Analysis
- max time kernel
149s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
01/08/2026, 01:04
General
- Target 2026-08-01_95ffb9ab97bd5260b0cf056bbd7793a3_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
- Size 8.0MB
- Sample260801-be5gnabc93
- SHA256 1f71c818787d183d89c4497bbdd9de443a9b8642cab4c59e60029c759a9b94f7
Score
10/10
Malware Config
Signatures
- Family: KawaiiUnicorn
KawaiiUnicorn is a trojan written in Visual Basic.
- Detects KawaiiUnicorn 57 IoCs
- Detects executables embedding registry key / value combination indicative of disabling Windows Defen 29 IoCs
- UPX dump on OEP (original entry point) 29 IoCs
- Executes dropped EXE 9 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 10 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 10 IoCs
- Suspicious use of WriteProcessMemory 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-01_95ffb9ab97bd5260b0cf056bbd7793a3_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-01_95ffb9ab97bd5260b0cf056bbd7793a3_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-9247.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-9247.exe2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-8399.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-8399.exe3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54238.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54238.exe4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53214.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53214.exe5⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-46840.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-46840.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53756.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53756.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-23271.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-23271.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-2823.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-2823.exe9⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-11397.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-11397.exe10⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47749.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47749.exe10⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-973.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-973.exe9⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41361.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41361.exe9⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-29667.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-29667.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26552.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26552.exe9⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41175.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41175.exe9⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56462.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56462.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-6579.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-6579.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-8085.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-8085.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58636.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58636.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47810.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47810.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-61869.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-61869.exe9⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31417.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31417.exe9⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-65217.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-65217.exe9⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-38659.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-38659.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-42117.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-42117.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-14203.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-14203.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56646.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56646.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53523.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53523.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28214.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28214.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-5440.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-5440.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-5723.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-5723.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56162.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56162.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33890.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33890.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-11724.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-11724.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-25005.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-25005.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-4266.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-4266.exe9⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41339.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41339.exe10⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-50073.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-50073.exe10⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53527.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53527.exe9⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-573.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-573.exe9⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-43025.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-43025.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-6845.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-6845.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-37561.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-37561.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-25476.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-25476.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28214.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28214.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-40777.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-40777.exe9⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-6192.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-6192.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31695.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31695.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54149.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54149.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3769.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3769.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-5585.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-5585.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-10789.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-10789.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49160.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49160.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47113.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47113.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-40127.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-40127.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-9455.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-9455.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-59119.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-59119.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-32557.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-32557.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30054.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30054.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48464.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48464.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53756.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53756.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41594.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41594.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47017.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47017.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-35875.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-35875.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30406.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30406.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-20132.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-20132.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53853.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53853.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-8699.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-8699.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57759.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57759.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-62171.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-62171.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-5574.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-5574.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48984.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48984.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63046.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63046.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34886.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34886.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-62642.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-62642.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-23752.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-23752.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22490.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22490.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-23436.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-23436.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-38681.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-38681.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-36820.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-36820.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-12515.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-12515.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31253.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31253.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47377.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47377.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-25529.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-25529.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-11692.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-11692.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41543.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41543.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-44866.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-44866.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-38954.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-38954.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-18802.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-18802.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48044.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48044.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34932.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34932.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-16671.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-16671.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-55231.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-55231.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34345.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34345.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-6208.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-6208.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-12760.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-12760.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53185.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53185.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31811.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31811.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3751.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3751.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-18817.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-18817.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-11724.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-11724.exe4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-46840.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-46840.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53756.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53756.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64153.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64153.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-9294.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-9294.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21421.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21421.exe9⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-9301.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-9301.exe9⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56864.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56864.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58558.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58558.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-11327.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-11327.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-59479.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-59479.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-2033.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-2033.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-12351.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-12351.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-39030.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-39030.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57015.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57015.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-10754.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-10754.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-46775.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-46775.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-5603.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-5603.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45429.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45429.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41718.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41718.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-20163.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-20163.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54909.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54909.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-62215.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-62215.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28860.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28860.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-15359.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-15359.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26286.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26286.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-65098.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-65098.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58527.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58527.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-65487.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-65487.exe9⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-52004.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-52004.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63046.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63046.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26661.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26661.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64946.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64946.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63790.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63790.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56096.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56096.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-8983.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-8983.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56364.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56364.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26605.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26605.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-23069.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-23069.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-6939.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-6939.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-60655.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-60655.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-32970.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-32970.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-61169.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-61169.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-441.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-441.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-23352.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-23352.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-25623.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-25623.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-37441.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-37441.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48715.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48715.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-36564.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-36564.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49330.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49330.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-55986.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-55986.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-18646.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-18646.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-10817.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-10817.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-5650.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-5650.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-44637.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-44637.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33042.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33042.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-35959.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-35959.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49755.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49755.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-13351.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-13351.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49913.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49913.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-17704.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-17704.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64448.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64448.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-55446.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-55446.exe9⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-694.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-694.exe9⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58304.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58304.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57452.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57452.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3029.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3029.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41952.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41952.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-15326.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-15326.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-19179.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-19179.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-1642.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-1642.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-2587.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-2587.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47815.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47815.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57759.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57759.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54629.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54629.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-60331.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-60331.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-62662.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-62662.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-29485.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-29485.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63046.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63046.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-38987.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-38987.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28661.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28661.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47094.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47094.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-654.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-654.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3764.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3764.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21393.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21393.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34343.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34343.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22818.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22818.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-6179.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-6179.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-17444.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-17444.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-2029.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-2029.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-35999.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-35999.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-9351.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-9351.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-20132.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-20132.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-36753.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-36753.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21300.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21300.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-52195.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-52195.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-37978.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-37978.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49131.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49131.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-13542.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-13542.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-61782.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-61782.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-44459.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-44459.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31263.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31263.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48247.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48247.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-16697.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-16697.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-83.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-83.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64082.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64082.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-14718.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-14718.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-35988.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-35988.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-10678.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-10678.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-15546.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-15546.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-17351.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-17351.exe3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47423.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47423.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-42974.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-42974.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57759.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57759.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-16142.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-16142.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3000.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3000.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45113.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45113.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-10005.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-10005.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3275.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3275.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26989.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26989.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45227.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45227.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26652.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26652.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-39286.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-39286.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-15966.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-15966.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-59141.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-59141.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-29081.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-29081.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-38607.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-38607.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-62976.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-62976.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-7037.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-7037.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-1752.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-1752.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-27668.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-27668.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-43806.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-43806.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-12512.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-12512.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-61372.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-61372.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-20653.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-20653.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-62647.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-62647.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63000.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63000.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33289.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33289.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54505.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54505.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54010.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54010.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64443.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64443.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58601.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58601.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31898.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31898.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-14699.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-14699.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-7914.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-7914.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49755.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49755.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-37974.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-37974.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26286.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26286.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-7459.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-7459.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-37038.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-37038.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58155.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58155.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-7530.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-7530.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-6001.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-6001.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21300.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21300.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26661.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26661.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63711.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63711.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-27806.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-27806.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-39311.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-39311.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45622.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45622.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-50035.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-50035.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-40397.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-40397.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-46499.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-46499.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-42714.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-42714.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30615.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30615.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64988.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64988.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-12182.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-12182.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-38642.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-38642.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-42817.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-42817.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33097.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33097.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-5871.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-5871.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30142.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30142.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64911.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64911.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47269.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47269.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-7914.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-7914.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-15356.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-15356.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41293.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41293.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57759.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57759.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-15378.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-15378.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-51260.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-51260.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30982.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30982.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-42961.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-42961.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-59108.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-59108.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-2746.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-2746.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31556.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31556.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-20318.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-20318.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-4301.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-4301.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22630.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22630.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47948.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47948.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57575.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57575.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-29141.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-29141.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-23758.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-23758.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-14066.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-14066.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63046.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63046.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58158.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58158.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-37978.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-37978.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41142.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41142.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21359.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21359.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-8760.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-8760.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56035.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56035.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-15029.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-15029.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48882.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48882.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-5133.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-5133.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45020.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45020.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58984.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58984.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-178.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-178.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-35365.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-35365.exe3⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-11643.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-11643.exe3⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-60991.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-60991.exe3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-42576.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-42576.exe2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3042.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3042.exe3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-20781.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-20781.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57840.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57840.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-38082.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-38082.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33753.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33753.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34341.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34341.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28352.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28352.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-51098.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-51098.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28718.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28718.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-61880.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-61880.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34585.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34585.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-32760.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-32760.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54061.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54061.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-436.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-436.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-1330.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-1330.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22165.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22165.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-13219.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-13219.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41165.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41165.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58962.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58962.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-6112.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-6112.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57047.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57047.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-59347.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-59347.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63310.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63310.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33890.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33890.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45679.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45679.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49160.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49160.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-40806.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-40806.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-13546.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-13546.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49251.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49251.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48196.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48196.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-11317.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-11317.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22399.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22399.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-27606.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-27606.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22795.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22795.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-9164.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-9164.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30807.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30807.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48188.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48188.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28214.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28214.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58962.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58962.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-18203.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-18203.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-10860.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-10860.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-5871.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-5871.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-29890.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-29890.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-62420.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-62420.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-37522.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-37522.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-13964.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-13964.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-44444.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-44444.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34457.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34457.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53756.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53756.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-17090.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-17090.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33695.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33695.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56247.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56247.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3764.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3764.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-42691.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-42691.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-36521.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-36521.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63218.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63218.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-44105.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-44105.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49765.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49765.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-37654.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-37654.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28313.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28313.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49086.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49086.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45521.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45521.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57759.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57759.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45524.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45524.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48247.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48247.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-51799.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-51799.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22596.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22596.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21806.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21806.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54790.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54790.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-42849.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-42849.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-32460.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-32460.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-50518.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-50518.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-55795.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-55795.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48556.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48556.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-8857.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-8857.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34818.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34818.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63205.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63205.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47626.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47626.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64143.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64143.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-20567.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-20567.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-43367.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-43367.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-51571.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-51571.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-29865.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-29865.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-17524.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-17524.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-9629.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-9629.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-510.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-510.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63425.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63425.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-59335.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-59335.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-60010.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-60010.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-18239.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-18239.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-40092.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-40092.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-615.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-615.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49511.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49511.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-11407.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-11407.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53892.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53892.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-27231.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-27231.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-23121.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-23121.exe3⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-52641.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-52641.exe3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-51671.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-51671.exe2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-62299.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-62299.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53756.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53756.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-13883.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-13883.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-42351.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-42351.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22870.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22870.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-61271.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-61271.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34330.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34330.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-46258.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-46258.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49453.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49453.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-46880.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-46880.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47279.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47279.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34864.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34864.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28978.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28978.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-2802.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-2802.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-17464.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-17464.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33375.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33375.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-37302.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-37302.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41054.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41054.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54517.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54517.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54159.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54159.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26661.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26661.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-13913.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-13913.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-43595.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-43595.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-36499.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-36499.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3548.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3548.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-62821.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-62821.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56195.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56195.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-29557.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-29557.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-4646.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-4646.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-61915.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-61915.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-7747.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-7747.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28576.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28576.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-17003.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-17003.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63855.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63855.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34538.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34538.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-13382.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-13382.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-9054.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-9054.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49597.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49597.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-4546.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-4546.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-46049.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-46049.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-52391.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-52391.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-5957.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-5957.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-5407.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-5407.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57100.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57100.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-1633.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-1633.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-61443.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-61443.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26661.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26661.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-38992.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-38992.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-25998.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-25998.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-15832.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-15832.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-4237.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-4237.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-12253.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-12253.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22572.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22572.exe3⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-51455.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-51455.exe3⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58885.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58885.exe3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-37338.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-37338.exe2⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53756.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53756.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-15102.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-15102.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33383.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33383.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-51349.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-51349.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41636.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41636.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-25251.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-25251.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34660.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34660.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-55741.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-55741.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-46521.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-46521.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41054.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41054.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49047.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49047.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-39931.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-39931.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64827.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64827.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-61843.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-61843.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22097.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22097.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30126.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30126.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-59141.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-59141.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33688.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33688.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-38642.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-38642.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28479.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28479.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26661.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26661.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-16456.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-16456.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28898.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28898.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-7747.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-7747.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-19361.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-19361.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45303.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45303.exe3⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58147.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58147.exe3⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-797.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-797.exe3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-44826.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-44826.exe2⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28871.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28871.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-35388.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-35388.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-19395.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-19395.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26500.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26500.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-12238.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-12238.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-15598.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-15598.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26661.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26661.exe3⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-13553.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-13553.exe3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-39533.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-39533.exe2⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53197.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53197.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-27322.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-27322.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3422.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3422.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-51567.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-51567.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-44631.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-44631.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-42691.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-42691.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-50274.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-50274.exe3⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-35097.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-35097.exe3⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-15936.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-15936.exe3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-18559.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-18559.exe2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30563.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30563.exe2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26387.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26387.exe2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58228.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58228.exe2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
Unicorn-11724.exe
Unicorn-13351.exe
Unicorn-15359.exe
Unicorn-17351.exe
Unicorn-20781.exe
Unicorn-27668.exe
Unicorn-29557.exe
Unicorn-3042.exe
Unicorn-33890.exe
Unicorn-34457.exe
Unicorn-37338.exe
Unicorn-37974.exe
Unicorn-41293.exe
Unicorn-42576.exe
Unicorn-42974.exe
Unicorn-44826.exe
Unicorn-46840.exe
Unicorn-47423.exe
Unicorn-48464.exe
Unicorn-49755.exe
Unicorn-51671.exe
Unicorn-53214.exe
Unicorn-53756.exe
Unicorn-54238.exe
Unicorn-57575.exe
Unicorn-57840.exe
Unicorn-62299.exe
Unicorn-8399.exe
Unicorn-9247.exe
memory/236-571-0x0000000000400000-0x0000000000475000-memory.dmp
memory/688-471-0x0000000000400000-0x0000000000475000-memory.dmp
memory/1476-516-0x0000000000400000-0x0000000000475000-memory.dmp
memory/1760-311-0x0000000000400000-0x0000000000475000-memory.dmp
memory/1796-513-0x0000000000400000-0x0000000000475000-memory.dmp
memory/1908-420-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2340-470-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2372-570-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2460-468-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2464-22-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2464-2485-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2468-943-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2568-296-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2624-1172-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2692-421-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2824-2242-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2824-14-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2860-652-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2944-310-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3140-0-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3140-1746-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3196-1009-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3240-293-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3296-2016-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3516-231-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3552-473-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3600-469-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3736-552-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3784-243-0x0000000000400000-0x0000000000475000-memory.dmp
memory/4116-517-0x0000000000400000-0x0000000000475000-memory.dmp
memory/4496-940-0x0000000000400000-0x0000000000475000-memory.dmp
memory/4572-942-0x0000000000400000-0x0000000000475000-memory.dmp
memory/5260-735-0x0000000000400000-0x0000000000475000-memory.dmp
memory/5588-214-0x0000000000400000-0x0000000000475000-memory.dmp
memory/5756-472-0x0000000000400000-0x0000000000475000-memory.dmp
memory/5920-514-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6068-734-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6180-844-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6260-736-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6496-800-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6608-768-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6728-941-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6800-1173-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6868-1010-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6876-1059-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7096-1192-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7108-1092-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7128-1012-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7348-1160-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7380-1109-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7652-1115-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7676-1243-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7748-1091-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7796-1161-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7880-1162-0x0000000000400000-0x0000000000475000-memory.dmp
memory/8048-1193-0x0000000000400000-0x0000000000475000-memory.dmp
memory/8056-1194-0x0000000000400000-0x0000000000475000-memory.dmp