analyze malware
  • Huge database of samples and IOCs
  • Custom VM setup
  • Unlimited submissions
  • Interactive approach
Sign up, it’s free
File name:

62a986c16cdede724c9742f1c825f9e1f0ae5cbbe023dff477f3d6bf0b9e6966.exe

Full analysis: https://app.any.run/tasks/ebc4c639-536c-4a1f-ab0e-8bff1bf911ee
Verdict: Malicious activity
Analysis date: May 21, 2024, 06:02:26
OS: Windows 10 Professional (build: 19045, 64 bit)
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows
MD5:

28ED94A3E2B3A882AAE78DFEBD5808D0

SHA1:

D3C5CA8A33B6209D187A72ADB4A5EF198DE3DC40

SHA256:

62A986C16CDEDE724C9742F1C825F9E1F0AE5CBBE023DFF477F3D6BF0B9E6966

SSDEEP:

3072:0KrWbjftvDtqVjpg2kvNW2486RGSD9dsfpfu4+woLc8uIMY:0KrWbjf1D4SVv08y5Sfpfu4+woLc8uI

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.
  • MALICIOUS

    • Drops the executable file immediately after the start

      • powershell.exe (PID: 6272)
      • 62a986c16cdede724c9742f1c825f9e1f0ae5cbbe023dff477f3d6bf0b9e6966.exe (PID: 6480)
      • Unicorn-62431.exe (PID: 6576)
      • Unicorn-48311.exe (PID: 6600)
      • Unicorn-44974.exe (PID: 6620)
      • Unicorn-24679.exe (PID: 6644)
      • Unicorn-29509.exe (PID: 6668)
      • Unicorn-3822.exe (PID: 6860)
      • Unicorn-61575.exe (PID: 6904)
      • Unicorn-16437.exe (PID: 6880)
      • Unicorn-61575.exe (PID: 6912)
      • Unicorn-59581.exe (PID: 6692)
      • Unicorn-49375.exe (PID: 6660)
      • Unicorn-17309.exe (PID: 6056)
      • Unicorn-45727.exe (PID: 7160)
      • Unicorn-39287.exe (PID: 6100)
      • Unicorn-57853.exe (PID: 3712)
      • Unicorn-39479.exe (PID: 1412)
      • Unicorn-56007.exe (PID: 1608)
      • Unicorn-56007.exe (PID: 5196)
      • Unicorn-61575.exe (PID: 6896)
      • Unicorn-2317.exe (PID: 4704)
      • Unicorn-56007.exe (PID: 4724)
      • Unicorn-13252.exe (PID: 1720)
      • Unicorn-47277.exe (PID: 6920)
      • Unicorn-31607.exe (PID: 380)
      • Unicorn-47943.exe (PID: 5032)
      • Unicorn-36437.exe (PID: 4108)
      • Unicorn-33644.exe (PID: 72)
      • Unicorn-23823.exe (PID: 5092)
      • Unicorn-28653.exe (PID: 4852)
      • Unicorn-32951.exe (PID: 1100)
      • Unicorn-37781.exe (PID: 1016)
      • Unicorn-58031.exe (PID: 4260)
      • Unicorn-41695.exe (PID: 6216)
      • Unicorn-58031.exe (PID: 1228)
      • Unicorn-15847.exe (PID: 5944)
      • Unicorn-56007.exe (PID: 1272)
      • Unicorn-56007.exe (PID: 4012)
      • Unicorn-15847.exe (PID: 2116)
      • Unicorn-32183.exe (PID: 6464)
      • Unicorn-32183.exe (PID: 6456)
      • Unicorn-32183.exe (PID: 6472)
      • Unicorn-32183.exe (PID: 6448)
      • Unicorn-2124.exe (PID: 6280)
      • Unicorn-37013.exe (PID: 6428)
      • Unicorn-47949.exe (PID: 6400)
      • Unicorn-12317.exe (PID: 6296)
      • Unicorn-2124.exe (PID: 6276)
      • Unicorn-44310.exe (PID: 2736)
      • Unicorn-21917.exe (PID: 372)
      • Unicorn-58046.exe (PID: 6960)
      • Unicorn-12109.exe (PID: 6952)
      • Unicorn-24311.exe (PID: 6820)
      • Unicorn-4253.exe (PID: 6828)
      • Unicorn-39687.exe (PID: 5656)
      • Unicorn-500.exe (PID: 1964)
      • Unicorn-12037.exe (PID: 5612)
      • Unicorn-40071.exe (PID: 4480)
      • Unicorn-15182.exe (PID: 4524)
      • Unicorn-23351.exe (PID: 7044)
      • Unicorn-11845.exe (PID: 7128)
      • Unicorn-23351.exe (PID: 7036)
      • Unicorn-24015.exe (PID: 6376)
      • Unicorn-28181.exe (PID: 7100)
      • Unicorn-15182.exe (PID: 5752)
      • Unicorn-41917.exe (PID: 7068)
      • Unicorn-48254.exe (PID: 428)
      • Unicorn-4829.exe (PID: 5528)
      • Unicorn-50351.exe (PID: 3872)
      • Unicorn-309.exe (PID: 7176)
      • Unicorn-31991.exe (PID: 308)
      • Unicorn-32863.exe (PID: 3784)
      • Unicorn-43645.exe (PID: 7196)
      • Unicorn-16055.exe (PID: 7216)
      • Unicorn-57663.exe (PID: 7252)
      • Unicorn-24415.exe (PID: 7232)
      • Unicorn-5125.exe (PID: 7288)
      • Unicorn-54134.exe (PID: 7272)
      • Unicorn-53942.exe (PID: 7308)
      • Unicorn-56319.exe (PID: 7328)
      • Unicorn-4357.exe (PID: 7380)
      • Unicorn-58815.exe (PID: 7416)
      • Unicorn-12525.exe (PID: 7368)
      • Unicorn-50647.exe (PID: 7444)
      • Unicorn-58815.exe (PID: 7408)
      • Unicorn-50455.exe (PID: 7540)
      • Unicorn-58623.exe (PID: 7468)
      • Unicorn-22997.exe (PID: 7648)
      • Unicorn-1830.exe (PID: 7584)
      • Unicorn-36733.exe (PID: 7656)
      • Unicorn-18167.exe (PID: 7628)
      • Unicorn-12317.exe (PID: 6284)
      • Unicorn-9422.exe (PID: 7500)
      • Unicorn-1830.exe (PID: 7580)
      • Unicorn-22805.exe (PID: 7780)
      • Unicorn-22805.exe (PID: 7764)
      • Unicorn-20204.exe (PID: 7736)
      • Unicorn-50455.exe (PID: 7548)
      • Unicorn-60085.exe (PID: 7804)
      • Unicorn-55478.exe (PID: 7704)
      • Unicorn-49614.exe (PID: 7884)
      • Unicorn-41446.exe (PID: 7892)
      • Unicorn-7989.exe (PID: 780)
      • Unicorn-24413.exe (PID: 7876)
      • Unicorn-22805.exe (PID: 7772)
      • Unicorn-2716.exe (PID: 7836)
      • Unicorn-35581.exe (PID: 7908)
      • Unicorn-48325.exe (PID: 6756)
      • Unicorn-32183.exe (PID: 6444)
      • Unicorn-2317.exe (PID: 1944)
      • Unicorn-37013.exe (PID: 6404)
      • Unicorn-16052.exe (PID: 6012)
      • Unicorn-65453.exe (PID: 7844)
      • Unicorn-54103.exe (PID: 7980)
      • Unicorn-20663.exe (PID: 7964)
      • Unicorn-17709.exe (PID: 8000)
      • Unicorn-30484.exe (PID: 8016)
      • Unicorn-28447.exe (PID: 8024)
      • Unicorn-6749.exe (PID: 4428)
      • Unicorn-17133.exe (PID: 8056)
      • Unicorn-44591.exe (PID: 8048)
      • Unicorn-53143.exe (PID: 8100)
      • Unicorn-52878.exe (PID: 8084)
      • Unicorn-34799.exe (PID: 8176)
      • Unicorn-26631.exe (PID: 8152)
      • Unicorn-34799.exe (PID: 8168)
      • Unicorn-53143.exe (PID: 8092)
      • Unicorn-64518.exe (PID: 8328)
      • Unicorn-59687.exe (PID: 8236)
      • Unicorn-34607.exe (PID: 8224)
      • Unicorn-51519.exe (PID: 8272)
      • Unicorn-27015.exe (PID: 8304)
      • Unicorn-51519.exe (PID: 8264)
      • Unicorn-55006.exe (PID: 8392)
      • Unicorn-52405.exe (PID: 8368)
      • Unicorn-404.exe (PID: 8400)
      • Unicorn-8373.exe (PID: 8448)
      • Unicorn-31653.exe (PID: 8252)
      • Unicorn-55006.exe (PID: 8384)
      • Unicorn-3588.exe (PID: 8484)
      • Unicorn-39053.exe (PID: 8468)
      • Unicorn-6189.exe (PID: 8524)
      • Unicorn-44311.exe (PID: 8572)
      • Unicorn-11446.exe (PID: 8548)
      • Unicorn-43735.exe (PID: 8608)
      • Unicorn-35567.exe (PID: 8616)
      • Unicorn-40589.exe (PID: 8720)
      • Unicorn-11062.exe (PID: 8740)
      • Unicorn-61277.exe (PID: 8436)
      • Unicorn-20772.exe (PID: 8756)
      • Unicorn-1093.exe (PID: 8512)
      • Unicorn-26173.exe (PID: 8776)
      • Unicorn-54134.exe (PID: 8848)
      • Unicorn-50455.exe (PID: 7532)
      • Unicorn-30590.exe (PID: 8900)
      • Unicorn-12317.exe (PID: 6268)
      • Unicorn-54599.exe (PID: 9000)
      • Unicorn-21735.exe (PID: 8984)
      • Unicorn-46815.exe (PID: 9024)
      • Unicorn-21159.exe (PID: 9040)
      • Unicorn-29327.exe (PID: 9060)
      • Unicorn-22909.exe (PID: 8196)
      • Unicorn-63942.exe (PID: 6148)
      • Unicorn-13374.exe (PID: 9080)
      • Unicorn-20317.exe (PID: 9148)
      • Unicorn-50581.exe (PID: 9164)
      • Unicorn-33860.exe (PID: 9184)
      • Unicorn-22887.exe (PID: 9236)
      • Unicorn-57597.exe (PID: 9208)
      • Unicorn-58055.exe (PID: 9420)
      • Unicorn-28869.exe (PID: 9504)
      • Unicorn-56903.exe (PID: 9492)
      • Unicorn-61926.exe (PID: 9532)
      • Unicorn-8086.exe (PID: 9548)
      • Unicorn-39117.exe (PID: 7096)
      • Unicorn-5886.exe (PID: 9588)
      • Unicorn-1934.exe (PID: 8132)
      • Unicorn-10486.exe (PID: 8280)
      • Unicorn-34349.exe (PID: 9104)
      • Unicorn-34349.exe (PID: 9096)
      • Unicorn-332.exe (PID: 9604)
      • Unicorn-30775.exe (PID: 9620)
      • Unicorn-21455.exe (PID: 9700)
      • Unicorn-33004.exe (PID: 9636)
      • Unicorn-62679.exe (PID: 9656)
      • Unicorn-62679.exe (PID: 9652)
      • Unicorn-62679.exe (PID: 9668)
      • Unicorn-58623.exe (PID: 7476)
      • Unicorn-42287.exe (PID: 7560)
      • Unicorn-18693.exe (PID: 9792)
      • Unicorn-37983.exe (PID: 9716)
      • Unicorn-22031.exe (PID: 9764)
      • Unicorn-13862.exe (PID: 9732)
      • Unicorn-13670.exe (PID: 9828)
      • Unicorn-30007.exe (PID: 9860)
      • Unicorn-22031.exe (PID: 9756)
      • Unicorn-22031.exe (PID: 9748)
      • Unicorn-38559.exe (PID: 9800)
      • Unicorn-53286.exe (PID: 9880)
      • Unicorn-23543.exe (PID: 6508)
      • Unicorn-56815.exe (PID: 9896)
      • Unicorn-40287.exe (PID: 9932)
      • Unicorn-32503.exe (PID: 9956)
      • Unicorn-61646.exe (PID: 9996)
      • Unicorn-32503.exe (PID: 9948)
      • Unicorn-44350.exe (PID: 10096)
      • Unicorn-32311.exe (PID: 10016)
      • Unicorn-65175.exe (PID: 10032)
      • Unicorn-57007.exe (PID: 10052)
      • Unicorn-19845.exe (PID: 10088)
      • Unicorn-56047.exe (PID: 10136)
      • Unicorn-14822.exe (PID: 10168)
      • Unicorn-39711.exe (PID: 10104)
      • Unicorn-19845.exe (PID: 10080)
      • Unicorn-64215.exe (PID: 10124)
      • Unicorn-17436.exe (PID: 10232)
      • Unicorn-52710.exe (PID: 9312)
      • Unicorn-15206.exe (PID: 9300)
      • Unicorn-62990.exe (PID: 10276)
      • Unicorn-52902.exe (PID: 10216)
      • Unicorn-64334.exe (PID: 9316)
      • Unicorn-36373.exe (PID: 10256)
      • Unicorn-20229.exe (PID: 10248)
      • Unicorn-44734.exe (PID: 9280)
      • Unicorn-27332.exe (PID: 10372)
      • Unicorn-8580.exe (PID: 10532)
      • Unicorn-33774.exe (PID: 10452)
      • Unicorn-19740.exe (PID: 10484)
      • Unicorn-27332.exe (PID: 10376)
      • Unicorn-55206.exe (PID: 10436)
      • Unicorn-24454.exe (PID: 10608)
      • Unicorn-24916.exe (PID: 10552)
      • Unicorn-1101.exe (PID: 10516)
      • Unicorn-19740.exe (PID: 10476)
      • Unicorn-8117.exe (PID: 10600)
      • Unicorn-32117.exe (PID: 10648)
      • Unicorn-65519.exe (PID: 10584)
      • Unicorn-2252.exe (PID: 10592)
      • Unicorn-20229.exe (PID: 6492)
      • Unicorn-34119.exe (PID: 7508)
  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • 62a986c16cdede724c9742f1c825f9e1f0ae5cbbe023dff477f3d6bf0b9e6966.exe (PID: 6480)
      • Unicorn-62431.exe (PID: 6576)
      • Unicorn-48311.exe (PID: 6600)
      • Unicorn-44974.exe (PID: 6620)
      • Unicorn-24679.exe (PID: 6644)
      • Unicorn-29509.exe (PID: 6668)
      • Unicorn-3822.exe (PID: 6860)
      • Unicorn-16437.exe (PID: 6880)
      • Unicorn-61575.exe (PID: 6904)
      • Unicorn-59581.exe (PID: 6692)
      • Unicorn-61575.exe (PID: 6912)
      • Unicorn-49375.exe (PID: 6660)
      • Unicorn-17309.exe (PID: 6056)
      • Unicorn-45727.exe (PID: 7160)
      • Unicorn-57853.exe (PID: 3712)
      • Unicorn-39287.exe (PID: 6100)
      • Unicorn-56007.exe (PID: 5196)
      • Unicorn-56007.exe (PID: 1608)
      • Unicorn-39479.exe (PID: 1412)
      • Unicorn-56007.exe (PID: 4724)
      • Unicorn-61575.exe (PID: 6896)
      • Unicorn-2317.exe (PID: 4704)
      • Unicorn-13252.exe (PID: 1720)
      • Unicorn-47277.exe (PID: 6920)
      • Unicorn-47943.exe (PID: 5032)
      • Unicorn-31607.exe (PID: 380)
      • Unicorn-36437.exe (PID: 4108)
      • Unicorn-23823.exe (PID: 5092)
      • Unicorn-33644.exe (PID: 72)
      • Unicorn-28653.exe (PID: 4852)
      • Unicorn-32951.exe (PID: 1100)
      • Unicorn-37781.exe (PID: 1016)
      • Unicorn-58031.exe (PID: 4260)
      • Unicorn-41695.exe (PID: 6216)
      • Unicorn-58031.exe (PID: 1228)
      • Unicorn-56007.exe (PID: 4012)
      • Unicorn-15847.exe (PID: 5944)
      • Unicorn-15847.exe (PID: 2116)
      • Unicorn-56007.exe (PID: 1272)
      • Unicorn-32183.exe (PID: 6464)
      • Unicorn-32183.exe (PID: 6448)
      • Unicorn-37013.exe (PID: 6428)
      • Unicorn-32183.exe (PID: 6472)
      • Unicorn-2124.exe (PID: 6280)
      • Unicorn-32183.exe (PID: 6456)
      • Unicorn-47949.exe (PID: 6400)
      • Unicorn-12317.exe (PID: 6296)
      • Unicorn-2124.exe (PID: 6276)
      • Unicorn-21917.exe (PID: 372)
      • Unicorn-12109.exe (PID: 6952)
      • Unicorn-44310.exe (PID: 2736)
      • Unicorn-58046.exe (PID: 6960)
      • Unicorn-24311.exe (PID: 6820)
      • Unicorn-4253.exe (PID: 6828)
      • Unicorn-39687.exe (PID: 5656)
      • Unicorn-500.exe (PID: 1964)
      • Unicorn-40071.exe (PID: 4480)
      • Unicorn-12037.exe (PID: 5612)
      • Unicorn-23351.exe (PID: 7044)
      • Unicorn-15182.exe (PID: 4524)
      • Unicorn-24015.exe (PID: 6376)
      • Unicorn-11845.exe (PID: 7128)
      • Unicorn-23351.exe (PID: 7036)
      • Unicorn-15182.exe (PID: 5752)
      • Unicorn-28181.exe (PID: 7100)
      • Unicorn-41917.exe (PID: 7068)
      • Unicorn-31991.exe (PID: 308)
      • Unicorn-4829.exe (PID: 5528)
      • Unicorn-50351.exe (PID: 3872)
      • Unicorn-48254.exe (PID: 428)
      • Unicorn-309.exe (PID: 7176)
      • Unicorn-32863.exe (PID: 3784)
      • Unicorn-43645.exe (PID: 7196)
      • Unicorn-16055.exe (PID: 7216)
      • Unicorn-5125.exe (PID: 7288)
      • Unicorn-24415.exe (PID: 7232)
      • Unicorn-54134.exe (PID: 7272)
      • Unicorn-53942.exe (PID: 7308)
      • Unicorn-57663.exe (PID: 7252)
      • Unicorn-56319.exe (PID: 7328)
      • Unicorn-12525.exe (PID: 7368)
      • Unicorn-58815.exe (PID: 7416)
      • Unicorn-4357.exe (PID: 7380)
      • Unicorn-58815.exe (PID: 7408)
      • Unicorn-50455.exe (PID: 7540)
      • Unicorn-50647.exe (PID: 7444)
      • Unicorn-1830.exe (PID: 7584)
      • Unicorn-22997.exe (PID: 7648)
      • Unicorn-36733.exe (PID: 7656)
      • Unicorn-58623.exe (PID: 7468)
      • Unicorn-12317.exe (PID: 6284)
      • Unicorn-18167.exe (PID: 7628)
      • Unicorn-9422.exe (PID: 7500)
      • Unicorn-1830.exe (PID: 7580)
      • Unicorn-22805.exe (PID: 7780)
      • Unicorn-22805.exe (PID: 7764)
      • Unicorn-20204.exe (PID: 7736)
      • Unicorn-55478.exe (PID: 7704)
      • Unicorn-60085.exe (PID: 7804)
      • Unicorn-49614.exe (PID: 7884)
      • Unicorn-50455.exe (PID: 7548)
      • Unicorn-7989.exe (PID: 780)
      • Unicorn-41446.exe (PID: 7892)
      • Unicorn-24413.exe (PID: 7876)
      • Unicorn-22805.exe (PID: 7772)
      • Unicorn-2716.exe (PID: 7836)
      • Unicorn-35581.exe (PID: 7908)
      • Unicorn-65453.exe (PID: 7844)
      • Unicorn-32183.exe (PID: 6444)
      • Unicorn-48325.exe (PID: 6756)
      • Unicorn-37013.exe (PID: 6404)
      • Unicorn-16052.exe (PID: 6012)
      • Unicorn-2317.exe (PID: 1944)
      • Unicorn-20663.exe (PID: 7964)
      • Unicorn-30484.exe (PID: 8016)
      • Unicorn-17709.exe (PID: 8000)
      • Unicorn-54103.exe (PID: 7980)
      • Unicorn-28447.exe (PID: 8024)
      • Unicorn-6749.exe (PID: 4428)
      • Unicorn-44591.exe (PID: 8048)
      • Unicorn-53143.exe (PID: 8100)
      • Unicorn-17133.exe (PID: 8056)
      • Unicorn-52878.exe (PID: 8084)
      • Unicorn-26631.exe (PID: 8152)
      • Unicorn-34799.exe (PID: 8176)
      • Unicorn-53143.exe (PID: 8092)
      • Unicorn-64518.exe (PID: 8328)
      • Unicorn-34799.exe (PID: 8168)
      • Unicorn-34607.exe (PID: 8224)
      • Unicorn-31653.exe (PID: 8252)
      • Unicorn-27015.exe (PID: 8304)
      • Unicorn-51519.exe (PID: 8264)
      • Unicorn-55006.exe (PID: 8392)
      • Unicorn-52405.exe (PID: 8368)
      • Unicorn-59687.exe (PID: 8236)
      • Unicorn-404.exe (PID: 8400)
      • Unicorn-8373.exe (PID: 8448)
      • Unicorn-51519.exe (PID: 8272)
      • Unicorn-3588.exe (PID: 8484)
      • Unicorn-39053.exe (PID: 8468)
      • Unicorn-61277.exe (PID: 8436)
      • Unicorn-1093.exe (PID: 8512)
      • Unicorn-6189.exe (PID: 8524)
      • Unicorn-11446.exe (PID: 8548)
      • Unicorn-55006.exe (PID: 8384)
      • Unicorn-44311.exe (PID: 8572)
      • Unicorn-43735.exe (PID: 8608)
      • Unicorn-35567.exe (PID: 8616)
      • Unicorn-40589.exe (PID: 8720)
      • Unicorn-11062.exe (PID: 8740)
      • Unicorn-20772.exe (PID: 8756)
      • Unicorn-26173.exe (PID: 8776)
      • Unicorn-54134.exe (PID: 8848)
      • Unicorn-50455.exe (PID: 7532)
      • Unicorn-30590.exe (PID: 8900)
      • Unicorn-12317.exe (PID: 6268)
      • Unicorn-54599.exe (PID: 9000)
      • Unicorn-21735.exe (PID: 8984)
      • Unicorn-46815.exe (PID: 9024)
      • Unicorn-29327.exe (PID: 9060)
      • Unicorn-21159.exe (PID: 9040)
      • Unicorn-22909.exe (PID: 8196)
      • Unicorn-63942.exe (PID: 6148)
      • Unicorn-13374.exe (PID: 9080)
      • Unicorn-20317.exe (PID: 9148)
      • Unicorn-50581.exe (PID: 9164)
      • Unicorn-33860.exe (PID: 9184)
      • Unicorn-57597.exe (PID: 9208)
      • Unicorn-22887.exe (PID: 9236)
      • Unicorn-58055.exe (PID: 9420)
      • Unicorn-56903.exe (PID: 9492)
      • Unicorn-28869.exe (PID: 9504)
      • Unicorn-61926.exe (PID: 9532)
      • Unicorn-8086.exe (PID: 9548)
      • Unicorn-39117.exe (PID: 7096)
      • Unicorn-5886.exe (PID: 9588)
      • Unicorn-10486.exe (PID: 8280)
      • Unicorn-1934.exe (PID: 8132)
      • Unicorn-34349.exe (PID: 9096)
      • Unicorn-34349.exe (PID: 9104)
      • Unicorn-332.exe (PID: 9604)
      • Unicorn-30775.exe (PID: 9620)
      • Unicorn-21455.exe (PID: 9700)
      • Unicorn-33004.exe (PID: 9636)
      • Unicorn-62679.exe (PID: 9656)
      • Unicorn-62679.exe (PID: 9652)
      • Unicorn-62679.exe (PID: 9668)
      • Unicorn-58623.exe (PID: 7476)
      • Unicorn-42287.exe (PID: 7560)
      • Unicorn-37983.exe (PID: 9716)
      • Unicorn-18693.exe (PID: 9792)
      • Unicorn-13862.exe (PID: 9732)
      • Unicorn-22031.exe (PID: 9764)
      • Unicorn-30007.exe (PID: 9860)
      • Unicorn-13670.exe (PID: 9828)
      • Unicorn-22031.exe (PID: 9748)
      • Unicorn-22031.exe (PID: 9756)
      • Unicorn-38559.exe (PID: 9800)
      • Unicorn-53286.exe (PID: 9880)
      • Unicorn-23543.exe (PID: 6508)
      • Unicorn-56815.exe (PID: 9896)
      • Unicorn-40287.exe (PID: 9932)
      • Unicorn-32503.exe (PID: 9956)
      • Unicorn-61646.exe (PID: 9996)
      • Unicorn-32311.exe (PID: 10016)
      • Unicorn-44350.exe (PID: 10096)
      • Unicorn-65175.exe (PID: 10032)
      • Unicorn-32503.exe (PID: 9948)
      • Unicorn-57007.exe (PID: 10052)
      • Unicorn-19845.exe (PID: 10088)
      • Unicorn-14822.exe (PID: 10168)
      • Unicorn-56047.exe (PID: 10136)
      • Unicorn-39711.exe (PID: 10104)
      • Unicorn-19845.exe (PID: 10080)
      • Unicorn-64215.exe (PID: 10124)
      • Unicorn-15206.exe (PID: 9300)
      • Unicorn-52710.exe (PID: 9312)
      • Unicorn-17436.exe (PID: 10232)
      • Unicorn-36373.exe (PID: 10256)
      • Unicorn-64334.exe (PID: 9316)
      • Unicorn-27332.exe (PID: 10376)
      • Unicorn-62990.exe (PID: 10276)
      • Unicorn-20229.exe (PID: 10248)
      • Unicorn-44734.exe (PID: 9280)
      • Unicorn-27332.exe (PID: 10372)
      • Unicorn-8580.exe (PID: 10532)
      • Unicorn-52902.exe (PID: 10216)
      • Unicorn-55206.exe (PID: 10436)
      • Unicorn-19740.exe (PID: 10484)
      • Unicorn-24454.exe (PID: 10608)
      • Unicorn-1101.exe (PID: 10516)
      • Unicorn-24916.exe (PID: 10552)
      • Unicorn-33774.exe (PID: 10452)
      • Unicorn-32117.exe (PID: 10648)
      • Unicorn-19740.exe (PID: 10476)
      • Unicorn-2252.exe (PID: 10592)
      • Unicorn-8117.exe (PID: 10600)
      • Unicorn-20229.exe (PID: 6492)
      • Unicorn-34119.exe (PID: 7508)
      • Unicorn-65519.exe (PID: 10584)
    • Starts itself from another location

      • 62a986c16cdede724c9742f1c825f9e1f0ae5cbbe023dff477f3d6bf0b9e6966.exe (PID: 6480)
      • Unicorn-62431.exe (PID: 6576)
      • Unicorn-48311.exe (PID: 6600)
      • Unicorn-44974.exe (PID: 6620)
      • Unicorn-24679.exe (PID: 6644)
      • Unicorn-49375.exe (PID: 6660)
      • Unicorn-3822.exe (PID: 6860)
      • Unicorn-16437.exe (PID: 6880)
      • Unicorn-61575.exe (PID: 6904)
      • Unicorn-58046.exe (PID: 6960)
      • Unicorn-61575.exe (PID: 6896)
      • Unicorn-61575.exe (PID: 6912)
      • Unicorn-29509.exe (PID: 6668)
      • Unicorn-45727.exe (PID: 7160)
      • Unicorn-17309.exe (PID: 6056)
      • Unicorn-39287.exe (PID: 6100)
      • Unicorn-57853.exe (PID: 3712)
      • Unicorn-39479.exe (PID: 1412)
      • Unicorn-56007.exe (PID: 1608)
      • Unicorn-56007.exe (PID: 5196)
      • Unicorn-21917.exe (PID: 372)
      • Unicorn-56007.exe (PID: 4724)
      • Unicorn-2317.exe (PID: 1944)
      • Unicorn-56007.exe (PID: 4012)
      • Unicorn-13252.exe (PID: 1720)
      • Unicorn-56007.exe (PID: 1272)
      • Unicorn-2317.exe (PID: 4704)
      • Unicorn-12109.exe (PID: 6952)
      • Unicorn-47277.exe (PID: 6920)
      • Unicorn-31607.exe (PID: 380)
      • Unicorn-36437.exe (PID: 4108)
      • Unicorn-47943.exe (PID: 5032)
      • Unicorn-31991.exe (PID: 308)
      • Unicorn-23823.exe (PID: 5092)
      • Unicorn-33644.exe (PID: 72)
      • Unicorn-28653.exe (PID: 4852)
      • Unicorn-48254.exe (PID: 428)
      • Unicorn-37781.exe (PID: 1016)
      • Unicorn-59581.exe (PID: 6692)
      • Unicorn-41695.exe (PID: 6216)
      • Unicorn-58031.exe (PID: 4260)
      • Unicorn-58031.exe (PID: 1228)
      • Unicorn-15847.exe (PID: 5944)
      • Unicorn-12317.exe (PID: 6284)
      • Unicorn-32183.exe (PID: 6444)
      • Unicorn-37013.exe (PID: 6428)
      • Unicorn-12317.exe (PID: 6268)
      • Unicorn-32183.exe (PID: 6456)
      • Unicorn-37013.exe (PID: 6404)
      • Unicorn-2124.exe (PID: 6280)
      • Unicorn-48325.exe (PID: 6756)
      • Unicorn-47949.exe (PID: 6400)
      • Unicorn-44310.exe (PID: 2736)
      • Unicorn-16052.exe (PID: 6012)
      • Unicorn-24311.exe (PID: 6820)
      • Unicorn-4253.exe (PID: 6828)
      • Unicorn-39687.exe (PID: 5656)
      • Unicorn-500.exe (PID: 1964)
      • Unicorn-23543.exe (PID: 6508)
      • Unicorn-40071.exe (PID: 4480)
      • Unicorn-12037.exe (PID: 5612)
      • Unicorn-23351.exe (PID: 7044)
      • Unicorn-32183.exe (PID: 6448)
      • Unicorn-15182.exe (PID: 4524)
      • Unicorn-6749.exe (PID: 4428)
      • Unicorn-24015.exe (PID: 6376)
      • Unicorn-11845.exe (PID: 7128)
      • Unicorn-23351.exe (PID: 7036)
      • Unicorn-41917.exe (PID: 7068)
      • Unicorn-4829.exe (PID: 5528)
      • Unicorn-309.exe (PID: 7176)
      • Unicorn-50351.exe (PID: 3872)
      • Unicorn-32951.exe (PID: 1100)
      • Unicorn-43645.exe (PID: 7196)
      • Unicorn-16055.exe (PID: 7216)
      • Unicorn-5125.exe (PID: 7288)
      • Unicorn-24415.exe (PID: 7232)
      • Unicorn-54134.exe (PID: 7272)
      • Unicorn-53942.exe (PID: 7308)
      • Unicorn-57663.exe (PID: 7252)
      • Unicorn-56319.exe (PID: 7328)
      • Unicorn-15847.exe (PID: 2116)
      • Unicorn-58815.exe (PID: 7416)
      • Unicorn-50647.exe (PID: 7444)
      • Unicorn-58623.exe (PID: 7476)
      • Unicorn-58815.exe (PID: 7408)
      • Unicorn-1830.exe (PID: 7584)
      • Unicorn-36733.exe (PID: 7656)
      • Unicorn-58623.exe (PID: 7468)
      • Unicorn-22997.exe (PID: 7648)
      • Unicorn-1830.exe (PID: 7580)
      • Unicorn-9422.exe (PID: 7500)
      • Unicorn-32183.exe (PID: 6464)
      • Unicorn-18167.exe (PID: 7628)
      • Unicorn-22805.exe (PID: 7780)
      • Unicorn-22805.exe (PID: 7764)
      • Unicorn-20204.exe (PID: 7736)
      • Unicorn-55478.exe (PID: 7704)
      • Unicorn-60085.exe (PID: 7804)
      • Unicorn-41446.exe (PID: 7892)
      • Unicorn-32183.exe (PID: 6472)
      • Unicorn-24413.exe (PID: 7876)
      • Unicorn-35581.exe (PID: 7908)
      • Unicorn-12317.exe (PID: 6296)
      • Unicorn-65453.exe (PID: 7844)
      • Unicorn-2124.exe (PID: 6276)
      • Unicorn-20663.exe (PID: 7964)
      • Unicorn-17709.exe (PID: 8000)
      • Unicorn-54103.exe (PID: 7980)
      • Unicorn-17133.exe (PID: 8056)
      • Unicorn-39117.exe (PID: 7096)
      • Unicorn-15182.exe (PID: 5752)
      • Unicorn-44591.exe (PID: 8048)
      • Unicorn-53143.exe (PID: 8100)
      • Unicorn-52878.exe (PID: 8084)
      • Unicorn-26631.exe (PID: 8152)
      • Unicorn-53143.exe (PID: 8092)
      • Unicorn-34799.exe (PID: 8168)
      • Unicorn-64518.exe (PID: 8328)
      • Unicorn-22909.exe (PID: 8196)
      • Unicorn-34799.exe (PID: 8176)
      • Unicorn-63942.exe (PID: 6148)
      • Unicorn-1934.exe (PID: 8132)
      • Unicorn-34607.exe (PID: 8224)
      • Unicorn-59687.exe (PID: 8236)
      • Unicorn-27015.exe (PID: 8304)
      • Unicorn-51519.exe (PID: 8264)
      • Unicorn-52405.exe (PID: 8368)
      • Unicorn-31653.exe (PID: 8252)
      • Unicorn-32863.exe (PID: 3784)
      • Unicorn-404.exe (PID: 8400)
      • Unicorn-8373.exe (PID: 8448)
      • Unicorn-55006.exe (PID: 8392)
      • Unicorn-55006.exe (PID: 8384)
      • Unicorn-3588.exe (PID: 8484)
      • Unicorn-39053.exe (PID: 8468)
      • Unicorn-6189.exe (PID: 8524)
      • Unicorn-11446.exe (PID: 8548)
      • Unicorn-44311.exe (PID: 8572)
      • Unicorn-43735.exe (PID: 8608)
      • Unicorn-35567.exe (PID: 8616)
      • Unicorn-40589.exe (PID: 8720)
      • Unicorn-11062.exe (PID: 8740)
      • Unicorn-20772.exe (PID: 8756)
      • Unicorn-61277.exe (PID: 8436)
      • Unicorn-1093.exe (PID: 8512)
      • Unicorn-54134.exe (PID: 8848)
      • Unicorn-4357.exe (PID: 7380)
      • Unicorn-50455.exe (PID: 7540)
      • Unicorn-50455.exe (PID: 7548)
      • Unicorn-30590.exe (PID: 8900)
      • Unicorn-6469.exe (PID: 7728)
      • Unicorn-49614.exe (PID: 7884)
      • Unicorn-2716.exe (PID: 7836)
      • Unicorn-7989.exe (PID: 780)
      • Unicorn-30484.exe (PID: 8016)
      • Unicorn-22805.exe (PID: 7772)
      • Unicorn-54599.exe (PID: 9000)
      • Unicorn-28447.exe (PID: 8024)
      • Unicorn-21735.exe (PID: 8984)
      • Unicorn-10486.exe (PID: 8280)
      • Unicorn-51519.exe (PID: 8272)
      • Unicorn-29327.exe (PID: 9060)
      • Unicorn-13374.exe (PID: 9080)
      • Unicorn-28181.exe (PID: 7100)
      • Unicorn-20317.exe (PID: 9148)
      • Unicorn-50581.exe (PID: 9164)
      • Unicorn-57597.exe (PID: 9208)
      • Unicorn-26173.exe (PID: 8776)
      • Unicorn-22887.exe (PID: 9236)
      • Unicorn-33860.exe (PID: 9184)
      • Unicorn-12525.exe (PID: 7368)
      • Unicorn-50455.exe (PID: 7532)
      • Unicorn-34119.exe (PID: 7508)
      • Unicorn-42287.exe (PID: 7560)
      • Unicorn-58055.exe (PID: 9420)
      • Unicorn-28869.exe (PID: 9504)
      • Unicorn-56903.exe (PID: 9492)
      • Unicorn-61926.exe (PID: 9532)
      • Unicorn-46815.exe (PID: 9024)
      • Unicorn-8086.exe (PID: 9548)
      • Unicorn-21159.exe (PID: 9040)
      • Unicorn-5886.exe (PID: 9588)
      • Unicorn-34349.exe (PID: 9096)
      • Unicorn-34349.exe (PID: 9104)
      • Unicorn-332.exe (PID: 9604)
      • Unicorn-30775.exe (PID: 9620)
      • Unicorn-62679.exe (PID: 9652)
      • Unicorn-62679.exe (PID: 9668)
      • Unicorn-18693.exe (PID: 9792)
      • Unicorn-37983.exe (PID: 9716)
      • Unicorn-22031.exe (PID: 9764)
      • Unicorn-13862.exe (PID: 9732)
      • Unicorn-22031.exe (PID: 9748)
      • Unicorn-13670.exe (PID: 9828)
      • Unicorn-22031.exe (PID: 9756)
      • Unicorn-30007.exe (PID: 9860)
      • Unicorn-38559.exe (PID: 9800)
      • Unicorn-53286.exe (PID: 9880)
      • Unicorn-61646.exe (PID: 9996)
      • Unicorn-40287.exe (PID: 9932)
      • Unicorn-65175.exe (PID: 10032)
      • Unicorn-32311.exe (PID: 10016)
      • Unicorn-44350.exe (PID: 10096)
      • Unicorn-62679.exe (PID: 9656)
      • Unicorn-33004.exe (PID: 9636)
      • Unicorn-14822.exe (PID: 10168)
      • Unicorn-19845.exe (PID: 10088)
      • Unicorn-56047.exe (PID: 10136)
      • Unicorn-21455.exe (PID: 9700)
      • Unicorn-39711.exe (PID: 10104)
      • Unicorn-64215.exe (PID: 10124)
      • Unicorn-19845.exe (PID: 10080)
      • Unicorn-15206.exe (PID: 9300)
      • Unicorn-52710.exe (PID: 9312)
      • Unicorn-56815.exe (PID: 9896)
      • Unicorn-17436.exe (PID: 10232)
    • Executes application which crashes

      • Unicorn-7118.exe (PID: 7348)
      • Unicorn-24335.exe (PID: 9980)
  • INFO

    • Checks supported languages

      • 62a986c16cdede724c9742f1c825f9e1f0ae5cbbe023dff477f3d6bf0b9e6966.exe (PID: 6480)
      • Unicorn-62431.exe (PID: 6576)
      • Unicorn-44974.exe (PID: 6620)
      • Unicorn-48311.exe (PID: 6600)
      • Unicorn-24679.exe (PID: 6644)
      • Unicorn-49375.exe (PID: 6660)
      • Unicorn-29509.exe (PID: 6668)
      • Unicorn-59581.exe (PID: 6692)
      • Unicorn-16437.exe (PID: 6880)
      • Unicorn-3822.exe (PID: 6860)
      • Unicorn-47277.exe (PID: 6920)
      • Unicorn-61575.exe (PID: 6912)
      • Unicorn-61575.exe (PID: 6896)
      • Unicorn-61575.exe (PID: 6904)
      • Unicorn-58046.exe (PID: 6960)
      • Unicorn-12109.exe (PID: 6952)
      • Unicorn-45727.exe (PID: 7160)
      • Unicorn-17309.exe (PID: 6056)
      • Unicorn-39287.exe (PID: 6100)
      • Unicorn-57853.exe (PID: 3712)
      • Unicorn-39479.exe (PID: 1412)
      • Unicorn-56007.exe (PID: 5196)
      • Unicorn-56007.exe (PID: 1272)
      • Unicorn-56007.exe (PID: 4724)
      • Unicorn-56007.exe (PID: 4012)
      • Unicorn-56007.exe (PID: 1608)
      • Unicorn-21917.exe (PID: 372)
      • Unicorn-44310.exe (PID: 2736)
      • Unicorn-16052.exe (PID: 6012)
      • Unicorn-13252.exe (PID: 1720)
      • Unicorn-2317.exe (PID: 4704)
      • Unicorn-2317.exe (PID: 1944)
      • Unicorn-31607.exe (PID: 380)
      • Unicorn-36437.exe (PID: 4108)
      • Unicorn-33644.exe (PID: 72)
      • Unicorn-47943.exe (PID: 5032)
      • Unicorn-23823.exe (PID: 5092)
      • Unicorn-28653.exe (PID: 4852)
      • Unicorn-48254.exe (PID: 428)
      • Unicorn-31991.exe (PID: 308)
      • Unicorn-32951.exe (PID: 1100)
      • Unicorn-37781.exe (PID: 1016)
      • Unicorn-41695.exe (PID: 6216)
      • Unicorn-58031.exe (PID: 4260)
      • Unicorn-15847.exe (PID: 5944)
      • Unicorn-15847.exe (PID: 2116)
      • Unicorn-58031.exe (PID: 1228)
      • Unicorn-32183.exe (PID: 6444)
      • Unicorn-12317.exe (PID: 6296)
      • Unicorn-37013.exe (PID: 6428)
      • Unicorn-12317.exe (PID: 6268)
      • Unicorn-37013.exe (PID: 6404)
      • Unicorn-24015.exe (PID: 6376)
      • Unicorn-12317.exe (PID: 6284)
      • Unicorn-32183.exe (PID: 6464)
      • Unicorn-32183.exe (PID: 6472)
      • Unicorn-32183.exe (PID: 6448)
      • Unicorn-2124.exe (PID: 6276)
      • Unicorn-32183.exe (PID: 6456)
      • Unicorn-47949.exe (PID: 6400)
      • Unicorn-24311.exe (PID: 6820)
      • Unicorn-2124.exe (PID: 6280)
      • Unicorn-4253.exe (PID: 6828)
      • Unicorn-48325.exe (PID: 6756)
      • Unicorn-500.exe (PID: 1964)
      • Unicorn-39687.exe (PID: 5656)
      • Unicorn-7989.exe (PID: 780)
      • Unicorn-23543.exe (PID: 6508)
      • Unicorn-40071.exe (PID: 4480)
      • Unicorn-12037.exe (PID: 5612)
      • Unicorn-6749.exe (PID: 4428)
      • Unicorn-23351.exe (PID: 7044)
      • Unicorn-23351.exe (PID: 7036)
      • Unicorn-15182.exe (PID: 4524)
      • Unicorn-15182.exe (PID: 5752)
      • Unicorn-41917.exe (PID: 7068)
      • Unicorn-11845.exe (PID: 7128)
      • Unicorn-39117.exe (PID: 7096)
      • Unicorn-28181.exe (PID: 7100)
      • Unicorn-50351.exe (PID: 3872)
      • Unicorn-32863.exe (PID: 3784)
      • Unicorn-4829.exe (PID: 5528)
      • Unicorn-16055.exe (PID: 7216)
      • Unicorn-309.exe (PID: 7176)
      • Unicorn-43645.exe (PID: 7196)
      • Unicorn-24415.exe (PID: 7232)
      • Unicorn-57663.exe (PID: 7252)
      • Unicorn-5125.exe (PID: 7288)
      • Unicorn-54134.exe (PID: 7272)
      • Unicorn-53942.exe (PID: 7308)
      • Unicorn-7118.exe (PID: 7348)
      • Unicorn-56319.exe (PID: 7328)
      • Unicorn-4357.exe (PID: 7380)
      • Unicorn-12525.exe (PID: 7368)
      • Unicorn-58815.exe (PID: 7416)
      • Unicorn-58815.exe (PID: 7408)
      • Unicorn-58623.exe (PID: 7468)
      • Unicorn-50647.exe (PID: 7444)
      • Unicorn-58623.exe (PID: 7476)
      • Unicorn-34119.exe (PID: 7508)
      • Unicorn-9422.exe (PID: 7500)
      • Unicorn-50455.exe (PID: 7532)
      • Unicorn-50455.exe (PID: 7540)
      • Unicorn-42287.exe (PID: 7560)
      • Unicorn-50455.exe (PID: 7548)
      • Unicorn-1830.exe (PID: 7584)
      • Unicorn-1830.exe (PID: 7580)
      • Unicorn-55478.exe (PID: 7704)
      • Unicorn-22997.exe (PID: 7648)
      • Unicorn-36733.exe (PID: 7656)
      • Unicorn-20204.exe (PID: 7736)
      • Unicorn-18167.exe (PID: 7628)
      • Unicorn-22805.exe (PID: 7772)
      • Unicorn-60085.exe (PID: 7804)
      • Unicorn-22805.exe (PID: 7764)
      • Unicorn-2716.exe (PID: 7836)
      • Unicorn-65453.exe (PID: 7844)
      • Unicorn-22805.exe (PID: 7780)
      • Unicorn-6469.exe (PID: 7728)
      • Unicorn-41446.exe (PID: 7892)
      • Unicorn-49614.exe (PID: 7884)
      • Unicorn-24413.exe (PID: 7876)
      • Unicorn-33311.exe (PID: 7900)
      • Unicorn-35581.exe (PID: 7908)
      • Unicorn-20663.exe (PID: 7964)
      • Unicorn-17709.exe (PID: 8000)
      • Unicorn-54103.exe (PID: 7980)
      • Unicorn-30484.exe (PID: 8016)
      • Unicorn-28447.exe (PID: 8024)
      • Unicorn-17133.exe (PID: 8056)
      • Unicorn-53143.exe (PID: 8092)
      • Unicorn-53143.exe (PID: 8100)
      • Unicorn-1934.exe (PID: 8132)
      • Unicorn-44591.exe (PID: 8048)
      • Unicorn-52878.exe (PID: 8084)
      • Unicorn-26631.exe (PID: 8152)
      • Unicorn-63942.exe (PID: 6148)
      • Unicorn-34799.exe (PID: 8168)
      • Unicorn-22909.exe (PID: 8196)
      • Unicorn-34799.exe (PID: 8176)
      • Unicorn-34607.exe (PID: 8224)
      • Unicorn-10486.exe (PID: 8280)
      • Unicorn-31653.exe (PID: 8252)
      • Unicorn-59687.exe (PID: 8236)
      • Unicorn-27015.exe (PID: 8304)
      • Unicorn-51519.exe (PID: 8272)
      • Unicorn-51519.exe (PID: 8264)
      • Unicorn-52405.exe (PID: 8368)
      • Unicorn-55006.exe (PID: 8384)
      • Unicorn-404.exe (PID: 8400)
      • Unicorn-64518.exe (PID: 8328)
      • Unicorn-55006.exe (PID: 8392)
      • Unicorn-8373.exe (PID: 8448)
      • Unicorn-39053.exe (PID: 8468)
      • Unicorn-11446.exe (PID: 8548)
      • Unicorn-61277.exe (PID: 8436)
      • Unicorn-44311.exe (PID: 8572)
      • Unicorn-3588.exe (PID: 8484)
      • Unicorn-1093.exe (PID: 8512)
      • Unicorn-6189.exe (PID: 8524)
      • Unicorn-35567.exe (PID: 8616)
      • Unicorn-53749.exe (PID: 8624)
      • Unicorn-43735.exe (PID: 8608)
      • Unicorn-40589.exe (PID: 8720)
      • Unicorn-11062.exe (PID: 8740)
      • Unicorn-26173.exe (PID: 8776)
      • Unicorn-20772.exe (PID: 8756)
      • Unicorn-54134.exe (PID: 8848)
      • Unicorn-30590.exe (PID: 8900)
      • Unicorn-46815.exe (PID: 9024)
      • Unicorn-54599.exe (PID: 9000)
      • Unicorn-29327.exe (PID: 9060)
      • Unicorn-21735.exe (PID: 8984)
      • Unicorn-34349.exe (PID: 9104)
      • Unicorn-13374.exe (PID: 9080)
      • Unicorn-34349.exe (PID: 9096)
      • Unicorn-21159.exe (PID: 9040)
      • Unicorn-57597.exe (PID: 9208)
      • Unicorn-20317.exe (PID: 9148)
      • Unicorn-22887.exe (PID: 9236)
      • Unicorn-56903.exe (PID: 9492)
      • Unicorn-28869.exe (PID: 9504)
      • Unicorn-50581.exe (PID: 9164)
      • Unicorn-33860.exe (PID: 9184)
      • Unicorn-61926.exe (PID: 9532)
      • Unicorn-8086.exe (PID: 9548)
      • Unicorn-58055.exe (PID: 9420)
      • Unicorn-5886.exe (PID: 9588)
      • Unicorn-332.exe (PID: 9604)
      • Unicorn-30775.exe (PID: 9620)
      • Unicorn-33004.exe (PID: 9636)
      • Unicorn-62679.exe (PID: 9668)
      • Unicorn-62679.exe (PID: 9656)
      • Unicorn-62679.exe (PID: 9652)
      • Unicorn-21455.exe (PID: 9700)
      • Unicorn-37983.exe (PID: 9716)
      • Unicorn-13862.exe (PID: 9732)
      • Unicorn-22031.exe (PID: 9756)
      • Unicorn-22031.exe (PID: 9764)
      • Unicorn-22031.exe (PID: 9748)
      • Unicorn-18693.exe (PID: 9792)
      • Unicorn-38559.exe (PID: 9800)
      • Unicorn-13670.exe (PID: 9828)
      • Unicorn-30007.exe (PID: 9860)
      • Unicorn-53286.exe (PID: 9880)
      • Unicorn-56815.exe (PID: 9896)
      • Unicorn-7422.exe (PID: 9912)
      • Unicorn-40287.exe (PID: 9932)
      • Unicorn-32503.exe (PID: 9948)
      • Unicorn-61646.exe (PID: 9996)
      • Unicorn-24335.exe (PID: 9980)
      • Unicorn-32311.exe (PID: 10016)
      • Unicorn-65175.exe (PID: 10032)
      • Unicorn-32503.exe (PID: 9956)
      • Unicorn-57007.exe (PID: 10052)
      • Unicorn-19845.exe (PID: 10088)
      • Unicorn-19845.exe (PID: 10080)
      • Unicorn-44350.exe (PID: 10096)
      • Unicorn-39711.exe (PID: 10104)
      • Unicorn-64215.exe (PID: 10124)
      • Unicorn-56047.exe (PID: 10136)
      • Unicorn-14822.exe (PID: 10168)
      • Unicorn-52902.exe (PID: 10216)
      • Unicorn-15206.exe (PID: 9300)
      • Unicorn-44734.exe (PID: 9280)
      • Unicorn-62990.exe (PID: 10276)
      • Unicorn-64334.exe (PID: 9316)
      • Unicorn-20229.exe (PID: 6492)
      • Unicorn-27332.exe (PID: 10372)
      • Unicorn-52710.exe (PID: 9312)
      • Unicorn-55206.exe (PID: 10436)
      • Unicorn-33774.exe (PID: 10452)
      • Unicorn-19740.exe (PID: 10484)
      • Unicorn-1101.exe (PID: 10516)
      • Unicorn-27332.exe (PID: 10376)
      • Unicorn-17436.exe (PID: 10232)
      • Unicorn-8580.exe (PID: 10532)
      • Unicorn-65519.exe (PID: 10584)
      • Unicorn-24454.exe (PID: 10608)
      • Unicorn-8117.exe (PID: 10600)
      • Unicorn-32117.exe (PID: 10648)
      • Unicorn-2252.exe (PID: 10592)
      • Unicorn-19740.exe (PID: 10476)
      • Unicorn-36373.exe (PID: 10256)
      • Unicorn-24916.exe (PID: 10552)
      • Unicorn-58927.exe (PID: 10740)
      • Unicorn-39637.exe (PID: 10760)
      • Unicorn-20229.exe (PID: 10248)
      • Unicorn-15502.exe (PID: 10828)
      • Unicorn-32799.exe (PID: 10788)
      • Unicorn-20525.exe (PID: 10884)
      • Unicorn-22445.exe (PID: 10928)
      • Unicorn-42046.exe (PID: 10920)
      • Unicorn-15887.exe (PID: 10864)
      • Unicorn-3508.exe (PID: 10904)
      • Unicorn-16655.exe (PID: 10808)
      • Unicorn-6301.exe (PID: 10960)
      • Unicorn-49141.exe (PID: 10996)
      • Unicorn-20036.exe (PID: 10968)
      • Unicorn-38205.exe (PID: 11008)
      • Unicorn-5149.exe (PID: 11060)
      • Unicorn-38205.exe (PID: 11004)
      • Unicorn-38013.exe (PID: 11080)
      • Unicorn-46182.exe (PID: 11044)
      • Unicorn-38013.exe (PID: 11088)
      • Unicorn-14085.exe (PID: 11152)
      • Unicorn-27820.exe (PID: 11136)
      • Unicorn-14085.exe (PID: 11160)
      • Unicorn-52325.exe (PID: 11184)
      • Unicorn-33951.exe (PID: 11176)
      • Unicorn-46566.exe (PID: 11220)
      • Unicorn-38589.exe (PID: 11192)
      • Unicorn-46077.exe (PID: 11332)
      • Unicorn-50095.exe (PID: 11292)
      • Unicorn-51942.exe (PID: 11316)
      • Unicorn-11100.exe (PID: 11236)
      • Unicorn-49997.exe (PID: 11364)
      • Unicorn-19460.exe (PID: 11120)
      • Unicorn-38589.exe (PID: 11200)
      • Unicorn-54629.exe (PID: 11376)
      • Unicorn-11366.exe (PID: 11404)
      • Unicorn-19535.exe (PID: 11464)
      • Unicorn-26741.exe (PID: 11324)
      • Unicorn-20612.exe (PID: 11516)
      • Unicorn-26743.exe (PID: 11540)
      • Unicorn-52326.exe (PID: 11388)
      • Unicorn-35103.exe (PID: 11572)
      • Unicorn-26551.exe (PID: 11608)
      • Unicorn-35103.exe (PID: 11580)
      • Unicorn-52359.exe (PID: 11396)
      • Unicorn-23789.exe (PID: 11628)
      • Unicorn-2238.exe (PID: 11524)
      • Unicorn-37407.exe (PID: 11664)
      • Unicorn-37407.exe (PID: 11656)
      • Unicorn-20687.exe (PID: 11716)
      • Unicorn-17812.exe (PID: 11532)
      • Unicorn-28855.exe (PID: 11692)
      • Unicorn-20687.exe (PID: 11708)
      • Unicorn-45383.exe (PID: 11724)
      • Unicorn-61719.exe (PID: 11780)
      • Unicorn-53286.exe (PID: 11732)
      • Unicorn-4926.exe (PID: 11812)
      • Unicorn-20687.exe (PID: 11700)
      • Unicorn-37791.exe (PID: 11872)
      • Unicorn-49446.exe (PID: 11900)
      • Unicorn-19149.exe (PID: 11920)
      • Unicorn-31660.exe (PID: 11856)
      • Unicorn-60951.exe (PID: 11972)
      • Unicorn-54821.exe (PID: 11948)
      • Unicorn-19919.exe (PID: 11940)
      • Unicorn-33685.exe (PID: 11756)
      • Unicorn-50397.exe (PID: 12020)
      • Unicorn-12134.exe (PID: 12000)
      • Unicorn-41853.exe (PID: 11744)
      • Unicorn-1766.exe (PID: 12052)
      • Unicorn-42799.exe (PID: 12072)
      • Unicorn-43375.exe (PID: 12112)
      • Unicorn-9358.exe (PID: 12136)
      • Unicorn-25695.exe (PID: 12152)
      • Unicorn-34247.exe (PID: 12180)
      • Unicorn-60671.exe (PID: 12224)
      • Unicorn-43957.exe (PID: 12280)
      • Unicorn-3613.exe (PID: 12260)
      • Unicorn-4956.exe (PID: 6544)
      • Unicorn-52119.exe (PID: 3732)
      • Unicorn-26655.exe (PID: 12036)
      • Unicorn-54039.exe (PID: 2088)
      • Unicorn-17645.exe (PID: 12400)
      • Unicorn-52046.exe (PID: 12424)
      • Unicorn-42149.exe (PID: 12368)
      • Unicorn-11205.exe (PID: 12464)
      • Unicorn-43878.exe (PID: 12444)
      • Unicorn-52430.exe (PID: 12512)
      • Unicorn-19948.exe (PID: 12172)
      • Unicorn-39623.exe (PID: 12536)
      • Unicorn-32532.exe (PID: 12556)
      • Unicorn-10510.exe (PID: 12092)
      • Unicorn-38663.exe (PID: 12592)
      • Unicorn-48869.exe (PID: 12608)
      • Unicorn-32724.exe (PID: 12640)
      • Unicorn-38590.exe (PID: 12648)
      • Unicorn-23287.exe (PID: 12492)
      • Unicorn-62207.exe (PID: 5712)
      • Unicorn-40717.exe (PID: 12816)
      • Unicorn-38855.exe (PID: 12696)
      • Unicorn-64157.exe (PID: 12964)
      • Unicorn-51574.exe (PID: 12932)
      • Unicorn-65309.exe (PID: 12924)
      • Unicorn-37734.exe (PID: 13028)
      • Unicorn-14957.exe (PID: 13052)
      • Unicorn-17749.exe (PID: 12984)
      • Unicorn-59358.exe (PID: 12908)
      • Unicorn-36389.exe (PID: 13044)
      • Unicorn-42637.exe (PID: 13008)
      • Unicorn-28029.exe (PID: 13080)
      • Unicorn-19861.exe (PID: 13096)
      • Unicorn-36773.exe (PID: 13104)
      • Unicorn-19861.exe (PID: 13088)
      • Unicorn-52918.exe (PID: 12720)
      • Unicorn-52918.exe (PID: 13204)
      • Unicorn-12269.exe (PID: 13132)
      • Unicorn-52918.exe (PID: 13196)
      • Unicorn-35621.exe (PID: 13276)
      • Unicorn-28413.exe (PID: 13240)
      • Unicorn-8132.exe (PID: 13296)
      • Unicorn-19093.exe (PID: 2288)
      • Unicorn-42149.exe (PID: 13232)
      • Unicorn-61086.exe (PID: 13184)
      • Unicorn-12269.exe (PID: 12768)
      • Unicorn-47703.exe (PID: 13316)
      • Unicorn-35813.exe (PID: 1176)
      • Unicorn-44174.exe (PID: 636)
      • Unicorn-52150.exe (PID: 13336)
      • Unicorn-52150.exe (PID: 13344)
      • Unicorn-3141.exe (PID: 13356)
      • Unicorn-44750.exe (PID: 13164)
      • Unicorn-62238.exe (PID: 13468)
      • Unicorn-51661.exe (PID: 13400)
      • Unicorn-29757.exe (PID: 13440)
      • Unicorn-13421.exe (PID: 13424)
      • Unicorn-35133.exe (PID: 13508)
      • Unicorn-21397.exe (PID: 13516)
      • Unicorn-35133.exe (PID: 13492)
      • Unicorn-62814.exe (PID: 13524)
      • Unicorn-36965.exe (PID: 13628)
      • Unicorn-58869.exe (PID: 13620)
      • Unicorn-50701.exe (PID: 13668)
      • Unicorn-35133.exe (PID: 13500)
      • Unicorn-50701.exe (PID: 13652)
      • Unicorn-50701.exe (PID: 13676)
      • Unicorn-50701.exe (PID: 13660)
      • Unicorn-50701.exe (PID: 13636)
      • Unicorn-42917.exe (PID: 13848)
      • Unicorn-47901.exe (PID: 13692)
      • Unicorn-56566.exe (PID: 13684)
      • Unicorn-7941.exe (PID: 13792)
      • Unicorn-48782.exe (PID: 13856)
      • Unicorn-46277.exe (PID: 13904)
      • Unicorn-46077.exe (PID: 13932)
      • Unicorn-50701.exe (PID: 13644)
      • Unicorn-46661.exe (PID: 14128)
      • Unicorn-13405.exe (PID: 13980)
      • Unicorn-40614.exe (PID: 13888)
      • Unicorn-31948.exe (PID: 13896)
      • Unicorn-46661.exe (PID: 14104)
      • Unicorn-55326.exe (PID: 14112)
      • Unicorn-39023.exe (PID: 14152)
      • Unicorn-25660.exe (PID: 14120)
      • Unicorn-61766.exe (PID: 14296)
      • Unicorn-58013.exe (PID: 14316)
      • Unicorn-30245.exe (PID: 14360)
      • Unicorn-52830.exe (PID: 14344)
      • Unicorn-38797.exe (PID: 14396)
      • Unicorn-25340.exe (PID: 14332)
      • Unicorn-27836.exe (PID: 14440)
      • Unicorn-45814.exe (PID: 14468)
      • Unicorn-26876.exe (PID: 14496)
      • Unicorn-24382.exe (PID: 14512)
      • Unicorn-16100.exe (PID: 14560)
      • Unicorn-18900.exe (PID: 14580)
      • Unicorn-16100.exe (PID: 14572)
      • Unicorn-29180.exe (PID: 14648)
      • Unicorn-27143.exe (PID: 14640)
      • Unicorn-36005.exe (PID: 14432)
      • Unicorn-35046.exe (PID: 14656)
      • Unicorn-35311.exe (PID: 14696)
      • Unicorn-10229.exe (PID: 14780)
      • Unicorn-29564.exe (PID: 14792)
      • Unicorn-29564.exe (PID: 14752)
      • Unicorn-29564.exe (PID: 14768)
      • Unicorn-4676.exe (PID: 14856)
      • Unicorn-18901.exe (PID: 14900)
      • Unicorn-60007.exe (PID: 14864)
      • Unicorn-50614.exe (PID: 14916)
      • Unicorn-20244.exe (PID: 14948)
      • Unicorn-44749.exe (PID: 14924)
      • Unicorn-34278.exe (PID: 14972)
      • Unicorn-14677.exe (PID: 14980)
      • Unicorn-34278.exe (PID: 14964)
      • Unicorn-28412.exe (PID: 14988)
      • Unicorn-52725.exe (PID: 14996)
      • Unicorn-29564.exe (PID: 14760)
      • Unicorn-4676.exe (PID: 14848)
      • Unicorn-24294.exe (PID: 15140)
      • Unicorn-15628.exe (PID: 15148)
      • Unicorn-24559.exe (PID: 15204)
      • Unicorn-37173.exe (PID: 15192)
      • Unicorn-54278.exe (PID: 15272)
      • Unicorn-65207.exe (PID: 15240)
      • Unicorn-35276.exe (PID: 15180)
      • Unicorn-56846.exe (PID: 15264)
      • Unicorn-62446.exe (PID: 15256)
      • Unicorn-29389.exe (PID: 15304)
      • Unicorn-54278.exe (PID: 15280)
      • Unicorn-16509.exe (PID: 15288)
      • Unicorn-44958.exe (PID: 15456)
      • Unicorn-62446.exe (PID: 15296)
      • Unicorn-30733.exe (PID: 15512)
      • Unicorn-28621.exe (PID: 15416)
      • Unicorn-44958.exe (PID: 15448)
      • Unicorn-9492.exe (PID: 13248)
      • Unicorn-6884.exe (PID: 15504)
      • Unicorn-20453.exe (PID: 15424)
      • Unicorn-44958.exe (PID: 15472)
      • Unicorn-28621.exe (PID: 15408)
      • Unicorn-9684.exe (PID: 15440)
      • Unicorn-26494.exe (PID: 15076)
      • Unicorn-3436.exe (PID: 15636)
      • Unicorn-17661.exe (PID: 15596)
      • Unicorn-14397.exe (PID: 15620)
      • Unicorn-29965.exe (PID: 15708)
      • Unicorn-49566.exe (PID: 15700)
      • Unicorn-31397.exe (PID: 15048)
      • Unicorn-17828.exe (PID: 15084)
      • Unicorn-18358.exe (PID: 15068)
      • Unicorn-42693.exe (PID: 15120)
      • Unicorn-58693.exe (PID: 15464)
      • Unicorn-49831.exe (PID: 15768)
      • Unicorn-49831.exe (PID: 15748)
      • Unicorn-44958.exe (PID: 15476)
      • Unicorn-29773.exe (PID: 15792)
      • Unicorn-34223.exe (PID: 15664)
      • Unicorn-29965.exe (PID: 15692)
      • Unicorn-48990.exe (PID: 15924)
      • Unicorn-48606.exe (PID: 15876)
      • Unicorn-32077.exe (PID: 15904)
      • Unicorn-32269.exe (PID: 15856)
      • Unicorn-57158.exe (PID: 15944)
      • Unicorn-35150.exe (PID: 15996)
      • Unicorn-64174.exe (PID: 15964)
      • Unicorn-49831.exe (PID: 15740)
      • Unicorn-10069.exe (PID: 15972)
      • Unicorn-28589.exe (PID: 16044)
      • Unicorn-31396.exe (PID: 16068)
      • Unicorn-33421.exe (PID: 16132)
      • Unicorn-3702.exe (PID: 16092)
      • Unicorn-3245.exe (PID: 16112)
      • Unicorn-41085.exe (PID: 15812)
      • Unicorn-46494.exe (PID: 15840)
      • Unicorn-57926.exe (PID: 16152)
      • Unicorn-39861.exe (PID: 16012)
      • Unicorn-32269.exe (PID: 15864)
      • Unicorn-26292.exe (PID: 16024)
      • Unicorn-8725.exe (PID: 16176)
      • Unicorn-12254.exe (PID: 16184)
      • Unicorn-36021.exe (PID: 16312)
      • Unicorn-10054.exe (PID: 16244)
      • Unicorn-20260.exe (PID: 16236)
      • Unicorn-35829.exe (PID: 16368)
      • Unicorn-57454.exe (PID: 16496)
      • Unicorn-9478.exe (PID: 16352)
      • Unicorn-49670.exe (PID: 16588)
      • Unicorn-60910.exe (PID: 16572)
      • Unicorn-3733.exe (PID: 16596)
      • Unicorn-21988.exe (PID: 16516)
      • Unicorn-64662.exe (PID: 16688)
      • Unicorn-10557.exe (PID: 16660)
      • Unicorn-4388.exe (PID: 16764)
      • Unicorn-1892.exe (PID: 16672)
      • Unicorn-2468.exe (PID: 16716)
      • Unicorn-38325.exe (PID: 16476)
      • Unicorn-52549.exe (PID: 16448)
      • Unicorn-52549.exe (PID: 16440)
      • Unicorn-49094.exe (PID: 16536)
      • Unicorn-31116.exe (PID: 16864)
      • Unicorn-56581.exe (PID: 16820)
      • Unicorn-37631.exe (PID: 16788)
      • Unicorn-25060.exe (PID: 16896)
      • Unicorn-30926.exe (PID: 16888)
      • Unicorn-55814.exe (PID: 16976)
      • Unicorn-25444.exe (PID: 16992)
      • Unicorn-54549.exe (PID: 17128)
      • Unicorn-8148.exe (PID: 17216)
      • Unicorn-57349.exe (PID: 17136)
      • Unicorn-63413.exe (PID: 17232)
      • Unicorn-63413.exe (PID: 17248)
      • Unicorn-14212.exe (PID: 17256)
      • Unicorn-19885.exe (PID: 17360)
      • Unicorn-55053.exe (PID: 17324)
      • Unicorn-55053.exe (PID: 17320)
      • Unicorn-55053.exe (PID: 17336)
      • Unicorn-5276.exe (PID: 17424)
      • Unicorn-14020.exe (PID: 17344)
      • Unicorn-14020.exe (PID: 17348)
      • Unicorn-36798.exe (PID: 16936)
      • Unicorn-54285.exe (PID: 17472)
      • Unicorn-40549.exe (PID: 17480)
      • Unicorn-29780.exe (PID: 17500)
      • Unicorn-29780.exe (PID: 17508)
      • Unicorn-29780.exe (PID: 17520)
      • Unicorn-60726.exe (PID: 17588)
      • Unicorn-8916.exe (PID: 17036)
      • Unicorn-62525.exe (PID: 17072)
      • Unicorn-5468.exe (PID: 17644)
      • Unicorn-38525.exe (PID: 17620)
      • Unicorn-63413.exe (PID: 17240)
      • Unicorn-21996.exe (PID: 17668)
      • Unicorn-62646.exe (PID: 17708)
      • Unicorn-7580.exe (PID: 17724)
      • Unicorn-62646.exe (PID: 17692)
      • Unicorn-62646.exe (PID: 17700)
      • Unicorn-63221.exe (PID: 17312)
      • Unicorn-48805.exe (PID: 17856)
      • Unicorn-32276.exe (PID: 17760)
      • Unicorn-29972.exe (PID: 17436)
      • Unicorn-54670.exe (PID: 17880)
      • Unicorn-54670.exe (PID: 17872)
      • Unicorn-29469.exe (PID: 17904)
      • Unicorn-54670.exe (PID: 17912)
      • Unicorn-37836.exe (PID: 17932)
      • Unicorn-54670.exe (PID: 17864)
      • Unicorn-54670.exe (PID: 17888)
      • Unicorn-45037.exe (PID: 18068)
      • Unicorn-62103.exe (PID: 18092)
      • Unicorn-4701.exe (PID: 18100)
      • Unicorn-45037.exe (PID: 18076)
      • Unicorn-54670.exe (PID: 17896)
      • Unicorn-28516.exe (PID: 18052)
      • Unicorn-46502.exe (PID: 17920)
      • Unicorn-22071.exe (PID: 17948)
      • Unicorn-61573.exe (PID: 18084)
      • Unicorn-58828.exe (PID: 18212)
      • Unicorn-43133.exe (PID: 9928)
      • Unicorn-58893.exe (PID: 9816)
      • Unicorn-53493.exe (PID: 18220)
      • Unicorn-14292.exe (PID: 18184)
      • Unicorn-25335.exe (PID: 6616)
      • Unicorn-63294.exe (PID: 18200)
      • Unicorn-7581.exe (PID: 6628)
      • Unicorn-63294.exe (PID: 18192)
      • Unicorn-16709.exe (PID: 5004)
      • Unicorn-39175.exe (PID: 18324)
      • Unicorn-21262.exe (PID: 18148)
      • Unicorn-16428.exe (PID: 10176)
      • Unicorn-30846.exe (PID: 10388)
      • Unicorn-46990.exe (PID: 6684)
      • Unicorn-8260.exe (PID: 6656)
      • Unicorn-53886.exe (PID: 18440)
      • Unicorn-45533.exe (PID: 10560)
      • Unicorn-13549.exe (PID: 18448)
      • Unicorn-53886.exe (PID: 10664)
      • Unicorn-13052.exe (PID: 18508)
      • Unicorn-23670.exe (PID: 18572)
      • Unicorn-18453.exe (PID: 18536)
      • Unicorn-10285.exe (PID: 18480)
      • Unicorn-7566.exe (PID: 18556)
      • Unicorn-21717.exe (PID: 18496)
      • Unicorn-31806.exe (PID: 18580)
      • Unicorn-31806.exe (PID: 18592)
      • Unicorn-39974.exe (PID: 18652)
      • Unicorn-14773.exe (PID: 18672)
      • Unicorn-31806.exe (PID: 18600)
      • Unicorn-31806.exe (PID: 18608)
      • Unicorn-65054.exe (PID: 18680)
      • Unicorn-64557.exe (PID: 18724)
      • Unicorn-15548.exe (PID: 18760)
      • Unicorn-53622.exe (PID: 18732)
      • Unicorn-24214.exe (PID: 18768)
      • Unicorn-40550.exe (PID: 18808)
      • Unicorn-15356.exe (PID: 18816)
      • Unicorn-23903.exe (PID: 18712)
      • Unicorn-24022.exe (PID: 18852)
      • Unicorn-15356.exe (PID: 18836)
      • Unicorn-18156.exe (PID: 18864)
      • Unicorn-24022.exe (PID: 18848)
      • Unicorn-58740.exe (PID: 18944)
      • Unicorn-17004.exe (PID: 18952)
      • Unicorn-63206.exe (PID: 18960)
      • Unicorn-14204.exe (PID: 18984)
      • Unicorn-54758.exe (PID: 19016)
      • Unicorn-24676.exe (PID: 19092)
      • Unicorn-13741.exe (PID: 19108)
      • Unicorn-13741.exe (PID: 19112)
      • Unicorn-48981.exe (PID: 19084)
      • Unicorn-39181.exe (PID: 19100)
      • Unicorn-19308.exe (PID: 19124)
      • Unicorn-35645.exe (PID: 19188)
      • Unicorn-32844.exe (PID: 19180)
      • Unicorn-52557.exe (PID: 19216)
      • Unicorn-50287.exe (PID: 19224)
      • Unicorn-17079.exe (PID: 19236)
      • Unicorn-60533.exe (PID: 19304)
      • Unicorn-60533.exe (PID: 19296)
      • Unicorn-49102.exe (PID: 19400)
      • Unicorn-2396.exe (PID: 10816)
      • Unicorn-2396.exe (PID: 10772)
      • Unicorn-18924.exe (PID: 4348)
      • Unicorn-65126.exe (PID: 4708)
      • Unicorn-18924.exe (PID: 19276)
      • Unicorn-24790.exe (PID: 5228)
      • Unicorn-18924.exe (PID: 4656)
      • Unicorn-24790.exe (PID: 2308)
      • Unicorn-18924.exe (PID: 4416)
      • Unicorn-18924.exe (PID: 5504)
      • Unicorn-32460.exe (PID: 4020)
      • Unicorn-18349.exe (PID: 19568)
      • Unicorn-45541.exe (PID: 19560)
      • Unicorn-35261.exe (PID: 3940)
      • Unicorn-12868.exe (PID: 19640)
      • Unicorn-10068.exe (PID: 19648)
      • Unicorn-54604.exe (PID: 19656)
      • Unicorn-29396.exe (PID: 19664)
      • Unicorn-31997.exe (PID: 19696)
      • Unicorn-47374.exe (PID: 19728)
      • Unicorn-55542.exe (PID: 19744)
      • Unicorn-12100.exe (PID: 19836)
      • Unicorn-20460.exe (PID: 19848)
      • Unicorn-41781.exe (PID: 19800)
      • Unicorn-52749.exe (PID: 19776)
      • Unicorn-20460.exe (PID: 19856)
      • Unicorn-59101.exe (PID: 19936)
      • Unicorn-20460.exe (PID: 19864)
      • Unicorn-59223.exe (PID: 19808)
      • Unicorn-42957.exe (PID: 19904)
      • Unicorn-26236.exe (PID: 19988)
      • Unicorn-18644.exe (PID: 19968)
      • Unicorn-23436.exe (PID: 19996)
      • Unicorn-15076.exe (PID: 20020)
      • Unicorn-17876.exe (PID: 20036)
      • Unicorn-14877.exe (PID: 20048)
      • Unicorn-9590.exe (PID: 20104)
      • Unicorn-50199.exe (PID: 20084)
      • Unicorn-8557.exe (PID: 20152)
      • Unicorn-13653.exe (PID: 20172)
      • Unicorn-16228.exe (PID: 20188)
      • Unicorn-35365.exe (PID: 20200)
      • Unicorn-5677.exe (PID: 20324)
      • Unicorn-33062.exe (PID: 20212)
      • Unicorn-19412.exe (PID: 20336)
      • Unicorn-43534.exe (PID: 20376)
      • Unicorn-2884.exe (PID: 20280)
      • Unicorn-42958.exe (PID: 6868)
      • Unicorn-31036.exe (PID: 5064)
      • Unicorn-20757.exe (PID: 7008)
      • Unicorn-10093.exe (PID: 20460)
      • Unicorn-34982.exe (PID: 6996)
      • Unicorn-14892.exe (PID: 11244)
      • Unicorn-23357.exe (PID: 20476)
      • Unicorn-15276.exe (PID: 11604)
      • Unicorn-45149.exe (PID: 2364)
      • Unicorn-12476.exe (PID: 368)
      • Unicorn-27468.exe (PID: 1680)
      • Unicorn-10933.exe (PID: 3408)
      • Unicorn-52927.exe (PID: 5444)
      • Unicorn-23933.exe (PID: 20368)
      • Unicorn-55349.exe (PID: 1808)
      • Unicorn-3918.exe (PID: 532)
      • Unicorn-60710.exe (PID: 2328)
      • Unicorn-50342.exe (PID: 2932)
      • Unicorn-47966.exe (PID: 3628)
      • Unicorn-2029.exe (PID: 3116)
      • Unicorn-61598.exe (PID: 6968)
      • Unicorn-35159.exe (PID: 4584)
      • Unicorn-34967.exe (PID: 12100)
      • Unicorn-9429.exe (PID: 3696)
      • Unicorn-43909.exe (PID: 3740)
      • Unicorn-27380.exe (PID: 4912)
      • Unicorn-52574.exe (PID: 3700)
      • Unicorn-28070.exe (PID: 1120)
      • Unicorn-26221.exe (PID: 3528)
      • Unicorn-51687.exe (PID: 1512)
      • Unicorn-36046.exe (PID: 3868)
      • Unicorn-59662.exe (PID: 2800)
      • Unicorn-19325.exe (PID: 4920)
      • Unicorn-35351.exe (PID: 4844)
      • Unicorn-21245.exe (PID: 4668)
      • Unicorn-53726.exe (PID: 5800)
      • Unicorn-53726.exe (PID: 3608)
      • Unicorn-4525.exe (PID: 4240)
      • Unicorn-4525.exe (PID: 5812)
      • Unicorn-4525.exe (PID: 5240)
      • Unicorn-45558.exe (PID: 3680)
      • Unicorn-4525.exe (PID: 4800)
      • Unicorn-4220.exe (PID: 5008)
      • Unicorn-53726.exe (PID: 6088)
      • Unicorn-4525.exe (PID: 5332)
      • Unicorn-12309.exe (PID: 12012)
      • Unicorn-20940.exe (PID: 5080)
      • Unicorn-14420.exe (PID: 712)
      • Unicorn-28454.exe (PID: 4996)
      • Unicorn-4028.exe (PID: 2524)
      • Unicorn-28454.exe (PID: 1676)
      • Unicorn-20477.exe (PID: 12584)
      • Unicorn-28454.exe (PID: 896)
      • Unicorn-29030.exe (PID: 2072)
      • Unicorn-14116.exe (PID: 20496)
      • Unicorn-37006.exe (PID: 20488)
      • Unicorn-19788.exe (PID: 4216)
      • Unicorn-30452.exe (PID: 20548)
      • Unicorn-30950.exe (PID: 20604)
      • Unicorn-14116.exe (PID: 20524)
      • Unicorn-4525.exe (PID: 4152)
      • Unicorn-23047.exe (PID: 20624)
      • Unicorn-22782.exe (PID: 20516)
      • Unicorn-31023.exe (PID: 20680)
      • Unicorn-29684.exe (PID: 20768)
      • Unicorn-29684.exe (PID: 20760)
      • Unicorn-29684.exe (PID: 20776)
      • Unicorn-45829.exe (PID: 20816)
      • Unicorn-10389.exe (PID: 20928)
      • Unicorn-14110.exe (PID: 20920)
      • Unicorn-6710.exe (PID: 20696)
      • Unicorn-64079.exe (PID: 20724)
      • Unicorn-29684.exe (PID: 20792)
      • Unicorn-45829.exe (PID: 20840)
      • Unicorn-21509.exe (PID: 20952)
      • Unicorn-29684.exe (PID: 20784)
      • Unicorn-38350.exe (PID: 20800)
      • Unicorn-29293.exe (PID: 20832)
      • Unicorn-30215.exe (PID: 20808)
      • Unicorn-38423.exe (PID: 20968)
      • Unicorn-31372.exe (PID: 21016)
      • Unicorn-52903.exe (PID: 21000)
      • Unicorn-22087.exe (PID: 20944)
      • Unicorn-52373.exe (PID: 21008)
      • Unicorn-47743.exe (PID: 20704)
      • Unicorn-52903.exe (PID: 21024)
      • Unicorn-35837.exe (PID: 21064)
      • Unicorn-31372.exe (PID: 21032)
      • Unicorn-30045.exe (PID: 21072)
      • Unicorn-38807.exe (PID: 21084)
      • Unicorn-35645.exe (PID: 21152)
      • Unicorn-25845.exe (PID: 21164)
      • Unicorn-52711.exe (PID: 21172)
      • Unicorn-42973.exe (PID: 21320)
      • Unicorn-44543.exe (PID: 21192)
      • Unicorn-4516.exe (PID: 21444)
      • Unicorn-59118.exe (PID: 21452)
      • Unicorn-61309.exe (PID: 21416)
      • Unicorn-22964.exe (PID: 3104)
      • Unicorn-13181.exe (PID: 21436)
      • Unicorn-22004.exe (PID: 4916)
      • Unicorn-21812.exe (PID: 4988)
      • Unicorn-63759.exe (PID: 6412)
      • Unicorn-55054.exe (PID: 6408)
      • Unicorn-30478.exe (PID: 6536)
      • Unicorn-31630.exe (PID: 6204)
      • Unicorn-63759.exe (PID: 6540)
      • Unicorn-48158.exe (PID: 21492)
      • Unicorn-21812.exe (PID: 6384)
      • Unicorn-35085.exe (PID: 6812)
      • Unicorn-15749.exe (PID: 6784)
      • Unicorn-54214.exe (PID: 11652)
      • Unicorn-43253.exe (PID: 13124)
      • Unicorn-32284.exe (PID: 13176)
      • Unicorn-63229.exe (PID: 6424)
      • Unicorn-32668.exe (PID: 6832)
      • Unicorn-36172.exe (PID: 13568)
      • Unicorn-57173.exe (PID: 6836)
      • Unicorn-57173.exe (PID: 2384)
      • Unicorn-57173.exe (PID: 13748)
      • Unicorn-32668.exe (PID: 5556)
      • Unicorn-19132.exe (PID: 13952)
      • Unicorn-65334.exe (PID: 7052)
      • Unicorn-56213.exe (PID: 7172)
      • Unicorn-48045.exe (PID: 7204)
      • Unicorn-14981.exe (PID: 21592)
      • Unicorn-31516.exe (PID: 21568)
      • Unicorn-40182.exe (PID: 21576)
      • Unicorn-14981.exe (PID: 21604)
      • Unicorn-46597.exe (PID: 21668)
      • Unicorn-16061.exe (PID: 21676)
      • Unicorn-43694.exe (PID: 21708)
      • Unicorn-41215.exe (PID: 7120)
      • Unicorn-64566.exe (PID: 21724)
      • Unicorn-32645.exe (PID: 21748)
      • Unicorn-62766.exe (PID: 7072)
      • Unicorn-212.exe (PID: 21764)
      • Unicorn-63479.exe (PID: 21772)
      • Unicorn-31516.exe (PID: 21584)
      • Unicorn-57703.exe (PID: 4312)
      • Unicorn-57173.exe (PID: 4944)
      • Unicorn-41053.exe (PID: 21780)
      • Unicorn-55351.exe (PID: 21844)
      • Unicorn-24268.exe (PID: 21860)
      • Unicorn-53934.exe (PID: 21876)
      • Unicorn-18573.exe (PID: 21932)
      • Unicorn-38174.exe (PID: 21908)
      • Unicorn-37484.exe (PID: 22020)
      • Unicorn-38174.exe (PID: 21924)
      • Unicorn-12973.exe (PID: 21940)
      • Unicorn-46607.exe (PID: 22036)
      • Unicorn-22300.exe (PID: 22100)
      • Unicorn-30966.exe (PID: 22092)
      • Unicorn-6461.exe (PID: 22132)
      • Unicorn-63863.exe (PID: 22116)
      • Unicorn-63333.exe (PID: 22172)
      • Unicorn-5765.exe (PID: 22108)
      • Unicorn-6461.exe (PID: 22164)
      • Unicorn-6461.exe (PID: 22140)
      • Unicorn-65334.exe (PID: 4196)
      • Unicorn-7926.exe (PID: 21660)
      • Unicorn-28733.exe (PID: 21868)
      • Unicorn-6461.exe (PID: 22124)
      • Unicorn-31044.exe (PID: 22188)
      • Unicorn-6461.exe (PID: 22156)
      • Unicorn-24215.exe (PID: 22200)
      • Unicorn-17125.exe (PID: 22356)
      • Unicorn-6461.exe (PID: 22228)
      • Unicorn-53934.exe (PID: 21884)
      • Unicorn-39710.exe (PID: 22180)
      • Unicorn-38174.exe (PID: 21916)
      • Unicorn-43741.exe (PID: 22364)
      • Unicorn-41438.exe (PID: 22384)
      • Unicorn-11068.exe (PID: 22428)
      • Unicorn-16237.exe (PID: 22400)
      • Unicorn-52804.exe (PID: 22408)
      • Unicorn-11644.exe (PID: 22436)
      • Unicorn-40862.exe (PID: 22512)
      • Unicorn-40862.exe (PID: 7228)
      • Unicorn-17509.exe (PID: 22444)
      • Unicorn-57846.exe (PID: 22452)
      • Unicorn-7997.exe (PID: 7496)
      • Unicorn-40862.exe (PID: 9020)
      • Unicorn-51022.exe (PID: 7640)
      • Unicorn-10685.exe (PID: 7664)
      • Unicorn-8838.exe (PID: 7600)
      • Unicorn-1590.exe (PID: 7820)
      • Unicorn-51022.exe (PID: 7720)
      • Unicorn-6461.exe (PID: 22148)
      • Unicorn-63806.exe (PID: 22372)
      • Unicorn-6269.exe (PID: 7868)
      • Unicorn-13116.exe (PID: 15040)
      • Unicorn-26548.exe (PID: 7404)
      • Unicorn-2517.exe (PID: 7748)
      • Unicorn-32798.exe (PID: 8044)
      • Unicorn-10404.exe (PID: 8208)
      • Unicorn-125.exe (PID: 8120)
      • Unicorn-58837.exe (PID: 8408)
      • Unicorn-23556.exe (PID: 7456)
      • Unicorn-7597.exe (PID: 8080)
      • Unicorn-33836.exe (PID: 8668)
      • Unicorn-36637.exe (PID: 8580)
      • Unicorn-2014.exe (PID: 8068)
      • Unicorn-17509.exe (PID: 22464)
      • Unicorn-8381.exe (PID: 22520)
      • Unicorn-40862.exe (PID: 8864)
      • Unicorn-7790.exe (PID: 8688)
      • Unicorn-701.exe (PID: 22540)
      • Unicorn-57189.exe (PID: 16192)
      • Unicorn-49597.exe (PID: 16380)
      • Unicorn-32869.exe (PID: 22556)
      • Unicorn-33836.exe (PID: 8684)
      • Unicorn-58262.exe (PID: 8856)
      • Unicorn-49405.exe (PID: 22548)
      • Unicorn-18453.exe (PID: 22588)
      • Unicorn-24053.exe (PID: 22596)
      • Unicorn-16919.exe (PID: 22652)
      • Unicorn-57302.exe (PID: 8220)
      • Unicorn-3230.exe (PID: 22668)
      • Unicorn-1349.exe (PID: 22684)
      • Unicorn-56037.exe (PID: 8376)
      • Unicorn-35678.exe (PID: 22660)
      • Unicorn-10630.exe (PID: 22756)
      • Unicorn-31837.exe (PID: 22748)
      • Unicorn-3078.exe (PID: 22720)
      • Unicorn-45381.exe (PID: 22768)
      • Unicorn-9061.exe (PID: 22816)
      • Unicorn-33565.exe (PID: 22824)
      • Unicorn-12590.exe (PID: 22860)
      • Unicorn-45647.exe (PID: 22884)
      • Unicorn-58070.exe (PID: 22580)
      • Unicorn-19605.exe (PID: 22908)
      • Unicorn-36140.exe (PID: 22916)
      • Unicorn-44687.exe (PID: 22896)
      • Unicorn-3468.exe (PID: 22940)
      • Unicorn-4038.exe (PID: 22996)
      • Unicorn-18222.exe (PID: 22708)
      • Unicorn-9908.exe (PID: 22792)
      • Unicorn-16637.exe (PID: 23020)
      • Unicorn-10198.exe (PID: 23044)
      • Unicorn-33172.exe (PID: 23012)
      • Unicorn-41871.exe (PID: 23132)
      • Unicorn-17174.exe (PID: 23068)
      • Unicorn-41917.exe (PID: 23184)
      • Unicorn-2414.exe (PID: 23092)
      • Unicorn-30405.exe (PID: 23124)
      • Unicorn-52389.exe (PID: 23320)
      • Unicorn-52389.exe (PID: 23344)
      • Unicorn-30981.exe (PID: 23192)
      • Unicorn-52389.exe (PID: 23328)
      • Unicorn-52389.exe (PID: 23384)
      • Unicorn-52389.exe (PID: 23360)
      • Unicorn-3188.exe (PID: 23392)
      • Unicorn-52389.exe (PID: 23368)
      • Unicorn-3188.exe (PID: 23400)
      • Unicorn-35853.exe (PID: 23336)
      • Unicorn-19903.exe (PID: 23376)
      • Unicorn-52389.exe (PID: 23352)
      • Unicorn-10965.exe (PID: 23520)
      • Unicorn-37012.exe (PID: 9008)
      • Unicorn-37012.exe (PID: 8992)
      • Unicorn-20477.exe (PID: 9032)
      • Unicorn-36813.exe (PID: 17384)
      • Unicorn-37396.exe (PID: 9192)
      • Unicorn-37396.exe (PID: 17536)
      • Unicorn-20861.exe (PID: 23556)
      • Unicorn-20861.exe (PID: 23572)
      • Unicorn-20861.exe (PID: 23564)
      • Unicorn-34821.exe (PID: 23596)
      • Unicorn-37012.exe (PID: 9124)
      • Unicorn-26269.exe (PID: 23744)
      • Unicorn-12700.exe (PID: 23728)
      • Unicorn-61702.exe (PID: 23680)
      • Unicorn-57236.exe (PID: 23736)
      • Unicorn-54263.exe (PID: 23816)
      • Unicorn-26269.exe (PID: 23752)
      • Unicorn-56533.exe (PID: 23808)
      • Unicorn-59789.exe (PID: 22928)
      • Unicorn-29029.exe (PID: 23832)
      • Unicorn-61702.exe (PID: 23780)
      • Unicorn-61702.exe (PID: 23704)
      • Unicorn-10965.exe (PID: 23512)
      • Unicorn-61702.exe (PID: 23772)
      • Unicorn-42773.exe (PID: 23944)
      • Unicorn-42797.exe (PID: 23856)
      • Unicorn-61702.exe (PID: 23688)
      • Unicorn-1765.exe (PID: 23712)
      • Unicorn-26461.exe (PID: 9248)
      • Unicorn-37396.exe (PID: 5244)
      • Unicorn-53349.exe (PID: 9092)
      • Unicorn-4102.exe (PID: 23936)
      • Unicorn-42773.exe (PID: 24036)
      • Unicorn-52574.exe (PID: 24028)
      • Unicorn-31021.exe (PID: 24048)
      • Unicorn-28415.exe (PID: 24132)
      • Unicorn-19238.exe (PID: 24056)
      • Unicorn-50006.exe (PID: 23956)
      • Unicorn-6884.exe (PID: 24068)
      • Unicorn-16949.exe (PID: 24100)
      • Unicorn-6884.exe (PID: 24120)
      • Unicorn-42797.exe (PID: 23800)
      • Unicorn-29037.exe (PID: 24444)
      • Unicorn-32156.exe (PID: 24108)
      • Unicorn-53687.exe (PID: 24216)
      • Unicorn-27117.exe (PID: 24420)
      • Unicorn-45678.exe (PID: 9056)
      • Unicorn-57301.exe (PID: 24388)
      • Unicorn-32156.exe (PID: 24200)
      • Unicorn-61702.exe (PID: 23764)
      • Unicorn-20300.exe (PID: 24500)
      • Unicorn-3765.exe (PID: 24524)
      • Unicorn-20300.exe (PID: 24508)
      • Unicorn-39437.exe (PID: 24492)
      • Unicorn-53357.exe (PID: 24572)
      • Unicorn-14046.exe (PID: 24564)
    • Reads the computer name

      • 62a986c16cdede724c9742f1c825f9e1f0ae5cbbe023dff477f3d6bf0b9e6966.exe (PID: 6480)
      • Unicorn-62431.exe (PID: 6576)
      • Unicorn-48311.exe (PID: 6600)
      • Unicorn-44974.exe (PID: 6620)
      • Unicorn-24679.exe (PID: 6644)
      • Unicorn-49375.exe (PID: 6660)
      • Unicorn-29509.exe (PID: 6668)
      • Unicorn-59581.exe (PID: 6692)
      • Unicorn-16437.exe (PID: 6880)
      • Unicorn-3822.exe (PID: 6860)
      • Unicorn-61575.exe (PID: 6912)
      • Unicorn-61575.exe (PID: 6896)
      • Unicorn-61575.exe (PID: 6904)
      • Unicorn-47277.exe (PID: 6920)
      • Unicorn-58046.exe (PID: 6960)
      • Unicorn-12109.exe (PID: 6952)
      • Unicorn-17309.exe (PID: 6056)
      • Unicorn-45727.exe (PID: 7160)
      • Unicorn-39287.exe (PID: 6100)
      • Unicorn-57853.exe (PID: 3712)
      • Unicorn-56007.exe (PID: 4012)
      • Unicorn-56007.exe (PID: 5196)
      • Unicorn-39479.exe (PID: 1412)
      • Unicorn-56007.exe (PID: 1272)
      • Unicorn-56007.exe (PID: 1608)
      • Unicorn-56007.exe (PID: 4724)
      • Unicorn-13252.exe (PID: 1720)
      • Unicorn-44310.exe (PID: 2736)
      • Unicorn-21917.exe (PID: 372)
      • Unicorn-16052.exe (PID: 6012)
      • Unicorn-2317.exe (PID: 4704)
      • Unicorn-2317.exe (PID: 1944)
      • Unicorn-47943.exe (PID: 5032)
      • Unicorn-31607.exe (PID: 380)
      • Unicorn-33644.exe (PID: 72)
      • Unicorn-36437.exe (PID: 4108)
      • Unicorn-23823.exe (PID: 5092)
      • Unicorn-48254.exe (PID: 428)
      • Unicorn-32951.exe (PID: 1100)
      • Unicorn-31991.exe (PID: 308)
      • Unicorn-28653.exe (PID: 4852)
      • Unicorn-37781.exe (PID: 1016)
      • Unicorn-58031.exe (PID: 4260)
      • Unicorn-41695.exe (PID: 6216)
      • Unicorn-58031.exe (PID: 1228)
      • Unicorn-15847.exe (PID: 2116)
      • Unicorn-15847.exe (PID: 5944)
      • Unicorn-12317.exe (PID: 6284)
      • Unicorn-32183.exe (PID: 6464)
      • Unicorn-32183.exe (PID: 6472)
      • Unicorn-32183.exe (PID: 6448)
      • Unicorn-37013.exe (PID: 6404)
      • Unicorn-24015.exe (PID: 6376)
      • Unicorn-32183.exe (PID: 6444)
      • Unicorn-7989.exe (PID: 780)
      • Unicorn-37013.exe (PID: 6428)
      • Unicorn-47949.exe (PID: 6400)
      • Unicorn-48325.exe (PID: 6756)
      • Unicorn-2124.exe (PID: 6280)
      • Unicorn-12317.exe (PID: 6296)
      • Unicorn-32183.exe (PID: 6456)
      • Unicorn-12317.exe (PID: 6268)
      • Unicorn-2124.exe (PID: 6276)
      • Unicorn-24311.exe (PID: 6820)
      • Unicorn-4253.exe (PID: 6828)
      • Unicorn-39687.exe (PID: 5656)
      • Unicorn-500.exe (PID: 1964)
      • Unicorn-40071.exe (PID: 4480)
      • Unicorn-23543.exe (PID: 6508)
      • Unicorn-23351.exe (PID: 7044)
      • Unicorn-15182.exe (PID: 4524)
      • Unicorn-6749.exe (PID: 4428)
      • Unicorn-12037.exe (PID: 5612)
      • Unicorn-15182.exe (PID: 5752)
      • Unicorn-11845.exe (PID: 7128)
      • Unicorn-28181.exe (PID: 7100)
      • Unicorn-41917.exe (PID: 7068)
      • Unicorn-39117.exe (PID: 7096)
      • Unicorn-23351.exe (PID: 7036)
      • Unicorn-4829.exe (PID: 5528)
      • Unicorn-32863.exe (PID: 3784)
      • Unicorn-50351.exe (PID: 3872)
      • Unicorn-43645.exe (PID: 7196)
      • Unicorn-309.exe (PID: 7176)
      • Unicorn-16055.exe (PID: 7216)
      • Unicorn-5125.exe (PID: 7288)
      • Unicorn-24415.exe (PID: 7232)
      • Unicorn-54134.exe (PID: 7272)
      • Unicorn-53942.exe (PID: 7308)
      • Unicorn-57663.exe (PID: 7252)
      • Unicorn-7118.exe (PID: 7348)
      • Unicorn-56319.exe (PID: 7328)
      • Unicorn-12525.exe (PID: 7368)
      • Unicorn-4357.exe (PID: 7380)
      • Unicorn-50647.exe (PID: 7444)
      • Unicorn-50455.exe (PID: 7540)
      • Unicorn-58623.exe (PID: 7476)
      • Unicorn-50455.exe (PID: 7532)
      • Unicorn-58815.exe (PID: 7408)
      • Unicorn-1830.exe (PID: 7584)
      • Unicorn-58623.exe (PID: 7468)
      • Unicorn-58815.exe (PID: 7416)
      • Unicorn-18167.exe (PID: 7628)
      • Unicorn-22805.exe (PID: 7764)
      • Unicorn-55478.exe (PID: 7704)
      • Unicorn-42287.exe (PID: 7560)
      • Unicorn-1830.exe (PID: 7580)
      • Unicorn-34119.exe (PID: 7508)
      • Unicorn-50455.exe (PID: 7548)
      • Unicorn-36733.exe (PID: 7656)
      • Unicorn-41446.exe (PID: 7892)
      • Unicorn-22805.exe (PID: 7772)
      • Unicorn-22805.exe (PID: 7780)
      • Unicorn-20204.exe (PID: 7736)
      • Unicorn-22997.exe (PID: 7648)
      • Unicorn-60085.exe (PID: 7804)
      • Unicorn-6469.exe (PID: 7728)
      • Unicorn-35581.exe (PID: 7908)
      • Unicorn-24413.exe (PID: 7876)
      • Unicorn-65453.exe (PID: 7844)
      • Unicorn-9422.exe (PID: 7500)
      • Unicorn-49614.exe (PID: 7884)
      • Unicorn-2716.exe (PID: 7836)
      • Unicorn-20663.exe (PID: 7964)
      • Unicorn-17709.exe (PID: 8000)
      • Unicorn-54103.exe (PID: 7980)
      • Unicorn-30484.exe (PID: 8016)
      • Unicorn-28447.exe (PID: 8024)
      • Unicorn-17133.exe (PID: 8056)
      • Unicorn-53143.exe (PID: 8100)
      • Unicorn-44591.exe (PID: 8048)
      • Unicorn-34799.exe (PID: 8176)
      • Unicorn-26631.exe (PID: 8152)
      • Unicorn-1934.exe (PID: 8132)
      • Unicorn-34799.exe (PID: 8168)
      • Unicorn-52878.exe (PID: 8084)
      • Unicorn-53143.exe (PID: 8092)
      • Unicorn-63942.exe (PID: 6148)
      • Unicorn-22909.exe (PID: 8196)
      • Unicorn-10486.exe (PID: 8280)
      • Unicorn-64518.exe (PID: 8328)
      • Unicorn-31653.exe (PID: 8252)
      • Unicorn-34607.exe (PID: 8224)
      • Unicorn-27015.exe (PID: 8304)
      • Unicorn-51519.exe (PID: 8272)
      • Unicorn-52405.exe (PID: 8368)
      • Unicorn-404.exe (PID: 8400)
      • Unicorn-8373.exe (PID: 8448)
      • Unicorn-55006.exe (PID: 8384)
      • Unicorn-55006.exe (PID: 8392)
      • Unicorn-51519.exe (PID: 8264)
      • Unicorn-3588.exe (PID: 8484)
      • Unicorn-59687.exe (PID: 8236)
      • Unicorn-39053.exe (PID: 8468)
      • Unicorn-61277.exe (PID: 8436)
      • Unicorn-1093.exe (PID: 8512)
      • Unicorn-6189.exe (PID: 8524)
      • Unicorn-11446.exe (PID: 8548)
      • Unicorn-44311.exe (PID: 8572)
      • Unicorn-43735.exe (PID: 8608)
      • Unicorn-35567.exe (PID: 8616)
      • Unicorn-40589.exe (PID: 8720)
      • Unicorn-53749.exe (PID: 8624)
      • Unicorn-20772.exe (PID: 8756)
      • Unicorn-11062.exe (PID: 8740)
      • Unicorn-26173.exe (PID: 8776)
      • Unicorn-54134.exe (PID: 8848)
      • Unicorn-30590.exe (PID: 8900)
      • Unicorn-54599.exe (PID: 9000)
      • Unicorn-21735.exe (PID: 8984)
      • Unicorn-46815.exe (PID: 9024)
      • Unicorn-21159.exe (PID: 9040)
      • Unicorn-29327.exe (PID: 9060)
      • Unicorn-13374.exe (PID: 9080)
      • Unicorn-34349.exe (PID: 9104)
      • Unicorn-34349.exe (PID: 9096)
      • Unicorn-20317.exe (PID: 9148)
      • Unicorn-50581.exe (PID: 9164)
      • Unicorn-33860.exe (PID: 9184)
      • Unicorn-57597.exe (PID: 9208)
      • Unicorn-22887.exe (PID: 9236)
      • Unicorn-58055.exe (PID: 9420)
      • Unicorn-28869.exe (PID: 9504)
      • Unicorn-61926.exe (PID: 9532)
      • Unicorn-56903.exe (PID: 9492)
      • Unicorn-8086.exe (PID: 9548)
      • Unicorn-5886.exe (PID: 9588)
      • Unicorn-332.exe (PID: 9604)
      • Unicorn-30775.exe (PID: 9620)
      • Unicorn-33004.exe (PID: 9636)
      • Unicorn-21455.exe (PID: 9700)
      • Unicorn-62679.exe (PID: 9656)
      • Unicorn-62679.exe (PID: 9668)
      • Unicorn-62679.exe (PID: 9652)
      • Unicorn-18693.exe (PID: 9792)
      • Unicorn-37983.exe (PID: 9716)
      • Unicorn-30007.exe (PID: 9860)
      • Unicorn-13862.exe (PID: 9732)
      • Unicorn-22031.exe (PID: 9764)
      • Unicorn-13670.exe (PID: 9828)
      • Unicorn-22031.exe (PID: 9756)
      • Unicorn-22031.exe (PID: 9748)
      • Unicorn-38559.exe (PID: 9800)
      • Unicorn-53286.exe (PID: 9880)
      • Unicorn-7422.exe (PID: 9912)
      • Unicorn-56815.exe (PID: 9896)
      • Unicorn-40287.exe (PID: 9932)
      • Unicorn-32503.exe (PID: 9956)
      • Unicorn-24335.exe (PID: 9980)
      • Unicorn-32503.exe (PID: 9948)
      • Unicorn-61646.exe (PID: 9996)
      • Unicorn-32311.exe (PID: 10016)
      • Unicorn-65175.exe (PID: 10032)
      • Unicorn-44350.exe (PID: 10096)
      • Unicorn-57007.exe (PID: 10052)
      • Unicorn-14822.exe (PID: 10168)
      • Unicorn-19845.exe (PID: 10088)
      • Unicorn-19845.exe (PID: 10080)
      • Unicorn-56047.exe (PID: 10136)
      • Unicorn-39711.exe (PID: 10104)
      • Unicorn-64215.exe (PID: 10124)
      • Unicorn-15206.exe (PID: 9300)
      • Unicorn-52710.exe (PID: 9312)
      • Unicorn-36373.exe (PID: 10256)
      • Unicorn-20229.exe (PID: 6492)
      • Unicorn-52902.exe (PID: 10216)
      • Unicorn-62990.exe (PID: 10276)
      • Unicorn-17436.exe (PID: 10232)
      • Unicorn-27332.exe (PID: 10372)
      • Unicorn-20229.exe (PID: 10248)
      • Unicorn-44734.exe (PID: 9280)
      • Unicorn-64334.exe (PID: 9316)
      • Unicorn-27332.exe (PID: 10376)
      • Unicorn-33774.exe (PID: 10452)
      • Unicorn-19740.exe (PID: 10484)
      • Unicorn-8580.exe (PID: 10532)
      • Unicorn-55206.exe (PID: 10436)
      • Unicorn-24454.exe (PID: 10608)
      • Unicorn-1101.exe (PID: 10516)
      • Unicorn-24916.exe (PID: 10552)
      • Unicorn-19740.exe (PID: 10476)
      • Unicorn-32117.exe (PID: 10648)
      • Unicorn-8117.exe (PID: 10600)
      • Unicorn-65519.exe (PID: 10584)
      • Unicorn-2252.exe (PID: 10592)
    • Reads the software policy settings

      • WerFault.exe (PID: 9360)
    • Checks proxy server information

      • WerFault.exe (PID: 9360)
    • Creates files or folders in the user directory

      • WerFault.exe (PID: 9360)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable (generic) (52.9)
.exe | Generic Win/DOS Executable (23.5)
.exe | DOS Executable Generic (23.5)

EXIF

EXE

OriginalFileName: Kawaii-Unicorn.exe
InternalName: Kawaii-Unicorn
ProductVersion: 1
FileVersion: 1
ProductName: Kawa噩i-Unicorn
CompanyName: aaaa
CharacterSet: Unicode
LanguageCode: Chinese (Simplified)
FileSubtype: -
ObjectFileType: Executable application
FileOS: Win32
FileFlags: (none)
FileFlagsMask: 0x0000
ProductVersionNumber: 1.0.0.0
FileVersionNumber: 1.0.0.0
Subsystem: Windows GUI
SubsystemVersion: 4
ImageVersion: 1
OSVersion: 4
EntryPoint: 0x13b0
UninitializedDataSize: -
InitializedDataSize: 8192
CodeSize: 176128
LinkerVersion: 6
PEType: PE32
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
TimeStamp: 2019:04:26 10:28:09+00:00
MachineType: Intel 386 or later, and compatibles
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
1 184
Monitored processes
1 066
Malicious processes
215
Suspicious processes
24

Behavior graph

Click at the process to see the details
start powershell.exe no specs conhost.exe no specs 62a986c16cdede724c9742f1c825f9e1f0ae5cbbe023dff477f3d6bf0b9e6966.exe unicorn-62431.exe unicorn-48311.exe unicorn-44974.exe unicorn-24679.exe unicorn-49375.exe unicorn-29509.exe unicorn-59581.exe unicorn-3822.exe unicorn-16437.exe unicorn-61575.exe unicorn-61575.exe unicorn-61575.exe unicorn-47277.exe unicorn-12109.exe unicorn-58046.exe unicorn-45727.exe unicorn-17309.exe unicorn-39287.exe unicorn-57853.exe unicorn-39479.exe unicorn-56007.exe unicorn-56007.exe unicorn-56007.exe unicorn-56007.exe unicorn-56007.exe unicorn-44310.exe unicorn-21917.exe unicorn-16052.exe unicorn-2317.exe unicorn-2317.exe unicorn-13252.exe unicorn-31607.exe unicorn-36437.exe unicorn-47943.exe unicorn-33644.exe unicorn-31991.exe unicorn-23823.exe unicorn-48254.exe unicorn-28653.exe unicorn-32951.exe unicorn-37781.exe unicorn-41695.exe unicorn-58031.exe unicorn-58031.exe unicorn-15847.exe unicorn-15847.exe unicorn-12317.exe unicorn-12317.exe unicorn-12317.exe unicorn-32183.exe unicorn-32183.exe unicorn-32183.exe unicorn-32183.exe unicorn-32183.exe unicorn-24015.exe unicorn-47949.exe unicorn-37013.exe unicorn-37013.exe unicorn-2124.exe unicorn-2124.exe unicorn-48325.exe unicorn-7989.exe unicorn-24311.exe unicorn-4253.exe unicorn-39687.exe unicorn-500.exe unicorn-23543.exe unicorn-40071.exe unicorn-12037.exe unicorn-6749.exe unicorn-23351.exe unicorn-23351.exe unicorn-15182.exe unicorn-15182.exe unicorn-11845.exe unicorn-39117.exe unicorn-41917.exe unicorn-28181.exe unicorn-50351.exe unicorn-4829.exe unicorn-32863.exe unicorn-309.exe unicorn-43645.exe unicorn-16055.exe unicorn-24415.exe unicorn-57663.exe unicorn-54134.exe unicorn-5125.exe unicorn-53942.exe unicorn-56319.exe unicorn-7118.exe unicorn-12525.exe unicorn-4357.exe unicorn-58815.exe unicorn-58815.exe unicorn-50647.exe unicorn-58623.exe unicorn-58623.exe unicorn-9422.exe unicorn-34119.exe unicorn-50455.exe unicorn-50455.exe unicorn-50455.exe unicorn-42287.exe unicorn-1830.exe unicorn-1830.exe unicorn-18167.exe unicorn-36733.exe unicorn-22997.exe unicorn-55478.exe unicorn-6469.exe no specs unicorn-20204.exe unicorn-22805.exe unicorn-22805.exe unicorn-22805.exe unicorn-60085.exe unicorn-65453.exe unicorn-2716.exe unicorn-24413.exe unicorn-49614.exe unicorn-33311.exe no specs unicorn-41446.exe unicorn-35581.exe unicorn-20663.exe unicorn-54103.exe unicorn-17709.exe unicorn-30484.exe unicorn-28447.exe unicorn-44591.exe unicorn-17133.exe unicorn-52878.exe unicorn-53143.exe unicorn-53143.exe unicorn-1934.exe unicorn-26631.exe unicorn-34799.exe unicorn-34799.exe unicorn-63942.exe unicorn-22909.exe unicorn-34607.exe unicorn-59687.exe unicorn-31653.exe unicorn-51519.exe unicorn-51519.exe unicorn-10486.exe unicorn-27015.exe unicorn-64518.exe unicorn-52405.exe unicorn-55006.exe unicorn-55006.exe unicorn-404.exe unicorn-61277.exe unicorn-8373.exe unicorn-39053.exe unicorn-3588.exe unicorn-1093.exe unicorn-6189.exe unicorn-11446.exe unicorn-44311.exe unicorn-43735.exe unicorn-35567.exe unicorn-53749.exe no specs unicorn-40589.exe unicorn-11062.exe unicorn-20772.exe unicorn-26173.exe unicorn-54134.exe unicorn-30590.exe unicorn-21735.exe unicorn-54599.exe unicorn-46815.exe unicorn-21159.exe unicorn-29327.exe unicorn-13374.exe unicorn-34349.exe unicorn-34349.exe unicorn-20317.exe unicorn-50581.exe unicorn-33860.exe unicorn-57597.exe unicorn-22887.exe werfault.exe unicorn-58055.exe unicorn-56903.exe unicorn-28869.exe unicorn-61926.exe unicorn-8086.exe unicorn-5886.exe unicorn-332.exe unicorn-30775.exe unicorn-33004.exe unicorn-62679.exe unicorn-62679.exe unicorn-62679.exe unicorn-21455.exe unicorn-37983.exe unicorn-13862.exe unicorn-22031.exe unicorn-22031.exe unicorn-22031.exe unicorn-38559.exe unicorn-18693.exe unicorn-13670.exe unicorn-30007.exe unicorn-53286.exe unicorn-56815.exe unicorn-7422.exe no specs unicorn-40287.exe unicorn-32503.exe unicorn-32503.exe unicorn-24335.exe unicorn-61646.exe unicorn-32311.exe unicorn-65175.exe unicorn-57007.exe unicorn-19845.exe unicorn-19845.exe unicorn-44350.exe unicorn-39711.exe unicorn-64215.exe unicorn-56047.exe unicorn-14822.exe unicorn-52902.exe unicorn-17436.exe unicorn-64334.exe unicorn-44734.exe unicorn-52710.exe unicorn-15206.exe unicorn-20229.exe unicorn-20229.exe unicorn-36373.exe unicorn-62990.exe unicorn-27332.exe unicorn-27332.exe unicorn-55206.exe unicorn-33774.exe unicorn-19740.exe unicorn-19740.exe unicorn-1101.exe unicorn-8580.exe unicorn-24916.exe unicorn-65519.exe unicorn-2252.exe unicorn-8117.exe unicorn-24454.exe unicorn-32117.exe unicorn-58927.exe no specs unicorn-39637.exe no specs unicorn-32799.exe no specs unicorn-16655.exe no specs unicorn-15502.exe no specs unicorn-15887.exe no specs unicorn-20525.exe no specs unicorn-3508.exe no specs unicorn-42046.exe no specs unicorn-22445.exe no specs unicorn-6301.exe no specs unicorn-20036.exe no specs unicorn-49141.exe no specs unicorn-38205.exe no specs unicorn-38205.exe no specs unicorn-46182.exe no specs unicorn-5149.exe no specs unicorn-38013.exe no specs unicorn-38013.exe no specs unicorn-19460.exe no specs unicorn-27820.exe no specs unicorn-14085.exe no specs unicorn-14085.exe no specs unicorn-33951.exe no specs unicorn-52325.exe no specs unicorn-38589.exe no specs unicorn-38589.exe no specs unicorn-46566.exe no specs unicorn-11100.exe no specs unicorn-50095.exe no specs unicorn-51942.exe no specs unicorn-26741.exe no specs unicorn-46077.exe no specs unicorn-49997.exe no specs unicorn-54629.exe no specs unicorn-52326.exe no specs unicorn-52359.exe no specs unicorn-11366.exe no specs unicorn-19535.exe no specs unicorn-20612.exe no specs unicorn-2238.exe no specs unicorn-17812.exe no specs unicorn-26743.exe no specs unicorn-35103.exe no specs unicorn-35103.exe no specs unicorn-26551.exe no specs unicorn-23789.exe no specs unicorn-37407.exe no specs unicorn-37407.exe no specs unicorn-28855.exe no specs unicorn-20687.exe no specs unicorn-20687.exe no specs unicorn-20687.exe no specs unicorn-45383.exe no specs unicorn-53286.exe no specs unicorn-41853.exe no specs unicorn-33685.exe no specs unicorn-61719.exe no specs unicorn-4926.exe no specs unicorn-31660.exe no specs unicorn-37791.exe no specs unicorn-49446.exe no specs unicorn-19149.exe no specs unicorn-19919.exe no specs unicorn-54821.exe no specs unicorn-60951.exe no specs unicorn-12134.exe no specs unicorn-50397.exe no specs unicorn-26655.exe no specs unicorn-1766.exe no specs unicorn-42799.exe no specs unicorn-10510.exe no specs unicorn-43375.exe no specs unicorn-9358.exe no specs unicorn-25695.exe no specs unicorn-19948.exe no specs unicorn-34247.exe no specs unicorn-60671.exe no specs unicorn-3613.exe no specs unicorn-43957.exe no specs unicorn-4956.exe no specs unicorn-52119.exe no specs unicorn-62207.exe no specs unicorn-54039.exe no specs unicorn-42149.exe no specs unicorn-17645.exe no specs unicorn-52046.exe no specs unicorn-43878.exe no specs unicorn-11205.exe no specs unicorn-23287.exe no specs unicorn-52430.exe no specs unicorn-39623.exe no specs unicorn-32532.exe no specs unicorn-38663.exe no specs unicorn-48869.exe no specs unicorn-32724.exe no specs unicorn-38590.exe no specs unicorn-38855.exe no specs unicorn-52918.exe no specs unicorn-12269.exe no specs unicorn-40717.exe no specs unicorn-59358.exe no specs unicorn-65309.exe no specs unicorn-51574.exe no specs unicorn-64157.exe no specs unicorn-17749.exe no specs unicorn-42637.exe no specs unicorn-37734.exe no specs unicorn-36389.exe no specs unicorn-14957.exe no specs unicorn-28029.exe no specs unicorn-19861.exe no specs unicorn-19861.exe no specs unicorn-36773.exe no specs unicorn-12269.exe no specs unicorn-44750.exe no specs unicorn-61086.exe no specs unicorn-52918.exe no specs unicorn-52918.exe no specs unicorn-42149.exe no specs unicorn-28413.exe no specs unicorn-35621.exe no specs unicorn-8132.exe no specs unicorn-19093.exe no specs unicorn-44174.exe no specs unicorn-35813.exe no specs unicorn-47703.exe no specs unicorn-52150.exe no specs unicorn-52150.exe no specs unicorn-3141.exe no specs unicorn-51661.exe no specs unicorn-13421.exe no specs unicorn-29757.exe no specs unicorn-62238.exe no specs unicorn-35133.exe no specs unicorn-35133.exe no specs unicorn-35133.exe no specs unicorn-21397.exe no specs unicorn-62814.exe no specs unicorn-58869.exe no specs unicorn-36965.exe no specs unicorn-50701.exe no specs unicorn-50701.exe no specs unicorn-50701.exe no specs unicorn-50701.exe no specs unicorn-50701.exe no specs unicorn-50701.exe no specs unicorn-56566.exe no specs unicorn-47901.exe no specs unicorn-7941.exe no specs unicorn-42917.exe no specs unicorn-48782.exe no specs unicorn-40614.exe no specs unicorn-31948.exe no specs unicorn-46277.exe no specs unicorn-46077.exe no specs unicorn-13405.exe no specs unicorn-46661.exe no specs unicorn-55326.exe no specs unicorn-25660.exe no specs unicorn-46661.exe no specs unicorn-39023.exe no specs unicorn-61766.exe no specs unicorn-58013.exe no specs unicorn-25340.exe no specs unicorn-52830.exe no specs unicorn-30245.exe no specs unicorn-38797.exe no specs unicorn-36005.exe no specs unicorn-27836.exe no specs unicorn-45814.exe no specs unicorn-26876.exe no specs unicorn-24382.exe no specs unicorn-16100.exe no specs unicorn-16100.exe no specs unicorn-18900.exe no specs unicorn-27143.exe no specs unicorn-29180.exe no specs unicorn-35046.exe no specs unicorn-35311.exe no specs unicorn-29564.exe no specs unicorn-29564.exe no specs unicorn-29564.exe no specs unicorn-10229.exe no specs unicorn-29564.exe no specs unicorn-4676.exe no specs unicorn-4676.exe no specs unicorn-60007.exe no specs unicorn-18901.exe no specs unicorn-50614.exe no specs unicorn-44749.exe no specs unicorn-20244.exe no specs unicorn-34278.exe no specs unicorn-34278.exe no specs unicorn-14677.exe no specs unicorn-28412.exe no specs unicorn-52725.exe no specs unicorn-31397.exe no specs unicorn-18358.exe no specs unicorn-26494.exe no specs unicorn-17828.exe no specs unicorn-42693.exe no specs unicorn-24294.exe no specs unicorn-15628.exe no specs unicorn-35276.exe no specs unicorn-37173.exe no specs unicorn-24559.exe no specs unicorn-65207.exe no specs unicorn-62446.exe no specs unicorn-56846.exe no specs unicorn-54278.exe no specs unicorn-54278.exe no specs unicorn-16509.exe no specs unicorn-62446.exe no specs unicorn-29389.exe no specs unicorn-9492.exe no specs unicorn-28621.exe no specs unicorn-28621.exe no specs unicorn-20453.exe no specs unicorn-9684.exe no specs unicorn-44958.exe no specs unicorn-44958.exe no specs unicorn-44958.exe no specs unicorn-44958.exe no specs unicorn-58693.exe no specs unicorn-6884.exe no specs unicorn-30733.exe no specs unicorn-17661.exe no specs unicorn-14397.exe no specs unicorn-3436.exe no specs unicorn-34223.exe no specs unicorn-29965.exe no specs unicorn-49566.exe no specs unicorn-29965.exe no specs unicorn-49831.exe no specs unicorn-49831.exe no specs unicorn-49831.exe no specs unicorn-29773.exe no specs unicorn-41085.exe no specs unicorn-46494.exe no specs unicorn-32269.exe no specs unicorn-32269.exe no specs unicorn-48606.exe no specs unicorn-32077.exe no specs unicorn-48990.exe no specs unicorn-57158.exe no specs unicorn-64174.exe no specs unicorn-10069.exe no specs unicorn-35150.exe no specs unicorn-39861.exe no specs unicorn-26292.exe no specs unicorn-28589.exe no specs unicorn-31396.exe no specs unicorn-3702.exe no specs unicorn-3245.exe no specs unicorn-33421.exe no specs unicorn-57926.exe no specs unicorn-8725.exe no specs unicorn-12254.exe no specs unicorn-20260.exe no specs unicorn-10054.exe no specs unicorn-36021.exe no specs unicorn-9478.exe no specs unicorn-35829.exe no specs unicorn-52549.exe no specs unicorn-52549.exe no specs unicorn-38325.exe no specs unicorn-57454.exe no specs unicorn-21988.exe no specs unicorn-49094.exe no specs unicorn-60910.exe no specs unicorn-3733.exe no specs unicorn-49670.exe no specs unicorn-1892.exe no specs unicorn-10557.exe no specs unicorn-64662.exe no specs unicorn-2468.exe no specs unicorn-4388.exe no specs unicorn-37631.exe no specs unicorn-56581.exe no specs unicorn-31116.exe no specs unicorn-30926.exe no specs unicorn-25060.exe no specs unicorn-55814.exe no specs unicorn-25444.exe no specs werfault.exe no specs unicorn-8916.exe no specs unicorn-62525.exe no specs unicorn-54549.exe no specs unicorn-57349.exe no specs unicorn-8148.exe no specs unicorn-63413.exe no specs unicorn-63413.exe no specs unicorn-63413.exe no specs unicorn-14212.exe no specs unicorn-63221.exe no specs unicorn-55053.exe no specs unicorn-55053.exe no specs unicorn-55053.exe no specs unicorn-19885.exe no specs unicorn-14020.exe no specs unicorn-14020.exe no specs unicorn-36798.exe no specs unicorn-5276.exe no specs unicorn-29972.exe no specs unicorn-54285.exe no specs unicorn-40549.exe no specs unicorn-29780.exe no specs unicorn-29780.exe no specs unicorn-29780.exe no specs unicorn-60726.exe no specs unicorn-38525.exe no specs unicorn-5468.exe no specs unicorn-21996.exe no specs unicorn-62646.exe no specs unicorn-62646.exe no specs unicorn-62646.exe no specs unicorn-7580.exe no specs unicorn-32276.exe no specs unicorn-48805.exe no specs unicorn-54670.exe no specs unicorn-54670.exe no specs unicorn-54670.exe no specs unicorn-54670.exe no specs unicorn-54670.exe no specs unicorn-29469.exe no specs unicorn-54670.exe no specs unicorn-46502.exe no specs unicorn-37836.exe no specs unicorn-22071.exe no specs unicorn-28516.exe no specs unicorn-45037.exe no specs unicorn-45037.exe no specs unicorn-61573.exe no specs unicorn-62103.exe no specs unicorn-4701.exe no specs unicorn-21262.exe no specs unicorn-14292.exe no specs unicorn-63294.exe no specs unicorn-63294.exe no specs unicorn-58828.exe no specs unicorn-53493.exe no specs unicorn-39175.exe no specs unicorn-16709.exe no specs unicorn-25335.exe no specs unicorn-7581.exe no specs unicorn-58893.exe no specs unicorn-43133.exe no specs unicorn-16428.exe no specs unicorn-30846.exe no specs unicorn-8260.exe no specs unicorn-46990.exe no specs unicorn-45533.exe no specs unicorn-53886.exe no specs unicorn-13549.exe no specs unicorn-53886.exe no specs unicorn-10285.exe no specs unicorn-21717.exe no specs unicorn-13052.exe no specs unicorn-18453.exe no specs unicorn-7566.exe no specs unicorn-23670.exe no specs unicorn-31806.exe no specs unicorn-31806.exe no specs unicorn-31806.exe no specs unicorn-31806.exe no specs unicorn-39974.exe no specs unicorn-14773.exe no specs unicorn-65054.exe no specs unicorn-23903.exe no specs unicorn-64557.exe no specs unicorn-53622.exe no specs unicorn-15548.exe no specs unicorn-24214.exe no specs unicorn-40550.exe no specs unicorn-15356.exe no specs unicorn-15356.exe no specs unicorn-24022.exe no specs unicorn-24022.exe no specs unicorn-18156.exe no specs unicorn-58740.exe no specs unicorn-17004.exe no specs unicorn-63206.exe no specs unicorn-14204.exe no specs unicorn-54758.exe no specs unicorn-48981.exe no specs unicorn-24676.exe no specs unicorn-39181.exe no specs unicorn-13741.exe no specs unicorn-13741.exe no specs unicorn-19308.exe no specs unicorn-32844.exe no specs unicorn-35645.exe no specs unicorn-52557.exe no specs unicorn-50287.exe no specs unicorn-17079.exe no specs unicorn-60533.exe no specs unicorn-60533.exe no specs unicorn-49102.exe no specs unicorn-2396.exe no specs unicorn-2396.exe no specs unicorn-24790.exe no specs unicorn-24790.exe no specs unicorn-65126.exe no specs unicorn-18924.exe no specs unicorn-18924.exe no specs unicorn-18924.exe no specs unicorn-18924.exe no specs unicorn-18924.exe no specs unicorn-32460.exe no specs unicorn-35261.exe no specs unicorn-45541.exe no specs unicorn-18349.exe no specs unicorn-12868.exe no specs unicorn-10068.exe no specs unicorn-54604.exe no specs unicorn-29396.exe no specs unicorn-31997.exe no specs unicorn-47374.exe no specs unicorn-55542.exe no specs unicorn-52749.exe no specs unicorn-41781.exe no specs unicorn-59223.exe no specs unicorn-12100.exe no specs unicorn-20460.exe no specs unicorn-20460.exe no specs unicorn-20460.exe no specs unicorn-42957.exe no specs unicorn-59101.exe no specs unicorn-18644.exe no specs unicorn-26236.exe no specs unicorn-23436.exe no specs unicorn-15076.exe no specs unicorn-17876.exe no specs unicorn-14877.exe no specs unicorn-50199.exe no specs unicorn-9590.exe no specs unicorn-8557.exe no specs unicorn-13653.exe no specs unicorn-16228.exe no specs unicorn-35365.exe no specs unicorn-33062.exe no specs unicorn-2884.exe no specs unicorn-5677.exe no specs unicorn-19412.exe no specs unicorn-23933.exe no specs unicorn-43534.exe no specs unicorn-10093.exe no specs unicorn-23357.exe no specs unicorn-42958.exe no specs unicorn-34982.exe no specs unicorn-61598.exe no specs unicorn-20757.exe no specs unicorn-14892.exe no specs unicorn-31036.exe no specs unicorn-45149.exe no specs unicorn-12476.exe no specs unicorn-15276.exe no specs unicorn-52927.exe no specs unicorn-27468.exe no specs unicorn-55349.exe no specs unicorn-10933.exe no specs unicorn-60710.exe no specs unicorn-3918.exe no specs unicorn-50342.exe no specs unicorn-47966.exe no specs unicorn-2029.exe no specs unicorn-35159.exe no specs unicorn-34967.exe no specs unicorn-9429.exe no specs unicorn-36046.exe no specs unicorn-27380.exe no specs unicorn-52574.exe no specs unicorn-43909.exe no specs unicorn-28070.exe no specs unicorn-26221.exe no specs unicorn-51687.exe no specs unicorn-59662.exe no specs unicorn-19325.exe no specs unicorn-35351.exe no specs unicorn-21245.exe no specs unicorn-53726.exe no specs unicorn-53726.exe no specs unicorn-45558.exe no specs unicorn-53726.exe no specs unicorn-4525.exe no specs unicorn-4525.exe no specs unicorn-4525.exe no specs unicorn-4525.exe no specs unicorn-4525.exe no specs unicorn-4525.exe no specs unicorn-4220.exe no specs unicorn-20940.exe no specs unicorn-12309.exe no specs unicorn-20477.exe no specs unicorn-14420.exe no specs unicorn-19788.exe no specs unicorn-28454.exe no specs unicorn-28454.exe no specs unicorn-28454.exe no specs unicorn-4028.exe no specs unicorn-29030.exe no specs unicorn-37006.exe no specs unicorn-14116.exe no specs unicorn-22782.exe no specs unicorn-14116.exe no specs unicorn-30452.exe no specs unicorn-30950.exe no specs unicorn-23047.exe no specs unicorn-31023.exe no specs unicorn-6710.exe no specs unicorn-47743.exe no specs unicorn-64079.exe no specs unicorn-29684.exe no specs unicorn-29684.exe no specs unicorn-29684.exe no specs unicorn-29684.exe no specs unicorn-29684.exe no specs unicorn-38350.exe no specs unicorn-30215.exe no specs unicorn-45829.exe no specs unicorn-29293.exe no specs unicorn-45829.exe no specs unicorn-14110.exe no specs unicorn-10389.exe no specs unicorn-22087.exe no specs unicorn-21509.exe no specs unicorn-38423.exe no specs unicorn-52903.exe no specs unicorn-52373.exe no specs unicorn-31372.exe no specs unicorn-52903.exe no specs unicorn-31372.exe no specs unicorn-35837.exe no specs unicorn-30045.exe no specs unicorn-38807.exe no specs unicorn-35645.exe no specs unicorn-25845.exe no specs unicorn-52711.exe no specs unicorn-44543.exe no specs unicorn-42973.exe no specs unicorn-61309.exe no specs unicorn-13181.exe no specs unicorn-4516.exe no specs unicorn-59118.exe no specs unicorn-48158.exe no specs unicorn-22964.exe no specs unicorn-31630.exe no specs unicorn-22004.exe no specs unicorn-21812.exe no specs unicorn-21812.exe no specs unicorn-30478.exe no specs unicorn-55054.exe no specs unicorn-63759.exe no specs unicorn-63229.exe no specs unicorn-63759.exe no specs unicorn-35085.exe no specs unicorn-15749.exe no specs unicorn-43253.exe no specs unicorn-32284.exe no specs unicorn-54214.exe no specs unicorn-32668.exe no specs unicorn-36172.exe no specs unicorn-57703.exe no specs unicorn-57173.exe no specs unicorn-57173.exe no specs unicorn-57173.exe no specs unicorn-57173.exe no specs unicorn-32668.exe no specs unicorn-62766.exe no specs unicorn-65334.exe no specs unicorn-41215.exe no specs unicorn-65334.exe no specs unicorn-19132.exe no specs unicorn-56213.exe no specs unicorn-48045.exe no specs unicorn-31516.exe no specs unicorn-40182.exe no specs unicorn-31516.exe no specs unicorn-14981.exe no specs unicorn-14981.exe no specs unicorn-7926.exe no specs unicorn-46597.exe no specs unicorn-16061.exe no specs unicorn-43694.exe no specs unicorn-64566.exe no specs unicorn-32645.exe no specs unicorn-212.exe no specs unicorn-63479.exe no specs unicorn-41053.exe no specs unicorn-55351.exe no specs unicorn-24268.exe no specs unicorn-28733.exe no specs unicorn-53934.exe no specs unicorn-53934.exe no specs unicorn-38174.exe no specs unicorn-38174.exe no specs unicorn-38174.exe no specs unicorn-18573.exe no specs unicorn-12973.exe no specs unicorn-37484.exe no specs unicorn-46607.exe no specs unicorn-30966.exe no specs unicorn-22300.exe no specs unicorn-5765.exe no specs unicorn-63863.exe no specs unicorn-6461.exe no specs unicorn-6461.exe no specs unicorn-6461.exe no specs unicorn-6461.exe no specs unicorn-6461.exe no specs unicorn-6461.exe no specs unicorn-63333.exe no specs unicorn-39710.exe no specs unicorn-31044.exe no specs unicorn-24215.exe no specs unicorn-6461.exe no specs unicorn-17125.exe no specs unicorn-43741.exe no specs unicorn-63806.exe no specs unicorn-41438.exe no specs unicorn-16237.exe no specs unicorn-52804.exe no specs unicorn-11068.exe no specs unicorn-11644.exe no specs unicorn-17509.exe no specs unicorn-57846.exe no specs unicorn-17509.exe no specs unicorn-40862.exe no specs unicorn-8381.exe no specs unicorn-40862.exe no specs unicorn-40862.exe no specs unicorn-40862.exe no specs unicorn-7997.exe no specs werfault.exe no specs unicorn-8838.exe no specs unicorn-51022.exe no specs unicorn-10685.exe no specs unicorn-51022.exe no specs unicorn-2517.exe no specs unicorn-1590.exe no specs unicorn-6269.exe no specs unicorn-13116.exe no specs unicorn-26548.exe no specs unicorn-23556.exe no specs unicorn-32798.exe no specs unicorn-2014.exe no specs unicorn-7597.exe no specs unicorn-125.exe no specs unicorn-10404.exe no specs unicorn-57302.exe no specs unicorn-58837.exe no specs unicorn-56037.exe no specs unicorn-36637.exe no specs unicorn-33836.exe no specs unicorn-33836.exe no specs unicorn-7790.exe no specs unicorn-57189.exe no specs unicorn-58262.exe no specs unicorn-49597.exe no specs unicorn-701.exe no specs unicorn-49405.exe no specs unicorn-32869.exe no specs unicorn-58070.exe no specs unicorn-18453.exe no specs unicorn-24053.exe no specs unicorn-16919.exe no specs unicorn-35678.exe no specs unicorn-3230.exe no specs unicorn-1349.exe no specs unicorn-18222.exe no specs unicorn-3078.exe no specs unicorn-31837.exe no specs unicorn-10630.exe no specs unicorn-45381.exe no specs unicorn-9908.exe no specs unicorn-9061.exe no specs unicorn-33565.exe no specs unicorn-12590.exe no specs unicorn-45647.exe no specs unicorn-44687.exe no specs unicorn-19605.exe no specs unicorn-36140.exe no specs unicorn-3468.exe no specs unicorn-4038.exe no specs unicorn-33172.exe no specs unicorn-16637.exe no specs unicorn-10198.exe no specs unicorn-17174.exe no specs unicorn-2414.exe no specs unicorn-30405.exe no specs unicorn-41871.exe no specs unicorn-41917.exe no specs unicorn-30981.exe no specs unicorn-52389.exe no specs unicorn-52389.exe no specs unicorn-35853.exe no specs unicorn-52389.exe no specs unicorn-52389.exe no specs unicorn-52389.exe no specs unicorn-52389.exe no specs unicorn-19903.exe no specs unicorn-52389.exe no specs unicorn-3188.exe no specs unicorn-3188.exe no specs unicorn-10965.exe no specs unicorn-10965.exe no specs unicorn-59789.exe no specs unicorn-37012.exe no specs unicorn-37012.exe no specs unicorn-20477.exe no specs unicorn-45678.exe no specs unicorn-53349.exe no specs unicorn-37012.exe no specs unicorn-36813.exe no specs unicorn-37396.exe no specs unicorn-37396.exe no specs unicorn-37396.exe no specs unicorn-26461.exe no specs unicorn-20861.exe no specs unicorn-20861.exe no specs unicorn-20861.exe no specs unicorn-34821.exe no specs unicorn-61702.exe no specs unicorn-61702.exe no specs unicorn-61702.exe no specs unicorn-1765.exe no specs unicorn-12700.exe no specs unicorn-57236.exe no specs unicorn-26269.exe no specs unicorn-26269.exe no specs unicorn-61702.exe no specs unicorn-61702.exe no specs unicorn-61702.exe no specs unicorn-42797.exe no specs unicorn-56533.exe no specs unicorn-54263.exe no specs unicorn-29029.exe no specs unicorn-42797.exe no specs unicorn-4102.exe no specs unicorn-42773.exe no specs unicorn-50006.exe no specs unicorn-52574.exe no specs unicorn-42773.exe no specs unicorn-31021.exe no specs unicorn-19238.exe no specs unicorn-6884.exe no specs unicorn-16949.exe no specs unicorn-32156.exe no specs unicorn-6884.exe no specs unicorn-28415.exe no specs unicorn-32156.exe no specs unicorn-53687.exe no specs unicorn-57301.exe no specs unicorn-27117.exe no specs unicorn-29037.exe no specs unicorn-39437.exe no specs unicorn-20300.exe no specs unicorn-20300.exe no specs unicorn-3765.exe no specs unicorn-14046.exe no specs unicorn-53357.exe no specs unicorn-50996.exe no specs unicorn-36821.exe no specs unicorn-12516.exe no specs unicorn-36821.exe no specs unicorn-36821.exe no specs unicorn-36821.exe no specs unicorn-57052.exe no specs unicorn-13046.exe no specs unicorn-55462.exe no specs unicorn-63942.exe no specs unicorn-38741.exe no specs unicorn-14237.exe no specs unicorn-31303.exe no specs unicorn-39438.exe no specs unicorn-36749.exe no specs unicorn-22981.exe no specs unicorn-22981.exe no specs unicorn-22981.exe no specs unicorn-22981.exe no specs unicorn-22981.exe no specs unicorn-37685.exe no specs unicorn-22981.exe no specs unicorn-22981.exe no specs unicorn-42317.exe no specs unicorn-18516.exe no specs unicorn-40047.exe no specs unicorn-1284.exe no specs unicorn-40047.exe no specs unicorn-18533.exe no specs unicorn-39822.exe no specs unicorn-14621.exe no specs unicorn-14621.exe no specs unicorn-31156.exe no specs unicorn-55039.exe no specs unicorn-40669.exe no specs unicorn-39087.exe no specs unicorn-23751.exe no specs unicorn-37973.exe no specs unicorn-37973.exe no specs unicorn-64886.exe no specs unicorn-61084.exe no specs unicorn-24062.exe no specs unicorn-29414.exe no specs unicorn-32230.exe no specs unicorn-59932.exe no specs unicorn-40239.exe no specs unicorn-35701.exe no specs unicorn-30108.exe no specs unicorn-22132.exe no specs unicorn-22132.exe no specs unicorn-22132.exe no specs unicorn-428.exe no specs unicorn-38655.exe no specs unicorn-30639.exe no specs unicorn-22662.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
6272"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Minimized -Command "Start-Process C:\Users\admin\Desktop\62a986c16cdede724c9742f1c825f9e1f0ae5cbbe023dff477f3d6bf0b9e6966.exe -Verb runas ; echo 'Started the file with administrator privileges, this is not part of the sample!' ; exit 0C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeexplorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows PowerShell
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\windowspowershell\v1.0\powershell.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
6280\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exepowershell.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\conhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\shcore.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
6480"C:\Users\admin\Desktop\62a986c16cdede724c9742f1c825f9e1f0ae5cbbe023dff477f3d6bf0b9e6966.exe" C:\Users\admin\Desktop\62a986c16cdede724c9742f1c825f9e1f0ae5cbbe023dff477f3d6bf0b9e6966.exe
powershell.exe
User:
admin
Integrity Level:
HIGH
Modules
Images
c:\users\admin\desktop\62a986c16cdede724c9742f1c825f9e1f0ae5cbbe023dff477f3d6bf0b9e6966.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
6576C:\Users\admin\Desktop\Unicorn-62431.exeC:\Users\admin\Desktop\Unicorn-62431.exe
62a986c16cdede724c9742f1c825f9e1f0ae5cbbe023dff477f3d6bf0b9e6966.exe
User:
admin
Integrity Level:
HIGH
Modules
Images
c:\users\admin\desktop\unicorn-62431.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
6600C:\Users\admin\Desktop\Unicorn-48311.exeC:\Users\admin\Desktop\Unicorn-48311.exe
Unicorn-62431.exe
User:
admin
Integrity Level:
HIGH
Modules
Images
c:\users\admin\desktop\unicorn-48311.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
6620C:\Users\admin\Desktop\Unicorn-44974.exeC:\Users\admin\Desktop\Unicorn-44974.exe
62a986c16cdede724c9742f1c825f9e1f0ae5cbbe023dff477f3d6bf0b9e6966.exe
User:
admin
Integrity Level:
HIGH
Modules
Images
c:\users\admin\desktop\unicorn-44974.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
6644C:\Users\admin\Desktop\Unicorn-24679.exeC:\Users\admin\Desktop\Unicorn-24679.exe
Unicorn-48311.exe
User:
admin
Integrity Level:
HIGH
Modules
Images
c:\users\admin\desktop\unicorn-24679.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
6660C:\Users\admin\Desktop\Unicorn-49375.exeC:\Users\admin\Desktop\Unicorn-49375.exe
Unicorn-44974.exe
User:
admin
Integrity Level:
HIGH
Modules
Images
c:\users\admin\desktop\unicorn-49375.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
6668C:\Users\admin\Desktop\Unicorn-29509.exeC:\Users\admin\Desktop\Unicorn-29509.exe
Unicorn-62431.exe
User:
admin
Integrity Level:
HIGH
Modules
Images
c:\users\admin\desktop\unicorn-29509.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
6692C:\Users\admin\Desktop\Unicorn-59581.exeC:\Users\admin\Desktop\Unicorn-59581.exe
62a986c16cdede724c9742f1c825f9e1f0ae5cbbe023dff477f3d6bf0b9e6966.exe
User:
admin
Integrity Level:
HIGH
Modules
Images
c:\users\admin\desktop\unicorn-59581.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
Total events
77 826
Read events
77 760
Write events
57
Delete events
9

Modification events

(PID) Process:(6272) powershell.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:ProxyBypass
Value:
1
(PID) Process:(6272) powershell.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:IntranetName
Value:
1
(PID) Process:(6272) powershell.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:UNCAsIntranet
Value:
1
(PID) Process:(6272) powershell.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:AutoDetect
Value:
0
(PID) Process:(9360) WerFault.exeKey:\REGISTRY\A\{e99e70ad-5b4c-56eb-32f7-1639a0048b11}\Root\InventoryApplicationFile
Operation:writeName:WritePermissionsCheck
Value:
1
(PID) Process:(9360) WerFault.exeKey:\REGISTRY\A\{e99e70ad-5b4c-56eb-32f7-1639a0048b11}\Root\InventoryApplicationFile\PermissionsCheckTestKey
Operation:delete keyName:(default)
Value:
(PID) Process:(9360) WerFault.exeKey:\REGISTRY\A\{e99e70ad-5b4c-56eb-32f7-1639a0048b11}\Root\InventoryApplicationFile\unicorn-7118.exe|d0d9a0149e2f69b1
Operation:writeName:ProgramId
Value:
00067724019ef2e244068aa5bb58d90b8b140000ffff
(PID) Process:(9360) WerFault.exeKey:\REGISTRY\A\{e99e70ad-5b4c-56eb-32f7-1639a0048b11}\Root\InventoryApplicationFile\unicorn-7118.exe|d0d9a0149e2f69b1
Operation:writeName:FileId
Value:
0000664c04ec0376580249f4c55bae2203b86a6ff05c
(PID) Process:(9360) WerFault.exeKey:\REGISTRY\A\{e99e70ad-5b4c-56eb-32f7-1639a0048b11}\Root\InventoryApplicationFile\unicorn-7118.exe|d0d9a0149e2f69b1
Operation:writeName:LowerCaseLongPath
Value:
c:\users\admin\desktop\unicorn-7118.exe
(PID) Process:(9360) WerFault.exeKey:\REGISTRY\A\{e99e70ad-5b4c-56eb-32f7-1639a0048b11}\Root\InventoryApplicationFile\unicorn-7118.exe|d0d9a0149e2f69b1
Operation:writeName:LongPathHash
Value:
unicorn-7118.exe|d0d9a0149e2f69b1
Executable files
1 229
Suspicious files
7
Text files
6
Unknown types
0

Dropped files

PID
Process
Filename
Type
6272powershell.exeC:\Users\admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ETEWE2QA25SGBDXB2VJ3.temp
MD5:
SHA256:
6272powershell.exeC:\Users\admin\AppData\Local\Temp\__PSScriptPolicyTest_zhiarybs.4ew.ps1text
MD5:D17FE0A3F47BE24A6453E9EF58C94641
SHA256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
6272powershell.exeC:\Users\admin\AppData\Local\Temp\__PSScriptPolicyTest_2xkr4sq0.kgt.psm1text
MD5:D17FE0A3F47BE24A6453E9EF58C94641
SHA256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
648062a986c16cdede724c9742f1c825f9e1f0ae5cbbe023dff477f3d6bf0b9e6966.exeC:\Users\admin\Desktop\Unicorn-62431.exeexecutable
MD5:0813FDA2D9435BC9C1A66F4833EE5951
SHA256:5BA8F0E4DB436A38A4D30655911F118992DC9A4E9E1F3AF99D7BBFE29BE1BA3D
6576Unicorn-62431.exeC:\Users\admin\Desktop\Unicorn-29509.exeexecutable
MD5:6D7DB654F8A888E1EB9D376102C88C8B
SHA256:4DE087516C658483A1DF92BE1F0BE4607505C8DDB7DA9013CD612CF191AD8649
6644Unicorn-24679.exeC:\Users\admin\Desktop\Unicorn-3822.exeexecutable
MD5:FAE8F51FF54CB30446769795D1D4F8C3
SHA256:92E0BBBC598F1AB5BD85CBA3F3BA1E73A53D20A350D29E2C36941B5DA275A9D0
6576Unicorn-62431.exeC:\Users\admin\Desktop\Unicorn-48311.exeexecutable
MD5:86CE1D19340110A70805903633B2F71F
SHA256:2F162EB9AF30AF496C92D3752F87FDD626126726EA9E9A02E3EBFE13FD93F629
6272powershell.exeC:\Users\admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms~RF113843.TMPbinary
MD5:D040F64E9E7A2BB91ABCA5613424598E
SHA256:D04E0A6940609BD6F3B561B0F6027F5CA4E8C5CF0FB0D0874B380A0374A8D670
6600Unicorn-48311.exeC:\Users\admin\Desktop\Unicorn-24679.exeexecutable
MD5:FFA8A84569FBA77D0439DFB0C78C5500
SHA256:E18EB3E11F0923347315B109FBE72C584D2853E58309F017CAE084FB0F98A43A
6620Unicorn-44974.exeC:\Users\admin\Desktop\Unicorn-49375.exeexecutable
MD5:EA3A16EEEB1D34EFAE79E9AC5DDE607D
SHA256:67B4FB7894DED1FA2D55CFDBABF60E222CCF512CC63EC79E949C77ACAF2D982F
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
7
TCP/UDP connections
23
DNS requests
6
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
4428
RUXIMICS.exe
GET
184.51.127.17:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
unknown
5504
svchost.exe
GET
200
184.51.127.17:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
unknown
4428
RUXIMICS.exe
GET
200
2.17.245.133:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
unknown
5504
svchost.exe
GET
200
2.17.245.133:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
unknown
5140
MoUsoCoreWorker.exe
GET
200
184.51.127.17:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
unknown
5140
MoUsoCoreWorker.exe
GET
200
2.17.245.133:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
unknown
POST
200
20.42.73.31:443
https://self.events.data.microsoft.com/OneCollector/1.0/
unknown
binary
9 b
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:138
whitelisted
5504
svchost.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4428
RUXIMICS.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
5140
MoUsoCoreWorker.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4428
RUXIMICS.exe
184.51.127.17:80
crl.microsoft.com
Akamai International B.V.
IT
unknown
4364
svchost.exe
239.255.255.250:1900
unknown
5504
svchost.exe
184.51.127.17:80
crl.microsoft.com
Akamai International B.V.
IT
unknown
5140
MoUsoCoreWorker.exe
184.51.127.17:80
crl.microsoft.com
Akamai International B.V.
IT
unknown
5504
svchost.exe
2.17.245.133:80
www.microsoft.com
Akamai International B.V.
NL
unknown
5140
MoUsoCoreWorker.exe
2.17.245.133:80
www.microsoft.com
Akamai International B.V.
NL
unknown

DNS requests

Domain
IP
Reputation
crl.microsoft.com
  • 184.51.127.17
  • 184.51.127.51
whitelisted
settings-win.data.microsoft.com
  • 4.231.128.59
whitelisted
www.microsoft.com
  • 2.17.245.133
whitelisted
watson.events.data.microsoft.com
  • 52.182.143.212
whitelisted
self.events.data.microsoft.com
  • 51.132.193.105
whitelisted

Threats

No threats detected
No debug info