| File name: | 1 (127) |
| Full analysis: | https://app.any.run/tasks/0b77aa53-5357-4938-a35d-b4ae8056cc1e |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 09:53:15 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 2F17B9CDEEA4064DED60EA687E7994E0 |
| SHA1: | 5844070E36786669670F31CD28BF6F40A1E5815F |
| SHA256: | 1366F8A12F5652E3831E5AD102189AD36E91E38C4ED78426A64A84561E5B47A0 |
| SSDEEP: | 6144:jdNzizIHnD2jA5lJpQY2ZHfx5tBqkvJGBa/P0e5d3k/8SwjwpyAAEhuSBq2Zs7ia:jzOkqjA5fpN+BBhaaX0e5dMx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- 1 (127).exe (PID: 5008)
- Unicorn-43319.exe (PID: 7020)
- Unicorn-9229.exe (PID: 6044)
- Unicorn-43615.exe (PID: 6392)
- Unicorn-57905.exe (PID: 5380)
- Unicorn-4590.exe (PID: 616)
- Unicorn-6785.exe (PID: 1452)
- Unicorn-2146.exe (PID: 680)
- Unicorn-51155.exe (PID: 4300)
- Unicorn-63142.exe (PID: 732)
- Unicorn-52338.exe (PID: 720)
- Unicorn-57277.exe (PID: 1852)
- Unicorn-45810.exe (PID: 2420)
- Unicorn-16283.exe (PID: 6816)
- Unicorn-4030.exe (PID: 4188)
- Unicorn-4585.exe (PID: 5360)
- Unicorn-38047.exe (PID: 2040)
- Unicorn-26488.exe (PID: 6592)
- Unicorn-6666.exe (PID: 6272)
- Unicorn-46770.exe (PID: 5640)
- Unicorn-13350.exe (PID: 5328)
- Unicorn-27640.exe (PID: 5064)
- Unicorn-33506.exe (PID: 1804)
- Unicorn-30647.exe (PID: 7312)
- Unicorn-41237.exe (PID: 7276)
- Unicorn-43541.exe (PID: 6584)
- Unicorn-2613.exe (PID: 7332)
- Unicorn-52603.exe (PID: 7348)
- Unicorn-3402.exe (PID: 7368)
- Unicorn-40905.exe (PID: 7388)
- Unicorn-19547.exe (PID: 7456)
- Unicorn-19032.exe (PID: 7476)
- Unicorn-7486.exe (PID: 7416)
- Unicorn-45203.exe (PID: 7504)
- Unicorn-55409.exe (PID: 7528)
- Unicorn-8254.exe (PID: 7596)
- Unicorn-29229.exe (PID: 7632)
- Unicorn-8809.exe (PID: 7620)
- Unicorn-61789.exe (PID: 6564)
- Unicorn-16423.exe (PID: 7536)
- Unicorn-54148.exe (PID: 7772)
- Unicorn-8254.exe (PID: 7580)
- Unicorn-8254.exe (PID: 7588)
- Unicorn-36080.exe (PID: 7680)
- Unicorn-63407.exe (PID: 4164)
- Unicorn-25145.exe (PID: 7672)
- Unicorn-54383.exe (PID: 5204)
- Unicorn-8254.exe (PID: 7564)
- Unicorn-32759.exe (PID: 7604)
- Unicorn-19545.exe (PID: 7664)
- Unicorn-32759.exe (PID: 7612)
- Unicorn-60013.exe (PID: 7764)
- Unicorn-13350.exe (PID: 1760)
- Unicorn-29229.exe (PID: 7640)
- Unicorn-13350.exe (PID: 780)
- Unicorn-24975.exe (PID: 7820)
- Unicorn-5737.exe (PID: 4740)
- Unicorn-29613.exe (PID: 7828)
- Unicorn-24975.exe (PID: 7812)
- Unicorn-26947.exe (PID: 7268)
- Unicorn-30729.exe (PID: 7908)
- Unicorn-38343.exe (PID: 7884)
- Unicorn-53298.exe (PID: 7844)
- Unicorn-9178.exe (PID: 7992)
- Unicorn-63018.exe (PID: 8008)
- Unicorn-1202.exe (PID: 7952)
- Unicorn-23660.exe (PID: 7972)
- Unicorn-39111.exe (PID: 8052)
- Unicorn-38462.exe (PID: 8156)
- Unicorn-39281.exe (PID: 4268)
- Unicorn-10522.exe (PID: 8032)
- Unicorn-47087.exe (PID: 8100)
- Unicorn-28512.exe (PID: 8188)
- Unicorn-2333.exe (PID: 3300)
- Unicorn-5292.exe (PID: 8136)
- Unicorn-31305.exe (PID: 8108)
- Unicorn-63615.exe (PID: 8068)
- Unicorn-63615.exe (PID: 8084)
- Unicorn-38727.exe (PID: 8164)
- Unicorn-19473.exe (PID: 7408)
- Unicorn-42197.exe (PID: 7440)
- Unicorn-2738.exe (PID: 8220)
- Unicorn-60470.exe (PID: 8240)
- Unicorn-32479.exe (PID: 8264)
- Unicorn-64886.exe (PID: 8284)
- Unicorn-60683.exe (PID: 8340)
- Unicorn-36179.exe (PID: 8324)
- Unicorn-40263.exe (PID: 8316)
- Unicorn-57486.exe (PID: 8588)
- Unicorn-44902.exe (PID: 8356)
- Unicorn-29717.exe (PID: 8612)
- Unicorn-45115.exe (PID: 8720)
- Unicorn-27308.exe (PID: 8432)
- Unicorn-37885.exe (PID: 8604)
- Unicorn-23735.exe (PID: 8384)
- Unicorn-32863.exe (PID: 8736)
- Unicorn-41607.exe (PID: 8412)
- Unicorn-16911.exe (PID: 8552)
- Unicorn-62582.exe (PID: 8536)
- Unicorn-12826.exe (PID: 8496)
- Unicorn-33439.exe (PID: 8440)
- Unicorn-8550.exe (PID: 8620)
- Unicorn-57751.exe (PID: 8596)
- Unicorn-8742.exe (PID: 8480)
- Unicorn-63489.exe (PID: 8812)
- Unicorn-17081.exe (PID: 8748)
- Unicorn-44153.exe (PID: 8804)
- Unicorn-45115.exe (PID: 8728)
- Unicorn-48497.exe (PID: 8844)
- Unicorn-34761.exe (PID: 8852)
- Unicorn-33975.exe (PID: 8820)
- Unicorn-9873.exe (PID: 8964)
- Unicorn-20808.exe (PID: 8956)
- Unicorn-8254.exe (PID: 7572)
- Unicorn-51311.exe (PID: 9024)
- Unicorn-30699.exe (PID: 9056)
- Unicorn-53157.exe (PID: 9072)
- Unicorn-42737.exe (PID: 8932)
- Unicorn-55395.exe (PID: 9032)
- Unicorn-39421.exe (PID: 9080)
- Unicorn-58903.exe (PID: 9180)
- Unicorn-42759.exe (PID: 9132)
- Unicorn-46734.exe (PID: 4428)
- Unicorn-40604.exe (PID: 9012)
- Unicorn-40189.exe (PID: 9236)
- Unicorn-13786.exe (PID: 9208)
- Unicorn-52250.exe (PID: 9300)
- Unicorn-22176.exe (PID: 9336)
- Unicorn-15493.exe (PID: 9284)
- Unicorn-44259.exe (PID: 9452)
- Unicorn-36091.exe (PID: 9432)
- Unicorn-20117.exe (PID: 9472)
- Unicorn-20523.exe (PID: 9580)
- Unicorn-61555.exe (PID: 9564)
- Unicorn-63615.exe (PID: 8076)
- Unicorn-53387.exe (PID: 9540)
- Unicorn-56054.exe (PID: 9492)
- Unicorn-29437.exe (PID: 9528)
- Unicorn-32775.exe (PID: 9596)
- Unicorn-32775.exe (PID: 9604)
- Unicorn-38025.exe (PID: 1132)
- Unicorn-7124.exe (PID: 9636)
- Unicorn-42095.exe (PID: 9680)
- Unicorn-23712.exe (PID: 9660)
- Unicorn-3100.exe (PID: 9708)
- Unicorn-44918.exe (PID: 9772)
- Unicorn-22037.exe (PID: 9756)
- Unicorn-54902.exe (PID: 9716)
- Unicorn-62323.exe (PID: 9792)
- Unicorn-21483.exe (PID: 9700)
- Unicorn-20833.exe (PID: 9868)
- Unicorn-16245.exe (PID: 9848)
- Unicorn-20641.exe (PID: 9940)
- Unicorn-21099.exe (PID: 9876)
- Unicorn-13122.exe (PID: 9808)
- Unicorn-1041.exe (PID: 9948)
- Unicorn-13122.exe (PID: 9816)
- Unicorn-27081.exe (PID: 9976)
- Unicorn-50242.exe (PID: 9904)
- Unicorn-63977.exe (PID: 9912)
- Unicorn-47729.exe (PID: 8464)
- Unicorn-46563.exe (PID: 10020)
- Unicorn-53859.exe (PID: 8472)
- Unicorn-39547.exe (PID: 10076)
- Unicorn-25056.exe (PID: 10104)
- Unicorn-15597.exe (PID: 10060)
- Unicorn-47139.exe (PID: 10124)
- Unicorn-61290.exe (PID: 10152)
- Unicorn-59650.exe (PID: 9148)
- Unicorn-63481.exe (PID: 8196)
- Unicorn-26247.exe (PID: 10412)
- Unicorn-19023.exe (PID: 9264)
- Unicorn-3174.exe (PID: 10168)
- Unicorn-57803.exe (PID: 10360)
- Unicorn-11202.exe (PID: 9500)
- Unicorn-7834.exe (PID: 7156)
- Unicorn-15811.exe (PID: 10264)
- Unicorn-21601.exe (PID: 10340)
- Unicorn-30153.exe (PID: 10288)
- Unicorn-26247.exe (PID: 10416)
- Unicorn-8410.exe (PID: 10388)
- Unicorn-43137.exe (PID: 10460)
- Unicorn-21971.exe (PID: 10532)
- Unicorn-62811.exe (PID: 10588)
- Unicorn-50559.exe (PID: 10604)
- Unicorn-26055.exe (PID: 10504)
- Unicorn-26055.exe (PID: 10500)
- Unicorn-38307.exe (PID: 10556)
- Unicorn-17695.exe (PID: 10648)
- Unicorn-58727.exe (PID: 10568)
- Unicorn-13418.exe (PID: 10756)
- Unicorn-38115.exe (PID: 10688)
- Unicorn-29947.exe (PID: 10640)
- Unicorn-9334.exe (PID: 10736)
- Unicorn-21779.exe (PID: 10668)
- Unicorn-52405.exe (PID: 10696)
- Unicorn-50922.exe (PID: 10788)
- Unicorn-46838.exe (PID: 10780)
- Unicorn-41245.exe (PID: 10880)
- Unicorn-20884.exe (PID: 10928)
- Unicorn-13418.exe (PID: 10748)
- Unicorn-39821.exe (PID: 11024)
- Unicorn-22931.exe (PID: 10992)
- Unicorn-58535.exe (PID: 10704)
- Unicorn-64465.exe (PID: 10908)
- Unicorn-33839.exe (PID: 10848)
- Unicorn-17503.exe (PID: 10828)
- Unicorn-26750.exe (PID: 10920)
- Unicorn-49910.exe (PID: 10872)
- Unicorn-34399.exe (PID: 9172)
- Unicorn-7149.exe (PID: 10944)
- Unicorn-19401.exe (PID: 11016)
- Unicorn-7149.exe (PID: 10952)
- Unicorn-49281.exe (PID: 11176)
- Unicorn-27377.exe (PID: 11096)
- Unicorn-39821.exe (PID: 11032)
- Unicorn-39629.exe (PID: 11152)
- Unicorn-34991.exe (PID: 11136)
- Unicorn-15125.exe (PID: 11128)
- Unicorn-10294.exe (PID: 11208)
- Unicorn-13921.exe (PID: 11292)
- Unicorn-51327.exe (PID: 11184)
- Unicorn-13954.exe (PID: 11312)
- Unicorn-51882.exe (PID: 11232)
- Unicorn-19651.exe (PID: 8404)
- Unicorn-37029.exe (PID: 11080)
- Unicorn-63579.exe (PID: 11164)
- Unicorn-22355.exe (PID: 11328)
- Unicorn-46859.exe (PID: 11344)
- Unicorn-39629.exe (PID: 11148)
- Unicorn-28476.exe (PID: 11364)
- Unicorn-2489.exe (PID: 11320)
- Unicorn-19615.exe (PID: 11428)
- Unicorn-63578.exe (PID: 11468)
- Unicorn-50943.exe (PID: 11396)
- Unicorn-33712.exe (PID: 11500)
- Unicorn-1744.exe (PID: 11460)
- Unicorn-46594.exe (PID: 11336)
- Unicorn-58409.exe (PID: 11444)
- Unicorn-47819.exe (PID: 11520)
Starts itself from another location
- Unicorn-4590.exe (PID: 616)
- Unicorn-43319.exe (PID: 7020)
- 1 (127).exe (PID: 5008)
- Unicorn-43615.exe (PID: 6392)
- Unicorn-9229.exe (PID: 6044)
- Unicorn-57905.exe (PID: 5380)
- Unicorn-52338.exe (PID: 720)
- Unicorn-6785.exe (PID: 1452)
- Unicorn-2146.exe (PID: 680)
- Unicorn-51155.exe (PID: 4300)
- Unicorn-6666.exe (PID: 6272)
- Unicorn-57277.exe (PID: 1852)
- Unicorn-63407.exe (PID: 4164)
- Unicorn-43541.exe (PID: 6584)
- Unicorn-63142.exe (PID: 732)
- Unicorn-45810.exe (PID: 2420)
- Unicorn-16283.exe (PID: 6816)
- Unicorn-4030.exe (PID: 4188)
- Unicorn-26488.exe (PID: 6592)
- Unicorn-38047.exe (PID: 2040)
- Unicorn-46770.exe (PID: 5640)
- Unicorn-13350.exe (PID: 5328)
- Unicorn-27640.exe (PID: 5064)
- Unicorn-13350.exe (PID: 780)
- Unicorn-13350.exe (PID: 1760)
- Unicorn-54383.exe (PID: 5204)
- Unicorn-61789.exe (PID: 6564)
- Unicorn-5737.exe (PID: 4740)
- Unicorn-33506.exe (PID: 1804)
- Unicorn-41237.exe (PID: 7276)
- Unicorn-26947.exe (PID: 7268)
- Unicorn-30647.exe (PID: 7312)
- Unicorn-52603.exe (PID: 7348)
- Unicorn-2613.exe (PID: 7332)
- Unicorn-3402.exe (PID: 7368)
- Unicorn-40905.exe (PID: 7388)
- Unicorn-19547.exe (PID: 7456)
- Unicorn-19032.exe (PID: 7476)
- Unicorn-4585.exe (PID: 5360)
- Unicorn-7486.exe (PID: 7416)
- Unicorn-8254.exe (PID: 7596)
- Unicorn-45203.exe (PID: 7504)
- Unicorn-55409.exe (PID: 7528)
- Unicorn-8809.exe (PID: 7620)
- Unicorn-29229.exe (PID: 7632)
- Unicorn-16423.exe (PID: 7536)
- Unicorn-8254.exe (PID: 7588)
- Unicorn-54148.exe (PID: 7772)
- Unicorn-8254.exe (PID: 7580)
- Unicorn-32759.exe (PID: 7604)
- Unicorn-25145.exe (PID: 7672)
- Unicorn-8254.exe (PID: 7564)
- Unicorn-36080.exe (PID: 7680)
- Unicorn-19545.exe (PID: 7664)
- Unicorn-60013.exe (PID: 7764)
- Unicorn-32759.exe (PID: 7612)
- Unicorn-8254.exe (PID: 7572)
- Unicorn-29229.exe (PID: 7640)
- Unicorn-24975.exe (PID: 7820)
- Unicorn-29613.exe (PID: 7828)
- Unicorn-24975.exe (PID: 7812)
- Unicorn-30729.exe (PID: 7908)
- Unicorn-53298.exe (PID: 7844)
- Unicorn-1202.exe (PID: 7952)
- Unicorn-63018.exe (PID: 8008)
- Unicorn-9178.exe (PID: 7992)
- Unicorn-38343.exe (PID: 7884)
- Unicorn-10522.exe (PID: 8032)
- Unicorn-39111.exe (PID: 8052)
- Unicorn-38462.exe (PID: 8156)
- Unicorn-23660.exe (PID: 7972)
- Unicorn-47087.exe (PID: 8100)
- Unicorn-63615.exe (PID: 8076)
- Unicorn-28512.exe (PID: 8188)
- Unicorn-5292.exe (PID: 8136)
- Unicorn-39281.exe (PID: 4268)
- Unicorn-63615.exe (PID: 8084)
- Unicorn-38727.exe (PID: 8164)
- Unicorn-38025.exe (PID: 1132)
- Unicorn-63615.exe (PID: 8068)
- Unicorn-19473.exe (PID: 7408)
- Unicorn-31305.exe (PID: 8108)
- Unicorn-42197.exe (PID: 7440)
- Unicorn-60470.exe (PID: 8240)
- Unicorn-2738.exe (PID: 8220)
- Unicorn-64886.exe (PID: 8284)
- Unicorn-36179.exe (PID: 8324)
- Unicorn-40263.exe (PID: 8316)
- Unicorn-60683.exe (PID: 8340)
- Unicorn-29717.exe (PID: 8612)
- Unicorn-19651.exe (PID: 8404)
- Unicorn-45115.exe (PID: 8720)
- Unicorn-47729.exe (PID: 8464)
- Unicorn-57486.exe (PID: 8588)
- Unicorn-44902.exe (PID: 8356)
- Unicorn-27308.exe (PID: 8432)
- Unicorn-23735.exe (PID: 8384)
- Unicorn-37885.exe (PID: 8604)
- Unicorn-32863.exe (PID: 8736)
- Unicorn-41607.exe (PID: 8412)
- Unicorn-53859.exe (PID: 8472)
- Unicorn-12826.exe (PID: 8496)
- Unicorn-8550.exe (PID: 8620)
- Unicorn-33439.exe (PID: 8440)
- Unicorn-16911.exe (PID: 8552)
- Unicorn-57751.exe (PID: 8596)
- Unicorn-62582.exe (PID: 8536)
- Unicorn-63489.exe (PID: 8812)
- Unicorn-17081.exe (PID: 8748)
- Unicorn-8742.exe (PID: 8480)
- Unicorn-44153.exe (PID: 8804)
- Unicorn-45115.exe (PID: 8728)
- Unicorn-48497.exe (PID: 8844)
- Unicorn-34761.exe (PID: 8852)
- Unicorn-33975.exe (PID: 8820)
- Unicorn-20808.exe (PID: 8956)
- Unicorn-9873.exe (PID: 8964)
- Unicorn-55395.exe (PID: 9032)
- Unicorn-51311.exe (PID: 9024)
- Unicorn-30699.exe (PID: 9056)
- Unicorn-42737.exe (PID: 8932)
- Unicorn-39421.exe (PID: 9080)
- Unicorn-59650.exe (PID: 9148)
- Unicorn-34399.exe (PID: 9172)
- Unicorn-53157.exe (PID: 9072)
- Unicorn-5240.exe (PID: 9088)
- Unicorn-42759.exe (PID: 9132)
- Unicorn-13786.exe (PID: 9208)
- Unicorn-46734.exe (PID: 4428)
- Unicorn-40604.exe (PID: 9012)
- Unicorn-58903.exe (PID: 9180)
- Unicorn-19023.exe (PID: 9264)
- Unicorn-15493.exe (PID: 9284)
- Unicorn-52250.exe (PID: 9300)
- Unicorn-22176.exe (PID: 9336)
- Unicorn-40189.exe (PID: 9236)
- Unicorn-44259.exe (PID: 9452)
- Unicorn-36091.exe (PID: 9432)
- Unicorn-20117.exe (PID: 9472)
- Unicorn-20523.exe (PID: 9580)
- Unicorn-2333.exe (PID: 3300)
- Unicorn-56054.exe (PID: 9492)
- Unicorn-61555.exe (PID: 9564)
- Unicorn-53387.exe (PID: 9540)
- Unicorn-32775.exe (PID: 9596)
- Unicorn-29437.exe (PID: 9528)
- Unicorn-32775.exe (PID: 9604)
- Unicorn-11202.exe (PID: 9500)
- Unicorn-7124.exe (PID: 9636)
- Unicorn-42095.exe (PID: 9680)
- Unicorn-23712.exe (PID: 9660)
- Unicorn-22037.exe (PID: 9756)
- Unicorn-21483.exe (PID: 9700)
- Unicorn-44918.exe (PID: 9772)
- Unicorn-54902.exe (PID: 9716)
- Unicorn-62323.exe (PID: 9792)
- Unicorn-32479.exe (PID: 8264)
- Unicorn-3100.exe (PID: 9708)
- Unicorn-13122.exe (PID: 9816)
- Unicorn-20833.exe (PID: 9868)
- Unicorn-20641.exe (PID: 9940)
- Unicorn-21099.exe (PID: 9876)
- Unicorn-13122.exe (PID: 9808)
- Unicorn-16245.exe (PID: 9848)
- Unicorn-63977.exe (PID: 9912)
- Unicorn-27081.exe (PID: 9976)
- Unicorn-1041.exe (PID: 9948)
- Unicorn-50242.exe (PID: 9904)
- Unicorn-39547.exe (PID: 10076)
- Unicorn-46563.exe (PID: 10020)
- Unicorn-25056.exe (PID: 10104)
- Unicorn-15597.exe (PID: 10060)
- Unicorn-47139.exe (PID: 10124)
- Unicorn-61290.exe (PID: 10152)
INFO
The sample compiled with chinese language support
- 1 (127).exe (PID: 5008)
- Unicorn-19023.exe (PID: 9264)
- Unicorn-38047.exe (PID: 2040)
- Unicorn-4590.exe (PID: 616)
- Unicorn-28512.exe (PID: 8188)
- Unicorn-19547.exe (PID: 7456)
- Unicorn-19473.exe (PID: 7408)
- Unicorn-31305.exe (PID: 8108)
- Unicorn-38727.exe (PID: 8164)
- Unicorn-2613.exe (PID: 7332)
- Unicorn-36080.exe (PID: 7680)
- Unicorn-4030.exe (PID: 4188)
- Unicorn-63615.exe (PID: 8076)
- Unicorn-46770.exe (PID: 5640)
- Unicorn-36091.exe (PID: 9432)
- Unicorn-44918.exe (PID: 9772)
- Unicorn-15811.exe (PID: 10264)
- Unicorn-3100.exe (PID: 9708)
- Unicorn-23712.exe (PID: 9660)
- Unicorn-54902.exe (PID: 9716)
- Unicorn-62323.exe (PID: 9792)
- Unicorn-13418.exe (PID: 10756)
- Unicorn-7834.exe (PID: 7156)
- Unicorn-2146.exe (PID: 680)
- Unicorn-7124.exe (PID: 9636)
- Unicorn-22037.exe (PID: 9756)
- Unicorn-13122.exe (PID: 9816)
- Unicorn-30153.exe (PID: 10288)
- Unicorn-32479.exe (PID: 8264)
- Unicorn-16245.exe (PID: 9848)
- Unicorn-52405.exe (PID: 10696)
- Unicorn-20833.exe (PID: 9868)
- Unicorn-9334.exe (PID: 10736)
- Unicorn-20641.exe (PID: 9940)
- Unicorn-55409.exe (PID: 7528)
- Unicorn-38115.exe (PID: 10688)
- Unicorn-50922.exe (PID: 10788)
- Unicorn-46838.exe (PID: 10780)
- Unicorn-21779.exe (PID: 10668)
- Unicorn-1041.exe (PID: 9948)
- Unicorn-63977.exe (PID: 9912)
- Unicorn-20884.exe (PID: 10928)
- Unicorn-41245.exe (PID: 10880)
- Unicorn-27081.exe (PID: 9976)
- Unicorn-13418.exe (PID: 10748)
- Unicorn-8809.exe (PID: 7620)
- Unicorn-64886.exe (PID: 8284)
- Unicorn-13122.exe (PID: 9808)
- Unicorn-6666.exe (PID: 6272)
- Unicorn-36179.exe (PID: 8324)
- Unicorn-60683.exe (PID: 8340)
- Unicorn-29717.exe (PID: 8612)
- Unicorn-22931.exe (PID: 10992)
- Unicorn-39821.exe (PID: 11024)
- Unicorn-45115.exe (PID: 8720)
- Unicorn-29229.exe (PID: 7632)
- Unicorn-47729.exe (PID: 8464)
- Unicorn-40263.exe (PID: 8316)
- Unicorn-58535.exe (PID: 10704)
- Unicorn-8254.exe (PID: 7596)
- Unicorn-64465.exe (PID: 10908)
- Unicorn-57803.exe (PID: 10360)
- Unicorn-17503.exe (PID: 10828)
- Unicorn-41607.exe (PID: 8412)
- Unicorn-33839.exe (PID: 10848)
- Unicorn-8550.exe (PID: 8620)
- Unicorn-8410.exe (PID: 10388)
- Unicorn-12826.exe (PID: 8496)
- Unicorn-13350.exe (PID: 1760)
- Unicorn-57905.exe (PID: 5380)
- Unicorn-54148.exe (PID: 7772)
- Unicorn-13350.exe (PID: 5328)
- Unicorn-17081.exe (PID: 8748)
- Unicorn-63489.exe (PID: 8812)
- Unicorn-44902.exe (PID: 8356)
- Unicorn-23735.exe (PID: 8384)
- Unicorn-46563.exe (PID: 10020)
- Unicorn-33439.exe (PID: 8440)
- Unicorn-53859.exe (PID: 8472)
- Unicorn-32759.exe (PID: 7604)
- Unicorn-26750.exe (PID: 10920)
- Unicorn-25056.exe (PID: 10104)
- Unicorn-19545.exe (PID: 7664)
- Unicorn-33506.exe (PID: 1804)
- Unicorn-26247.exe (PID: 10412)
- Unicorn-44153.exe (PID: 8804)
- Unicorn-43541.exe (PID: 6584)
- Unicorn-43319.exe (PID: 7020)
- Unicorn-9873.exe (PID: 8964)
- Unicorn-63142.exe (PID: 732)
- Unicorn-39547.exe (PID: 10076)
- Unicorn-8254.exe (PID: 7580)
- Unicorn-8254.exe (PID: 7588)
- Unicorn-15597.exe (PID: 10060)
- Unicorn-34761.exe (PID: 8852)
- Unicorn-33975.exe (PID: 8820)
- Unicorn-42737.exe (PID: 8932)
- Unicorn-26247.exe (PID: 10416)
- Unicorn-21601.exe (PID: 10340)
- Unicorn-5737.exe (PID: 4740)
- Unicorn-24975.exe (PID: 7820)
- Unicorn-8254.exe (PID: 7572)
- Unicorn-55395.exe (PID: 9032)
- Unicorn-51311.exe (PID: 9024)
- Unicorn-9229.exe (PID: 6044)
- Unicorn-13350.exe (PID: 780)
- Unicorn-42759.exe (PID: 9132)
- Unicorn-39421.exe (PID: 9080)
- Unicorn-34399.exe (PID: 9172)
- Unicorn-49910.exe (PID: 10872)
- Unicorn-43137.exe (PID: 10460)
- Unicorn-27640.exe (PID: 5064)
- Unicorn-29613.exe (PID: 7828)
- Unicorn-24975.exe (PID: 7812)
- Unicorn-47139.exe (PID: 10124)
- Unicorn-7149.exe (PID: 10944)
- Unicorn-52250.exe (PID: 9300)
- Unicorn-40604.exe (PID: 9012)
- Unicorn-3174.exe (PID: 10168)
- Unicorn-52338.exe (PID: 720)
- Unicorn-26947.exe (PID: 7268)
- Unicorn-41237.exe (PID: 7276)
- Unicorn-38343.exe (PID: 7884)
- Unicorn-9178.exe (PID: 7992)
- Unicorn-16283.exe (PID: 6816)
- Unicorn-46734.exe (PID: 4428)
- Unicorn-21971.exe (PID: 10532)
- Unicorn-53298.exe (PID: 7844)
- Unicorn-13786.exe (PID: 9208)
- Unicorn-50559.exe (PID: 10604)
- Unicorn-7149.exe (PID: 10952)
- Unicorn-22176.exe (PID: 9336)
- Unicorn-23660.exe (PID: 7972)
- Unicorn-27377.exe (PID: 11096)
- Unicorn-44259.exe (PID: 9452)
- Unicorn-20117.exe (PID: 9472)
- Unicorn-63481.exe (PID: 8196)
- Unicorn-49281.exe (PID: 11176)
- Unicorn-17695.exe (PID: 10648)
- Unicorn-61290.exe (PID: 10152)
- Unicorn-19401.exe (PID: 11016)
- Unicorn-63407.exe (PID: 4164)
- Unicorn-63018.exe (PID: 8008)
- Unicorn-62811.exe (PID: 10588)
- Unicorn-53387.exe (PID: 9540)
- Unicorn-6785.exe (PID: 1452)
- Unicorn-39281.exe (PID: 4268)
- Unicorn-11202.exe (PID: 9500)
- Unicorn-20523.exe (PID: 9580)
- Unicorn-52603.exe (PID: 7348)
- Unicorn-32775.exe (PID: 9604)
- Unicorn-5292.exe (PID: 8136)
- Unicorn-2333.exe (PID: 3300)
- Unicorn-32775.exe (PID: 9596)
- Unicorn-39821.exe (PID: 11032)
- Unicorn-30647.exe (PID: 7312)
- Unicorn-4585.exe (PID: 5360)
- Unicorn-7486.exe (PID: 7416)
- Unicorn-38462.exe (PID: 8156)
- Unicorn-58727.exe (PID: 10568)
- Unicorn-29947.exe (PID: 10640)
- Unicorn-34991.exe (PID: 11136)
- Unicorn-38025.exe (PID: 1132)
- Unicorn-63615.exe (PID: 8068)
- Unicorn-51155.exe (PID: 4300)
- Unicorn-26488.exe (PID: 6592)
- Unicorn-60470.exe (PID: 8240)
- Unicorn-10294.exe (PID: 11208)
- Unicorn-21483.exe (PID: 9700)
- Unicorn-45203.exe (PID: 7504)
- Unicorn-42095.exe (PID: 9680)
- Unicorn-39629.exe (PID: 11152)
- Unicorn-40905.exe (PID: 7388)
- Unicorn-15125.exe (PID: 11128)
- Unicorn-51882.exe (PID: 11232)
- Unicorn-13954.exe (PID: 11312)
- Unicorn-63579.exe (PID: 11164)
- Unicorn-51327.exe (PID: 11184)
- Unicorn-13921.exe (PID: 11292)
- Unicorn-21099.exe (PID: 9876)
- Unicorn-50242.exe (PID: 9904)
- Unicorn-57486.exe (PID: 8588)
- Unicorn-37029.exe (PID: 11080)
- Unicorn-2738.exe (PID: 8220)
- Unicorn-3402.exe (PID: 7368)
- Unicorn-57277.exe (PID: 1852)
- Unicorn-29229.exe (PID: 7640)
- Unicorn-54383.exe (PID: 5204)
- Unicorn-57751.exe (PID: 8596)
- Unicorn-8742.exe (PID: 8480)
- Unicorn-22355.exe (PID: 11328)
- Unicorn-20808.exe (PID: 8956)
- Unicorn-48497.exe (PID: 8844)
- Unicorn-46859.exe (PID: 11344)
- Unicorn-39629.exe (PID: 11148)
- Unicorn-19651.exe (PID: 8404)
- Unicorn-32863.exe (PID: 8736)
- Unicorn-45115.exe (PID: 8728)
- Unicorn-45810.exe (PID: 2420)
- Unicorn-30729.exe (PID: 7908)
- Unicorn-50943.exe (PID: 11396)
- Unicorn-28476.exe (PID: 11364)
- Unicorn-26055.exe (PID: 10504)
- Unicorn-46594.exe (PID: 11336)
- Unicorn-19615.exe (PID: 11428)
- Unicorn-43615.exe (PID: 6392)
- Unicorn-56054.exe (PID: 9492)
- Unicorn-40189.exe (PID: 9236)
- Unicorn-38307.exe (PID: 10556)
- Unicorn-1744.exe (PID: 11460)
- Unicorn-2489.exe (PID: 11320)
- Unicorn-63578.exe (PID: 11468)
- Unicorn-33712.exe (PID: 11500)
- Unicorn-15493.exe (PID: 9284)
- Unicorn-25145.exe (PID: 7672)
- Unicorn-16911.exe (PID: 8552)
- Unicorn-61789.exe (PID: 6564)
- Unicorn-16423.exe (PID: 7536)
- Unicorn-8254.exe (PID: 7564)
- Unicorn-26055.exe (PID: 10500)
- Unicorn-63615.exe (PID: 8084)
- Unicorn-58409.exe (PID: 11444)
- Unicorn-10522.exe (PID: 8032)
- Unicorn-29437.exe (PID: 9528)
- Unicorn-39111.exe (PID: 8052)
- Unicorn-47819.exe (PID: 11520)
Reads the computer name
- 1 (127).exe (PID: 5008)
- Unicorn-43319.exe (PID: 7020)
- Unicorn-9229.exe (PID: 6044)
- Unicorn-43615.exe (PID: 6392)
- Unicorn-6666.exe (PID: 6272)
- Unicorn-2146.exe (PID: 680)
- Unicorn-63142.exe (PID: 732)
- Unicorn-43541.exe (PID: 6584)
- Unicorn-57277.exe (PID: 1852)
- Unicorn-45810.exe (PID: 2420)
- Unicorn-26488.exe (PID: 6592)
- Unicorn-4585.exe (PID: 5360)
- Unicorn-13350.exe (PID: 5328)
- Unicorn-38047.exe (PID: 2040)
- Unicorn-46770.exe (PID: 5640)
- Unicorn-54383.exe (PID: 5204)
- Unicorn-13350.exe (PID: 780)
- Unicorn-27640.exe (PID: 5064)
- Unicorn-41237.exe (PID: 7276)
- Unicorn-5737.exe (PID: 4740)
- Unicorn-2613.exe (PID: 7332)
- Unicorn-52603.exe (PID: 7348)
- Unicorn-63407.exe (PID: 4164)
- Unicorn-57905.exe (PID: 5380)
- Unicorn-45203.exe (PID: 7504)
- Unicorn-40905.exe (PID: 7388)
- Unicorn-7486.exe (PID: 7416)
- Unicorn-19032.exe (PID: 7476)
- Unicorn-55409.exe (PID: 7528)
- Unicorn-8254.exe (PID: 7596)
- Unicorn-16423.exe (PID: 7536)
- Unicorn-8254.exe (PID: 7580)
- Unicorn-36080.exe (PID: 7680)
- Unicorn-19545.exe (PID: 7664)
- Unicorn-32759.exe (PID: 7604)
- Unicorn-8254.exe (PID: 7564)
- Unicorn-8254.exe (PID: 7572)
- Unicorn-60013.exe (PID: 7764)
- Unicorn-24975.exe (PID: 7820)
- Unicorn-29613.exe (PID: 7828)
- Unicorn-53298.exe (PID: 7844)
- Unicorn-24975.exe (PID: 7812)
- Unicorn-38343.exe (PID: 7884)
- Unicorn-1202.exe (PID: 7952)
- Unicorn-63018.exe (PID: 8008)
- Unicorn-10522.exe (PID: 8032)
- Unicorn-38462.exe (PID: 8156)
- Unicorn-63615.exe (PID: 8076)
- Unicorn-63615.exe (PID: 8084)
- Unicorn-2738.exe (PID: 8220)
- Unicorn-63615.exe (PID: 8068)
- Unicorn-32479.exe (PID: 8264)
- Unicorn-64886.exe (PID: 8284)
- Unicorn-60683.exe (PID: 8340)
- Unicorn-8550.exe (PID: 8620)
- Unicorn-16911.exe (PID: 8552)
- Unicorn-44902.exe (PID: 8356)
- Unicorn-8742.exe (PID: 8480)
- Unicorn-34761.exe (PID: 8852)
- Unicorn-20808.exe (PID: 8956)
- Unicorn-53859.exe (PID: 8472)
- Unicorn-5240.exe (PID: 9088)
- Unicorn-59650.exe (PID: 9148)
- Unicorn-40604.exe (PID: 9012)
- Unicorn-52250.exe (PID: 9300)
- Unicorn-32775.exe (PID: 9596)
- Unicorn-23712.exe (PID: 9660)
- Unicorn-20523.exe (PID: 9580)
- Unicorn-21483.exe (PID: 9700)
- Unicorn-54902.exe (PID: 9716)
- Unicorn-39547.exe (PID: 10076)
- Unicorn-25056.exe (PID: 10104)
- Unicorn-47139.exe (PID: 10124)
- Unicorn-63481.exe (PID: 8196)
Checks supported languages
- 1 (127).exe (PID: 5008)
- Unicorn-43319.exe (PID: 7020)
- Unicorn-9229.exe (PID: 6044)
- Unicorn-43615.exe (PID: 6392)
- Unicorn-6666.exe (PID: 6272)
- Unicorn-52338.exe (PID: 720)
- Unicorn-57905.exe (PID: 5380)
- Unicorn-2146.exe (PID: 680)
- Unicorn-63142.exe (PID: 732)
- Unicorn-6785.exe (PID: 1452)
- Unicorn-43541.exe (PID: 6584)
- Unicorn-26488.exe (PID: 6592)
- Unicorn-45810.exe (PID: 2420)
- Unicorn-16283.exe (PID: 6816)
- Unicorn-4030.exe (PID: 4188)
- Unicorn-38047.exe (PID: 2040)
- Unicorn-61789.exe (PID: 6564)
- Unicorn-13350.exe (PID: 1760)
- Unicorn-13350.exe (PID: 780)
- Unicorn-33506.exe (PID: 1804)
- Unicorn-26947.exe (PID: 7268)
- Unicorn-30647.exe (PID: 7312)
- Unicorn-2613.exe (PID: 7332)
- Unicorn-19473.exe (PID: 7408)
- Unicorn-7486.exe (PID: 7416)
- Unicorn-42197.exe (PID: 7440)
- Unicorn-45203.exe (PID: 7504)
- Unicorn-55409.exe (PID: 7528)
- Unicorn-16423.exe (PID: 7536)
- Unicorn-25145.exe (PID: 7672)
- Unicorn-29229.exe (PID: 7640)
- Unicorn-54148.exe (PID: 7772)
- Unicorn-60013.exe (PID: 7764)
- Unicorn-24975.exe (PID: 7812)
- Unicorn-29613.exe (PID: 7828)
- Unicorn-38343.exe (PID: 7884)
- Unicorn-8254.exe (PID: 7596)
- Unicorn-30729.exe (PID: 7908)
- Unicorn-23660.exe (PID: 7972)
- Unicorn-47087.exe (PID: 8100)
- Unicorn-39111.exe (PID: 8052)
- Unicorn-63615.exe (PID: 8068)
- Unicorn-38727.exe (PID: 8164)
- Unicorn-39281.exe (PID: 4268)
- Unicorn-40263.exe (PID: 8316)
- Unicorn-23735.exe (PID: 8384)
- Unicorn-41607.exe (PID: 8412)
- Unicorn-33439.exe (PID: 8440)
- Unicorn-47729.exe (PID: 8464)
- Unicorn-57486.exe (PID: 8588)
- Unicorn-57751.exe (PID: 8596)
- Unicorn-45115.exe (PID: 8720)
- Unicorn-45115.exe (PID: 8728)
- Unicorn-16911.exe (PID: 8552)
- Unicorn-8550.exe (PID: 8620)
- Unicorn-9873.exe (PID: 8964)
- Unicorn-20808.exe (PID: 8956)
- Unicorn-51311.exe (PID: 9024)
- Unicorn-33975.exe (PID: 8820)
- Unicorn-48497.exe (PID: 8844)
- Unicorn-34761.exe (PID: 8852)
- Unicorn-5240.exe (PID: 9088)
- Unicorn-42759.exe (PID: 9132)
- Unicorn-53157.exe (PID: 9072)
- Unicorn-13786.exe (PID: 9208)
- Unicorn-46734.exe (PID: 4428)
- Unicorn-19023.exe (PID: 9264)
- Unicorn-52250.exe (PID: 9300)
- Unicorn-36091.exe (PID: 9432)
- Unicorn-44259.exe (PID: 9452)
- Unicorn-11202.exe (PID: 9500)
- Unicorn-56054.exe (PID: 9492)
- Unicorn-53387.exe (PID: 9540)
- Unicorn-22176.exe (PID: 9336)
- Unicorn-29437.exe (PID: 9528)
- Unicorn-20523.exe (PID: 9580)
- Unicorn-32775.exe (PID: 9596)
- Unicorn-23712.exe (PID: 9660)
- Unicorn-22037.exe (PID: 9756)
- Unicorn-13122.exe (PID: 9816)
- Unicorn-44918.exe (PID: 9772)
- Unicorn-50242.exe (PID: 9904)
- Unicorn-1041.exe (PID: 9948)
- Unicorn-46563.exe (PID: 10020)
- Unicorn-15597.exe (PID: 10060)
- Unicorn-25056.exe (PID: 10104)
- Unicorn-47139.exe (PID: 10124)
- Unicorn-21099.exe (PID: 9876)
- Unicorn-20833.exe (PID: 9868)
- Unicorn-7834.exe (PID: 7156)
- Unicorn-30153.exe (PID: 10288)
- Unicorn-21601.exe (PID: 10340)
- Unicorn-8410.exe (PID: 10388)
- Unicorn-26247.exe (PID: 10412)
- Unicorn-43137.exe (PID: 10460)
- Unicorn-38307.exe (PID: 10556)
- Unicorn-26055.exe (PID: 10500)
- Unicorn-29947.exe (PID: 10640)
- Unicorn-17695.exe (PID: 10648)
- Unicorn-9334.exe (PID: 10736)
- Unicorn-50922.exe (PID: 10788)
- Unicorn-17503.exe (PID: 10828)
- Unicorn-20884.exe (PID: 10928)
- Unicorn-41245.exe (PID: 10880)
- Unicorn-64465.exe (PID: 10908)
- Unicorn-7149.exe (PID: 10952)
- Unicorn-13418.exe (PID: 10748)
- Unicorn-27377.exe (PID: 11096)
- Unicorn-39629.exe (PID: 11148)
- Unicorn-15125.exe (PID: 11128)
- Unicorn-34991.exe (PID: 11136)
- Unicorn-7149.exe (PID: 10944)
- Unicorn-19401.exe (PID: 11016)
- Unicorn-51327.exe (PID: 11184)
- Unicorn-13921.exe (PID: 11292)
- Unicorn-10294.exe (PID: 11208)
- Unicorn-46594.exe (PID: 11336)
- Unicorn-13954.exe (PID: 11312)
- Unicorn-46859.exe (PID: 11344)
- Unicorn-28476.exe (PID: 11364)
- Unicorn-50943.exe (PID: 11396)
- Unicorn-51882.exe (PID: 11232)
- Unicorn-19615.exe (PID: 11428)
- Unicorn-33712.exe (PID: 11500)
- Unicorn-58409.exe (PID: 11444)
- Unicorn-60071.exe (PID: 11544)
- Unicorn-6786.exe (PID: 11560)
- Unicorn-59879.exe (PID: 11584)
- Unicorn-48182.exe (PID: 11632)
- Unicorn-6594.exe (PID: 11648)
- Unicorn-12769.exe (PID: 11668)
- Unicorn-41357.exe (PID: 11732)
- Unicorn-53055.exe (PID: 11748)
- Unicorn-30396.exe (PID: 11852)
- Unicorn-57502.exe (PID: 11896)
- Unicorn-61586.exe (PID: 11904)
- Unicorn-44887.exe (PID: 11708)
- Unicorn-28359.exe (PID: 11764)
- Unicorn-24637.exe (PID: 11956)
- Unicorn-48587.exe (PID: 11980)
- Unicorn-27272.exe (PID: 12068)
- Unicorn-55861.exe (PID: 12092)
- Unicorn-38041.exe (PID: 12112)
- Unicorn-3662.exe (PID: 11932)
- Unicorn-48587.exe (PID: 11972)
- Unicorn-3781.exe (PID: 12252)
- Unicorn-62183.exe (PID: 4736)
- Unicorn-34149.exe (PID: 12296)
- Unicorn-49037.exe (PID: 12328)
- Unicorn-22996.exe (PID: 12152)
- Unicorn-30833.exe (PID: 12356)
- Unicorn-34917.exe (PID: 12380)
- Unicorn-41769.exe (PID: 12372)
- Unicorn-31623.exe (PID: 12420)
- Unicorn-56127.exe (PID: 12492)
- Unicorn-15094.exe (PID: 12512)
- Unicorn-35877.exe (PID: 12648)
- Unicorn-13941.exe (PID: 12616)
- Unicorn-12472.exe (PID: 12776)
- Unicorn-21852.exe (PID: 12992)
- Unicorn-23515.exe (PID: 13088)
- Unicorn-59879.exe (PID: 11588)
- Unicorn-21329.exe (PID: 13220)
- Unicorn-41253.exe (PID: 12704)
- Unicorn-47118.exe (PID: 12708)
- Unicorn-27718.exe (PID: 12984)
- Unicorn-16307.exe (PID: 6108)
- Unicorn-48979.exe (PID: 2616)
- Unicorn-53063.exe (PID: 300)
- Unicorn-15849.exe (PID: 13328)
- Unicorn-4630.exe (PID: 13544)
- Unicorn-55175.exe (PID: 13612)
- Unicorn-63151.exe (PID: 13692)
- Unicorn-629.exe (PID: 13720)
- Unicorn-62767.exe (PID: 13820)
- Unicorn-35139.exe (PID: 13952)
- Unicorn-47946.exe (PID: 13976)
- Unicorn-44630.exe (PID: 14164)
- Unicorn-7489.exe (PID: 14276)
- Unicorn-21927.exe (PID: 13768)
- Unicorn-20893.exe (PID: 14500)
- Unicorn-49866.exe (PID: 5736)
- Unicorn-19741.exe (PID: 14312)
- Unicorn-20265.exe (PID: 14344)
- Unicorn-42989.exe (PID: 14404)
- Unicorn-42989.exe (PID: 14396)
- Unicorn-52249.exe (PID: 14564)
- Unicorn-63217.exe (PID: 14596)
- Unicorn-52606.exe (PID: 14248)
- Unicorn-64369.exe (PID: 14932)
- Unicorn-9740.exe (PID: 14760)
- Unicorn-4365.exe (PID: 14612)
- Unicorn-35713.exe (PID: 14548)
- Unicorn-21992.exe (PID: 14736)
- Unicorn-38521.exe (PID: 14640)
- Unicorn-28123.exe (PID: 14752)
- Unicorn-52117.exe (PID: 14844)
- Unicorn-38381.exe (PID: 14896)
- Unicorn-37178.exe (PID: 15100)
- Unicorn-17577.exe (PID: 15112)
- Unicorn-46909.exe (PID: 15248)
- Unicorn-46898.exe (PID: 15392)
- Unicorn-46706.exe (PID: 15516)
- Unicorn-30369.exe (PID: 15500)
- Unicorn-2165.exe (PID: 15308)
- Unicorn-6249.exe (PID: 15316)
- Unicorn-43005.exe (PID: 15340)
- Unicorn-6057.exe (PID: 7964)
- Unicorn-6057.exe (PID: 4572)
- Unicorn-29358.exe (PID: 15612)
- Unicorn-37281.exe (PID: 15656)
- Unicorn-50790.exe (PID: 15568)
- Unicorn-64525.exe (PID: 15552)
- Unicorn-21189.exe (PID: 15628)
Create files in a temporary directory
- 1 (127).exe (PID: 5008)
- Unicorn-43319.exe (PID: 7020)
- Unicorn-6666.exe (PID: 6272)
- Unicorn-51155.exe (PID: 4300)
- Unicorn-57277.exe (PID: 1852)
- Unicorn-45810.exe (PID: 2420)
- Unicorn-6785.exe (PID: 1452)
- Unicorn-4030.exe (PID: 4188)
- Unicorn-52338.exe (PID: 720)
- Unicorn-26488.exe (PID: 6592)
- Unicorn-38047.exe (PID: 2040)
- Unicorn-46770.exe (PID: 5640)
- Unicorn-27640.exe (PID: 5064)
- Unicorn-33506.exe (PID: 1804)
- Unicorn-43541.exe (PID: 6584)
- Unicorn-57905.exe (PID: 5380)
- Unicorn-9229.exe (PID: 6044)
- Unicorn-2613.exe (PID: 7332)
- Unicorn-52603.exe (PID: 7348)
- Unicorn-7486.exe (PID: 7416)
- Unicorn-40905.exe (PID: 7388)
- Unicorn-4590.exe (PID: 616)
- Unicorn-19032.exe (PID: 7476)
- Unicorn-2146.exe (PID: 680)
- Unicorn-45203.exe (PID: 7504)
- Unicorn-8809.exe (PID: 7620)
- Unicorn-29229.exe (PID: 7632)
- Unicorn-61789.exe (PID: 6564)
- Unicorn-16423.exe (PID: 7536)
- Unicorn-8254.exe (PID: 7588)
- Unicorn-54148.exe (PID: 7772)
- Unicorn-63407.exe (PID: 4164)
- Unicorn-19545.exe (PID: 7664)
- Unicorn-32759.exe (PID: 7604)
- Unicorn-25145.exe (PID: 7672)
- Unicorn-8254.exe (PID: 7564)
- Unicorn-13350.exe (PID: 1760)
- Unicorn-60013.exe (PID: 7764)
- Unicorn-32759.exe (PID: 7612)
- Unicorn-13350.exe (PID: 780)
- Unicorn-5737.exe (PID: 4740)
- Unicorn-29613.exe (PID: 7828)
- Unicorn-24975.exe (PID: 7820)
- Unicorn-24975.exe (PID: 7812)
- Unicorn-38343.exe (PID: 7884)
- Unicorn-30729.exe (PID: 7908)
- Unicorn-26947.exe (PID: 7268)
- Unicorn-41237.exe (PID: 7276)
- Unicorn-16283.exe (PID: 6816)
- Unicorn-30647.exe (PID: 7312)
- Unicorn-63018.exe (PID: 8008)
- Unicorn-1202.exe (PID: 7952)
- Unicorn-9178.exe (PID: 7992)
- Unicorn-38462.exe (PID: 8156)
- Unicorn-2333.exe (PID: 3300)
- Unicorn-43615.exe (PID: 6392)
- Unicorn-4585.exe (PID: 5360)
- Unicorn-19473.exe (PID: 7408)
- Unicorn-47087.exe (PID: 8100)
- Unicorn-31305.exe (PID: 8108)
- Unicorn-63615.exe (PID: 8084)
- Unicorn-63615.exe (PID: 8068)
- Unicorn-2738.exe (PID: 8220)
- Unicorn-32479.exe (PID: 8264)
- Unicorn-42197.exe (PID: 7440)
- Unicorn-36179.exe (PID: 8324)
- Unicorn-55409.exe (PID: 7528)
- Unicorn-29717.exe (PID: 8612)
- Unicorn-45115.exe (PID: 8720)
- Unicorn-57486.exe (PID: 8588)
- Unicorn-60683.exe (PID: 8340)
- Unicorn-27308.exe (PID: 8432)
- Unicorn-23735.exe (PID: 8384)
- Unicorn-16911.exe (PID: 8552)
- Unicorn-41607.exe (PID: 8412)
- Unicorn-62582.exe (PID: 8536)
- Unicorn-33439.exe (PID: 8440)
- Unicorn-8742.exe (PID: 8480)
- Unicorn-63142.exe (PID: 732)
- Unicorn-17081.exe (PID: 8748)
- Unicorn-54383.exe (PID: 5204)
- Unicorn-36080.exe (PID: 7680)
- Unicorn-45115.exe (PID: 8728)
- Unicorn-13350.exe (PID: 5328)
- Unicorn-29229.exe (PID: 7640)
- Unicorn-44153.exe (PID: 8804)
- Unicorn-8254.exe (PID: 7572)
- Unicorn-20808.exe (PID: 8956)
- Unicorn-55395.exe (PID: 9032)
- Unicorn-51311.exe (PID: 9024)
- Unicorn-30699.exe (PID: 9056)
- Unicorn-42737.exe (PID: 8932)
- Unicorn-39421.exe (PID: 9080)
- Unicorn-58903.exe (PID: 9180)
- Unicorn-53298.exe (PID: 7844)
- Unicorn-40604.exe (PID: 9012)
- Unicorn-52250.exe (PID: 9300)
- Unicorn-22176.exe (PID: 9336)
- Unicorn-40189.exe (PID: 9236)
- Unicorn-10522.exe (PID: 8032)
- Unicorn-23660.exe (PID: 7972)
- Unicorn-3402.exe (PID: 7368)
- Unicorn-39111.exe (PID: 8052)
- Unicorn-39281.exe (PID: 4268)
- Unicorn-63615.exe (PID: 8076)
- Unicorn-56054.exe (PID: 9492)
- Unicorn-61555.exe (PID: 9564)
- Unicorn-53387.exe (PID: 9540)
- Unicorn-5292.exe (PID: 8136)
- Unicorn-19547.exe (PID: 7456)
- Unicorn-28512.exe (PID: 8188)
- Unicorn-29437.exe (PID: 9528)
- Unicorn-38025.exe (PID: 1132)
- Unicorn-42095.exe (PID: 9680)
- Unicorn-23712.exe (PID: 9660)
- Unicorn-3100.exe (PID: 9708)
- Unicorn-21483.exe (PID: 9700)
- Unicorn-62323.exe (PID: 9792)
- Unicorn-60470.exe (PID: 8240)
- Unicorn-20833.exe (PID: 9868)
- Unicorn-63977.exe (PID: 9912)
- Unicorn-8254.exe (PID: 7596)
- Unicorn-1041.exe (PID: 9948)
- Unicorn-39547.exe (PID: 10076)
- Unicorn-63489.exe (PID: 8812)
- Unicorn-46563.exe (PID: 10020)
- Unicorn-8254.exe (PID: 7580)
- Unicorn-9873.exe (PID: 8964)
- Unicorn-33975.exe (PID: 8820)
- Unicorn-48497.exe (PID: 8844)
- Unicorn-61290.exe (PID: 10152)
- Unicorn-46734.exe (PID: 4428)
- Unicorn-42759.exe (PID: 9132)
- Unicorn-59650.exe (PID: 9148)
- Unicorn-19023.exe (PID: 9264)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
577
Monitored processes
445
Malicious processes
69
Suspicious processes
66
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 300 | C:\Users\admin\AppData\Local\Temp\Unicorn-53063.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53063.exe | — | Unicorn-22037.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 616 | C:\Users\admin\AppData\Local\Temp\Unicorn-4590.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-4590.exe | Unicorn-43319.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 680 | C:\Users\admin\AppData\Local\Temp\Unicorn-2146.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2146.exe | Unicorn-43615.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 720 | C:\Users\admin\AppData\Local\Temp\Unicorn-52338.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-52338.exe | Unicorn-43319.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 732 | C:\Users\admin\AppData\Local\Temp\Unicorn-63142.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-63142.exe | 1 (127).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 776 | C:\Users\admin\AppData\Local\Temp\Unicorn-65315.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-65315.exe | — | Unicorn-54902.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 780 | C:\Users\admin\AppData\Local\Temp\Unicorn-13350.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13350.exe | Unicorn-43541.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1132 | C:\Users\admin\AppData\Local\Temp\Unicorn-38025.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-38025.exe | Unicorn-51155.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1452 | C:\Users\admin\AppData\Local\Temp\Unicorn-6785.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-6785.exe | Unicorn-4590.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1760 | C:\Users\admin\AppData\Local\Temp\Unicorn-13350.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13350.exe | Unicorn-57277.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
9 369
Read events
9 369
Write events
0
Delete events
0
Modification events
Executable files
1 162
Suspicious files
0
Text files
0
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 5008 | 1 (127).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-9229.exe | executable | |
MD5:08E6C657703F79B4A4FE81EF46E0478E | SHA256:F0E54AFBB3A8FEE46A1370093F239477018B423DD9D43CE28604E0B6605A7D6F | |||
| 7020 | Unicorn-43319.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-4590.exe | executable | |
MD5:D4134C7BB0CB05C535B1DF5E25F858F6 | SHA256:A2A3BDADE08F6060B9F1D21A9E3E37ADA2C65CEACD6959FB5EF308D9447063BF | |||
| 6392 | Unicorn-43615.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2146.exe | executable | |
MD5:BFAAD4772C79F81030E2F2745E2BC530 | SHA256:A1A2E6CEEF8EB5EF54E823748D7B44038B52E0C5AAC10F9130D80321B5ABA455 | |||
| 616 | Unicorn-4590.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-43615.exe | executable | |
MD5:A1D70CE9F6849FC288CD633889FB93A8 | SHA256:D3F5037FFA099E145C82C5137AC1A43CC7A02DF3CB427D9A10320CDD6994AFB3 | |||
| 6044 | Unicorn-9229.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-43541.exe | executable | |
MD5:5B9B50D7FE097890CC2A763D2EF67703 | SHA256:3294B051154D497213706ADEDB2BDD6F7E0AD31220E8E001A2819E864511D793 | |||
| 616 | Unicorn-4590.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-6785.exe | executable | |
MD5:17548942044FB12DC7B4880EEA336CE4 | SHA256:E7F5709069EB9B8610712BADA3BE047EEA537C6FE3A9A9CC10C1A85EFD46857A | |||
| 6044 | Unicorn-9229.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-6666.exe | executable | |
MD5:E64ACF82E0CAB2874D0096E19F271878 | SHA256:AAF39AF88863CB1EBD186A504EA3C6EF09E7516EA69D5D925FEDF4B08545D778 | |||
| 7020 | Unicorn-43319.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-52338.exe | executable | |
MD5:432E56E703E32F240EAED7420093FC5A | SHA256:11407FF9E21507AA5782BB685EE58805DAF67B619065444B66E3B539E56DCB2C | |||
| 5008 | 1 (127).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-63142.exe | executable | |
MD5:DC7CE64F08F8705701895B8E31F95C2F | SHA256:59843EB6600DFA90EC6236E5B0E1B6E57830EBF210523B55B88D8753DBB7B60D | |||
| 6272 | Unicorn-6666.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-51155.exe | executable | |
MD5:C785102C6953BB204EE2AAE5F38BA75E | SHA256:060EDB502BF242060EDEA82EBFDDFAB7F3EC3F8B9112A445CF1D1FA96593FF87 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
21
DNS requests
13
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
6540 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
8368 | SIHClient.exe | GET | 200 | 2.23.181.156:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
— | — | GET | 200 | 23.48.23.156:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
8368 | SIHClient.exe | GET | 200 | 2.23.181.156:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 23.48.23.156:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 51.104.136.2:443 | — | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
3216 | svchost.exe | 40.113.110.67:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.181.3:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | SE | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
2104 | svchost.exe | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6540 | backgroundTaskHost.exe | 20.199.58.43:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | FR | whitelisted |
6540 | backgroundTaskHost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |
activation-v2.sls.microsoft.com |
| whitelisted |