| File name: | 1 (131) |
| Full analysis: | https://app.any.run/tasks/ced43d0e-7e7a-4930-a9d3-c17c4644975b |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 12:45:03 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 2FF1F2E366208B3F310111308100DEF0 |
| SHA1: | 5F5AA053427C80E9163BD08FF577678367C9AE43 |
| SHA256: | 41C4DAE342CBCD46842F966160C4C2105A62617E38175397F69CF1D71008291A |
| SSDEEP: | 3072:uVC0xoLADDYCVyMd2kWNWK4LRz59z9xZf2fuPhQoLcGuIu:uVC0xoLQDa0VWILJJHf2fuPhQoLcGuI |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- 1 (131).exe (PID: 7152)
- Unicorn-8263.exe (PID: 1168)
- Unicorn-13945.exe (PID: 6872)
- Unicorn-46063.exe (PID: 6112)
- Unicorn-7853.exe (PID: 7540)
- Unicorn-34024.exe (PID: 7560)
- Unicorn-7473.exe (PID: 7580)
- Unicorn-7.exe (PID: 7520)
- Unicorn-60832.exe (PID: 7616)
- Unicorn-15523.exe (PID: 7656)
- Unicorn-54510.exe (PID: 7672)
- Unicorn-40220.exe (PID: 7692)
- Unicorn-53027.exe (PID: 7636)
- Unicorn-27319.exe (PID: 7748)
- Unicorn-17828.exe (PID: 7792)
- Unicorn-57469.exe (PID: 7812)
- Unicorn-1346.exe (PID: 7832)
- Unicorn-51616.exe (PID: 7872)
- Unicorn-44417.exe (PID: 7852)
- Unicorn-19498.exe (PID: 7892)
- Unicorn-39364.exe (PID: 7900)
- Unicorn-22379.exe (PID: 7932)
- Unicorn-22644.exe (PID: 7924)
- Unicorn-50662.exe (PID: 8028)
- Unicorn-10391.exe (PID: 7968)
- Unicorn-10391.exe (PID: 7972)
- Unicorn-52472.exe (PID: 7720)
- Unicorn-11735.exe (PID: 2516)
- Unicorn-32606.exe (PID: 7712)
- Unicorn-50997.exe (PID: 7348)
- Unicorn-54496.exe (PID: 4696)
- Unicorn-23665.exe (PID: 5548)
- Unicorn-53790.exe (PID: 1196)
- Unicorn-9187.exe (PID: 5380)
- Unicorn-56997.exe (PID: 1348)
- Unicorn-1029.exe (PID: 7460)
- Unicorn-16479.exe (PID: 7468)
- Unicorn-13354.exe (PID: 7488)
- Unicorn-39120.exe (PID: 6028)
- Unicorn-63816.exe (PID: 7472)
- Unicorn-10623.exe (PID: 7476)
- Unicorn-15170.exe (PID: 7364)
- Unicorn-15170.exe (PID: 7368)
- Unicorn-43889.exe (PID: 3332)
- Unicorn-41678.exe (PID: 7604)
- Unicorn-43889.exe (PID: 4652)
- Unicorn-31558.exe (PID: 8000)
- Unicorn-41181.exe (PID: 1128)
- Unicorn-65378.exe (PID: 1676)
- Unicorn-22077.exe (PID: 2240)
- Unicorn-31314.exe (PID: 2420)
- Unicorn-32813.exe (PID: 1328)
- Unicorn-30245.exe (PID: 7600)
- Unicorn-50111.exe (PID: 2268)
- Unicorn-53462.exe (PID: 8008)
- Unicorn-58170.exe (PID: 5328)
- Unicorn-43457.exe (PID: 7216)
- Unicorn-26274.exe (PID: 2392)
- Unicorn-43811.exe (PID: 7960)
- Unicorn-31336.exe (PID: 5084)
- Unicorn-57521.exe (PID: 7232)
- Unicorn-18315.exe (PID: 7436)
- Unicorn-64138.exe (PID: 7432)
- Unicorn-3925.exe (PID: 7340)
- Unicorn-37470.exe (PID: 8300)
- Unicorn-47968.exe (PID: 8284)
- Unicorn-6359.exe (PID: 8404)
- Unicorn-48745.exe (PID: 8328)
- Unicorn-65164.exe (PID: 8468)
- Unicorn-59919.exe (PID: 8428)
- Unicorn-3022.exe (PID: 8340)
- Unicorn-7381.exe (PID: 8448)
- Unicorn-59842.exe (PID: 8544)
- Unicorn-7319.exe (PID: 8556)
- Unicorn-56712.exe (PID: 8500)
- Unicorn-40184.exe (PID: 8588)
- Unicorn-38658.exe (PID: 8636)
- Unicorn-35908.exe (PID: 8652)
- Unicorn-52799.exe (PID: 8616)
- Unicorn-57672.exe (PID: 8680)
- Unicorn-57672.exe (PID: 8724)
- Unicorn-57350.exe (PID: 8700)
- Unicorn-57672.exe (PID: 8716)
- Unicorn-39120.exe (PID: 6036)
- Unicorn-12041.exe (PID: 8776)
- Unicorn-12041.exe (PID: 8784)
- Unicorn-12041.exe (PID: 8792)
- Unicorn-16754.exe (PID: 3300)
- Unicorn-4195.exe (PID: 8756)
- Unicorn-19463.exe (PID: 8840)
- Unicorn-43775.exe (PID: 8876)
- Unicorn-38622.exe (PID: 8884)
- Unicorn-44844.exe (PID: 8900)
- Unicorn-10391.exe (PID: 7988)
- Unicorn-7193.exe (PID: 8928)
- Unicorn-50827.exe (PID: 8968)
- Unicorn-13323.exe (PID: 8924)
- Unicorn-50272.exe (PID: 8988)
- Unicorn-12554.exe (PID: 9024)
- Unicorn-5155.exe (PID: 8976)
- Unicorn-49203.exe (PID: 8956)
- Unicorn-52118.exe (PID: 9076)
- Unicorn-58248.exe (PID: 9084)
- Unicorn-38382.exe (PID: 9068)
- Unicorn-36873.exe (PID: 9140)
- Unicorn-422.exe (PID: 9124)
- Unicorn-40227.exe (PID: 8396)
- Unicorn-15881.exe (PID: 9168)
- Unicorn-61818.exe (PID: 9160)
- Unicorn-16147.exe (PID: 9176)
- Unicorn-43566.exe (PID: 8608)
- Unicorn-23145.exe (PID: 8632)
- Unicorn-16147.exe (PID: 9184)
- Unicorn-21854.exe (PID: 9192)
- Unicorn-43889.exe (PID: 5988)
- Unicorn-6478.exe (PID: 8092)
- Unicorn-38788.exe (PID: 9296)
- Unicorn-38788.exe (PID: 9288)
- Unicorn-38788.exe (PID: 9304)
- Unicorn-26021.exe (PID: 9120)
- Unicorn-28381.exe (PID: 9404)
- Unicorn-63878.exe (PID: 6708)
- Unicorn-40634.exe (PID: 9360)
- Unicorn-16592.exe (PID: 9320)
- Unicorn-34512.exe (PID: 9420)
- Unicorn-7926.exe (PID: 7220)
- Unicorn-18207.exe (PID: 7156)
- Unicorn-37143.exe (PID: 9540)
- Unicorn-5264.exe (PID: 9560)
- Unicorn-25130.exe (PID: 9568)
- Unicorn-32128.exe (PID: 9604)
- Unicorn-63832.exe (PID: 9628)
- Unicorn-3348.exe (PID: 9672)
- Unicorn-26565.exe (PID: 9760)
- Unicorn-11699.exe (PID: 9784)
- Unicorn-42186.exe (PID: 9820)
- Unicorn-5849.exe (PID: 8856)
- Unicorn-45716.exe (PID: 9840)
- Unicorn-38020.exe (PID: 9032)
- Unicorn-45887.exe (PID: 9240)
- Unicorn-61668.exe (PID: 9860)
- Unicorn-14646.exe (PID: 9412)
- Unicorn-63012.exe (PID: 9928)
- Unicorn-49416.exe (PID: 9896)
- Unicorn-9535.exe (PID: 9952)
- Unicorn-55429.exe (PID: 10008)
- Unicorn-21465.exe (PID: 9968)
- Unicorn-21465.exe (PID: 9976)
- Unicorn-27909.exe (PID: 10028)
- Unicorn-58352.exe (PID: 10044)
- Unicorn-51263.exe (PID: 10084)
- Unicorn-6411.exe (PID: 10068)
- Unicorn-47807.exe (PID: 10104)
- Unicorn-42976.exe (PID: 10160)
- Unicorn-38892.exe (PID: 10152)
- Unicorn-10111.exe (PID: 10128)
- Unicorn-34616.exe (PID: 10220)
- Unicorn-22918.exe (PID: 10196)
- Unicorn-51335.exe (PID: 10228)
- Unicorn-56935.exe (PID: 10236)
- Unicorn-45887.exe (PID: 9220)
- Unicorn-49151.exe (PID: 9888)
- Unicorn-56188.exe (PID: 8244)
- Unicorn-58226.exe (PID: 472)
- Unicorn-27962.exe (PID: 9600)
- Unicorn-51720.exe (PID: 5212)
- Unicorn-43942.exe (PID: 6652)
- Unicorn-12394.exe (PID: 10256)
- Unicorn-1190.exe (PID: 9464)
- Unicorn-28560.exe (PID: 9816)
- Unicorn-9815.exe (PID: 9340)
- Unicorn-607.exe (PID: 10360)
- Unicorn-25112.exe (PID: 10332)
- Unicorn-18207.exe (PID: 7200)
Starts itself from another location
- 1 (131).exe (PID: 7152)
- Unicorn-8263.exe (PID: 1168)
- Unicorn-13945.exe (PID: 6872)
- Unicorn-46063.exe (PID: 6112)
- Unicorn-7473.exe (PID: 7580)
- Unicorn-7.exe (PID: 7520)
- Unicorn-7853.exe (PID: 7540)
- Unicorn-60832.exe (PID: 7616)
- Unicorn-15523.exe (PID: 7656)
- Unicorn-54510.exe (PID: 7672)
- Unicorn-40220.exe (PID: 7692)
- Unicorn-53027.exe (PID: 7636)
- Unicorn-52472.exe (PID: 7720)
- Unicorn-32606.exe (PID: 7712)
- Unicorn-34024.exe (PID: 7560)
- Unicorn-17828.exe (PID: 7792)
- Unicorn-57469.exe (PID: 7812)
- Unicorn-1346.exe (PID: 7832)
- Unicorn-51616.exe (PID: 7872)
- Unicorn-44417.exe (PID: 7852)
- Unicorn-19498.exe (PID: 7892)
- Unicorn-39364.exe (PID: 7900)
- Unicorn-10391.exe (PID: 7988)
- Unicorn-22644.exe (PID: 7924)
- Unicorn-22379.exe (PID: 7932)
- Unicorn-31558.exe (PID: 8000)
- Unicorn-10391.exe (PID: 7968)
- Unicorn-53462.exe (PID: 8008)
- Unicorn-11735.exe (PID: 2516)
- Unicorn-23665.exe (PID: 5548)
- Unicorn-7926.exe (PID: 7220)
- Unicorn-54496.exe (PID: 4696)
- Unicorn-50997.exe (PID: 7348)
- Unicorn-10391.exe (PID: 7972)
- Unicorn-53790.exe (PID: 1196)
- Unicorn-9187.exe (PID: 5380)
- Unicorn-56997.exe (PID: 1348)
- Unicorn-16479.exe (PID: 7468)
- Unicorn-1029.exe (PID: 7460)
- Unicorn-63816.exe (PID: 7472)
- Unicorn-10623.exe (PID: 7476)
- Unicorn-39120.exe (PID: 6028)
- Unicorn-13354.exe (PID: 7488)
- Unicorn-15170.exe (PID: 7364)
- Unicorn-15170.exe (PID: 7368)
- Unicorn-43889.exe (PID: 3332)
- Unicorn-65378.exe (PID: 1676)
- Unicorn-41678.exe (PID: 7604)
- Unicorn-43889.exe (PID: 4652)
- Unicorn-41181.exe (PID: 1128)
- Unicorn-31314.exe (PID: 2420)
- Unicorn-32813.exe (PID: 1328)
- Unicorn-30245.exe (PID: 7600)
- Unicorn-50111.exe (PID: 2268)
- Unicorn-27319.exe (PID: 7748)
- Unicorn-43889.exe (PID: 5988)
- Unicorn-50662.exe (PID: 8028)
- Unicorn-43457.exe (PID: 7216)
- Unicorn-18207.exe (PID: 7200)
- Unicorn-18207.exe (PID: 7156)
- Unicorn-43811.exe (PID: 7960)
- Unicorn-64138.exe (PID: 7432)
- Unicorn-26274.exe (PID: 2392)
- Unicorn-18315.exe (PID: 7436)
- Unicorn-3925.exe (PID: 7340)
- Unicorn-48745.exe (PID: 8328)
- Unicorn-47968.exe (PID: 8284)
- Unicorn-6359.exe (PID: 8404)
- Unicorn-37470.exe (PID: 8300)
- Unicorn-7381.exe (PID: 8448)
- Unicorn-59919.exe (PID: 8428)
- Unicorn-3022.exe (PID: 8340)
- Unicorn-65164.exe (PID: 8468)
- Unicorn-7319.exe (PID: 8556)
- Unicorn-56712.exe (PID: 8500)
- Unicorn-59842.exe (PID: 8544)
- Unicorn-40184.exe (PID: 8588)
- Unicorn-38658.exe (PID: 8636)
- Unicorn-52799.exe (PID: 8616)
- Unicorn-57672.exe (PID: 8680)
- Unicorn-57672.exe (PID: 8724)
- Unicorn-57350.exe (PID: 8700)
- Unicorn-35908.exe (PID: 8652)
- Unicorn-57672.exe (PID: 8716)
- Unicorn-12041.exe (PID: 8776)
- Unicorn-39120.exe (PID: 6036)
- Unicorn-12041.exe (PID: 8784)
- Unicorn-12041.exe (PID: 8792)
- Unicorn-16754.exe (PID: 3300)
- Unicorn-4195.exe (PID: 8756)
- Unicorn-19463.exe (PID: 8840)
- Unicorn-5849.exe (PID: 8856)
- Unicorn-38622.exe (PID: 8884)
- Unicorn-7193.exe (PID: 8928)
- Unicorn-50827.exe (PID: 8968)
- Unicorn-38020.exe (PID: 9032)
- Unicorn-13323.exe (PID: 8924)
- Unicorn-50272.exe (PID: 8988)
- Unicorn-52118.exe (PID: 9076)
- Unicorn-22077.exe (PID: 2240)
- Unicorn-5155.exe (PID: 8976)
- Unicorn-49203.exe (PID: 8956)
- Unicorn-12554.exe (PID: 9024)
- Unicorn-58248.exe (PID: 9084)
- Unicorn-36873.exe (PID: 9140)
- Unicorn-38382.exe (PID: 9068)
- Unicorn-15881.exe (PID: 9168)
- Unicorn-16147.exe (PID: 9176)
- Unicorn-422.exe (PID: 9124)
- Unicorn-43566.exe (PID: 8608)
- Unicorn-23145.exe (PID: 8632)
- Unicorn-16147.exe (PID: 9184)
- Unicorn-21854.exe (PID: 9192)
- Unicorn-58170.exe (PID: 5328)
- Unicorn-61818.exe (PID: 9160)
- Unicorn-45887.exe (PID: 9240)
- Unicorn-38788.exe (PID: 9296)
- Unicorn-45887.exe (PID: 9220)
- Unicorn-26021.exe (PID: 9120)
- Unicorn-1190.exe (PID: 9464)
- Unicorn-40634.exe (PID: 9360)
- Unicorn-16592.exe (PID: 9320)
- Unicorn-31336.exe (PID: 5084)
- Unicorn-63878.exe (PID: 6708)
- Unicorn-38788.exe (PID: 9304)
- Unicorn-34512.exe (PID: 9420)
- Unicorn-57521.exe (PID: 7232)
- Unicorn-37143.exe (PID: 9540)
- Unicorn-25130.exe (PID: 9568)
- Unicorn-5264.exe (PID: 9560)
- Unicorn-63832.exe (PID: 9628)
- Unicorn-32128.exe (PID: 9604)
- Unicorn-3348.exe (PID: 9672)
- Unicorn-42186.exe (PID: 9820)
- Unicorn-26565.exe (PID: 9760)
- Unicorn-11699.exe (PID: 9784)
- Unicorn-43775.exe (PID: 8876)
- Unicorn-44844.exe (PID: 8900)
- Unicorn-45716.exe (PID: 9840)
- Unicorn-40227.exe (PID: 8396)
- Unicorn-6478.exe (PID: 8092)
- Unicorn-38788.exe (PID: 9288)
- Unicorn-49151.exe (PID: 9888)
- Unicorn-61668.exe (PID: 9860)
- Unicorn-49416.exe (PID: 9896)
- Unicorn-9815.exe (PID: 9340)
- Unicorn-28381.exe (PID: 9404)
- Unicorn-63012.exe (PID: 9928)
- Unicorn-14646.exe (PID: 9412)
- Unicorn-9535.exe (PID: 9952)
- Unicorn-21465.exe (PID: 9968)
- Unicorn-21465.exe (PID: 9976)
- Unicorn-58352.exe (PID: 10044)
- Unicorn-27909.exe (PID: 10028)
- Unicorn-6411.exe (PID: 10068)
- Unicorn-51263.exe (PID: 10084)
- Unicorn-47807.exe (PID: 10104)
- Unicorn-10111.exe (PID: 10128)
- Unicorn-42976.exe (PID: 10160)
- Unicorn-38892.exe (PID: 10152)
- Unicorn-34616.exe (PID: 10220)
- Unicorn-22918.exe (PID: 10196)
- Unicorn-51335.exe (PID: 10228)
- Unicorn-56935.exe (PID: 10236)
- Unicorn-58226.exe (PID: 472)
Executes application which crashes
- Unicorn-24424.exe (PID: 8824)
- Unicorn-3029.exe (PID: 10880)
- Unicorn-41726.exe (PID: 9508)
INFO
Reads the computer name
- 1 (131).exe (PID: 7152)
- Unicorn-8263.exe (PID: 1168)
- Unicorn-46063.exe (PID: 6112)
- Unicorn-13945.exe (PID: 6872)
- Unicorn-7.exe (PID: 7520)
- Unicorn-34024.exe (PID: 7560)
- Unicorn-7853.exe (PID: 7540)
- Unicorn-7473.exe (PID: 7580)
- Unicorn-60832.exe (PID: 7616)
- Unicorn-53027.exe (PID: 7636)
- Unicorn-15523.exe (PID: 7656)
- Unicorn-27319.exe (PID: 7748)
- Unicorn-52472.exe (PID: 7720)
- Unicorn-32606.exe (PID: 7712)
- Unicorn-17828.exe (PID: 7792)
- Unicorn-40220.exe (PID: 7692)
- Unicorn-57469.exe (PID: 7812)
- Unicorn-1346.exe (PID: 7832)
- Unicorn-44417.exe (PID: 7852)
- Unicorn-19498.exe (PID: 7892)
- Unicorn-39364.exe (PID: 7900)
- Unicorn-22644.exe (PID: 7924)
- Unicorn-10391.exe (PID: 7988)
- Unicorn-31558.exe (PID: 8000)
- Unicorn-22379.exe (PID: 7932)
- Unicorn-10391.exe (PID: 7968)
- Unicorn-10391.exe (PID: 7972)
- Unicorn-53462.exe (PID: 8008)
- Unicorn-11735.exe (PID: 2516)
- Unicorn-23665.exe (PID: 5548)
- Unicorn-7926.exe (PID: 7220)
- Unicorn-53790.exe (PID: 1196)
- Unicorn-9187.exe (PID: 5380)
- Unicorn-63816.exe (PID: 7472)
- Unicorn-10623.exe (PID: 7476)
- Unicorn-15170.exe (PID: 7368)
- Unicorn-15170.exe (PID: 7364)
- Unicorn-41181.exe (PID: 1128)
- Unicorn-52149.exe (PID: 6592)
- Unicorn-52149.exe (PID: 3008)
- Unicorn-43889.exe (PID: 4652)
- Unicorn-50111.exe (PID: 2268)
- Unicorn-32813.exe (PID: 1328)
- Unicorn-30245.exe (PID: 7600)
- Unicorn-43889.exe (PID: 5988)
- Unicorn-58170.exe (PID: 5328)
- Unicorn-22077.exe (PID: 2240)
- Unicorn-41678.exe (PID: 7604)
- Unicorn-31336.exe (PID: 5084)
- Unicorn-63878.exe (PID: 6708)
- Unicorn-18207.exe (PID: 7200)
- Unicorn-18207.exe (PID: 7156)
- Unicorn-26274.exe (PID: 2392)
- Unicorn-64138.exe (PID: 7432)
- Unicorn-18315.exe (PID: 7436)
- Unicorn-57521.exe (PID: 7232)
- Unicorn-3925.exe (PID: 7340)
- Unicorn-37470.exe (PID: 8300)
- Unicorn-48745.exe (PID: 8328)
- Unicorn-6359.exe (PID: 8404)
- Unicorn-7381.exe (PID: 8448)
- Unicorn-65164.exe (PID: 8468)
- Unicorn-59919.exe (PID: 8428)
- Unicorn-47968.exe (PID: 8284)
- Unicorn-3022.exe (PID: 8340)
- Unicorn-57672.exe (PID: 8680)
- Unicorn-57672.exe (PID: 8724)
- Unicorn-57672.exe (PID: 8716)
- Unicorn-12041.exe (PID: 8776)
- Unicorn-4195.exe (PID: 8756)
- Unicorn-43775.exe (PID: 8876)
- Unicorn-38622.exe (PID: 8884)
- Unicorn-12041.exe (PID: 8784)
- Unicorn-7193.exe (PID: 8928)
- Unicorn-38020.exe (PID: 9032)
- Unicorn-13323.exe (PID: 8924)
- Unicorn-52118.exe (PID: 9076)
- Unicorn-12554.exe (PID: 9024)
- Unicorn-5155.exe (PID: 8976)
- Unicorn-50827.exe (PID: 8968)
- Unicorn-15881.exe (PID: 9168)
- Unicorn-61818.exe (PID: 9160)
- Unicorn-43566.exe (PID: 8608)
- Unicorn-16147.exe (PID: 9176)
- Unicorn-21854.exe (PID: 9192)
- Unicorn-45887.exe (PID: 9220)
- Unicorn-23145.exe (PID: 8632)
- Unicorn-1190.exe (PID: 9464)
- Unicorn-34512.exe (PID: 9420)
- Unicorn-40634.exe (PID: 9360)
- Unicorn-41726.exe (PID: 9508)
- Unicorn-37143.exe (PID: 9540)
- Unicorn-25130.exe (PID: 9568)
- Unicorn-32128.exe (PID: 9604)
- Unicorn-11699.exe (PID: 9784)
- Unicorn-42186.exe (PID: 9820)
- Unicorn-61668.exe (PID: 9860)
- Unicorn-49416.exe (PID: 9896)
- Unicorn-55429.exe (PID: 10008)
- Unicorn-22918.exe (PID: 10196)
- Unicorn-58226.exe (PID: 472)
- Unicorn-56188.exe (PID: 8244)
The sample compiled with chinese language support
- 1 (131).exe (PID: 7152)
- Unicorn-13945.exe (PID: 6872)
- Unicorn-46063.exe (PID: 6112)
- Unicorn-8263.exe (PID: 1168)
- Unicorn-7853.exe (PID: 7540)
- Unicorn-34024.exe (PID: 7560)
- Unicorn-7473.exe (PID: 7580)
- Unicorn-7.exe (PID: 7520)
- Unicorn-60832.exe (PID: 7616)
- Unicorn-50997.exe (PID: 7348)
- Unicorn-47968.exe (PID: 8284)
- Unicorn-9187.exe (PID: 5380)
- Unicorn-6359.exe (PID: 8404)
- Unicorn-53027.exe (PID: 7636)
- Unicorn-27909.exe (PID: 10028)
- Unicorn-3022.exe (PID: 8340)
- Unicorn-58352.exe (PID: 10044)
- Unicorn-7381.exe (PID: 8448)
- Unicorn-53790.exe (PID: 1196)
- Unicorn-37470.exe (PID: 8300)
- Unicorn-48745.exe (PID: 8328)
- Unicorn-44417.exe (PID: 7852)
- Unicorn-15523.exe (PID: 7656)
- Unicorn-65164.exe (PID: 8468)
- Unicorn-59919.exe (PID: 8428)
- Unicorn-56997.exe (PID: 1348)
- Unicorn-63816.exe (PID: 7472)
- Unicorn-7319.exe (PID: 8556)
- Unicorn-56712.exe (PID: 8500)
- Unicorn-1029.exe (PID: 7460)
- Unicorn-52799.exe (PID: 8616)
- Unicorn-51616.exe (PID: 7872)
- Unicorn-6411.exe (PID: 10068)
- Unicorn-26565.exe (PID: 9760)
- Unicorn-10623.exe (PID: 7476)
- Unicorn-11699.exe (PID: 9784)
- Unicorn-38658.exe (PID: 8636)
- Unicorn-35908.exe (PID: 8652)
- Unicorn-51263.exe (PID: 10084)
- Unicorn-40184.exe (PID: 8588)
- Unicorn-19498.exe (PID: 7892)
- Unicorn-39120.exe (PID: 6028)
- Unicorn-57672.exe (PID: 8724)
- Unicorn-57350.exe (PID: 8700)
- Unicorn-39120.exe (PID: 6036)
- Unicorn-57672.exe (PID: 8716)
- Unicorn-13354.exe (PID: 7488)
- Unicorn-12041.exe (PID: 8776)
- Unicorn-47807.exe (PID: 10104)
- Unicorn-22379.exe (PID: 7932)
- Unicorn-12041.exe (PID: 8792)
- Unicorn-45716.exe (PID: 9840)
- Unicorn-4195.exe (PID: 8756)
- Unicorn-16754.exe (PID: 3300)
- Unicorn-19463.exe (PID: 8840)
- Unicorn-22644.exe (PID: 7924)
- Unicorn-15170.exe (PID: 7364)
- Unicorn-15170.exe (PID: 7368)
- Unicorn-43775.exe (PID: 8876)
- Unicorn-42186.exe (PID: 9820)
- Unicorn-12041.exe (PID: 8784)
- Unicorn-39364.exe (PID: 7900)
- Unicorn-42976.exe (PID: 10160)
- Unicorn-10111.exe (PID: 10128)
- Unicorn-38892.exe (PID: 10152)
- Unicorn-38622.exe (PID: 8884)
- Unicorn-43889.exe (PID: 3332)
- Unicorn-44844.exe (PID: 8900)
- Unicorn-34616.exe (PID: 10220)
- Unicorn-22918.exe (PID: 10196)
- Unicorn-65378.exe (PID: 1676)
- Unicorn-50827.exe (PID: 8968)
- Unicorn-38020.exe (PID: 9032)
- Unicorn-13323.exe (PID: 8924)
- Unicorn-12554.exe (PID: 9024)
- Unicorn-41181.exe (PID: 1128)
- Unicorn-40220.exe (PID: 7692)
- Unicorn-7193.exe (PID: 8928)
- Unicorn-5155.exe (PID: 8976)
- Unicorn-22077.exe (PID: 2240)
- Unicorn-54510.exe (PID: 7672)
- Unicorn-31558.exe (PID: 8000)
- Unicorn-31314.exe (PID: 2420)
- Unicorn-41678.exe (PID: 7604)
- Unicorn-36873.exe (PID: 9140)
- Unicorn-58248.exe (PID: 9084)
- Unicorn-50111.exe (PID: 2268)
- Unicorn-51335.exe (PID: 10228)
- Unicorn-422.exe (PID: 9124)
- Unicorn-30245.exe (PID: 7600)
- Unicorn-49203.exe (PID: 8956)
- Unicorn-40227.exe (PID: 8396)
- Unicorn-10391.exe (PID: 7968)
- Unicorn-43889.exe (PID: 5988)
- Unicorn-43566.exe (PID: 8608)
- Unicorn-61818.exe (PID: 9160)
- Unicorn-23145.exe (PID: 8632)
- Unicorn-16147.exe (PID: 9184)
- Unicorn-58170.exe (PID: 5328)
- Unicorn-21854.exe (PID: 9192)
- Unicorn-56935.exe (PID: 10236)
- Unicorn-53462.exe (PID: 8008)
- Unicorn-52472.exe (PID: 7720)
- Unicorn-6478.exe (PID: 8092)
- Unicorn-49151.exe (PID: 9888)
- Unicorn-63878.exe (PID: 6708)
- Unicorn-45887.exe (PID: 9220)
- Unicorn-32606.exe (PID: 7712)
- Unicorn-40634.exe (PID: 9360)
- Unicorn-11735.exe (PID: 2516)
- Unicorn-38788.exe (PID: 9304)
- Unicorn-43811.exe (PID: 7960)
- Unicorn-26021.exe (PID: 9120)
- Unicorn-43457.exe (PID: 7216)
- Unicorn-58226.exe (PID: 472)
- Unicorn-34512.exe (PID: 9420)
- Unicorn-23665.exe (PID: 5548)
- Unicorn-26274.exe (PID: 2392)
- Unicorn-7926.exe (PID: 7220)
- Unicorn-56188.exe (PID: 8244)
- Unicorn-37143.exe (PID: 9540)
- Unicorn-17828.exe (PID: 7792)
- Unicorn-57521.exe (PID: 7232)
- Unicorn-63012.exe (PID: 9928)
- Unicorn-64138.exe (PID: 7432)
- Unicorn-9535.exe (PID: 9952)
- Unicorn-49416.exe (PID: 9896)
- Unicorn-28381.exe (PID: 9404)
- Unicorn-54496.exe (PID: 4696)
- Unicorn-5264.exe (PID: 9560)
- Unicorn-1346.exe (PID: 7832)
- Unicorn-21465.exe (PID: 9976)
- Unicorn-32813.exe (PID: 1328)
- Unicorn-27319.exe (PID: 7748)
- Unicorn-63832.exe (PID: 9628)
- Unicorn-10391.exe (PID: 7972)
- Unicorn-21465.exe (PID: 9968)
- Unicorn-3348.exe (PID: 9672)
- Unicorn-10391.exe (PID: 7988)
- Unicorn-45887.exe (PID: 9240)
- Unicorn-27962.exe (PID: 9600)
- Unicorn-18315.exe (PID: 7436)
- Unicorn-3925.exe (PID: 7340)
- Unicorn-32128.exe (PID: 9604)
- Unicorn-50272.exe (PID: 8988)
- Unicorn-5849.exe (PID: 8856)
- Unicorn-61668.exe (PID: 9860)
- Unicorn-43889.exe (PID: 4652)
- Unicorn-15881.exe (PID: 9168)
- Unicorn-38788.exe (PID: 9288)
- Unicorn-50662.exe (PID: 8028)
- Unicorn-31336.exe (PID: 5084)
- Unicorn-43942.exe (PID: 6652)
- Unicorn-12394.exe (PID: 10256)
- Unicorn-1190.exe (PID: 9464)
- Unicorn-57469.exe (PID: 7812)
- Unicorn-38788.exe (PID: 9296)
- Unicorn-51720.exe (PID: 5212)
- Unicorn-28560.exe (PID: 9816)
- Unicorn-16592.exe (PID: 9320)
- Unicorn-59842.exe (PID: 8544)
- Unicorn-52118.exe (PID: 9076)
- Unicorn-38382.exe (PID: 9068)
- Unicorn-607.exe (PID: 10360)
- Unicorn-25130.exe (PID: 9568)
- Unicorn-9815.exe (PID: 9340)
- Unicorn-25112.exe (PID: 10332)
- Unicorn-57672.exe (PID: 8680)
- Unicorn-18207.exe (PID: 7156)
- Unicorn-16479.exe (PID: 7468)
- Unicorn-16147.exe (PID: 9176)
- Unicorn-18207.exe (PID: 7200)
- Unicorn-14646.exe (PID: 9412)
- Unicorn-55429.exe (PID: 10008)
Checks supported languages
- 1 (131).exe (PID: 7152)
- Unicorn-8263.exe (PID: 1168)
- Unicorn-46063.exe (PID: 6112)
- Unicorn-13945.exe (PID: 6872)
- Unicorn-7853.exe (PID: 7540)
- Unicorn-34024.exe (PID: 7560)
- Unicorn-7473.exe (PID: 7580)
- Unicorn-7.exe (PID: 7520)
- Unicorn-15523.exe (PID: 7656)
- Unicorn-53027.exe (PID: 7636)
- Unicorn-54510.exe (PID: 7672)
- Unicorn-40220.exe (PID: 7692)
- Unicorn-52472.exe (PID: 7720)
- Unicorn-60832.exe (PID: 7616)
- Unicorn-32606.exe (PID: 7712)
- Unicorn-17828.exe (PID: 7792)
- Unicorn-57469.exe (PID: 7812)
- Unicorn-27319.exe (PID: 7748)
- Unicorn-51616.exe (PID: 7872)
- Unicorn-39364.exe (PID: 7900)
- Unicorn-1346.exe (PID: 7832)
- Unicorn-44417.exe (PID: 7852)
- Unicorn-10391.exe (PID: 7988)
- Unicorn-43811.exe (PID: 7960)
- Unicorn-10391.exe (PID: 7968)
- Unicorn-31558.exe (PID: 8000)
- Unicorn-10391.exe (PID: 7972)
- Unicorn-53462.exe (PID: 8008)
- Unicorn-50662.exe (PID: 8028)
- Unicorn-22644.exe (PID: 7924)
- Unicorn-22379.exe (PID: 7932)
- Unicorn-23665.exe (PID: 5548)
- Unicorn-54496.exe (PID: 4696)
- Unicorn-53790.exe (PID: 1196)
- Unicorn-1029.exe (PID: 7460)
- Unicorn-63816.exe (PID: 7472)
- Unicorn-10623.exe (PID: 7476)
- Unicorn-13354.exe (PID: 7488)
- Unicorn-15170.exe (PID: 7364)
- Unicorn-15170.exe (PID: 7368)
- Unicorn-43889.exe (PID: 4652)
- Unicorn-31314.exe (PID: 2420)
- Unicorn-65378.exe (PID: 1676)
- Unicorn-30245.exe (PID: 7600)
- Unicorn-22077.exe (PID: 2240)
- Unicorn-41181.exe (PID: 1128)
- Unicorn-41678.exe (PID: 7604)
- Unicorn-52149.exe (PID: 3008)
- Unicorn-43457.exe (PID: 7216)
- Unicorn-43889.exe (PID: 3332)
- Unicorn-31336.exe (PID: 5084)
- Unicorn-63878.exe (PID: 6708)
- Unicorn-18207.exe (PID: 7156)
- Unicorn-64138.exe (PID: 7432)
- Unicorn-47968.exe (PID: 8284)
- Unicorn-3022.exe (PID: 8340)
- Unicorn-37470.exe (PID: 8300)
- Unicorn-6359.exe (PID: 8404)
- Unicorn-59919.exe (PID: 8428)
- Unicorn-56712.exe (PID: 8500)
- Unicorn-7381.exe (PID: 8448)
- Unicorn-65164.exe (PID: 8468)
- Unicorn-57350.exe (PID: 8700)
- Unicorn-52799.exe (PID: 8616)
- Unicorn-38658.exe (PID: 8636)
- Unicorn-35908.exe (PID: 8652)
- Unicorn-57672.exe (PID: 8680)
- Unicorn-4195.exe (PID: 8756)
- Unicorn-12041.exe (PID: 8792)
- Unicorn-24424.exe (PID: 8824)
- Unicorn-12041.exe (PID: 8776)
- Unicorn-5849.exe (PID: 8856)
- Unicorn-43775.exe (PID: 8876)
- Unicorn-13323.exe (PID: 8924)
- Unicorn-19463.exe (PID: 8840)
- Unicorn-38622.exe (PID: 8884)
- Unicorn-5155.exe (PID: 8976)
- Unicorn-50827.exe (PID: 8968)
- Unicorn-38020.exe (PID: 9032)
- Unicorn-58248.exe (PID: 9084)
- Unicorn-49203.exe (PID: 8956)
- Unicorn-16147.exe (PID: 9184)
- Unicorn-15881.exe (PID: 9168)
- Unicorn-23145.exe (PID: 8632)
- Unicorn-43566.exe (PID: 8608)
- Unicorn-52118.exe (PID: 9076)
- Unicorn-422.exe (PID: 9124)
- Unicorn-36873.exe (PID: 9140)
- Unicorn-6478.exe (PID: 8092)
- Unicorn-45887.exe (PID: 9220)
- Unicorn-45887.exe (PID: 9240)
- Unicorn-26021.exe (PID: 9120)
- Unicorn-38788.exe (PID: 9304)
- Unicorn-9815.exe (PID: 9340)
- Unicorn-41726.exe (PID: 9508)
- Unicorn-28381.exe (PID: 9404)
- Unicorn-1190.exe (PID: 9464)
- Unicorn-25130.exe (PID: 9568)
- Unicorn-38788.exe (PID: 9296)
- Unicorn-16592.exe (PID: 9320)
- Unicorn-40634.exe (PID: 9360)
- Unicorn-26565.exe (PID: 9760)
- Unicorn-32128.exe (PID: 9604)
- Unicorn-45716.exe (PID: 9840)
- Unicorn-61668.exe (PID: 9860)
- Unicorn-49416.exe (PID: 9896)
- Unicorn-49151.exe (PID: 9888)
- Unicorn-11699.exe (PID: 9784)
- Unicorn-42186.exe (PID: 9820)
- Unicorn-9535.exe (PID: 9952)
- Unicorn-21465.exe (PID: 9968)
- Unicorn-21465.exe (PID: 9976)
- Unicorn-55429.exe (PID: 10008)
- Unicorn-58352.exe (PID: 10044)
- Unicorn-6411.exe (PID: 10068)
- Unicorn-63012.exe (PID: 9928)
- Unicorn-10111.exe (PID: 10128)
- Unicorn-38892.exe (PID: 10152)
- Unicorn-42976.exe (PID: 10160)
- Unicorn-22918.exe (PID: 10196)
- Unicorn-47807.exe (PID: 10104)
- Unicorn-34616.exe (PID: 10220)
- Unicorn-51335.exe (PID: 10228)
- Unicorn-56188.exe (PID: 8244)
- Unicorn-27962.exe (PID: 9600)
- Unicorn-51720.exe (PID: 5212)
- Unicorn-64883.exe (PID: 10396)
- Unicorn-28560.exe (PID: 9816)
- Unicorn-12394.exe (PID: 10256)
- Unicorn-607.exe (PID: 10360)
- Unicorn-58147.exe (PID: 10444)
- Unicorn-62231.exe (PID: 10460)
- Unicorn-24536.exe (PID: 10560)
- Unicorn-52422.exe (PID: 10776)
- Unicorn-25880.exe (PID: 10632)
- Unicorn-18405.exe (PID: 10552)
- Unicorn-9522.exe (PID: 10924)
- Unicorn-13051.exe (PID: 10952)
- Unicorn-13051.exe (PID: 10976)
- Unicorn-18480.exe (PID: 11036)
- Unicorn-6782.exe (PID: 11048)
- Unicorn-991.exe (PID: 10856)
- Unicorn-59875.exe (PID: 11100)
- Unicorn-6035.exe (PID: 11156)
- Unicorn-14566.exe (PID: 11176)
- Unicorn-59320.exe (PID: 11164)
- Unicorn-42792.exe (PID: 11088)
- Unicorn-38324.exe (PID: 8536)
- Unicorn-46876.exe (PID: 11256)
- Unicorn-22180.exe (PID: 11224)
- Unicorn-52806.exe (PID: 2332)
- Unicorn-43429.exe (PID: 10680)
- Unicorn-23886.exe (PID: 3032)
- Unicorn-64364.exe (PID: 10744)
- Unicorn-23332.exe (PID: 10716)
- Unicorn-1302.exe (PID: 5048)
- Unicorn-26072.exe (PID: 8520)
- Unicorn-30156.exe (PID: 7400)
- Unicorn-18458.exe (PID: 1188)
- Unicorn-43712.exe (PID: 10904)
- Unicorn-43368.exe (PID: 11456)
- Unicorn-56004.exe (PID: 11396)
- Unicorn-44499.exe (PID: 10752)
- Unicorn-19610.exe (PID: 11300)
- Unicorn-33153.exe (PID: 11420)
- Unicorn-6611.exe (PID: 11528)
- Unicorn-34430.exe (PID: 11544)
- Unicorn-40030.exe (PID: 11552)
- Unicorn-30924.exe (PID: 11564)
- Unicorn-2335.exe (PID: 11652)
- Unicorn-56175.exe (PID: 11660)
- Unicorn-46690.exe (PID: 11684)
- Unicorn-7763.exe (PID: 11748)
- Unicorn-42881.exe (PID: 11728)
- Unicorn-9609.exe (PID: 11792)
- Unicorn-61048.exe (PID: 11772)
- Unicorn-27992.exe (PID: 11828)
- Unicorn-58618.exe (PID: 11936)
- Unicorn-64748.exe (PID: 11944)
- Unicorn-6310.exe (PID: 11928)
- Unicorn-64748.exe (PID: 11952)
- Unicorn-11463.exe (PID: 12020)
- Unicorn-40052.exe (PID: 11912)
- Unicorn-64940.exe (PID: 11856)
- Unicorn-36714.exe (PID: 12008)
- Unicorn-11463.exe (PID: 11976)
- Unicorn-61027.exe (PID: 12092)
- Unicorn-61027.exe (PID: 12088)
- Unicorn-52039.exe (PID: 12160)
- Unicorn-32438.exe (PID: 12168)
- Unicorn-5002.exe (PID: 12256)
- Unicorn-5333.exe (PID: 11968)
- Unicorn-57135.exe (PID: 11996)
- Unicorn-11463.exe (PID: 11984)
- Unicorn-28760.exe (PID: 10884)
- Unicorn-57348.exe (PID: 11904)
- Unicorn-37482.exe (PID: 6988)
- Unicorn-51218.exe (PID: 8832)
- Unicorn-45791.exe (PID: 12340)
- Unicorn-37888.exe (PID: 12348)
- Unicorn-18737.exe (PID: 12240)
- Unicorn-3685.exe (PID: 11296)
- Unicorn-17970.exe (PID: 12500)
- Unicorn-42464.exe (PID: 12804)
- Unicorn-6450.exe (PID: 12608)
- Unicorn-60010.exe (PID: 12992)
- Unicorn-17550.exe (PID: 13164)
- Unicorn-49647.exe (PID: 13016)
- Unicorn-62859.exe (PID: 13120)
- Unicorn-54307.exe (PID: 13204)
- Unicorn-56535.exe (PID: 13216)
- Unicorn-14757.exe (PID: 13224)
- Unicorn-16513.exe (PID: 12416)
- Unicorn-674.exe (PID: 12428)
- Unicorn-31390.exe (PID: 12760)
- Unicorn-22673.exe (PID: 12816)
- Unicorn-14042.exe (PID: 12264)
- Unicorn-50799.exe (PID: 5308)
- Unicorn-10534.exe (PID: 9064)
- Unicorn-4058.exe (PID: 5364)
- Unicorn-34161.exe (PID: 10896)
- Unicorn-10534.exe (PID: 7236)
- Unicorn-23253.exe (PID: 13084)
- Unicorn-62562.exe (PID: 1244)
- Unicorn-11001.exe (PID: 13332)
- Unicorn-23885.exe (PID: 1764)
- Unicorn-23938.exe (PID: 13524)
- Unicorn-42718.exe (PID: 13764)
- Unicorn-33066.exe (PID: 13780)
- Unicorn-28982.exe (PID: 13772)
- Unicorn-12070.exe (PID: 13856)
- Unicorn-25805.exe (PID: 13852)
- Unicorn-42334.exe (PID: 13892)
- Unicorn-16145.exe (PID: 13920)
- Unicorn-58495.exe (PID: 13952)
- Unicorn-10674.exe (PID: 13456)
- Unicorn-27576.exe (PID: 14068)
- Unicorn-934.exe (PID: 14032)
- Unicorn-21546.exe (PID: 14124)
- Unicorn-49123.exe (PID: 14188)
- Unicorn-11677.exe (PID: 14148)
- Unicorn-4634.exe (PID: 14236)
- Unicorn-4634.exe (PID: 14244)
- Unicorn-2929.exe (PID: 14292)
- Unicorn-30813.exe (PID: 2968)
- Unicorn-25246.exe (PID: 6700)
- Unicorn-63155.exe (PID: 14460)
- Unicorn-54987.exe (PID: 14528)
- Unicorn-26507.exe (PID: 14040)
- Unicorn-5594.exe (PID: 14624)
- Unicorn-23413.exe (PID: 14632)
- Unicorn-2638.exe (PID: 14680)
- Unicorn-45110.exe (PID: 14648)
- Unicorn-17681.exe (PID: 14776)
- Unicorn-21765.exe (PID: 14808)
- Unicorn-55947.exe (PID: 14844)
- Unicorn-63155.exe (PID: 14468)
- Unicorn-14146.exe (PID: 14560)
- Unicorn-59839.exe (PID: 15036)
- Unicorn-10830.exe (PID: 14816)
- Unicorn-1785.exe (PID: 14880)
- Unicorn-57238.exe (PID: 15096)
- Unicorn-8692.exe (PID: 15068)
- Unicorn-36818.exe (PID: 15132)
- Unicorn-48878.exe (PID: 15252)
- Unicorn-33363.exe (PID: 14752)
- Unicorn-30239.exe (PID: 15012)
- Unicorn-47151.exe (PID: 15584)
- Unicorn-58006.exe (PID: 15420)
- Unicorn-59367.exe (PID: 15756)
- Unicorn-40762.exe (PID: 15700)
- Unicorn-61780.exe (PID: 15788)
- Unicorn-34396.exe (PID: 8576)
- Unicorn-446.exe (PID: 15924)
- Unicorn-15961.exe (PID: 15992)
- Unicorn-62163.exe (PID: 16000)
- Unicorn-19409.exe (PID: 15852)
- Unicorn-34697.exe (PID: 16212)
- Unicorn-29329.exe (PID: 16240)
- Unicorn-57726.exe (PID: 16264)
- Unicorn-51147.exe (PID: 16312)
- Unicorn-54602.exe (PID: 4428)
- Unicorn-25527.exe (PID: 16132)
- Unicorn-48096.exe (PID: 16492)
- Unicorn-39166.exe (PID: 16500)
- Unicorn-24287.exe (PID: 16572)
- Unicorn-27795.exe (PID: 16388)
- Unicorn-32314.exe (PID: 16508)
- Unicorn-35526.exe (PID: 16860)
- Unicorn-35526.exe (PID: 16856)
- Unicorn-24479.exe (PID: 16948)
- Unicorn-47394.exe (PID: 17000)
- Unicorn-46818.exe (PID: 16676)
- Unicorn-33082.exe (PID: 16672)
- Unicorn-24127.exe (PID: 16716)
- Unicorn-46700.exe (PID: 17068)
- Unicorn-48546.exe (PID: 17224)
- Unicorn-3429.exe (PID: 17180)
- Unicorn-50218.exe (PID: 6384)
- Unicorn-14411.exe (PID: 2568)
- Unicorn-18038.exe (PID: 7556)
- Unicorn-51287.exe (PID: 4304)
- Unicorn-45422.exe (PID: 1164)
- Unicorn-12173.exe (PID: 2192)
- Unicorn-57098.exe (PID: 17560)
- Unicorn-62526.exe (PID: 17668)
- Unicorn-61090.exe (PID: 17496)
- Unicorn-58442.exe (PID: 17660)
- Unicorn-35221.exe (PID: 17800)
- Unicorn-62526.exe (PID: 17672)
- Unicorn-60104.exe (PID: 17948)
- Unicorn-59839.exe (PID: 17940)
- Unicorn-33361.exe (PID: 18116)
- Unicorn-51042.exe (PID: 18188)
- Unicorn-46958.exe (PID: 18180)
- Unicorn-497.exe (PID: 18044)
- Unicorn-13216.exe (PID: 18232)
- Unicorn-1649.exe (PID: 18312)
- Unicorn-64916.exe (PID: 18320)
- Unicorn-56907.exe (PID: 18196)
Create files in a temporary directory
- 1 (131).exe (PID: 7152)
- Unicorn-7.exe (PID: 7520)
- Unicorn-8263.exe (PID: 1168)
- Unicorn-7853.exe (PID: 7540)
- Unicorn-13945.exe (PID: 6872)
- Unicorn-53027.exe (PID: 7636)
- Unicorn-15523.exe (PID: 7656)
- Unicorn-54510.exe (PID: 7672)
- Unicorn-40220.exe (PID: 7692)
- Unicorn-46063.exe (PID: 6112)
- Unicorn-34024.exe (PID: 7560)
- Unicorn-7473.exe (PID: 7580)
- Unicorn-27319.exe (PID: 7748)
- Unicorn-17828.exe (PID: 7792)
- Unicorn-57469.exe (PID: 7812)
- Unicorn-51616.exe (PID: 7872)
- Unicorn-44417.exe (PID: 7852)
- Unicorn-19498.exe (PID: 7892)
- Unicorn-39364.exe (PID: 7900)
- Unicorn-22379.exe (PID: 7932)
- Unicorn-50662.exe (PID: 8028)
- Unicorn-10391.exe (PID: 7968)
- Unicorn-10391.exe (PID: 7972)
- Unicorn-52472.exe (PID: 7720)
- Unicorn-23665.exe (PID: 5548)
- Unicorn-11735.exe (PID: 2516)
- Unicorn-60832.exe (PID: 7616)
- Unicorn-53790.exe (PID: 1196)
- Unicorn-16479.exe (PID: 7468)
- Unicorn-56997.exe (PID: 1348)
- Unicorn-1029.exe (PID: 7460)
- Unicorn-39120.exe (PID: 6028)
- Unicorn-13354.exe (PID: 7488)
- Unicorn-10623.exe (PID: 7476)
- Unicorn-15170.exe (PID: 7364)
- Unicorn-15170.exe (PID: 7368)
- Unicorn-43889.exe (PID: 3332)
- Unicorn-22644.exe (PID: 7924)
- Unicorn-41678.exe (PID: 7604)
- Unicorn-50111.exe (PID: 2268)
- Unicorn-41181.exe (PID: 1128)
- Unicorn-30245.exe (PID: 7600)
- Unicorn-31314.exe (PID: 2420)
- Unicorn-58170.exe (PID: 5328)
- Unicorn-32606.exe (PID: 7712)
- Unicorn-53462.exe (PID: 8008)
- Unicorn-26274.exe (PID: 2392)
- Unicorn-43811.exe (PID: 7960)
- Unicorn-31336.exe (PID: 5084)
- Unicorn-50997.exe (PID: 7348)
- Unicorn-57521.exe (PID: 7232)
- Unicorn-18315.exe (PID: 7436)
- Unicorn-54496.exe (PID: 4696)
- Unicorn-64138.exe (PID: 7432)
- Unicorn-1346.exe (PID: 7832)
- Unicorn-3925.exe (PID: 7340)
- Unicorn-37470.exe (PID: 8300)
- Unicorn-47968.exe (PID: 8284)
- Unicorn-3022.exe (PID: 8340)
- Unicorn-9187.exe (PID: 5380)
- Unicorn-48745.exe (PID: 8328)
- Unicorn-7381.exe (PID: 8448)
- Unicorn-65164.exe (PID: 8468)
- Unicorn-7319.exe (PID: 8556)
- Unicorn-59842.exe (PID: 8544)
- Unicorn-63816.exe (PID: 7472)
- Unicorn-40184.exe (PID: 8588)
- Unicorn-52799.exe (PID: 8616)
- Unicorn-57672.exe (PID: 8680)
- Unicorn-57350.exe (PID: 8700)
- Unicorn-57672.exe (PID: 8716)
- Unicorn-39120.exe (PID: 6036)
- Unicorn-12041.exe (PID: 8776)
- Unicorn-12041.exe (PID: 8784)
- Unicorn-16754.exe (PID: 3300)
- Unicorn-19463.exe (PID: 8840)
- Unicorn-43775.exe (PID: 8876)
- Unicorn-38622.exe (PID: 8884)
- Unicorn-50827.exe (PID: 8968)
- Unicorn-65378.exe (PID: 1676)
- Unicorn-50272.exe (PID: 8988)
- Unicorn-52118.exe (PID: 9076)
- Unicorn-44844.exe (PID: 8900)
- Unicorn-13323.exe (PID: 8924)
- Unicorn-5155.exe (PID: 8976)
- Unicorn-49203.exe (PID: 8956)
- Unicorn-31558.exe (PID: 8000)
- Unicorn-58248.exe (PID: 9084)
- Unicorn-16147.exe (PID: 9176)
- Unicorn-422.exe (PID: 9124)
- Unicorn-61818.exe (PID: 9160)
- Unicorn-40227.exe (PID: 8396)
- Unicorn-16147.exe (PID: 9184)
- Unicorn-43889.exe (PID: 5988)
- Unicorn-26021.exe (PID: 9120)
- Unicorn-6478.exe (PID: 8092)
- Unicorn-43457.exe (PID: 7216)
- Unicorn-34512.exe (PID: 9420)
- Unicorn-7926.exe (PID: 7220)
- Unicorn-57672.exe (PID: 8724)
- Unicorn-4195.exe (PID: 8756)
- Unicorn-32813.exe (PID: 1328)
- Unicorn-43889.exe (PID: 4652)
- Unicorn-38020.exe (PID: 9032)
- Unicorn-21854.exe (PID: 9192)
- Unicorn-40634.exe (PID: 9360)
- Unicorn-38788.exe (PID: 9304)
- Unicorn-25130.exe (PID: 9568)
- Unicorn-37143.exe (PID: 9540)
- Unicorn-21465.exe (PID: 9968)
- Unicorn-22077.exe (PID: 2240)
- Unicorn-43566.exe (PID: 8608)
Reads security settings of Internet Explorer
- BackgroundTransferHost.exe (PID: 8100)
- BackgroundTransferHost.exe (PID: 7408)
- BackgroundTransferHost.exe (PID: 8528)
Checks proxy server information
- BackgroundTransferHost.exe (PID: 7408)
Reads the software policy settings
- BackgroundTransferHost.exe (PID: 7408)
Creates files or folders in the user directory
- BackgroundTransferHost.exe (PID: 7408)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:04:26 10:28:09+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 8192 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13b0 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x0000 |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| ComanyName: | aaaa |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
726
Monitored processes
586
Malicious processes
83
Suspicious processes
59
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 472 | C:\Users\admin\AppData\Local\Temp\Unicorn-58226.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-58226.exe | Unicorn-19498.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1128 | C:\Users\admin\AppData\Local\Temp\Unicorn-41181.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-41181.exe | Unicorn-8263.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1164 | C:\Users\admin\AppData\Local\Temp\Unicorn-45422.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-45422.exe | — | Unicorn-5849.exe | |||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1168 | C:\Users\admin\AppData\Local\Temp\Unicorn-8263.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-8263.exe | 1 (131).exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1188 | C:\Users\admin\AppData\Local\Temp\Unicorn-18458.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-18458.exe | — | Unicorn-22077.exe | |||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1196 | C:\Users\admin\AppData\Local\Temp\Unicorn-53790.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53790.exe | Unicorn-53027.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1244 | C:\Users\admin\AppData\Local\Temp\Unicorn-62562.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-62562.exe | — | Unicorn-13354.exe | |||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1328 | C:\Users\admin\AppData\Local\Temp\Unicorn-32813.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-32813.exe | 1 (131).exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1348 | C:\Users\admin\AppData\Local\Temp\Unicorn-56997.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-56997.exe | Unicorn-15523.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1676 | C:\Users\admin\AppData\Local\Temp\Unicorn-65378.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-65378.exe | Unicorn-10391.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
18 505
Read events
18 490
Write events
15
Delete events
0
Modification events
| (PID) Process: | (8100) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (8100) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (8100) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7408) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7408) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7408) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (1804) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (1804) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (1804) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (8528) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
Executable files
972
Suspicious files
12
Text files
2
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7152 | 1 (131).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-8263.exe | executable | |
MD5:8907360AF402DC7CFEF5AFD985006555 | SHA256:2EF19697BD3089CE6B2A8CDA85B3AD7921DDA9DBC3445D1417C5BA98C699F18E | |||
| 1168 | Unicorn-8263.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-46063.exe | executable | |
MD5:DF0E5352333AC319FEC1CB8E4A7036C3 | SHA256:DA565095B36CEA0D0F15FA323748C1EEE503ED9251F16F51EFD676695FC1E0F0 | |||
| 7520 | Unicorn-7.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-60832.exe | executable | |
MD5:105A6322D1FBB23E1607324F1C440E4F | SHA256:D86AB148C586E6E523E8CCD7694B8AFD4F0D5B885EFC811707BA7665FA05455F | |||
| 7152 | 1 (131).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13945.exe | executable | |
MD5:6404C5BD26E0638AB0DAD7EC352D5F94 | SHA256:B125D5282489F4A66087F6A0A5D0DE50441AC7639B149CAC6BE92CF29831A857 | |||
| 7152 | 1 (131).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-7473.exe | executable | |
MD5:657198866A825AB109CF2383EB0DF345 | SHA256:CF40690E139D46E1A111AD702644126E7934D6839A2F8DF4CD72BA2506B11D25 | |||
| 6872 | Unicorn-13945.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-32606.exe | executable | |
MD5:3CA0B5352F7854B7262AB275615CDF50 | SHA256:786FA4D49F8E403D5983294A5F9E510F3D8F2D7822962727CFACAEE81D2369C1 | |||
| 6112 | Unicorn-46063.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-7.exe | executable | |
MD5:7FDDFF69860FFE4E2027CE68E9F31549 | SHA256:AF604D58714977B84A79EA5DD6EAB70E5F3900E88D1E1285507D90AD9BDD4990 | |||
| 6872 | Unicorn-13945.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-34024.exe | executable | |
MD5:DAABD2DF94883A13DD216990B137F1B1 | SHA256:0D48964F53D5541C0C64AFEC47F8F9F8AC196D3F47536CD03742F5E1BFCA006E | |||
| 6112 | Unicorn-46063.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53027.exe | executable | |
MD5:C6E3D4BC85ED49C58F36631B74B2A847 | SHA256:FAF0257FB530F0B030EE8EF6D460028361FD0BAB6E6E6C476F18CF04C41512AE | |||
| 1168 | Unicorn-8263.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-7853.exe | executable | |
MD5:810AB48E3B35B85E9B58EA34E148C353 | SHA256:BD60BA4E11D92F966D8655ED3E7BA0F640ECDED52FB5B21A478AF8644885CB35 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
24
DNS requests
18
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
5496 | MoUsoCoreWorker.exe | GET | 200 | 2.16.164.18:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
7408 | BackgroundTransferHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | whitelisted |
6988 | SIHClient.exe | GET | 200 | 2.23.246.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
6988 | SIHClient.exe | GET | 200 | 2.23.246.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
5588 | backgroundTaskHost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
5496 | MoUsoCoreWorker.exe | 2.16.164.18:80 | crl.microsoft.com | Akamai International B.V. | NL | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
2104 | svchost.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
5496 | MoUsoCoreWorker.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
3216 | svchost.exe | 40.115.3.253:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.160.64:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
2432 | RUXIMICS.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
www.bing.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |