| File name: | 1 (515) |
| Full analysis: | https://app.any.run/tasks/ca590559-ca80-46bb-bffa-f14591768c07 |
| Verdict: | Malicious activity |
| Analysis date: | March 25, 2025, 00:52:13 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 24C8EBFC9A3EA498CF120316497C4890 |
| SHA1: | 40594E596400F55E38921439CA736A97C101A720 |
| SHA256: | F0D9D91CA67DC1885C97B8EB7CB270AF4A6A72E2218F3E4C17CC581A8B7E9DE8 |
| SSDEEP: | 6144:9748ng9D3Dc4A5LjpGeEHQjx5wPq5p8GBf/WT1OpTk/8SwjwpyAvEhOaeou6s2+a:90Om84A5/pZYP0+afOT1Opax4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- 1 (515).exe (PID: 2568)
- Unicorn-59747.exe (PID: 6712)
- Unicorn-5129.exe (PID: 1052)
- Unicorn-13785.exe (PID: 4696)
- Unicorn-48797.exe (PID: 5512)
- Unicorn-48797.exe (PID: 6800)
- Unicorn-11142.exe (PID: 5720)
- Unicorn-53206.exe (PID: 8064)
- Unicorn-46237.exe (PID: 8072)
- Unicorn-22692.exe (PID: 8112)
- Unicorn-63345.exe (PID: 8140)
- Unicorn-5552.exe (PID: 7184)
- Unicorn-63450.exe (PID: 8080)
- Unicorn-53402.exe (PID: 7228)
- Unicorn-3673.exe (PID: 8132)
- Unicorn-29674.exe (PID: 7036)
- Unicorn-15939.exe (PID: 2284)
- Unicorn-25856.exe (PID: 7284)
- Unicorn-46605.exe (PID: 7380)
- Unicorn-25066.exe (PID: 7344)
- Unicorn-16183.exe (PID: 7368)
- Unicorn-35669.exe (PID: 7396)
- Unicorn-48794.exe (PID: 5324)
- Unicorn-35669.exe (PID: 7384)
- Unicorn-31197.exe (PID: 7356)
- Unicorn-38557.exe (PID: 8156)
- Unicorn-38557.exe (PID: 8148)
- Unicorn-5995.exe (PID: 7488)
- Unicorn-53402.exe (PID: 728)
- Unicorn-35805.exe (PID: 7204)
- Unicorn-27101.exe (PID: 7300)
- Unicorn-49171.exe (PID: 7520)
- Unicorn-22720.exe (PID: 7564)
- Unicorn-54215.exe (PID: 1388)
- Unicorn-63904.exe (PID: 2420)
- Unicorn-33946.exe (PID: 1568)
- Unicorn-62382.exe (PID: 7596)
- Unicorn-63904.exe (PID: 2268)
- Unicorn-7479.exe (PID: 6752)
- Unicorn-3935.exe (PID: 4464)
- Unicorn-60846.exe (PID: 2040)
- Unicorn-40739.exe (PID: 7624)
- Unicorn-48647.exe (PID: 7600)
- Unicorn-59524.exe (PID: 7648)
- Unicorn-59244.exe (PID: 7676)
- Unicorn-59244.exe (PID: 7668)
- Unicorn-40135.exe (PID: 7732)
- Unicorn-2560.exe (PID: 7716)
- Unicorn-59244.exe (PID: 7684)
- Unicorn-37105.exe (PID: 7748)
- Unicorn-24743.exe (PID: 7772)
- Unicorn-30609.exe (PID: 7780)
- Unicorn-23369.exe (PID: 7756)
- Unicorn-21943.exe (PID: 7808)
- Unicorn-59244.exe (PID: 7692)
- Unicorn-59244.exe (PID: 7700)
- Unicorn-62894.exe (PID: 7524)
- Unicorn-62894.exe (PID: 7860)
- Unicorn-65376.exe (PID: 7940)
- Unicorn-53664.exe (PID: 7984)
- Unicorn-3840.exe (PID: 8008)
- Unicorn-22183.exe (PID: 8044)
- Unicorn-26778.exe (PID: 7932)
- Unicorn-38179.exe (PID: 7976)
- Unicorn-23706.exe (PID: 8016)
- Unicorn-52142.exe (PID: 8028)
- Unicorn-39802.exe (PID: 7880)
- Unicorn-47681.exe (PID: 6388)
- Unicorn-11417.exe (PID: 4776)
- Unicorn-30311.exe (PID: 4448)
- Unicorn-18905.exe (PID: 1056)
- Unicorn-63965.exe (PID: 6708)
- Unicorn-26851.exe (PID: 4408)
- Unicorn-44100.exe (PID: 2140)
- Unicorn-35232.exe (PID: 616)
- Unicorn-54977.exe (PID: 6436)
- Unicorn-61880.exe (PID: 1300)
- Unicorn-19171.exe (PID: 6228)
- Unicorn-9881.exe (PID: 4172)
- Unicorn-89.exe (PID: 680)
- Unicorn-2215.exe (PID: 7360)
- Unicorn-30572.exe (PID: 8268)
- Unicorn-3161.exe (PID: 8232)
- Unicorn-48340.exe (PID: 8200)
- Unicorn-26989.exe (PID: 8304)
- Unicorn-30209.exe (PID: 8340)
- Unicorn-19559.exe (PID: 8260)
- Unicorn-40925.exe (PID: 8412)
- Unicorn-44573.exe (PID: 8444)
- Unicorn-5346.exe (PID: 8364)
- Unicorn-61594.exe (PID: 8500)
- Unicorn-24707.exe (PID: 8436)
- Unicorn-61594.exe (PID: 8508)
- Unicorn-40925.exe (PID: 8404)
- Unicorn-26016.exe (PID: 8484)
- Unicorn-61594.exe (PID: 8516)
- Unicorn-14217.exe (PID: 8588)
- Unicorn-28114.exe (PID: 8596)
- Unicorn-12169.exe (PID: 8548)
- Unicorn-6505.exe (PID: 8620)
- Unicorn-28114.exe (PID: 8572)
- Unicorn-47715.exe (PID: 8612)
- Unicorn-28114.exe (PID: 8580)
- Unicorn-30226.exe (PID: 8652)
- Unicorn-13479.exe (PID: 8644)
- Unicorn-47715.exe (PID: 8604)
- Unicorn-53761.exe (PID: 8800)
- Unicorn-40300.exe (PID: 8760)
- Unicorn-10679.exe (PID: 8636)
- Unicorn-5346.exe (PID: 8356)
- Unicorn-42324.exe (PID: 8844)
- Unicorn-8571.exe (PID: 8780)
- Unicorn-23904.exe (PID: 8388)
- Unicorn-63130.exe (PID: 8468)
- Unicorn-23331.exe (PID: 8900)
- Unicorn-7321.exe (PID: 8836)
- Unicorn-18898.exe (PID: 8864)
- Unicorn-64212.exe (PID: 8820)
- Unicorn-12480.exe (PID: 7948)
- Unicorn-5209.exe (PID: 8972)
- Unicorn-62085.exe (PID: 9008)
- Unicorn-26315.exe (PID: 8996)
- Unicorn-40527.exe (PID: 8856)
- Unicorn-43284.exe (PID: 9084)
- Unicorn-11056.exe (PID: 9036)
- Unicorn-61530.exe (PID: 9076)
- Unicorn-7705.exe (PID: 9160)
- Unicorn-6610.exe (PID: 9176)
- Unicorn-29761.exe (PID: 9152)
- Unicorn-62085.exe (PID: 9004)
- Unicorn-59034.exe (PID: 6028)
- Unicorn-42240.exe (PID: 9136)
- Unicorn-23683.exe (PID: 9096)
- Unicorn-52625.exe (PID: 8916)
- Unicorn-52125.exe (PID: 9324)
- Unicorn-36291.exe (PID: 9344)
- Unicorn-57089.exe (PID: 1760)
- Unicorn-26093.exe (PID: 9440)
- Unicorn-5913.exe (PID: 9408)
- Unicorn-39837.exe (PID: 9468)
- Unicorn-3682.exe (PID: 9496)
- Unicorn-59162.exe (PID: 9532)
- Unicorn-59162.exe (PID: 9540)
- Unicorn-21507.exe (PID: 9516)
- Unicorn-46312.exe (PID: 9576)
- Unicorn-7683.exe (PID: 9596)
- Unicorn-8643.exe (PID: 9612)
- Unicorn-42266.exe (PID: 9676)
- Unicorn-58436.exe (PID: 9704)
- Unicorn-50787.exe (PID: 9648)
- Unicorn-6330.exe (PID: 9724)
- Unicorn-44050.exe (PID: 9788)
- Unicorn-13724.exe (PID: 9752)
- Unicorn-10600.exe (PID: 9776)
- Unicorn-15680.exe (PID: 9820)
- Unicorn-49251.exe (PID: 9812)
- Unicorn-53252.exe (PID: 9880)
- Unicorn-64865.exe (PID: 9900)
- Unicorn-20199.exe (PID: 9852)
- Unicorn-11215.exe (PID: 10008)
- Unicorn-46148.exe (PID: 9956)
- Unicorn-41571.exe (PID: 9948)
- Unicorn-1122.exe (PID: 9980)
- Unicorn-48906.exe (PID: 10060)
- Unicorn-19488.exe (PID: 10048)
- Unicorn-38548.exe (PID: 10024)
Executable content was dropped or overwritten
- 1 (515).exe (PID: 2568)
- Unicorn-59747.exe (PID: 6712)
- Unicorn-13785.exe (PID: 4696)
- Unicorn-5552.exe (PID: 7184)
- Unicorn-48797.exe (PID: 6800)
- Unicorn-48797.exe (PID: 5512)
- Unicorn-5129.exe (PID: 1052)
- Unicorn-63450.exe (PID: 8080)
- Unicorn-22692.exe (PID: 8112)
- Unicorn-38557.exe (PID: 8148)
- Unicorn-53402.exe (PID: 728)
- Unicorn-53402.exe (PID: 7228)
- Unicorn-15939.exe (PID: 2284)
- Unicorn-46237.exe (PID: 8072)
- Unicorn-29674.exe (PID: 7036)
- Unicorn-25856.exe (PID: 7284)
- Unicorn-46605.exe (PID: 7380)
- Unicorn-35669.exe (PID: 7384)
- Unicorn-48794.exe (PID: 5324)
- Unicorn-11142.exe (PID: 5720)
- Unicorn-63345.exe (PID: 8140)
- Unicorn-53206.exe (PID: 8064)
- Unicorn-5995.exe (PID: 7488)
- Unicorn-49171.exe (PID: 7520)
- Unicorn-27101.exe (PID: 7300)
- Unicorn-22720.exe (PID: 7564)
- Unicorn-54215.exe (PID: 1388)
- Unicorn-63904.exe (PID: 2420)
- Unicorn-63904.exe (PID: 2268)
- Unicorn-3673.exe (PID: 8132)
- Unicorn-35805.exe (PID: 7204)
- Unicorn-33946.exe (PID: 1568)
- Unicorn-62382.exe (PID: 7596)
- Unicorn-3935.exe (PID: 4464)
- Unicorn-48647.exe (PID: 7600)
- Unicorn-7479.exe (PID: 6752)
- Unicorn-60846.exe (PID: 2040)
- Unicorn-40739.exe (PID: 7624)
- Unicorn-59244.exe (PID: 7676)
- Unicorn-59244.exe (PID: 7668)
- Unicorn-24743.exe (PID: 7772)
- Unicorn-59524.exe (PID: 7648)
- Unicorn-25066.exe (PID: 7344)
- Unicorn-37105.exe (PID: 7748)
- Unicorn-59244.exe (PID: 7692)
- Unicorn-59244.exe (PID: 7684)
- Unicorn-21943.exe (PID: 7808)
- Unicorn-30609.exe (PID: 7780)
- Unicorn-62894.exe (PID: 7524)
- Unicorn-35669.exe (PID: 7396)
- Unicorn-31197.exe (PID: 7356)
- Unicorn-62894.exe (PID: 7860)
- Unicorn-12480.exe (PID: 7948)
- Unicorn-38557.exe (PID: 8156)
- Unicorn-65376.exe (PID: 7940)
- Unicorn-3840.exe (PID: 8008)
- Unicorn-38179.exe (PID: 7976)
- Unicorn-23706.exe (PID: 8016)
- Unicorn-53664.exe (PID: 7984)
- Unicorn-22183.exe (PID: 8044)
- Unicorn-26778.exe (PID: 7932)
- Unicorn-39802.exe (PID: 7880)
- Unicorn-47681.exe (PID: 6388)
- Unicorn-57089.exe (PID: 1760)
- Unicorn-11417.exe (PID: 4776)
- Unicorn-30311.exe (PID: 4448)
- Unicorn-18905.exe (PID: 1056)
- Unicorn-63965.exe (PID: 6708)
- Unicorn-44100.exe (PID: 2140)
- Unicorn-35232.exe (PID: 616)
- Unicorn-54977.exe (PID: 6436)
- Unicorn-19171.exe (PID: 6228)
- Unicorn-61880.exe (PID: 1300)
- Unicorn-2215.exe (PID: 7360)
- Unicorn-89.exe (PID: 680)
- Unicorn-48340.exe (PID: 8200)
- Unicorn-9881.exe (PID: 4172)
- Unicorn-30572.exe (PID: 8268)
- Unicorn-3161.exe (PID: 8232)
- Unicorn-30209.exe (PID: 8340)
- Unicorn-19559.exe (PID: 8260)
- Unicorn-26989.exe (PID: 8304)
- Unicorn-44573.exe (PID: 8444)
- Unicorn-5346.exe (PID: 8364)
- Unicorn-40925.exe (PID: 8412)
- Unicorn-40925.exe (PID: 8404)
- Unicorn-5346.exe (PID: 8356)
- Unicorn-24707.exe (PID: 8436)
- Unicorn-61594.exe (PID: 8508)
- Unicorn-2560.exe (PID: 7716)
- Unicorn-40135.exe (PID: 7732)
- Unicorn-26016.exe (PID: 8484)
- Unicorn-61594.exe (PID: 8516)
- Unicorn-12169.exe (PID: 8548)
- Unicorn-14217.exe (PID: 8588)
- Unicorn-28114.exe (PID: 8572)
- Unicorn-6505.exe (PID: 8620)
- Unicorn-23369.exe (PID: 7756)
- Unicorn-28114.exe (PID: 8580)
- Unicorn-30226.exe (PID: 8652)
- Unicorn-47715.exe (PID: 8612)
- Unicorn-16183.exe (PID: 7368)
- Unicorn-13479.exe (PID: 8644)
- Unicorn-47715.exe (PID: 8604)
- Unicorn-53761.exe (PID: 8800)
- Unicorn-40300.exe (PID: 8760)
- Unicorn-10679.exe (PID: 8636)
- Unicorn-63130.exe (PID: 8468)
- Unicorn-42324.exe (PID: 8844)
- Unicorn-64212.exe (PID: 8820)
- Unicorn-8571.exe (PID: 8780)
- Unicorn-18535.exe (PID: 8956)
- Unicorn-23331.exe (PID: 8900)
- Unicorn-26315.exe (PID: 8996)
- Unicorn-62085.exe (PID: 9008)
- Unicorn-40527.exe (PID: 8856)
- Unicorn-43284.exe (PID: 9084)
- Unicorn-11056.exe (PID: 9036)
- Unicorn-29761.exe (PID: 9152)
- Unicorn-62085.exe (PID: 9004)
- Unicorn-7705.exe (PID: 9160)
- Unicorn-42240.exe (PID: 9136)
- Unicorn-52142.exe (PID: 8028)
- Unicorn-59034.exe (PID: 6028)
- Unicorn-23683.exe (PID: 9096)
- Unicorn-52625.exe (PID: 8916)
- Unicorn-36291.exe (PID: 9344)
- Unicorn-7321.exe (PID: 8836)
- Unicorn-52125.exe (PID: 9324)
- Unicorn-26093.exe (PID: 9440)
- Unicorn-5913.exe (PID: 9408)
- Unicorn-39837.exe (PID: 9468)
- Unicorn-3682.exe (PID: 9496)
- Unicorn-59162.exe (PID: 9532)
- Unicorn-59162.exe (PID: 9540)
- Unicorn-21507.exe (PID: 9516)
- Unicorn-7683.exe (PID: 9596)
- Unicorn-8643.exe (PID: 9612)
- Unicorn-46312.exe (PID: 9576)
- Unicorn-58436.exe (PID: 9704)
- Unicorn-42266.exe (PID: 9676)
- Unicorn-50787.exe (PID: 9648)
- Unicorn-13724.exe (PID: 9752)
- Unicorn-49251.exe (PID: 9812)
- Unicorn-6330.exe (PID: 9724)
- Unicorn-10600.exe (PID: 9776)
- Unicorn-15680.exe (PID: 9820)
- Unicorn-53252.exe (PID: 9880)
- Unicorn-64865.exe (PID: 9900)
- Unicorn-46148.exe (PID: 9956)
- Unicorn-11215.exe (PID: 10008)
- Unicorn-41571.exe (PID: 9948)
- Unicorn-1122.exe (PID: 9980)
- Unicorn-38548.exe (PID: 10024)
- Unicorn-32669.exe (PID: 10116)
- Unicorn-48906.exe (PID: 10060)
- Unicorn-28114.exe (PID: 8596)
- Unicorn-23738.exe (PID: 10108)
- Unicorn-463.exe (PID: 10160)
- Unicorn-24989.exe (PID: 10220)
- Unicorn-42202.exe (PID: 9240)
- Unicorn-14656.exe (PID: 8240)
- Unicorn-18269.exe (PID: 9564)
- Unicorn-46691.exe (PID: 8984)
- Unicorn-23904.exe (PID: 8388)
- Unicorn-51610.exe (PID: 3768)
- Unicorn-22247.exe (PID: 10256)
- Unicorn-32009.exe (PID: 3096)
- Unicorn-50339.exe (PID: 4932)
- Unicorn-28330.exe (PID: 10368)
- Unicorn-9088.exe (PID: 10308)
- Unicorn-56800.exe (PID: 10464)
- Unicorn-1896.exe (PID: 10400)
- Unicorn-22810.exe (PID: 10408)
- Unicorn-39587.exe (PID: 10440)
- Unicorn-26182.exe (PID: 10552)
- Unicorn-8393.exe (PID: 10500)
- Unicorn-60225.exe (PID: 10516)
- Unicorn-13001.exe (PID: 10592)
- Unicorn-39918.exe (PID: 10564)
- Unicorn-50692.exe (PID: 10348)
- Unicorn-52835.exe (PID: 10172)
- Unicorn-36515.exe (PID: 10388)
- Unicorn-6826.exe (PID: 10660)
- Unicorn-29861.exe (PID: 10480)
- Unicorn-62301.exe (PID: 10712)
- Unicorn-25763.exe (PID: 10756)
- Unicorn-59805.exe (PID: 10736)
- Unicorn-62301.exe (PID: 10704)
- Unicorn-18202.exe (PID: 10620)
- Unicorn-6826.exe (PID: 10656)
- Unicorn-4639.exe (PID: 10860)
- Unicorn-51811.exe (PID: 10924)
- Unicorn-38001.exe (PID: 10964)
- Unicorn-21853.exe (PID: 10944)
- Unicorn-30426.exe (PID: 10992)
- Unicorn-34057.exe (PID: 10872)
- Unicorn-3958.exe (PID: 11000)
- Unicorn-7354.exe (PID: 11088)
- Unicorn-3958.exe (PID: 11008)
- Unicorn-38772.exe (PID: 11048)
- Unicorn-41649.exe (PID: 11116)
- Unicorn-29466.exe (PID: 11068)
- Unicorn-25831.exe (PID: 11152)
- Unicorn-61594.exe (PID: 8500)
- Unicorn-37224.exe (PID: 11172)
- Unicorn-8028.exe (PID: 11200)
- Unicorn-38298.exe (PID: 11188)
- Unicorn-19488.exe (PID: 10048)
- Unicorn-14748.exe (PID: 11136)
- Unicorn-56772.exe (PID: 11236)
- Unicorn-63393.exe (PID: 11220)
- Unicorn-18898.exe (PID: 8864)
- Unicorn-5209.exe (PID: 8972)
- Unicorn-61530.exe (PID: 9076)
- Unicorn-48672.exe (PID: 11288)
- Unicorn-17514.exe (PID: 11340)
- Unicorn-17514.exe (PID: 11332)
- Unicorn-60801.exe (PID: 10532)
- Unicorn-17514.exe (PID: 11324)
- Unicorn-60317.exe (PID: 11408)
- Unicorn-20250.exe (PID: 11392)
- Unicorn-64349.exe (PID: 11460)
- Unicorn-26275.exe (PID: 11424)
- Unicorn-10457.exe (PID: 11440)
- Unicorn-20199.exe (PID: 9852)
- Unicorn-61853.exe (PID: 11496)
- Unicorn-10624.exe (PID: 11536)
- Unicorn-7945.exe (PID: 11516)
- Unicorn-64349.exe (PID: 11468)
- Unicorn-51521.exe (PID: 11552)
- Unicorn-63690.exe (PID: 11572)
- Unicorn-6610.exe (PID: 9176)
- Unicorn-2791.exe (PID: 11588)
- Unicorn-8921.exe (PID: 11612)
- Unicorn-8921.exe (PID: 11604)
- Unicorn-2791.exe (PID: 11596)
- Unicorn-46493.exe (PID: 11800)
- Unicorn-48029.exe (PID: 11700)
- Unicorn-48029.exe (PID: 11704)
- Unicorn-16483.exe (PID: 11840)
- Unicorn-13986.exe (PID: 11768)
- Unicorn-30240.exe (PID: 11724)
- Unicorn-53856.exe (PID: 11628)
- Unicorn-23203.exe (PID: 11620)
- Unicorn-49025.exe (PID: 11860)
- Unicorn-44050.exe (PID: 9788)
- Unicorn-49025.exe (PID: 11864)
- Unicorn-495.exe (PID: 10984)
- Unicorn-5190.exe (PID: 12028)
- Unicorn-7961.exe (PID: 11692)
- Unicorn-60618.exe (PID: 11904)
- Unicorn-41278.exe (PID: 11376)
- Unicorn-14406.exe (PID: 11876)
- Unicorn-59244.exe (PID: 7700)
- Unicorn-1817.exe (PID: 11940)
- Unicorn-53514.exe (PID: 11976)
- Unicorn-2913.exe (PID: 11960)
- Unicorn-48632.exe (PID: 12044)
- Unicorn-11578.exe (PID: 11968)
- Unicorn-35179.exe (PID: 12060)
- Unicorn-36715.exe (PID: 11988)
- Unicorn-13986.exe (PID: 11760)
- Unicorn-43369.exe (PID: 11820)
- Unicorn-36963.exe (PID: 12124)
- Unicorn-56507.exe (PID: 12160)
- Unicorn-26851.exe (PID: 4408)
- Unicorn-8487.exe (PID: 12140)
- Unicorn-320.exe (PID: 12100)
INFO
Checks supported languages
- 1 (515).exe (PID: 2568)
- Unicorn-59747.exe (PID: 6712)
- Unicorn-13785.exe (PID: 4696)
- Unicorn-5129.exe (PID: 1052)
- Unicorn-48797.exe (PID: 5512)
- Unicorn-48797.exe (PID: 6800)
- Unicorn-11142.exe (PID: 5720)
- Unicorn-5552.exe (PID: 7184)
- Unicorn-46237.exe (PID: 8072)
- Unicorn-53206.exe (PID: 8064)
- Unicorn-63450.exe (PID: 8080)
- Unicorn-63345.exe (PID: 8140)
- Unicorn-3673.exe (PID: 8132)
- Unicorn-38557.exe (PID: 8148)
- Unicorn-38557.exe (PID: 8156)
- Unicorn-53402.exe (PID: 7228)
- Unicorn-53402.exe (PID: 728)
- Unicorn-29674.exe (PID: 7036)
- Unicorn-15939.exe (PID: 2284)
- Unicorn-25856.exe (PID: 7284)
- Unicorn-35805.exe (PID: 7204)
- Unicorn-31197.exe (PID: 7356)
- Unicorn-48794.exe (PID: 5324)
- Unicorn-16183.exe (PID: 7368)
- Unicorn-25066.exe (PID: 7344)
- Unicorn-46605.exe (PID: 7380)
- Unicorn-35669.exe (PID: 7396)
- Unicorn-35669.exe (PID: 7384)
- Unicorn-22692.exe (PID: 8112)
- Unicorn-63904.exe (PID: 2268)
- Unicorn-63904.exe (PID: 2420)
- Unicorn-5995.exe (PID: 7488)
- Unicorn-27101.exe (PID: 7300)
- Unicorn-49171.exe (PID: 7520)
- Unicorn-33946.exe (PID: 1568)
- Unicorn-62382.exe (PID: 7596)
- Unicorn-7479.exe (PID: 6752)
- Unicorn-48647.exe (PID: 7600)
- Unicorn-60846.exe (PID: 2040)
- Unicorn-3935.exe (PID: 4464)
- Unicorn-40739.exe (PID: 7624)
- Unicorn-59524.exe (PID: 7648)
- Unicorn-59244.exe (PID: 7684)
- Unicorn-59244.exe (PID: 7676)
- Unicorn-59244.exe (PID: 7692)
- Unicorn-40135.exe (PID: 7732)
- Unicorn-37105.exe (PID: 7748)
- Unicorn-59244.exe (PID: 7668)
- Unicorn-2560.exe (PID: 7716)
- Unicorn-59244.exe (PID: 7700)
- Unicorn-30609.exe (PID: 7780)
- Unicorn-24743.exe (PID: 7772)
- Unicorn-23369.exe (PID: 7756)
- Unicorn-21943.exe (PID: 7808)
- Unicorn-22720.exe (PID: 7564)
- Unicorn-54215.exe (PID: 1388)
- Unicorn-62894.exe (PID: 7524)
- Unicorn-62894.exe (PID: 7860)
- Unicorn-65376.exe (PID: 7940)
- Unicorn-53664.exe (PID: 7984)
- Unicorn-38179.exe (PID: 7976)
- Unicorn-12480.exe (PID: 7948)
- Unicorn-22183.exe (PID: 8044)
- Unicorn-52142.exe (PID: 8028)
- Unicorn-26778.exe (PID: 7932)
- Unicorn-39802.exe (PID: 7880)
- Unicorn-47681.exe (PID: 6388)
- Unicorn-3840.exe (PID: 8008)
- Unicorn-23706.exe (PID: 8016)
- Unicorn-11417.exe (PID: 4776)
- Unicorn-63965.exe (PID: 6708)
- Unicorn-26851.exe (PID: 4408)
- Unicorn-44100.exe (PID: 2140)
- Unicorn-57089.exe (PID: 1760)
- Unicorn-19171.exe (PID: 6228)
- Unicorn-18905.exe (PID: 1056)
- Unicorn-35232.exe (PID: 616)
- Unicorn-54977.exe (PID: 6436)
- Unicorn-30311.exe (PID: 4448)
- Unicorn-9881.exe (PID: 4172)
- Unicorn-2215.exe (PID: 7360)
- Unicorn-89.exe (PID: 680)
- Unicorn-48340.exe (PID: 8200)
- Unicorn-3161.exe (PID: 8232)
- Unicorn-19559.exe (PID: 8260)
- Unicorn-30572.exe (PID: 8268)
- Unicorn-30209.exe (PID: 8340)
- Unicorn-5346.exe (PID: 8364)
- Unicorn-26989.exe (PID: 8304)
- Unicorn-23904.exe (PID: 8388)
- Unicorn-40925.exe (PID: 8404)
- Unicorn-40925.exe (PID: 8412)
- Unicorn-24707.exe (PID: 8436)
- Unicorn-44573.exe (PID: 8444)
- Unicorn-5346.exe (PID: 8356)
- Unicorn-63130.exe (PID: 8468)
- Unicorn-61594.exe (PID: 8508)
- Unicorn-26016.exe (PID: 8484)
- Unicorn-61594.exe (PID: 8500)
- Unicorn-61594.exe (PID: 8516)
- Unicorn-12169.exe (PID: 8548)
- Unicorn-28114.exe (PID: 8596)
- Unicorn-47715.exe (PID: 8604)
- Unicorn-14217.exe (PID: 8588)
- Unicorn-30226.exe (PID: 8652)
- Unicorn-28114.exe (PID: 8572)
- Unicorn-28114.exe (PID: 8580)
- Unicorn-10679.exe (PID: 8636)
- Unicorn-40300.exe (PID: 8760)
- Unicorn-47715.exe (PID: 8612)
- Unicorn-6505.exe (PID: 8620)
- Unicorn-13479.exe (PID: 8644)
- Unicorn-53761.exe (PID: 8800)
- Unicorn-42324.exe (PID: 8844)
- Unicorn-8571.exe (PID: 8780)
- Unicorn-64212.exe (PID: 8820)
- Unicorn-61880.exe (PID: 1300)
- Unicorn-5209.exe (PID: 8972)
- Unicorn-18898.exe (PID: 8864)
- Unicorn-7321.exe (PID: 8836)
- Unicorn-40527.exe (PID: 8856)
- Unicorn-23331.exe (PID: 8900)
- Unicorn-18535.exe (PID: 8956)
- Unicorn-62085.exe (PID: 9004)
- Unicorn-26315.exe (PID: 8996)
- Unicorn-62085.exe (PID: 9008)
- Unicorn-11056.exe (PID: 9036)
- Unicorn-23683.exe (PID: 9096)
- Unicorn-61530.exe (PID: 9076)
- Unicorn-43284.exe (PID: 9084)
- Unicorn-29761.exe (PID: 9152)
- Unicorn-7705.exe (PID: 9160)
- Unicorn-42240.exe (PID: 9136)
- Unicorn-52625.exe (PID: 8916)
- Unicorn-6610.exe (PID: 9176)
- Unicorn-59034.exe (PID: 6028)
- Unicorn-52125.exe (PID: 9324)
- Unicorn-26093.exe (PID: 9440)
- Unicorn-21507.exe (PID: 9516)
- Unicorn-39837.exe (PID: 9468)
- Unicorn-3682.exe (PID: 9496)
- Unicorn-36291.exe (PID: 9344)
- Unicorn-5913.exe (PID: 9408)
- Unicorn-59162.exe (PID: 9540)
- Unicorn-59162.exe (PID: 9532)
- Unicorn-46312.exe (PID: 9576)
- Unicorn-7683.exe (PID: 9596)
- Unicorn-8643.exe (PID: 9612)
- Unicorn-50787.exe (PID: 9648)
- Unicorn-42266.exe (PID: 9676)
- Unicorn-6330.exe (PID: 9724)
- Unicorn-58436.exe (PID: 9704)
- Unicorn-13724.exe (PID: 9752)
- Unicorn-15680.exe (PID: 9820)
- Unicorn-10600.exe (PID: 9776)
- Unicorn-49251.exe (PID: 9812)
- Unicorn-20199.exe (PID: 9852)
- Unicorn-53252.exe (PID: 9880)
- Unicorn-64865.exe (PID: 9900)
- Unicorn-44050.exe (PID: 9788)
- Unicorn-46148.exe (PID: 9956)
- Unicorn-41571.exe (PID: 9948)
- Unicorn-11215.exe (PID: 10008)
- Unicorn-1122.exe (PID: 9980)
- Unicorn-38548.exe (PID: 10024)
- Unicorn-48906.exe (PID: 10060)
- Unicorn-23738.exe (PID: 10108)
- Unicorn-32669.exe (PID: 10116)
- Unicorn-463.exe (PID: 10160)
- Unicorn-52835.exe (PID: 10172)
- Unicorn-19488.exe (PID: 10048)
- Unicorn-24989.exe (PID: 10220)
- Unicorn-42202.exe (PID: 9240)
- Unicorn-14656.exe (PID: 8240)
- Unicorn-18269.exe (PID: 9564)
- Unicorn-32009.exe (PID: 3096)
- Unicorn-51610.exe (PID: 3768)
- Unicorn-50339.exe (PID: 4932)
- Unicorn-22247.exe (PID: 10256)
- Unicorn-9088.exe (PID: 10308)
- Unicorn-50692.exe (PID: 10348)
- Unicorn-46691.exe (PID: 8984)
- Unicorn-36515.exe (PID: 10388)
- Unicorn-22810.exe (PID: 10408)
- Unicorn-1896.exe (PID: 10400)
- Unicorn-39587.exe (PID: 10440)
- Unicorn-28330.exe (PID: 10368)
- Unicorn-29861.exe (PID: 10480)
- Unicorn-8393.exe (PID: 10500)
- Unicorn-60801.exe (PID: 10532)
- Unicorn-60225.exe (PID: 10516)
- Unicorn-39918.exe (PID: 10564)
- Unicorn-26182.exe (PID: 10552)
- Unicorn-13001.exe (PID: 10592)
- Unicorn-56800.exe (PID: 10464)
- Unicorn-18202.exe (PID: 10620)
- Unicorn-6826.exe (PID: 10660)
- Unicorn-6826.exe (PID: 10656)
- Unicorn-62301.exe (PID: 10712)
- Unicorn-62301.exe (PID: 10704)
- Unicorn-25763.exe (PID: 10756)
- Unicorn-60765.exe (PID: 10764)
- Unicorn-59805.exe (PID: 10736)
- Unicorn-19305.exe (PID: 10880)
- Unicorn-34057.exe (PID: 10872)
- Unicorn-4639.exe (PID: 10860)
- Unicorn-51811.exe (PID: 10924)
- Unicorn-30426.exe (PID: 10992)
- Unicorn-38001.exe (PID: 10964)
- Unicorn-3958.exe (PID: 11000)
- Unicorn-495.exe (PID: 10984)
- Unicorn-3958.exe (PID: 11008)
- Unicorn-38772.exe (PID: 11048)
- Unicorn-21853.exe (PID: 10944)
- Unicorn-7354.exe (PID: 11088)
- Unicorn-25831.exe (PID: 11152)
- Unicorn-14748.exe (PID: 11136)
- Unicorn-37224.exe (PID: 11172)
- Unicorn-38298.exe (PID: 11188)
- Unicorn-63393.exe (PID: 11220)
- Unicorn-8028.exe (PID: 11200)
- Unicorn-56772.exe (PID: 11236)
- Unicorn-29466.exe (PID: 11068)
- Unicorn-41649.exe (PID: 11116)
- Unicorn-48672.exe (PID: 11288)
- Unicorn-17514.exe (PID: 11324)
- Unicorn-17514.exe (PID: 11340)
- Unicorn-17514.exe (PID: 11332)
- Unicorn-41278.exe (PID: 11376)
- Unicorn-26275.exe (PID: 11424)
- Unicorn-60317.exe (PID: 11408)
- Unicorn-10457.exe (PID: 11440)
- Unicorn-64349.exe (PID: 11460)
- Unicorn-20250.exe (PID: 11392)
- Unicorn-10624.exe (PID: 11536)
- Unicorn-51521.exe (PID: 11552)
- Unicorn-63690.exe (PID: 11572)
- Unicorn-64349.exe (PID: 11468)
- Unicorn-61853.exe (PID: 11496)
- Unicorn-7945.exe (PID: 11516)
- Unicorn-23203.exe (PID: 11620)
- Unicorn-8921.exe (PID: 11612)
- Unicorn-2791.exe (PID: 11588)
- Unicorn-2791.exe (PID: 11596)
- Unicorn-8921.exe (PID: 11604)
- Unicorn-53856.exe (PID: 11628)
- Unicorn-48029.exe (PID: 11700)
- Unicorn-30240.exe (PID: 11724)
- Unicorn-48029.exe (PID: 11704)
- Unicorn-13986.exe (PID: 11760)
- Unicorn-13986.exe (PID: 11768)
- Unicorn-46493.exe (PID: 11800)
- Unicorn-7961.exe (PID: 11692)
- Unicorn-43369.exe (PID: 11820)
- Unicorn-60618.exe (PID: 11904)
- Unicorn-14406.exe (PID: 11876)
- Unicorn-49025.exe (PID: 11860)
- Unicorn-16483.exe (PID: 11840)
- Unicorn-49025.exe (PID: 11864)
- Unicorn-1817.exe (PID: 11940)
- Unicorn-11578.exe (PID: 11968)
- Unicorn-2913.exe (PID: 11960)
- Unicorn-36715.exe (PID: 11988)
- Unicorn-48632.exe (PID: 12044)
- Unicorn-35179.exe (PID: 12060)
- Unicorn-320.exe (PID: 12100)
- Unicorn-36963.exe (PID: 12124)
- Unicorn-8487.exe (PID: 12140)
- Unicorn-53514.exe (PID: 11976)
- Unicorn-5190.exe (PID: 12028)
- Unicorn-51432.exe (PID: 12052)
- Unicorn-45417.exe (PID: 6048)
- Unicorn-1753.exe (PID: 11296)
- Unicorn-12422.exe (PID: 11284)
- Unicorn-56507.exe (PID: 12160)
- Unicorn-3289.exe (PID: 3032)
- Unicorn-41280.exe (PID: 9056)
- Unicorn-11161.exe (PID: 12300)
- Unicorn-16387.exe (PID: 12324)
- Unicorn-65095.exe (PID: 12340)
- Unicorn-57114.exe (PID: 12388)
- Unicorn-50408.exe (PID: 12368)
- Unicorn-42697.exe (PID: 12408)
- Unicorn-62696.exe (PID: 1748)
- Unicorn-64675.exe (PID: 12452)
- Unicorn-60731.exe (PID: 12468)
- Unicorn-35624.exe (PID: 12512)
- Unicorn-45786.exe (PID: 12528)
- Unicorn-3993.exe (PID: 12580)
- Unicorn-42697.exe (PID: 12412)
- Unicorn-50865.exe (PID: 12488)
- Unicorn-33952.exe (PID: 12668)
- Unicorn-52737.exe (PID: 12704)
- Unicorn-16582.exe (PID: 12760)
- Unicorn-34179.exe (PID: 12792)
- Unicorn-3878.exe (PID: 12808)
- Unicorn-42944.exe (PID: 12860)
- Unicorn-20003.exe (PID: 12724)
- Unicorn-51914.exe (PID: 13076)
- Unicorn-21088.exe (PID: 13012)
- Unicorn-15533.exe (PID: 13040)
- Unicorn-47278.exe (PID: 12884)
- Unicorn-1341.exe (PID: 12892)
- Unicorn-60490.exe (PID: 12932)
- Unicorn-24173.exe (PID: 12948)
- Unicorn-5337.exe (PID: 12988)
- Unicorn-28218.exe (PID: 13276)
- Unicorn-43293.exe (PID: 13160)
- Unicorn-32877.exe (PID: 13232)
- Unicorn-40557.exe (PID: 13192)
- Unicorn-13421.exe (PID: 13252)
- Unicorn-46666.exe (PID: 2416)
- Unicorn-4205.exe (PID: 13320)
- Unicorn-60999.exe (PID: 13152)
- Unicorn-31232.exe (PID: 13200)
- Unicorn-40294.exe (PID: 13336)
- Unicorn-54055.exe (PID: 13372)
- Unicorn-59655.exe (PID: 13364)
- Unicorn-21789.exe (PID: 13436)
- Unicorn-48903.exe (PID: 13472)
- Unicorn-19677.exe (PID: 13464)
- Unicorn-13546.exe (PID: 13456)
- Unicorn-24861.exe (PID: 13520)
- Unicorn-15068.exe (PID: 13592)
- Unicorn-43718.exe (PID: 13568)
- Unicorn-9514.exe (PID: 13620)
- Unicorn-15068.exe (PID: 13584)
- Unicorn-11949.exe (PID: 13644)
- Unicorn-51975.exe (PID: 13544)
- Unicorn-18717.exe (PID: 13704)
- Unicorn-25161.exe (PID: 13680)
- Unicorn-56190.exe (PID: 13720)
- Unicorn-10474.exe (PID: 13728)
- Unicorn-17181.exe (PID: 13756)
- Unicorn-19593.exe (PID: 13772)
- Unicorn-50350.exe (PID: 13820)
- Unicorn-9235.exe (PID: 13792)
- Unicorn-14108.exe (PID: 13660)
- Unicorn-22887.exe (PID: 13892)
- Unicorn-39686.exe (PID: 13880)
- Unicorn-54892.exe (PID: 13856)
- Unicorn-10460.exe (PID: 13864)
- Unicorn-10460.exe (PID: 13868)
- Unicorn-62663.exe (PID: 13968)
- Unicorn-63239.exe (PID: 14000)
- Unicorn-63239.exe (PID: 13996)
- Unicorn-34816.exe (PID: 14032)
- Unicorn-37661.exe (PID: 14088)
- Unicorn-31530.exe (PID: 14076)
- Unicorn-3042.exe (PID: 14104)
- Unicorn-46151.exe (PID: 14140)
- Unicorn-40296.exe (PID: 14152)
- Unicorn-774.exe (PID: 14060)
- Unicorn-53233.exe (PID: 14180)
- Unicorn-50769.exe (PID: 14252)
- Unicorn-33053.exe (PID: 14288)
- Unicorn-26922.exe (PID: 14264)
- Unicorn-9901.exe (PID: 14220)
- Unicorn-33053.exe (PID: 14280)
- Unicorn-30941.exe (PID: 14328)
- Unicorn-46426.exe (PID: 14168)
- Unicorn-43944.exe (PID: 14196)
- Unicorn-41543.exe (PID: 5036)
- Unicorn-52487.exe (PID: 5376)
Reads the computer name
- Unicorn-59747.exe (PID: 6712)
- Unicorn-5129.exe (PID: 1052)
- 1 (515).exe (PID: 2568)
- Unicorn-13785.exe (PID: 4696)
- Unicorn-48797.exe (PID: 6800)
- Unicorn-48797.exe (PID: 5512)
- Unicorn-11142.exe (PID: 5720)
- Unicorn-5552.exe (PID: 7184)
- Unicorn-53206.exe (PID: 8064)
- Unicorn-22692.exe (PID: 8112)
- Unicorn-63345.exe (PID: 8140)
- Unicorn-46237.exe (PID: 8072)
- Unicorn-38557.exe (PID: 8156)
- Unicorn-63450.exe (PID: 8080)
- Unicorn-38557.exe (PID: 8148)
- Unicorn-3673.exe (PID: 8132)
- Unicorn-53402.exe (PID: 728)
- Unicorn-53402.exe (PID: 7228)
- Unicorn-35805.exe (PID: 7204)
- Unicorn-15939.exe (PID: 2284)
- Unicorn-29674.exe (PID: 7036)
- Unicorn-16183.exe (PID: 7368)
- Unicorn-25856.exe (PID: 7284)
- Unicorn-48794.exe (PID: 5324)
- Unicorn-35669.exe (PID: 7396)
- Unicorn-35669.exe (PID: 7384)
- Unicorn-25066.exe (PID: 7344)
- Unicorn-46605.exe (PID: 7380)
- Unicorn-31197.exe (PID: 7356)
- Unicorn-5995.exe (PID: 7488)
- Unicorn-27101.exe (PID: 7300)
- Unicorn-49171.exe (PID: 7520)
- Unicorn-22720.exe (PID: 7564)
- Unicorn-54215.exe (PID: 1388)
- Unicorn-63904.exe (PID: 2420)
- Unicorn-63904.exe (PID: 2268)
- Unicorn-7479.exe (PID: 6752)
- Unicorn-33946.exe (PID: 1568)
- Unicorn-62382.exe (PID: 7596)
- Unicorn-60846.exe (PID: 2040)
- Unicorn-3935.exe (PID: 4464)
- Unicorn-40739.exe (PID: 7624)
- Unicorn-59524.exe (PID: 7648)
- Unicorn-59244.exe (PID: 7676)
- Unicorn-59244.exe (PID: 7668)
- Unicorn-40135.exe (PID: 7732)
- Unicorn-24743.exe (PID: 7772)
- Unicorn-59244.exe (PID: 7692)
- Unicorn-59244.exe (PID: 7684)
- Unicorn-2560.exe (PID: 7716)
- Unicorn-37105.exe (PID: 7748)
- Unicorn-30609.exe (PID: 7780)
- Unicorn-23369.exe (PID: 7756)
- Unicorn-21943.exe (PID: 7808)
- Unicorn-59244.exe (PID: 7700)
- Unicorn-62894.exe (PID: 7524)
- Unicorn-62894.exe (PID: 7860)
- Unicorn-65376.exe (PID: 7940)
- Unicorn-12480.exe (PID: 7948)
- Unicorn-53664.exe (PID: 7984)
- Unicorn-3840.exe (PID: 8008)
- Unicorn-26778.exe (PID: 7932)
- Unicorn-38179.exe (PID: 7976)
- Unicorn-52142.exe (PID: 8028)
- Unicorn-23706.exe (PID: 8016)
- Unicorn-22183.exe (PID: 8044)
- Unicorn-48647.exe (PID: 7600)
- Unicorn-39802.exe (PID: 7880)
- Unicorn-47681.exe (PID: 6388)
- Unicorn-57089.exe (PID: 1760)
- Unicorn-11417.exe (PID: 4776)
- Unicorn-30311.exe (PID: 4448)
- Unicorn-63965.exe (PID: 6708)
- Unicorn-26851.exe (PID: 4408)
- Unicorn-54977.exe (PID: 6436)
- Unicorn-44100.exe (PID: 2140)
- Unicorn-18905.exe (PID: 1056)
- Unicorn-35232.exe (PID: 616)
- Unicorn-19171.exe (PID: 6228)
- Unicorn-89.exe (PID: 680)
- Unicorn-2215.exe (PID: 7360)
- Unicorn-61880.exe (PID: 1300)
- Unicorn-9881.exe (PID: 4172)
- Unicorn-48340.exe (PID: 8200)
- Unicorn-30572.exe (PID: 8268)
- Unicorn-26989.exe (PID: 8304)
- Unicorn-30209.exe (PID: 8340)
- Unicorn-3161.exe (PID: 8232)
- Unicorn-19559.exe (PID: 8260)
- Unicorn-40925.exe (PID: 8412)
- Unicorn-5346.exe (PID: 8364)
- Unicorn-44573.exe (PID: 8444)
- Unicorn-40925.exe (PID: 8404)
- Unicorn-63130.exe (PID: 8468)
- Unicorn-61594.exe (PID: 8500)
- Unicorn-5346.exe (PID: 8356)
- Unicorn-24707.exe (PID: 8436)
- Unicorn-23904.exe (PID: 8388)
- Unicorn-61594.exe (PID: 8508)
- Unicorn-26016.exe (PID: 8484)
- Unicorn-61594.exe (PID: 8516)
- Unicorn-14217.exe (PID: 8588)
- Unicorn-28114.exe (PID: 8596)
- Unicorn-12169.exe (PID: 8548)
- Unicorn-6505.exe (PID: 8620)
- Unicorn-28114.exe (PID: 8572)
- Unicorn-47715.exe (PID: 8612)
- Unicorn-47715.exe (PID: 8604)
- Unicorn-28114.exe (PID: 8580)
- Unicorn-30226.exe (PID: 8652)
- Unicorn-13479.exe (PID: 8644)
- Unicorn-10679.exe (PID: 8636)
- Unicorn-40300.exe (PID: 8760)
- Unicorn-53761.exe (PID: 8800)
- Unicorn-8571.exe (PID: 8780)
- Unicorn-64212.exe (PID: 8820)
- Unicorn-23331.exe (PID: 8900)
- Unicorn-7321.exe (PID: 8836)
- Unicorn-42324.exe (PID: 8844)
- Unicorn-40527.exe (PID: 8856)
- Unicorn-18898.exe (PID: 8864)
- Unicorn-18535.exe (PID: 8956)
- Unicorn-11056.exe (PID: 9036)
- Unicorn-5209.exe (PID: 8972)
- Unicorn-26315.exe (PID: 8996)
- Unicorn-43284.exe (PID: 9084)
- Unicorn-6610.exe (PID: 9176)
- Unicorn-29761.exe (PID: 9152)
- Unicorn-62085.exe (PID: 9004)
- Unicorn-7705.exe (PID: 9160)
- Unicorn-62085.exe (PID: 9008)
- Unicorn-61530.exe (PID: 9076)
- Unicorn-42240.exe (PID: 9136)
- Unicorn-23683.exe (PID: 9096)
- Unicorn-59034.exe (PID: 6028)
- Unicorn-52625.exe (PID: 8916)
- Unicorn-52125.exe (PID: 9324)
- Unicorn-36291.exe (PID: 9344)
- Unicorn-5913.exe (PID: 9408)
- Unicorn-26093.exe (PID: 9440)
- Unicorn-39837.exe (PID: 9468)
- Unicorn-3682.exe (PID: 9496)
- Unicorn-59162.exe (PID: 9532)
- Unicorn-59162.exe (PID: 9540)
- Unicorn-21507.exe (PID: 9516)
- Unicorn-46312.exe (PID: 9576)
- Unicorn-7683.exe (PID: 9596)
- Unicorn-8643.exe (PID: 9612)
- Unicorn-42266.exe (PID: 9676)
- Unicorn-58436.exe (PID: 9704)
- Unicorn-6330.exe (PID: 9724)
- Unicorn-50787.exe (PID: 9648)
- Unicorn-44050.exe (PID: 9788)
- Unicorn-13724.exe (PID: 9752)
- Unicorn-15680.exe (PID: 9820)
- Unicorn-49251.exe (PID: 9812)
- Unicorn-10600.exe (PID: 9776)
- Unicorn-20199.exe (PID: 9852)
- Unicorn-64865.exe (PID: 9900)
- Unicorn-53252.exe (PID: 9880)
- Unicorn-1122.exe (PID: 9980)
- Unicorn-41571.exe (PID: 9948)
- Unicorn-11215.exe (PID: 10008)
- Unicorn-46148.exe (PID: 9956)
- Unicorn-19488.exe (PID: 10048)
- Unicorn-48906.exe (PID: 10060)
- Unicorn-32669.exe (PID: 10116)
- Unicorn-38548.exe (PID: 10024)
- Unicorn-463.exe (PID: 10160)
- Unicorn-52835.exe (PID: 10172)
- Unicorn-23738.exe (PID: 10108)
- Unicorn-24989.exe (PID: 10220)
- Unicorn-42202.exe (PID: 9240)
- Unicorn-14656.exe (PID: 8240)
- Unicorn-46691.exe (PID: 8984)
- Unicorn-18269.exe (PID: 9564)
- Unicorn-32009.exe (PID: 3096)
- Unicorn-51610.exe (PID: 3768)
- Unicorn-50339.exe (PID: 4932)
Create files in a temporary directory
- 1 (515).exe (PID: 2568)
- Unicorn-59747.exe (PID: 6712)
- Unicorn-13785.exe (PID: 4696)
- Unicorn-5129.exe (PID: 1052)
- Unicorn-48797.exe (PID: 6800)
- Unicorn-5552.exe (PID: 7184)
- Unicorn-46237.exe (PID: 8072)
- Unicorn-48797.exe (PID: 5512)
- Unicorn-22692.exe (PID: 8112)
- Unicorn-38557.exe (PID: 8148)
- Unicorn-53402.exe (PID: 728)
- Unicorn-15939.exe (PID: 2284)
- Unicorn-63450.exe (PID: 8080)
- Unicorn-29674.exe (PID: 7036)
- Unicorn-25856.exe (PID: 7284)
- Unicorn-48794.exe (PID: 5324)
- Unicorn-35669.exe (PID: 7384)
- Unicorn-46605.exe (PID: 7380)
- Unicorn-11142.exe (PID: 5720)
- Unicorn-63345.exe (PID: 8140)
- Unicorn-53206.exe (PID: 8064)
- Unicorn-5995.exe (PID: 7488)
- Unicorn-27101.exe (PID: 7300)
- Unicorn-49171.exe (PID: 7520)
- Unicorn-53402.exe (PID: 7228)
- Unicorn-22720.exe (PID: 7564)
- Unicorn-3673.exe (PID: 8132)
- Unicorn-63904.exe (PID: 2268)
- Unicorn-54215.exe (PID: 1388)
- Unicorn-63904.exe (PID: 2420)
- Unicorn-62382.exe (PID: 7596)
- Unicorn-33946.exe (PID: 1568)
- Unicorn-35805.exe (PID: 7204)
- Unicorn-48647.exe (PID: 7600)
- Unicorn-7479.exe (PID: 6752)
- Unicorn-3935.exe (PID: 4464)
- Unicorn-60846.exe (PID: 2040)
- Unicorn-59524.exe (PID: 7648)
- Unicorn-40739.exe (PID: 7624)
- Unicorn-59244.exe (PID: 7668)
- Unicorn-59244.exe (PID: 7676)
- Unicorn-24743.exe (PID: 7772)
- Unicorn-37105.exe (PID: 7748)
- Unicorn-25066.exe (PID: 7344)
- Unicorn-59244.exe (PID: 7692)
- Unicorn-59244.exe (PID: 7684)
- Unicorn-30609.exe (PID: 7780)
- Unicorn-21943.exe (PID: 7808)
- Unicorn-35669.exe (PID: 7396)
- Unicorn-31197.exe (PID: 7356)
- Unicorn-62894.exe (PID: 7524)
- Unicorn-62894.exe (PID: 7860)
- Unicorn-12480.exe (PID: 7948)
- Unicorn-65376.exe (PID: 7940)
- Unicorn-38557.exe (PID: 8156)
- Unicorn-3840.exe (PID: 8008)
- Unicorn-38179.exe (PID: 7976)
- Unicorn-23706.exe (PID: 8016)
- Unicorn-53664.exe (PID: 7984)
- Unicorn-22183.exe (PID: 8044)
- Unicorn-26778.exe (PID: 7932)
- Unicorn-39802.exe (PID: 7880)
- Unicorn-47681.exe (PID: 6388)
- Unicorn-57089.exe (PID: 1760)
- Unicorn-11417.exe (PID: 4776)
- Unicorn-30311.exe (PID: 4448)
- Unicorn-63965.exe (PID: 6708)
- Unicorn-18905.exe (PID: 1056)
- Unicorn-54977.exe (PID: 6436)
- Unicorn-19171.exe (PID: 6228)
- Unicorn-44100.exe (PID: 2140)
- Unicorn-35232.exe (PID: 616)
- Unicorn-9881.exe (PID: 4172)
- Unicorn-61880.exe (PID: 1300)
- Unicorn-89.exe (PID: 680)
- Unicorn-48340.exe (PID: 8200)
- Unicorn-2215.exe (PID: 7360)
- Unicorn-3161.exe (PID: 8232)
- Unicorn-30572.exe (PID: 8268)
- Unicorn-19559.exe (PID: 8260)
- Unicorn-5346.exe (PID: 8364)
- Unicorn-26989.exe (PID: 8304)
- Unicorn-30209.exe (PID: 8340)
- Unicorn-40925.exe (PID: 8412)
- Unicorn-44573.exe (PID: 8444)
- Unicorn-40925.exe (PID: 8404)
- Unicorn-5346.exe (PID: 8356)
- Unicorn-24707.exe (PID: 8436)
- Unicorn-61594.exe (PID: 8508)
- Unicorn-2560.exe (PID: 7716)
- Unicorn-40135.exe (PID: 7732)
- Unicorn-26016.exe (PID: 8484)
- Unicorn-14217.exe (PID: 8588)
- Unicorn-12169.exe (PID: 8548)
- Unicorn-61594.exe (PID: 8516)
- Unicorn-6505.exe (PID: 8620)
- Unicorn-28114.exe (PID: 8572)
- Unicorn-30226.exe (PID: 8652)
- Unicorn-47715.exe (PID: 8612)
- Unicorn-23369.exe (PID: 7756)
- Unicorn-28114.exe (PID: 8580)
- Unicorn-16183.exe (PID: 7368)
- Unicorn-13479.exe (PID: 8644)
- Unicorn-47715.exe (PID: 8604)
- Unicorn-53761.exe (PID: 8800)
- Unicorn-40300.exe (PID: 8760)
- Unicorn-10679.exe (PID: 8636)
- Unicorn-63130.exe (PID: 8468)
- Unicorn-42324.exe (PID: 8844)
- Unicorn-64212.exe (PID: 8820)
- Unicorn-8571.exe (PID: 8780)
- Unicorn-23331.exe (PID: 8900)
- Unicorn-18535.exe (PID: 8956)
- Unicorn-40527.exe (PID: 8856)
- Unicorn-62085.exe (PID: 9008)
- Unicorn-26315.exe (PID: 8996)
- Unicorn-29761.exe (PID: 9152)
- Unicorn-11056.exe (PID: 9036)
- Unicorn-43284.exe (PID: 9084)
- Unicorn-62085.exe (PID: 9004)
- Unicorn-7705.exe (PID: 9160)
- Unicorn-42240.exe (PID: 9136)
- Unicorn-52142.exe (PID: 8028)
- Unicorn-23683.exe (PID: 9096)
- Unicorn-59034.exe (PID: 6028)
- Unicorn-52625.exe (PID: 8916)
- Unicorn-52125.exe (PID: 9324)
- Unicorn-36291.exe (PID: 9344)
- Unicorn-7321.exe (PID: 8836)
- Unicorn-5913.exe (PID: 9408)
- Unicorn-26093.exe (PID: 9440)
- Unicorn-3682.exe (PID: 9496)
- Unicorn-59162.exe (PID: 9532)
- Unicorn-39837.exe (PID: 9468)
- Unicorn-21507.exe (PID: 9516)
- Unicorn-59162.exe (PID: 9540)
- Unicorn-46312.exe (PID: 9576)
- Unicorn-7683.exe (PID: 9596)
- Unicorn-8643.exe (PID: 9612)
- Unicorn-42266.exe (PID: 9676)
- Unicorn-58436.exe (PID: 9704)
- Unicorn-50787.exe (PID: 9648)
- Unicorn-49251.exe (PID: 9812)
- Unicorn-6330.exe (PID: 9724)
- Unicorn-13724.exe (PID: 9752)
- Unicorn-15680.exe (PID: 9820)
- Unicorn-10600.exe (PID: 9776)
- Unicorn-53252.exe (PID: 9880)
- Unicorn-41571.exe (PID: 9948)
- Unicorn-64865.exe (PID: 9900)
- Unicorn-1122.exe (PID: 9980)
- Unicorn-11215.exe (PID: 10008)
- Unicorn-46148.exe (PID: 9956)
- Unicorn-48906.exe (PID: 10060)
- Unicorn-38548.exe (PID: 10024)
- Unicorn-32669.exe (PID: 10116)
Reads security settings of Internet Explorer
- BackgroundTransferHost.exe (PID: 5072)
- BackgroundTransferHost.exe (PID: 3192)
- BackgroundTransferHost.exe (PID: 7512)
- BackgroundTransferHost.exe (PID: 7888)
- BackgroundTransferHost.exe (PID: 7312)
Reads the software policy settings
- BackgroundTransferHost.exe (PID: 3192)
Creates files or folders in the user directory
- BackgroundTransferHost.exe (PID: 3192)
Checks proxy server information
- BackgroundTransferHost.exe (PID: 3192)
The sample compiled with chinese language support
- 1 (515).exe (PID: 2568)
- Unicorn-56800.exe (PID: 10464)
- Unicorn-60225.exe (PID: 10516)
- Unicorn-36291.exe (PID: 9344)
- Unicorn-5913.exe (PID: 9408)
- Unicorn-26182.exe (PID: 10552)
- Unicorn-47681.exe (PID: 6388)
- Unicorn-48797.exe (PID: 6800)
- Unicorn-21507.exe (PID: 9516)
- Unicorn-35232.exe (PID: 616)
- Unicorn-54977.exe (PID: 6436)
- Unicorn-35805.exe (PID: 7204)
- Unicorn-25856.exe (PID: 7284)
- Unicorn-61880.exe (PID: 1300)
- Unicorn-46312.exe (PID: 9576)
- Unicorn-5129.exe (PID: 1052)
- Unicorn-13001.exe (PID: 10592)
- Unicorn-21853.exe (PID: 10944)
- Unicorn-9881.exe (PID: 4172)
- Unicorn-63450.exe (PID: 8080)
- Unicorn-34057.exe (PID: 10872)
- Unicorn-48647.exe (PID: 7600)
- Unicorn-60846.exe (PID: 2040)
- Unicorn-30426.exe (PID: 10992)
- Unicorn-38001.exe (PID: 10964)
- Unicorn-7479.exe (PID: 6752)
- Unicorn-7683.exe (PID: 9596)
- Unicorn-89.exe (PID: 680)
- Unicorn-51811.exe (PID: 10924)
- Unicorn-50787.exe (PID: 9648)
- Unicorn-30572.exe (PID: 8268)
- Unicorn-58436.exe (PID: 9704)
- Unicorn-3958.exe (PID: 11000)
- Unicorn-59524.exe (PID: 7648)
- Unicorn-6330.exe (PID: 9724)
- Unicorn-3161.exe (PID: 8232)
- Unicorn-7354.exe (PID: 11088)
- Unicorn-3958.exe (PID: 11008)
- Unicorn-26989.exe (PID: 8304)
- Unicorn-40739.exe (PID: 7624)
- Unicorn-38772.exe (PID: 11048)
- Unicorn-30209.exe (PID: 8340)
- Unicorn-10600.exe (PID: 9776)
- Unicorn-49251.exe (PID: 9812)
- Unicorn-22692.exe (PID: 8112)
- Unicorn-41649.exe (PID: 11116)
- Unicorn-59244.exe (PID: 7676)
- Unicorn-40925.exe (PID: 8412)
- Unicorn-15680.exe (PID: 9820)
- Unicorn-29466.exe (PID: 11068)
- Unicorn-25831.exe (PID: 11152)
- Unicorn-48794.exe (PID: 5324)
- Unicorn-59244.exe (PID: 7668)
- Unicorn-53252.exe (PID: 9880)
- Unicorn-59244.exe (PID: 7684)
- Unicorn-44573.exe (PID: 8444)
- Unicorn-40925.exe (PID: 8404)
- Unicorn-61594.exe (PID: 8500)
- Unicorn-61594.exe (PID: 8508)
- Unicorn-64865.exe (PID: 9900)
- Unicorn-37105.exe (PID: 7748)
- Unicorn-37224.exe (PID: 11172)
- Unicorn-59244.exe (PID: 7692)
- Unicorn-11215.exe (PID: 10008)
- Unicorn-8028.exe (PID: 11200)
- Unicorn-24743.exe (PID: 7772)
- Unicorn-40135.exe (PID: 7732)
- Unicorn-38298.exe (PID: 11188)
- Unicorn-25066.exe (PID: 7344)
- Unicorn-48906.exe (PID: 10060)
- Unicorn-19488.exe (PID: 10048)
- Unicorn-14748.exe (PID: 11136)
- Unicorn-26016.exe (PID: 8484)
- Unicorn-1122.exe (PID: 9980)
- Unicorn-30609.exe (PID: 7780)
- Unicorn-32669.exe (PID: 10116)
- Unicorn-61594.exe (PID: 8516)
- Unicorn-59747.exe (PID: 6712)
- Unicorn-23738.exe (PID: 10108)
- Unicorn-6505.exe (PID: 8620)
- Unicorn-30226.exe (PID: 8652)
- Unicorn-463.exe (PID: 10160)
- Unicorn-23369.exe (PID: 7756)
- Unicorn-28114.exe (PID: 8580)
- Unicorn-47715.exe (PID: 8604)
- Unicorn-35669.exe (PID: 7384)
- Unicorn-24989.exe (PID: 10220)
- Unicorn-16183.exe (PID: 7368)
- Unicorn-13479.exe (PID: 8644)
- Unicorn-10679.exe (PID: 8636)
- Unicorn-42202.exe (PID: 9240)
- Unicorn-11142.exe (PID: 5720)
- Unicorn-38548.exe (PID: 10024)
- Unicorn-14656.exe (PID: 8240)
- Unicorn-53761.exe (PID: 8800)
- Unicorn-31197.exe (PID: 7356)
- Unicorn-63345.exe (PID: 8140)
- Unicorn-63393.exe (PID: 11220)
- Unicorn-56772.exe (PID: 11236)
- Unicorn-5552.exe (PID: 7184)
- Unicorn-18269.exe (PID: 9564)
- Unicorn-40300.exe (PID: 8760)
- Unicorn-46691.exe (PID: 8984)
- Unicorn-62894.exe (PID: 7860)
- Unicorn-13785.exe (PID: 4696)
- Unicorn-8571.exe (PID: 8780)
- Unicorn-23904.exe (PID: 8388)
- Unicorn-51610.exe (PID: 3768)
- Unicorn-32009.exe (PID: 3096)
- Unicorn-46605.exe (PID: 7380)
- Unicorn-2560.exe (PID: 7716)
- Unicorn-23331.exe (PID: 8900)
- Unicorn-22247.exe (PID: 10256)
- Unicorn-62085.exe (PID: 9008)
- Unicorn-7321.exe (PID: 8836)
- Unicorn-65376.exe (PID: 7940)
- Unicorn-18898.exe (PID: 8864)
- Unicorn-18535.exe (PID: 8956)
- Unicorn-9088.exe (PID: 10308)
- Unicorn-38557.exe (PID: 8148)
- Unicorn-53664.exe (PID: 7984)
- Unicorn-12480.exe (PID: 7948)
- Unicorn-5209.exe (PID: 8972)
- Unicorn-5995.exe (PID: 7488)
- Unicorn-38557.exe (PID: 8156)
- Unicorn-64212.exe (PID: 8820)
- Unicorn-42324.exe (PID: 8844)
- Unicorn-50339.exe (PID: 4932)
- Unicorn-53402.exe (PID: 728)
- Unicorn-11056.exe (PID: 9036)
- Unicorn-61530.exe (PID: 9076)
- Unicorn-43284.exe (PID: 9084)
- Unicorn-23683.exe (PID: 9096)
- Unicorn-7705.exe (PID: 9160)
- Unicorn-28330.exe (PID: 10368)
- Unicorn-50692.exe (PID: 10348)
- Unicorn-52835.exe (PID: 10172)
- Unicorn-38179.exe (PID: 7976)
- Unicorn-1896.exe (PID: 10400)
- Unicorn-52142.exe (PID: 8028)
- Unicorn-59034.exe (PID: 6028)
- Unicorn-22183.exe (PID: 8044)
- Unicorn-53402.exe (PID: 7228)
- Unicorn-42240.exe (PID: 9136)
- Unicorn-54215.exe (PID: 1388)
- Unicorn-48672.exe (PID: 11288)
- Unicorn-39802.exe (PID: 7880)
- Unicorn-26778.exe (PID: 7932)
- Unicorn-46237.exe (PID: 8072)
- Unicorn-22810.exe (PID: 10408)
- Unicorn-39587.exe (PID: 10440)
- Unicorn-53206.exe (PID: 8064)
- Unicorn-17514.exe (PID: 11340)
- Unicorn-62894.exe (PID: 7524)
- Unicorn-17514.exe (PID: 11332)
- Unicorn-52125.exe (PID: 9324)
- Unicorn-3673.exe (PID: 8132)
- Unicorn-27101.exe (PID: 7300)
- Unicorn-36515.exe (PID: 10388)
- Unicorn-52625.exe (PID: 8916)
- Unicorn-57089.exe (PID: 1760)
- Unicorn-17514.exe (PID: 11324)
- Unicorn-63904.exe (PID: 2420)
- Unicorn-30311.exe (PID: 4448)
- Unicorn-60801.exe (PID: 10532)
- Unicorn-23706.exe (PID: 8016)
- Unicorn-18202.exe (PID: 10620)
- Unicorn-63904.exe (PID: 2268)
- Unicorn-26093.exe (PID: 9440)
- Unicorn-63965.exe (PID: 6708)
- Unicorn-39837.exe (PID: 9468)
- Unicorn-33946.exe (PID: 1568)
- Unicorn-6826.exe (PID: 10660)
- Unicorn-8393.exe (PID: 10500)
- Unicorn-39918.exe (PID: 10564)
- Unicorn-15939.exe (PID: 2284)
- Unicorn-11417.exe (PID: 4776)
- Unicorn-3682.exe (PID: 9496)
- Unicorn-62382.exe (PID: 7596)
- Unicorn-6826.exe (PID: 10656)
- Unicorn-29861.exe (PID: 10480)
- Unicorn-59162.exe (PID: 9532)
- Unicorn-62301.exe (PID: 10712)
- Unicorn-18905.exe (PID: 1056)
- Unicorn-19171.exe (PID: 6228)
- Unicorn-44100.exe (PID: 2140)
- Unicorn-62301.exe (PID: 10704)
- Unicorn-3935.exe (PID: 4464)
- Unicorn-60317.exe (PID: 11408)
- Unicorn-29674.exe (PID: 7036)
- Unicorn-59162.exe (PID: 9540)
- Unicorn-59805.exe (PID: 10736)
- Unicorn-25763.exe (PID: 10756)
- Unicorn-48340.exe (PID: 8200)
- Unicorn-48797.exe (PID: 5512)
- Unicorn-42266.exe (PID: 9676)
- Unicorn-64349.exe (PID: 11460)
- Unicorn-19559.exe (PID: 8260)
- Unicorn-26275.exe (PID: 11424)
- Unicorn-10457.exe (PID: 11440)
- Unicorn-20199.exe (PID: 9852)
- Unicorn-8643.exe (PID: 9612)
- Unicorn-2215.exe (PID: 7360)
- Unicorn-4639.exe (PID: 10860)
- Unicorn-20250.exe (PID: 11392)
- Unicorn-64349.exe (PID: 11468)
- Unicorn-21943.exe (PID: 7808)
- Unicorn-28114.exe (PID: 8572)
- Unicorn-47715.exe (PID: 8612)
- Unicorn-35669.exe (PID: 7396)
- Unicorn-51521.exe (PID: 11552)
- Unicorn-7945.exe (PID: 11516)
- Unicorn-41571.exe (PID: 9948)
- Unicorn-46148.exe (PID: 9956)
- Unicorn-61853.exe (PID: 11496)
- Unicorn-14217.exe (PID: 8588)
- Unicorn-12169.exe (PID: 8548)
- Unicorn-63690.exe (PID: 11572)
- Unicorn-29761.exe (PID: 9152)
- Unicorn-6610.exe (PID: 9176)
- Unicorn-49171.exe (PID: 7520)
- Unicorn-26315.exe (PID: 8996)
- Unicorn-8921.exe (PID: 11612)
- Unicorn-2791.exe (PID: 11588)
- Unicorn-22720.exe (PID: 7564)
- Unicorn-5346.exe (PID: 8356)
- Unicorn-10624.exe (PID: 11536)
- Unicorn-63130.exe (PID: 8468)
- Unicorn-23203.exe (PID: 11620)
- Unicorn-2791.exe (PID: 11596)
- Unicorn-46493.exe (PID: 11800)
- Unicorn-48029.exe (PID: 11704)
- Unicorn-48029.exe (PID: 11700)
- Unicorn-16483.exe (PID: 11840)
- Unicorn-13986.exe (PID: 11768)
- Unicorn-30240.exe (PID: 11724)
- Unicorn-8921.exe (PID: 11604)
- Unicorn-53856.exe (PID: 11628)
- Unicorn-7961.exe (PID: 11692)
- Unicorn-60618.exe (PID: 11904)
- Unicorn-41278.exe (PID: 11376)
- Unicorn-5190.exe (PID: 12028)
- Unicorn-49025.exe (PID: 11860)
- Unicorn-49025.exe (PID: 11864)
- Unicorn-14406.exe (PID: 11876)
- Unicorn-495.exe (PID: 10984)
- Unicorn-44050.exe (PID: 9788)
- Unicorn-59244.exe (PID: 7700)
- Unicorn-1817.exe (PID: 11940)
- Unicorn-11578.exe (PID: 11968)
- Unicorn-2913.exe (PID: 11960)
- Unicorn-35179.exe (PID: 12060)
- Unicorn-48632.exe (PID: 12044)
- Unicorn-40527.exe (PID: 8856)
- Unicorn-62085.exe (PID: 9004)
- Unicorn-36715.exe (PID: 11988)
- Unicorn-53514.exe (PID: 11976)
- Unicorn-13986.exe (PID: 11760)
- Unicorn-43369.exe (PID: 11820)
- Unicorn-56507.exe (PID: 12160)
- Unicorn-36963.exe (PID: 12124)
- Unicorn-24707.exe (PID: 8436)
- Unicorn-5346.exe (PID: 8364)
- Unicorn-8487.exe (PID: 12140)
- Unicorn-320.exe (PID: 12100)
- Unicorn-26851.exe (PID: 4408)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
506
Monitored processes
374
Malicious processes
66
Suspicious processes
65
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 616 | C:\Users\admin\AppData\Local\Temp\Unicorn-35232.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-35232.exe | Unicorn-3935.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 680 | C:\Users\admin\AppData\Local\Temp\Unicorn-89.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-89.exe | Unicorn-60846.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 728 | C:\Users\admin\AppData\Local\Temp\Unicorn-53402.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53402.exe | Unicorn-46237.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1052 | C:\Users\admin\AppData\Local\Temp\Unicorn-5129.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-5129.exe | 1 (515).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1056 | C:\Users\admin\AppData\Local\Temp\Unicorn-18905.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-18905.exe | Unicorn-48797.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1300 | C:\Users\admin\AppData\Local\Temp\Unicorn-61880.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-61880.exe | Unicorn-5129.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1388 | C:\Users\admin\AppData\Local\Temp\Unicorn-54215.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-54215.exe | Unicorn-53206.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1568 | C:\Users\admin\AppData\Local\Temp\Unicorn-33946.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-33946.exe | Unicorn-29674.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1748 | C:\Users\admin\AppData\Local\Temp\Unicorn-62696.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-62696.exe | — | Unicorn-63904.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1760 | C:\Users\admin\AppData\Local\Temp\Unicorn-57089.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-57089.exe | Unicorn-15939.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
9 485
Read events
9 470
Write events
15
Delete events
0
Modification events
| (PID) Process: | (5072) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (5072) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (5072) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (3192) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (3192) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (3192) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7312) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7312) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7312) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7512) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
Executable files
1 279
Suspicious files
5
Text files
0
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 3192 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\e0aa6b4c-fce5-436f-a627-9e4a1f20b1f9.down_data | — | |
MD5:— | SHA256:— | |||
| 4696 | Unicorn-13785.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-48797.exe | executable | |
MD5:0C26D295F6FC7468E51C8BA0F5A82456 | SHA256:44747C5D7DD4925B36443D086B53D9D0F75B7B6C94D4A4AA1368E348E3B0E99D | |||
| 3192 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10D | binary | |
MD5:4872BABAF39AA62B8D32695EBB7E9173 | SHA256:2EE85DF86EE29BBEB3DCA81AA29B6DE204F605A2769B84C728A329178A2D0999 | |||
| 3192 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\291c0768-0bbc-4477-bdf7-033d8ad4a4f2.up_meta_secure | binary | |
MD5:820D034B70AD0F118CA953263134E45A | SHA256:B221727E112BB733AD7D130D9679ED321C5B4B997686E070172E4A8473EB7EED | |||
| 6712 | Unicorn-59747.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13785.exe | executable | |
MD5:D8006AC8C1277DD788F7C2C9697837C0 | SHA256:DB392D16C4D9B5AAAF04C1C70F48F1E49CECFF8F110D722B7EA4F3460B59D7C8 | |||
| 7184 | Unicorn-5552.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-38557.exe | executable | |
MD5:A6F3A3F1050B2B3BD0553F3EAEBBB8DE | SHA256:6BBD720D614B1A4D4B5A95803186605263B93E5C573E24A68171FC1FBE08C049 | |||
| 2568 | 1 (515).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-5552.exe | executable | |
MD5:1D84C9AC3BB68D46FE0D7ECEE9D06223 | SHA256:FD3D6DE662F2139589C4E0662BFD079EB67FE9E22BAFD080374D4D0E6476F581 | |||
| 6712 | Unicorn-59747.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-63345.exe | executable | |
MD5:67D07F9908C50DA69103892C67C9C1F7 | SHA256:96FDD4EC37BB961E1C063F3F62DEDB816EF06B2D6374E61A8354810D35BB9B9B | |||
| 1052 | Unicorn-5129.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53206.exe | executable | |
MD5:2007A2A6AEA88E83B5D3FA7A5B0F68A2 | SHA256:654A4F1118AD890EAA7D1C31FDF3F82CE9939754A7BC0BA9FAF5EC6EBB91C423 | |||
| 8072 | Unicorn-46237.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53402.exe | executable | |
MD5:AE65B4447473AC9F80FCDC5CF7DE1C63 | SHA256:2F0B7A45E1D0559948443684B5BA8A56145F907CE30976A6EDF46145CBAB780A | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
25
DNS requests
17
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
8908 | SIHClient.exe | GET | 200 | 23.219.150.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
— | — | GET | 200 | 88.221.110.122:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
8908 | SIHClient.exe | GET | 200 | 23.219.150.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
6644 | backgroundTaskHost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
3192 | BackgroundTransferHost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
2104 | svchost.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
— | — | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 88.221.110.122:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
5496 | MoUsoCoreWorker.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
2112 | svchost.exe | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.159.129:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 2.23.77.188:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
3216 | svchost.exe | 40.113.110.67:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
arc.msn.com |
| whitelisted |
www.bing.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |