| File name: | 1 (656) |
| Full analysis: | https://app.any.run/tasks/fc71dccb-5c96-4f1f-8ef0-14d5f558c994 |
| Verdict: | Malicious activity |
| Analysis date: | March 25, 2025, 01:44:18 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | 68D77C8AB8A91D4BC1BC0523CFBCE840 |
| SHA1: | 08A0CFAC7410A27A6F7FB2692990FF0015A98016 |
| SHA256: | 10A56575DA627BD6FCE6F3BA742DB3F1A29E78C9FE2E134135DA26012B0211AC |
| SSDEEP: | 6144:L7KTs7IJ7D0LA5l9F4evvofx/uBQlvJGB5/WyXHJIk/8SwjwpyAvEhHxuI115hFa:L+QMyLA5DFzDBmha5OyXHJCx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- Unicorn-62884.exe (PID: 6032)
- 1 (656).exe (PID: 6808)
- Unicorn-61561.exe (PID: 1164)
- Unicorn-42340.exe (PID: 1660)
- Unicorn-8788.exe (PID: 616)
- Unicorn-8788.exe (PID: 3332)
- Unicorn-15757.exe (PID: 7052)
- Unicorn-21301.exe (PID: 5072)
- Unicorn-13044.exe (PID: 2516)
- Unicorn-26043.exe (PID: 1764)
- Unicorn-26043.exe (PID: 960)
- Unicorn-7206.exe (PID: 6620)
- Unicorn-7782.exe (PID: 5116)
- Unicorn-7517.exe (PID: 6736)
- Unicorn-29492.exe (PID: 6644)
- Unicorn-11729.exe (PID: 4628)
- Unicorn-25112.exe (PID: 6972)
- Unicorn-38843.exe (PID: 736)
- Unicorn-1844.exe (PID: 6540)
- Unicorn-51733.exe (PID: 4976)
- Unicorn-23655.exe (PID: 1180)
- Unicorn-56327.exe (PID: 6388)
- Unicorn-23582.exe (PID: 1628)
- Unicorn-1371.exe (PID: 5968)
- Unicorn-12306.exe (PID: 6516)
- Unicorn-17716.exe (PID: 5228)
- Unicorn-23847.exe (PID: 3008)
- Unicorn-1371.exe (PID: 6228)
- Unicorn-23079.exe (PID: 2040)
- Unicorn-58066.exe (PID: 7436)
- Unicorn-10193.exe (PID: 208)
- Unicorn-5990.exe (PID: 7468)
- Unicorn-48242.exe (PID: 7148)
- Unicorn-37127.exe (PID: 7496)
- Unicorn-58268.exe (PID: 7476)
- Unicorn-61749.exe (PID: 7448)
- Unicorn-64053.exe (PID: 7508)
- Unicorn-18029.exe (PID: 7520)
- Unicorn-20101.exe (PID: 7540)
- Unicorn-50116.exe (PID: 7584)
- Unicorn-22706.exe (PID: 7632)
- Unicorn-45404.exe (PID: 7720)
- Unicorn-55762.exe (PID: 7568)
- Unicorn-27314.exe (PID: 7404)
- Unicorn-27532.exe (PID: 7656)
- Unicorn-32056.exe (PID: 7552)
- Unicorn-34189.exe (PID: 7904)
- Unicorn-12145.exe (PID: 7896)
- Unicorn-22535.exe (PID: 7692)
- Unicorn-308.exe (PID: 7744)
- Unicorn-42706.exe (PID: 7956)
- Unicorn-14100.exe (PID: 7868)
- Unicorn-17330.exe (PID: 7728)
- Unicorn-8123.exe (PID: 7664)
- Unicorn-4148.exe (PID: 7604)
- Unicorn-6783.exe (PID: 7680)
- Unicorn-21850.exe (PID: 7704)
- Unicorn-45010.exe (PID: 7648)
- Unicorn-58585.exe (PID: 7672)
- Unicorn-39803.exe (PID: 7712)
- Unicorn-17064.exe (PID: 7736)
- Unicorn-11967.exe (PID: 7752)
- Unicorn-49909.exe (PID: 7980)
- Unicorn-24781.exe (PID: 8004)
- Unicorn-54738.exe (PID: 7256)
- Unicorn-5661.exe (PID: 8124)
- Unicorn-58578.exe (PID: 7172)
- Unicorn-58691.exe (PID: 6512)
- Unicorn-5041.exe (PID: 8060)
- Unicorn-8998.exe (PID: 8160)
- Unicorn-41479.exe (PID: 8148)
- Unicorn-47833.exe (PID: 7988)
- Unicorn-53209.exe (PID: 7844)
- Unicorn-3316.exe (PID: 7268)
- Unicorn-6607.exe (PID: 2240)
- Unicorn-21816.exe (PID: 8224)
- Unicorn-60453.exe (PID: 8640)
- Unicorn-60711.exe (PID: 4448)
- Unicorn-10644.exe (PID: 8672)
- Unicorn-8340.exe (PID: 8700)
- Unicorn-54375.exe (PID: 8296)
- Unicorn-22279.exe (PID: 8244)
- Unicorn-10861.exe (PID: 7292)
- Unicorn-54670.exe (PID: 8168)
- Unicorn-1620.exe (PID: 8776)
- Unicorn-3138.exe (PID: 8132)
- Unicorn-7188.exe (PID: 8092)
- Unicorn-62140.exe (PID: 8048)
- Unicorn-49024.exe (PID: 8896)
- Unicorn-38904.exe (PID: 8484)
- Unicorn-39309.exe (PID: 4180)
- Unicorn-7345.exe (PID: 7832)
- Unicorn-16203.exe (PID: 8040)
- Unicorn-9268.exe (PID: 8140)
- Unicorn-763.exe (PID: 8424)
- Unicorn-4465.exe (PID: 8104)
- Unicorn-57198.exe (PID: 8348)
- Unicorn-14001.exe (PID: 8260)
- Unicorn-4017.exe (PID: 8320)
- Unicorn-17083.exe (PID: 7300)
- Unicorn-64550.exe (PID: 8396)
- Unicorn-44498.exe (PID: 8932)
- Unicorn-63907.exe (PID: 8872)
- Unicorn-22715.exe (PID: 7416)
- Unicorn-24065.exe (PID: 8568)
- Unicorn-1542.exe (PID: 8596)
- Unicorn-4878.exe (PID: 8388)
- Unicorn-9495.exe (PID: 8968)
- Unicorn-24661.exe (PID: 8232)
- Unicorn-58691.exe (PID: 4944)
- Unicorn-44489.exe (PID: 8280)
- Unicorn-62396.exe (PID: 9220)
- Unicorn-30139.exe (PID: 10000)
- Unicorn-24685.exe (PID: 10024)
- Unicorn-12070.exe (PID: 10044)
- Unicorn-48935.exe (PID: 9112)
- Unicorn-34971.exe (PID: 8376)
- Unicorn-65173.exe (PID: 9556)
- Unicorn-47431.exe (PID: 10084)
- Unicorn-21741.exe (PID: 9168)
- Unicorn-45266.exe (PID: 8952)
- Unicorn-39576.exe (PID: 10220)
- Unicorn-44928.exe (PID: 9604)
- Unicorn-7170.exe (PID: 7196)
- Unicorn-28274.exe (PID: 7620)
- Unicorn-43003.exe (PID: 9488)
- Unicorn-34203.exe (PID: 8440)
- Unicorn-34509.exe (PID: 8288)
- Unicorn-32583.exe (PID: 10292)
- Unicorn-5158.exe (PID: 8116)
- Unicorn-30860.exe (PID: 9012)
- Unicorn-9329.exe (PID: 9188)
- Unicorn-35608.exe (PID: 9436)
- Unicorn-47925.exe (PID: 8560)
- Unicorn-40162.exe (PID: 9628)
- Unicorn-42343.exe (PID: 8028)
- Unicorn-11208.exe (PID: 9920)
- Unicorn-49344.exe (PID: 9444)
- Unicorn-21108.exe (PID: 9588)
- Unicorn-45228.exe (PID: 10336)
- Unicorn-17141.exe (PID: 9984)
- Unicorn-56060.exe (PID: 9296)
- Unicorn-51868.exe (PID: 7012)
- Unicorn-52839.exe (PID: 8216)
- Unicorn-44722.exe (PID: 9940)
- Unicorn-57191.exe (PID: 8984)
- Unicorn-55442.exe (PID: 11184)
- Unicorn-38613.exe (PID: 11220)
- Unicorn-29988.exe (PID: 11228)
- Unicorn-26887.exe (PID: 2960)
- Unicorn-45379.exe (PID: 6632)
- Unicorn-44928.exe (PID: 9596)
- Unicorn-23359.exe (PID: 11004)
- Unicorn-44914.exe (PID: 9948)
- Unicorn-49436.exe (PID: 12696)
- Unicorn-3764.exe (PID: 12560)
- Unicorn-58507.exe (PID: 12760)
- Unicorn-22933.exe (PID: 8412)
- Unicorn-58034.exe (PID: 8604)
- Unicorn-4390.exe (PID: 5780)
- Unicorn-31541.exe (PID: 9640)
- Unicorn-404.exe (PID: 9572)
- Unicorn-49564.exe (PID: 7284)
- Unicorn-49689.exe (PID: 8312)
- Unicorn-44583.exe (PID: 8356)
- Unicorn-56739.exe (PID: 9496)
- Unicorn-43047.exe (PID: 8516)
- Unicorn-49397.exe (PID: 3268)
- Unicorn-724.exe (PID: 10576)
- Unicorn-48423.exe (PID: 8456)
- Unicorn-6321.exe (PID: 8448)
- Unicorn-49884.exe (PID: 11712)
- Unicorn-25969.exe (PID: 10904)
- Unicorn-33383.exe (PID: 9408)
- Unicorn-51271.exe (PID: 9956)
- Unicorn-13236.exe (PID: 10960)
- Unicorn-31524.exe (PID: 10772)
- Unicorn-920.exe (PID: 12964)
- Unicorn-15185.exe (PID: 2064)
- Unicorn-48857.exe (PID: 7204)
- Unicorn-52402.exe (PID: 9376)
- Unicorn-57916.exe (PID: 10324)
- Unicorn-27352.exe (PID: 9480)
- Unicorn-52245.exe (PID: 9652)
- Unicorn-52985.exe (PID: 12272)
- Unicorn-35035.exe (PID: 13956)
- Unicorn-56473.exe (PID: 13944)
- Unicorn-10536.exe (PID: 13964)
- Unicorn-50027.exe (PID: 11880)
- Unicorn-61531.exe (PID: 14936)
- Unicorn-41930.exe (PID: 14996)
- Unicorn-42122.exe (PID: 14956)
- Unicorn-46116.exe (PID: 10516)
- Unicorn-28568.exe (PID: 11940)
- Unicorn-53973.exe (PID: 10928)
- Unicorn-41971.exe (PID: 10784)
- Unicorn-34968.exe (PID: 10352)
- Unicorn-4611.exe (PID: 10628)
- Unicorn-48633.exe (PID: 10800)
- Unicorn-29781.exe (PID: 9092)
- Unicorn-23601.exe (PID: 11484)
- Unicorn-28260.exe (PID: 11088)
- Unicorn-64064.exe (PID: 13192)
- Unicorn-5343.exe (PID: 9928)
- Unicorn-56384.exe (PID: 10300)
Executable content was dropped or overwritten
- Unicorn-62884.exe (PID: 6032)
- 1 (656).exe (PID: 6808)
- Unicorn-61561.exe (PID: 1164)
- Unicorn-8788.exe (PID: 3332)
- Unicorn-8788.exe (PID: 616)
- Unicorn-29492.exe (PID: 6644)
- Unicorn-15757.exe (PID: 7052)
- Unicorn-13044.exe (PID: 2516)
- Unicorn-21301.exe (PID: 5072)
- Unicorn-26043.exe (PID: 960)
- Unicorn-7782.exe (PID: 5116)
- Unicorn-1844.exe (PID: 6540)
- Unicorn-26043.exe (PID: 1764)
- Unicorn-42340.exe (PID: 1660)
- Unicorn-7517.exe (PID: 6736)
- Unicorn-11729.exe (PID: 4628)
- Unicorn-25112.exe (PID: 6972)
- Unicorn-10193.exe (PID: 208)
- Unicorn-48242.exe (PID: 7148)
- Unicorn-56327.exe (PID: 6388)
- Unicorn-23655.exe (PID: 1180)
- Unicorn-23582.exe (PID: 1628)
- Unicorn-23847.exe (PID: 3008)
- Unicorn-1371.exe (PID: 5968)
- Unicorn-12306.exe (PID: 6516)
- Unicorn-7206.exe (PID: 6620)
- Unicorn-17716.exe (PID: 5228)
- Unicorn-1371.exe (PID: 6228)
- Unicorn-23079.exe (PID: 2040)
- Unicorn-27314.exe (PID: 7404)
- Unicorn-58066.exe (PID: 7436)
- Unicorn-61749.exe (PID: 7448)
- Unicorn-37127.exe (PID: 7496)
- Unicorn-58268.exe (PID: 7476)
- Unicorn-38843.exe (PID: 736)
- Unicorn-5990.exe (PID: 7468)
- Unicorn-64053.exe (PID: 7508)
- Unicorn-18029.exe (PID: 7520)
- Unicorn-20101.exe (PID: 7540)
- Unicorn-55762.exe (PID: 7568)
- Unicorn-50116.exe (PID: 7584)
- Unicorn-51733.exe (PID: 4976)
- Unicorn-22706.exe (PID: 7632)
- Unicorn-4148.exe (PID: 7604)
- Unicorn-27532.exe (PID: 7656)
- Unicorn-32056.exe (PID: 7552)
- Unicorn-12145.exe (PID: 7896)
- Unicorn-34189.exe (PID: 7904)
- Unicorn-42706.exe (PID: 7956)
- Unicorn-14100.exe (PID: 7868)
- Unicorn-22535.exe (PID: 7692)
- Unicorn-21850.exe (PID: 7704)
- Unicorn-308.exe (PID: 7744)
- Unicorn-17330.exe (PID: 7728)
- Unicorn-6783.exe (PID: 7680)
- Unicorn-8123.exe (PID: 7664)
- Unicorn-28274.exe (PID: 7620)
- Unicorn-58585.exe (PID: 7672)
- Unicorn-45010.exe (PID: 7648)
- Unicorn-39803.exe (PID: 7712)
- Unicorn-17064.exe (PID: 7736)
- Unicorn-11967.exe (PID: 7752)
- Unicorn-49909.exe (PID: 7980)
- Unicorn-24781.exe (PID: 8004)
- Unicorn-54738.exe (PID: 7256)
- Unicorn-8998.exe (PID: 8160)
- Unicorn-58578.exe (PID: 7172)
- Unicorn-5661.exe (PID: 8124)
- Unicorn-41479.exe (PID: 8148)
- Unicorn-58691.exe (PID: 6512)
- Unicorn-5041.exe (PID: 8060)
- Unicorn-3316.exe (PID: 7268)
- Unicorn-53209.exe (PID: 7844)
- Unicorn-60711.exe (PID: 4448)
- Unicorn-6607.exe (PID: 2240)
- Unicorn-47833.exe (PID: 7988)
- Unicorn-21816.exe (PID: 8224)
- Unicorn-60453.exe (PID: 8640)
- Unicorn-10644.exe (PID: 8672)
- Unicorn-45404.exe (PID: 7720)
- Unicorn-8340.exe (PID: 8700)
- Unicorn-54375.exe (PID: 8296)
- Unicorn-17083.exe (PID: 7300)
- Unicorn-10861.exe (PID: 7292)
- Unicorn-1620.exe (PID: 8776)
- Unicorn-3138.exe (PID: 8132)
- Unicorn-7188.exe (PID: 8092)
- Unicorn-54670.exe (PID: 8168)
- Unicorn-62140.exe (PID: 8048)
- Unicorn-38904.exe (PID: 8484)
- Unicorn-49024.exe (PID: 8896)
- Unicorn-7345.exe (PID: 7832)
- Unicorn-9495.exe (PID: 8968)
- Unicorn-763.exe (PID: 8424)
- Unicorn-4878.exe (PID: 8388)
- Unicorn-4465.exe (PID: 8104)
- Unicorn-16203.exe (PID: 8040)
- Unicorn-14001.exe (PID: 8260)
- Unicorn-4017.exe (PID: 8320)
- Unicorn-57198.exe (PID: 8348)
- Unicorn-44498.exe (PID: 8932)
- Unicorn-64550.exe (PID: 8396)
- Unicorn-63907.exe (PID: 8872)
- Unicorn-22715.exe (PID: 7416)
- Unicorn-24065.exe (PID: 8568)
- Unicorn-1542.exe (PID: 8596)
- Unicorn-58691.exe (PID: 4944)
- Unicorn-62396.exe (PID: 9220)
- Unicorn-44489.exe (PID: 8280)
- Unicorn-24661.exe (PID: 8232)
- Unicorn-30139.exe (PID: 10000)
- Unicorn-24685.exe (PID: 10024)
- Unicorn-12070.exe (PID: 10044)
- Unicorn-34509.exe (PID: 8288)
- Unicorn-65173.exe (PID: 9556)
- Unicorn-48935.exe (PID: 9112)
- Unicorn-45266.exe (PID: 8952)
- Unicorn-47431.exe (PID: 10084)
- Unicorn-21741.exe (PID: 9168)
- Unicorn-43003.exe (PID: 9488)
- Unicorn-49344.exe (PID: 9444)
- Unicorn-7170.exe (PID: 7196)
- Unicorn-44928.exe (PID: 9604)
- Unicorn-5343.exe (PID: 9928)
- Unicorn-34203.exe (PID: 8440)
- Unicorn-32583.exe (PID: 10292)
- Unicorn-5158.exe (PID: 8116)
- Unicorn-30860.exe (PID: 9012)
- Unicorn-40162.exe (PID: 9628)
- Unicorn-42343.exe (PID: 8028)
- Unicorn-35608.exe (PID: 9436)
- Unicorn-47925.exe (PID: 8560)
- Unicorn-9329.exe (PID: 9188)
- Unicorn-11208.exe (PID: 9920)
- Unicorn-21108.exe (PID: 9588)
- Unicorn-45228.exe (PID: 10336)
- Unicorn-17141.exe (PID: 9984)
- Unicorn-9268.exe (PID: 8140)
- Unicorn-51868.exe (PID: 7012)
- Unicorn-52839.exe (PID: 8216)
- Unicorn-56060.exe (PID: 9296)
- Unicorn-44722.exe (PID: 9940)
- Unicorn-57191.exe (PID: 8984)
- Unicorn-55442.exe (PID: 11184)
- Unicorn-38613.exe (PID: 11220)
- Unicorn-29988.exe (PID: 11228)
- Unicorn-22279.exe (PID: 8244)
- Unicorn-45379.exe (PID: 6632)
- Unicorn-44928.exe (PID: 9596)
- Unicorn-23359.exe (PID: 11004)
- Unicorn-26887.exe (PID: 2960)
- Unicorn-44914.exe (PID: 9948)
- Unicorn-3764.exe (PID: 12560)
- Unicorn-31541.exe (PID: 9640)
- Unicorn-49436.exe (PID: 12696)
- Unicorn-58507.exe (PID: 12760)
- Unicorn-22933.exe (PID: 8412)
- Unicorn-58034.exe (PID: 8604)
- Unicorn-7289.exe (PID: 11896)
- Unicorn-4390.exe (PID: 5780)
- Unicorn-404.exe (PID: 9572)
- Unicorn-49564.exe (PID: 7284)
- Unicorn-49689.exe (PID: 8312)
- Unicorn-44583.exe (PID: 8356)
- Unicorn-56739.exe (PID: 9496)
- Unicorn-43047.exe (PID: 8516)
- Unicorn-49397.exe (PID: 3268)
- Unicorn-724.exe (PID: 10576)
- Unicorn-48423.exe (PID: 8456)
- Unicorn-51271.exe (PID: 9956)
- Unicorn-13236.exe (PID: 10960)
- Unicorn-25969.exe (PID: 10904)
- Unicorn-33383.exe (PID: 9408)
- Unicorn-6321.exe (PID: 8448)
- Unicorn-49884.exe (PID: 11712)
- Unicorn-31524.exe (PID: 10772)
- Unicorn-920.exe (PID: 12964)
- Unicorn-34968.exe (PID: 10352)
- Unicorn-15185.exe (PID: 2064)
- Unicorn-48857.exe (PID: 7204)
- Unicorn-52402.exe (PID: 9376)
- Unicorn-52985.exe (PID: 12272)
- Unicorn-57916.exe (PID: 10324)
- Unicorn-27352.exe (PID: 9480)
- Unicorn-52245.exe (PID: 9652)
- Unicorn-56473.exe (PID: 13944)
- Unicorn-10536.exe (PID: 13964)
- Unicorn-50027.exe (PID: 11880)
- Unicorn-46116.exe (PID: 10516)
- Unicorn-53973.exe (PID: 10928)
- Unicorn-28568.exe (PID: 11940)
- Unicorn-41971.exe (PID: 10784)
- Unicorn-64064.exe (PID: 13192)
- Unicorn-48633.exe (PID: 10800)
- Unicorn-29365.exe (PID: 10688)
- Unicorn-29781.exe (PID: 9092)
- Unicorn-28260.exe (PID: 11088)
- Unicorn-23601.exe (PID: 11484)
- Unicorn-55659.exe (PID: 10440)
- Unicorn-61333.exe (PID: 9544)
- Unicorn-14408.exe (PID: 10468)
- Unicorn-35879.exe (PID: 9240)
- Unicorn-53045.exe (PID: 9160)
- Unicorn-33930.exe (PID: 3896)
- Unicorn-56384.exe (PID: 10300)
- Unicorn-2964.exe (PID: 8920)
- Unicorn-61531.exe (PID: 14936)
- Unicorn-54578.exe (PID: 13208)
- Unicorn-52985.exe (PID: 6960)
- Unicorn-11569.exe (PID: 13800)
- Unicorn-42122.exe (PID: 14956)
- Unicorn-34971.exe (PID: 8376)
- Unicorn-12646.exe (PID: 10092)
- Unicorn-39576.exe (PID: 10220)
- Unicorn-4611.exe (PID: 10628)
- Unicorn-40181.exe (PID: 9256)
- Unicorn-61938.exe (PID: 10200)
- Unicorn-17912.exe (PID: 15140)
- Unicorn-62501.exe (PID: 9280)
- Unicorn-4500.exe (PID: 8888)
- Unicorn-38948.exe (PID: 11848)
- Unicorn-30354.exe (PID: 14372)
- Unicorn-41930.exe (PID: 14996)
- Unicorn-56825.exe (PID: 11920)
- Unicorn-39309.exe (PID: 4180)
- Unicorn-19640.exe (PID: 16008)
- Unicorn-36149.exe (PID: 9340)
- Unicorn-14648.exe (PID: 9228)
- Unicorn-62368.exe (PID: 10808)
- Unicorn-35242.exe (PID: 13168)
- Unicorn-60444.exe (PID: 11116)
- Unicorn-37603.exe (PID: 12532)
- Unicorn-35035.exe (PID: 13956)
- Unicorn-37226.exe (PID: 10948)
- Unicorn-10114.exe (PID: 10464)
- Unicorn-51595.exe (PID: 13224)
- Unicorn-30482.exe (PID: 16032)
- Unicorn-8642.exe (PID: 11124)
- Unicorn-63424.exe (PID: 8328)
- Unicorn-49881.exe (PID: 8336)
- Unicorn-3314.exe (PID: 10316)
INFO
Checks supported languages
- 1 (656).exe (PID: 6808)
- Unicorn-62884.exe (PID: 6032)
- Unicorn-42340.exe (PID: 1660)
- Unicorn-61561.exe (PID: 1164)
- Unicorn-8788.exe (PID: 616)
- Unicorn-8788.exe (PID: 3332)
- Unicorn-29492.exe (PID: 6644)
- Unicorn-15757.exe (PID: 7052)
- Unicorn-21301.exe (PID: 5072)
- Unicorn-13044.exe (PID: 2516)
- Unicorn-7206.exe (PID: 6620)
- Unicorn-7517.exe (PID: 6736)
- Unicorn-1844.exe (PID: 6540)
- Unicorn-26043.exe (PID: 960)
- Unicorn-26043.exe (PID: 1764)
- Unicorn-7782.exe (PID: 5116)
- Unicorn-25112.exe (PID: 6972)
- Unicorn-11729.exe (PID: 4628)
- Unicorn-10193.exe (PID: 208)
- Unicorn-48242.exe (PID: 7148)
- Unicorn-51733.exe (PID: 4976)
- Unicorn-38843.exe (PID: 736)
- Unicorn-23079.exe (PID: 2040)
- Unicorn-23655.exe (PID: 1180)
- Unicorn-56327.exe (PID: 6388)
- Unicorn-23582.exe (PID: 1628)
- Unicorn-17716.exe (PID: 5228)
- Unicorn-23847.exe (PID: 3008)
- Unicorn-12306.exe (PID: 6516)
- Unicorn-1371.exe (PID: 5968)
- Unicorn-1371.exe (PID: 6228)
- Unicorn-27314.exe (PID: 7404)
- Unicorn-22715.exe (PID: 7416)
- Unicorn-58066.exe (PID: 7436)
- Unicorn-58268.exe (PID: 7476)
- Unicorn-5990.exe (PID: 7468)
- Unicorn-37127.exe (PID: 7496)
- Unicorn-61749.exe (PID: 7448)
- Unicorn-64053.exe (PID: 7508)
- Unicorn-18029.exe (PID: 7520)
- Unicorn-20101.exe (PID: 7540)
- Unicorn-32056.exe (PID: 7552)
- Unicorn-55762.exe (PID: 7568)
- Unicorn-50116.exe (PID: 7584)
- Unicorn-22706.exe (PID: 7632)
- Unicorn-4148.exe (PID: 7604)
- Unicorn-27532.exe (PID: 7656)
- Unicorn-58585.exe (PID: 7672)
- Unicorn-28274.exe (PID: 7620)
- Unicorn-45010.exe (PID: 7648)
- Unicorn-6783.exe (PID: 7680)
- Unicorn-8123.exe (PID: 7664)
- Unicorn-39803.exe (PID: 7712)
- Unicorn-22535.exe (PID: 7692)
- Unicorn-21850.exe (PID: 7704)
- Unicorn-45404.exe (PID: 7720)
- Unicorn-17330.exe (PID: 7728)
- Unicorn-17064.exe (PID: 7736)
- Unicorn-308.exe (PID: 7744)
- Unicorn-11967.exe (PID: 7752)
- Unicorn-12145.exe (PID: 7896)
- Unicorn-34189.exe (PID: 7904)
- Unicorn-42706.exe (PID: 7956)
- Unicorn-7345.exe (PID: 7832)
- Unicorn-53209.exe (PID: 7844)
- Unicorn-14100.exe (PID: 7868)
- Unicorn-49909.exe (PID: 7980)
- Unicorn-42343.exe (PID: 8028)
- Unicorn-47833.exe (PID: 7988)
- Unicorn-62140.exe (PID: 8048)
- Unicorn-5041.exe (PID: 8060)
- Unicorn-24781.exe (PID: 8004)
- Unicorn-7188.exe (PID: 8092)
- Unicorn-3138.exe (PID: 8132)
- Unicorn-5661.exe (PID: 8124)
- Unicorn-9268.exe (PID: 8140)
- Unicorn-16203.exe (PID: 8040)
- Unicorn-4465.exe (PID: 8104)
- Unicorn-5158.exe (PID: 8116)
- Unicorn-8998.exe (PID: 8160)
- Unicorn-54738.exe (PID: 7256)
- Unicorn-3316.exe (PID: 7268)
- Unicorn-41479.exe (PID: 8148)
- Unicorn-7170.exe (PID: 7196)
- Unicorn-17083.exe (PID: 7300)
- Unicorn-58578.exe (PID: 7172)
- Unicorn-10861.exe (PID: 7292)
- Unicorn-58691.exe (PID: 4944)
- Unicorn-54670.exe (PID: 8168)
- Unicorn-39309.exe (PID: 4180)
- Unicorn-51868.exe (PID: 7012)
- Unicorn-4390.exe (PID: 5780)
- Unicorn-58691.exe (PID: 6512)
- Unicorn-24661.exe (PID: 8232)
- Unicorn-52839.exe (PID: 8216)
- Unicorn-21816.exe (PID: 8224)
- Unicorn-6607.exe (PID: 2240)
- Unicorn-33109.exe (PID: 4228)
- Unicorn-60711.exe (PID: 4448)
- Unicorn-14001.exe (PID: 8260)
- Unicorn-44489.exe (PID: 8280)
- Unicorn-34509.exe (PID: 8288)
- Unicorn-60453.exe (PID: 8640)
- Unicorn-54375.exe (PID: 8296)
- Unicorn-49564.exe (PID: 7284)
- Unicorn-22279.exe (PID: 8244)
- Unicorn-10644.exe (PID: 8672)
- Unicorn-4017.exe (PID: 8320)
- Unicorn-63424.exe (PID: 8328)
- Unicorn-8340.exe (PID: 8700)
- Unicorn-49881.exe (PID: 8336)
- Unicorn-4878.exe (PID: 8388)
- Unicorn-57198.exe (PID: 8348)
- Unicorn-34971.exe (PID: 8376)
- Unicorn-64550.exe (PID: 8396)
- Unicorn-49689.exe (PID: 8312)
- Unicorn-44583.exe (PID: 8356)
- Unicorn-763.exe (PID: 8424)
- Unicorn-48423.exe (PID: 8456)
- Unicorn-6321.exe (PID: 8448)
- Unicorn-34203.exe (PID: 8440)
- Unicorn-38904.exe (PID: 8484)
- Unicorn-26887.exe (PID: 2960)
- Unicorn-43047.exe (PID: 8516)
- Unicorn-22933.exe (PID: 8412)
- Unicorn-24065.exe (PID: 8568)
- Unicorn-1542.exe (PID: 8596)
- Unicorn-58034.exe (PID: 8604)
- Unicorn-47925.exe (PID: 8560)
- Unicorn-1620.exe (PID: 8776)
- Unicorn-35864.exe (PID: 8612)
- Unicorn-4500.exe (PID: 8888)
- Unicorn-63907.exe (PID: 8872)
- Unicorn-2964.exe (PID: 8920)
- Unicorn-44498.exe (PID: 8932)
- Unicorn-49024.exe (PID: 8896)
- Unicorn-57191.exe (PID: 8984)
- Unicorn-45769.exe (PID: 9072)
- Unicorn-45266.exe (PID: 8952)
- Unicorn-9495.exe (PID: 8968)
- Unicorn-30860.exe (PID: 9012)
- Unicorn-46631.exe (PID: 9152)
- Unicorn-9329.exe (PID: 9188)
- Unicorn-53045.exe (PID: 9160)
- Unicorn-21741.exe (PID: 9168)
- Unicorn-44249.exe (PID: 8208)
- Unicorn-48857.exe (PID: 7204)
- Unicorn-43256.exe (PID: 7188)
- Unicorn-64690.exe (PID: 8528)
- Unicorn-62396.exe (PID: 9220)
- Unicorn-14648.exe (PID: 9228)
- Unicorn-29781.exe (PID: 9092)
- Unicorn-35879.exe (PID: 9240)
- Unicorn-45379.exe (PID: 6632)
- Unicorn-49397.exe (PID: 3268)
- Unicorn-62501.exe (PID: 9280)
- Unicorn-27352.exe (PID: 9480)
- Unicorn-49344.exe (PID: 9444)
- Unicorn-53756.exe (PID: 9308)
- Unicorn-36149.exe (PID: 9340)
- Unicorn-4244.exe (PID: 9416)
- Unicorn-33383.exe (PID: 9408)
- Unicorn-56060.exe (PID: 9296)
- Unicorn-48935.exe (PID: 9112)
- Unicorn-43003.exe (PID: 9488)
- Unicorn-56739.exe (PID: 9496)
- Unicorn-44928.exe (PID: 9604)
- Unicorn-57010.exe (PID: 9388)
- Unicorn-31541.exe (PID: 9640)
- Unicorn-30139.exe (PID: 10000)
- Unicorn-404.exe (PID: 9572)
- Unicorn-44928.exe (PID: 9596)
- Unicorn-65173.exe (PID: 9556)
- Unicorn-21108.exe (PID: 9588)
- Unicorn-40162.exe (PID: 9628)
- Unicorn-24685.exe (PID: 10024)
- Unicorn-61333.exe (PID: 9544)
- Unicorn-41664.exe (PID: 9512)
- Unicorn-12070.exe (PID: 10044)
- Unicorn-27928.exe (PID: 9504)
- Unicorn-15645.exe (PID: 9872)
- Unicorn-55666.exe (PID: 9452)
- Unicorn-35608.exe (PID: 9436)
- Unicorn-52402.exe (PID: 9376)
- Unicorn-40181.exe (PID: 9256)
- Unicorn-5343.exe (PID: 9928)
- Unicorn-44914.exe (PID: 9948)
- Unicorn-44722.exe (PID: 9940)
- Unicorn-51271.exe (PID: 9956)
- Unicorn-17141.exe (PID: 9984)
- Unicorn-14872.exe (PID: 9992)
- Unicorn-16373.exe (PID: 10072)
- Unicorn-23093.exe (PID: 9668)
- Unicorn-52245.exe (PID: 9652)
- Unicorn-47431.exe (PID: 10084)
- Unicorn-12646.exe (PID: 10092)
- Unicorn-37042.exe (PID: 10160)
- Unicorn-39576.exe (PID: 10220)
- Unicorn-56380.exe (PID: 10176)
- Unicorn-61938.exe (PID: 10200)
- Unicorn-36452.exe (PID: 3024)
- Unicorn-7096.exe (PID: 5324)
- Unicorn-33930.exe (PID: 3896)
- Unicorn-15185.exe (PID: 2064)
- Unicorn-11208.exe (PID: 9920)
- Unicorn-47797.exe (PID: 10260)
- Unicorn-32583.exe (PID: 10292)
- Unicorn-56384.exe (PID: 10300)
- Unicorn-62249.exe (PID: 10308)
- Unicorn-3314.exe (PID: 10316)
- Unicorn-45228.exe (PID: 10336)
- Unicorn-25627.exe (PID: 10344)
- Unicorn-22354.exe (PID: 10364)
- Unicorn-34968.exe (PID: 10352)
- Unicorn-55659.exe (PID: 10440)
- Unicorn-57916.exe (PID: 10324)
- Unicorn-14408.exe (PID: 10468)
- Unicorn-10459.exe (PID: 10476)
- Unicorn-42011.exe (PID: 10504)
- Unicorn-46116.exe (PID: 10516)
- Unicorn-12177.exe (PID: 10724)
- Unicorn-4497.exe (PID: 10764)
- Unicorn-48633.exe (PID: 10800)
- Unicorn-41971.exe (PID: 10784)
- Unicorn-31524.exe (PID: 10772)
- Unicorn-2696.exe (PID: 10792)
- Unicorn-62368.exe (PID: 10808)
- Unicorn-60131.exe (PID: 10568)
- Unicorn-57331.exe (PID: 10584)
- Unicorn-62368.exe (PID: 10816)
- Unicorn-64284.exe (PID: 10824)
- Unicorn-64476.exe (PID: 10840)
- Unicorn-38613.exe (PID: 11220)
- Unicorn-29988.exe (PID: 11228)
- Unicorn-53205.exe (PID: 10896)
- Unicorn-55442.exe (PID: 11184)
- Unicorn-53973.exe (PID: 10928)
- Unicorn-29365.exe (PID: 10688)
- Unicorn-13236.exe (PID: 10960)
- Unicorn-57963.exe (PID: 10608)
- Unicorn-724.exe (PID: 10576)
- Unicorn-6161.exe (PID: 10592)
- Unicorn-4611.exe (PID: 10628)
- Unicorn-50147.exe (PID: 10640)
- Unicorn-12026.exe (PID: 10600)
- Unicorn-39972.exe (PID: 10676)
- Unicorn-28260.exe (PID: 11088)
- Unicorn-44793.exe (PID: 11108)
- Unicorn-25969.exe (PID: 10904)
- Unicorn-37226.exe (PID: 10948)
- Unicorn-16945.exe (PID: 10996)
- Unicorn-60444.exe (PID: 11116)
- Unicorn-12674.exe (PID: 10832)
- Unicorn-42276.exe (PID: 10496)
- Unicorn-43221.exe (PID: 6488)
- Unicorn-8586.exe (PID: 11096)
- Unicorn-8642.exe (PID: 11124)
- Unicorn-6516.exe (PID: 6208)
- Unicorn-31736.exe (PID: 11544)
- Unicorn-42626.exe (PID: 11476)
- Unicorn-15760.exe (PID: 11468)
- Unicorn-51026.exe (PID: 11492)
- Unicorn-31160.exe (PID: 11500)
- Unicorn-63003.exe (PID: 11660)
- Unicorn-65452.exe (PID: 11680)
- Unicorn-107.exe (PID: 11696)
- Unicorn-49884.exe (PID: 11712)
- Unicorn-57284.exe (PID: 11804)
- Unicorn-18890.exe (PID: 11840)
- Unicorn-60629.exe (PID: 11856)
- Unicorn-28568.exe (PID: 11940)
- Unicorn-56825.exe (PID: 11920)
- Unicorn-26037.exe (PID: 11904)
- Unicorn-20466.exe (PID: 11788)
- Unicorn-63619.exe (PID: 11720)
- Unicorn-52370.exe (PID: 11764)
- Unicorn-48924.exe (PID: 11796)
- Unicorn-23359.exe (PID: 11004)
- Unicorn-38948.exe (PID: 11848)
- Unicorn-11739.exe (PID: 11972)
- Unicorn-7289.exe (PID: 11896)
- Unicorn-50027.exe (PID: 11880)
- Unicorn-12881.exe (PID: 11864)
- Unicorn-54485.exe (PID: 12148)
- Unicorn-44128.exe (PID: 11688)
- Unicorn-3947.exe (PID: 11736)
- Unicorn-11978.exe (PID: 12216)
- Unicorn-28533.exe (PID: 11888)
- Unicorn-63920.exe (PID: 4376)
- Unicorn-52985.exe (PID: 12272)
- Unicorn-63840.exe (PID: 12192)
- Unicorn-52985.exe (PID: 12264)
- Unicorn-52985.exe (PID: 12280)
- Unicorn-52985.exe (PID: 6960)
- Unicorn-10595.exe (PID: 11648)
- Unicorn-36914.exe (PID: 12180)
- Unicorn-9265.exe (PID: 11728)
- Unicorn-10114.exe (PID: 10464)
- Unicorn-2632.exe (PID: 4108)
- Unicorn-23601.exe (PID: 11484)
- Unicorn-27293.exe (PID: 11516)
- Unicorn-14034.exe (PID: 3300)
- Unicorn-21621.exe (PID: 12136)
- Unicorn-6602.exe (PID: 5740)
- Unicorn-6602.exe (PID: 4868)
- Unicorn-64402.exe (PID: 11036)
- Unicorn-16834.exe (PID: 5556)
- Unicorn-54050.exe (PID: 11488)
- Unicorn-3764.exe (PID: 12560)
- Unicorn-21860.exe (PID: 12516)
- Unicorn-18267.exe (PID: 12524)
- Unicorn-1474.exe (PID: 12488)
- Unicorn-49436.exe (PID: 12696)
- Unicorn-19556.exe (PID: 12496)
- Unicorn-47620.exe (PID: 12552)
- Unicorn-33016.exe (PID: 12544)
- Unicorn-37603.exe (PID: 12532)
- Unicorn-39986.exe (PID: 12256)
- Unicorn-58507.exe (PID: 12760)
- Unicorn-51148.exe (PID: 11540)
- Unicorn-48466.exe (PID: 12932)
- Unicorn-56485.exe (PID: 12996)
- Unicorn-920.exe (PID: 12964)
- Unicorn-42483.exe (PID: 11448)
- Unicorn-3899.exe (PID: 12984)
- Unicorn-51595.exe (PID: 13300)
- Unicorn-51595.exe (PID: 13248)
- Unicorn-17448.exe (PID: 12892)
- Unicorn-45788.exe (PID: 12900)
- Unicorn-54667.exe (PID: 12872)
- Unicorn-13873.exe (PID: 12852)
- Unicorn-62393.exe (PID: 12808)
- Unicorn-54610.exe (PID: 12820)
- Unicorn-54578.exe (PID: 13208)
- Unicorn-50329.exe (PID: 13184)
- Unicorn-64064.exe (PID: 13192)
- Unicorn-35242.exe (PID: 13168)
- Unicorn-40842.exe (PID: 13160)
- Unicorn-51778.exe (PID: 13176)
- Unicorn-17448.exe (PID: 4572)
- Unicorn-16946.exe (PID: 12880)
- Unicorn-5658.exe (PID: 13132)
- Unicorn-62530.exe (PID: 13144)
- Unicorn-60443.exe (PID: 13200)
- Unicorn-4671.exe (PID: 13328)
- Unicorn-51595.exe (PID: 13224)
- Unicorn-10047.exe (PID: 12940)
- Unicorn-47315.exe (PID: 13004)
- Unicorn-50562.exe (PID: 12792)
- Unicorn-25314.exe (PID: 12948)
- Unicorn-36000.exe (PID: 13152)
- Unicorn-35035.exe (PID: 13956)
- Unicorn-56473.exe (PID: 13944)
- Unicorn-15028.exe (PID: 13320)
- Unicorn-10536.exe (PID: 13964)
- Unicorn-26098.exe (PID: 13536)
- Unicorn-51595.exe (PID: 13636)
- Unicorn-30354.exe (PID: 14372)
- Unicorn-57212.exe (PID: 4008)
- Unicorn-62147.exe (PID: 13616)
- Unicorn-45865.exe (PID: 13232)
- Unicorn-27576.exe (PID: 13552)
- Unicorn-46596.exe (PID: 13608)
- Unicorn-28130.exe (PID: 13592)
- Unicorn-43120.exe (PID: 13572)
- Unicorn-18235.exe (PID: 13480)
- Unicorn-51595.exe (PID: 13628)
- Unicorn-23602.exe (PID: 13544)
- Unicorn-52626.exe (PID: 13600)
- Unicorn-51593.exe (PID: 13560)
- Unicorn-51676.exe (PID: 13488)
- Unicorn-2164.exe (PID: 13580)
- Unicorn-61531.exe (PID: 14936)
- Unicorn-41930.exe (PID: 14996)
- Unicorn-42122.exe (PID: 14956)
- Unicorn-48812.exe (PID: 14480)
- Unicorn-12035.exe (PID: 14424)
- Unicorn-63.exe (PID: 14396)
- Unicorn-54588.exe (PID: 14412)
- Unicorn-18568.exe (PID: 14444)
- Unicorn-49.exe (PID: 14656)
- Unicorn-52866.exe (PID: 14380)
- Unicorn-41266.exe (PID: 14600)
- Unicorn-38203.exe (PID: 14572)
- Unicorn-18602.exe (PID: 14608)
- Unicorn-40147.exe (PID: 14512)
- Unicorn-14339.exe (PID: 14560)
- Unicorn-46628.exe (PID: 14540)
- Unicorn-2004.exe (PID: 14532)
- Unicorn-42034.exe (PID: 14496)
- Unicorn-40147.exe (PID: 14488)
- Unicorn-47131.exe (PID: 14672)
- Unicorn-27530.exe (PID: 14704)
- Unicorn-38466.exe (PID: 14684)
- Unicorn-41266.exe (PID: 14616)
- Unicorn-39093.exe (PID: 14364)
- Unicorn-52786.exe (PID: 14340)
- Unicorn-45060.exe (PID: 13732)
- Unicorn-50482.exe (PID: 14348)
- Unicorn-58346.exe (PID: 1132)
- Unicorn-5658.exe (PID: 13792)
- Unicorn-1986.exe (PID: 13812)
- Unicorn-7011.exe (PID: 13760)
- Unicorn-27530.exe (PID: 14724)
- Unicorn-27530.exe (PID: 14732)
- Unicorn-27530.exe (PID: 14748)
- Unicorn-27530.exe (PID: 14756)
- Unicorn-12817.exe (PID: 14356)
- Unicorn-44080.exe (PID: 13724)
- Unicorn-34962.exe (PID: 14064)
- Unicorn-10545.exe (PID: 13832)
- Unicorn-11569.exe (PID: 13800)
- Unicorn-25813.exe (PID: 13900)
- Unicorn-1986.exe (PID: 13916)
- Unicorn-28130.exe (PID: 13884)
- Unicorn-1396.exe (PID: 13892)
- Unicorn-28130.exe (PID: 13908)
- Unicorn-4671.exe (PID: 13928)
- Unicorn-65397.exe (PID: 13936)
- Unicorn-22264.exe (PID: 13976)
- Unicorn-5928.exe (PID: 14004)
- Unicorn-45682.exe (PID: 14804)
- Unicorn-63036.exe (PID: 14044)
- Unicorn-38139.exe (PID: 14020)
- Unicorn-22801.exe (PID: 14052)
- Unicorn-64181.exe (PID: 14828)
- Unicorn-19640.exe (PID: 16008)
- Unicorn-30482.exe (PID: 16032)
- Unicorn-6138.exe (PID: 16040)
- Unicorn-46226.exe (PID: 14836)
- Unicorn-8191.exe (PID: 14856)
- Unicorn-8191.exe (PID: 14848)
- Unicorn-51547.exe (PID: 14872)
- Unicorn-45682.exe (PID: 14880)
- Unicorn-61531.exe (PID: 14904)
- Unicorn-45682.exe (PID: 14888)
- Unicorn-61531.exe (PID: 14920)
- Unicorn-61531.exe (PID: 14912)
- Unicorn-36330.exe (PID: 14928)
- Unicorn-45443.exe (PID: 15028)
- Unicorn-55666.exe (PID: 15020)
- Unicorn-55666.exe (PID: 15044)
- Unicorn-41930.exe (PID: 15060)
- Unicorn-41930.exe (PID: 15068)
- Unicorn-45682.exe (PID: 14864)
- Unicorn-64619.exe (PID: 14896)
- Unicorn-52866.exe (PID: 15052)
- Unicorn-55666.exe (PID: 15084)
- Unicorn-61531.exe (PID: 14456)
- Unicorn-62786.exe (PID: 14648)
- Unicorn-3057.exe (PID: 14524)
- Unicorn-51851.exe (PID: 14664)
- Unicorn-27530.exe (PID: 14696)
- Unicorn-27530.exe (PID: 14712)
- Unicorn-27530.exe (PID: 14740)
- Unicorn-64723.exe (PID: 13820)
- Unicorn-57973.exe (PID: 13984)
- Unicorn-31839.exe (PID: 15312)
- Unicorn-18104.exe (PID: 15256)
- Unicorn-39338.exe (PID: 15292)
- Unicorn-58674.exe (PID: 15272)
- Unicorn-41930.exe (PID: 15076)
- Unicorn-55666.exe (PID: 14404)
- Unicorn-64981.exe (PID: 15996)
- Unicorn-31157.exe (PID: 16108)
- Unicorn-56361.exe (PID: 15924)
- Unicorn-55765.exe (PID: 16168)
- Unicorn-18002.exe (PID: 16088)
- Unicorn-64981.exe (PID: 15992)
- Unicorn-29045.exe (PID: 15984)
- Unicorn-50212.exe (PID: 15932)
- Unicorn-36175.exe (PID: 16060)
- Unicorn-41930.exe (PID: 15092)
- Unicorn-16890.exe (PID: 15796)
- Unicorn-48226.exe (PID: 15940)
- Unicorn-63986.exe (PID: 15216)
- Unicorn-19402.exe (PID: 15976)
- Unicorn-22712.exe (PID: 15336)
- Unicorn-12504.exe (PID: 15244)
- Unicorn-44939.exe (PID: 15264)
- Unicorn-64213.exe (PID: 16136)
- Unicorn-37705.exe (PID: 15228)
The sample compiled with chinese language support
- 1 (656).exe (PID: 6808)
Reads the computer name
- 1 (656).exe (PID: 6808)
- Unicorn-62884.exe (PID: 6032)
- Unicorn-61561.exe (PID: 1164)
- Unicorn-42340.exe (PID: 1660)
- Unicorn-8788.exe (PID: 3332)
- Unicorn-15757.exe (PID: 7052)
- Unicorn-21301.exe (PID: 5072)
- Unicorn-8788.exe (PID: 616)
- Unicorn-29492.exe (PID: 6644)
- Unicorn-13044.exe (PID: 2516)
- Unicorn-7782.exe (PID: 5116)
- Unicorn-26043.exe (PID: 1764)
- Unicorn-26043.exe (PID: 960)
- Unicorn-1844.exe (PID: 6540)
- Unicorn-7206.exe (PID: 6620)
- Unicorn-7517.exe (PID: 6736)
- Unicorn-11729.exe (PID: 4628)
- Unicorn-25112.exe (PID: 6972)
- Unicorn-38843.exe (PID: 736)
- Unicorn-10193.exe (PID: 208)
- Unicorn-51733.exe (PID: 4976)
- Unicorn-48242.exe (PID: 7148)
- Unicorn-56327.exe (PID: 6388)
- Unicorn-23655.exe (PID: 1180)
- Unicorn-23582.exe (PID: 1628)
- Unicorn-23847.exe (PID: 3008)
- Unicorn-1371.exe (PID: 5968)
- Unicorn-12306.exe (PID: 6516)
- Unicorn-17716.exe (PID: 5228)
- Unicorn-23079.exe (PID: 2040)
- Unicorn-1371.exe (PID: 6228)
- Unicorn-27314.exe (PID: 7404)
- Unicorn-22715.exe (PID: 7416)
- Unicorn-61749.exe (PID: 7448)
- Unicorn-58066.exe (PID: 7436)
- Unicorn-5990.exe (PID: 7468)
- Unicorn-37127.exe (PID: 7496)
- Unicorn-18029.exe (PID: 7520)
- Unicorn-20101.exe (PID: 7540)
- Unicorn-32056.exe (PID: 7552)
- Unicorn-64053.exe (PID: 7508)
- Unicorn-55762.exe (PID: 7568)
- Unicorn-50116.exe (PID: 7584)
- Unicorn-22706.exe (PID: 7632)
- Unicorn-4148.exe (PID: 7604)
- Unicorn-45404.exe (PID: 7720)
- Unicorn-27532.exe (PID: 7656)
- Unicorn-34189.exe (PID: 7904)
- Unicorn-42706.exe (PID: 7956)
- Unicorn-21850.exe (PID: 7704)
- Unicorn-14100.exe (PID: 7868)
- Unicorn-12145.exe (PID: 7896)
- Unicorn-8123.exe (PID: 7664)
- Unicorn-17330.exe (PID: 7728)
- Unicorn-308.exe (PID: 7744)
- Unicorn-45010.exe (PID: 7648)
- Unicorn-22535.exe (PID: 7692)
- Unicorn-6783.exe (PID: 7680)
- Unicorn-39803.exe (PID: 7712)
- Unicorn-17064.exe (PID: 7736)
- Unicorn-28274.exe (PID: 7620)
- Unicorn-58585.exe (PID: 7672)
- Unicorn-49909.exe (PID: 7980)
- Unicorn-54738.exe (PID: 7256)
- Unicorn-11967.exe (PID: 7752)
- Unicorn-5661.exe (PID: 8124)
- Unicorn-24781.exe (PID: 8004)
- Unicorn-8998.exe (PID: 8160)
- Unicorn-41479.exe (PID: 8148)
- Unicorn-58578.exe (PID: 7172)
- Unicorn-5041.exe (PID: 8060)
- Unicorn-47833.exe (PID: 7988)
- Unicorn-58691.exe (PID: 6512)
- Unicorn-3316.exe (PID: 7268)
- Unicorn-60711.exe (PID: 4448)
- Unicorn-6607.exe (PID: 2240)
- Unicorn-53209.exe (PID: 7844)
- Unicorn-21816.exe (PID: 8224)
- Unicorn-58268.exe (PID: 7476)
- Unicorn-60453.exe (PID: 8640)
- Unicorn-10644.exe (PID: 8672)
- Unicorn-8340.exe (PID: 8700)
- Unicorn-54375.exe (PID: 8296)
- Unicorn-22279.exe (PID: 8244)
- Unicorn-17083.exe (PID: 7300)
- Unicorn-7345.exe (PID: 7832)
- Unicorn-10861.exe (PID: 7292)
- Unicorn-54670.exe (PID: 8168)
- Unicorn-1620.exe (PID: 8776)
- Unicorn-3138.exe (PID: 8132)
- Unicorn-62140.exe (PID: 8048)
- Unicorn-38904.exe (PID: 8484)
- Unicorn-49024.exe (PID: 8896)
- Unicorn-7188.exe (PID: 8092)
- Unicorn-763.exe (PID: 8424)
- Unicorn-9495.exe (PID: 8968)
- Unicorn-39309.exe (PID: 4180)
- Unicorn-9268.exe (PID: 8140)
- Unicorn-57198.exe (PID: 8348)
- Unicorn-14001.exe (PID: 8260)
- Unicorn-4017.exe (PID: 8320)
- Unicorn-4465.exe (PID: 8104)
- Unicorn-16203.exe (PID: 8040)
- Unicorn-4878.exe (PID: 8388)
- Unicorn-64550.exe (PID: 8396)
- Unicorn-63907.exe (PID: 8872)
- Unicorn-44498.exe (PID: 8932)
- Unicorn-24065.exe (PID: 8568)
- Unicorn-45266.exe (PID: 8952)
- Unicorn-24661.exe (PID: 8232)
- Unicorn-58691.exe (PID: 4944)
- Unicorn-1542.exe (PID: 8596)
- Unicorn-44489.exe (PID: 8280)
- Unicorn-21741.exe (PID: 9168)
- Unicorn-62396.exe (PID: 9220)
- Unicorn-30139.exe (PID: 10000)
- Unicorn-24685.exe (PID: 10024)
- Unicorn-47431.exe (PID: 10084)
- Unicorn-34971.exe (PID: 8376)
- Unicorn-65173.exe (PID: 9556)
- Unicorn-7170.exe (PID: 7196)
- Unicorn-34203.exe (PID: 8440)
- Unicorn-30860.exe (PID: 9012)
- Unicorn-12070.exe (PID: 10044)
- Unicorn-48935.exe (PID: 9112)
- Unicorn-34509.exe (PID: 8288)
- Unicorn-26887.exe (PID: 2960)
- Unicorn-49344.exe (PID: 9444)
- Unicorn-39576.exe (PID: 10220)
- Unicorn-43003.exe (PID: 9488)
- Unicorn-44928.exe (PID: 9604)
- Unicorn-5343.exe (PID: 9928)
- Unicorn-21108.exe (PID: 9588)
- Unicorn-11208.exe (PID: 9920)
- Unicorn-5158.exe (PID: 8116)
- Unicorn-32583.exe (PID: 10292)
- Unicorn-9329.exe (PID: 9188)
- Unicorn-40162.exe (PID: 9628)
- Unicorn-42343.exe (PID: 8028)
- Unicorn-35608.exe (PID: 9436)
- Unicorn-56060.exe (PID: 9296)
- Unicorn-45228.exe (PID: 10336)
- Unicorn-17141.exe (PID: 9984)
- Unicorn-47925.exe (PID: 8560)
- Unicorn-51868.exe (PID: 7012)
- Unicorn-44722.exe (PID: 9940)
- Unicorn-52839.exe (PID: 8216)
- Unicorn-57191.exe (PID: 8984)
- Unicorn-55442.exe (PID: 11184)
- Unicorn-38613.exe (PID: 11220)
- Unicorn-45379.exe (PID: 6632)
- Unicorn-44928.exe (PID: 9596)
- Unicorn-29988.exe (PID: 11228)
- Unicorn-23359.exe (PID: 11004)
- Unicorn-31541.exe (PID: 9640)
- Unicorn-49689.exe (PID: 8312)
- Unicorn-44583.exe (PID: 8356)
- Unicorn-44914.exe (PID: 9948)
- Unicorn-49397.exe (PID: 3268)
- Unicorn-3764.exe (PID: 12560)
- Unicorn-49436.exe (PID: 12696)
- Unicorn-7289.exe (PID: 11896)
- Unicorn-48423.exe (PID: 8456)
- Unicorn-49564.exe (PID: 7284)
- Unicorn-58507.exe (PID: 12760)
- Unicorn-4390.exe (PID: 5780)
- Unicorn-404.exe (PID: 9572)
- Unicorn-56739.exe (PID: 9496)
- Unicorn-724.exe (PID: 10576)
- Unicorn-43047.exe (PID: 8516)
- Unicorn-22933.exe (PID: 8412)
- Unicorn-58034.exe (PID: 8604)
- Unicorn-6321.exe (PID: 8448)
- Unicorn-15185.exe (PID: 2064)
- Unicorn-34968.exe (PID: 10352)
- Unicorn-52245.exe (PID: 9652)
- Unicorn-52985.exe (PID: 12272)
- Unicorn-40181.exe (PID: 9256)
- Unicorn-49884.exe (PID: 11712)
- Unicorn-57916.exe (PID: 10324)
- Unicorn-48857.exe (PID: 7204)
- Unicorn-50027.exe (PID: 11880)
- Unicorn-33383.exe (PID: 9408)
- Unicorn-51271.exe (PID: 9956)
- Unicorn-920.exe (PID: 12964)
- Unicorn-12646.exe (PID: 10092)
- Unicorn-13236.exe (PID: 10960)
- Unicorn-25969.exe (PID: 10904)
- Unicorn-31524.exe (PID: 10772)
- Unicorn-52402.exe (PID: 9376)
- Unicorn-56384.exe (PID: 10300)
- Unicorn-27352.exe (PID: 9480)
- Unicorn-35035.exe (PID: 13956)
- Unicorn-56473.exe (PID: 13944)
- Unicorn-10536.exe (PID: 13964)
- Unicorn-61531.exe (PID: 14936)
- Unicorn-41930.exe (PID: 14996)
- Unicorn-42122.exe (PID: 14956)
- Unicorn-28568.exe (PID: 11940)
- Unicorn-41971.exe (PID: 10784)
- Unicorn-55659.exe (PID: 10440)
- Unicorn-4611.exe (PID: 10628)
- Unicorn-61333.exe (PID: 9544)
- Unicorn-64064.exe (PID: 13192)
- Unicorn-46116.exe (PID: 10516)
- Unicorn-53973.exe (PID: 10928)
- Unicorn-29781.exe (PID: 9092)
- Unicorn-48633.exe (PID: 10800)
- Unicorn-29365.exe (PID: 10688)
- Unicorn-23601.exe (PID: 11484)
- Unicorn-28260.exe (PID: 11088)
- Unicorn-35879.exe (PID: 9240)
- Unicorn-14408.exe (PID: 10468)
Create files in a temporary directory
- Unicorn-62884.exe (PID: 6032)
- 1 (656).exe (PID: 6808)
- Unicorn-61561.exe (PID: 1164)
- Unicorn-8788.exe (PID: 3332)
- Unicorn-8788.exe (PID: 616)
- Unicorn-29492.exe (PID: 6644)
- Unicorn-15757.exe (PID: 7052)
- Unicorn-21301.exe (PID: 5072)
- Unicorn-13044.exe (PID: 2516)
- Unicorn-42340.exe (PID: 1660)
- Unicorn-26043.exe (PID: 960)
- Unicorn-7782.exe (PID: 5116)
- Unicorn-26043.exe (PID: 1764)
- Unicorn-7517.exe (PID: 6736)
- Unicorn-10193.exe (PID: 208)
- Unicorn-38843.exe (PID: 736)
- Unicorn-1844.exe (PID: 6540)
- Unicorn-48242.exe (PID: 7148)
- Unicorn-56327.exe (PID: 6388)
- Unicorn-23847.exe (PID: 3008)
- Unicorn-23655.exe (PID: 1180)
- Unicorn-23582.exe (PID: 1628)
- Unicorn-1371.exe (PID: 5968)
- Unicorn-7206.exe (PID: 6620)
- Unicorn-12306.exe (PID: 6516)
- Unicorn-17716.exe (PID: 5228)
- Unicorn-1371.exe (PID: 6228)
- Unicorn-23079.exe (PID: 2040)
- Unicorn-27314.exe (PID: 7404)
- Unicorn-11729.exe (PID: 4628)
- Unicorn-58066.exe (PID: 7436)
- Unicorn-25112.exe (PID: 6972)
- Unicorn-61749.exe (PID: 7448)
- Unicorn-5990.exe (PID: 7468)
- Unicorn-37127.exe (PID: 7496)
- Unicorn-58268.exe (PID: 7476)
- Unicorn-64053.exe (PID: 7508)
- Unicorn-18029.exe (PID: 7520)
- Unicorn-55762.exe (PID: 7568)
- Unicorn-20101.exe (PID: 7540)
- Unicorn-22706.exe (PID: 7632)
- Unicorn-51733.exe (PID: 4976)
- Unicorn-4148.exe (PID: 7604)
- Unicorn-50116.exe (PID: 7584)
- Unicorn-27532.exe (PID: 7656)
- Unicorn-32056.exe (PID: 7552)
- Unicorn-12145.exe (PID: 7896)
- Unicorn-34189.exe (PID: 7904)
- Unicorn-42706.exe (PID: 7956)
- Unicorn-22535.exe (PID: 7692)
- Unicorn-14100.exe (PID: 7868)
- Unicorn-308.exe (PID: 7744)
- Unicorn-21850.exe (PID: 7704)
- Unicorn-8123.exe (PID: 7664)
- Unicorn-17330.exe (PID: 7728)
- Unicorn-6783.exe (PID: 7680)
- Unicorn-28274.exe (PID: 7620)
- Unicorn-58585.exe (PID: 7672)
- Unicorn-45010.exe (PID: 7648)
- Unicorn-39803.exe (PID: 7712)
- Unicorn-17064.exe (PID: 7736)
- Unicorn-49909.exe (PID: 7980)
- Unicorn-11967.exe (PID: 7752)
- Unicorn-54738.exe (PID: 7256)
- Unicorn-24781.exe (PID: 8004)
- Unicorn-5661.exe (PID: 8124)
- Unicorn-58578.exe (PID: 7172)
- Unicorn-41479.exe (PID: 8148)
- Unicorn-58691.exe (PID: 6512)
- Unicorn-5041.exe (PID: 8060)
- Unicorn-8998.exe (PID: 8160)
- Unicorn-53209.exe (PID: 7844)
- Unicorn-3316.exe (PID: 7268)
- Unicorn-6607.exe (PID: 2240)
- Unicorn-60711.exe (PID: 4448)
- Unicorn-47833.exe (PID: 7988)
- Unicorn-21816.exe (PID: 8224)
- Unicorn-60453.exe (PID: 8640)
- Unicorn-10644.exe (PID: 8672)
- Unicorn-8340.exe (PID: 8700)
- Unicorn-45404.exe (PID: 7720)
- Unicorn-54375.exe (PID: 8296)
- Unicorn-17083.exe (PID: 7300)
- Unicorn-10861.exe (PID: 7292)
- Unicorn-54670.exe (PID: 8168)
- Unicorn-3138.exe (PID: 8132)
- Unicorn-1620.exe (PID: 8776)
- Unicorn-7188.exe (PID: 8092)
- Unicorn-38904.exe (PID: 8484)
- Unicorn-7345.exe (PID: 7832)
- Unicorn-62140.exe (PID: 8048)
- Unicorn-49024.exe (PID: 8896)
- Unicorn-9495.exe (PID: 8968)
- Unicorn-4878.exe (PID: 8388)
- Unicorn-16203.exe (PID: 8040)
- Unicorn-763.exe (PID: 8424)
- Unicorn-4465.exe (PID: 8104)
- Unicorn-14001.exe (PID: 8260)
- Unicorn-4017.exe (PID: 8320)
- Unicorn-57198.exe (PID: 8348)
- Unicorn-44498.exe (PID: 8932)
- Unicorn-64550.exe (PID: 8396)
- Unicorn-63907.exe (PID: 8872)
- Unicorn-22715.exe (PID: 7416)
- Unicorn-24065.exe (PID: 8568)
- Unicorn-1542.exe (PID: 8596)
- Unicorn-58691.exe (PID: 4944)
- Unicorn-44489.exe (PID: 8280)
- Unicorn-62396.exe (PID: 9220)
- Unicorn-24661.exe (PID: 8232)
- Unicorn-12070.exe (PID: 10044)
- Unicorn-24685.exe (PID: 10024)
- Unicorn-30139.exe (PID: 10000)
- Unicorn-34509.exe (PID: 8288)
- Unicorn-48935.exe (PID: 9112)
- Unicorn-65173.exe (PID: 9556)
- Unicorn-21741.exe (PID: 9168)
- Unicorn-45266.exe (PID: 8952)
- Unicorn-47431.exe (PID: 10084)
- Unicorn-49344.exe (PID: 9444)
- Unicorn-44928.exe (PID: 9604)
- Unicorn-5343.exe (PID: 9928)
- Unicorn-43003.exe (PID: 9488)
- Unicorn-7170.exe (PID: 7196)
- Unicorn-34203.exe (PID: 8440)
- Unicorn-5158.exe (PID: 8116)
- Unicorn-30860.exe (PID: 9012)
- Unicorn-32583.exe (PID: 10292)
- Unicorn-47925.exe (PID: 8560)
- Unicorn-35608.exe (PID: 9436)
- Unicorn-21108.exe (PID: 9588)
- Unicorn-9329.exe (PID: 9188)
- Unicorn-40162.exe (PID: 9628)
- Unicorn-42343.exe (PID: 8028)
- Unicorn-11208.exe (PID: 9920)
- Unicorn-45228.exe (PID: 10336)
- Unicorn-17141.exe (PID: 9984)
- Unicorn-51868.exe (PID: 7012)
- Unicorn-52839.exe (PID: 8216)
- Unicorn-9268.exe (PID: 8140)
- Unicorn-56060.exe (PID: 9296)
- Unicorn-44722.exe (PID: 9940)
- Unicorn-57191.exe (PID: 8984)
- Unicorn-55442.exe (PID: 11184)
- Unicorn-29988.exe (PID: 11228)
- Unicorn-22279.exe (PID: 8244)
- Unicorn-38613.exe (PID: 11220)
- Unicorn-45379.exe (PID: 6632)
- Unicorn-44928.exe (PID: 9596)
- Unicorn-23359.exe (PID: 11004)
- Unicorn-26887.exe (PID: 2960)
- Unicorn-44914.exe (PID: 9948)
- Unicorn-31541.exe (PID: 9640)
- Unicorn-49436.exe (PID: 12696)
- Unicorn-3764.exe (PID: 12560)
- Unicorn-58507.exe (PID: 12760)
- Unicorn-58034.exe (PID: 8604)
- Unicorn-7289.exe (PID: 11896)
- Unicorn-22933.exe (PID: 8412)
- Unicorn-4390.exe (PID: 5780)
- Unicorn-404.exe (PID: 9572)
- Unicorn-44583.exe (PID: 8356)
- Unicorn-49564.exe (PID: 7284)
- Unicorn-49689.exe (PID: 8312)
- Unicorn-56739.exe (PID: 9496)
- Unicorn-43047.exe (PID: 8516)
- Unicorn-724.exe (PID: 10576)
- Unicorn-48423.exe (PID: 8456)
- Unicorn-6321.exe (PID: 8448)
- Unicorn-49397.exe (PID: 3268)
- Unicorn-49884.exe (PID: 11712)
- Unicorn-51271.exe (PID: 9956)
- Unicorn-920.exe (PID: 12964)
- Unicorn-25969.exe (PID: 10904)
- Unicorn-13236.exe (PID: 10960)
- Unicorn-33383.exe (PID: 9408)
- Unicorn-34968.exe (PID: 10352)
- Unicorn-15185.exe (PID: 2064)
- Unicorn-31524.exe (PID: 10772)
- Unicorn-48857.exe (PID: 7204)
- Unicorn-52402.exe (PID: 9376)
- Unicorn-39576.exe (PID: 10220)
- Unicorn-52985.exe (PID: 12272)
- Unicorn-57916.exe (PID: 10324)
- Unicorn-27352.exe (PID: 9480)
- Unicorn-52245.exe (PID: 9652)
- Unicorn-56473.exe (PID: 13944)
- Unicorn-50027.exe (PID: 11880)
- Unicorn-10536.exe (PID: 13964)
- Unicorn-61531.exe (PID: 14936)
- Unicorn-41930.exe (PID: 14996)
- Unicorn-46116.exe (PID: 10516)
- Unicorn-53973.exe (PID: 10928)
- Unicorn-28568.exe (PID: 11940)
- Unicorn-41971.exe (PID: 10784)
- Unicorn-64064.exe (PID: 13192)
Reads the software policy settings
- BackgroundTransferHost.exe (PID: 5228)
- slui.exe (PID: 5200)
Creates files or folders in the user directory
- BackgroundTransferHost.exe (PID: 5228)
Reads security settings of Internet Explorer
- BackgroundTransferHost.exe (PID: 2852)
- BackgroundTransferHost.exe (PID: 2420)
- BackgroundTransferHost.exe (PID: 5228)
- BackgroundTransferHost.exe (PID: 6392)
- BackgroundTransferHost.exe (PID: 2148)
Checks proxy server information
- BackgroundTransferHost.exe (PID: 5228)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
688
Monitored processes
554
Malicious processes
86
Suspicious processes
65
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 208 | C:\Users\admin\AppData\Local\Temp\Unicorn-10193.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-10193.exe | Unicorn-13044.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 616 | C:\Users\admin\AppData\Local\Temp\Unicorn-8788.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-8788.exe | Unicorn-42340.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 684 | C:\Users\admin\AppData\Local\Temp\Unicorn-33787.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-33787.exe | — | Unicorn-50116.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 736 | C:\Users\admin\AppData\Local\Temp\Unicorn-38843.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-38843.exe | Unicorn-8788.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 960 | C:\Users\admin\AppData\Local\Temp\Unicorn-26043.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-26043.exe | Unicorn-61561.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1132 | C:\Users\admin\AppData\Local\Temp\Unicorn-58346.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-58346.exe | — | Unicorn-42340.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1164 | C:\Users\admin\AppData\Local\Temp\Unicorn-61561.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-61561.exe | 1 (656).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1180 | C:\Users\admin\AppData\Local\Temp\Unicorn-23655.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-23655.exe | Unicorn-7782.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1628 | C:\Users\admin\AppData\Local\Temp\Unicorn-23582.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-23582.exe | Unicorn-62884.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1660 | C:\Users\admin\AppData\Local\Temp\Unicorn-42340.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-42340.exe | Unicorn-62884.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
12 378
Read events
12 363
Write events
15
Delete events
0
Modification events
| (PID) Process: | (2420) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (2420) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (2420) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (5228) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (5228) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (5228) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (2852) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (2852) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (2852) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (6392) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
Executable files
827
Suspicious files
5
Text files
0
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 5228 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\72606e47-eb23-4e1e-b796-264f4bb1fc87.down_data | — | |
MD5:— | SHA256:— | |||
| 6808 | 1 (656).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-61561.exe | executable | |
MD5:B62F2A70D5DAD3FF8F40D5B8F9815AB9 | SHA256:65D84D2F6AA19F08BA7FD22637A0FCBC26FC44755AEAF485FBB2938F984683B5 | |||
| 6644 | Unicorn-29492.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-7206.exe | executable | |
MD5:02783433729C25328EE799F5086E01EC | SHA256:9BF183783A974ECD9461D7FDF8F904BA9B890B564C183BEE19A9046765FE50A4 | |||
| 6032 | Unicorn-62884.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-42340.exe | executable | |
MD5:9CEE1B16A22F95DD020BC9A2997EB81F | SHA256:F070A7E6AD4A818E5F379B88B366C178B46448C1C16319879C27461888D42BB5 | |||
| 616 | Unicorn-8788.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13044.exe | executable | |
MD5:153441470D69DCE4626DC62D1D3A679B | SHA256:3BF6C00404DBC63B5C44AD6DF6172DCCCE47FF31868D13CFBA0640F97A66341E | |||
| 6032 | Unicorn-62884.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-15757.exe | executable | |
MD5:8FE8132E1376AB3C101F03D288C131B7 | SHA256:68DC889BA0B128865C0C181AD9AF11F2478E1300B4A5496CD3883450B99C9828 | |||
| 1164 | Unicorn-61561.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-8788.exe | executable | |
MD5:522085277BD9A817F35D5F386370605B | SHA256:B274ADF228BF47FCF5FBBEFADB32BE1AA62D8C253C3E003592101ADE9EB496A6 | |||
| 6808 | 1 (656).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-62884.exe | executable | |
MD5:67D27A22455365A89167362701A03640 | SHA256:F85B9B9BB1B7DFEC6DBE73D88EC509522A2A50A55A5551EAB3D7D75B207E911A | |||
| 6808 | 1 (656).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-29492.exe | executable | |
MD5:E03A5D581B39E45C176A52AB63856B02 | SHA256:ACFDF84AE3F272D7220866DE21CB276C184CF960FB05FC97F73B196811DBFB20 | |||
| 5228 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\7641db8a-b127-4302-835e-86b6cf95e5ca.up_meta_secure | binary | |
MD5:72884B21B2B35C854DD6A7A5000CED35 | SHA256:F9789EA128513B20D5452FF9A832AF48276DBCAD323430917E87C9CD22099BEE | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
24
DNS requests
16
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
— | — | GET | 200 | 23.216.77.6:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6372 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
2148 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
2148 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
5228 | BackgroundTransferHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
— | — | 23.216.77.6:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
3216 | svchost.exe | 40.113.103.199:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 40.126.31.71:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
6372 | backgroundTaskHost.exe | 20.31.169.57:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6372 | backgroundTaskHost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
5228 | BackgroundTransferHost.exe | 104.126.37.185:443 | www.bing.com | Akamai International B.V. | DE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
www.bing.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |