078.exe (PID: 8620)
- Unicorn-39736.exe (PID: 8644)
- Unicorn-1718.exe (PID: 8576)
- Unicorn-57141.exe (PID: 8636)
- Unicorn-58272.exe (PID: 8696)
- Unicorn-16685.exe (PID: 8688)
- Unicorn-23461.exe (PID: 8712)
- Unicorn-41189.exe (PID: 8800)
- Unicorn-39335.exe (PID: 8768)
- Unicorn-30499.exe (PID: 8660)
- Unicorn-5808.exe (PID: 8760)
- Unicorn-42870.exe (PID: 8876)
- Unicorn-51587.exe (PID: 8776)
- Unicorn-21323.exe (PID: 8816)
- Unicorn-41089.exe (PID: 8852)
- Unicorn-37105.exe (PID: 8748)
- Unicorn-58272.exe (PID: 8704)
- Unicorn-41189.exe (PID: 8740)
- Unicorn-51038.exe (PID: 8928)
- Unicorn-50104.exe (PID: 8860)
- Unicorn-50104.exe (PID: 8844)
- Unicorn-61509.exe (PID: 8992)
- Unicorn-44503.exe (PID: 8920)
- Unicorn-39605.exe (PID: 8940)
- Unicorn-61039.exe (PID: 9028)
- Unicorn-35543.exe (PID: 9092)
- Unicorn-39243.exe (PID: 8824)
- Unicorn-39989.exe (PID: 9132)
- Unicorn-42127.exe (PID: 9188)
- Unicorn-31742.exe (PID: 8840)
- Unicorn-13368.exe (PID: 7020)
- Unicorn-13368.exe (PID: 2980)
- Unicorn-29440.exe (PID: 5304)
- Unicorn-61178.exe (PID: 9224)
- Unicorn-31459.exe (PID: 9084)
- Unicorn-10746.exe (PID: 9100)
- Unicorn-52071.exe (PID: 9300)
- Unicorn-39819.exe (PID: 9344)
- Unicorn-19399.exe (PID: 9324)
- Unicorn-21921.exe (PID: 9396)
- Unicorn-13752.exe (PID: 9368)
- Unicorn-54764.exe (PID: 9428)
- Unicorn-5584.exe (PID: 9468)
- Unicorn-52455.exe (PID: 9488)
- Unicorn-21729.exe (PID: 9496)
- Unicorn-26005.exe (PID: 9384)
- Unicorn-36119.exe (PID: 9620)
- Unicorn-57115.exe (PID: 9648)
- Unicorn-37249.exe (PID: 9640)
- Unicorn-4577.exe (PID: 9716)
- Unicorn-18312.exe (PID: 9708)
- Unicorn-56161.exe (PID: 9760)
- Unicorn-15817.exe (PID: 9784)
- Unicorn-10272.exe (PID: 9608)
- Unicorn-44406.exe (PID: 9744)
- Unicorn-301.exe (PID: 9840)
- Unicorn-15320.exe (PID: 9812)
- Unicorn-28335.exe (PID: 9860)
- Unicorn-27519.exe (PID: 9936)
- Unicorn-25189.exe (PID: 9960)
- Unicorn-20450.exe (PID: 10016)
- Unicorn-4385.exe (PID: 9820)
- Unicorn-52931.exe (PID: 9796)
- Unicorn-14520.exe (PID: 9884)
- Unicorn-60576.exe (PID: 10072)
- Unicorn-65475.exe (PID: 10032)
- Unicorn-33741.exe (PID: 10124)
- Unicorn-33741.exe (PID: 10128)
- Unicorn-47120.exe (PID: 9928)
- Unicorn-19464.exe (PID: 10212)
- Unicorn-38231.exe (PID: 968)
- Unicorn-26917.exe (PID: 9296)
- Unicorn-29103.exe (PID: 10180)
- Unicorn-24587.exe (PID: 8416)
- Unicorn-16441.exe (PID: 8524)
- Unicorn-47167.exe (PID: 9340)
- Unicorn-18195.exe (PID: 9780)
- Unicorn-10118.exe (PID: 10268)
- Unicorn-8635.exe (PID: 10276)
- Unicorn-47067.exe (PID: 10320)
- Unicorn-63503.exe (PID: 4844)
- Unicorn-9019.exe (PID: 10396)
- Unicorn-24801.exe (PID: 10412)
- Unicorn-37245.exe (PID: 10352)
- Unicorn-31961.exe (PID: 10560)
- Unicorn-9595.exe (PID: 10464)
- Unicorn-60187.exe (PID: 10472)
- Unicorn-35491.exe (PID: 10600)
- Unicorn-31407.exe (PID: 10608)
- Unicorn-40115.exe (PID: 10636)
- Unicorn-23239.exe (PID: 10592)
- Unicorn-25725.exe (PID: 10664)
- Unicorn-21641.exe (PID: 10672)
- Unicorn-3913.exe (PID: 10804)
- Unicorn-1312.exe (PID: 10712)
- Unicorn-53114.exe (PID: 10720)
- Unicorn-49030.exe (PID: 10744)
- Unicorn-53114.exe (PID: 10752)
- Unicorn-53114.exe (PID: 10728)
- Unicorn-57198.exe (PID: 10760)
- Unicorn-3913.exe (PID: 10792)
- Unicorn-3913.exe (PID: 10772)
- Unicorn-7150.exe (PID: 10904)
- Unicorn-49030.exe (PID: 10736)
- Unicorn-7150.exe (PID: 10888)
- Unicorn-42061.exe (PID: 10972)
- Unicorn-26279.exe (PID: 10996)
- Unicorn-26279.exe (PID: 10992)
- Unicorn-54048.exe (PID: 11064)
- Unicorn-46145.exe (PID: 11008)
- Unicorn-32931.exe (PID: 11020)
- Unicorn-54048.exe (PID: 11056)
- Unicorn-7150.exe (PID: 10892)
- Unicorn-13280.exe (PID: 10920)
- Unicorn-58952.exe (PID: 10912)
- Unicorn-55444.exe (PID: 11096)
- Unicorn-30284.exe (PID: 11120)
- Unicorn-16549.exe (PID: 11112)
- Unicorn-7726.exe (PID: 11152)
- Unicorn-13856.exe (PID: 11160)
- Unicorn-44583.exe (PID: 11192)
- Unicorn-38453.exe (PID: 11176)
- Unicorn-44318.exe (PID: 11168)
- Unicorn-21262.exe (PID: 11276)
- Unicorn-24062.exe (PID: 11284)
- Unicorn-7826.exe (PID: 11308)
- Unicorn-24163.exe (PID: 11348)
- Unicorn-44583.exe (PID: 11184)
- Unicorn-13624.exe (PID: 11208)
- Unicorn-47905.exe (PID: 2968)
- Unicorn-50540.exe (PID: 11324)
- Unicorn-45567.exe (PID: 11376)
- Unicorn-17749.exe (PID: 11408)
- Unicorn-17749.exe (PID: 11404)
- Unicorn-44391.exe (PID: 11436)
- Unicorn-9580.exe (PID: 11368)
- Unicorn-11718.exe (PID: 11476)
- Unicorn-58781.exe (PID: 11488)
- Unicorn-21017.exe (PID: 11536)
- Unicorn-1412.exe (PID: 11512)
- Unicorn-53135.exe (PID: 11588)
- Unicorn-22409.exe (PID: 11576)
- Unicorn-37353.exe (PID: 11556)
- Unicorn-22143.exe (PID: 11564)
- Unicorn-43021.exe (PID: 11628)
- Unicorn-24547.exe (PID: 11680)
- Unicorn-6164.exe (PID: 11664)
- Unicorn-18133.exe (PID: 11724)
- Unicorn-4126.exe (PID: 11644)
- Unicorn-22500.exe (PID: 11704)
- Unicorn-2351.exe (PID: 11788)
- Unicorn-2351.exe (PID: 11780)
- Unicorn-44775.exe (PID: 11752)
- Unicorn-14048.exe (PID: 11744)
- Unicorn-52943.exe (PID: 11796)
- Unicorn-42829.exe (PID: 11844)
- Unicorn-61111.exe (PID: 11828)
- Unicorn-50997.exe (PID: 11888)
- Unicorn-40783.exe (PID: 11908)
- Unicorn-59165.exe (PID: 11924)
- Unicorn-52181.exe (PID: 11820)
- Unicorn-7753.exe (PID: 11852)
- Unicorn-12102.exe (PID: 11940)
- Unicorn-15179.exe (PID: 12028)
- Unicorn-61687.exe (PID: 12036)
- Unicorn-21209.exe (PID: 12068)
- Unicorn-17125.exe (PID: 12096)
- Unicorn-33461.exe (PID: 12140)
- Unicorn-45251.exe (PID: 12176)
- Unicorn-33461.exe (PID: 12148)
- Unicorn-25293.exe (PID: 12108)
- Unicorn-63825.exe (PID: 12060)
- Unicorn-17701.exe (PID: 12228)
- Unicorn-49819.exe (PID: 12244)
- Unicorn-41651.exe (PID: 12220)
- Unicorn-63633.exe (PID: 12200)
- Unicorn-36919.exe (PID: 2064)
- Unicorn-64572.exe (PID: 3032)
- Unicorn-60488.exe (PID: 924)
- Unicorn-51665.exe (PID: 12292)
- Unicorn-3119.exe (PID: 12312)
- Unicorn-46290.exe (PID: 6436)
- Unicorn-2564.exe (PID: 12336)
- Unicorn-33291.exe (PID: 12364)
- Unicorn-37951.exe (PID: 12384)
- Unicorn-33026.exe (PID: 12356)
- Unicorn-49719.exe (PID: 12328)
- Unicorn-49441.exe (PID: 12420)
- Unicorn-27645.exe (PID: 12412)
- Unicorn-36989.exe (PID: 12464)
- Unicorn-58371.exe (PID: 12428)
- Unicorn-233.exe (PID: 12512)
- Unicorn-19568.exe (PID: 12504)
- Unicorn-39327.exe (PID: 12480)
- Unicorn-48257.exe (PID: 12488)
- Unicorn-60244.exe (PID: 12496)
- Unicorn-27736.exe (PID: 12564)
- Unicorn-52704.exe (PID: 12580)
- Unicorn-62263.exe (PID: 12636)
- Unicorn-34229.exe (PID: 12608)
- Unicorn-59555.exe (PID: 12656)
- Unicorn-62355.exe (PID: 12664)
- Unicorn-3503.exe (PID: 12600)
- Unicorn-30066.exe (PID: 12724)
- Unicorn-17622.exe (PID: 12800)
- Unicorn-31848.exe (PID: 12740)
- Unicorn-12247.exe (PID: 12732)
- Unicorn-32113.exe (PID: 12748)
- Unicorn-50587.exe (PID: 12700)
- Unicorn-16161.exe (PID: 12852)
- Unicorn-30450.exe (PID: 12884)
- Unicorn-63223.exe (PID: 12916)
- Unicorn-3311.exe (PID: 12276)
- Unicorn-48925.exe (PID: 12876)
- Unicorn-10685.exe (PID: 12948)
- Unicorn-52917.exe (PID: 13064)
- Unicorn-26010.exe (PID: 13080)
- Unicorn-65361.exe (PID: 12940)
- Unicorn-14598.exe (PID: 13148)
- Unicorn-8760.exe (PID: 13212)
- Unicorn-31873.exe (PID: 13244)
- Unicorn-16545.exe (PID: 13124)
- Unicorn-20629.exe (PID: 13104)
- Unicorn-10898.exe (PID: 2564)
- Unicorn-43379.exe (PID: 4896)
- Unicorn-51739.exe (PID: 13252)
- Unicorn-37349.exe (PID: 13280)
- Unicorn-28989.exe (PID: 4692)
- Unicorn-59715.exe (PID: 5132)
- Unicorn-16737.exe (PID: 3968)
- Unicorn-60462.exe (PID: 13332)
- Unicorn-51054.exe (PID: 13376)
- Unicorn-39963.exe (PID: 13384)
- Unicorn-15366.exe (PID: 13448)
- Unicorn-22858.exe (PID: 1812)
- Unicorn-40233.exe (PID: 13528)
- Unicorn-40233.exe (PID: 13536)
- Unicorn-45901.exe (PID: 13556)
- Unicorn-26035.exe (PID: 13548)
- Unicorn-17431.exe (PID: 13656)
- Unicorn-23818.exe (PID: 13664)
- Unicorn-56591.exe (PID: 13700)
- Unicorn-44702.exe (PID: 13792)
- Unicorn-50296.exe (PID: 13736)
- Unicorn-8952.exe (PID: 13492)
- Unicorn-22658.exe (PID: 13828)
- Unicorn-50845.exe (PID: 13872)
- Unicorn-32178.exe (PID: 13956)
- Unicorn-49170.exe (PID: 13968)
- Unicorn-61443.exe (PID: 14036)
- Unicorn-24586.exe (PID: 14028)
- Unicorn-28771.exe (PID: 14076)
- Unicorn-26995.exe (PID: 13880)
- Unicorn-18827.exe (PID: 14188)
- Unicorn-47529.exe (PID: 4380)
- Unicorn-23103.exe (PID: 14228)
- Unicorn-41499.exe (PID: 14368)
- Unicorn-47608.exe (PID: 14272)
- Unicorn-47529.exe (PID: 6264)
- Unicorn-53394.exe (PID: 14332)
- Unicorn-47529.exe (PID: 7632)
- Unicorn-47529.exe (PID: 5232)
- Unicorn-63700.exe (PID: 14448)
- Unicorn-6688.exe (PID: 14376)
- Unicorn-57835.exe (PID: 14468)
- Unicorn-63700.exe (PID: 14440)
- Unicorn-44100.exe (PID: 14456)
- Unicorn-31847.exe (PID: 14416)
- Unicorn-47800.exe (PID: 14092)
- Unicorn-12989.exe (PID: 14108)
- Unicorn-47800.exe (PID: 14096)
- Unicorn-43280.exe (PID: 14400)
- Unicorn-13373.exe (PID: 14540)
- Unicorn-24839.exe (PID: 14524)
- Unicorn-27108.exe (PID: 14556)
- Unicorn-27108.exe (PID: 14532)
- Unicorn-55505.exe (PID: 14644)
- Unicorn-1558.exe (PID: 14584)
- Unicorn-44537.exe (PID: 14608)
- Unicorn-32946.exe (PID: 14664)
- Unicorn-38812.exe (PID: 14688)
- Unicorn-38812.exe (PID: 14680)
- Unicorn-38812.exe (PID: 14696)
- Unicorn-23487.exe (PID: 14772)
- Unicorn-48232.exe (PID: 14760)
- Unicorn-3696.exe (PID: 14748)
- Unicorn-19211.exe (PID: 14672)
- Unicorn-59424.exe (PID: 14828)
- Unicorn-63011.exe (PID: 14868)
- Unicorn-30093.exe (PID: 14948)
- Unicorn-37131.exe (PID: 14892)
- Unicorn-60820.exe (PID: 14916)
- Unicorn-19000.exe (PID: 14968)
- Unicorn-7535.exe (PID: 14992)
- Unicorn-7535.exe (PID: 14984)
- Unicorn-21733.exe (PID: 15096)
- Unicorn-28147.exe (PID: 15032)
- Unicorn-48613.exe (PID: 14780)
- Unicorn-58298.exe (PID: 14756)
- Unicorn-34223.exe (PID: 14836)
- Unicorn-39823.exe (PID: 14844)
- Unicorn-40207.exe (PID: 15244)
- Unicorn-59973.exe (PID: 15196)
- Unicorn-23871.exe (PID: 15204)
- Unicorn-33166.exe (PID: 15284)
- Unicorn-40207.exe (PID: 15252)
- Unicorn-11147.exe (PID: 15344)
- Unicorn-33971.exe (PID: 15308)
- Unicorn-14105.exe (PID: 15300)
- Unicorn-30441.exe (PID: 8236)
- Unicorn-21733.exe (PID: 15104)
- Unicorn-43637.exe (PID: 15136)
- Unicorn-29901.exe (PID: 15128)
- Unicorn-57173.exe (PID: 15180)
- Unicorn-46238.exe (PID: 15188)
- Unicorn-29978.exe (PID: 15424)
- Unicorn-38609.exe (PID: 15376)
- Unicorn-38609.exe (PID: 15384)
- Unicorn-29978.exe (PID: 15416)
- Unicorn-40747.exe (PID: 15532)
- Unicorn-8704.exe (PID: 15512)
- Unicorn-24411.exe (PID: 15472)
- Unicorn-18811.exe (PID: 15464)
- Unicorn-16243.exe (PID: 15432)
- Unicorn-51054.exe (PID: 15496)
- Unicorn-60348.exe (PID: 15540)
- Unicorn-13913.exe (PID: 15568)
- Unicorn-13913.exe (PID: 15576)
- Unicorn-56429.exe (PID: 15612)
- Unicorn-24219.exe (PID: 15620)
- Unicorn-32308.exe (PID: 15680)
- Unicorn-53384.exe (PID: 15672)
- Unicorn-40477.exe (PID: 15760)
- Unicorn-17918.exe (PID: 15800)
- Unicorn-57005.exe (PID: 15816)
- Unicorn-46342.exe (PID: 15740)
- Unicorn-57005.exe (PID: 15820)
- Unicorn-13669.exe (PID: 15848)
- Unicorn-3991.exe (PID: 15920)
- Unicorn-57276.exe (PID: 15876)
- Unicorn-34717.exe (PID: 15928)
- Unicorn-20009.exe (PID: 16036)
- Unicorn-3528.exe (PID: 15984)
- Unicorn-34254.exe (PID: 15996)
- Unicorn-53113.exe (PID: 16060)
- Unicorn-49029.exe (PID: 16076)
- Unicorn-1801.exe (PID: 16084)
- Unicorn-46342.exe (PID: 15736)
- Unicorn-21810.exe (PID: 15904)
- Unicorn-31017.exe (PID: 16192)
- Unicorn-47546.exe (PID: 16240)
- Unicorn-12735.exe (PID: 16256)
- Unicorn-2429.exe (PID: 16312)
- Unicorn-63095.exe (PID: 16288)
- Unicorn-12299.exe (PID: 16336)
- Unicorn-4164.exe (PID: 16348)
- Unicorn-12299.exe (PID: 16364)
- Unicorn-3634.exe (PID: 16356)
- Unicorn-61473.exe (PID: 16092)
- Unicorn-30198.exe (PID: 16124)
- Unicorn-18765.exe (PID: 16152)
- Unicorn-41953.exe (PID: 16176)
- Unicorn-61744.exe (PID: 16184)
- Unicorn-41945.exe (PID: 16248)
- Unicorn-62366.exe (PID: 16320)
- Unicorn-41245.exe (PID: 16412)
- Unicorn-63446.exe (PID: 16592)
- Unicorn-35485.exe (PID: 16568)
- Unicorn-6534.exe (PID: 16460)
- Unicorn-35215.exe (PID: 16444)
- Unicorn-33731.exe (PID: 16484)
- Unicorn-8023.exe (PID: 16536)
- Unicorn-48359.exe (PID: 16528)
- Unicorn-21287.exe (PID: 16632)
- Unicorn-32222.exe (PID: 16640)
- Unicorn-35215.exe (PID: 16452)
- Unicorn-35022.exe (PID: 16624)
- Unicorn-24193.exe (PID: 16820)
- Unicorn-5164.exe (PID: 16800)
- Unicorn-15370.exe (PID: 16836)
- Unicorn-49519.exe (PID: 16888)
- Unicorn-9611.exe (PID: 16908)
- Unicorn-42667.exe (PID: 16872)
- Unicorn-40337.exe (PID: 16916)
- Unicorn-12325.exe (PID: 16944)
- Unicorn-37380.exe (PID: 16680)
- Unicorn-35869.exe (PID: 16720)
- Unicorn-63830.exe (PID: 16744)
- Unicorn-63830.exe (PID: 16752)
- Unicorn-52398.exe (PID: 16776)
- Unicorn-40721.exe (PID: 17000)
- Unicorn-14271.exe (PID: 17016)
- Unicorn-6487.exe (PID: 17108)
- Unicorn-28006.exe (PID: 17024)
- Unicorn-26523.exe (PID: 17032)
- Unicorn-8049.exe (PID: 17064)
- Unicorn-10571.exe (PID: 17092)
- Unicorn-49658.exe (PID: 17132)
- Unicorn-49658.exe (PID: 17140)
- Unicorn-7686.exe (PID: 16968)
- Unicorn-7878.exe (PID: 17228)
- Unicorn-54676.exe (PID: 17244)
- Unicorn-29429.exe (PID: 17332)
- Unicorn-14576.exe (PID: 17400)
- Unicorn-38724.exe (PID: 17452)
- Unicorn-57555.exe (PID: 1760)
- Unicorn-4925.exe (PID: 10192)
- Unicorn-30058.exe (PID: 17460)
- Unicorn-56814.exe (PID: 17116)
- Unicorn-65147.exe (PID: 17208)
- Unicorn-35075.exe (PID: 17236)
- Unicorn-51988.exe (PID: 17284)
- Unicorn-60348.exe (PID: 17636)
- Unicorn-25175.exe (PID: 17620)
- Unicorn-8381.exe (PID: 17700)
- Unicorn-3000.exe (PID: 17756)
- Unicorn-18852.exe (PID: 17728)
- Unicorn-53934.exe (PID: 17496)
- Unicorn-24412.exe (PID: 17528)
- Unicorn-14960.exe (PID: 17588)
- Unicorn-33535.exe (PID: 17868)
- Unicorn-37903.exe (PID: 17824)
- Unicorn-14245.exe (PID: 17952)
- Unicorn-15807.exe (PID: 17896)
- Unicorn-39492.exe (PID: 17888)
- Unicorn-5422.exe (PID: 17984)
- Unicorn-5422.exe (PID: 17996)
- Unicorn-5422.exe (PID: 17976)
- Unicorn-47852.exe (PID: 17812)
- Unicorn-50539.exe (PID: 18112)
- Unicorn-13690.exe (PID: 18092)
- Unicorn-54623.exe (PID: 18136)
- Unicorn-7011.exe (PID: 18144)
- Unicorn-48209.exe (PID: 18172)
- Unicorn-48044.exe (PID: 18208)
- Unicorn-48044.exe (PID: 18224)
- Unicorn-48044.exe (PID: 18232)
- Unicorn-9149.exe (PID: 18244)
- Unicorn-39379.exe (PID: 18216)
- Unicorn-31973.exe (PID: 18048)
- Unicorn-11671.exe (PID: 18384)
- Unicorn-3006.exe (PID: 18408)
- Unicorn-24984.exe (PID: 10172)
- Unicorn-3006.exe (PID: 18400)
- Unicorn-50566.exe (PID: 5256)
- Unicorn-2807.exe (PID: 17672)
- Unicorn-58734.exe (PID: 6940)
- Unicorn-48620.exe (PID: 18448)
- Unicorn-48044.exe (PID: 18200)
- Unicorn-17317.exe (PID: 18280)
- Unicorn-20904.exe (PID: 18292)
- Unicorn-1722.exe (PID: 18352)
- Unicorn-5806.exe (PID: 18392)
- Unicorn-13974.exe (PID: 4016)
- Unicorn-44039.exe (PID: 18520)
- Unicorn-16112.exe (PID: 18472)
- Unicorn-59091.exe (PID: 18560)
- Unicorn-17926.exe (PID: 18608)
- Unicorn-39755.exe (PID: 18568)
- Unicorn-62983.exe (PID: 18656)
- Unicorn-13312.exe (PID: 18480)
- Unicorn-60183.exe (PID: 18644)
- Unicorn-29955.exe (PID: 18552)
- Unicorn-33533.exe (PID: 5048)
- Unicorn-48620.exe (PID: 18440)
- Unicorn-13312.exe (PID: 18488)
- Unicorn-26930.exe (PID: 18864)
- Unicorn-42563.exe (PID: 18832)
- Unicorn-46647.exe (PID: 18892)
- Unicorn-7752.exe (PID: 18840)
- Unicorn-4152.exe (PID: 18948)
- Unicorn-50731.exe (PID: 18856)
- Unicorn-34071.exe (PID: 18696)
- Unicorn-1530.exe (PID: 18620)
- Unicorn-56761.exe (PID: 18772)
- Unicorn-4131.exe (PID: 18716)
- Unicorn-17005.exe (PID: 18704)
- Unicorn-46342.exe (PID: 15752)
- Unicorn-43139.exe (PID: 19048)
- Unicorn-53253.exe (PID: 19016)
- Unicorn-34970.exe (PID: 19024)
- Unicorn-49004.exe (PID: 19076)
- Unicorn-58614.exe (PID: 19132)
- Unicorn-24664.exe (PID: 19140)
- Unicorn-18277.exe (PID: 19116)
- Unicorn-12412.exe (PID: 19124)
- Unicorn-8599.exe (PID: 19236)
- Unicorn-23618.exe (PID: 19220)
- Unicorn-16304.exe (PID: 19400)
- Unicorn-61421.exe (PID: 19332)
- Unicorn-58621.exe (PID: 19340)
- Unicorn-16304.exe (PID: 19388)
- Unicorn-43047.exe (PID: 18992)
- Unicorn-48977.exe (PID: 19204)
- Unicorn-30338.exe (PID: 19408)
- Unicorn-48977.exe (PID: 19212)
Create files in a temporary directory
- Unicorn-41967.exe (PID: 2152)
- 1 (565).exe (PID: 720)
- Unicorn-47566.exe (PID: 6324)
- Unicorn-58433.exe (PID: 5404)
- Unicorn-64555.exe (PID: 4560)
- Unicorn-5978.exe (PID: 1056)
- Unicorn-50820.exe (PID: 2432)
- Unicorn-43633.exe (PID: 1180)
- Unicorn-43633.exe (PID: 960)
- Unicorn-58433.exe (PID: 5416)
- Unicorn-1401.exe (PID: 1532)
- Unicorn-51993.exe (PID: 6068)
- Unicorn-29170.exe (PID: 5548)
- Unicorn-32127.exe (PID: 2616)
- Unicorn-52953.exe (PID: 5964)
- Unicorn-53508.exe (PID: 7180)
- Unicorn-65205.exe (PID: 2040)
- Unicorn-10529.exe (PID: 4464)
- Unicorn-46731.exe (PID: 7200)
- Unicorn-42647.exe (PID: 7216)
- Unicorn-55475.exe (PID: 7252)
- Unicorn-20665.exe (PID: 7288)
- Unicorn-63378.exe (PID: 7328)
- Unicorn-45261.exe (PID: 7296)
- Unicorn-20665.exe (PID: 7280)
- Unicorn-23304.exe (PID: 1188)
- Unicorn-61266.exe (PID: 7996)
- Unicorn-60711.exe (PID: 7960)
- Unicorn-7234.exe (PID: 8164)
- Unicorn-56990.exe (PID: 5436)
- Unicorn-1204.exe (PID: 3008)
- Unicorn-28322.exe (PID: 4976)
- Unicorn-33968.exe (PID: 5400)
- Unicorn-36015.exe (PID: 7480)
- Unicorn-21267.exe (PID: 4920)
- Unicorn-9948.exe (PID: 2236)
- Unicorn-64987.exe (PID: 7440)
- Unicorn-59704.exe (PID: 7416)
- Unicorn-11702.exe (PID: 7688)
- Unicorn-7618.exe (PID: 7404)
- Unicorn-11702.exe (PID: 7712)
- Unicorn-54873.exe (PID: 7740)
- Unicorn-15787.exe (PID: 7668)
- Unicorn-15787.exe (PID: 7660)
- Unicorn-54713.exe (PID: 7320)
- Unicorn-35007.exe (PID: 7748)
- Unicorn-11702.exe (PID: 7704)
- Unicorn-31552.exe (PID: 7820)
- Unicorn-61458.exe (PID: 7644)
- Unicorn-32050.exe (PID: 7772)
- Unicorn-20617.exe (PID: 7596)
- Unicorn-15017.exe (PID: 3300)
- Unicorn-34352.exe (PID: 7872)
- Unicorn-799.exe (PID: 7268)
- Unicorn-22100.exe (PID: 7628)
- Unicorn-799.exe (PID: 7264)
- Unicorn-12449.exe (PID: 7780)
- Unicorn-5241.exe (PID: 7956)
- Unicorn-59917.exe (PID: 7944)
- Unicorn-29191.exe (PID: 8044)
- Unicorn-20831.exe (PID: 7844)
- Unicorn-7016.exe (PID: 7176)
- Unicorn-45811.exe (PID: 7828)
- Unicorn-57971.exe (PID: 5728)
- Unicorn-2932.exe (PID: 8148)
- Unicorn-49730.exe (PID: 4688)
- Unicorn-62247.exe (PID: 7840)
- Unicorn-41827.exe (PID: 2552)
- Unicorn-26045.exe (PID: 7036)
- Unicorn-27876.exe (PID: 8204)
- Unicorn-337.exe (PID: 5528)
- Unicorn-19077.exe (PID: 8144)
- Unicorn-17671.exe (PID: 644)
- Unicorn-7919.exe (PID: 8092)
- Unicorn-9709.exe (PID: 8172)
- Unicorn-22693.exe (PID: 8240)
- Unicorn-60457.exe (PID: 8220)
- Unicorn-62787.exe (PID: 8260)
- Unicorn-62787.exe (PID: 8276)
- Unicorn-36891.exe (PID: 8312)
- Unicorn-45081.exe (PID: 8436)
- Unicorn-7618.exe (PID: 7492)
- Unicorn-42647.exe (PID: 7224)
- Unicorn-30691.exe (PID: 8452)
- Unicorn-36891.exe (PID: 8304)
- Unicorn-26607.exe (PID: 8468)
- Unicorn-42751.exe (PID: 8500)
- Unicorn-1718.exe (PID: 8584)
- Unicorn-1718.exe (PID: 8576)
- Unicorn-16685.exe (PID: 8688)
- Unicorn-28361.exe (PID: 8544)
- Unicorn-20747.exe (PID: 8552)
- Unicorn-40613.exe (PID: 8560)
- Unicorn-11702.exe (PID: 7696)
- Unicorn-40218.exe (PID: 7812)
- Unicorn-10078.exe (PID: 8620)
- Unicorn-36517.exe (PID: 7232)
- Unicorn-28361.exe (PID: 8536)
- Unicorn-57141.exe (PID: 8636)
- Unicorn-24147.exe (PID: 7732)
- Unicorn-23461.exe (PID: 8712)
- Unicorn-51587.exe (PID: 8776)
- Unicorn-39243.exe (PID: 8824)
- Unicorn-5808.exe (PID: 8760)
- Unicorn-31459.exe (PID: 9084)
- Unicorn-58272.exe (PID: 8696)
- Unicorn-39335.exe (PID: 8768)
- Unicorn-41189.exe (PID: 8740)
- Unicorn-39605.exe (PID: 8940)
- Unicorn-58272.exe (PID: 8704)
- Unicorn-41089.exe (PID: 8852)
- Unicorn-30499.exe (PID: 8660)
- Unicorn-50104.exe (PID: 8860)
- Unicorn-50104.exe (PID: 8844)
- Unicorn-61509.exe (PID: 8992)
- Unicorn-44503.exe (PID: 8920)
- Unicorn-41189.exe (PID: 8800)
- Unicorn-42870.exe (PID: 8876)
- Unicorn-61039.exe (PID: 9028)
- Unicorn-9133.exe (PID: 4452)
- Unicorn-13368.exe (PID: 2980)
- Unicorn-42127.exe (PID: 9188)
- Unicorn-37105.exe (PID: 8748)
- Unicorn-39989.exe (PID: 9132)
- Unicorn-51038.exe (PID: 8928)
- Unicorn-10746.exe (PID: 9100)
- Unicorn-29440.exe (PID: 5304)
- Unicorn-31742.exe (PID: 8840)
- Unicorn-13368.exe (PID: 7020)
- Unicorn-61178.exe (PID: 9224)
- Unicorn-15084.exe (PID: 8108)
- Unicorn-52071.exe (PID: 9300)
- Unicorn-39819.exe (PID: 9344)
- Unicorn-19399.exe (PID: 9324)
- Unicorn-54764.exe (PID: 9428)
- Unicorn-26005.exe (PID: 9384)
- Unicorn-13752.exe (PID: 9368)
- Unicorn-21921.exe (PID: 9396)
- Unicorn-35543.exe (PID: 9092)
- Unicorn-5584.exe (PID: 9468)
- Unicorn-52455.exe (PID: 9488)
- Unicorn-21729.exe (PID: 9496)
- Unicorn-36119.exe (PID: 9620)
- Unicorn-10272.exe (PID: 9608)
- Unicorn-57115.exe (PID: 9648)
- Unicorn-4577.exe (PID: 9716)
- Unicorn-18312.exe (PID: 9708)
- Unicorn-37249.exe (PID: 9640)
- Unicorn-44406.exe (PID: 9744)
- Unicorn-52931.exe (PID: 9796)
- Unicorn-15817.exe (PID: 9784)
- Unicorn-56161.exe (PID: 9760)
- Unicorn-15320.exe (PID: 9812)
- Unicorn-301.exe (PID: 9840)
- Unicorn-28335.exe (PID: 9860)
- Unicorn-4385.exe (PID: 9820)
- Unicorn-14520.exe (PID: 9884)
- Unicorn-47120.exe (PID: 9928)
- Unicorn-27519.exe (PID: 9936)
- Unicorn-20450.exe (PID: 10016)
- Unicorn-65475.exe (PID: 10032)
- Unicorn-60576.exe (PID: 10072)
- Unicorn-25189.exe (PID: 9960)
- Unicorn-33741.exe (PID: 10124)
- Unicorn-33741.exe (PID: 10128)
- Unicorn-39736.exe (PID: 8644)
- Unicorn-29103.exe (PID: 10180)
- Unicorn-19464.exe (PID: 10212)
- Unicorn-38231.exe (PID: 968)
- Unicorn-26917.exe (PID: 9296)
- Unicorn-18195.exe (PID: 9780)
- Unicorn-24587.exe (PID: 8416)
- Unicorn-47167.exe (PID: 9340)
- Unicorn-16441.exe (PID: 8524)
- Unicorn-10118.exe (PID: 10268)
- Unicorn-63503.exe (PID: 4844)
- Unicorn-8635.exe (PID: 10276)
- Unicorn-47067.exe (PID: 10320)
- Unicorn-21323.exe (PID: 8816)
- Unicorn-37245.exe (PID: 10352)
Reads security settings of Internet Explorer
- BackgroundTransferHost.exe (PID: 5260)
- BackgroundTransferHost.exe (PID: 7408)
- BackgroundTransferHost.exe (PID: 7612)
- BackgroundTransferHost.exe (PID: 7840)
- BackgroundTransferHost.exe (PID: 8100)
Creates files or folders in the user directory
- BackgroundTransferHost.exe (PID: 7408)
- WerFault.exe (PID: 9280)
Checks proxy server information
- BackgroundTransferHost.exe (PID: 7408)
Reads the software policy settings
- BackgroundTransferHost.exe (PID: 7408)
- slui.exe (PID: 4880)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
752
Monitored processes
616
Malicious processes
87
Suspicious processes
74
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 644 | C:\Users\admin\AppData\Local\Temp\Unicorn-17671.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-17671.exe | Unicorn-59704.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 720 | "C:\Users\admin\AppData\Local\Temp\1 (565).exe" | C:\Users\admin\AppData\Local\Temp\1 (565).exe | explorer.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 924 | C:\Users\admin\AppData\Local\Temp\Unicorn-60488.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-60488.exe | — | Unicorn-27876.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 960 | C:\Users\admin\AppData\Local\Temp\Unicorn-43633.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-43633.exe | Unicorn-58433.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 968 | C:\Users\admin\AppData\Local\Temp\Unicorn-38231.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-38231.exe | Unicorn-62787.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1056 | C:\Users\admin\AppData\Local\Temp\Unicorn-5978.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-5978.exe | Unicorn-41967.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1180 | C:\Users\admin\AppData\Local\Temp\Unicorn-43633.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-43633.exe | Unicorn-58433.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1188 | C:\Users\admin\AppData\Local\Temp\Unicorn-23304.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-23304.exe | Unicorn-41967.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1532 | C:\Users\admin\AppData\Local\Temp\Unicorn-1401.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-1401.exe | Unicorn-47566.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1760 | C:\Users\admin\AppData\Local\Temp\Unicorn-57555.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-57555.exe | — | Unicorn-36891.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
16 211
Read events
16 196
Write events
15
Delete events
0
Modification events
| (PID) Process: | (5260) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (5260) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (5260) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7408) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7408) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7408) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7612) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7612) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7612) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7840) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
Executable files
1 212
Suspicious files
8
Text files
1
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 720 | 1 (565).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-41967.exe | executable | |
MD5:9806EC650EBF0DF165CC7109AB7A55F0 | SHA256:A0D5871EB8EFDE3365CF18B218F67E8E155BBFC0B028C313BE951AC2E617DBD6 | |||
| 2152 | Unicorn-41967.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-5978.exe | executable | |
MD5:F5A045979D74C5162598699C54973E53 | SHA256:49234A2270F5C8DB0D467FB1422400890F228A88A05FB59AD9DE5E29044E395F | |||
| 2432 | Unicorn-50820.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-51993.exe | executable | |
MD5:C6DB3E6B30FE0531CCC1A38B8AEDB918 | SHA256:FDAF5C84DA92DD77A4166C4492C8437724EFB45D21E7C1116131B581371A401A | |||
| 6324 | Unicorn-47566.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-58433.exe | executable | |
MD5:C5BE29190D13BDDCE9E226815628388A | SHA256:F2870CD5D53B52C226957691FE173ADD4455C9A6345A9D8823D6F5E5FE96A335 | |||
| 720 | 1 (565).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-64555.exe | executable | |
MD5:5F2D240EA3EA55A8712C090BEF2A1272 | SHA256:68F38D235FECC20FB561BC4A5028132A5ECCB6C0C7DBE176489B510A5660C81B | |||
| 2152 | Unicorn-41967.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-50820.exe | executable | |
MD5:A3603979B248ED97C99F968DE70A0846 | SHA256:11BA370AAE6F715A74FAE2F264FAAA6DED4615BC79B7AA3C1F79B8BEE4CA9622 | |||
| 6324 | Unicorn-47566.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-1401.exe | executable | |
MD5:5C03BCF1E811E5AEA28854E4E9742A3B | SHA256:2E1C624CA9D1B73E30234848CFDEA0A5CAB00A419B60A3DE22A1F2DDD61AC9E0 | |||
| 960 | Unicorn-43633.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-65205.exe | executable | |
MD5:E91195A9830926CFB9F4E1FA3E09CB7E | SHA256:F961E2A32D04CBE768C86BCD08FA58366CA5F0CC610B5FBB13B650231423A273 | |||
| 720 | 1 (565).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-47566.exe | executable | |
MD5:F3D2A4B12FC764FB0CCC982FADB25F8E | SHA256:90BB87F688780294DC3267F312992379C5522A4871590289900E872BB67EE1D3 | |||
| 7408 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\241e77ef-336d-4758-8c96-9911cbd63083.down_data | — | |
MD5:— | SHA256:— | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
23
DNS requests
16
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
— | — | GET | 200 | 23.48.23.156:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
6272 | backgroundTaskHost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
8488 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
8488 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
7408 | BackgroundTransferHost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 23.48.23.156:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
6544 | svchost.exe | 20.190.160.64:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 2.23.77.188:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
2104 | svchost.exe | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
3216 | svchost.exe | 40.113.110.67:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6272 | backgroundTaskHost.exe | 20.103.156.88:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6272 | backgroundTaskHost.exe | 2.23.77.188:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
arc.msn.com |
| whitelisted |
www.bing.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |