| File name: | 1 (1267) |
| Full analysis: | https://app.any.run/tasks/1c24f02c-7570-4b84-9bc6-c66ff61f4c43 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 10:02:47 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | B7FF8765C3FDD3B5C23B6520451A4E40 |
| SHA1: | BB1D4AB9CC42D5524B7B1ED460E32447612DD8E1 |
| SHA256: | D8A3B95AC4EFF85221F423E29C570DC29CCA55BF8F3C22909BF4CF93CD998DDF |
| SSDEEP: | 6144:x7w9MJ4PYDoUA5L7y8XsABjx5wPq5P8GBf/Wyme8Jk/8SwjwpgAvEhpka126sFGa:xsSWVUA5vyCCP0EafOyme8Zx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- Unicorn-9036.exe (PID: 7504)
- Unicorn-19242.exe (PID: 5072)
- Unicorn-33541.exe (PID: 2140)
- 1 (1267).exe (PID: 7540)
- Unicorn-48512.exe (PID: 8176)
- Unicorn-49768.exe (PID: 7356)
- Unicorn-20433.exe (PID: 4448)
- Unicorn-39519.exe (PID: 1196)
- Unicorn-12264.exe (PID: 896)
- Unicorn-23291.exe (PID: 1660)
- Unicorn-2124.exe (PID: 2088)
- Unicorn-19918.exe (PID: 7476)
- Unicorn-48393.exe (PID: 4408)
- Unicorn-17566.exe (PID: 5608)
- Unicorn-31459.exe (PID: 1184)
- Unicorn-44117.exe (PID: 672)
- Unicorn-59384.exe (PID: 1452)
- Unicorn-32419.exe (PID: 5124)
- Unicorn-39518.exe (PID: 4272)
- Unicorn-8512.exe (PID: 3304)
- Unicorn-18718.exe (PID: 7184)
- Unicorn-16414.exe (PID: 1056)
- Unicorn-30795.exe (PID: 2960)
- Unicorn-50396.exe (PID: 4428)
- Unicorn-8237.exe (PID: 4436)
- Unicorn-46577.exe (PID: 3676)
- Unicorn-32278.exe (PID: 7256)
- Unicorn-1268.exe (PID: 4268)
- Unicorn-9820.exe (PID: 4976)
- Unicorn-62264.exe (PID: 7312)
- Unicorn-54916.exe (PID: 7580)
- Unicorn-2591.exe (PID: 7808)
- Unicorn-1076.exe (PID: 7048)
- Unicorn-53083.exe (PID: 7928)
- Unicorn-33747.exe (PID: 7768)
- Unicorn-26733.exe (PID: 7752)
- Unicorn-34709.exe (PID: 2560)
- Unicorn-47708.exe (PID: 7792)
- Unicorn-54894.exe (PID: 5548)
- Unicorn-61024.exe (PID: 7424)
- Unicorn-31865.exe (PID: 5204)
- Unicorn-18373.exe (PID: 1852)
- Unicorn-45565.exe (PID: 6964)
- Unicorn-38985.exe (PID: 7788)
- Unicorn-51621.exe (PID: 7880)
- Unicorn-40521.exe (PID: 8072)
- Unicorn-10567.exe (PID: 7756)
- Unicorn-35186.exe (PID: 920)
- Unicorn-12124.exe (PID: 8064)
- Unicorn-6120.exe (PID: 5404)
- Unicorn-9694.exe (PID: 8080)
- Unicorn-15825.exe (PID: 8076)
- Unicorn-41097.exe (PID: 632)
- Unicorn-57796.exe (PID: 7948)
- Unicorn-24569.exe (PID: 2268)
- Unicorn-4724.exe (PID: 8028)
- Unicorn-23801.exe (PID: 8032)
- Unicorn-38143.exe (PID: 2096)
- Unicorn-16763.exe (PID: 8060)
- Unicorn-15943.exe (PID: 7876)
- Unicorn-20219.exe (PID: 6676)
- Unicorn-21637.exe (PID: 4188)
- Unicorn-42249.exe (PID: 5756)
- Unicorn-55269.exe (PID: 7988)
- Unicorn-58450.exe (PID: 8212)
- Unicorn-19437.exe (PID: 8240)
- Unicorn-42560.exe (PID: 8144)
- Unicorn-57838.exe (PID: 6300)
- Unicorn-63437.exe (PID: 8004)
- Unicorn-65471.exe (PID: 2392)
- Unicorn-183.exe (PID: 4652)
- Unicorn-35507.exe (PID: 8864)
- Unicorn-55571.exe (PID: 9016)
- Unicorn-58371.exe (PID: 9032)
- Unicorn-28107.exe (PID: 9108)
- Unicorn-31703.exe (PID: 5364)
- Unicorn-41371.exe (PID: 8460)
- Unicorn-15506.exe (PID: 6752)
- Unicorn-38165.exe (PID: 6080)
- Unicorn-46525.exe (PID: 864)
- Unicorn-23535.exe (PID: 5960)
- Unicorn-36816.exe (PID: 8552)
- Unicorn-58591.exe (PID: 7976)
- Unicorn-32265.exe (PID: 8196)
- Unicorn-56504.exe (PID: 8816)
- Unicorn-10536.exe (PID: 4068)
- Unicorn-30381.exe (PID: 208)
- Unicorn-17361.exe (PID: 2552)
- Unicorn-15062.exe (PID: 8136)
- Unicorn-57869.exe (PID: 4608)
- Unicorn-12975.exe (PID: 8316)
- Unicorn-42000.exe (PID: 9268)
- Unicorn-23447.exe (PID: 8836)
- Unicorn-3048.exe (PID: 9056)
- Unicorn-42825.exe (PID: 2564)
- Unicorn-10131.exe (PID: 7148)
- Unicorn-53453.exe (PID: 8268)
- Unicorn-46485.exe (PID: 7952)
- Unicorn-34547.exe (PID: 8520)
- Unicorn-4776.exe (PID: 7220)
- Unicorn-16697.exe (PID: 8252)
- Unicorn-45285.exe (PID: 8260)
- Unicorn-9239.exe (PID: 9980)
- Unicorn-13048.exe (PID: 9940)
- Unicorn-1630.exe (PID: 6584)
- Unicorn-16645.exe (PID: 7636)
- Unicorn-54797.exe (PID: 8712)
- Unicorn-38705.exe (PID: 10028)
- Unicorn-16645.exe (PID: 7640)
- Unicorn-37501.exe (PID: 8636)
- Unicorn-44849.exe (PID: 9180)
- Unicorn-41563.exe (PID: 8300)
- Unicorn-32087.exe (PID: 744)
- Unicorn-21090.exe (PID: 10232)
- Unicorn-32509.exe (PID: 9556)
- Unicorn-11652.exe (PID: 8204)
- Unicorn-13411.exe (PID: 9716)
- Unicorn-18402.exe (PID: 9812)
- Unicorn-8720.exe (PID: 8652)
- Unicorn-30537.exe (PID: 10052)
- Unicorn-57153.exe (PID: 8468)
- Unicorn-61548.exe (PID: 7352)
- Unicorn-14252.exe (PID: 9364)
- Unicorn-20374.exe (PID: 9384)
- Unicorn-58984.exe (PID: 9504)
- Unicorn-3603.exe (PID: 9100)
- Unicorn-47080.exe (PID: 3008)
- Unicorn-37059.exe (PID: 10372)
- Unicorn-57603.exe (PID: 8844)
- Unicorn-62716.exe (PID: 10700)
- Unicorn-37501.exe (PID: 8808)
- Unicorn-5928.exe (PID: 7832)
- Unicorn-61237.exe (PID: 8488)
- Unicorn-10064.exe (PID: 8664)
- Unicorn-14703.exe (PID: 8672)
- Unicorn-35507.exe (PID: 8856)
- Unicorn-6904.exe (PID: 11392)
- Unicorn-23241.exe (PID: 11416)
- Unicorn-53365.exe (PID: 11408)
- Unicorn-22893.exe (PID: 8828)
- Unicorn-12975.exe (PID: 8308)
- Unicorn-2820.exe (PID: 11376)
- Unicorn-23968.exe (PID: 11664)
- Unicorn-49784.exe (PID: 9800)
- Unicorn-34304.exe (PID: 8680)
- Unicorn-42052.exe (PID: 10868)
- Unicorn-32576.exe (PID: 8292)
- Unicorn-3676.exe (PID: 6244)
- Unicorn-8891.exe (PID: 8284)
- Unicorn-42976.exe (PID: 11340)
- Unicorn-22451.exe (PID: 10888)
- Unicorn-5103.exe (PID: 11916)
- Unicorn-64864.exe (PID: 9120)
- Unicorn-28321.exe (PID: 9196)
- Unicorn-55979.exe (PID: 11840)
- Unicorn-30811.exe (PID: 10832)
- Unicorn-9591.exe (PID: 9340)
- Unicorn-61541.exe (PID: 12472)
- Unicorn-4172.exe (PID: 12540)
- Unicorn-53373.exe (PID: 12492)
- Unicorn-11424.exe (PID: 10468)
- Unicorn-37096.exe (PID: 9700)
- Unicorn-16806.exe (PID: 9288)
- Unicorn-8693.exe (PID: 10396)
- Unicorn-10515.exe (PID: 7964)
- Unicorn-12472.exe (PID: 9784)
- Unicorn-45337.exe (PID: 9760)
- Unicorn-33342.exe (PID: 8096)
- Unicorn-55736.exe (PID: 10180)
- Unicorn-25019.exe (PID: 10848)
- Unicorn-46409.exe (PID: 12092)
- Unicorn-60495.exe (PID: 10404)
- Unicorn-1787.exe (PID: 9276)
- Unicorn-16534.exe (PID: 11252)
- Unicorn-50012.exe (PID: 7416)
- Unicorn-7430.exe (PID: 9692)
- Unicorn-63017.exe (PID: 10116)
- Unicorn-1578.exe (PID: 7328)
- Unicorn-46388.exe (PID: 14264)
- Unicorn-61407.exe (PID: 14256)
- Unicorn-10914.exe (PID: 10692)
- Unicorn-7686.exe (PID: 10136)
- Unicorn-26186.exe (PID: 12232)
- Unicorn-45483.exe (PID: 8544)
- Unicorn-44437.exe (PID: 12292)
- Unicorn-33386.exe (PID: 10880)
- Unicorn-6852.exe (PID: 9472)
- Unicorn-18093.exe (PID: 10072)
- Unicorn-30654.exe (PID: 9820)
- Unicorn-40663.exe (PID: 4736)
- Unicorn-4024.exe (PID: 10568)
- Unicorn-5103.exe (PID: 11924)
- Unicorn-30449.exe (PID: 10772)
- Unicorn-1595.exe (PID: 9320)
- Unicorn-11920.exe (PID: 15144)
- Unicorn-65013.exe (PID: 15180)
- Unicorn-36187.exe (PID: 10896)
- Unicorn-13115.exe (PID: 9228)
- Unicorn-3560.exe (PID: 15200)
Executable content was dropped or overwritten
- Unicorn-48512.exe (PID: 8176)
- Unicorn-33541.exe (PID: 2140)
- Unicorn-9036.exe (PID: 7504)
- 1 (1267).exe (PID: 7540)
- Unicorn-49768.exe (PID: 7356)
- Unicorn-12264.exe (PID: 896)
- Unicorn-20433.exe (PID: 4448)
- Unicorn-19242.exe (PID: 5072)
- Unicorn-19918.exe (PID: 7476)
- Unicorn-16414.exe (PID: 1056)
- Unicorn-23291.exe (PID: 1660)
- Unicorn-48393.exe (PID: 4408)
- Unicorn-17566.exe (PID: 5608)
- Unicorn-39519.exe (PID: 1196)
- Unicorn-31459.exe (PID: 1184)
- Unicorn-44117.exe (PID: 672)
- Unicorn-35186.exe (PID: 920)
- Unicorn-32419.exe (PID: 5124)
- Unicorn-39518.exe (PID: 4272)
- Unicorn-31865.exe (PID: 5204)
- Unicorn-8512.exe (PID: 3304)
- Unicorn-18718.exe (PID: 7184)
- Unicorn-30795.exe (PID: 2960)
- Unicorn-50396.exe (PID: 4428)
- Unicorn-9820.exe (PID: 4976)
- Unicorn-8237.exe (PID: 4436)
- Unicorn-46577.exe (PID: 3676)
- Unicorn-32278.exe (PID: 7256)
- Unicorn-2124.exe (PID: 2088)
- Unicorn-1268.exe (PID: 4268)
- Unicorn-1076.exe (PID: 7048)
- Unicorn-2591.exe (PID: 7808)
- Unicorn-54916.exe (PID: 7580)
- Unicorn-34709.exe (PID: 2560)
- Unicorn-62264.exe (PID: 7312)
- Unicorn-53083.exe (PID: 7928)
- Unicorn-5928.exe (PID: 7832)
- Unicorn-26733.exe (PID: 7752)
- Unicorn-18373.exe (PID: 1852)
- Unicorn-47708.exe (PID: 7792)
- Unicorn-54894.exe (PID: 5548)
- Unicorn-61024.exe (PID: 7424)
- Unicorn-38985.exe (PID: 7788)
- Unicorn-40521.exe (PID: 8072)
- Unicorn-10567.exe (PID: 7756)
- Unicorn-6120.exe (PID: 5404)
- Unicorn-45565.exe (PID: 6964)
- Unicorn-51621.exe (PID: 7880)
- Unicorn-59384.exe (PID: 1452)
- Unicorn-15943.exe (PID: 7876)
- Unicorn-16763.exe (PID: 8060)
- Unicorn-9694.exe (PID: 8080)
- Unicorn-57796.exe (PID: 7948)
- Unicorn-4724.exe (PID: 8028)
- Unicorn-23801.exe (PID: 8032)
- Unicorn-24569.exe (PID: 2268)
- Unicorn-41097.exe (PID: 632)
- Unicorn-38143.exe (PID: 2096)
- Unicorn-65471.exe (PID: 2392)
- Unicorn-42249.exe (PID: 5756)
- Unicorn-55269.exe (PID: 7988)
- Unicorn-58450.exe (PID: 8212)
- Unicorn-183.exe (PID: 4652)
- Unicorn-19437.exe (PID: 8240)
- Unicorn-57838.exe (PID: 6300)
- Unicorn-42560.exe (PID: 8144)
- Unicorn-35507.exe (PID: 8864)
- Unicorn-55571.exe (PID: 9016)
- Unicorn-28107.exe (PID: 9108)
- Unicorn-58371.exe (PID: 9032)
- Unicorn-41371.exe (PID: 8460)
- Unicorn-15506.exe (PID: 6752)
- Unicorn-38165.exe (PID: 6080)
- Unicorn-8891.exe (PID: 8284)
- Unicorn-31703.exe (PID: 5364)
- Unicorn-23535.exe (PID: 5960)
- Unicorn-36816.exe (PID: 8552)
- Unicorn-58591.exe (PID: 7976)
- Unicorn-32265.exe (PID: 8196)
- Unicorn-46525.exe (PID: 864)
- Unicorn-10536.exe (PID: 4068)
- Unicorn-56504.exe (PID: 8816)
- Unicorn-15062.exe (PID: 8136)
- Unicorn-57869.exe (PID: 4608)
- Unicorn-30381.exe (PID: 208)
- Unicorn-17361.exe (PID: 2552)
- Unicorn-42825.exe (PID: 2564)
- Unicorn-12975.exe (PID: 8316)
- Unicorn-23447.exe (PID: 8836)
- Unicorn-3048.exe (PID: 9056)
- Unicorn-42000.exe (PID: 9268)
- Unicorn-53453.exe (PID: 8268)
- Unicorn-33747.exe (PID: 7768)
- Unicorn-46485.exe (PID: 7952)
- Unicorn-10131.exe (PID: 7148)
- Unicorn-21637.exe (PID: 4188)
- Unicorn-34547.exe (PID: 8520)
- Unicorn-44849.exe (PID: 9180)
- Unicorn-16697.exe (PID: 8252)
- Unicorn-45285.exe (PID: 8260)
- Unicorn-16645.exe (PID: 7636)
- Unicorn-54797.exe (PID: 8712)
- Unicorn-13048.exe (PID: 9940)
- Unicorn-9239.exe (PID: 9980)
- Unicorn-41563.exe (PID: 8300)
- Unicorn-1630.exe (PID: 6584)
- Unicorn-12124.exe (PID: 8064)
- Unicorn-48549.exe (PID: 6324)
- Unicorn-16645.exe (PID: 7640)
- Unicorn-38705.exe (PID: 10028)
- Unicorn-37501.exe (PID: 8636)
- Unicorn-32087.exe (PID: 744)
- Unicorn-21090.exe (PID: 10232)
- Unicorn-32509.exe (PID: 9556)
- Unicorn-11652.exe (PID: 8204)
- Unicorn-13411.exe (PID: 9716)
- Unicorn-57153.exe (PID: 8468)
- Unicorn-8720.exe (PID: 8652)
- Unicorn-30537.exe (PID: 10052)
- Unicorn-22893.exe (PID: 8828)
- Unicorn-18402.exe (PID: 9812)
- Unicorn-57603.exe (PID: 8844)
- Unicorn-15825.exe (PID: 8076)
- Unicorn-14252.exe (PID: 9364)
- Unicorn-20374.exe (PID: 9384)
- Unicorn-61548.exe (PID: 7352)
- Unicorn-58984.exe (PID: 9504)
- Unicorn-37501.exe (PID: 8808)
- Unicorn-37059.exe (PID: 10372)
- Unicorn-3603.exe (PID: 9100)
- Unicorn-47080.exe (PID: 3008)
- Unicorn-62716.exe (PID: 10700)
- Unicorn-61237.exe (PID: 8488)
- Unicorn-14703.exe (PID: 8672)
- Unicorn-10064.exe (PID: 8664)
- Unicorn-35507.exe (PID: 8856)
- Unicorn-23241.exe (PID: 11416)
- Unicorn-6904.exe (PID: 11392)
- Unicorn-2820.exe (PID: 11376)
- Unicorn-23968.exe (PID: 11664)
- Unicorn-49784.exe (PID: 9800)
- Unicorn-12975.exe (PID: 8308)
- Unicorn-34304.exe (PID: 8680)
- Unicorn-32576.exe (PID: 8292)
- Unicorn-42052.exe (PID: 10868)
- Unicorn-9591.exe (PID: 9340)
- Unicorn-11424.exe (PID: 10468)
- Unicorn-64864.exe (PID: 9120)
- Unicorn-22451.exe (PID: 10888)
- Unicorn-5103.exe (PID: 11916)
- Unicorn-42976.exe (PID: 11340)
- Unicorn-28321.exe (PID: 9196)
- Unicorn-30811.exe (PID: 10832)
- Unicorn-55979.exe (PID: 11840)
- Unicorn-10515.exe (PID: 7964)
- Unicorn-12472.exe (PID: 9784)
- Unicorn-4172.exe (PID: 12540)
- Unicorn-61541.exe (PID: 12472)
- Unicorn-53373.exe (PID: 12492)
- Unicorn-20219.exe (PID: 6676)
- Unicorn-37096.exe (PID: 9700)
- Unicorn-45337.exe (PID: 9760)
- Unicorn-4024.exe (PID: 10568)
- Unicorn-8693.exe (PID: 10396)
- Unicorn-33342.exe (PID: 8096)
- Unicorn-55736.exe (PID: 10180)
- Unicorn-46409.exe (PID: 12092)
- Unicorn-25019.exe (PID: 10848)
- Unicorn-7430.exe (PID: 9692)
- Unicorn-1787.exe (PID: 9276)
- Unicorn-16534.exe (PID: 11252)
- Unicorn-50012.exe (PID: 7416)
- Unicorn-63017.exe (PID: 10116)
- Unicorn-60495.exe (PID: 10404)
- Unicorn-7686.exe (PID: 10136)
- Unicorn-10914.exe (PID: 10692)
- Unicorn-26186.exe (PID: 12232)
- Unicorn-1578.exe (PID: 7328)
- Unicorn-44437.exe (PID: 12292)
- Unicorn-33386.exe (PID: 10880)
- Unicorn-6852.exe (PID: 9472)
- Unicorn-30654.exe (PID: 9820)
- Unicorn-1595.exe (PID: 9320)
- Unicorn-30449.exe (PID: 10772)
- Unicorn-18093.exe (PID: 10072)
- Unicorn-40663.exe (PID: 4736)
- Unicorn-5103.exe (PID: 11924)
- Unicorn-36187.exe (PID: 10896)
- Unicorn-48269.exe (PID: 9400)
- Unicorn-4776.exe (PID: 7220)
- Unicorn-13115.exe (PID: 9228)
- Unicorn-52472.exe (PID: 10200)
- Unicorn-39695.exe (PID: 10672)
- Unicorn-53365.exe (PID: 11408)
- Unicorn-44304.exe (PID: 10224)
- Unicorn-5627.exe (PID: 9908)
- Unicorn-48373.exe (PID: 10460)
- Unicorn-50381.exe (PID: 9868)
- Unicorn-4886.exe (PID: 10128)
- Unicorn-50367.exe (PID: 12388)
- Unicorn-46388.exe (PID: 14272)
- Unicorn-61407.exe (PID: 14256)
- Unicorn-54465.exe (PID: 9860)
- Unicorn-13100.exe (PID: 11796)
- Unicorn-39939.exe (PID: 11012)
- Unicorn-33115.exe (PID: 11652)
- Unicorn-58911.exe (PID: 11700)
- Unicorn-44865.exe (PID: 10576)
- Unicorn-44024.exe (PID: 10992)
- Unicorn-64221.exe (PID: 9480)
- Unicorn-11491.exe (PID: 11720)
- Unicorn-25685.exe (PID: 9880)
- Unicorn-16806.exe (PID: 9288)
- Unicorn-59945.exe (PID: 9496)
- Unicorn-18041.exe (PID: 8688)
- Unicorn-33778.exe (PID: 2148)
- Unicorn-37148.exe (PID: 11868)
- Unicorn-59512.exe (PID: 14660)
- Unicorn-24793.exe (PID: 12356)
- Unicorn-24341.exe (PID: 9544)
- Unicorn-32317.exe (PID: 9600)
- Unicorn-22945.exe (PID: 7744)
- Unicorn-31719.exe (PID: 9328)
- Unicorn-32125.exe (PID: 9652)
- Unicorn-7570.exe (PID: 14560)
- Unicorn-11616.exe (PID: 10444)
- Unicorn-52576.exe (PID: 11548)
- Unicorn-31217.exe (PID: 10972)
- Unicorn-14239.exe (PID: 12624)
- Unicorn-57501.exe (PID: 10840)
- Unicorn-59560.exe (PID: 9428)
- Unicorn-38969.exe (PID: 12240)
- Unicorn-28986.exe (PID: 12224)
- Unicorn-41527.exe (PID: 10728)
- Unicorn-36631.exe (PID: 12380)
- Unicorn-28055.exe (PID: 5624)
- Unicorn-47745.exe (PID: 10916)
- Unicorn-56660.exe (PID: 10380)
- Unicorn-15390.exe (PID: 12140)
- Unicorn-22019.exe (PID: 9512)
- Unicorn-26850.exe (PID: 9236)
- Unicorn-15789.exe (PID: 9632)
- Unicorn-63904.exe (PID: 10208)
- Unicorn-3560.exe (PID: 15200)
- Unicorn-65013.exe (PID: 15180)
- Unicorn-11920.exe (PID: 15144)
- Unicorn-3676.exe (PID: 6244)
- Unicorn-708.exe (PID: 10680)
- Unicorn-22075.exe (PID: 12664)
- Unicorn-446.exe (PID: 13224)
- Unicorn-33002.exe (PID: 10616)
- Unicorn-63437.exe (PID: 8004)
- Unicorn-8108.exe (PID: 10560)
- Unicorn-32369.exe (PID: 11672)
- Unicorn-20537.exe (PID: 9144)
- Unicorn-46388.exe (PID: 14264)
Executes application which crashes
- Unicorn-1351.exe (PID: 9932)
INFO
The sample compiled with chinese language support
- 1 (1267).exe (PID: 7540)
- Unicorn-23241.exe (PID: 11416)
- Unicorn-47708.exe (PID: 7792)
- Unicorn-13048.exe (PID: 9940)
- Unicorn-46388.exe (PID: 14272)
Checks supported languages
- Unicorn-48512.exe (PID: 8176)
- Unicorn-33541.exe (PID: 2140)
- Unicorn-9036.exe (PID: 7504)
- Unicorn-19242.exe (PID: 5072)
- Unicorn-28793.exe (PID: 1348)
- Unicorn-12264.exe (PID: 896)
- Unicorn-23291.exe (PID: 1660)
- Unicorn-31459.exe (PID: 1184)
- Unicorn-2124.exe (PID: 2088)
- Unicorn-16414.exe (PID: 1056)
- Unicorn-20433.exe (PID: 4448)
- Unicorn-19918.exe (PID: 7476)
- Unicorn-44117.exe (PID: 672)
- Unicorn-17566.exe (PID: 5608)
- Unicorn-48393.exe (PID: 4408)
- Unicorn-8512.exe (PID: 3304)
- Unicorn-32419.exe (PID: 5124)
- Unicorn-59384.exe (PID: 1452)
- Unicorn-30795.exe (PID: 2960)
- Unicorn-8237.exe (PID: 4436)
- Unicorn-1076.exe (PID: 7048)
- Unicorn-62264.exe (PID: 7312)
- Unicorn-50396.exe (PID: 4428)
- Unicorn-1268.exe (PID: 4268)
- Unicorn-54916.exe (PID: 7580)
- Unicorn-38985.exe (PID: 7788)
- Unicorn-26733.exe (PID: 7752)
- Unicorn-18373.exe (PID: 1852)
- Unicorn-34709.exe (PID: 2560)
- Unicorn-2591.exe (PID: 7808)
- Unicorn-53083.exe (PID: 7928)
- Unicorn-5928.exe (PID: 7832)
- Unicorn-10567.exe (PID: 7756)
- Unicorn-57796.exe (PID: 7948)
- Unicorn-45565.exe (PID: 6964)
- Unicorn-15062.exe (PID: 8136)
- Unicorn-15825.exe (PID: 8076)
- Unicorn-15943.exe (PID: 7876)
- Unicorn-23801.exe (PID: 8032)
- Unicorn-61024.exe (PID: 7424)
- Unicorn-12124.exe (PID: 8064)
- Unicorn-40521.exe (PID: 8072)
- Unicorn-16763.exe (PID: 8060)
- Unicorn-183.exe (PID: 4652)
- Unicorn-50012.exe (PID: 7416)
- Unicorn-4724.exe (PID: 8028)
- Unicorn-20219.exe (PID: 6676)
- Unicorn-24569.exe (PID: 2268)
- Unicorn-47080.exe (PID: 3008)
- Unicorn-10131.exe (PID: 7148)
- Unicorn-42249.exe (PID: 5756)
- Unicorn-21637.exe (PID: 4188)
- Unicorn-17361.exe (PID: 2552)
- Unicorn-55269.exe (PID: 7988)
- Unicorn-58591.exe (PID: 7976)
- Unicorn-63437.exe (PID: 8004)
- Unicorn-30381.exe (PID: 208)
- Unicorn-57838.exe (PID: 6300)
- Unicorn-32265.exe (PID: 8196)
- Unicorn-32087.exe (PID: 744)
- Unicorn-46525.exe (PID: 864)
- Unicorn-1630.exe (PID: 6584)
- Unicorn-16697.exe (PID: 8252)
- Unicorn-45285.exe (PID: 8260)
- Unicorn-32576.exe (PID: 8292)
- Unicorn-10515.exe (PID: 7964)
- Unicorn-19437.exe (PID: 8240)
- Unicorn-58450.exe (PID: 8212)
- Unicorn-8891.exe (PID: 8284)
- Unicorn-41563.exe (PID: 8300)
- Unicorn-23535.exe (PID: 5960)
- Unicorn-42560.exe (PID: 8144)
- Unicorn-12975.exe (PID: 8316)
- Unicorn-35507.exe (PID: 8864)
- Unicorn-34547.exe (PID: 8520)
- Unicorn-57153.exe (PID: 8468)
- Unicorn-58371.exe (PID: 9032)
- Unicorn-55571.exe (PID: 9016)
- Unicorn-23447.exe (PID: 8836)
- Unicorn-37501.exe (PID: 8808)
- Unicorn-10064.exe (PID: 8664)
- Unicorn-18041.exe (PID: 8688)
- Unicorn-14703.exe (PID: 8672)
- Unicorn-54797.exe (PID: 8712)
- Unicorn-22893.exe (PID: 8828)
- Unicorn-57603.exe (PID: 8844)
- Unicorn-28107.exe (PID: 9108)
- Unicorn-28321.exe (PID: 9196)
- Unicorn-44849.exe (PID: 9180)
- Unicorn-64864.exe (PID: 9120)
- Unicorn-3048.exe (PID: 9056)
- Unicorn-3603.exe (PID: 9100)
- Unicorn-48549.exe (PID: 6324)
- Unicorn-20537.exe (PID: 9144)
- Unicorn-4776.exe (PID: 7220)
- Unicorn-13115.exe (PID: 9220)
- Unicorn-13115.exe (PID: 9228)
- Unicorn-42000.exe (PID: 9268)
- Unicorn-1595.exe (PID: 9320)
- Unicorn-1787.exe (PID: 9276)
- Unicorn-16645.exe (PID: 7640)
- Unicorn-2960.exe (PID: 9444)
- Unicorn-48269.exe (PID: 9400)
- Unicorn-59560.exe (PID: 9428)
- Unicorn-3152.exe (PID: 9408)
- Unicorn-35633.exe (PID: 9464)
- Unicorn-6852.exe (PID: 9472)
- Unicorn-64221.exe (PID: 9480)
- Unicorn-58984.exe (PID: 9504)
- Unicorn-22019.exe (PID: 9512)
- Unicorn-13048.exe (PID: 9940)
- Unicorn-24341.exe (PID: 9544)
- Unicorn-9591.exe (PID: 9340)
- Unicorn-9239.exe (PID: 9980)
- Unicorn-32125.exe (PID: 9652)
- Unicorn-7430.exe (PID: 9692)
- Unicorn-37096.exe (PID: 9700)
- Unicorn-7811.exe (PID: 9708)
- Unicorn-45337.exe (PID: 9760)
- Unicorn-30537.exe (PID: 10052)
- Unicorn-63017.exe (PID: 10116)
- Unicorn-18093.exe (PID: 10072)
- Unicorn-17901.exe (PID: 10144)
- Unicorn-52109.exe (PID: 10152)
- Unicorn-25685.exe (PID: 9880)
- Unicorn-55736.exe (PID: 10180)
- Unicorn-52472.exe (PID: 10200)
- Unicorn-7686.exe (PID: 10136)
- Unicorn-55736.exe (PID: 10188)
- Unicorn-30654.exe (PID: 9820)
- Unicorn-50381.exe (PID: 9868)
- Unicorn-5627.exe (PID: 9908)
- Unicorn-1351.exe (PID: 9932)
- Unicorn-63904.exe (PID: 10208)
- Unicorn-21090.exe (PID: 10232)
- Unicorn-33342.exe (PID: 8096)
- Unicorn-22945.exe (PID: 7744)
- Unicorn-48373.exe (PID: 10460)
- Unicorn-11424.exe (PID: 10468)
- Unicorn-44865.exe (PID: 10576)
- Unicorn-21107.exe (PID: 10552)
- Unicorn-4886.exe (PID: 10128)
- Unicorn-50101.exe (PID: 10608)
- Unicorn-33002.exe (PID: 10616)
- Unicorn-708.exe (PID: 10680)
- Unicorn-56660.exe (PID: 10380)
- Unicorn-47745.exe (PID: 10916)
- Unicorn-4984.exe (PID: 10644)
- Unicorn-22451.exe (PID: 10888)
- Unicorn-30257.exe (PID: 10824)
- Unicorn-57501.exe (PID: 10840)
- Unicorn-42052.exe (PID: 10868)
- Unicorn-8108.exe (PID: 10560)
- Unicorn-11106.exe (PID: 10632)
- Unicorn-39695.exe (PID: 10672)
- Unicorn-25019.exe (PID: 10848)
- Unicorn-31217.exe (PID: 10972)
- Unicorn-6904.exe (PID: 11392)
- Unicorn-53365.exe (PID: 11408)
- Unicorn-41933.exe (PID: 10624)
- Unicorn-31985.exe (PID: 11308)
- Unicorn-11875.exe (PID: 11632)
- Unicorn-57449.exe (PID: 11576)
- Unicorn-10988.exe (PID: 11384)
- Unicorn-2903.exe (PID: 11624)
- Unicorn-30514.exe (PID: 11640)
- Unicorn-64657.exe (PID: 11320)
- Unicorn-23433.exe (PID: 11368)
- Unicorn-42976.exe (PID: 11340)
- Unicorn-2820.exe (PID: 11376)
- Unicorn-28285.exe (PID: 11680)
- Unicorn-32369.exe (PID: 11672)
- Unicorn-57065.exe (PID: 11688)
- Unicorn-64776.exe (PID: 11712)
- Unicorn-11756.exe (PID: 11728)
- Unicorn-57428.exe (PID: 11740)
- Unicorn-33115.exe (PID: 11652)
- Unicorn-55979.exe (PID: 11840)
- Unicorn-37148.exe (PID: 11868)
- Unicorn-39451.exe (PID: 11880)
- Unicorn-13100.exe (PID: 11796)
- Unicorn-61541.exe (PID: 12472)
- Unicorn-5103.exe (PID: 11924)
- Unicorn-5103.exe (PID: 11916)
- Unicorn-4172.exe (PID: 12540)
- Unicorn-41941.exe (PID: 12168)
- Unicorn-37155.exe (PID: 12212)
- Unicorn-35287.exe (PID: 10532)
- Unicorn-14239.exe (PID: 12624)
- Unicorn-33778.exe (PID: 2148)
- Unicorn-14239.exe (PID: 12640)
- Unicorn-52576.exe (PID: 11548)
- Unicorn-53373.exe (PID: 12492)
- Unicorn-27503.exe (PID: 12264)
- Unicorn-28986.exe (PID: 12224)
- Unicorn-40663.exe (PID: 4736)
- Unicorn-28055.exe (PID: 5624)
- Unicorn-28293.exe (PID: 11952)
- Unicorn-27503.exe (PID: 12256)
- Unicorn-16542.exe (PID: 7452)
- Unicorn-26438.exe (PID: 12008)
- Unicorn-42828.exe (PID: 5024)
- Unicorn-40663.exe (PID: 11856)
- Unicorn-13684.exe (PID: 12608)
- Unicorn-44437.exe (PID: 12292)
- Unicorn-31031.exe (PID: 12364)
- Unicorn-46667.exe (PID: 4572)
- Unicorn-24793.exe (PID: 12356)
- Unicorn-50367.exe (PID: 12388)
- Unicorn-36631.exe (PID: 12380)
- Unicorn-64283.exe (PID: 12564)
- Unicorn-16617.exe (PID: 12452)
- Unicorn-12695.exe (PID: 12132)
- Unicorn-446.exe (PID: 13224)
- Unicorn-46388.exe (PID: 14264)
- Unicorn-5006.exe (PID: 13112)
- Unicorn-61407.exe (PID: 14256)
- Unicorn-12013.exe (PID: 13148)
- Unicorn-29741.exe (PID: 13992)
- Unicorn-51209.exe (PID: 13000)
- Unicorn-15251.exe (PID: 12984)
- Unicorn-13108.exe (PID: 12896)
- Unicorn-28986.exe (PID: 12884)
- Unicorn-53927.exe (PID: 13988)
- Unicorn-51593.exe (PID: 13252)
- Unicorn-51401.exe (PID: 6876)
- Unicorn-7784.exe (PID: 6572)
- Unicorn-61240.exe (PID: 13396)
- Unicorn-61240.exe (PID: 13412)
- Unicorn-63875.exe (PID: 13372)
- Unicorn-9438.exe (PID: 13316)
- Unicorn-36927.exe (PID: 12164)
- Unicorn-46741.exe (PID: 13068)
- Unicorn-50140.exe (PID: 13440)
- Unicorn-11920.exe (PID: 15144)
- Unicorn-65013.exe (PID: 15180)
- Unicorn-3560.exe (PID: 15200)
- Unicorn-27503.exe (PID: 12248)
- Unicorn-59853.exe (PID: 13232)
- Unicorn-5006.exe (PID: 13104)
- Unicorn-39703.exe (PID: 13284)
- Unicorn-41527.exe (PID: 10728)
- Unicorn-49948.exe (PID: 13468)
- Unicorn-40960.exe (PID: 13460)
- Unicorn-46964.exe (PID: 14040)
Reads the computer name
- Unicorn-48512.exe (PID: 8176)
- Unicorn-9036.exe (PID: 7504)
- Unicorn-49768.exe (PID: 7356)
- Unicorn-19918.exe (PID: 7476)
- Unicorn-16414.exe (PID: 1056)
- Unicorn-31459.exe (PID: 1184)
- Unicorn-39519.exe (PID: 1196)
- Unicorn-12264.exe (PID: 896)
- Unicorn-48393.exe (PID: 4408)
- Unicorn-17566.exe (PID: 5608)
- Unicorn-2124.exe (PID: 2088)
- Unicorn-44117.exe (PID: 672)
- Unicorn-35186.exe (PID: 920)
- Unicorn-39518.exe (PID: 4272)
- Unicorn-31865.exe (PID: 5204)
- Unicorn-18718.exe (PID: 7184)
- Unicorn-8512.exe (PID: 3304)
- Unicorn-32419.exe (PID: 5124)
- Unicorn-30795.exe (PID: 2960)
- Unicorn-50396.exe (PID: 4428)
- Unicorn-8237.exe (PID: 4436)
- Unicorn-46577.exe (PID: 3676)
- Unicorn-1268.exe (PID: 4268)
- Unicorn-54916.exe (PID: 7580)
- Unicorn-5928.exe (PID: 7832)
- Unicorn-26733.exe (PID: 7752)
- Unicorn-53083.exe (PID: 7928)
- Unicorn-47708.exe (PID: 7792)
- Unicorn-54894.exe (PID: 5548)
- Unicorn-51621.exe (PID: 7880)
- Unicorn-61024.exe (PID: 7424)
- Unicorn-10567.exe (PID: 7756)
- Unicorn-12124.exe (PID: 8064)
- Unicorn-20219.exe (PID: 6676)
- Unicorn-16763.exe (PID: 8060)
- Unicorn-38143.exe (PID: 2096)
- Unicorn-21637.exe (PID: 4188)
- Unicorn-65471.exe (PID: 2392)
- Unicorn-42249.exe (PID: 5756)
- Unicorn-19437.exe (PID: 8240)
- Unicorn-63437.exe (PID: 8004)
- Unicorn-183.exe (PID: 4652)
- Unicorn-42560.exe (PID: 8144)
- Unicorn-55269.exe (PID: 7988)
- Unicorn-35507.exe (PID: 8864)
- Unicorn-28107.exe (PID: 9108)
- Unicorn-8891.exe (PID: 8284)
- Unicorn-41371.exe (PID: 8460)
- Unicorn-23535.exe (PID: 5960)
- Unicorn-36816.exe (PID: 8552)
- Unicorn-56504.exe (PID: 8816)
- Unicorn-15062.exe (PID: 8136)
- Unicorn-57869.exe (PID: 4608)
- Unicorn-3048.exe (PID: 9056)
- Unicorn-42000.exe (PID: 9268)
- Unicorn-53453.exe (PID: 8268)
- Unicorn-46485.exe (PID: 7952)
- Unicorn-16645.exe (PID: 7640)
- Unicorn-10536.exe (PID: 4068)
- Unicorn-23447.exe (PID: 8836)
- Unicorn-13048.exe (PID: 9940)
- Unicorn-38705.exe (PID: 10028)
- Unicorn-21090.exe (PID: 10232)
- Unicorn-30537.exe (PID: 10052)
- Unicorn-57153.exe (PID: 8468)
- Unicorn-11652.exe (PID: 8204)
- Unicorn-13411.exe (PID: 9716)
- Unicorn-8720.exe (PID: 8652)
- Unicorn-20374.exe (PID: 9384)
- Unicorn-14252.exe (PID: 9364)
- Unicorn-37059.exe (PID: 10372)
- Unicorn-57603.exe (PID: 8844)
- Unicorn-62716.exe (PID: 10700)
- Unicorn-10064.exe (PID: 8664)
- Unicorn-42052.exe (PID: 10868)
- Unicorn-53365.exe (PID: 11408)
- Unicorn-24050.exe (PID: 7708)
- Unicorn-49784.exe (PID: 9800)
- Unicorn-12975.exe (PID: 8308)
- Unicorn-2820.exe (PID: 11376)
- Unicorn-11424.exe (PID: 10468)
- Unicorn-55979.exe (PID: 11840)
- Unicorn-3676.exe (PID: 6244)
- Unicorn-64864.exe (PID: 9120)
- Unicorn-42976.exe (PID: 11340)
- Unicorn-28321.exe (PID: 9196)
- Unicorn-30811.exe (PID: 10832)
- Unicorn-61541.exe (PID: 12472)
- Unicorn-13115.exe (PID: 9228)
- Unicorn-6852.exe (PID: 9472)
- Unicorn-8693.exe (PID: 10396)
- Unicorn-50012.exe (PID: 7416)
- Unicorn-1578.exe (PID: 7328)
- Unicorn-52109.exe (PID: 10152)
- Unicorn-1787.exe (PID: 9276)
- Unicorn-18093.exe (PID: 10072)
- Unicorn-45483.exe (PID: 8544)
- Unicorn-63017.exe (PID: 10116)
- Unicorn-46409.exe (PID: 12092)
- Unicorn-7430.exe (PID: 9692)
- Unicorn-39939.exe (PID: 11012)
- Unicorn-59560.exe (PID: 9428)
- Unicorn-46388.exe (PID: 14272)
- Unicorn-46388.exe (PID: 14264)
- Unicorn-40663.exe (PID: 4736)
- Unicorn-24341.exe (PID: 9544)
- Unicorn-50381.exe (PID: 9868)
- Unicorn-38969.exe (PID: 12240)
- Unicorn-26850.exe (PID: 9236)
- Unicorn-3560.exe (PID: 15200)
- Unicorn-32317.exe (PID: 9600)
Create files in a temporary directory
- 1 (1267).exe (PID: 7540)
- Unicorn-48512.exe (PID: 8176)
- Unicorn-9036.exe (PID: 7504)
- Unicorn-20433.exe (PID: 4448)
- Unicorn-33541.exe (PID: 2140)
- Unicorn-19242.exe (PID: 5072)
- Unicorn-19918.exe (PID: 7476)
- Unicorn-12264.exe (PID: 896)
- Unicorn-23291.exe (PID: 1660)
- Unicorn-16414.exe (PID: 1056)
- Unicorn-49768.exe (PID: 7356)
- Unicorn-48393.exe (PID: 4408)
- Unicorn-39519.exe (PID: 1196)
- Unicorn-31459.exe (PID: 1184)
- Unicorn-35186.exe (PID: 920)
- Unicorn-32419.exe (PID: 5124)
- Unicorn-39518.exe (PID: 4272)
- Unicorn-31865.exe (PID: 5204)
- Unicorn-8512.exe (PID: 3304)
- Unicorn-18718.exe (PID: 7184)
- Unicorn-30795.exe (PID: 2960)
- Unicorn-8237.exe (PID: 4436)
- Unicorn-9820.exe (PID: 4976)
- Unicorn-32278.exe (PID: 7256)
- Unicorn-2124.exe (PID: 2088)
- Unicorn-1076.exe (PID: 7048)
- Unicorn-62264.exe (PID: 7312)
- Unicorn-17566.exe (PID: 5608)
- Unicorn-54916.exe (PID: 7580)
- Unicorn-34709.exe (PID: 2560)
- Unicorn-53083.exe (PID: 7928)
- Unicorn-26733.exe (PID: 7752)
- Unicorn-44117.exe (PID: 672)
- Unicorn-47708.exe (PID: 7792)
- Unicorn-54894.exe (PID: 5548)
- Unicorn-61024.exe (PID: 7424)
- Unicorn-40521.exe (PID: 8072)
- Unicorn-51621.exe (PID: 7880)
- Unicorn-10567.exe (PID: 7756)
- Unicorn-6120.exe (PID: 5404)
- Unicorn-38985.exe (PID: 7788)
- Unicorn-45565.exe (PID: 6964)
- Unicorn-5928.exe (PID: 7832)
- Unicorn-16763.exe (PID: 8060)
- Unicorn-57796.exe (PID: 7948)
- Unicorn-4724.exe (PID: 8028)
- Unicorn-41097.exe (PID: 632)
- Unicorn-23801.exe (PID: 8032)
- Unicorn-24569.exe (PID: 2268)
- Unicorn-59384.exe (PID: 1452)
- Unicorn-50396.exe (PID: 4428)
- Unicorn-38143.exe (PID: 2096)
- Unicorn-1268.exe (PID: 4268)
- Unicorn-42249.exe (PID: 5756)
- Unicorn-183.exe (PID: 4652)
- Unicorn-19437.exe (PID: 8240)
- Unicorn-55269.exe (PID: 7988)
- Unicorn-58450.exe (PID: 8212)
- Unicorn-42560.exe (PID: 8144)
- Unicorn-57838.exe (PID: 6300)
- Unicorn-2591.exe (PID: 7808)
- Unicorn-65471.exe (PID: 2392)
- Unicorn-15943.exe (PID: 7876)
- Unicorn-55571.exe (PID: 9016)
- Unicorn-58371.exe (PID: 9032)
- Unicorn-28107.exe (PID: 9108)
- Unicorn-35507.exe (PID: 8864)
- Unicorn-8891.exe (PID: 8284)
- Unicorn-31703.exe (PID: 5364)
- Unicorn-15506.exe (PID: 6752)
- Unicorn-41371.exe (PID: 8460)
- Unicorn-38165.exe (PID: 6080)
- Unicorn-36816.exe (PID: 8552)
- Unicorn-58591.exe (PID: 7976)
- Unicorn-32265.exe (PID: 8196)
- Unicorn-46525.exe (PID: 864)
- Unicorn-23535.exe (PID: 5960)
- Unicorn-10536.exe (PID: 4068)
- Unicorn-56504.exe (PID: 8816)
- Unicorn-18373.exe (PID: 1852)
- Unicorn-30381.exe (PID: 208)
- Unicorn-17361.exe (PID: 2552)
- Unicorn-57869.exe (PID: 4608)
- Unicorn-3048.exe (PID: 9056)
- Unicorn-42825.exe (PID: 2564)
- Unicorn-12975.exe (PID: 8316)
- Unicorn-42000.exe (PID: 9268)
- Unicorn-23447.exe (PID: 8836)
- Unicorn-53453.exe (PID: 8268)
- Unicorn-33747.exe (PID: 7768)
- Unicorn-46485.exe (PID: 7952)
- Unicorn-10131.exe (PID: 7148)
- Unicorn-46577.exe (PID: 3676)
- Unicorn-21637.exe (PID: 4188)
- Unicorn-44849.exe (PID: 9180)
- Unicorn-45285.exe (PID: 8260)
- Unicorn-34547.exe (PID: 8520)
- Unicorn-54797.exe (PID: 8712)
- Unicorn-13048.exe (PID: 9940)
- Unicorn-9239.exe (PID: 9980)
- Unicorn-41563.exe (PID: 8300)
- Unicorn-1630.exe (PID: 6584)
- Unicorn-16645.exe (PID: 7636)
- Unicorn-12124.exe (PID: 8064)
- Unicorn-38705.exe (PID: 10028)
- Unicorn-16645.exe (PID: 7640)
- Unicorn-48549.exe (PID: 6324)
- Unicorn-37501.exe (PID: 8636)
- Unicorn-32087.exe (PID: 744)
- Unicorn-21090.exe (PID: 10232)
- Unicorn-32509.exe (PID: 9556)
- Unicorn-13411.exe (PID: 9716)
- Unicorn-8720.exe (PID: 8652)
- Unicorn-30537.exe (PID: 10052)
- Unicorn-57153.exe (PID: 8468)
- Unicorn-18402.exe (PID: 9812)
- Unicorn-14252.exe (PID: 9364)
- Unicorn-47080.exe (PID: 3008)
- Unicorn-20374.exe (PID: 9384)
- Unicorn-61548.exe (PID: 7352)
- Unicorn-15825.exe (PID: 8076)
- Unicorn-9694.exe (PID: 8080)
- Unicorn-37501.exe (PID: 8808)
- Unicorn-37059.exe (PID: 10372)
- Unicorn-3603.exe (PID: 9100)
- Unicorn-62716.exe (PID: 10700)
- Unicorn-61237.exe (PID: 8488)
- Unicorn-10064.exe (PID: 8664)
- Unicorn-14703.exe (PID: 8672)
- Unicorn-22893.exe (PID: 8828)
- Unicorn-12975.exe (PID: 8308)
- Unicorn-2820.exe (PID: 11376)
- Unicorn-23968.exe (PID: 11664)
- Unicorn-49784.exe (PID: 9800)
- Unicorn-34304.exe (PID: 8680)
- Unicorn-42052.exe (PID: 10868)
- Unicorn-32576.exe (PID: 8292)
- Unicorn-64864.exe (PID: 9120)
- Unicorn-42976.exe (PID: 11340)
- Unicorn-22451.exe (PID: 10888)
- Unicorn-16697.exe (PID: 8252)
- Unicorn-5103.exe (PID: 11916)
- Unicorn-55979.exe (PID: 11840)
- Unicorn-10515.exe (PID: 7964)
- Unicorn-15062.exe (PID: 8136)
- Unicorn-9591.exe (PID: 9340)
- Unicorn-28321.exe (PID: 9196)
- Unicorn-30811.exe (PID: 10832)
- Unicorn-4172.exe (PID: 12540)
- Unicorn-11652.exe (PID: 8204)
- Unicorn-57603.exe (PID: 8844)
- Unicorn-58984.exe (PID: 9504)
- Unicorn-53373.exe (PID: 12492)
- Unicorn-6904.exe (PID: 11392)
- Unicorn-8693.exe (PID: 10396)
- Unicorn-46409.exe (PID: 12092)
- Unicorn-7430.exe (PID: 9692)
- Unicorn-1787.exe (PID: 9276)
- Unicorn-1578.exe (PID: 7328)
- Unicorn-60495.exe (PID: 10404)
- Unicorn-50012.exe (PID: 7416)
- Unicorn-61407.exe (PID: 14256)
- Unicorn-30654.exe (PID: 9820)
- Unicorn-6852.exe (PID: 9472)
- Unicorn-23241.exe (PID: 11416)
- Unicorn-30449.exe (PID: 10772)
- Unicorn-44437.exe (PID: 12292)
- Unicorn-40663.exe (PID: 4736)
- Unicorn-4024.exe (PID: 10568)
- Unicorn-5103.exe (PID: 11924)
- Unicorn-11920.exe (PID: 15144)
Creates files or folders in the user directory
- WerFault.exe (PID: 11228)
Reads the software policy settings
- slui.exe (PID: 7660)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
645
Monitored processes
498
Malicious processes
77
Suspicious processes
70
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 208 | C:\Users\admin\AppData\Local\Temp\Unicorn-30381.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30381.exe | Unicorn-26733.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 632 | C:\Users\admin\AppData\Local\Temp\Unicorn-41097.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-41097.exe | Unicorn-1268.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 672 | C:\Users\admin\AppData\Local\Temp\Unicorn-44117.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-44117.exe | Unicorn-12264.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 744 | C:\Users\admin\AppData\Local\Temp\Unicorn-32087.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-32087.exe | Unicorn-32419.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 864 | C:\Users\admin\AppData\Local\Temp\Unicorn-46525.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-46525.exe | Unicorn-18373.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 896 | C:\Users\admin\AppData\Local\Temp\Unicorn-12264.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-12264.exe | Unicorn-19242.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 920 | C:\Users\admin\AppData\Local\Temp\Unicorn-35186.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-35186.exe | 1 (1267).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1056 | C:\Users\admin\AppData\Local\Temp\Unicorn-16414.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-16414.exe | Unicorn-11008.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1184 | C:\Users\admin\AppData\Local\Temp\Unicorn-31459.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-31459.exe | Unicorn-9036.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1196 | C:\Users\admin\AppData\Local\Temp\Unicorn-39519.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-39519.exe | 1 (1267).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
10 602
Read events
10 602
Write events
0
Delete events
0
Modification events
Executable files
712
Suspicious files
3
Text files
1
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7540 | 1 (1267).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-48512.exe | executable | |
MD5:DF99AB76A7E2140C529FEBD689C8DAFC | SHA256:25FC37A2D92A55C8F55D6F62B9741248FA3127DD2EB7A8D1921DC2D555A9F4C8 | |||
| 7540 | 1 (1267).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-57941.exe | executable | |
MD5:4AC2F3AAFCCB41ED714A886B07AF4089 | SHA256:E5EC869FA31DB513F717CA8AFC5B921EC69E6894B9C241A7371F164D0E29C942 | |||
| 7540 | 1 (1267).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-19242.exe | executable | |
MD5:57E423035D9EC4A1922D4E888B113AC9 | SHA256:C6B79788AA52DBC92D6AA8B0709103F41D94FD2E230972AB0D8075AF21FF7BB2 | |||
| 8176 | Unicorn-48512.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-33541.exe | executable | |
MD5:A0BD6C7761121959A457E7970AAE2F06 | SHA256:CFB54A842EC3EE83D2A7699B331A01B303D0ACBD32E6C0427369CBAC621BAA2A | |||
| 2140 | Unicorn-33541.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-39518.exe | executable | |
MD5:193BD34D915BFC11170E0484895AA704 | SHA256:28DC508B9864072F709EA62686A7574D8A6756D65DDC8CE137B62D200F60D55B | |||
| 2140 | Unicorn-33541.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-20433.exe | executable | |
MD5:2A22AAFBCE7453C111CE54456B18EAED | SHA256:F0B682E75C11666C6E70B306EDCCB5AC462E5CBFFA8080C7E551CC7CEA873BFE | |||
| 7540 | 1 (1267).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-39519.exe | executable | |
MD5:E8CFB7B9B1CA3A2A71B4AE43F007038E | SHA256:4401EE11768140B75B871C97951EE4BEC72EE4752D173AAD92B04DCC8F19EC8C | |||
| 7504 | Unicorn-9036.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-28793.exe | executable | |
MD5:BCE24EEC6B16192CCA3E750E54E3F1C0 | SHA256:E52D41F9F46CDD5DC8ED0FF1173ED3AB4D82132F92DF7DCD473801605D6CF309 | |||
| 7504 | Unicorn-9036.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-31459.exe | executable | |
MD5:1CA005FA127A4F0B10E86AB5AD56BC00 | SHA256:ECE1CAC12C30F22B374BE87844996D363C4B58E277D04FB7F962D1CFD1063779 | |||
| 7356 | Unicorn-49768.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2124.exe | executable | |
MD5:E96CD9C26496FA6C32A867385E962C6F | SHA256:39D4905DEF18B08E16627731274730F7DD6323F192F13EF2C6F4A1263912EEEE | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
4
TCP/UDP connections
18
DNS requests
12
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
7196 | SIHClient.exe | GET | 200 | 2.23.181.156:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
7196 | SIHClient.exe | GET | 200 | 2.23.181.156:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
7968 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 4.231.128.59:443 | — | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
2104 | svchost.exe | 4.231.128.59:443 | — | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
— | — | 192.168.100.255:138 | — | — | — | whitelisted |
2112 | svchost.exe | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.160.128:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
7968 | backgroundTaskHost.exe | 20.223.35.26:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
7968 | backgroundTaskHost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
2104 | svchost.exe | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |
activation-v2.sls.microsoft.com |
| whitelisted |
nexusrules.officeapps.live.com |
| whitelisted |