Analysis
- max time kernel
149s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
08/08/2026, 15:53
General
- Target 2026-08-08_827cedda74bd6f81eb4b9d142f23bb87_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe
- Size 12.8MB
- Sample260808-tb34jazeka
- SHA256 016705d746cd7d027834dbfad9651dd1bfd2b701abd295525560cebf875b4916
Score
10/10
Malware Config
Signatures
- Family: KawaiiUnicorn
KawaiiUnicorn is a trojan written in Visual Basic.
- Detects KawaiiUnicorn 62 IoCs
- Detects executables embedding registry key / value combination indicative of disabling Windows Defen 32 IoCs
- UPX dump on OEP (original entry point) 32 IoCs
- Executes dropped EXE 3 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 4 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 4 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_827cedda74bd6f81eb4b9d142f23bb87_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-08_827cedda74bd6f81eb4b9d142f23bb87_agent-tesla_cobalt-strike_coinminer_cryptbot_elex_glassw.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-61080.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-61080.exe2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-7660.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-7660.exe3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22373.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22373.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-38958.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-38958.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3592.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3592.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30894.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30894.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21906.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21906.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-19553.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-19553.exe9⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-24385.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-24385.exe10⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-6807.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-6807.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22652.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22652.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-2168.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-2168.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-60781.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-60781.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56237.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56237.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-25944.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-25944.exe8⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-40877.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-40877.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-29882.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-29882.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-46605.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-46605.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33160.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33160.exe9⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31969.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31969.exe9⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-19147.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-19147.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-13071.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-13071.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45706.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45706.exe8⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-36196.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-36196.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-36211.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-36211.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-8079.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-8079.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3764.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3764.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-10071.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-10071.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31562.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31562.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63078.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63078.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-10665.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-10665.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-60341.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-60341.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-44332.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-44332.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-32636.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-32636.exe9⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-50771.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-50771.exe9⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-39002.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-39002.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48886.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48886.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-6184.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-6184.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-46122.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-46122.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53101.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53101.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22197.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22197.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41484.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41484.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58854.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58854.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54005.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54005.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-10658.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-10658.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-37822.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-37822.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-16480.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-16480.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-55575.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-55575.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31181.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31181.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-50480.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-50480.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22203.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22203.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56728.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56728.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-25676.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-25676.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-10590.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-10590.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53419.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53419.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-51461.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-51461.exe7⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-35401.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-35401.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47377.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47377.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-44858.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-44858.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-43172.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-43172.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-20863.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-20863.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47513.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47513.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33642.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33642.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-18711.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-18711.exe9⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-18244.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-18244.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64128.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64128.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21900.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21900.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-55660.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-55660.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-65053.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-65053.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49003.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49003.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-12177.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-12177.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-38628.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-38628.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56234.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56234.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34418.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34418.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-12462.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-12462.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33365.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33365.exe7⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56228.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56228.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63958.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63958.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-59376.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-59376.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-51063.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-51063.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-9776.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-9776.exe9⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-8093.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-8093.exe9⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-62775.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-62775.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-16332.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-16332.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63029.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63029.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33627.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33627.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30470.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30470.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-2597.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-2597.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28264.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28264.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53744.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53744.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45038.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45038.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-24876.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-24876.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26138.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26138.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-25912.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-25912.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-25614.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-25614.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41212.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41212.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48758.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48758.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22651.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22651.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-39337.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-39337.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-35614.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-35614.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22683.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22683.exe7⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-36552.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-36552.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-10300.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-10300.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26209.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26209.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48067.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48067.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-27889.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-27889.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-59329.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-59329.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54908.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54908.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41292.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41292.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64647.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64647.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56595.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56595.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-424.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-424.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-35623.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-35623.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-17293.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-17293.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-16081.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-16081.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45360.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45360.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-60563.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-60563.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49063.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49063.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-5635.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-5635.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-14951.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-14951.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-32051.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-32051.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-15736.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-15736.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41366.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41366.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-20819.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-20819.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57866.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57866.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-52836.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-52836.exe9⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-41332.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-41332.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-8810.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-8810.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-60480.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-60480.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31539.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31539.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28000.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28000.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-51971.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-51971.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-23676.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-23676.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47315.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47315.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21917.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21917.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53789.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53789.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-6553.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-6553.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-18843.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-18843.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-40170.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-40170.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-19089.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-19089.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-2163.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-2163.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-27966.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-27966.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33691.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33691.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-59931.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-59931.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-17514.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-17514.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-43905.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-43905.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63652.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63652.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-5388.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-5388.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-14492.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-14492.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-15437.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-15437.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22411.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22411.exe7⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-2831.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-2831.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-43020.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-43020.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-16372.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-16372.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-876.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-876.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-44097.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-44097.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-46958.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-46958.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58866.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58866.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49197.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49197.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30196.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30196.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33414.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33414.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54447.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54447.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47865.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47865.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3012.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3012.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-40026.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-40026.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-16883.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-16883.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58785.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58785.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-11075.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-11075.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64500.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64500.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-24519.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-24519.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-29470.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-29470.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47493.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47493.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28705.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28705.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-39002.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-39002.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21856.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21856.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57829.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57829.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34815.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34815.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58899.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58899.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-19805.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-19805.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63505.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63505.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-10317.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-10317.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30643.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30643.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-52037.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-52037.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-24601.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-24601.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-39626.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-39626.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31231.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31231.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-50603.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-50603.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-15603.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-15603.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54021.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54021.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-7319.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-7319.exe6⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21119.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21119.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-5924.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-5924.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45239.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45239.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57132.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57132.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30513.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30513.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31125.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31125.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-52053.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-52053.exe3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48179.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48179.exe2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47069.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47069.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-16784.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-16784.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-38979.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-38979.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-55564.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-55564.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28026.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28026.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-6984.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-6984.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57133.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57133.exe9⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26138.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26138.exe8⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53894.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53894.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-43231.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-43231.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-40392.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-40392.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-24499.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-24499.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-60776.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-60776.exe7⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56311.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56311.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-16242.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-16242.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26632.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26632.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-23230.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-23230.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-1213.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-1213.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-16052.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-16052.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34745.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34745.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58494.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58494.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-20623.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-20623.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45874.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45874.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45290.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45290.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-7082.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-7082.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58945.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58945.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48963.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48963.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63540.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63540.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-60507.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-60507.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-2744.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-2744.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-29179.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-29179.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-55980.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-55980.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45977.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45977.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54591.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54591.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-9629.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-9629.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-46480.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-46480.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-17945.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-17945.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-25944.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-25944.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22815.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22815.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-11372.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-11372.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-60617.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-60617.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57959.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57959.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30674.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30674.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-60980.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-60980.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53787.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53787.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-24421.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-24421.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-6185.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-6185.exe7⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-17906.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-17906.exe7⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64367.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64367.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-12384.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-12384.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33382.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33382.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21053.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21053.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53106.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53106.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34872.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34872.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-35891.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-35891.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-61386.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-61386.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-13597.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-13597.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21631.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21631.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54394.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54394.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-5915.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-5915.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-44367.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-44367.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33896.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33896.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-59786.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-59786.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57832.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57832.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-40641.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-40641.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-52950.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-52950.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-43454.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-43454.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-27071.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-27071.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-17044.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-17044.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-15086.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-15086.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-2728.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-2728.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57207.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57207.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-32380.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-32380.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-39220.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-39220.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-17340.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-17340.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-55197.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-55197.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-2609.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-2609.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49345.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49345.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-50446.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-50446.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64500.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64500.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-37072.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-37072.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-4170.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-4170.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-51980.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-51980.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-48592.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-48592.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-18161.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-18161.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-62281.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-62281.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58176.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58176.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31563.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31563.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21011.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21011.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-44519.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-44519.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-55822.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-55822.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-32027.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-32027.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34614.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34614.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-32054.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-32054.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-933.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-933.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-35976.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-35976.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-62981.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-62981.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-29821.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-29821.exe3⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-6491.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-6491.exe3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53082.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53082.exe2⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21169.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21169.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-23904.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-23904.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-51096.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-51096.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-55183.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-55183.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-38759.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-38759.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-12780.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-12780.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-6566.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-6566.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49599.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49599.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-57856.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-57856.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49188.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49188.exe7⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-24856.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-24856.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30018.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30018.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64647.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64647.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-40467.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-40467.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-27088.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-27088.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45915.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45915.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-42385.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-42385.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-52152.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-52152.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-14927.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-14927.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-52563.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-52563.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64201.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64201.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49594.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49594.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-61736.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-61736.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-13532.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-13532.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-23882.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-23882.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-24345.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-24345.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31447.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31447.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56486.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56486.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-14789.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-14789.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-55980.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-55980.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-36625.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-36625.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22437.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22437.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-8579.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-8579.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54643.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54643.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-8603.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-8603.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-25540.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-25540.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-32917.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-32917.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-17657.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-17657.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31778.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31778.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-58069.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-58069.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-13439.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-13439.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-37845.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-37845.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-14078.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-14078.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-38409.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-38409.exe4⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-2621.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-2621.exe2⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26535.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26535.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-63239.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-63239.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-25012.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-25012.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-56268.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-56268.exe6⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-64782.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-64782.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54690.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54690.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-42202.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-42202.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33625.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33625.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-13180.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-13180.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-45924.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-45924.exe5⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3301.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3301.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53787.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53787.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-23347.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-23347.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-34522.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-34522.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3922.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3922.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-50754.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-50754.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-10900.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-10900.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33959.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33959.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-42089.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-42089.exe5⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-3325.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-3325.exe3⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-53984.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-53984.exe3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-29856.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-29856.exe2⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-47863.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-47863.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-29371.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-29371.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-30373.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-30373.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-4647.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-4647.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-50876.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-50876.exe5⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-21226.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-21226.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54446.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54446.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-7389.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-7389.exe5⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-26386.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-26386.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49085.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49085.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-28951.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-28951.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-38416.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-38416.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-52307.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-52307.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-1821.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-1821.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-22613.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-22613.exe3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31.exe2⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-36299.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-36299.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-33897.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-33897.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-52265.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-52265.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-54664.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-54664.exe3⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-27284.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-27284.exe3⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49279.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49279.exe2⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-49091.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-49091.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-31539.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-31539.exe4⤵
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-12011.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-12011.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\Unicorn-20879.exeC:\Users\Admin\AppData\Local\Temp\Unicorn-20879.exe3⤵
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
Unicorn-11075.exe
Unicorn-13597.exe
Unicorn-14951.exe
Unicorn-15736.exe
Unicorn-16784.exe
Unicorn-21169.exe
Unicorn-22373.exe
Unicorn-22651.exe
Unicorn-23882.exe
Unicorn-23904.exe
Unicorn-2621.exe
Unicorn-26535.exe
Unicorn-27966.exe
Unicorn-29856.exe
Unicorn-30894.exe
Unicorn-31231.exe
Unicorn-32051.exe
Unicorn-3592.exe
Unicorn-38958.exe
Unicorn-38979.exe
Unicorn-43172.exe
Unicorn-44858.exe
Unicorn-47069.exe
Unicorn-48179.exe
Unicorn-48963.exe
Unicorn-50446.exe
Unicorn-53082.exe
Unicorn-58785.exe
Unicorn-61080.exe
Unicorn-61386.exe
Unicorn-63078.exe
Unicorn-7660.exe
memory/444-461-0x0000000000400000-0x0000000000475000-memory.dmp
memory/1456-632-0x0000000000400000-0x0000000000475000-memory.dmp
memory/1516-366-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2052-418-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2652-631-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2700-378-0x0000000000400000-0x0000000000475000-memory.dmp
memory/2768-633-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3124-381-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3196-535-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3580-265-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3612-101-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3704-663-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3940-425-0x0000000000400000-0x0000000000475000-memory.dmp
memory/3988-244-0x0000000000400000-0x0000000000475000-memory.dmp
memory/4192-928-0x0000000000400000-0x0000000000475000-memory.dmp
memory/4260-423-0x0000000000400000-0x0000000000475000-memory.dmp
memory/4272-379-0x0000000000400000-0x0000000000475000-memory.dmp
memory/4512-16-0x0000000000400000-0x0000000000475000-memory.dmp
memory/4728-1767-0x0000000000400000-0x0000000000475000-memory.dmp
memory/5108-367-0x0000000000400000-0x0000000000475000-memory.dmp
memory/5116-1594-0x0000000000400000-0x0000000000475000-memory.dmp
memory/5160-424-0x0000000000400000-0x0000000000475000-memory.dmp
memory/5440-368-0x0000000000400000-0x0000000000475000-memory.dmp
memory/5580-634-0x0000000000400000-0x0000000000475000-memory.dmp
memory/5760-426-0x0000000000400000-0x0000000000475000-memory.dmp
memory/5812-380-0x0000000000400000-0x0000000000475000-memory.dmp
memory/5868-0-0x0000000000400000-0x0000000000475000-memory.dmp
memory/5992-1708-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6076-1808-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6184-1417-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6192-1796-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6312-1706-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6344-1769-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6364-1707-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6388-1771-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6412-779-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6424-1709-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6520-1770-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6536-1762-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6572-1763-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6780-1705-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6800-875-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6856-1765-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6860-1766-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6904-1663-0x0000000000400000-0x0000000000475000-memory.dmp
memory/6980-1761-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7012-1768-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7096-1662-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7128-1661-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7172-1809-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7196-1810-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7208-1811-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7224-1814-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7300-1862-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7380-1855-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7404-1913-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7484-1859-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7572-1861-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7740-1912-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7804-1914-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7852-1916-0x0000000000400000-0x0000000000475000-memory.dmp
memory/7876-2020-0x0000000000400000-0x0000000000475000-memory.dmp