| File name: | 1 (68) |
| Full analysis: | https://app.any.run/tasks/68b65047-585b-41ee-9b35-b03451b0bf0e |
| Verdict: | Malicious activity |
| Analysis date: | March 25, 2025, 04:01:31 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | 1C6368195E23008482787982D2F542D0 |
| SHA1: | 4AF98CA6F2476A2BA447E68EE543D8167CC74C6B |
| SHA256: | 4BA3DCB4400D2362AA4D71B64B6FA5AD43DC9B6CEE838DC52D988F1BF2C43D99 |
| SSDEEP: | 6144:a7K8f7ICLD1HA5DlUHe+1Afx/tBQlvJGBH/WyeOiFk/8SwjwpyAvEh70sc8+svZa:a+aM8HA55U+TBmhaHOyeOiBx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- 1 (68).exe (PID: 5072)
- Unicorn-49528.exe (PID: 668)
- Unicorn-61967.exe (PID: 5256)
- Unicorn-11697.exe (PID: 920)
- Unicorn-15527.exe (PID: 5740)
- Unicorn-47899.exe (PID: 5008)
- Unicorn-48491.exe (PID: 4980)
- Unicorn-28049.exe (PID: 5376)
- Unicorn-27752.exe (PID: 1164)
- Unicorn-58029.exe (PID: 2236)
- Unicorn-58790.exe (PID: 6040)
- Unicorn-33426.exe (PID: 4024)
- Unicorn-60891.exe (PID: 1764)
- Unicorn-33400.exe (PID: 1184)
- Unicorn-8353.exe (PID: 1388)
- Unicorn-64783.exe (PID: 2420)
- Unicorn-19112.exe (PID: 2268)
- Unicorn-12213.exe (PID: 5360)
- Unicorn-53019.exe (PID: 5400)
- Unicorn-35842.exe (PID: 5756)
- Unicorn-44006.exe (PID: 6592)
- Unicorn-36299.exe (PID: 4188)
- Unicorn-46806.exe (PID: 1760)
- Unicorn-32385.exe (PID: 6752)
- Unicorn-6856.exe (PID: 2140)
- Unicorn-17118.exe (PID: 2552)
- Unicorn-35339.exe (PID: 1240)
- Unicorn-62834.exe (PID: 4008)
- Unicorn-48411.exe (PID: 3900)
- Unicorn-12209.exe (PID: 5344)
- Unicorn-31691.exe (PID: 5116)
- Unicorn-23113.exe (PID: 1912)
- Unicorn-34680.exe (PID: 644)
- Unicorn-57849.exe (PID: 6700)
- Unicorn-48530.exe (PID: 7224)
- Unicorn-20451.exe (PID: 7260)
- Unicorn-58909.exe (PID: 7216)
- Unicorn-12593.exe (PID: 7236)
- Unicorn-46719.exe (PID: 7200)
- Unicorn-40003.exe (PID: 7176)
- Unicorn-23435.exe (PID: 7344)
- Unicorn-23928.exe (PID: 7252)
- Unicorn-36049.exe (PID: 7380)
- Unicorn-39963.exe (PID: 7352)
- Unicorn-33640.exe (PID: 7336)
- Unicorn-42267.exe (PID: 7396)
- Unicorn-47662.exe (PID: 7368)
- Unicorn-42594.exe (PID: 7760)
- Unicorn-42859.exe (PID: 7768)
- Unicorn-60456.exe (PID: 7672)
- Unicorn-28369.exe (PID: 7508)
- Unicorn-29382.exe (PID: 7832)
- Unicorn-36315.exe (PID: 7656)
- Unicorn-55567.exe (PID: 7412)
- Unicorn-10952.exe (PID: 5556)
- Unicorn-25931.exe (PID: 7404)
- Unicorn-47659.exe (PID: 7944)
- Unicorn-37976.exe (PID: 8020)
- Unicorn-8058.exe (PID: 7324)
- Unicorn-1047.exe (PID: 7192)
- Unicorn-17016.exe (PID: 7788)
- Unicorn-24203.exe (PID: 7312)
- Unicorn-9781.exe (PID: 7824)
- Unicorn-18059.exe (PID: 7516)
- Unicorn-54710.exe (PID: 7884)
- Unicorn-48619.exe (PID: 7500)
- Unicorn-37218.exe (PID: 1132)
- Unicorn-8951.exe (PID: 6656)
- Unicorn-49463.exe (PID: 7860)
- Unicorn-2033.exe (PID: 7276)
- Unicorn-14248.exe (PID: 8088)
- Unicorn-40695.exe (PID: 7844)
- Unicorn-48287.exe (PID: 7872)
- Unicorn-32504.exe (PID: 8168)
- Unicorn-28635.exe (PID: 7924)
- Unicorn-38059.exe (PID: 8184)
- Unicorn-13658.exe (PID: 8224)
- Unicorn-44868.exe (PID: 2616)
- Unicorn-21723.exe (PID: 8176)
- Unicorn-22216.exe (PID: 8300)
- Unicorn-8186.exe (PID: 8520)
- Unicorn-16081.exe (PID: 8148)
- Unicorn-49771.exe (PID: 7564)
- Unicorn-53090.exe (PID: 8812)
- Unicorn-35784.exe (PID: 8796)
- Unicorn-18488.exe (PID: 8832)
- Unicorn-51058.exe (PID: 5772)
- Unicorn-16465.exe (PID: 8112)
- Unicorn-49423.exe (PID: 7592)
- Unicorn-38286.exe (PID: 5328)
- Unicorn-11281.exe (PID: 8292)
- Unicorn-11544.exe (PID: 7544)
- Unicorn-34795.exe (PID: 8656)
- Unicorn-27518.exe (PID: 7904)
- Unicorn-13694.exe (PID: 8268)
- Unicorn-1930.exe (PID: 8500)
- Unicorn-53656.exe (PID: 8904)
- Unicorn-33297.exe (PID: 9036)
- Unicorn-59307.exe (PID: 8708)
- Unicorn-61062.exe (PID: 8352)
- Unicorn-61227.exe (PID: 8752)
- Unicorn-60681.exe (PID: 8856)
- Unicorn-52319.exe (PID: 3888)
- Unicorn-31374.exe (PID: 8332)
- Unicorn-53798.exe (PID: 8000)
- Unicorn-51899.exe (PID: 8380)
- Unicorn-27425.exe (PID: 900)
- Unicorn-12327.exe (PID: 8632)
- Unicorn-32446.exe (PID: 8780)
- Unicorn-34942.exe (PID: 9024)
- Unicorn-38168.exe (PID: 8036)
- Unicorn-279.exe (PID: 8508)
- Unicorn-1930.exe (PID: 8492)
- Unicorn-37598.exe (PID: 8724)
- Unicorn-44258.exe (PID: 6032)
- Unicorn-4727.exe (PID: 8140)
- Unicorn-44923.exe (PID: 9916)
- Unicorn-15963.exe (PID: 8256)
- Unicorn-517.exe (PID: 6988)
- Unicorn-64808.exe (PID: 8032)
- Unicorn-53090.exe (PID: 8532)
- Unicorn-12551.exe (PID: 9936)
- Unicorn-50911.exe (PID: 9952)
- Unicorn-29432.exe (PID: 8772)
- Unicorn-53090.exe (PID: 8788)
- Unicorn-55119.exe (PID: 8956)
- Unicorn-44918.exe (PID: 8868)
- Unicorn-26966.exe (PID: 8984)
- Unicorn-63736.exe (PID: 8244)
- Unicorn-62737.exe (PID: 8936)
- Unicorn-44616.exe (PID: 8700)
- Unicorn-5287.exe (PID: 7644)
- Unicorn-59608.exe (PID: 8560)
- Unicorn-53945.exe (PID: 8672)
- Unicorn-6981.exe (PID: 9152)
- Unicorn-40209.exe (PID: 8688)
- Unicorn-53931.exe (PID: 8996)
- Unicorn-12846.exe (PID: 9160)
- Unicorn-61830.exe (PID: 9200)
- Unicorn-12462.exe (PID: 4652)
- Unicorn-6583.exe (PID: 9280)
- Unicorn-5879.exe (PID: 1300)
- Unicorn-63858.exe (PID: 8048)
- Unicorn-7143.exe (PID: 9116)
- Unicorn-2810.exe (PID: 8944)
- Unicorn-32721.exe (PID: 8912)
- Unicorn-56059.exe (PID: 9760)
- Unicorn-18321.exe (PID: 9272)
- Unicorn-43880.exe (PID: 9860)
- Unicorn-35518.exe (PID: 8964)
- Unicorn-26197.exe (PID: 8544)
- Unicorn-44217.exe (PID: 9312)
- Unicorn-50584.exe (PID: 4152)
- Unicorn-46936.exe (PID: 7744)
- Unicorn-42120.exe (PID: 8484)
- Unicorn-31576.exe (PID: 10160)
- Unicorn-30817.exe (PID: 9608)
- Unicorn-61414.exe (PID: 9008)
- Unicorn-50895.exe (PID: 9260)
- Unicorn-11367.exe (PID: 8716)
- Unicorn-53126.exe (PID: 11220)
- Unicorn-6759.exe (PID: 9132)
- Unicorn-57448.exe (PID: 10788)
- Unicorn-41304.exe (PID: 300)
- Unicorn-29355.exe (PID: 10024)
- Unicorn-12167.exe (PID: 10040)
- Unicorn-31384.exe (PID: 10220)
- Unicorn-7034.exe (PID: 9720)
- Unicorn-29793.exe (PID: 12260)
- Unicorn-32171.exe (PID: 12268)
- Unicorn-23640.exe (PID: 456)
- Unicorn-41688.exe (PID: 10916)
- Unicorn-64834.exe (PID: 9632)
- Unicorn-18888.exe (PID: 10136)
- Unicorn-41752.exe (PID: 9336)
- Unicorn-19877.exe (PID: 10940)
- Unicorn-25185.exe (PID: 11996)
- Unicorn-38680.exe (PID: 9692)
- Unicorn-59320.exe (PID: 10900)
- Unicorn-57670.exe (PID: 12032)
- Unicorn-50598.exe (PID: 9100)
- Unicorn-49080.exe (PID: 2968)
- Unicorn-18056.exe (PID: 12148)
- Unicorn-59529.exe (PID: 7000)
- Unicorn-33403.exe (PID: 10908)
- Unicorn-31560.exe (PID: 9212)
- Unicorn-31976.exe (PID: 11284)
- Unicorn-28062.exe (PID: 11360)
- Unicorn-13032.exe (PID: 9624)
- Unicorn-29090.exe (PID: 10048)
- Unicorn-54127.exe (PID: 12400)
- Unicorn-34312.exe (PID: 12432)
- Unicorn-59282.exe (PID: 10600)
- Unicorn-42838.exe (PID: 9188)
- Unicorn-15146.exe (PID: 4272)
- Unicorn-20360.exe (PID: 11488)
- Unicorn-27736.exe (PID: 9824)
- Unicorn-26008.exe (PID: 10472)
- Unicorn-15559.exe (PID: 12140)
- Unicorn-35086.exe (PID: 11588)
- Unicorn-23998.exe (PID: 9616)
- Unicorn-44786.exe (PID: 11968)
- Unicorn-64297.exe (PID: 12748)
- Unicorn-22677.exe (PID: 11032)
- Unicorn-22677.exe (PID: 11140)
- Unicorn-50920.exe (PID: 12200)
- Unicorn-302.exe (PID: 11524)
- Unicorn-558.exe (PID: 9648)
- Unicorn-31976.exe (PID: 11276)
- Unicorn-3765.exe (PID: 7420)
- Unicorn-7445.exe (PID: 14680)
- Unicorn-44399.exe (PID: 11132)
- Unicorn-19816.exe (PID: 13900)
- Unicorn-33942.exe (PID: 13844)
- Unicorn-63256.exe (PID: 8732)
- Unicorn-7911.exe (PID: 10168)
- Unicorn-37336.exe (PID: 9768)
- Unicorn-759.exe (PID: 11100)
- Unicorn-46022.exe (PID: 11564)
- Unicorn-50024.exe (PID: 10576)
- Unicorn-62136.exe (PID: 9908)
- Unicorn-31775.exe (PID: 15388)
- Unicorn-13406.exe (PID: 9296)
- Unicorn-48822.exe (PID: 11596)
- Unicorn-18894.exe (PID: 15376)
- Unicorn-4247.exe (PID: 13188)
- Unicorn-11453.exe (PID: 10568)
- Unicorn-64507.exe (PID: 8012)
- Unicorn-14215.exe (PID: 12056)
- Unicorn-59311.exe (PID: 11904)
- Unicorn-3374.exe (PID: 11864)
- Unicorn-1774.exe (PID: 8340)
- Unicorn-20206.exe (PID: 14712)
- Unicorn-45528.exe (PID: 11168)
- Unicorn-21390.exe (PID: 14496)
- Unicorn-14869.exe (PID: 9804)
- Unicorn-60856.exe (PID: 14620)
- Unicorn-50134.exe (PID: 15448)
- Unicorn-50895.exe (PID: 9816)
- Unicorn-46843.exe (PID: 10228)
- Unicorn-31669.exe (PID: 15016)
- Unicorn-30367.exe (PID: 10584)
- Unicorn-46542.exe (PID: 11300)
- Unicorn-58134.exe (PID: 11336)
- Unicorn-5098.exe (PID: 13272)
- Unicorn-64911.exe (PID: 13920)
- Unicorn-50392.exe (PID: 6584)
- Unicorn-31752.exe (PID: 14968)
- Unicorn-11022.exe (PID: 15928)
- Unicorn-37951.exe (PID: 16456)
- Unicorn-52118.exe (PID: 13444)
- Unicorn-42504.exe (PID: 8600)
- Unicorn-38921.exe (PID: 11948)
- Unicorn-25825.exe (PID: 10056)
- Unicorn-5351.exe (PID: 16432)
- Unicorn-59810.exe (PID: 8680)
- Unicorn-12942.exe (PID: 15168)
- Unicorn-45615.exe (PID: 15156)
- Unicorn-64614.exe (PID: 15068)
- Unicorn-61023.exe (PID: 12824)
- Unicorn-64216.exe (PID: 13504)
- Unicorn-18350.exe (PID: 16464)
- Unicorn-65451.exe (PID: 13756)
- Unicorn-13406.exe (PID: 9304)
- Unicorn-13208.exe (PID: 15512)
- Unicorn-54687.exe (PID: 11548)
Starts itself from another location
- 1 (68).exe (PID: 5072)
- Unicorn-49528.exe (PID: 668)
- Unicorn-61967.exe (PID: 5256)
- Unicorn-47899.exe (PID: 5008)
- Unicorn-11697.exe (PID: 920)
- Unicorn-58790.exe (PID: 6040)
- Unicorn-48491.exe (PID: 4980)
- Unicorn-28049.exe (PID: 5376)
- Unicorn-15527.exe (PID: 5740)
- Unicorn-27752.exe (PID: 1164)
- Unicorn-6856.exe (PID: 2140)
- Unicorn-62834.exe (PID: 4008)
- Unicorn-60891.exe (PID: 1764)
- Unicorn-33400.exe (PID: 1184)
- Unicorn-8353.exe (PID: 1388)
- Unicorn-64783.exe (PID: 2420)
- Unicorn-19112.exe (PID: 2268)
- Unicorn-12213.exe (PID: 5360)
- Unicorn-33426.exe (PID: 4024)
- Unicorn-53019.exe (PID: 5400)
- Unicorn-35842.exe (PID: 5756)
- Unicorn-44006.exe (PID: 6592)
- Unicorn-36299.exe (PID: 4188)
- Unicorn-46806.exe (PID: 1760)
- Unicorn-32385.exe (PID: 6752)
- Unicorn-17118.exe (PID: 2552)
- Unicorn-35339.exe (PID: 1240)
- Unicorn-12209.exe (PID: 5344)
- Unicorn-48411.exe (PID: 3900)
- Unicorn-31691.exe (PID: 5116)
- Unicorn-10952.exe (PID: 5556)
- Unicorn-34680.exe (PID: 644)
- Unicorn-48530.exe (PID: 7224)
- Unicorn-58029.exe (PID: 2236)
- Unicorn-57849.exe (PID: 6700)
- Unicorn-20451.exe (PID: 7260)
- Unicorn-46719.exe (PID: 7200)
- Unicorn-58909.exe (PID: 7216)
- Unicorn-1047.exe (PID: 7192)
- Unicorn-23435.exe (PID: 7344)
- Unicorn-2033.exe (PID: 7276)
- Unicorn-36049.exe (PID: 7380)
- Unicorn-23928.exe (PID: 7252)
- Unicorn-33640.exe (PID: 7336)
- Unicorn-23113.exe (PID: 1912)
- Unicorn-39963.exe (PID: 7352)
- Unicorn-47662.exe (PID: 7368)
- Unicorn-42594.exe (PID: 7760)
- Unicorn-42859.exe (PID: 7768)
- Unicorn-12593.exe (PID: 7236)
- Unicorn-60456.exe (PID: 7672)
- Unicorn-40003.exe (PID: 7176)
- Unicorn-28369.exe (PID: 7508)
- Unicorn-36315.exe (PID: 7656)
- Unicorn-3765.exe (PID: 7420)
- Unicorn-5287.exe (PID: 7644)
- Unicorn-55567.exe (PID: 7412)
- Unicorn-25931.exe (PID: 7404)
- Unicorn-47659.exe (PID: 7944)
- Unicorn-37976.exe (PID: 8020)
- Unicorn-17016.exe (PID: 7788)
- Unicorn-8058.exe (PID: 7324)
- Unicorn-24203.exe (PID: 7312)
- Unicorn-9781.exe (PID: 7824)
- Unicorn-18059.exe (PID: 7516)
- Unicorn-54710.exe (PID: 7884)
- Unicorn-37218.exe (PID: 1132)
- Unicorn-48619.exe (PID: 7500)
- Unicorn-8951.exe (PID: 6656)
- Unicorn-49463.exe (PID: 7860)
- Unicorn-14248.exe (PID: 8088)
- Unicorn-48287.exe (PID: 7872)
- Unicorn-29382.exe (PID: 7832)
- Unicorn-40695.exe (PID: 7844)
- Unicorn-28635.exe (PID: 7924)
- Unicorn-22216.exe (PID: 8300)
- Unicorn-13658.exe (PID: 8224)
- Unicorn-21723.exe (PID: 8176)
- Unicorn-44868.exe (PID: 2616)
- Unicorn-16081.exe (PID: 8148)
- Unicorn-8186.exe (PID: 8520)
- Unicorn-35784.exe (PID: 8796)
- Unicorn-53090.exe (PID: 8812)
- Unicorn-18488.exe (PID: 8832)
- Unicorn-16465.exe (PID: 8112)
- Unicorn-49423.exe (PID: 7592)
- Unicorn-38286.exe (PID: 5328)
- Unicorn-11544.exe (PID: 7544)
- Unicorn-11281.exe (PID: 8292)
- Unicorn-34795.exe (PID: 8656)
- Unicorn-27518.exe (PID: 7904)
- Unicorn-13694.exe (PID: 8268)
- Unicorn-53656.exe (PID: 8904)
- Unicorn-33297.exe (PID: 9036)
- Unicorn-59307.exe (PID: 8708)
- Unicorn-61062.exe (PID: 8352)
- Unicorn-61227.exe (PID: 8752)
- Unicorn-60681.exe (PID: 8856)
- Unicorn-52319.exe (PID: 3888)
- Unicorn-31374.exe (PID: 8332)
- Unicorn-53798.exe (PID: 8000)
- Unicorn-51899.exe (PID: 8380)
- Unicorn-27425.exe (PID: 900)
- Unicorn-12327.exe (PID: 8632)
- Unicorn-32446.exe (PID: 8780)
- Unicorn-34942.exe (PID: 9024)
- Unicorn-1930.exe (PID: 8500)
- Unicorn-279.exe (PID: 8508)
- Unicorn-1930.exe (PID: 8492)
- Unicorn-1774.exe (PID: 8340)
- Unicorn-37598.exe (PID: 8724)
- Unicorn-4727.exe (PID: 8140)
- Unicorn-44258.exe (PID: 6032)
- Unicorn-64808.exe (PID: 8032)
- Unicorn-44923.exe (PID: 9916)
- Unicorn-517.exe (PID: 6988)
- Unicorn-15963.exe (PID: 8256)
- Unicorn-12551.exe (PID: 9936)
- Unicorn-55119.exe (PID: 8956)
- Unicorn-53090.exe (PID: 8788)
- Unicorn-44918.exe (PID: 8868)
- Unicorn-38168.exe (PID: 8036)
- Unicorn-29432.exe (PID: 8772)
- Unicorn-50911.exe (PID: 9952)
- Unicorn-26966.exe (PID: 8984)
- Unicorn-44616.exe (PID: 8700)
- Unicorn-53945.exe (PID: 8672)
- Unicorn-62737.exe (PID: 8936)
- Unicorn-59810.exe (PID: 8680)
- Unicorn-53090.exe (PID: 8532)
- Unicorn-63736.exe (PID: 8244)
- Unicorn-59608.exe (PID: 8560)
- Unicorn-6981.exe (PID: 9152)
- Unicorn-42267.exe (PID: 7396)
- Unicorn-40209.exe (PID: 8688)
- Unicorn-12846.exe (PID: 9160)
- Unicorn-38059.exe (PID: 8184)
- Unicorn-32504.exe (PID: 8168)
- Unicorn-12462.exe (PID: 4652)
- Unicorn-61830.exe (PID: 9200)
- Unicorn-6583.exe (PID: 9280)
- Unicorn-5879.exe (PID: 1300)
- Unicorn-63858.exe (PID: 8048)
- Unicorn-7143.exe (PID: 9116)
- Unicorn-2810.exe (PID: 8944)
- Unicorn-44217.exe (PID: 9312)
- Unicorn-32721.exe (PID: 8912)
- Unicorn-56059.exe (PID: 9760)
- Unicorn-25528.exe (PID: 9744)
- Unicorn-26197.exe (PID: 8544)
- Unicorn-35518.exe (PID: 8964)
- Unicorn-13406.exe (PID: 9304)
- Unicorn-43880.exe (PID: 9860)
- Unicorn-50584.exe (PID: 4152)
- Unicorn-42120.exe (PID: 8484)
- Unicorn-31576.exe (PID: 10160)
- Unicorn-6759.exe (PID: 9132)
- Unicorn-61414.exe (PID: 9008)
- Unicorn-50895.exe (PID: 9260)
- Unicorn-11367.exe (PID: 8716)
- Unicorn-53126.exe (PID: 11220)
- Unicorn-30817.exe (PID: 9608)
- Unicorn-53931.exe (PID: 8996)
- Unicorn-57448.exe (PID: 10788)
- Unicorn-49771.exe (PID: 7564)
- Unicorn-41304.exe (PID: 300)
- Unicorn-29355.exe (PID: 10024)
- Unicorn-12167.exe (PID: 10040)
- Unicorn-31384.exe (PID: 10220)
- Unicorn-18321.exe (PID: 9272)
- Unicorn-51058.exe (PID: 5772)
- Unicorn-29793.exe (PID: 12260)
- Unicorn-32171.exe (PID: 12268)
- Unicorn-23640.exe (PID: 456)
- Unicorn-41688.exe (PID: 10916)
- Unicorn-64834.exe (PID: 9632)
- Unicorn-19877.exe (PID: 10940)
- Unicorn-41752.exe (PID: 9336)
- Unicorn-18888.exe (PID: 10136)
- Unicorn-25185.exe (PID: 11996)
- Unicorn-38680.exe (PID: 9692)
- Unicorn-59320.exe (PID: 10900)
- Unicorn-57670.exe (PID: 12032)
- Unicorn-50598.exe (PID: 9100)
- Unicorn-49080.exe (PID: 2968)
- Unicorn-18056.exe (PID: 12148)
- Unicorn-59529.exe (PID: 7000)
- Unicorn-33403.exe (PID: 10908)
- Unicorn-31560.exe (PID: 9212)
- Unicorn-28062.exe (PID: 11360)
- Unicorn-42838.exe (PID: 9188)
- Unicorn-13032.exe (PID: 9624)
- Unicorn-29090.exe (PID: 10048)
- Unicorn-54127.exe (PID: 12400)
- Unicorn-34312.exe (PID: 12432)
- Unicorn-59282.exe (PID: 10600)
- Unicorn-20360.exe (PID: 11488)
- Unicorn-15146.exe (PID: 4272)
- Unicorn-31976.exe (PID: 11284)
- Unicorn-27736.exe (PID: 9824)
- Unicorn-19816.exe (PID: 13900)
- Unicorn-26008.exe (PID: 10472)
- Unicorn-15559.exe (PID: 12140)
- Unicorn-33942.exe (PID: 13844)
- Unicorn-35086.exe (PID: 11588)
- Unicorn-31775.exe (PID: 15388)
- Unicorn-23998.exe (PID: 9616)
- Unicorn-50134.exe (PID: 15448)
- Unicorn-44786.exe (PID: 11968)
- Unicorn-8933.exe (PID: 12292)
- Unicorn-64297.exe (PID: 12748)
- Unicorn-22677.exe (PID: 11032)
- Unicorn-50920.exe (PID: 12200)
- Unicorn-558.exe (PID: 9648)
- Unicorn-18894.exe (PID: 15376)
- Unicorn-64614.exe (PID: 15068)
- Unicorn-12942.exe (PID: 15168)
- Unicorn-302.exe (PID: 11524)
- Unicorn-39528.exe (PID: 15108)
- Unicorn-31976.exe (PID: 11276)
INFO
Reads the computer name
- 1 (68).exe (PID: 5072)
- Unicorn-49528.exe (PID: 668)
- Unicorn-33400.exe (PID: 1184)
- Unicorn-61967.exe (PID: 5256)
- Unicorn-47899.exe (PID: 5008)
- Unicorn-15527.exe (PID: 5740)
- Unicorn-58790.exe (PID: 6040)
- Unicorn-11697.exe (PID: 920)
- Unicorn-28049.exe (PID: 5376)
- Unicorn-48491.exe (PID: 4980)
- Unicorn-27752.exe (PID: 1164)
- Unicorn-58029.exe (PID: 2236)
- Unicorn-6856.exe (PID: 2140)
- Unicorn-33426.exe (PID: 4024)
- Unicorn-62834.exe (PID: 4008)
- Unicorn-60891.exe (PID: 1764)
- Unicorn-8353.exe (PID: 1388)
- Unicorn-64783.exe (PID: 2420)
- Unicorn-19112.exe (PID: 2268)
- Unicorn-12213.exe (PID: 5360)
- Unicorn-53019.exe (PID: 5400)
- Unicorn-35842.exe (PID: 5756)
- Unicorn-32385.exe (PID: 6752)
- Unicorn-36299.exe (PID: 4188)
- Unicorn-44006.exe (PID: 6592)
- Unicorn-46806.exe (PID: 1760)
- Unicorn-17118.exe (PID: 2552)
- Unicorn-35339.exe (PID: 1240)
- Unicorn-48411.exe (PID: 3900)
- Unicorn-12209.exe (PID: 5344)
- Unicorn-31691.exe (PID: 5116)
- Unicorn-10952.exe (PID: 5556)
- Unicorn-23113.exe (PID: 1912)
- Unicorn-57849.exe (PID: 6700)
- Unicorn-48530.exe (PID: 7224)
- Unicorn-20451.exe (PID: 7260)
- Unicorn-46719.exe (PID: 7200)
- Unicorn-34680.exe (PID: 644)
- Unicorn-58909.exe (PID: 7216)
- Unicorn-12593.exe (PID: 7236)
- Unicorn-1047.exe (PID: 7192)
- Unicorn-23435.exe (PID: 7344)
- Unicorn-2033.exe (PID: 7276)
- Unicorn-40003.exe (PID: 7176)
- Unicorn-36049.exe (PID: 7380)
- Unicorn-23928.exe (PID: 7252)
- Unicorn-33640.exe (PID: 7336)
- Unicorn-39963.exe (PID: 7352)
- Unicorn-42267.exe (PID: 7396)
- Unicorn-60456.exe (PID: 7672)
- Unicorn-42594.exe (PID: 7760)
- Unicorn-42859.exe (PID: 7768)
- Unicorn-47662.exe (PID: 7368)
- Unicorn-55650.exe (PID: 7388)
- Unicorn-5287.exe (PID: 7644)
- Unicorn-3765.exe (PID: 7420)
- Unicorn-36315.exe (PID: 7656)
- Unicorn-55567.exe (PID: 7412)
- Unicorn-8058.exe (PID: 7324)
- Unicorn-28369.exe (PID: 7508)
- Unicorn-29382.exe (PID: 7832)
- Unicorn-47659.exe (PID: 7944)
- Unicorn-37976.exe (PID: 8020)
- Unicorn-25931.exe (PID: 7404)
- Unicorn-24203.exe (PID: 7312)
- Unicorn-17016.exe (PID: 7788)
- Unicorn-9781.exe (PID: 7824)
- Unicorn-18059.exe (PID: 7516)
- Unicorn-8951.exe (PID: 6656)
- Unicorn-14248.exe (PID: 8088)
- Unicorn-54710.exe (PID: 7884)
- Unicorn-48619.exe (PID: 7500)
- Unicorn-37218.exe (PID: 1132)
- Unicorn-48287.exe (PID: 7872)
- Unicorn-27425.exe (PID: 900)
- Unicorn-51058.exe (PID: 5772)
- Unicorn-49463.exe (PID: 7860)
- Unicorn-40695.exe (PID: 7844)
- Unicorn-38059.exe (PID: 8184)
- Unicorn-32504.exe (PID: 8168)
- Unicorn-13658.exe (PID: 8224)
- Unicorn-28635.exe (PID: 7924)
- Unicorn-22216.exe (PID: 8300)
- Unicorn-21723.exe (PID: 8176)
- Unicorn-8186.exe (PID: 8520)
- Unicorn-16081.exe (PID: 8148)
- Unicorn-35784.exe (PID: 8796)
- Unicorn-53090.exe (PID: 8812)
- Unicorn-49771.exe (PID: 7564)
- Unicorn-18488.exe (PID: 8832)
- Unicorn-61227.exe (PID: 8752)
- Unicorn-49423.exe (PID: 7592)
- Unicorn-60681.exe (PID: 8856)
- Unicorn-53798.exe (PID: 8000)
- Unicorn-517.exe (PID: 6988)
- Unicorn-31374.exe (PID: 8332)
- Unicorn-15963.exe (PID: 8256)
- Unicorn-16465.exe (PID: 8112)
- Unicorn-11544.exe (PID: 7544)
- Unicorn-11281.exe (PID: 8292)
- Unicorn-38286.exe (PID: 5328)
- Unicorn-32446.exe (PID: 8780)
- Unicorn-1930.exe (PID: 8500)
- Unicorn-27518.exe (PID: 7904)
- Unicorn-13694.exe (PID: 8268)
- Unicorn-53656.exe (PID: 8904)
- Unicorn-61062.exe (PID: 8352)
- Unicorn-34795.exe (PID: 8656)
- Unicorn-4727.exe (PID: 8140)
- Unicorn-33297.exe (PID: 9036)
- Unicorn-52319.exe (PID: 3888)
- Unicorn-59307.exe (PID: 8708)
- Unicorn-37598.exe (PID: 8724)
- Unicorn-279.exe (PID: 8508)
- Unicorn-1930.exe (PID: 8492)
- Unicorn-38168.exe (PID: 8036)
- Unicorn-34942.exe (PID: 9024)
- Unicorn-51899.exe (PID: 8380)
- Unicorn-1774.exe (PID: 8340)
- Unicorn-53090.exe (PID: 8532)
- Unicorn-44868.exe (PID: 2616)
- Unicorn-53945.exe (PID: 8672)
- Unicorn-12327.exe (PID: 8632)
- Unicorn-44258.exe (PID: 6032)
- Unicorn-64808.exe (PID: 8032)
- Unicorn-44923.exe (PID: 9916)
- Unicorn-59810.exe (PID: 8680)
- Unicorn-62737.exe (PID: 8936)
- Unicorn-59608.exe (PID: 8560)
- Unicorn-63736.exe (PID: 8244)
- Unicorn-44616.exe (PID: 8700)
- Unicorn-40209.exe (PID: 8688)
- Unicorn-12551.exe (PID: 9936)
- Unicorn-50911.exe (PID: 9952)
- Unicorn-6981.exe (PID: 9152)
- Unicorn-29432.exe (PID: 8772)
- Unicorn-26966.exe (PID: 8984)
- Unicorn-44918.exe (PID: 8868)
- Unicorn-55119.exe (PID: 8956)
- Unicorn-53090.exe (PID: 8788)
- Unicorn-50584.exe (PID: 4152)
- Unicorn-56059.exe (PID: 9760)
- Unicorn-61414.exe (PID: 9008)
- Unicorn-46936.exe (PID: 7744)
- Unicorn-53931.exe (PID: 8996)
- Unicorn-7034.exe (PID: 9720)
- Unicorn-6759.exe (PID: 9132)
- Unicorn-12846.exe (PID: 9160)
- Unicorn-63858.exe (PID: 8048)
- Unicorn-5879.exe (PID: 1300)
- Unicorn-42504.exe (PID: 8600)
- Unicorn-11367.exe (PID: 8716)
- Unicorn-42120.exe (PID: 8484)
- Unicorn-43880.exe (PID: 9860)
- Unicorn-50895.exe (PID: 9260)
- Unicorn-35518.exe (PID: 8964)
- Unicorn-13406.exe (PID: 9304)
- Unicorn-18321.exe (PID: 9272)
- Unicorn-12462.exe (PID: 4652)
- Unicorn-32721.exe (PID: 8912)
- Unicorn-26197.exe (PID: 8544)
- Unicorn-30817.exe (PID: 9608)
- Unicorn-6583.exe (PID: 9280)
- Unicorn-18888.exe (PID: 10136)
- Unicorn-44217.exe (PID: 9312)
- Unicorn-25528.exe (PID: 9744)
- Unicorn-61830.exe (PID: 9200)
- Unicorn-2810.exe (PID: 8944)
- Unicorn-7143.exe (PID: 9116)
- Unicorn-31576.exe (PID: 10160)
- Unicorn-53126.exe (PID: 11220)
- Unicorn-57448.exe (PID: 10788)
- Unicorn-41304.exe (PID: 300)
- Unicorn-29355.exe (PID: 10024)
- Unicorn-31384.exe (PID: 10220)
- Unicorn-12167.exe (PID: 10040)
- Unicorn-13032.exe (PID: 9624)
- Unicorn-29793.exe (PID: 12260)
- Unicorn-32171.exe (PID: 12268)
- Unicorn-23640.exe (PID: 456)
- Unicorn-33403.exe (PID: 10908)
- Unicorn-41688.exe (PID: 10916)
- Unicorn-42838.exe (PID: 9188)
- Unicorn-64834.exe (PID: 9632)
- Unicorn-41752.exe (PID: 9336)
- Unicorn-19877.exe (PID: 10940)
- Unicorn-27736.exe (PID: 9824)
- Unicorn-38680.exe (PID: 9692)
- Unicorn-25185.exe (PID: 11996)
- Unicorn-59320.exe (PID: 10900)
- Unicorn-57670.exe (PID: 12032)
- Unicorn-50598.exe (PID: 9100)
- Unicorn-49080.exe (PID: 2968)
- Unicorn-59282.exe (PID: 10600)
- Unicorn-15146.exe (PID: 4272)
- Unicorn-18056.exe (PID: 12148)
- Unicorn-59529.exe (PID: 7000)
- Unicorn-31976.exe (PID: 11284)
- Unicorn-31560.exe (PID: 9212)
- Unicorn-28062.exe (PID: 11360)
- Unicorn-54127.exe (PID: 12400)
- Unicorn-34312.exe (PID: 12432)
- Unicorn-20360.exe (PID: 11488)
- Unicorn-29090.exe (PID: 10048)
- Unicorn-13406.exe (PID: 9296)
- Unicorn-33942.exe (PID: 13844)
- Unicorn-19816.exe (PID: 13900)
- Unicorn-64911.exe (PID: 13920)
- Unicorn-26008.exe (PID: 10472)
- Unicorn-15559.exe (PID: 12140)
- Unicorn-22677.exe (PID: 11032)
- Unicorn-302.exe (PID: 11524)
- Unicorn-35086.exe (PID: 11588)
- Unicorn-44399.exe (PID: 11132)
- Unicorn-31775.exe (PID: 15388)
- Unicorn-558.exe (PID: 9648)
- Unicorn-46022.exe (PID: 11564)
- Unicorn-23998.exe (PID: 9616)
- Unicorn-50134.exe (PID: 15448)
- Unicorn-65451.exe (PID: 13756)
- Unicorn-44786.exe (PID: 11968)
- Unicorn-22677.exe (PID: 11140)
- Unicorn-8933.exe (PID: 12292)
- Unicorn-50920.exe (PID: 12200)
- Unicorn-64297.exe (PID: 12748)
- Unicorn-17160.exe (PID: 10152)
- Unicorn-18894.exe (PID: 15376)
- Unicorn-64614.exe (PID: 15068)
- Unicorn-39528.exe (PID: 15108)
- Unicorn-31976.exe (PID: 11276)
- Unicorn-7445.exe (PID: 14680)
- Unicorn-12942.exe (PID: 15168)
- Unicorn-45615.exe (PID: 15156)
- Unicorn-37336.exe (PID: 9768)
Create files in a temporary directory
- Unicorn-61967.exe (PID: 5256)
- 1 (68).exe (PID: 5072)
- Unicorn-49528.exe (PID: 668)
- Unicorn-47899.exe (PID: 5008)
- Unicorn-11697.exe (PID: 920)
- Unicorn-15527.exe (PID: 5740)
- Unicorn-48491.exe (PID: 4980)
- Unicorn-28049.exe (PID: 5376)
- Unicorn-27752.exe (PID: 1164)
- Unicorn-58029.exe (PID: 2236)
- Unicorn-58790.exe (PID: 6040)
- Unicorn-33426.exe (PID: 4024)
- Unicorn-60891.exe (PID: 1764)
- Unicorn-33400.exe (PID: 1184)
- Unicorn-8353.exe (PID: 1388)
- Unicorn-64783.exe (PID: 2420)
- Unicorn-19112.exe (PID: 2268)
- Unicorn-12213.exe (PID: 5360)
- Unicorn-53019.exe (PID: 5400)
- Unicorn-35842.exe (PID: 5756)
- Unicorn-32385.exe (PID: 6752)
- Unicorn-44006.exe (PID: 6592)
- Unicorn-36299.exe (PID: 4188)
- Unicorn-46806.exe (PID: 1760)
- Unicorn-6856.exe (PID: 2140)
- Unicorn-17118.exe (PID: 2552)
- Unicorn-35339.exe (PID: 1240)
- Unicorn-62834.exe (PID: 4008)
- Unicorn-48411.exe (PID: 3900)
- Unicorn-12209.exe (PID: 5344)
- Unicorn-23113.exe (PID: 1912)
- Unicorn-34680.exe (PID: 644)
- Unicorn-31691.exe (PID: 5116)
- Unicorn-57849.exe (PID: 6700)
- Unicorn-48530.exe (PID: 7224)
- Unicorn-20451.exe (PID: 7260)
- Unicorn-46719.exe (PID: 7200)
- Unicorn-12593.exe (PID: 7236)
- Unicorn-58909.exe (PID: 7216)
- Unicorn-23435.exe (PID: 7344)
- Unicorn-36049.exe (PID: 7380)
- Unicorn-23928.exe (PID: 7252)
- Unicorn-40003.exe (PID: 7176)
- Unicorn-33640.exe (PID: 7336)
- Unicorn-42267.exe (PID: 7396)
- Unicorn-39963.exe (PID: 7352)
- Unicorn-47662.exe (PID: 7368)
- Unicorn-42594.exe (PID: 7760)
- Unicorn-42859.exe (PID: 7768)
- Unicorn-60456.exe (PID: 7672)
- Unicorn-8058.exe (PID: 7324)
- Unicorn-29382.exe (PID: 7832)
- Unicorn-28369.exe (PID: 7508)
- Unicorn-55567.exe (PID: 7412)
- Unicorn-10952.exe (PID: 5556)
- Unicorn-36315.exe (PID: 7656)
- Unicorn-47659.exe (PID: 7944)
- Unicorn-37976.exe (PID: 8020)
- Unicorn-25931.exe (PID: 7404)
- Unicorn-17016.exe (PID: 7788)
- Unicorn-24203.exe (PID: 7312)
- Unicorn-1047.exe (PID: 7192)
- Unicorn-9781.exe (PID: 7824)
- Unicorn-18059.exe (PID: 7516)
- Unicorn-54710.exe (PID: 7884)
- Unicorn-48619.exe (PID: 7500)
- Unicorn-8951.exe (PID: 6656)
- Unicorn-37218.exe (PID: 1132)
- Unicorn-49463.exe (PID: 7860)
- Unicorn-14248.exe (PID: 8088)
- Unicorn-40695.exe (PID: 7844)
- Unicorn-48287.exe (PID: 7872)
- Unicorn-2033.exe (PID: 7276)
- Unicorn-32504.exe (PID: 8168)
- Unicorn-28635.exe (PID: 7924)
- Unicorn-22216.exe (PID: 8300)
- Unicorn-38059.exe (PID: 8184)
- Unicorn-13658.exe (PID: 8224)
- Unicorn-21723.exe (PID: 8176)
- Unicorn-44868.exe (PID: 2616)
- Unicorn-8186.exe (PID: 8520)
- Unicorn-16081.exe (PID: 8148)
- Unicorn-49771.exe (PID: 7564)
- Unicorn-35784.exe (PID: 8796)
- Unicorn-53090.exe (PID: 8812)
- Unicorn-18488.exe (PID: 8832)
- Unicorn-51058.exe (PID: 5772)
- Unicorn-16465.exe (PID: 8112)
- Unicorn-49423.exe (PID: 7592)
- Unicorn-38286.exe (PID: 5328)
- Unicorn-11544.exe (PID: 7544)
- Unicorn-11281.exe (PID: 8292)
- Unicorn-34795.exe (PID: 8656)
- Unicorn-27518.exe (PID: 7904)
- Unicorn-13694.exe (PID: 8268)
- Unicorn-1930.exe (PID: 8500)
- Unicorn-53656.exe (PID: 8904)
- Unicorn-53798.exe (PID: 8000)
- Unicorn-33297.exe (PID: 9036)
- Unicorn-61062.exe (PID: 8352)
- Unicorn-59307.exe (PID: 8708)
- Unicorn-61227.exe (PID: 8752)
- Unicorn-60681.exe (PID: 8856)
- Unicorn-52319.exe (PID: 3888)
- Unicorn-15963.exe (PID: 8256)
- Unicorn-31374.exe (PID: 8332)
- Unicorn-27425.exe (PID: 900)
- Unicorn-53090.exe (PID: 8532)
- Unicorn-51899.exe (PID: 8380)
- Unicorn-32446.exe (PID: 8780)
- Unicorn-12327.exe (PID: 8632)
- Unicorn-34942.exe (PID: 9024)
- Unicorn-38168.exe (PID: 8036)
- Unicorn-279.exe (PID: 8508)
- Unicorn-1930.exe (PID: 8492)
- Unicorn-37598.exe (PID: 8724)
- Unicorn-4727.exe (PID: 8140)
- Unicorn-44258.exe (PID: 6032)
- Unicorn-64808.exe (PID: 8032)
- Unicorn-517.exe (PID: 6988)
- Unicorn-44923.exe (PID: 9916)
- Unicorn-50911.exe (PID: 9952)
- Unicorn-12551.exe (PID: 9936)
- Unicorn-29432.exe (PID: 8772)
- Unicorn-55119.exe (PID: 8956)
- Unicorn-44918.exe (PID: 8868)
- Unicorn-53090.exe (PID: 8788)
- Unicorn-26966.exe (PID: 8984)
- Unicorn-53945.exe (PID: 8672)
- Unicorn-59608.exe (PID: 8560)
- Unicorn-63736.exe (PID: 8244)
- Unicorn-44616.exe (PID: 8700)
- Unicorn-5287.exe (PID: 7644)
- Unicorn-62737.exe (PID: 8936)
- Unicorn-6981.exe (PID: 9152)
- Unicorn-40209.exe (PID: 8688)
- Unicorn-53931.exe (PID: 8996)
- Unicorn-12846.exe (PID: 9160)
- Unicorn-61830.exe (PID: 9200)
- Unicorn-12462.exe (PID: 4652)
- Unicorn-5879.exe (PID: 1300)
- Unicorn-6583.exe (PID: 9280)
- Unicorn-63858.exe (PID: 8048)
- Unicorn-7143.exe (PID: 9116)
- Unicorn-2810.exe (PID: 8944)
- Unicorn-44217.exe (PID: 9312)
- Unicorn-32721.exe (PID: 8912)
- Unicorn-18321.exe (PID: 9272)
- Unicorn-43880.exe (PID: 9860)
- Unicorn-56059.exe (PID: 9760)
- Unicorn-26197.exe (PID: 8544)
- Unicorn-35518.exe (PID: 8964)
- Unicorn-50584.exe (PID: 4152)
- Unicorn-46936.exe (PID: 7744)
- Unicorn-42120.exe (PID: 8484)
- Unicorn-30817.exe (PID: 9608)
- Unicorn-31576.exe (PID: 10160)
- Unicorn-6759.exe (PID: 9132)
- Unicorn-61414.exe (PID: 9008)
- Unicorn-50895.exe (PID: 9260)
- Unicorn-11367.exe (PID: 8716)
- Unicorn-53126.exe (PID: 11220)
- Unicorn-57448.exe (PID: 10788)
- Unicorn-41304.exe (PID: 300)
- Unicorn-29355.exe (PID: 10024)
- Unicorn-12167.exe (PID: 10040)
- Unicorn-31384.exe (PID: 10220)
- Unicorn-7034.exe (PID: 9720)
- Unicorn-29793.exe (PID: 12260)
- Unicorn-32171.exe (PID: 12268)
- Unicorn-23640.exe (PID: 456)
- Unicorn-41688.exe (PID: 10916)
- Unicorn-64834.exe (PID: 9632)
- Unicorn-19877.exe (PID: 10940)
- Unicorn-18888.exe (PID: 10136)
- Unicorn-41752.exe (PID: 9336)
- Unicorn-25185.exe (PID: 11996)
- Unicorn-38680.exe (PID: 9692)
- Unicorn-59320.exe (PID: 10900)
- Unicorn-50598.exe (PID: 9100)
- Unicorn-49080.exe (PID: 2968)
- Unicorn-18056.exe (PID: 12148)
- Unicorn-57670.exe (PID: 12032)
- Unicorn-59529.exe (PID: 7000)
- Unicorn-33403.exe (PID: 10908)
- Unicorn-31976.exe (PID: 11284)
- Unicorn-28062.exe (PID: 11360)
- Unicorn-31560.exe (PID: 9212)
- Unicorn-42838.exe (PID: 9188)
- Unicorn-13032.exe (PID: 9624)
- Unicorn-29090.exe (PID: 10048)
- Unicorn-34312.exe (PID: 12432)
- Unicorn-54127.exe (PID: 12400)
- Unicorn-59282.exe (PID: 10600)
- Unicorn-20360.exe (PID: 11488)
- Unicorn-15146.exe (PID: 4272)
- Unicorn-27736.exe (PID: 9824)
- Unicorn-33942.exe (PID: 13844)
- Unicorn-64911.exe (PID: 13920)
- Unicorn-19816.exe (PID: 13900)
- Unicorn-26008.exe (PID: 10472)
- Unicorn-15559.exe (PID: 12140)
- Unicorn-35086.exe (PID: 11588)
- Unicorn-31775.exe (PID: 15388)
- Unicorn-23998.exe (PID: 9616)
- Unicorn-50134.exe (PID: 15448)
- Unicorn-44786.exe (PID: 11968)
- Unicorn-64297.exe (PID: 12748)
- Unicorn-8933.exe (PID: 12292)
- Unicorn-22677.exe (PID: 11032)
- Unicorn-50920.exe (PID: 12200)
- Unicorn-302.exe (PID: 11524)
- Unicorn-558.exe (PID: 9648)
- Unicorn-18894.exe (PID: 15376)
- Unicorn-64614.exe (PID: 15068)
- Unicorn-39528.exe (PID: 15108)
Checks supported languages
- Unicorn-49528.exe (PID: 668)
- 1 (68).exe (PID: 5072)
- Unicorn-33400.exe (PID: 1184)
- Unicorn-11697.exe (PID: 920)
- Unicorn-58790.exe (PID: 6040)
- Unicorn-15527.exe (PID: 5740)
- Unicorn-28049.exe (PID: 5376)
- Unicorn-27752.exe (PID: 1164)
- Unicorn-58029.exe (PID: 2236)
- Unicorn-6856.exe (PID: 2140)
- Unicorn-62834.exe (PID: 4008)
- Unicorn-48491.exe (PID: 4980)
- Unicorn-33426.exe (PID: 4024)
- Unicorn-8353.exe (PID: 1388)
- Unicorn-60891.exe (PID: 1764)
- Unicorn-19112.exe (PID: 2268)
- Unicorn-64783.exe (PID: 2420)
- Unicorn-12213.exe (PID: 5360)
- Unicorn-53019.exe (PID: 5400)
- Unicorn-35842.exe (PID: 5756)
- Unicorn-36299.exe (PID: 4188)
- Unicorn-32385.exe (PID: 6752)
- Unicorn-17118.exe (PID: 2552)
- Unicorn-46806.exe (PID: 1760)
- Unicorn-44006.exe (PID: 6592)
- Unicorn-12209.exe (PID: 5344)
- Unicorn-48411.exe (PID: 3900)
- Unicorn-61967.exe (PID: 5256)
- Unicorn-47899.exe (PID: 5008)
- Unicorn-31691.exe (PID: 5116)
- Unicorn-57849.exe (PID: 6700)
- Unicorn-10952.exe (PID: 5556)
- Unicorn-23113.exe (PID: 1912)
- Unicorn-58909.exe (PID: 7216)
- Unicorn-34680.exe (PID: 644)
- Unicorn-40003.exe (PID: 7176)
- Unicorn-46719.exe (PID: 7200)
- Unicorn-12593.exe (PID: 7236)
- Unicorn-48530.exe (PID: 7224)
- Unicorn-23928.exe (PID: 7252)
- Unicorn-35339.exe (PID: 1240)
- Unicorn-20451.exe (PID: 7260)
- Unicorn-1047.exe (PID: 7192)
- Unicorn-33640.exe (PID: 7336)
- Unicorn-8058.exe (PID: 7324)
- Unicorn-23435.exe (PID: 7344)
- Unicorn-2033.exe (PID: 7276)
- Unicorn-39963.exe (PID: 7352)
- Unicorn-25931.exe (PID: 7404)
- Unicorn-36049.exe (PID: 7380)
- Unicorn-42267.exe (PID: 7396)
- Unicorn-3765.exe (PID: 7420)
- Unicorn-55567.exe (PID: 7412)
- Unicorn-24203.exe (PID: 7312)
- Unicorn-47662.exe (PID: 7368)
- Unicorn-55650.exe (PID: 7388)
- Unicorn-48619.exe (PID: 7500)
- Unicorn-18059.exe (PID: 7516)
- Unicorn-28369.exe (PID: 7508)
- Unicorn-11544.exe (PID: 7544)
- Unicorn-49423.exe (PID: 7592)
- Unicorn-60456.exe (PID: 7672)
- Unicorn-49771.exe (PID: 7564)
- Unicorn-42594.exe (PID: 7760)
- Unicorn-36315.exe (PID: 7656)
- Unicorn-17016.exe (PID: 7788)
- Unicorn-42859.exe (PID: 7768)
- Unicorn-29382.exe (PID: 7832)
- Unicorn-5287.exe (PID: 7644)
- Unicorn-9781.exe (PID: 7824)
- Unicorn-40695.exe (PID: 7844)
- Unicorn-54710.exe (PID: 7884)
- Unicorn-49463.exe (PID: 7860)
- Unicorn-27518.exe (PID: 7904)
- Unicorn-48287.exe (PID: 7872)
- Unicorn-28635.exe (PID: 7924)
- Unicorn-47659.exe (PID: 7944)
- Unicorn-4727.exe (PID: 8140)
- Unicorn-14248.exe (PID: 8088)
- Unicorn-16465.exe (PID: 8112)
- Unicorn-16081.exe (PID: 8148)
- Unicorn-517.exe (PID: 6988)
- Unicorn-21723.exe (PID: 8176)
- Unicorn-38059.exe (PID: 8184)
- Unicorn-52319.exe (PID: 3888)
- Unicorn-51058.exe (PID: 5772)
- Unicorn-53798.exe (PID: 8000)
- Unicorn-37976.exe (PID: 8020)
- Unicorn-32504.exe (PID: 8168)
- Unicorn-37218.exe (PID: 1132)
- Unicorn-8951.exe (PID: 6656)
- Unicorn-44868.exe (PID: 2616)
- Unicorn-13658.exe (PID: 8224)
- Unicorn-63736.exe (PID: 8244)
- Unicorn-5879.exe (PID: 1300)
- Unicorn-15963.exe (PID: 8256)
- Unicorn-38168.exe (PID: 8036)
- Unicorn-38286.exe (PID: 5328)
- Unicorn-27425.exe (PID: 900)
- Unicorn-22216.exe (PID: 8300)
- Unicorn-31374.exe (PID: 8332)
- Unicorn-1774.exe (PID: 8340)
- Unicorn-61062.exe (PID: 8352)
- Unicorn-51899.exe (PID: 8380)
- Unicorn-13694.exe (PID: 8268)
- Unicorn-42120.exe (PID: 8484)
- Unicorn-11281.exe (PID: 8292)
- Unicorn-1930.exe (PID: 8492)
- Unicorn-1930.exe (PID: 8500)
- Unicorn-279.exe (PID: 8508)
- Unicorn-8186.exe (PID: 8520)
- Unicorn-35784.exe (PID: 8796)
- Unicorn-53090.exe (PID: 8812)
- Unicorn-18488.exe (PID: 8832)
- Unicorn-34795.exe (PID: 8656)
- Unicorn-12327.exe (PID: 8632)
- Unicorn-59810.exe (PID: 8680)
- Unicorn-40209.exe (PID: 8688)
- Unicorn-53090.exe (PID: 8532)
- Unicorn-59608.exe (PID: 8560)
- Unicorn-42504.exe (PID: 8600)
- Unicorn-53945.exe (PID: 8672)
- Unicorn-59307.exe (PID: 8708)
- Unicorn-11367.exe (PID: 8716)
- Unicorn-44918.exe (PID: 8868)
- Unicorn-44616.exe (PID: 8700)
- Unicorn-29432.exe (PID: 8772)
- Unicorn-32446.exe (PID: 8780)
- Unicorn-60681.exe (PID: 8856)
- Unicorn-53656.exe (PID: 8904)
- Unicorn-32721.exe (PID: 8912)
- Unicorn-62737.exe (PID: 8936)
- Unicorn-61227.exe (PID: 8752)
- Unicorn-53090.exe (PID: 8788)
- Unicorn-2810.exe (PID: 8944)
- Unicorn-37598.exe (PID: 8724)
- Unicorn-35518.exe (PID: 8964)
- Unicorn-55119.exe (PID: 8956)
- Unicorn-26966.exe (PID: 8984)
- Unicorn-53931.exe (PID: 8996)
- Unicorn-34942.exe (PID: 9024)
- Unicorn-61414.exe (PID: 9008)
- Unicorn-33297.exe (PID: 9036)
- Unicorn-63256.exe (PID: 8732)
- Unicorn-44217.exe (PID: 9312)
- Unicorn-41752.exe (PID: 9336)
- Unicorn-13406.exe (PID: 9296)
- Unicorn-6583.exe (PID: 9280)
- Unicorn-18321.exe (PID: 9272)
- Unicorn-13406.exe (PID: 9304)
- Unicorn-50895.exe (PID: 9260)
- Unicorn-59529.exe (PID: 7000)
- Unicorn-23304.exe (PID: 9252)
- Unicorn-50392.exe (PID: 6584)
- Unicorn-50584.exe (PID: 4152)
- Unicorn-50598.exe (PID: 9100)
- Unicorn-61830.exe (PID: 9200)
- Unicorn-42838.exe (PID: 9188)
- Unicorn-6981.exe (PID: 9152)
- Unicorn-36862.exe (PID: 9092)
- Unicorn-6759.exe (PID: 9132)
- Unicorn-26197.exe (PID: 8544)
- Unicorn-12846.exe (PID: 9160)
- Unicorn-63858.exe (PID: 8048)
- Unicorn-44258.exe (PID: 6032)
- Unicorn-64808.exe (PID: 8032)
- Unicorn-12462.exe (PID: 4652)
- Unicorn-7143.exe (PID: 9116)
- Unicorn-12551.exe (PID: 9936)
- Unicorn-558.exe (PID: 9648)
- Unicorn-50911.exe (PID: 9952)
- Unicorn-30817.exe (PID: 9608)
- Unicorn-23998.exe (PID: 9616)
- Unicorn-46936.exe (PID: 7744)
- Unicorn-62971.exe (PID: 7728)
- Unicorn-38680.exe (PID: 9692)
- Unicorn-44923.exe (PID: 9916)
- Unicorn-7034.exe (PID: 9720)
- Unicorn-25528.exe (PID: 9744)
- Unicorn-31560.exe (PID: 9212)
- Unicorn-56059.exe (PID: 9760)
- Unicorn-1134.exe (PID: 9796)
- Unicorn-47542.exe (PID: 9780)
- Unicorn-14869.exe (PID: 9804)
- Unicorn-50895.exe (PID: 9816)
- Unicorn-44072.exe (PID: 9832)
- Unicorn-27736.exe (PID: 9824)
- Unicorn-41460.exe (PID: 9840)
- Unicorn-43880.exe (PID: 9860)
- Unicorn-64507.exe (PID: 8012)
- Unicorn-37336.exe (PID: 9768)
- Unicorn-62136.exe (PID: 9908)
- Unicorn-13032.exe (PID: 9624)
- Unicorn-63599.exe (PID: 10128)
- Unicorn-31576.exe (PID: 10160)
- Unicorn-18888.exe (PID: 10136)
- Unicorn-29355.exe (PID: 10024)
- Unicorn-53126.exe (PID: 11220)
- Unicorn-61368.exe (PID: 10196)
- Unicorn-47720.exe (PID: 10212)
- Unicorn-57158.exe (PID: 10016)
- Unicorn-11453.exe (PID: 10568)
- Unicorn-26008.exe (PID: 10472)
- Unicorn-16037.exe (PID: 10360)
- Unicorn-25100.exe (PID: 10288)
- Unicorn-5255.exe (PID: 8060)
- Unicorn-15653.exe (PID: 2064)
- Unicorn-14309.exe (PID: 10300)
- Unicorn-16993.exe (PID: 10252)
- Unicorn-661.exe (PID: 10316)
- Unicorn-657.exe (PID: 2516)
- Unicorn-51944.exe (PID: 10560)
- Unicorn-46843.exe (PID: 10228)
- Unicorn-31384.exe (PID: 10220)
- Unicorn-14392.exe (PID: 4944)
- Unicorn-44399.exe (PID: 10612)
- Unicorn-25825.exe (PID: 10056)
- Unicorn-26200.exe (PID: 10460)
- Unicorn-12167.exe (PID: 10040)
- Unicorn-25825.exe (PID: 10632)
- Unicorn-28971.exe (PID: 10032)
- Unicorn-29090.exe (PID: 10048)
- Unicorn-11534.exe (PID: 10592)
- Unicorn-50024.exe (PID: 10576)
- Unicorn-59282.exe (PID: 10600)
- Unicorn-42712.exe (PID: 10068)
- Unicorn-45992.exe (PID: 10080)
- Unicorn-7911.exe (PID: 10168)
- Unicorn-8903.exe (PID: 10552)
- Unicorn-47227.exe (PID: 10180)
- Unicorn-25899.exe (PID: 9868)
- Unicorn-45307.exe (PID: 10092)
- Unicorn-17160.exe (PID: 10152)
- Unicorn-22677.exe (PID: 11032)
- Unicorn-57448.exe (PID: 10788)
- Unicorn-39118.exe (PID: 11000)
- Unicorn-64834.exe (PID: 9632)
- Unicorn-28543.exe (PID: 10992)
- Unicorn-58719.exe (PID: 10972)
- Unicorn-3342.exe (PID: 10984)
- Unicorn-19877.exe (PID: 10964)
- Unicorn-24209.exe (PID: 11076)
- Unicorn-1429.exe (PID: 11068)
- Unicorn-58107.exe (PID: 11052)
- Unicorn-3719.exe (PID: 10924)
- Unicorn-44399.exe (PID: 11132)
- Unicorn-41304.exe (PID: 300)
- Unicorn-30367.exe (PID: 10584)
- Unicorn-59320.exe (PID: 10900)
- Unicorn-58143.exe (PID: 10948)
- Unicorn-19877.exe (PID: 10940)
- Unicorn-33403.exe (PID: 10908)
- Unicorn-41688.exe (PID: 10916)
- Unicorn-5255.exe (PID: 2332)
- Unicorn-15146.exe (PID: 4272)
- Unicorn-49080.exe (PID: 2968)
- Unicorn-29793.exe (PID: 12260)
- Unicorn-32171.exe (PID: 12268)
- Unicorn-23640.exe (PID: 456)
- Unicorn-31976.exe (PID: 11284)
- Unicorn-46542.exe (PID: 11300)
- Unicorn-28062.exe (PID: 11360)
- Unicorn-22677.exe (PID: 11140)
- Unicorn-45528.exe (PID: 11168)
- Unicorn-20360.exe (PID: 11488)
- Unicorn-48822.exe (PID: 11596)
- Unicorn-35086.exe (PID: 11572)
- Unicorn-54687.exe (PID: 11548)
- Unicorn-46022.exe (PID: 11564)
- Unicorn-32125.exe (PID: 11212)
- Unicorn-48822.exe (PID: 11604)
- Unicorn-35086.exe (PID: 11588)
- Unicorn-48822.exe (PID: 11612)
- Unicorn-48822.exe (PID: 11620)
- Unicorn-58143.exe (PID: 10932)
- Unicorn-40344.exe (PID: 11680)
- Unicorn-4142.exe (PID: 11772)
- Unicorn-63894.exe (PID: 11800)
- Unicorn-55912.exe (PID: 11832)
- Unicorn-59311.exe (PID: 11904)
- Unicorn-3374.exe (PID: 11864)
- Unicorn-45928.exe (PID: 11932)
- Unicorn-25870.exe (PID: 11912)
- Unicorn-36120.exe (PID: 11940)
- Unicorn-53135.exe (PID: 11920)
- Unicorn-44786.exe (PID: 11968)
- Unicorn-44786.exe (PID: 11960)
- Unicorn-13447.exe (PID: 11976)
- Unicorn-52767.exe (PID: 11784)
- Unicorn-25185.exe (PID: 11996)
- Unicorn-12295.exe (PID: 12004)
- Unicorn-8853.exe (PID: 12016)
- Unicorn-14599.exe (PID: 12048)
- Unicorn-14215.exe (PID: 12056)
- Unicorn-57670.exe (PID: 12032)
- Unicorn-47355.exe (PID: 12132)
- Unicorn-15559.exe (PID: 12140)
- Unicorn-1911.exe (PID: 12172)
- Unicorn-18056.exe (PID: 12148)
- Unicorn-17179.exe (PID: 12160)
- Unicorn-18248.exe (PID: 12180)
- Unicorn-50920.exe (PID: 12192)
- Unicorn-50920.exe (PID: 12200)
- Unicorn-49659.exe (PID: 12244)
- Unicorn-851.exe (PID: 12252)
- Unicorn-16795.exe (PID: 12224)
- Unicorn-5063.exe (PID: 11268)
- Unicorn-17096.exe (PID: 11028)
- Unicorn-40168.exe (PID: 11044)
- Unicorn-759.exe (PID: 11100)
- Unicorn-49990.exe (PID: 11120)
- Unicorn-23256.exe (PID: 11124)
- Unicorn-8933.exe (PID: 12292)
- Unicorn-38907.exe (PID: 4572)
- Unicorn-25269.exe (PID: 11536)
- Unicorn-18136.exe (PID: 11396)
- Unicorn-19480.exe (PID: 11368)
- Unicorn-38139.exe (PID: 12328)
- Unicorn-37080.exe (PID: 12336)
- Unicorn-60735.exe (PID: 11352)
- Unicorn-22094.exe (PID: 11380)
- Unicorn-63999.exe (PID: 11320)
- Unicorn-58134.exe (PID: 11336)
- Unicorn-31976.exe (PID: 11276)
- Unicorn-36859.exe (PID: 10268)
- Unicorn-18661.exe (PID: 12372)
- Unicorn-8455.exe (PID: 12408)
- Unicorn-54127.exe (PID: 12400)
- Unicorn-32043.exe (PID: 12440)
- Unicorn-34312.exe (PID: 12432)
- Unicorn-24408.exe (PID: 12424)
- Unicorn-20577.exe (PID: 12416)
- Unicorn-41798.exe (PID: 11328)
- Unicorn-52102.exe (PID: 12356)
- Unicorn-24209.exe (PID: 11292)
- Unicorn-302.exe (PID: 11524)
- Unicorn-8711.exe (PID: 11308)
- Unicorn-35086.exe (PID: 12472)
- Unicorn-35086.exe (PID: 11580)
- Unicorn-52678.exe (PID: 12504)
- Unicorn-33256.exe (PID: 12620)
- Unicorn-21340.exe (PID: 12676)
- Unicorn-21340.exe (PID: 12668)
- Unicorn-24491.exe (PID: 12532)
- Unicorn-32763.exe (PID: 12612)
- Unicorn-64911.exe (PID: 13920)
- Unicorn-33942.exe (PID: 13844)
- Unicorn-59592.exe (PID: 12856)
- Unicorn-19816.exe (PID: 13900)
- Unicorn-38921.exe (PID: 11948)
- Unicorn-64297.exe (PID: 12748)
- Unicorn-34718.exe (PID: 12760)
- Unicorn-5118.exe (PID: 12792)
- Unicorn-2046.exe (PID: 12808)
- Unicorn-51055.exe (PID: 12800)
- Unicorn-61023.exe (PID: 12824)
- Unicorn-16737.exe (PID: 12832)
- Unicorn-26462.exe (PID: 12952)
- Unicorn-15294.exe (PID: 12124)
- Unicorn-44719.exe (PID: 13040)
- Unicorn-48285.exe (PID: 13052)
- Unicorn-4823.exe (PID: 13096)
- Unicorn-63686.exe (PID: 13060)
- Unicorn-4631.exe (PID: 13140)
- Unicorn-62280.exe (PID: 12896)
- Unicorn-62088.exe (PID: 12864)
- Unicorn-13271.exe (PID: 12928)
- Unicorn-4247.exe (PID: 13188)
- Unicorn-21390.exe (PID: 14496)
- Unicorn-56904.exe (PID: 13356)
- Unicorn-8942.exe (PID: 11404)
- Unicorn-25576.exe (PID: 13460)
- Unicorn-64216.exe (PID: 13504)
- Unicorn-32043.exe (PID: 13516)
- Unicorn-49853.exe (PID: 13576)
- Unicorn-14247.exe (PID: 13584)
- Unicorn-5098.exe (PID: 13272)
- Unicorn-24920.exe (PID: 14484)
- Unicorn-60770.exe (PID: 13676)
- Unicorn-31627.exe (PID: 13640)
- Unicorn-20005.exe (PID: 12512)
- Unicorn-41641.exe (PID: 13660)
- Unicorn-19432.exe (PID: 13948)
- Unicorn-60770.exe (PID: 13668)
- Unicorn-65451.exe (PID: 13756)
- Unicorn-31775.exe (PID: 15388)
- Unicorn-64683.exe (PID: 13616)
- Unicorn-759.exe (PID: 11988)
- Unicorn-34824.exe (PID: 15228)
- Unicorn-48854.exe (PID: 13308)
- Unicorn-50134.exe (PID: 15448)
- Unicorn-11079.exe (PID: 14556)
- Unicorn-40955.exe (PID: 15236)
- Unicorn-54726.exe (PID: 14608)
- Unicorn-27608.exe (PID: 14632)
- Unicorn-13605.exe (PID: 14764)
- Unicorn-29173.exe (PID: 14776)
- Unicorn-65298.exe (PID: 14812)
- Unicorn-18894.exe (PID: 14916)
- Unicorn-18894.exe (PID: 14892)
- Unicorn-18894.exe (PID: 14900)
- Unicorn-18894.exe (PID: 14908)
- Unicorn-18894.exe (PID: 14936)
- Unicorn-18894.exe (PID: 14944)
- Unicorn-18017.exe (PID: 14984)
- Unicorn-18894.exe (PID: 14952)
- Unicorn-18894.exe (PID: 14960)
- Unicorn-31752.exe (PID: 14968)
- Unicorn-18017.exe (PID: 14976)
- Unicorn-51375.exe (PID: 14992)
- Unicorn-17934.exe (PID: 15008)
- Unicorn-31669.exe (PID: 15016)
- Unicorn-18894.exe (PID: 14884)
- Unicorn-26155.exe (PID: 14536)
- Unicorn-64342.exe (PID: 14796)
- Unicorn-18894.exe (PID: 14876)
- Unicorn-45688.exe (PID: 15244)
- Unicorn-28952.exe (PID: 15040)
- Unicorn-64614.exe (PID: 15068)
- Unicorn-38495.exe (PID: 15000)
- Unicorn-18894.exe (PID: 15376)
- Unicorn-37535.exe (PID: 15024)
- Unicorn-12942.exe (PID: 15168)
- Unicorn-32629.exe (PID: 15032)
- Unicorn-45615.exe (PID: 15156)
- Unicorn-58002.exe (PID: 15128)
- Unicorn-39528.exe (PID: 15108)
- Unicorn-60856.exe (PID: 14620)
- Unicorn-7445.exe (PID: 14680)
- Unicorn-24357.exe (PID: 14656)
- Unicorn-30488.exe (PID: 14688)
- Unicorn-20206.exe (PID: 14712)
- Unicorn-48879.exe (PID: 14720)
- Unicorn-16206.exe (PID: 14736)
- Unicorn-65407.exe (PID: 14748)
- Unicorn-13959.exe (PID: 14648)
- Unicorn-19470.exe (PID: 14756)
- Unicorn-5351.exe (PID: 16432)
- Unicorn-37951.exe (PID: 16456)
- Unicorn-18350.exe (PID: 16464)
- Unicorn-50134.exe (PID: 15472)
- Unicorn-50134.exe (PID: 15464)
- Unicorn-50134.exe (PID: 15456)
- Unicorn-29941.exe (PID: 14728)
- Unicorn-52118.exe (PID: 13444)
- Unicorn-14847.exe (PID: 15496)
- Unicorn-5917.exe (PID: 15504)
- Unicorn-21755.exe (PID: 15572)
- Unicorn-46174.exe (PID: 15540)
- Unicorn-6295.exe (PID: 15560)
- Unicorn-38703.exe (PID: 15552)
- Unicorn-5838.exe (PID: 15520)
- Unicorn-5838.exe (PID: 15528)
- Unicorn-13208.exe (PID: 15512)
- Unicorn-62902.exe (PID: 15580)
- Unicorn-59528.exe (PID: 15648)
- Unicorn-26926.exe (PID: 15588)
- Unicorn-63686.exe (PID: 14116)
- Unicorn-4280.exe (PID: 15696)
- Unicorn-4280.exe (PID: 15704)
- Unicorn-4280.exe (PID: 15712)
- Unicorn-51551.exe (PID: 15720)
- Unicorn-57151.exe (PID: 15736)
- Unicorn-4280.exe (PID: 15728)
- Unicorn-5349.exe (PID: 15680)
- Unicorn-4280.exe (PID: 15688)
The sample compiled with chinese language support
- 1 (68).exe (PID: 5072)
Reads the software policy settings
- slui.exe (PID: 2564)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
669
Monitored processes
537
Malicious processes
90
Suspicious processes
67
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 300 | C:\Users\admin\AppData\Local\Temp\Unicorn-41304.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-41304.exe | Unicorn-44918.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 456 | C:\Users\admin\AppData\Local\Temp\Unicorn-23640.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-23640.exe | Unicorn-31576.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 644 | C:\Users\admin\AppData\Local\Temp\Unicorn-34680.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-34680.exe | Unicorn-19112.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 668 | C:\Users\admin\AppData\Local\Temp\Unicorn-49528.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-49528.exe | 1 (68).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 900 | C:\Users\admin\AppData\Local\Temp\Unicorn-27425.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-27425.exe | Unicorn-17118.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 920 | C:\Users\admin\AppData\Local\Temp\Unicorn-11697.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-11697.exe | Unicorn-49528.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1132 | C:\Users\admin\AppData\Local\Temp\Unicorn-37218.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-37218.exe | Unicorn-58790.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1164 | C:\Users\admin\AppData\Local\Temp\Unicorn-27752.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-27752.exe | Unicorn-49528.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1184 | C:\Users\admin\AppData\Local\Temp\Unicorn-33400.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-33400.exe | Unicorn-49528.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1240 | C:\Users\admin\AppData\Local\Temp\Unicorn-35339.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-35339.exe | Unicorn-62834.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
10 684
Read events
10 684
Write events
0
Delete events
0
Modification events
Executable files
803
Suspicious files
0
Text files
0
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 668 | Unicorn-49528.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-11697.exe | executable | |
MD5:5FD2513D46E103B87F49BA835AE2B7B8 | SHA256:F9114ACF21BA51BEE8D381C0A63E919D18D40481A938A99124D93A0E663F8745 | |||
| 5072 | 1 (68).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-49528.exe | executable | |
MD5:5CDE8C9248C0D248DD9EB1703EE183DB | SHA256:72FF87FB848A24430B6CD58BDBB8110BA3A8347388DD464404BF9892287B3C7A | |||
| 5072 | 1 (68).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-61967.exe | executable | |
MD5:EFB0717A9985C5B4F1F2D64AFBD6A5EF | SHA256:D9E3C49CA8D968FEC932DAD8F08747512BC2339D1A85E7CD90C0291C89AFCA54 | |||
| 668 | Unicorn-49528.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-27752.exe | executable | |
MD5:DE6319C19A2ED434FFA3398A930A2454 | SHA256:5BBADC8EEB96F126238E121A25818F3F7F689A2BE0048A8C2B679A64F65B58CE | |||
| 5256 | Unicorn-61967.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-15527.exe | executable | |
MD5:F68726450C860D848B9BD43094642212 | SHA256:CBAE89059648289B2D4ED8202F6E2376EBF813FF69E81EDB2CB10A8E365B5D59 | |||
| 5072 | 1 (68).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-58790.exe | executable | |
MD5:41E716C2AAEAC0BFE87D6A435E7B6742 | SHA256:1F24C174A09B5B64E226BBBFF5936E31223B25BA26F266CC41559217444230AD | |||
| 668 | Unicorn-49528.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-33400.exe | executable | |
MD5:931637F309FC66C0C6330E73EB2559BB | SHA256:562913F515E3C766772368B62026B929AA545792683468817C9E0E5C44F76982 | |||
| 920 | Unicorn-11697.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-58029.exe | executable | |
MD5:3366E8A86F08CFEDD8FD4171ECADB971 | SHA256:E5BF26466EC876CFBBBF6E14044CD022F5E8DFCF82529CE79BE3FC2556774D65 | |||
| 4980 | Unicorn-48491.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-60891.exe | executable | |
MD5:F7D762218B8120E6382C38681D03047E | SHA256:91643E6B691D866D0B0A6994552CA2C566467625A75A00149489F5FB12C85907 | |||
| 1184 | Unicorn-33400.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-12213.exe | executable | |
MD5:D12173BEEE38C3B6F7EF6C58F0EEE6FF | SHA256:AC1CA650167D1F25B0EBBC054AA84399879D118E55BB3CE9788A25C9433BE592 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
24
DNS requests
16
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
5496 | MoUsoCoreWorker.exe | GET | 200 | 23.53.40.176:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
— | — | GET | 200 | 23.53.40.176:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
5772 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
7988 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
7988 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
2104 | svchost.exe | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
— | — | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
5496 | MoUsoCoreWorker.exe | 23.53.40.176:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
— | — | 23.53.40.176:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
3216 | svchost.exe | 40.113.110.67:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.159.0:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
2112 | svchost.exe | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |