| File name: | 1 (559) |
| Full analysis: | https://app.any.run/tasks/cbb27646-9996-4be0-9633-8eea501bbac1 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 23:44:36 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 39A09CFE8AA7765AEF1073EF1895EDA0 |
| SHA1: | 47E0DD89EB9B1DDADF246D60E24BF58916E213A0 |
| SHA256: | 628A3C3CEA79379162320D28FA76261802E3E02938A4064C096B52EBDD01AA57 |
| SSDEEP: | 6144:ACHQieIVDD8PA5vQU1eWK1fxjtBulp8GBsLWOdOYwk/8SwuwpyAvEh4Vb/jQkfM/:AeXFOPA54UsBBY+as6OdOYbxxDxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- 1 (559).exe (PID: 5280)
- Unicorn-53082.exe (PID: 5344)
- Unicorn-14981.exe (PID: 5968)
- Unicorn-58090.exe (PID: 6028)
- Unicorn-37300.exe (PID: 2236)
- Unicorn-64867.exe (PID: 5256)
- Unicorn-2759.exe (PID: 5728)
- Unicorn-8889.exe (PID: 7036)
- Unicorn-36684.exe (PID: 1164)
- Unicorn-30654.exe (PID: 5640)
- Unicorn-36776.exe (PID: 3240)
- Unicorn-51074.exe (PID: 5304)
- Unicorn-29070.exe (PID: 1188)
- Unicorn-27124.exe (PID: 5384)
- Unicorn-51074.exe (PID: 4180)
- Unicorn-46725.exe (PID: 6640)
- Unicorn-5163.exe (PID: 2240)
- Unicorn-41104.exe (PID: 5260)
- Unicorn-22076.exe (PID: 4188)
- Unicorn-9823.exe (PID: 6576)
- Unicorn-48718.exe (PID: 736)
- Unicorn-63663.exe (PID: 1240)
- Unicorn-34136.exe (PID: 7220)
- Unicorn-34136.exe (PID: 7244)
- Unicorn-34136.exe (PID: 7228)
- Unicorn-44997.exe (PID: 7236)
- Unicorn-33373.exe (PID: 7296)
- Unicorn-36174.exe (PID: 7288)
- Unicorn-57249.exe (PID: 7304)
- Unicorn-2807.exe (PID: 7452)
- Unicorn-54509.exe (PID: 7436)
- Unicorn-669.exe (PID: 7416)
- Unicorn-58130.exe (PID: 7460)
- Unicorn-10975.exe (PID: 7488)
- Unicorn-6891.exe (PID: 7512)
- Unicorn-52563.exe (PID: 7504)
- Unicorn-24113.exe (PID: 4464)
- Unicorn-16814.exe (PID: 7556)
- Unicorn-18878.exe (PID: 7520)
- Unicorn-48287.exe (PID: 7576)
- Unicorn-41986.exe (PID: 7636)
- Unicorn-48116.exe (PID: 7628)
- Unicorn-36610.exe (PID: 7644)
- Unicorn-42448.exe (PID: 7724)
- Unicorn-21884.exe (PID: 7196)
- Unicorn-7275.exe (PID: 7688)
- Unicorn-7275.exe (PID: 7680)
- Unicorn-39756.exe (PID: 7772)
- Unicorn-56429.exe (PID: 7188)
- Unicorn-53384.exe (PID: 7716)
- Unicorn-9029.exe (PID: 7764)
- Unicorn-11067.exe (PID: 7812)
- Unicorn-92.exe (PID: 7868)
- Unicorn-52008.exe (PID: 7804)
- Unicorn-17198.exe (PID: 7856)
- Unicorn-62869.exe (PID: 7828)
- Unicorn-9776.exe (PID: 7844)
- Unicorn-62869.exe (PID: 7836)
- Unicorn-19427.exe (PID: 7884)
- Unicorn-25293.exe (PID: 7876)
- Unicorn-17198.exe (PID: 7820)
- Unicorn-27072.exe (PID: 8028)
- Unicorn-8043.exe (PID: 8044)
- Unicorn-57244.exe (PID: 8008)
- Unicorn-56952.exe (PID: 8064)
- Unicorn-13113.exe (PID: 7752)
- Unicorn-12057.exe (PID: 8112)
- Unicorn-5015.exe (PID: 8160)
- Unicorn-50830.exe (PID: 8088)
- Unicorn-56427.exe (PID: 6480)
- Unicorn-14195.exe (PID: 6872)
- Unicorn-62649.exe (PID: 8124)
- Unicorn-56427.exe (PID: 4736)
- Unicorn-1004.exe (PID: 7356)
- Unicorn-44267.exe (PID: 2568)
- Unicorn-15949.exe (PID: 6416)
- Unicorn-37382.exe (PID: 6148)
- Unicorn-44175.exe (PID: 1280)
- Unicorn-56235.exe (PID: 1452)
- Unicorn-17432.exe (PID: 644)
- Unicorn-39948.exe (PID: 7604)
- Unicorn-7610.exe (PID: 6816)
- Unicorn-38891.exe (PID: 5576)
- Unicorn-30480.exe (PID: 8276)
- Unicorn-46012.exe (PID: 2644)
- Unicorn-573.exe (PID: 8344)
- Unicorn-14216.exe (PID: 8232)
- Unicorn-61471.exe (PID: 8284)
- Unicorn-18.exe (PID: 8296)
- Unicorn-34536.exe (PID: 8380)
- Unicorn-4102.exe (PID: 8316)
- Unicorn-59888.exe (PID: 8224)
- Unicorn-59333.exe (PID: 8328)
- Unicorn-35383.exe (PID: 8336)
- Unicorn-33075.exe (PID: 8452)
- Unicorn-50873.exe (PID: 8404)
- Unicorn-48065.exe (PID: 8420)
- Unicorn-57003.exe (PID: 8412)
- Unicorn-14600.exe (PID: 8492)
- Unicorn-6432.exe (PID: 8472)
- Unicorn-58326.exe (PID: 8584)
- Unicorn-16739.exe (PID: 8556)
- Unicorn-13113.exe (PID: 7748)
- Unicorn-20823.exe (PID: 8656)
- Unicorn-45227.exe (PID: 8868)
- Unicorn-25269.exe (PID: 8752)
- Unicorn-13017.exe (PID: 8664)
- Unicorn-43381.exe (PID: 8516)
- Unicorn-61855.exe (PID: 8504)
- Unicorn-47465.exe (PID: 8564)
- Unicorn-35767.exe (PID: 8632)
- Unicorn-14408.exe (PID: 8736)
- Unicorn-55633.exe (PID: 8648)
- Unicorn-43381.exe (PID: 8524)
- Unicorn-14408.exe (PID: 8744)
- Unicorn-35767.exe (PID: 8640)
- Unicorn-47465.exe (PID: 8568)
- Unicorn-53395.exe (PID: 8844)
- Unicorn-31491.exe (PID: 8816)
- Unicorn-16281.exe (PID: 8832)
- Unicorn-31491.exe (PID: 8820)
- Unicorn-61398.exe (PID: 8808)
- Unicorn-53263.exe (PID: 8800)
- Unicorn-50179.exe (PID: 8984)
- Unicorn-16115.exe (PID: 8996)
- Unicorn-42565.exe (PID: 9104)
- Unicorn-59339.exe (PID: 8912)
- Unicorn-52317.exe (PID: 9016)
- Unicorn-56209.exe (PID: 9164)
- Unicorn-58247.exe (PID: 9080)
- Unicorn-11284.exe (PID: 8976)
- Unicorn-26613.exe (PID: 9188)
- Unicorn-23656.exe (PID: 9208)
- Unicorn-9364.exe (PID: 8140)
- Unicorn-11476.exe (PID: 3676)
- Unicorn-1362.exe (PID: 9248)
- Unicorn-54455.exe (PID: 9240)
- Unicorn-34346.exe (PID: 9280)
- Unicorn-42017.exe (PID: 9320)
- Unicorn-7968.exe (PID: 9308)
- Unicorn-6899.exe (PID: 9352)
- Unicorn-7968.exe (PID: 9300)
- Unicorn-42587.exe (PID: 9412)
- Unicorn-4247.exe (PID: 9484)
- Unicorn-22721.exe (PID: 9404)
- Unicorn-32372.exe (PID: 9432)
- Unicorn-56977.exe (PID: 9584)
- Unicorn-8331.exe (PID: 9468)
- Unicorn-184.exe (PID: 9620)
- Unicorn-10390.exe (PID: 9692)
- Unicorn-32473.exe (PID: 9540)
- Unicorn-16521.exe (PID: 9680)
- Unicorn-45201.exe (PID: 9672)
- Unicorn-60246.exe (PID: 9768)
- Unicorn-33049.exe (PID: 9732)
- Unicorn-23105.exe (PID: 9824)
- Unicorn-65529.exe (PID: 9792)
- Unicorn-10853.exe (PID: 9800)
- Unicorn-31895.exe (PID: 9896)
- Unicorn-32857.exe (PID: 9876)
- Unicorn-59975.exe (PID: 9916)
- Unicorn-54958.exe (PID: 9856)
- Unicorn-39463.exe (PID: 9932)
- Unicorn-14693.exe (PID: 9984)
- Unicorn-62576.exe (PID: 9952)
Executable content was dropped or overwritten
- Unicorn-53082.exe (PID: 5344)
- 1 (559).exe (PID: 5280)
- Unicorn-14981.exe (PID: 5968)
- Unicorn-58090.exe (PID: 6028)
- Unicorn-64867.exe (PID: 5256)
- Unicorn-37300.exe (PID: 2236)
- Unicorn-8889.exe (PID: 7036)
- Unicorn-36776.exe (PID: 3240)
- Unicorn-51074.exe (PID: 5304)
- Unicorn-2759.exe (PID: 5728)
- Unicorn-27124.exe (PID: 5384)
- Unicorn-5163.exe (PID: 2240)
- Unicorn-36684.exe (PID: 1164)
- Unicorn-22076.exe (PID: 4188)
- Unicorn-41104.exe (PID: 5260)
- Unicorn-9823.exe (PID: 6576)
- Unicorn-29070.exe (PID: 1188)
- Unicorn-24113.exe (PID: 4464)
- Unicorn-30654.exe (PID: 5640)
- Unicorn-63663.exe (PID: 1240)
- Unicorn-48718.exe (PID: 736)
- Unicorn-56429.exe (PID: 7188)
- Unicorn-34136.exe (PID: 7220)
- Unicorn-44997.exe (PID: 7236)
- Unicorn-34136.exe (PID: 7244)
- Unicorn-33373.exe (PID: 7296)
- Unicorn-46725.exe (PID: 6640)
- Unicorn-36174.exe (PID: 7288)
- Unicorn-54509.exe (PID: 7436)
- Unicorn-2807.exe (PID: 7452)
- Unicorn-669.exe (PID: 7416)
- Unicorn-10975.exe (PID: 7488)
- Unicorn-6891.exe (PID: 7512)
- Unicorn-58130.exe (PID: 7460)
- Unicorn-16814.exe (PID: 7556)
- Unicorn-52563.exe (PID: 7504)
- Unicorn-39948.exe (PID: 7604)
- Unicorn-48287.exe (PID: 7576)
- Unicorn-7275.exe (PID: 7688)
- Unicorn-48116.exe (PID: 7628)
- Unicorn-41986.exe (PID: 7636)
- Unicorn-7275.exe (PID: 7680)
- Unicorn-21884.exe (PID: 7196)
- Unicorn-36610.exe (PID: 7644)
- Unicorn-42448.exe (PID: 7724)
- Unicorn-53384.exe (PID: 7716)
- Unicorn-39756.exe (PID: 7772)
- Unicorn-52008.exe (PID: 7804)
- Unicorn-13113.exe (PID: 7748)
- Unicorn-13113.exe (PID: 7752)
- Unicorn-11067.exe (PID: 7812)
- Unicorn-19427.exe (PID: 7884)
- Unicorn-62869.exe (PID: 7836)
- Unicorn-9776.exe (PID: 7844)
- Unicorn-17198.exe (PID: 7856)
- Unicorn-57249.exe (PID: 7304)
- Unicorn-34136.exe (PID: 7228)
- Unicorn-17198.exe (PID: 7820)
- Unicorn-57244.exe (PID: 8008)
- Unicorn-8043.exe (PID: 8044)
- Unicorn-27072.exe (PID: 8028)
- Unicorn-56952.exe (PID: 8064)
- Unicorn-5015.exe (PID: 8160)
- Unicorn-12057.exe (PID: 8112)
- Unicorn-62649.exe (PID: 8124)
- Unicorn-9364.exe (PID: 8140)
- Unicorn-14195.exe (PID: 6872)
- Unicorn-56427.exe (PID: 6480)
- Unicorn-56427.exe (PID: 4736)
- Unicorn-1004.exe (PID: 7356)
- Unicorn-44267.exe (PID: 2568)
- Unicorn-37382.exe (PID: 6148)
- Unicorn-18878.exe (PID: 7520)
- Unicorn-15949.exe (PID: 6416)
- Unicorn-44175.exe (PID: 1280)
- Unicorn-17432.exe (PID: 644)
- Unicorn-56235.exe (PID: 1452)
- Unicorn-7610.exe (PID: 6816)
- Unicorn-38891.exe (PID: 5576)
- Unicorn-30480.exe (PID: 8276)
- Unicorn-573.exe (PID: 8344)
- Unicorn-14216.exe (PID: 8232)
- Unicorn-46012.exe (PID: 2644)
- Unicorn-61471.exe (PID: 8284)
- Unicorn-18.exe (PID: 8296)
- Unicorn-34536.exe (PID: 8380)
- Unicorn-4102.exe (PID: 8316)
- Unicorn-59888.exe (PID: 8224)
- Unicorn-33075.exe (PID: 8452)
- Unicorn-50873.exe (PID: 8404)
- Unicorn-48065.exe (PID: 8420)
- Unicorn-35383.exe (PID: 8336)
- Unicorn-6432.exe (PID: 8472)
- Unicorn-14600.exe (PID: 8492)
- Unicorn-57003.exe (PID: 8412)
- Unicorn-58326.exe (PID: 8584)
- Unicorn-9029.exe (PID: 7764)
- Unicorn-16739.exe (PID: 8556)
- Unicorn-45227.exe (PID: 8868)
- Unicorn-13017.exe (PID: 8664)
- Unicorn-20823.exe (PID: 8656)
- Unicorn-47465.exe (PID: 8564)
- Unicorn-35767.exe (PID: 8632)
- Unicorn-61855.exe (PID: 8504)
- Unicorn-55633.exe (PID: 8648)
- Unicorn-43381.exe (PID: 8524)
- Unicorn-62869.exe (PID: 7828)
- Unicorn-51074.exe (PID: 4180)
- Unicorn-47465.exe (PID: 8568)
- Unicorn-31491.exe (PID: 8816)
- Unicorn-53395.exe (PID: 8844)
- Unicorn-16281.exe (PID: 8832)
- Unicorn-31491.exe (PID: 8820)
- Unicorn-61398.exe (PID: 8808)
- Unicorn-59339.exe (PID: 8912)
- Unicorn-50179.exe (PID: 8984)
- Unicorn-16115.exe (PID: 8996)
- Unicorn-42565.exe (PID: 9104)
- Unicorn-52317.exe (PID: 9016)
- Unicorn-56209.exe (PID: 9164)
- Unicorn-58247.exe (PID: 9080)
- Unicorn-23656.exe (PID: 9208)
- Unicorn-11284.exe (PID: 8976)
- Unicorn-50830.exe (PID: 8088)
- Unicorn-11476.exe (PID: 3676)
- Unicorn-1362.exe (PID: 9248)
- Unicorn-54455.exe (PID: 9240)
- Unicorn-34346.exe (PID: 9280)
- Unicorn-7968.exe (PID: 9308)
- Unicorn-7968.exe (PID: 9300)
- Unicorn-32372.exe (PID: 9432)
- Unicorn-6899.exe (PID: 9352)
- Unicorn-42587.exe (PID: 9412)
- Unicorn-4247.exe (PID: 9484)
- Unicorn-22721.exe (PID: 9404)
- Unicorn-8331.exe (PID: 9468)
- Unicorn-24859.exe (PID: 9556)
- Unicorn-184.exe (PID: 9620)
- Unicorn-56977.exe (PID: 9584)
- Unicorn-32473.exe (PID: 9540)
- Unicorn-45201.exe (PID: 9672)
- Unicorn-60246.exe (PID: 9768)
- Unicorn-16521.exe (PID: 9680)
- Unicorn-10390.exe (PID: 9692)
- Unicorn-33049.exe (PID: 9732)
- Unicorn-23105.exe (PID: 9824)
- Unicorn-65529.exe (PID: 9792)
- Unicorn-10853.exe (PID: 9800)
- Unicorn-32857.exe (PID: 9876)
- Unicorn-31895.exe (PID: 9896)
- Unicorn-59975.exe (PID: 9916)
- Unicorn-54958.exe (PID: 9856)
- Unicorn-39463.exe (PID: 9932)
- Unicorn-62576.exe (PID: 9952)
- Unicorn-14693.exe (PID: 9984)
- Unicorn-26613.exe (PID: 9188)
- Unicorn-92.exe (PID: 7868)
- Unicorn-53263.exe (PID: 8800)
- Unicorn-53251.exe (PID: 8208)
- Unicorn-5612.exe (PID: 10184)
- Unicorn-30501.exe (PID: 9752)
- Unicorn-8305.exe (PID: 10224)
- Unicorn-25269.exe (PID: 8752)
- Unicorn-32639.exe (PID: 9184)
- Unicorn-14164.exe (PID: 4428)
- Unicorn-26508.exe (PID: 8944)
- Unicorn-28555.exe (PID: 10288)
- Unicorn-3043.exe (PID: 10356)
- Unicorn-51113.exe (PID: 10272)
- Unicorn-65503.exe (PID: 6940)
- Unicorn-40621.exe (PID: 10368)
- Unicorn-56328.exe (PID: 10336)
- Unicorn-35907.exe (PID: 10420)
- Unicorn-16613.exe (PID: 10436)
- Unicorn-51589.exe (PID: 10388)
- Unicorn-15487.exe (PID: 10404)
- Unicorn-5181.exe (PID: 10452)
- Unicorn-18249.exe (PID: 9968)
- Unicorn-44891.exe (PID: 1272)
- Unicorn-41191.exe (PID: 10508)
- Unicorn-8518.exe (PID: 10552)
- Unicorn-43329.exe (PID: 10544)
- Unicorn-47889.exe (PID: 10612)
- Unicorn-49935.exe (PID: 10628)
- Unicorn-7511.exe (PID: 10648)
- Unicorn-29250.exe (PID: 10700)
- Unicorn-5010.exe (PID: 10672)
- Unicorn-17030.exe (PID: 10708)
- Unicorn-59333.exe (PID: 8328)
- Unicorn-45659.exe (PID: 10736)
- Unicorn-38045.exe (PID: 10764)
- Unicorn-43381.exe (PID: 8516)
- Unicorn-1289.exe (PID: 10808)
- Unicorn-60049.exe (PID: 10848)
- Unicorn-14408.exe (PID: 8744)
- Unicorn-26892.exe (PID: 10472)
- Unicorn-13157.exe (PID: 10480)
- Unicorn-49359.exe (PID: 10524)
- Unicorn-45851.exe (PID: 10592)
- Unicorn-27917.exe (PID: 10908)
- Unicorn-14408.exe (PID: 8736)
- Unicorn-60049.exe (PID: 10856)
- Unicorn-11196.exe (PID: 11024)
- Unicorn-27917.exe (PID: 10900)
- Unicorn-17702.exe (PID: 10916)
- Unicorn-54559.exe (PID: 10928)
- Unicorn-60397.exe (PID: 10980)
- Unicorn-11196.exe (PID: 11040)
- Unicorn-56868.exe (PID: 11008)
- Unicorn-42017.exe (PID: 9320)
- Unicorn-11196.exe (PID: 11032)
- Unicorn-28555.exe (PID: 10296)
- Unicorn-44061.exe (PID: 11168)
- Unicorn-11943.exe (PID: 11160)
- Unicorn-11196.exe (PID: 11016)
- Unicorn-15948.exe (PID: 11280)
- Unicorn-55965.exe (PID: 10788)
- Unicorn-1289.exe (PID: 10800)
- Unicorn-4351.exe (PID: 11384)
- Unicorn-63011.exe (PID: 11300)
- Unicorn-31544.exe (PID: 11152)
- Unicorn-15948.exe (PID: 11272)
- Unicorn-59006.exe (PID: 11232)
- Unicorn-49276.exe (PID: 11292)
- Unicorn-4351.exe (PID: 11376)
- Unicorn-6297.exe (PID: 11248)
- Unicorn-58451.exe (PID: 11100)
- Unicorn-35893.exe (PID: 11132)
- Unicorn-7204.exe (PID: 11224)
- Unicorn-7780.exe (PID: 11456)
- Unicorn-38223.exe (PID: 11556)
- Unicorn-64865.exe (PID: 11516)
- Unicorn-45432.exe (PID: 11408)
- Unicorn-6297.exe (PID: 11256)
- Unicorn-4980.exe (PID: 11440)
- Unicorn-38799.exe (PID: 11672)
- Unicorn-2213.exe (PID: 10028)
- Unicorn-30055.exe (PID: 11524)
- Unicorn-35767.exe (PID: 8640)
- Unicorn-7780.exe (PID: 11444)
- Unicorn-9634.exe (PID: 11624)
- Unicorn-44445.exe (PID: 11604)
- Unicorn-9634.exe (PID: 11616)
- Unicorn-56432.exe (PID: 11472)
- Unicorn-62349.exe (PID: 11416)
- Unicorn-59219.exe (PID: 11776)
- Unicorn-43267.exe (PID: 11864)
- Unicorn-61720.exe (PID: 11748)
- Unicorn-12275.exe (PID: 11840)
- Unicorn-12218.exe (PID: 6652)
- Unicorn-12540.exe (PID: 11852)
- Unicorn-8456.exe (PID: 11876)
- Unicorn-45021.exe (PID: 11696)
- Unicorn-53089.exe (PID: 11768)
- Unicorn-10573.exe (PID: 11724)
- Unicorn-12757.exe (PID: 11548)
- Unicorn-55690.exe (PID: 11812)
- Unicorn-20709.exe (PID: 11916)
- Unicorn-2789.exe (PID: 11960)
- Unicorn-4464.exe (PID: 11932)
- Unicorn-4272.exe (PID: 12052)
- Unicorn-55519.exe (PID: 12020)
Executes application which crashes
- Unicorn-63204.exe (PID: 8180)
INFO
The sample compiled with chinese language support
- 1 (559).exe (PID: 5280)
- Unicorn-36776.exe (PID: 3240)
- Unicorn-53089.exe (PID: 11768)
- Unicorn-47465.exe (PID: 8568)
Checks supported languages
- 1 (559).exe (PID: 5280)
- Unicorn-14981.exe (PID: 5968)
- Unicorn-53082.exe (PID: 5344)
- Unicorn-37300.exe (PID: 2236)
- Unicorn-58090.exe (PID: 6028)
- Unicorn-64867.exe (PID: 5256)
- Unicorn-36684.exe (PID: 1164)
- Unicorn-29070.exe (PID: 1188)
- Unicorn-30654.exe (PID: 5640)
- Unicorn-36776.exe (PID: 3240)
- Unicorn-2759.exe (PID: 5728)
- Unicorn-8889.exe (PID: 7036)
- Unicorn-27124.exe (PID: 5384)
- Unicorn-51074.exe (PID: 4180)
- Unicorn-46725.exe (PID: 6640)
- Unicorn-51074.exe (PID: 5304)
- Unicorn-9823.exe (PID: 6576)
- Unicorn-24113.exe (PID: 4464)
- Unicorn-63663.exe (PID: 1240)
- Unicorn-48718.exe (PID: 736)
- Unicorn-5163.exe (PID: 2240)
- Unicorn-41104.exe (PID: 5260)
- Unicorn-22076.exe (PID: 4188)
- Unicorn-44997.exe (PID: 7236)
- Unicorn-34136.exe (PID: 7220)
- Unicorn-34136.exe (PID: 7228)
- Unicorn-34136.exe (PID: 7244)
- Unicorn-33373.exe (PID: 7296)
- Unicorn-57249.exe (PID: 7304)
- Unicorn-56429.exe (PID: 7188)
- Unicorn-21884.exe (PID: 7196)
- Unicorn-36174.exe (PID: 7288)
- Unicorn-669.exe (PID: 7416)
- Unicorn-54509.exe (PID: 7436)
- Unicorn-2807.exe (PID: 7452)
- Unicorn-58130.exe (PID: 7460)
- Unicorn-10975.exe (PID: 7488)
- Unicorn-6891.exe (PID: 7512)
- Unicorn-52563.exe (PID: 7504)
- Unicorn-18878.exe (PID: 7520)
- Unicorn-16814.exe (PID: 7556)
- Unicorn-48287.exe (PID: 7576)
- Unicorn-39948.exe (PID: 7604)
- Unicorn-53384.exe (PID: 7716)
- Unicorn-41986.exe (PID: 7636)
- Unicorn-7275.exe (PID: 7688)
- Unicorn-48116.exe (PID: 7628)
- Unicorn-36610.exe (PID: 7644)
- Unicorn-7275.exe (PID: 7680)
- Unicorn-42448.exe (PID: 7724)
- Unicorn-13113.exe (PID: 7748)
- Unicorn-13113.exe (PID: 7752)
- Unicorn-9029.exe (PID: 7764)
- Unicorn-39756.exe (PID: 7772)
- Unicorn-52008.exe (PID: 7804)
- Unicorn-62869.exe (PID: 7828)
- Unicorn-17198.exe (PID: 7820)
- Unicorn-9776.exe (PID: 7844)
- Unicorn-11067.exe (PID: 7812)
- Unicorn-17198.exe (PID: 7856)
- Unicorn-25293.exe (PID: 7876)
- Unicorn-19427.exe (PID: 7884)
- Unicorn-62869.exe (PID: 7836)
- Unicorn-92.exe (PID: 7868)
- Unicorn-56952.exe (PID: 8064)
- Unicorn-57244.exe (PID: 8008)
- Unicorn-27072.exe (PID: 8028)
- Unicorn-8043.exe (PID: 8044)
- Unicorn-50830.exe (PID: 8088)
- Unicorn-12057.exe (PID: 8112)
- Unicorn-5015.exe (PID: 8160)
- Unicorn-9364.exe (PID: 8140)
- Unicorn-62649.exe (PID: 8124)
- Unicorn-63204.exe (PID: 8180)
- Unicorn-44175.exe (PID: 1280)
- Unicorn-56427.exe (PID: 4736)
- Unicorn-14195.exe (PID: 6872)
- Unicorn-56427.exe (PID: 6480)
- Unicorn-44267.exe (PID: 2568)
- Unicorn-1004.exe (PID: 7356)
- Unicorn-17432.exe (PID: 644)
- Unicorn-15949.exe (PID: 6416)
- Unicorn-56235.exe (PID: 1452)
- Unicorn-7610.exe (PID: 6816)
- Unicorn-37382.exe (PID: 6148)
- Unicorn-14216.exe (PID: 8232)
- Unicorn-59888.exe (PID: 8224)
- Unicorn-38891.exe (PID: 5576)
- Unicorn-46012.exe (PID: 2644)
- Unicorn-18.exe (PID: 8296)
- Unicorn-30480.exe (PID: 8276)
- Unicorn-61471.exe (PID: 8284)
- Unicorn-34536.exe (PID: 8380)
- Unicorn-57003.exe (PID: 8412)
- Unicorn-59333.exe (PID: 8328)
- Unicorn-4102.exe (PID: 8316)
- Unicorn-35383.exe (PID: 8336)
- Unicorn-573.exe (PID: 8344)
- Unicorn-50873.exe (PID: 8404)
- Unicorn-48065.exe (PID: 8420)
- Unicorn-14600.exe (PID: 8492)
- Unicorn-43381.exe (PID: 8516)
- Unicorn-61855.exe (PID: 8504)
- Unicorn-43381.exe (PID: 8524)
- Unicorn-33075.exe (PID: 8452)
- Unicorn-6432.exe (PID: 8472)
- Unicorn-47465.exe (PID: 8564)
- Unicorn-47465.exe (PID: 8568)
- Unicorn-16739.exe (PID: 8556)
- Unicorn-58326.exe (PID: 8584)
- Unicorn-14408.exe (PID: 8736)
- Unicorn-13017.exe (PID: 8664)
- Unicorn-25269.exe (PID: 8752)
- Unicorn-14408.exe (PID: 8744)
- Unicorn-61398.exe (PID: 8808)
- Unicorn-53263.exe (PID: 8800)
- Unicorn-35767.exe (PID: 8632)
- Unicorn-55633.exe (PID: 8648)
- Unicorn-35767.exe (PID: 8640)
- Unicorn-20823.exe (PID: 8656)
- Unicorn-31491.exe (PID: 8816)
- Unicorn-53395.exe (PID: 8844)
- Unicorn-45227.exe (PID: 8868)
- Unicorn-59339.exe (PID: 8912)
- Unicorn-31491.exe (PID: 8820)
- Unicorn-16281.exe (PID: 8832)
- Unicorn-11284.exe (PID: 8976)
- Unicorn-50179.exe (PID: 8984)
- Unicorn-16115.exe (PID: 8996)
- Unicorn-52317.exe (PID: 9016)
- Unicorn-58247.exe (PID: 9080)
- Unicorn-42565.exe (PID: 9104)
- Unicorn-26613.exe (PID: 9188)
- Unicorn-23656.exe (PID: 9208)
- Unicorn-11476.exe (PID: 3676)
- Unicorn-56209.exe (PID: 9164)
- Unicorn-54455.exe (PID: 9240)
- Unicorn-1362.exe (PID: 9248)
- Unicorn-34346.exe (PID: 9280)
- Unicorn-7968.exe (PID: 9300)
- Unicorn-42017.exe (PID: 9320)
- Unicorn-7968.exe (PID: 9308)
- Unicorn-6899.exe (PID: 9352)
- Unicorn-22721.exe (PID: 9404)
- Unicorn-8331.exe (PID: 9468)
- Unicorn-4247.exe (PID: 9484)
- Unicorn-32473.exe (PID: 9540)
- Unicorn-24859.exe (PID: 9556)
- Unicorn-56977.exe (PID: 9584)
- Unicorn-184.exe (PID: 9620)
- Unicorn-42587.exe (PID: 9412)
- Unicorn-32372.exe (PID: 9432)
- Unicorn-16521.exe (PID: 9680)
- Unicorn-10390.exe (PID: 9692)
- Unicorn-45201.exe (PID: 9672)
- Unicorn-33049.exe (PID: 9732)
- Unicorn-60246.exe (PID: 9768)
- Unicorn-65529.exe (PID: 9792)
- Unicorn-10853.exe (PID: 9800)
- Unicorn-23105.exe (PID: 9824)
- Unicorn-54958.exe (PID: 9856)
- Unicorn-32857.exe (PID: 9876)
- Unicorn-31895.exe (PID: 9896)
- Unicorn-59975.exe (PID: 9916)
- Unicorn-39463.exe (PID: 9932)
- Unicorn-62576.exe (PID: 9952)
- Unicorn-14693.exe (PID: 9984)
- Unicorn-8305.exe (PID: 10224)
- Unicorn-53251.exe (PID: 8208)
- Unicorn-5612.exe (PID: 10184)
- Unicorn-14164.exe (PID: 4428)
- Unicorn-32639.exe (PID: 9184)
- Unicorn-30501.exe (PID: 9752)
- Unicorn-26508.exe (PID: 8944)
- Unicorn-44891.exe (PID: 1272)
- Unicorn-65503.exe (PID: 6940)
- Unicorn-51113.exe (PID: 10272)
- Unicorn-18249.exe (PID: 9968)
- Unicorn-12218.exe (PID: 6652)
- Unicorn-28555.exe (PID: 10288)
- Unicorn-56328.exe (PID: 10336)
- Unicorn-35907.exe (PID: 10420)
- Unicorn-15487.exe (PID: 10404)
- Unicorn-3043.exe (PID: 10356)
- Unicorn-40621.exe (PID: 10368)
- Unicorn-51589.exe (PID: 10388)
- Unicorn-16613.exe (PID: 10436)
- Unicorn-13157.exe (PID: 10480)
- Unicorn-5181.exe (PID: 10452)
- Unicorn-26892.exe (PID: 10472)
- Unicorn-28555.exe (PID: 10296)
- Unicorn-41191.exe (PID: 10508)
- Unicorn-49359.exe (PID: 10524)
- Unicorn-43329.exe (PID: 10544)
- Unicorn-47889.exe (PID: 10612)
- Unicorn-7511.exe (PID: 10648)
- Unicorn-49935.exe (PID: 10628)
- Unicorn-8518.exe (PID: 10552)
- Unicorn-45851.exe (PID: 10592)
- Unicorn-17030.exe (PID: 10708)
- Unicorn-45659.exe (PID: 10736)
- Unicorn-38045.exe (PID: 10764)
- Unicorn-5010.exe (PID: 10672)
- Unicorn-29250.exe (PID: 10700)
- Unicorn-1289.exe (PID: 10800)
- Unicorn-1289.exe (PID: 10808)
- Unicorn-60049.exe (PID: 10848)
- Unicorn-64133.exe (PID: 10832)
- Unicorn-60049.exe (PID: 10856)
- Unicorn-55965.exe (PID: 10788)
- Unicorn-27917.exe (PID: 10908)
- Unicorn-54559.exe (PID: 10928)
- Unicorn-27917.exe (PID: 10900)
- Unicorn-17702.exe (PID: 10916)
- Unicorn-60397.exe (PID: 10980)
- Unicorn-11196.exe (PID: 11024)
- Unicorn-11196.exe (PID: 11040)
- Unicorn-11196.exe (PID: 11016)
- Unicorn-56868.exe (PID: 11008)
- Unicorn-11196.exe (PID: 11032)
- Unicorn-44061.exe (PID: 11168)
- Unicorn-7204.exe (PID: 11224)
- Unicorn-6297.exe (PID: 11248)
- Unicorn-2213.exe (PID: 10028)
- Unicorn-15948.exe (PID: 11280)
- Unicorn-49276.exe (PID: 11292)
- Unicorn-15948.exe (PID: 11272)
- Unicorn-58451.exe (PID: 11100)
- Unicorn-31544.exe (PID: 11152)
- Unicorn-35893.exe (PID: 11132)
- Unicorn-11943.exe (PID: 11160)
- Unicorn-59006.exe (PID: 11232)
- Unicorn-63011.exe (PID: 11300)
- Unicorn-6297.exe (PID: 11256)
- Unicorn-4351.exe (PID: 11384)
- Unicorn-62349.exe (PID: 11416)
- Unicorn-7780.exe (PID: 11444)
- Unicorn-45432.exe (PID: 11408)
- Unicorn-7780.exe (PID: 11456)
- Unicorn-4980.exe (PID: 11440)
- Unicorn-56432.exe (PID: 11472)
- Unicorn-30055.exe (PID: 11524)
- Unicorn-4351.exe (PID: 11376)
- Unicorn-12757.exe (PID: 11548)
- Unicorn-9634.exe (PID: 11616)
- Unicorn-44445.exe (PID: 11604)
- Unicorn-9634.exe (PID: 11624)
- Unicorn-64865.exe (PID: 11516)
- Unicorn-38223.exe (PID: 11556)
- Unicorn-38799.exe (PID: 11672)
- Unicorn-45021.exe (PID: 11696)
- Unicorn-10573.exe (PID: 11724)
- Unicorn-61720.exe (PID: 11748)
- Unicorn-59219.exe (PID: 11776)
- Unicorn-53089.exe (PID: 11768)
- Unicorn-55690.exe (PID: 11812)
- Unicorn-12275.exe (PID: 11840)
- Unicorn-43267.exe (PID: 11864)
- Unicorn-8456.exe (PID: 11876)
- Unicorn-12540.exe (PID: 11852)
- Unicorn-20709.exe (PID: 11916)
- Unicorn-4464.exe (PID: 11932)
- Unicorn-10302.exe (PID: 11984)
- Unicorn-50673.exe (PID: 12004)
- Unicorn-4272.exe (PID: 12052)
- Unicorn-55519.exe (PID: 12020)
- Unicorn-55519.exe (PID: 12012)
- Unicorn-4756.exe (PID: 12088)
- Unicorn-40313.exe (PID: 12124)
- Unicorn-19701.exe (PID: 12104)
- Unicorn-2789.exe (PID: 11960)
- Unicorn-16817.exe (PID: 12256)
- Unicorn-1035.exe (PID: 12240)
- Unicorn-1035.exe (PID: 12232)
- Unicorn-36037.exe (PID: 12268)
- Unicorn-48482.exe (PID: 12144)
- Unicorn-22276.exe (PID: 12216)
- Unicorn-60972.exe (PID: 12248)
- Unicorn-54896.exe (PID: 1748)
- Unicorn-54433.exe (PID: 4776)
- Unicorn-3094.exe (PID: 2064)
- Unicorn-39686.exe (PID: 2332)
- Unicorn-50349.exe (PID: 12296)
- Unicorn-44782.exe (PID: 12320)
- Unicorn-5232.exe (PID: 12336)
- Unicorn-3557.exe (PID: 12360)
- Unicorn-47662.exe (PID: 12416)
- Unicorn-15809.exe (PID: 12380)
- Unicorn-51746.exe (PID: 12400)
- Unicorn-28061.exe (PID: 12424)
- Unicorn-25561.exe (PID: 12448)
- Unicorn-26115.exe (PID: 12468)
- Unicorn-56763.exe (PID: 12504)
- Unicorn-54149.exe (PID: 12488)
- Unicorn-51196.exe (PID: 12528)
- Unicorn-36251.exe (PID: 12548)
- Unicorn-38289.exe (PID: 12576)
- Unicorn-44419.exe (PID: 12592)
- Unicorn-30120.exe (PID: 12540)
- Unicorn-36251.exe (PID: 12556)
- Unicorn-47933.exe (PID: 12644)
- Unicorn-52587.exe (PID: 12628)
- Unicorn-46557.exe (PID: 12680)
- Unicorn-15406.exe (PID: 12700)
- Unicorn-20277.exe (PID: 12736)
- Unicorn-35794.exe (PID: 12712)
- Unicorn-46265.exe (PID: 12748)
- Unicorn-14439.exe (PID: 12664)
- Unicorn-50449.exe (PID: 12772)
- Unicorn-6708.exe (PID: 12780)
- Unicorn-44803.exe (PID: 12816)
- Unicorn-20299.exe (PID: 12856)
- Unicorn-36443.exe (PID: 12900)
- Unicorn-61139.exe (PID: 12932)
- Unicorn-24767.exe (PID: 12968)
- Unicorn-2208.exe (PID: 12992)
- Unicorn-16215.exe (PID: 12868)
- Unicorn-22629.exe (PID: 13032)
- Unicorn-55493.exe (PID: 13088)
- Unicorn-6100.exe (PID: 13120)
- Unicorn-36827.exe (PID: 13128)
- Unicorn-2016.exe (PID: 13148)
- Unicorn-18353.exe (PID: 13220)
- Unicorn-23013.exe (PID: 2344)
- Unicorn-63853.exe (PID: 4208)
- Unicorn-12706.exe (PID: 13320)
- Unicorn-37787.exe (PID: 13380)
- Unicorn-13837.exe (PID: 13388)
- Unicorn-54023.exe (PID: 13464)
- Unicorn-15036.exe (PID: 13508)
- Unicorn-53931.exe (PID: 13536)
- Unicorn-3339.exe (PID: 13528)
- Unicorn-10568.exe (PID: 7048)
- Unicorn-3915.exe (PID: 13672)
- Unicorn-23781.exe (PID: 13692)
- Unicorn-23516.exe (PID: 13680)
- Unicorn-30557.exe (PID: 13708)
- Unicorn-12275.exe (PID: 13716)
- Unicorn-3915.exe (PID: 13664)
- Unicorn-3915.exe (PID: 13656)
- Unicorn-28057.exe (PID: 13728)
- Unicorn-9945.exe (PID: 13888)
- Unicorn-44756.exe (PID: 13868)
- Unicorn-48185.exe (PID: 13960)
- Unicorn-17458.exe (PID: 13944)
- Unicorn-56267.exe (PID: 14076)
- Unicorn-33125.exe (PID: 13992)
- Unicorn-7344.exe (PID: 14032)
- Unicorn-5782.exe (PID: 14112)
- Unicorn-15512.exe (PID: 14056)
- Unicorn-63151.exe (PID: 14092)
- Unicorn-4299.exe (PID: 14144)
- Unicorn-11647.exe (PID: 14120)
- Unicorn-12659.exe (PID: 14164)
- Unicorn-1414.exe (PID: 13776)
- Unicorn-28611.exe (PID: 13784)
- Unicorn-47086.exe (PID: 13768)
- Unicorn-9945.exe (PID: 13880)
- Unicorn-5041.exe (PID: 14004)
- Unicorn-57392.exe (PID: 14220)
- Unicorn-22118.exe (PID: 14272)
- Unicorn-62293.exe (PID: 14332)
- Unicorn-50350.exe (PID: 14240)
- Unicorn-43193.exe (PID: 14260)
- Unicorn-47278.exe (PID: 14304)
- Unicorn-57968.exe (PID: 3364)
- Unicorn-17756.exe (PID: 2800)
- Unicorn-30862.exe (PID: 14380)
- Unicorn-2737.exe (PID: 14412)
- Unicorn-37163.exe (PID: 14184)
- Unicorn-2353.exe (PID: 14196)
- Unicorn-1725.exe (PID: 14560)
- Unicorn-16935.exe (PID: 14544)
- Unicorn-50184.exe (PID: 14624)
- Unicorn-64190.exe (PID: 14436)
- Unicorn-6629.exe (PID: 14472)
- Unicorn-6629.exe (PID: 14480)
- Unicorn-59259.exe (PID: 14452)
- Unicorn-12388.exe (PID: 14444)
- Unicorn-29187.exe (PID: 14576)
- Unicorn-16935.exe (PID: 14552)
Reads the computer name
- Unicorn-14981.exe (PID: 5968)
- 1 (559).exe (PID: 5280)
- Unicorn-53082.exe (PID: 5344)
- Unicorn-37300.exe (PID: 2236)
- Unicorn-64867.exe (PID: 5256)
- Unicorn-2759.exe (PID: 5728)
- Unicorn-8889.exe (PID: 7036)
- Unicorn-36684.exe (PID: 1164)
- Unicorn-58090.exe (PID: 6028)
- Unicorn-51074.exe (PID: 5304)
- Unicorn-29070.exe (PID: 1188)
- Unicorn-30654.exe (PID: 5640)
- Unicorn-36776.exe (PID: 3240)
- Unicorn-51074.exe (PID: 4180)
- Unicorn-27124.exe (PID: 5384)
- Unicorn-46725.exe (PID: 6640)
- Unicorn-5163.exe (PID: 2240)
- Unicorn-22076.exe (PID: 4188)
- Unicorn-24113.exe (PID: 4464)
- Unicorn-41104.exe (PID: 5260)
- Unicorn-9823.exe (PID: 6576)
- Unicorn-34136.exe (PID: 7228)
- Unicorn-44997.exe (PID: 7236)
- Unicorn-63663.exe (PID: 1240)
- Unicorn-48718.exe (PID: 736)
- Unicorn-21884.exe (PID: 7196)
- Unicorn-56429.exe (PID: 7188)
- Unicorn-34136.exe (PID: 7220)
- Unicorn-34136.exe (PID: 7244)
- Unicorn-33373.exe (PID: 7296)
- Unicorn-57249.exe (PID: 7304)
- Unicorn-36174.exe (PID: 7288)
- Unicorn-669.exe (PID: 7416)
- Unicorn-54509.exe (PID: 7436)
- Unicorn-2807.exe (PID: 7452)
- Unicorn-58130.exe (PID: 7460)
- Unicorn-10975.exe (PID: 7488)
- Unicorn-6891.exe (PID: 7512)
- Unicorn-16814.exe (PID: 7556)
- Unicorn-18878.exe (PID: 7520)
- Unicorn-52563.exe (PID: 7504)
- Unicorn-48116.exe (PID: 7628)
- Unicorn-39948.exe (PID: 7604)
- Unicorn-41986.exe (PID: 7636)
- Unicorn-7275.exe (PID: 7680)
- Unicorn-48287.exe (PID: 7576)
- Unicorn-7275.exe (PID: 7688)
- Unicorn-36610.exe (PID: 7644)
- Unicorn-42448.exe (PID: 7724)
- Unicorn-53384.exe (PID: 7716)
- Unicorn-39756.exe (PID: 7772)
- Unicorn-13113.exe (PID: 7748)
- Unicorn-9029.exe (PID: 7764)
- Unicorn-13113.exe (PID: 7752)
- Unicorn-11067.exe (PID: 7812)
- Unicorn-17198.exe (PID: 7856)
- Unicorn-52008.exe (PID: 7804)
- Unicorn-92.exe (PID: 7868)
- Unicorn-62869.exe (PID: 7828)
- Unicorn-62869.exe (PID: 7836)
- Unicorn-25293.exe (PID: 7876)
- Unicorn-17198.exe (PID: 7820)
- Unicorn-19427.exe (PID: 7884)
- Unicorn-9776.exe (PID: 7844)
- Unicorn-57244.exe (PID: 8008)
- Unicorn-27072.exe (PID: 8028)
- Unicorn-8043.exe (PID: 8044)
- Unicorn-56952.exe (PID: 8064)
- Unicorn-5015.exe (PID: 8160)
- Unicorn-62649.exe (PID: 8124)
- Unicorn-9364.exe (PID: 8140)
- Unicorn-50830.exe (PID: 8088)
- Unicorn-56427.exe (PID: 6480)
- Unicorn-14195.exe (PID: 6872)
- Unicorn-63204.exe (PID: 8180)
- Unicorn-56427.exe (PID: 4736)
- Unicorn-12057.exe (PID: 8112)
- Unicorn-44175.exe (PID: 1280)
- Unicorn-37382.exe (PID: 6148)
- Unicorn-15949.exe (PID: 6416)
- Unicorn-1004.exe (PID: 7356)
- Unicorn-44267.exe (PID: 2568)
- Unicorn-17432.exe (PID: 644)
- Unicorn-56235.exe (PID: 1452)
- Unicorn-38891.exe (PID: 5576)
- Unicorn-7610.exe (PID: 6816)
- Unicorn-61471.exe (PID: 8284)
- Unicorn-46012.exe (PID: 2644)
- Unicorn-14216.exe (PID: 8232)
- Unicorn-18.exe (PID: 8296)
- Unicorn-34536.exe (PID: 8380)
- Unicorn-4102.exe (PID: 8316)
- Unicorn-59888.exe (PID: 8224)
- Unicorn-59333.exe (PID: 8328)
- Unicorn-35383.exe (PID: 8336)
- Unicorn-14600.exe (PID: 8492)
- Unicorn-50873.exe (PID: 8404)
- Unicorn-48065.exe (PID: 8420)
- Unicorn-57003.exe (PID: 8412)
- Unicorn-6432.exe (PID: 8472)
- Unicorn-30480.exe (PID: 8276)
- Unicorn-573.exe (PID: 8344)
- Unicorn-33075.exe (PID: 8452)
- Unicorn-16739.exe (PID: 8556)
- Unicorn-20823.exe (PID: 8656)
- Unicorn-45227.exe (PID: 8868)
- Unicorn-43381.exe (PID: 8516)
- Unicorn-61855.exe (PID: 8504)
- Unicorn-13017.exe (PID: 8664)
- Unicorn-25269.exe (PID: 8752)
- Unicorn-58326.exe (PID: 8584)
- Unicorn-47465.exe (PID: 8564)
- Unicorn-55633.exe (PID: 8648)
- Unicorn-14408.exe (PID: 8744)
- Unicorn-35767.exe (PID: 8640)
- Unicorn-35767.exe (PID: 8632)
- Unicorn-43381.exe (PID: 8524)
- Unicorn-14408.exe (PID: 8736)
- Unicorn-47465.exe (PID: 8568)
- Unicorn-31491.exe (PID: 8816)
- Unicorn-53395.exe (PID: 8844)
- Unicorn-16281.exe (PID: 8832)
- Unicorn-61398.exe (PID: 8808)
- Unicorn-31491.exe (PID: 8820)
- Unicorn-53263.exe (PID: 8800)
- Unicorn-59339.exe (PID: 8912)
- Unicorn-50179.exe (PID: 8984)
- Unicorn-16115.exe (PID: 8996)
- Unicorn-11284.exe (PID: 8976)
- Unicorn-58247.exe (PID: 9080)
- Unicorn-56209.exe (PID: 9164)
- Unicorn-42565.exe (PID: 9104)
- Unicorn-52317.exe (PID: 9016)
- Unicorn-26613.exe (PID: 9188)
- Unicorn-23656.exe (PID: 9208)
- Unicorn-11476.exe (PID: 3676)
- Unicorn-1362.exe (PID: 9248)
- Unicorn-42017.exe (PID: 9320)
- Unicorn-7968.exe (PID: 9308)
- Unicorn-34346.exe (PID: 9280)
- Unicorn-6899.exe (PID: 9352)
- Unicorn-54455.exe (PID: 9240)
- Unicorn-32372.exe (PID: 9432)
- Unicorn-7968.exe (PID: 9300)
- Unicorn-4247.exe (PID: 9484)
- Unicorn-56977.exe (PID: 9584)
- Unicorn-22721.exe (PID: 9404)
- Unicorn-8331.exe (PID: 9468)
- Unicorn-42587.exe (PID: 9412)
- Unicorn-24859.exe (PID: 9556)
- Unicorn-184.exe (PID: 9620)
- Unicorn-10390.exe (PID: 9692)
- Unicorn-32473.exe (PID: 9540)
- Unicorn-45201.exe (PID: 9672)
- Unicorn-60246.exe (PID: 9768)
- Unicorn-16521.exe (PID: 9680)
- Unicorn-33049.exe (PID: 9732)
- Unicorn-23105.exe (PID: 9824)
- Unicorn-65529.exe (PID: 9792)
- Unicorn-10853.exe (PID: 9800)
- Unicorn-54958.exe (PID: 9856)
- Unicorn-32857.exe (PID: 9876)
- Unicorn-59975.exe (PID: 9916)
- Unicorn-31895.exe (PID: 9896)
- Unicorn-39463.exe (PID: 9932)
- Unicorn-62576.exe (PID: 9952)
- Unicorn-14693.exe (PID: 9984)
Create files in a temporary directory
- Unicorn-37300.exe (PID: 2236)
- 1 (559).exe (PID: 5280)
- Unicorn-53082.exe (PID: 5344)
- Unicorn-14981.exe (PID: 5968)
- Unicorn-64867.exe (PID: 5256)
- Unicorn-58090.exe (PID: 6028)
- Unicorn-8889.exe (PID: 7036)
- Unicorn-36684.exe (PID: 1164)
- Unicorn-30654.exe (PID: 5640)
- Unicorn-51074.exe (PID: 5304)
- Unicorn-29070.exe (PID: 1188)
- Unicorn-27124.exe (PID: 5384)
- Unicorn-2759.exe (PID: 5728)
- Unicorn-41104.exe (PID: 5260)
- Unicorn-22076.exe (PID: 4188)
- Unicorn-24113.exe (PID: 4464)
- Unicorn-9823.exe (PID: 6576)
- Unicorn-63663.exe (PID: 1240)
- Unicorn-48718.exe (PID: 736)
- Unicorn-36776.exe (PID: 3240)
- Unicorn-56429.exe (PID: 7188)
- Unicorn-34136.exe (PID: 7220)
- Unicorn-34136.exe (PID: 7244)
- Unicorn-33373.exe (PID: 7296)
- Unicorn-46725.exe (PID: 6640)
- Unicorn-36174.exe (PID: 7288)
- Unicorn-44997.exe (PID: 7236)
- Unicorn-669.exe (PID: 7416)
- Unicorn-5163.exe (PID: 2240)
- Unicorn-54509.exe (PID: 7436)
- Unicorn-2807.exe (PID: 7452)
- Unicorn-6891.exe (PID: 7512)
- Unicorn-52563.exe (PID: 7504)
- Unicorn-58130.exe (PID: 7460)
- Unicorn-10975.exe (PID: 7488)
- Unicorn-16814.exe (PID: 7556)
- Unicorn-48287.exe (PID: 7576)
- Unicorn-39948.exe (PID: 7604)
- Unicorn-41986.exe (PID: 7636)
- Unicorn-7275.exe (PID: 7688)
- Unicorn-48116.exe (PID: 7628)
- Unicorn-7275.exe (PID: 7680)
- Unicorn-42448.exe (PID: 7724)
- Unicorn-21884.exe (PID: 7196)
- Unicorn-36610.exe (PID: 7644)
- Unicorn-53384.exe (PID: 7716)
- Unicorn-39756.exe (PID: 7772)
- Unicorn-11067.exe (PID: 7812)
- Unicorn-52008.exe (PID: 7804)
- Unicorn-19427.exe (PID: 7884)
- Unicorn-13113.exe (PID: 7748)
- Unicorn-17198.exe (PID: 7856)
- Unicorn-62869.exe (PID: 7836)
- Unicorn-9776.exe (PID: 7844)
- Unicorn-34136.exe (PID: 7228)
- Unicorn-17198.exe (PID: 7820)
- Unicorn-57249.exe (PID: 7304)
- Unicorn-57244.exe (PID: 8008)
- Unicorn-27072.exe (PID: 8028)
- Unicorn-8043.exe (PID: 8044)
- Unicorn-13113.exe (PID: 7752)
- Unicorn-12057.exe (PID: 8112)
- Unicorn-5015.exe (PID: 8160)
- Unicorn-62649.exe (PID: 8124)
- Unicorn-56952.exe (PID: 8064)
- Unicorn-9364.exe (PID: 8140)
- Unicorn-14195.exe (PID: 6872)
- Unicorn-56427.exe (PID: 6480)
- Unicorn-56427.exe (PID: 4736)
- Unicorn-1004.exe (PID: 7356)
- Unicorn-44267.exe (PID: 2568)
- Unicorn-37382.exe (PID: 6148)
- Unicorn-18878.exe (PID: 7520)
- Unicorn-15949.exe (PID: 6416)
- Unicorn-44175.exe (PID: 1280)
- Unicorn-56235.exe (PID: 1452)
- Unicorn-17432.exe (PID: 644)
- Unicorn-7610.exe (PID: 6816)
- Unicorn-38891.exe (PID: 5576)
- Unicorn-61471.exe (PID: 8284)
- Unicorn-46012.exe (PID: 2644)
- Unicorn-30480.exe (PID: 8276)
- Unicorn-14216.exe (PID: 8232)
- Unicorn-573.exe (PID: 8344)
- Unicorn-34536.exe (PID: 8380)
- Unicorn-59888.exe (PID: 8224)
- Unicorn-4102.exe (PID: 8316)
- Unicorn-18.exe (PID: 8296)
- Unicorn-33075.exe (PID: 8452)
- Unicorn-50873.exe (PID: 8404)
- Unicorn-48065.exe (PID: 8420)
- Unicorn-35383.exe (PID: 8336)
- Unicorn-57003.exe (PID: 8412)
- Unicorn-6432.exe (PID: 8472)
- Unicorn-14600.exe (PID: 8492)
- Unicorn-9029.exe (PID: 7764)
- Unicorn-16739.exe (PID: 8556)
- Unicorn-58326.exe (PID: 8584)
- Unicorn-45227.exe (PID: 8868)
- Unicorn-13017.exe (PID: 8664)
- Unicorn-20823.exe (PID: 8656)
- Unicorn-47465.exe (PID: 8564)
- Unicorn-35767.exe (PID: 8632)
- Unicorn-61855.exe (PID: 8504)
- Unicorn-55633.exe (PID: 8648)
- Unicorn-43381.exe (PID: 8524)
- Unicorn-62869.exe (PID: 7828)
- Unicorn-51074.exe (PID: 4180)
- Unicorn-47465.exe (PID: 8568)
- Unicorn-31491.exe (PID: 8816)
- Unicorn-53395.exe (PID: 8844)
- Unicorn-31491.exe (PID: 8820)
- Unicorn-61398.exe (PID: 8808)
- Unicorn-59339.exe (PID: 8912)
- Unicorn-16281.exe (PID: 8832)
- Unicorn-16115.exe (PID: 8996)
- Unicorn-42565.exe (PID: 9104)
- Unicorn-52317.exe (PID: 9016)
- Unicorn-50179.exe (PID: 8984)
- Unicorn-56209.exe (PID: 9164)
- Unicorn-58247.exe (PID: 9080)
- Unicorn-11284.exe (PID: 8976)
- Unicorn-23656.exe (PID: 9208)
- Unicorn-50830.exe (PID: 8088)
- Unicorn-11476.exe (PID: 3676)
- Unicorn-1362.exe (PID: 9248)
- Unicorn-54455.exe (PID: 9240)
- Unicorn-34346.exe (PID: 9280)
- Unicorn-7968.exe (PID: 9308)
- Unicorn-6899.exe (PID: 9352)
- Unicorn-7968.exe (PID: 9300)
- Unicorn-4247.exe (PID: 9484)
- Unicorn-22721.exe (PID: 9404)
- Unicorn-32372.exe (PID: 9432)
- Unicorn-42587.exe (PID: 9412)
- Unicorn-56977.exe (PID: 9584)
- Unicorn-8331.exe (PID: 9468)
- Unicorn-10390.exe (PID: 9692)
- Unicorn-24859.exe (PID: 9556)
- Unicorn-184.exe (PID: 9620)
- Unicorn-32473.exe (PID: 9540)
- Unicorn-45201.exe (PID: 9672)
- Unicorn-60246.exe (PID: 9768)
- Unicorn-16521.exe (PID: 9680)
- Unicorn-33049.exe (PID: 9732)
- Unicorn-23105.exe (PID: 9824)
- Unicorn-65529.exe (PID: 9792)
- Unicorn-10853.exe (PID: 9800)
- Unicorn-32857.exe (PID: 9876)
- Unicorn-31895.exe (PID: 9896)
- Unicorn-59975.exe (PID: 9916)
- Unicorn-54958.exe (PID: 9856)
- Unicorn-62576.exe (PID: 9952)
- Unicorn-14693.exe (PID: 9984)
- Unicorn-39463.exe (PID: 9932)
- Unicorn-25269.exe (PID: 8752)
Creates files or folders in the user directory
- WerFault.exe (PID: 9748)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable (generic) (52.9) |
|---|---|---|
| .exe | | | Generic Win/DOS Executable (23.5) |
| .exe | | | DOS Executable Generic (23.5) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
523
Monitored processes
389
Malicious processes
64
Suspicious processes
65
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 644 | C:\Users\admin\AppData\Local\Temp\Unicorn-17432.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-17432.exe | Unicorn-30654.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 736 | C:\Users\admin\AppData\Local\Temp\Unicorn-48718.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-48718.exe | Unicorn-36776.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1164 | C:\Users\admin\AppData\Local\Temp\Unicorn-36684.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-36684.exe | Unicorn-58090.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1188 | C:\Users\admin\AppData\Local\Temp\Unicorn-29070.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-29070.exe | Unicorn-53082.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1240 | C:\Users\admin\AppData\Local\Temp\Unicorn-63663.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-63663.exe | Unicorn-64867.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1272 | C:\Users\admin\AppData\Local\Temp\Unicorn-44891.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-44891.exe | Unicorn-30480.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1280 | C:\Users\admin\AppData\Local\Temp\Unicorn-44175.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-44175.exe | Unicorn-6891.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1452 | C:\Users\admin\AppData\Local\Temp\Unicorn-56235.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-56235.exe | Unicorn-48287.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1748 | C:\Users\admin\AppData\Local\Temp\Unicorn-54896.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-54896.exe | — | Unicorn-14195.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 2064 | C:\Users\admin\AppData\Local\Temp\Unicorn-3094.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-3094.exe | — | Unicorn-58130.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
9 863
Read events
9 863
Write events
0
Delete events
0
Modification events
Executable files
1 236
Suspicious files
3
Text files
1
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 5344 | Unicorn-53082.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-58090.exe | executable | |
MD5:C8DB39DFD6E191F1E3704183C23DE0DF | SHA256:C8539439D65087B0E52B4CF7EB5356D04073A0199D83A36A2EB1650B51A8829E | |||
| 5968 | Unicorn-14981.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-36776.exe | executable | |
MD5:35F2DC6558AAC79B182C99C249AD3969 | SHA256:F2B1C6CB157D53BC19B0901A7F9358E6D88A31D5B1FA6C8D123870F009A77AAF | |||
| 5280 | 1 (559).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-37300.exe | executable | |
MD5:6C7F4DB29F4E5E7FBD2950A38E29E3AF | SHA256:709500CD4F6CA60F5C51D33629CA3D58C09E6EDC3B3D776D9EB88E715E7789FD | |||
| 6028 | Unicorn-58090.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-36684.exe | executable | |
MD5:46720209948F2F32AFCFFDA8B4541045 | SHA256:E71FD44A2B5C6B2BA99638CD4B763B6583CD23B1920E44ACFDCACCE18DBC5F5C | |||
| 2236 | Unicorn-37300.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-27124.exe | executable | |
MD5:B46DA7ED165C7DCCB47F4703B5D9BAAB | SHA256:FB96D228316EDF033A9AE66CA54321017D64E74B63730E2C56ACF72688DCA51C | |||
| 5968 | Unicorn-14981.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53082.exe | executable | |
MD5:5774966F8DBFCED092730C459424E544 | SHA256:824D4BE8207B6A2B6241B9A6A1971EB004B69021BCCAE3FCFB359DDBEBCCB7AC | |||
| 5256 | Unicorn-64867.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30654.exe | executable | |
MD5:A84DFE56C29ED910F86326576167F16B | SHA256:7E175B1BD39672ED9F071C53433F8E484EE86AE0924A65E21A0489855C75D8CC | |||
| 5968 | Unicorn-14981.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-64867.exe | executable | |
MD5:E4050058B14DE42CFCC651E33FA42D2C | SHA256:85AFDE92A23A5438112B8E00967013CFDB19A751C3B399009FB15377A63AD883 | |||
| 5344 | Unicorn-53082.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-29070.exe | executable | |
MD5:250672D1C1C2A14DA4D4FCA45130EB28 | SHA256:D234A2EC9791125C762260D4415634CF796C49F03248353A16D7857D60B7A12D | |||
| 2236 | Unicorn-37300.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-8889.exe | executable | |
MD5:C55248601C572E0A3F7CBBF3C11F920E | SHA256:7DC6568C7FFA0A783818D8F20FDA8880F9F987A7964B0A6643FA372C863A8892 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
22
DNS requests
15
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
— | — | GET | 200 | 23.48.23.143:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
864 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
8940 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
8940 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
— | — | 23.48.23.143:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
3216 | svchost.exe | 20.198.162.78:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | SG | whitelisted |
6544 | svchost.exe | 20.190.159.0:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
864 | backgroundTaskHost.exe | 20.223.35.26:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
864 | backgroundTaskHost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
2104 | svchost.exe | 4.231.128.59:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |