| File name: | 1 (1357) |
| Full analysis: | https://app.any.run/tasks/c16f6135-d5ac-49be-85a4-192a88a8cb3a |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 11:48:58 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | C88FD37DE0B58063CF07126B3E0A0CF0 |
| SHA1: | 9DA1A1413D28AC361B27770F85F36C67B63AD394 |
| SHA256: | 5B9252F07026518F04416823D1E329A158ECCFE8D9F4918CA5B641C682ED32B3 |
| SSDEEP: | 6144:cSIgIYsCaDMLA5q3rGeZwKfx5t3qlp8GBV/SWVOnUk/8SwjwpyAvEhngyubtAJUa:cx1HYLA5+rZP3M+aV6WVOnPx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- 1 (1357).exe (PID: 1276)
- Unicorn-33133.exe (PID: 6540)
- Unicorn-23185.exe (PID: 5008)
- Unicorn-62764.exe (PID: 1324)
- Unicorn-18938.exe (PID: 3884)
- Unicorn-6158.exe (PID: 1188)
- Unicorn-6158.exe (PID: 1660)
- Unicorn-8924.exe (PID: 4040)
- Unicorn-8924.exe (PID: 4988)
- Unicorn-13449.exe (PID: 2772)
- Unicorn-12115.exe (PID: 3008)
- Unicorn-15379.exe (PID: 4996)
- Unicorn-29271.exe (PID: 5384)
- Unicorn-11044.exe (PID: 5436)
- Unicorn-6158.exe (PID: 6272)
- Unicorn-11044.exe (PID: 1096)
- Unicorn-29271.exe (PID: 1532)
- Unicorn-23489.exe (PID: 920)
- Unicorn-32019.exe (PID: 1056)
- Unicorn-32019.exe (PID: 6040)
- Unicorn-45755.exe (PID: 7220)
- Unicorn-48356.exe (PID: 6576)
- Unicorn-16752.exe (PID: 7244)
- Unicorn-7319.exe (PID: 5984)
- Unicorn-30487.exe (PID: 7192)
- Unicorn-36353.exe (PID: 7260)
- Unicorn-11044.exe (PID: 2236)
- Unicorn-18201.exe (PID: 7896)
- Unicorn-8963.exe (PID: 7912)
- Unicorn-22839.exe (PID: 7932)
- Unicorn-51236.exe (PID: 7964)
- Unicorn-50681.exe (PID: 7944)
- Unicorn-10395.exe (PID: 7992)
- Unicorn-44412.exe (PID: 8032)
- Unicorn-65071.exe (PID: 8016)
- Unicorn-44926.exe (PID: 8064)
- Unicorn-49787.exe (PID: 8108)
- Unicorn-53871.exe (PID: 8132)
- Unicorn-19353.exe (PID: 8056)
- Unicorn-47941.exe (PID: 8100)
- Unicorn-39481.exe (PID: 8164)
- Unicorn-27329.exe (PID: 8188)
- Unicorn-25745.exe (PID: 8156)
- Unicorn-35497.exe (PID: 5352)
- Unicorn-47941.exe (PID: 8092)
- Unicorn-2684.exe (PID: 2552)
- Unicorn-43665.exe (PID: 5868)
- Unicorn-43400.exe (PID: 6668)
- Unicorn-39943.exe (PID: 7368)
- Unicorn-35497.exe (PID: 6644)
- Unicorn-11921.exe (PID: 7232)
- Unicorn-59544.exe (PID: 7352)
- Unicorn-59917.exe (PID: 1812)
- Unicorn-35497.exe (PID: 4180)
- Unicorn-10915.exe (PID: 2904)
- Unicorn-39943.exe (PID: 5204)
- Unicorn-11921.exe (PID: 7228)
- Unicorn-35497.exe (PID: 4112)
- Unicorn-51885.exe (PID: 7180)
- Unicorn-24313.exe (PID: 7664)
- Unicorn-42041.exe (PID: 7648)
- Unicorn-21429.exe (PID: 7460)
- Unicorn-19845.exe (PID: 7680)
- Unicorn-43280.exe (PID: 7476)
- Unicorn-38725.exe (PID: 7812)
- Unicorn-54786.exe (PID: 7748)
- Unicorn-61183.exe (PID: 7776)
- Unicorn-49031.exe (PID: 7796)
- Unicorn-37141.exe (PID: 7868)
- Unicorn-55554.exe (PID: 7708)
- Unicorn-24234.exe (PID: 7852)
- Unicorn-8858.exe (PID: 6244)
- Unicorn-10712.exe (PID: 7420)
- Unicorn-37063.exe (PID: 6156)
- Unicorn-35217.exe (PID: 6516)
- Unicorn-26857.exe (PID: 8208)
- Unicorn-18497.exe (PID: 8288)
- Unicorn-43696.exe (PID: 8368)
- Unicorn-47640.exe (PID: 8272)
- Unicorn-47832.exe (PID: 1272)
- Unicorn-8143.exe (PID: 8316)
- Unicorn-7204.exe (PID: 8344)
- Unicorn-52321.exe (PID: 8336)
- Unicorn-18562.exe (PID: 8524)
- Unicorn-12248.exe (PID: 8640)
- Unicorn-45113.exe (PID: 8500)
- Unicorn-27625.exe (PID: 8400)
- Unicorn-53089.exe (PID: 8620)
- Unicorn-64116.exe (PID: 8376)
- Unicorn-23541.exe (PID: 8440)
- Unicorn-40764.exe (PID: 8564)
- Unicorn-41029.exe (PID: 8572)
- Unicorn-51937.exe (PID: 8420)
- Unicorn-28777.exe (PID: 8540)
- Unicorn-16804.exe (PID: 8488)
- Unicorn-7012.exe (PID: 8392)
- Unicorn-23349.exe (PID: 8476)
- Unicorn-40837.exe (PID: 8696)
- Unicorn-39943.exe (PID: 7360)
- Unicorn-65533.exe (PID: 8508)
- Unicorn-28777.exe (PID: 8556)
- Unicorn-57173.exe (PID: 8592)
- Unicorn-28777.exe (PID: 8548)
- Unicorn-53644.exe (PID: 8632)
- Unicorn-59809.exe (PID: 2600)
- Unicorn-60852.exe (PID: 8456)
- Unicorn-24499.exe (PID: 8900)
- Unicorn-58827.exe (PID: 8816)
- Unicorn-35606.exe (PID: 8840)
- Unicorn-24671.exe (PID: 8800)
- Unicorn-9818.exe (PID: 8888)
- Unicorn-49176.exe (PID: 8872)
- Unicorn-3696.exe (PID: 8768)
- Unicorn-49176.exe (PID: 8880)
- Unicorn-52897.exe (PID: 8752)
- Unicorn-34183.exe (PID: 8916)
- Unicorn-60111.exe (PID: 8848)
- Unicorn-62911.exe (PID: 8864)
- Unicorn-60641.exe (PID: 8856)
- Unicorn-27687.exe (PID: 7252)
- Unicorn-38445.exe (PID: 9036)
- Unicorn-24671.exe (PID: 8792)
- Unicorn-34361.exe (PID: 9044)
- Unicorn-24146.exe (PID: 9068)
- Unicorn-18387.exe (PID: 9076)
- Unicorn-17833.exe (PID: 9116)
- Unicorn-54589.exe (PID: 9100)
- Unicorn-30447.exe (PID: 9140)
- Unicorn-48075.exe (PID: 9176)
- Unicorn-25617.exe (PID: 8268)
- Unicorn-23570.exe (PID: 9200)
- Unicorn-23239.exe (PID: 1760)
- Unicorn-47189.exe (PID: 6044)
- Unicorn-38829.exe (PID: 9248)
- Unicorn-50889.exe (PID: 9316)
- Unicorn-3032.exe (PID: 9352)
- Unicorn-55720.exe (PID: 9328)
- Unicorn-51584.exe (PID: 9400)
- Unicorn-40151.exe (PID: 9408)
- Unicorn-15019.exe (PID: 9372)
- Unicorn-49803.exe (PID: 9392)
- Unicorn-35875.exe (PID: 9448)
- Unicorn-53504.exe (PID: 9516)
- Unicorn-64677.exe (PID: 9488)
- Unicorn-20713.exe (PID: 9576)
- Unicorn-6156.exe (PID: 9292)
- Unicorn-16821.exe (PID: 9540)
- Unicorn-62108.exe (PID: 9600)
- Unicorn-40837.exe (PID: 8688)
- Unicorn-5528.exe (PID: 9620)
- Unicorn-59368.exe (PID: 9636)
- Unicorn-13715.exe (PID: 7388)
- Unicorn-40645.exe (PID: 8784)
- Unicorn-11791.exe (PID: 8824)
- Unicorn-868.exe (PID: 9664)
- Unicorn-21215.exe (PID: 9704)
- Unicorn-35439.exe (PID: 9728)
- Unicorn-10188.exe (PID: 9772)
- Unicorn-14464.exe (PID: 9752)
- Unicorn-63089.exe (PID: 9824)
- Unicorn-35055.exe (PID: 9804)
- Unicorn-14516.exe (PID: 8264)
- Unicorn-1444.exe (PID: 9856)
- Unicorn-59395.exe (PID: 9904)
- Unicorn-31569.exe (PID: 9928)
- Unicorn-4634.exe (PID: 9988)
- Unicorn-56767.exe (PID: 9864)
- Unicorn-57919.exe (PID: 9956)
- Unicorn-63857.exe (PID: 9996)
- Unicorn-11127.exe (PID: 10064)
- Unicorn-37707.exe (PID: 664)
- Unicorn-11496.exe (PID: 10164)
- Unicorn-48408.exe (PID: 8448)
- Unicorn-64589.exe (PID: 10220)
- Unicorn-36696.exe (PID: 2332)
- Unicorn-61465.exe (PID: 10248)
- Unicorn-4096.exe (PID: 10256)
- Unicorn-32493.exe (PID: 10292)
- Unicorn-40661.exe (PID: 10300)
- Unicorn-50920.exe (PID: 10384)
- Unicorn-37921.exe (PID: 10356)
- Unicorn-56997.exe (PID: 10324)
- Unicorn-37921.exe (PID: 10352)
- Unicorn-54812.exe (PID: 10452)
- Unicorn-38283.exe (PID: 10420)
- Unicorn-58149.exe (PID: 10428)
- Unicorn-13032.exe (PID: 10576)
- Unicorn-58896.exe (PID: 10476)
- Unicorn-25477.exe (PID: 10484)
- Unicorn-49789.exe (PID: 10532)
- Unicorn-21201.exe (PID: 10592)
- Unicorn-20438.exe (PID: 10512)
- Unicorn-49789.exe (PID: 10540)
- Unicorn-42773.exe (PID: 10716)
- Unicorn-42011.exe (PID: 10724)
- Unicorn-39383.exe (PID: 10636)
- Unicorn-41429.exe (PID: 10608)
- Unicorn-49597.exe (PID: 10624)
- Unicorn-6571.exe (PID: 10780)
- Unicorn-588.exe (PID: 10644)
- Unicorn-43519.exe (PID: 10752)
- Unicorn-2487.exe (PID: 10800)
- Unicorn-40535.exe (PID: 10856)
- Unicorn-22161.exe (PID: 10936)
- Unicorn-30329.exe (PID: 10824)
- Unicorn-11946.exe (PID: 10908)
- Unicorn-59664.exe (PID: 10924)
- Unicorn-54641.exe (PID: 10992)
- Unicorn-63940.exe (PID: 10772)
- Unicorn-18631.exe (PID: 10848)
- Unicorn-55580.exe (PID: 10888)
- Unicorn-5440.exe (PID: 11092)
- Unicorn-54397.exe (PID: 9132)
- Unicorn-62809.exe (PID: 11076)
- Unicorn-40011.exe (PID: 11196)
- Unicorn-18247.exe (PID: 11036)
- Unicorn-26607.exe (PID: 10976)
- Unicorn-29945.exe (PID: 11020)
- Unicorn-51325.exe (PID: 11436)
- Unicorn-26245.exe (PID: 10916)
- Unicorn-51709.exe (PID: 11172)
- Unicorn-18247.exe (PID: 11028)
- Unicorn-46281.exe (PID: 11060)
- Unicorn-2700.exe (PID: 11228)
- Unicorn-48319.exe (PID: 11152)
- Unicorn-54832.exe (PID: 11444)
- Unicorn-18247.exe (PID: 11044)
- Unicorn-50365.exe (PID: 11052)
- Unicorn-54449.exe (PID: 11160)
- Unicorn-14495.exe (PID: 11460)
- Unicorn-55793.exe (PID: 11216)
- Unicorn-59877.exe (PID: 11208)
- Unicorn-57639.exe (PID: 11488)
- Unicorn-10868.exe (PID: 11244)
- Unicorn-36835.exe (PID: 11540)
- Unicorn-14952.exe (PID: 11260)
- Unicorn-56540.exe (PID: 11236)
- Unicorn-10676.exe (PID: 11356)
- Unicorn-8630.exe (PID: 11424)
- Unicorn-63961.exe (PID: 11340)
- Unicorn-6360.exe (PID: 11384)
- Unicorn-20882.exe (PID: 11396)
- Unicorn-22545.exe (PID: 11624)
- Unicorn-58916.exe (PID: 11376)
- Unicorn-47168.exe (PID: 11288)
- Unicorn-27516.exe (PID: 11768)
- Unicorn-27567.exe (PID: 11296)
- Unicorn-17890.exe (PID: 11524)
- Unicorn-57831.exe (PID: 11332)
- Unicorn-10868.exe (PID: 11252)
- Unicorn-44309.exe (PID: 11644)
- Unicorn-48009.exe (PID: 11824)
- Unicorn-48009.exe (PID: 11832)
- Unicorn-53224.exe (PID: 11660)
- Unicorn-19613.exe (PID: 11760)
- Unicorn-65232.exe (PID: 11968)
- Unicorn-44864.exe (PID: 11716)
- Unicorn-21394.exe (PID: 11416)
- Unicorn-59559.exe (PID: 11928)
- Unicorn-23889.exe (PID: 11676)
- Unicorn-20743.exe (PID: 11988)
- Unicorn-45824.exe (PID: 11920)
- Unicorn-64729.exe (PID: 11724)
- Unicorn-14568.exe (PID: 11516)
- Unicorn-21458.exe (PID: 11856)
Starts itself from another location
- 1 (1357).exe (PID: 1276)
- Unicorn-15379.exe (PID: 4996)
- Unicorn-33133.exe (PID: 6540)
- Unicorn-23185.exe (PID: 5008)
- Unicorn-18938.exe (PID: 3884)
- Unicorn-6158.exe (PID: 1188)
- Unicorn-6158.exe (PID: 6272)
- Unicorn-6158.exe (PID: 1660)
- Unicorn-8924.exe (PID: 4040)
- Unicorn-62764.exe (PID: 1324)
- Unicorn-8924.exe (PID: 4988)
- Unicorn-13449.exe (PID: 2772)
- Unicorn-12115.exe (PID: 3008)
- Unicorn-29271.exe (PID: 5384)
- Unicorn-7319.exe (PID: 5984)
- Unicorn-11044.exe (PID: 5436)
- Unicorn-11044.exe (PID: 1096)
- Unicorn-29271.exe (PID: 1532)
- Unicorn-32019.exe (PID: 6040)
- Unicorn-23489.exe (PID: 920)
- Unicorn-32019.exe (PID: 1056)
- Unicorn-48356.exe (PID: 6576)
- Unicorn-2684.exe (PID: 2552)
- Unicorn-30487.exe (PID: 7192)
- Unicorn-11921.exe (PID: 7232)
- Unicorn-27687.exe (PID: 7252)
- Unicorn-45755.exe (PID: 7220)
- Unicorn-11921.exe (PID: 7228)
- Unicorn-51885.exe (PID: 7180)
- Unicorn-36353.exe (PID: 7260)
- Unicorn-18201.exe (PID: 7896)
- Unicorn-8963.exe (PID: 7912)
- Unicorn-16752.exe (PID: 7244)
- Unicorn-11044.exe (PID: 2236)
- Unicorn-22839.exe (PID: 7932)
- Unicorn-51236.exe (PID: 7964)
- Unicorn-50681.exe (PID: 7944)
- Unicorn-10395.exe (PID: 7992)
- Unicorn-44412.exe (PID: 8032)
- Unicorn-44926.exe (PID: 8064)
- Unicorn-65071.exe (PID: 8016)
- Unicorn-19353.exe (PID: 8056)
- Unicorn-49787.exe (PID: 8108)
- Unicorn-47941.exe (PID: 8100)
- Unicorn-39481.exe (PID: 8164)
- Unicorn-47941.exe (PID: 8092)
- Unicorn-25745.exe (PID: 8156)
- Unicorn-13715.exe (PID: 7388)
- Unicorn-43665.exe (PID: 5868)
- Unicorn-39943.exe (PID: 7368)
- Unicorn-35497.exe (PID: 5352)
- Unicorn-59917.exe (PID: 1812)
- Unicorn-35497.exe (PID: 6644)
- Unicorn-59544.exe (PID: 7352)
- Unicorn-39943.exe (PID: 7360)
- Unicorn-39943.exe (PID: 5204)
- Unicorn-35497.exe (PID: 4180)
- Unicorn-10915.exe (PID: 2904)
- Unicorn-24313.exe (PID: 7664)
- Unicorn-42041.exe (PID: 7648)
- Unicorn-21429.exe (PID: 7460)
- Unicorn-19845.exe (PID: 7680)
- Unicorn-43280.exe (PID: 7476)
- Unicorn-54786.exe (PID: 7748)
- Unicorn-38725.exe (PID: 7812)
- Unicorn-61183.exe (PID: 7776)
- Unicorn-37141.exe (PID: 7868)
- Unicorn-24234.exe (PID: 7852)
- Unicorn-55554.exe (PID: 7708)
- Unicorn-8858.exe (PID: 6244)
- Unicorn-35217.exe (PID: 6516)
- Unicorn-10712.exe (PID: 7420)
- Unicorn-37063.exe (PID: 6156)
- Unicorn-18497.exe (PID: 8288)
- Unicorn-26857.exe (PID: 8208)
- Unicorn-43696.exe (PID: 8368)
- Unicorn-8143.exe (PID: 8316)
- Unicorn-47640.exe (PID: 8272)
- Unicorn-53871.exe (PID: 8132)
- Unicorn-52321.exe (PID: 8336)
- Unicorn-18562.exe (PID: 8524)
- Unicorn-53089.exe (PID: 8620)
- Unicorn-45113.exe (PID: 8500)
- Unicorn-27625.exe (PID: 8400)
- Unicorn-12248.exe (PID: 8640)
- Unicorn-64116.exe (PID: 8376)
- Unicorn-48408.exe (PID: 8448)
- Unicorn-23541.exe (PID: 8440)
- Unicorn-40764.exe (PID: 8564)
- Unicorn-40837.exe (PID: 8688)
- Unicorn-51937.exe (PID: 8420)
- Unicorn-41029.exe (PID: 8572)
- Unicorn-16804.exe (PID: 8488)
- Unicorn-23349.exe (PID: 8476)
- Unicorn-7012.exe (PID: 8392)
- Unicorn-65533.exe (PID: 8508)
- Unicorn-40837.exe (PID: 8696)
- Unicorn-27329.exe (PID: 8188)
- Unicorn-28777.exe (PID: 8556)
- Unicorn-43400.exe (PID: 6668)
- Unicorn-57173.exe (PID: 8592)
- Unicorn-28777.exe (PID: 8548)
- Unicorn-60852.exe (PID: 8456)
- Unicorn-59809.exe (PID: 2600)
- Unicorn-24499.exe (PID: 8900)
- Unicorn-53644.exe (PID: 8632)
- Unicorn-35497.exe (PID: 4112)
- Unicorn-24671.exe (PID: 8800)
- Unicorn-35606.exe (PID: 8840)
- Unicorn-3696.exe (PID: 8768)
- Unicorn-49176.exe (PID: 8880)
- Unicorn-40645.exe (PID: 8784)
- Unicorn-60111.exe (PID: 8848)
- Unicorn-34183.exe (PID: 8916)
- Unicorn-9818.exe (PID: 8888)
- Unicorn-62911.exe (PID: 8864)
- Unicorn-24671.exe (PID: 8792)
- Unicorn-38445.exe (PID: 9036)
- Unicorn-34361.exe (PID: 9044)
- Unicorn-24146.exe (PID: 9068)
- Unicorn-17833.exe (PID: 9116)
- Unicorn-54589.exe (PID: 9100)
- Unicorn-18387.exe (PID: 9076)
- Unicorn-48075.exe (PID: 9176)
- Unicorn-54397.exe (PID: 9132)
- Unicorn-23570.exe (PID: 9200)
- Unicorn-25617.exe (PID: 8268)
- Unicorn-49176.exe (PID: 8872)
- Unicorn-49031.exe (PID: 7796)
- Unicorn-23239.exe (PID: 1760)
- Unicorn-14516.exe (PID: 8264)
- Unicorn-6156.exe (PID: 9292)
- Unicorn-38829.exe (PID: 9248)
- Unicorn-50889.exe (PID: 9316)
- Unicorn-3032.exe (PID: 9352)
- Unicorn-15019.exe (PID: 9372)
- Unicorn-51584.exe (PID: 9400)
- Unicorn-47189.exe (PID: 6044)
- Unicorn-40151.exe (PID: 9408)
- Unicorn-49803.exe (PID: 9392)
- Unicorn-35875.exe (PID: 9448)
- Unicorn-47832.exe (PID: 1272)
- Unicorn-7204.exe (PID: 8344)
- Unicorn-53504.exe (PID: 9516)
- Unicorn-20713.exe (PID: 9576)
- Unicorn-64677.exe (PID: 9488)
- Unicorn-16821.exe (PID: 9540)
- Unicorn-62108.exe (PID: 9600)
- Unicorn-28777.exe (PID: 8540)
- Unicorn-59368.exe (PID: 9636)
- Unicorn-5528.exe (PID: 9620)
- Unicorn-58827.exe (PID: 8816)
- Unicorn-60641.exe (PID: 8856)
- Unicorn-868.exe (PID: 9664)
- Unicorn-21215.exe (PID: 9704)
- Unicorn-35439.exe (PID: 9728)
- Unicorn-14464.exe (PID: 9752)
- Unicorn-35055.exe (PID: 9804)
- Unicorn-10188.exe (PID: 9772)
- Unicorn-1444.exe (PID: 9856)
- Unicorn-55720.exe (PID: 9328)
- Unicorn-59395.exe (PID: 9904)
- Unicorn-63089.exe (PID: 9824)
- Unicorn-56767.exe (PID: 9864)
- Unicorn-31569.exe (PID: 9928)
- Unicorn-57919.exe (PID: 9956)
- Unicorn-63857.exe (PID: 9996)
- Unicorn-4634.exe (PID: 9988)
- Unicorn-11127.exe (PID: 10064)
- Unicorn-11496.exe (PID: 10164)
- Unicorn-37707.exe (PID: 664)
- Unicorn-64589.exe (PID: 10220)
- Unicorn-36696.exe (PID: 2332)
- Unicorn-61465.exe (PID: 10248)
- Unicorn-4096.exe (PID: 10256)
- Unicorn-56997.exe (PID: 10324)
- Unicorn-40661.exe (PID: 10300)
INFO
Reads the computer name
- Unicorn-33133.exe (PID: 6540)
- 1 (1357).exe (PID: 1276)
- Unicorn-15379.exe (PID: 4996)
- Unicorn-23185.exe (PID: 5008)
- Unicorn-8924.exe (PID: 4040)
- Unicorn-18938.exe (PID: 3884)
- Unicorn-62764.exe (PID: 1324)
- Unicorn-8924.exe (PID: 4988)
- Unicorn-29271.exe (PID: 1532)
- Unicorn-7319.exe (PID: 5984)
- Unicorn-6158.exe (PID: 1660)
- Unicorn-13449.exe (PID: 2772)
- Unicorn-12115.exe (PID: 3008)
- Unicorn-6158.exe (PID: 6272)
- Unicorn-11044.exe (PID: 1096)
- Unicorn-11044.exe (PID: 2236)
- Unicorn-11044.exe (PID: 5436)
- Unicorn-32019.exe (PID: 1056)
- Unicorn-2684.exe (PID: 2552)
- Unicorn-48356.exe (PID: 6576)
- Unicorn-45755.exe (PID: 7220)
- Unicorn-30487.exe (PID: 7192)
- Unicorn-51885.exe (PID: 7180)
- Unicorn-6158.exe (PID: 1188)
- Unicorn-23489.exe (PID: 920)
- Unicorn-27687.exe (PID: 7252)
- Unicorn-11921.exe (PID: 7228)
- Unicorn-16752.exe (PID: 7244)
- Unicorn-18201.exe (PID: 7896)
- Unicorn-8963.exe (PID: 7912)
- Unicorn-51236.exe (PID: 7964)
- Unicorn-22839.exe (PID: 7932)
- Unicorn-44412.exe (PID: 8032)
- Unicorn-65071.exe (PID: 8016)
- Unicorn-19353.exe (PID: 8056)
- Unicorn-53871.exe (PID: 8132)
- Unicorn-49787.exe (PID: 8108)
- Unicorn-27329.exe (PID: 8188)
- Unicorn-47941.exe (PID: 8100)
- Unicorn-35497.exe (PID: 5352)
- Unicorn-35497.exe (PID: 6644)
- Unicorn-13715.exe (PID: 7388)
- Unicorn-43400.exe (PID: 6668)
- Unicorn-59809.exe (PID: 2600)
- Unicorn-35497.exe (PID: 4180)
- Unicorn-39943.exe (PID: 7368)
- Unicorn-10915.exe (PID: 2904)
- Unicorn-39943.exe (PID: 5204)
- Unicorn-35497.exe (PID: 4112)
- Unicorn-59917.exe (PID: 1812)
- Unicorn-24313.exe (PID: 7664)
- Unicorn-21429.exe (PID: 7460)
- Unicorn-44926.exe (PID: 8064)
- Unicorn-50681.exe (PID: 7944)
- Unicorn-19845.exe (PID: 7680)
- Unicorn-39481.exe (PID: 8164)
- Unicorn-54786.exe (PID: 7748)
- Unicorn-61183.exe (PID: 7776)
- Unicorn-49031.exe (PID: 7796)
- Unicorn-37141.exe (PID: 7868)
- Unicorn-24234.exe (PID: 7852)
- Unicorn-55554.exe (PID: 7708)
- Unicorn-35217.exe (PID: 6516)
- Unicorn-10712.exe (PID: 7420)
- Unicorn-37063.exe (PID: 6156)
- Unicorn-18497.exe (PID: 8288)
- Unicorn-26857.exe (PID: 8208)
- Unicorn-43696.exe (PID: 8368)
- Unicorn-47640.exe (PID: 8272)
- Unicorn-7204.exe (PID: 8344)
- Unicorn-8143.exe (PID: 8316)
- Unicorn-18562.exe (PID: 8524)
- Unicorn-52321.exe (PID: 8336)
- Unicorn-12248.exe (PID: 8640)
- Unicorn-27625.exe (PID: 8400)
- Unicorn-53089.exe (PID: 8620)
- Unicorn-64116.exe (PID: 8376)
- Unicorn-23541.exe (PID: 8440)
- Unicorn-48408.exe (PID: 8448)
- Unicorn-40764.exe (PID: 8564)
- Unicorn-45113.exe (PID: 8500)
- Unicorn-40837.exe (PID: 8688)
- Unicorn-41029.exe (PID: 8572)
- Unicorn-28777.exe (PID: 8540)
- Unicorn-51937.exe (PID: 8420)
- Unicorn-16804.exe (PID: 8488)
- Unicorn-7012.exe (PID: 8392)
- Unicorn-23349.exe (PID: 8476)
- Unicorn-60852.exe (PID: 8456)
- Unicorn-24671.exe (PID: 8800)
- Unicorn-24499.exe (PID: 8900)
- Unicorn-40837.exe (PID: 8696)
- Unicorn-57173.exe (PID: 8592)
- Unicorn-53644.exe (PID: 8632)
- Unicorn-3696.exe (PID: 8768)
- Unicorn-35606.exe (PID: 8840)
- Unicorn-9818.exe (PID: 8888)
- Unicorn-49176.exe (PID: 8880)
- Unicorn-40645.exe (PID: 8784)
- Unicorn-11791.exe (PID: 8824)
- Unicorn-60111.exe (PID: 8848)
- Unicorn-34183.exe (PID: 8916)
- Unicorn-60641.exe (PID: 8856)
- Unicorn-62911.exe (PID: 8864)
- Unicorn-24671.exe (PID: 8792)
- Unicorn-18387.exe (PID: 9076)
- Unicorn-24146.exe (PID: 9068)
- Unicorn-30447.exe (PID: 9140)
- Unicorn-17833.exe (PID: 9116)
- Unicorn-54589.exe (PID: 9100)
- Unicorn-54397.exe (PID: 9132)
- Unicorn-48075.exe (PID: 9176)
- Unicorn-25617.exe (PID: 8268)
- Unicorn-23570.exe (PID: 9200)
- Unicorn-23239.exe (PID: 1760)
- Unicorn-47189.exe (PID: 6044)
- Unicorn-14516.exe (PID: 8264)
- Unicorn-6156.exe (PID: 9292)
- Unicorn-38829.exe (PID: 9248)
- Unicorn-55720.exe (PID: 9328)
- Unicorn-3032.exe (PID: 9352)
- Unicorn-15019.exe (PID: 9372)
- Unicorn-51584.exe (PID: 9400)
- Unicorn-40151.exe (PID: 9408)
- Unicorn-49803.exe (PID: 9392)
- Unicorn-53504.exe (PID: 9516)
- Unicorn-64677.exe (PID: 9488)
- Unicorn-16821.exe (PID: 9540)
- Unicorn-62108.exe (PID: 9600)
- Unicorn-59368.exe (PID: 9636)
- Unicorn-5528.exe (PID: 9620)
- Unicorn-868.exe (PID: 9664)
- Unicorn-21215.exe (PID: 9704)
- Unicorn-14464.exe (PID: 9752)
- Unicorn-35055.exe (PID: 9804)
- Unicorn-4634.exe (PID: 9988)
- Unicorn-57919.exe (PID: 9956)
- Unicorn-11127.exe (PID: 10064)
- Unicorn-63857.exe (PID: 9996)
- Unicorn-11496.exe (PID: 10164)
- Unicorn-32493.exe (PID: 10292)
- Unicorn-56997.exe (PID: 10324)
- Unicorn-40661.exe (PID: 10300)
- Unicorn-50920.exe (PID: 10384)
- Unicorn-37921.exe (PID: 10356)
- Unicorn-37921.exe (PID: 10352)
- Unicorn-54812.exe (PID: 10452)
Checks supported languages
- 1 (1357).exe (PID: 1276)
- Unicorn-15379.exe (PID: 4996)
- Unicorn-33133.exe (PID: 6540)
- Unicorn-23185.exe (PID: 5008)
- Unicorn-8924.exe (PID: 4040)
- Unicorn-62764.exe (PID: 1324)
- Unicorn-18938.exe (PID: 3884)
- Unicorn-8924.exe (PID: 4988)
- Unicorn-6158.exe (PID: 1188)
- Unicorn-6158.exe (PID: 6272)
- Unicorn-6158.exe (PID: 1660)
- Unicorn-29271.exe (PID: 5384)
- Unicorn-7319.exe (PID: 5984)
- Unicorn-12115.exe (PID: 3008)
- Unicorn-13449.exe (PID: 2772)
- Unicorn-11044.exe (PID: 2236)
- Unicorn-11044.exe (PID: 1096)
- Unicorn-11044.exe (PID: 5436)
- Unicorn-23489.exe (PID: 920)
- Unicorn-32019.exe (PID: 6040)
- Unicorn-32019.exe (PID: 1056)
- Unicorn-48356.exe (PID: 6576)
- Unicorn-2684.exe (PID: 2552)
- Unicorn-51885.exe (PID: 7180)
- Unicorn-45755.exe (PID: 7220)
- Unicorn-30487.exe (PID: 7192)
- Unicorn-16752.exe (PID: 7244)
- Unicorn-36353.exe (PID: 7260)
- Unicorn-27687.exe (PID: 7252)
- Unicorn-11921.exe (PID: 7232)
- Unicorn-18201.exe (PID: 7896)
- Unicorn-8963.exe (PID: 7912)
- Unicorn-65071.exe (PID: 8016)
- Unicorn-44412.exe (PID: 8032)
- Unicorn-44926.exe (PID: 8064)
- Unicorn-10395.exe (PID: 7992)
- Unicorn-53871.exe (PID: 8132)
- Unicorn-47941.exe (PID: 8092)
- Unicorn-49787.exe (PID: 8108)
- Unicorn-47941.exe (PID: 8100)
- Unicorn-39481.exe (PID: 8164)
- Unicorn-27329.exe (PID: 8188)
- Unicorn-35497.exe (PID: 5352)
- Unicorn-35497.exe (PID: 4112)
- Unicorn-43400.exe (PID: 6668)
- Unicorn-35497.exe (PID: 4180)
- Unicorn-43665.exe (PID: 5868)
- Unicorn-39943.exe (PID: 7368)
- Unicorn-13715.exe (PID: 7388)
- Unicorn-35497.exe (PID: 6644)
- Unicorn-59809.exe (PID: 2600)
- Unicorn-10915.exe (PID: 2904)
- Unicorn-24313.exe (PID: 7664)
- Unicorn-22839.exe (PID: 7932)
- Unicorn-21429.exe (PID: 7460)
- Unicorn-19845.exe (PID: 7680)
- Unicorn-51236.exe (PID: 7964)
- Unicorn-49031.exe (PID: 7796)
- Unicorn-61183.exe (PID: 7776)
- Unicorn-24234.exe (PID: 7852)
- Unicorn-55554.exe (PID: 7708)
- Unicorn-10712.exe (PID: 7420)
- Unicorn-37063.exe (PID: 6156)
- Unicorn-35217.exe (PID: 6516)
- Unicorn-47832.exe (PID: 1272)
- Unicorn-26857.exe (PID: 8208)
- Unicorn-47640.exe (PID: 8272)
- Unicorn-18497.exe (PID: 8288)
- Unicorn-8143.exe (PID: 8316)
- Unicorn-7204.exe (PID: 8344)
- Unicorn-52321.exe (PID: 8336)
- Unicorn-43696.exe (PID: 8368)
- Unicorn-64116.exe (PID: 8376)
- Unicorn-48408.exe (PID: 8448)
- Unicorn-51937.exe (PID: 8420)
- Unicorn-23349.exe (PID: 8476)
- Unicorn-23541.exe (PID: 8440)
- Unicorn-54786.exe (PID: 7748)
- Unicorn-28777.exe (PID: 8540)
- Unicorn-40764.exe (PID: 8564)
- Unicorn-57173.exe (PID: 8592)
- Unicorn-16804.exe (PID: 8488)
- Unicorn-53089.exe (PID: 8620)
- Unicorn-41029.exe (PID: 8572)
- Unicorn-45113.exe (PID: 8500)
- Unicorn-12248.exe (PID: 8640)
- Unicorn-53644.exe (PID: 8632)
- Unicorn-40837.exe (PID: 8696)
- Unicorn-18562.exe (PID: 8524)
- Unicorn-3696.exe (PID: 8768)
- Unicorn-52897.exe (PID: 8752)
- Unicorn-60852.exe (PID: 8456)
- Unicorn-40645.exe (PID: 8784)
- Unicorn-58827.exe (PID: 8816)
- Unicorn-62911.exe (PID: 8864)
- Unicorn-35606.exe (PID: 8840)
- Unicorn-24671.exe (PID: 8792)
- Unicorn-34183.exe (PID: 8916)
- Unicorn-60111.exe (PID: 8848)
- Unicorn-60641.exe (PID: 8856)
- Unicorn-49176.exe (PID: 8880)
- Unicorn-49176.exe (PID: 8872)
- Unicorn-9818.exe (PID: 8888)
- Unicorn-24499.exe (PID: 8900)
- Unicorn-38445.exe (PID: 9036)
- Unicorn-34361.exe (PID: 9044)
- Unicorn-18387.exe (PID: 9076)
- Unicorn-24146.exe (PID: 9068)
- Unicorn-54589.exe (PID: 9100)
- Unicorn-17833.exe (PID: 9116)
- Unicorn-54397.exe (PID: 9132)
- Unicorn-30447.exe (PID: 9140)
- Unicorn-48075.exe (PID: 9176)
- Unicorn-23239.exe (PID: 1760)
- Unicorn-47189.exe (PID: 6044)
- Unicorn-23570.exe (PID: 9200)
- Unicorn-6156.exe (PID: 9292)
- Unicorn-14516.exe (PID: 8264)
- Unicorn-38829.exe (PID: 9248)
- Unicorn-50889.exe (PID: 9316)
- Unicorn-3032.exe (PID: 9352)
- Unicorn-15019.exe (PID: 9372)
- Unicorn-51584.exe (PID: 9400)
- Unicorn-35875.exe (PID: 9448)
- Unicorn-64677.exe (PID: 9488)
- Unicorn-53504.exe (PID: 9516)
- Unicorn-40151.exe (PID: 9408)
- Unicorn-49803.exe (PID: 9392)
- Unicorn-62108.exe (PID: 9600)
- Unicorn-5528.exe (PID: 9620)
- Unicorn-868.exe (PID: 9664)
- Unicorn-35439.exe (PID: 9728)
- Unicorn-21215.exe (PID: 9704)
- Unicorn-14464.exe (PID: 9752)
- Unicorn-59368.exe (PID: 9636)
- Unicorn-10188.exe (PID: 9772)
- Unicorn-35055.exe (PID: 9804)
- Unicorn-63089.exe (PID: 9824)
- Unicorn-56767.exe (PID: 9864)
- Unicorn-59395.exe (PID: 9904)
- Unicorn-31569.exe (PID: 9928)
- Unicorn-57919.exe (PID: 9956)
- Unicorn-1444.exe (PID: 9856)
- Unicorn-4634.exe (PID: 9988)
- Unicorn-63857.exe (PID: 9996)
- Unicorn-11127.exe (PID: 10064)
- Unicorn-11496.exe (PID: 10164)
- Unicorn-64589.exe (PID: 10220)
- Unicorn-37707.exe (PID: 664)
- Unicorn-36696.exe (PID: 2332)
- Unicorn-4096.exe (PID: 10256)
- Unicorn-56997.exe (PID: 10324)
- Unicorn-37921.exe (PID: 10356)
- Unicorn-40661.exe (PID: 10300)
- Unicorn-32493.exe (PID: 10292)
- Unicorn-38283.exe (PID: 10420)
- Unicorn-54812.exe (PID: 10452)
- Unicorn-58149.exe (PID: 10428)
- Unicorn-37921.exe (PID: 10352)
- Unicorn-50920.exe (PID: 10384)
- Unicorn-20438.exe (PID: 10512)
- Unicorn-49789.exe (PID: 10540)
- Unicorn-58896.exe (PID: 10476)
- Unicorn-13032.exe (PID: 10576)
- Unicorn-41429.exe (PID: 10608)
- Unicorn-39383.exe (PID: 10636)
- Unicorn-49597.exe (PID: 10624)
- Unicorn-588.exe (PID: 10644)
- Unicorn-42773.exe (PID: 10716)
- Unicorn-42011.exe (PID: 10724)
- Unicorn-54428.exe (PID: 10668)
- Unicorn-43519.exe (PID: 10752)
- Unicorn-6571.exe (PID: 10780)
- Unicorn-2487.exe (PID: 10800)
- Unicorn-63940.exe (PID: 10772)
- Unicorn-30329.exe (PID: 10824)
- Unicorn-40535.exe (PID: 10856)
- Unicorn-26245.exe (PID: 10916)
- Unicorn-11946.exe (PID: 10908)
- Unicorn-59664.exe (PID: 10924)
- Unicorn-18631.exe (PID: 10848)
- Unicorn-55580.exe (PID: 10888)
- Unicorn-40837.exe (PID: 8688)
- Unicorn-22161.exe (PID: 10936)
- Unicorn-26607.exe (PID: 10976)
- Unicorn-54641.exe (PID: 10992)
- Unicorn-18247.exe (PID: 11036)
- Unicorn-50365.exe (PID: 11052)
- Unicorn-18247.exe (PID: 11028)
- Unicorn-5440.exe (PID: 11092)
- Unicorn-62809.exe (PID: 11076)
- Unicorn-51709.exe (PID: 11172)
- Unicorn-46281.exe (PID: 11060)
- Unicorn-48319.exe (PID: 11152)
- Unicorn-40011.exe (PID: 11196)
- Unicorn-54449.exe (PID: 11160)
- Unicorn-55793.exe (PID: 11216)
- Unicorn-14952.exe (PID: 11260)
- Unicorn-56540.exe (PID: 11236)
- Unicorn-47168.exe (PID: 11288)
- Unicorn-10868.exe (PID: 11244)
- Unicorn-2700.exe (PID: 11228)
- Unicorn-10868.exe (PID: 11252)
- Unicorn-59877.exe (PID: 11208)
- Unicorn-27567.exe (PID: 11296)
- Unicorn-6360.exe (PID: 11384)
- Unicorn-10676.exe (PID: 11356)
- Unicorn-20882.exe (PID: 11396)
- Unicorn-54832.exe (PID: 11444)
- Unicorn-57831.exe (PID: 11332)
- Unicorn-21394.exe (PID: 11416)
- Unicorn-51325.exe (PID: 11436)
- Unicorn-14568.exe (PID: 11516)
- Unicorn-17890.exe (PID: 11524)
- Unicorn-36835.exe (PID: 11540)
- Unicorn-22545.exe (PID: 11624)
- Unicorn-44309.exe (PID: 11644)
- Unicorn-14495.exe (PID: 11460)
- Unicorn-63961.exe (PID: 11340)
- Unicorn-8630.exe (PID: 11424)
- Unicorn-57639.exe (PID: 11488)
- Unicorn-23889.exe (PID: 11676)
- Unicorn-44864.exe (PID: 11716)
- Unicorn-19613.exe (PID: 11760)
- Unicorn-64729.exe (PID: 11724)
- Unicorn-53224.exe (PID: 11660)
- Unicorn-27516.exe (PID: 11768)
- Unicorn-48009.exe (PID: 11832)
- Unicorn-17043.exe (PID: 11888)
- Unicorn-56732.exe (PID: 11872)
- Unicorn-65232.exe (PID: 11968)
- Unicorn-57329.exe (PID: 11912)
- Unicorn-45824.exe (PID: 11920)
- Unicorn-59559.exe (PID: 11928)
- Unicorn-48009.exe (PID: 11824)
- Unicorn-21458.exe (PID: 11856)
- Unicorn-52596.exe (PID: 11984)
- Unicorn-20743.exe (PID: 11988)
- Unicorn-65305.exe (PID: 12000)
- Unicorn-42315.exe (PID: 12088)
- Unicorn-4215.exe (PID: 12072)
- Unicorn-46592.exe (PID: 12096)
- Unicorn-37847.exe (PID: 12192)
- Unicorn-1283.exe (PID: 12144)
- Unicorn-59943.exe (PID: 12220)
- Unicorn-40615.exe (PID: 12176)
- Unicorn-37293.exe (PID: 12164)
- Unicorn-30241.exe (PID: 12240)
- Unicorn-30795.exe (PID: 12256)
- Unicorn-22034.exe (PID: 12064)
- Unicorn-13727.exe (PID: 12080)
- Unicorn-9628.exe (PID: 4736)
- Unicorn-12950.exe (PID: 5800)
- Unicorn-15750.exe (PID: 2432)
- Unicorn-9436.exe (PID: 4284)
- Unicorn-62840.exe (PID: 12272)
- Unicorn-58259.exe (PID: 12264)
- Unicorn-7827.exe (PID: 12520)
- Unicorn-63681.exe (PID: 12388)
- Unicorn-51984.exe (PID: 12396)
- Unicorn-62727.exe (PID: 12460)
- Unicorn-59213.exe (PID: 12492)
- Unicorn-23971.exe (PID: 12592)
- Unicorn-9118.exe (PID: 12656)
- Unicorn-51621.exe (PID: 12748)
- Unicorn-25070.exe (PID: 12724)
- Unicorn-11335.exe (PID: 12716)
- Unicorn-24377.exe (PID: 12768)
- Unicorn-37375.exe (PID: 12792)
- Unicorn-45544.exe (PID: 12812)
- Unicorn-7080.exe (PID: 12636)
- Unicorn-50727.exe (PID: 12876)
- Unicorn-60941.exe (PID: 12864)
- Unicorn-65025.exe (PID: 12912)
- Unicorn-58564.exe (PID: 13000)
- Unicorn-46120.exe (PID: 13028)
- Unicorn-28580.exe (PID: 13052)
- Unicorn-12124.exe (PID: 12820)
- Unicorn-23422.exe (PID: 12844)
- Unicorn-3935.exe (PID: 12936)
- Unicorn-9363.exe (PID: 12956)
- Unicorn-48495.exe (PID: 13088)
- Unicorn-57168.exe (PID: 13136)
- Unicorn-9311.exe (PID: 13192)
- Unicorn-35735.exe (PID: 13264)
- Unicorn-12871.exe (PID: 13112)
- Unicorn-55248.exe (PID: 13184)
- Unicorn-55824.exe (PID: 13376)
- Unicorn-3830.exe (PID: 13444)
- Unicorn-64952.exe (PID: 13504)
- Unicorn-62291.exe (PID: 13468)
- Unicorn-11475.exe (PID: 13512)
- Unicorn-30765.exe (PID: 5576)
- Unicorn-47101.exe (PID: 5036)
- Unicorn-2752.exe (PID: 13620)
- Unicorn-52316.exe (PID: 13676)
- Unicorn-16850.exe (PID: 13716)
- Unicorn-60292.exe (PID: 13748)
- Unicorn-8490.exe (PID: 13740)
- Unicorn-64205.exe (PID: 13572)
- Unicorn-27811.exe (PID: 13548)
- Unicorn-35979.exe (PID: 13564)
- Unicorn-52316.exe (PID: 13680)
- Unicorn-48693.exe (PID: 13868)
- Unicorn-37095.exe (PID: 13860)
- Unicorn-24459.exe (PID: 13876)
- Unicorn-45072.exe (PID: 13952)
- Unicorn-37095.exe (PID: 13852)
- Unicorn-10883.exe (PID: 13844)
- Unicorn-12574.exe (PID: 13776)
- Unicorn-58615.exe (PID: 14032)
- Unicorn-9222.exe (PID: 14056)
- Unicorn-16431.exe (PID: 14284)
- Unicorn-5522.exe (PID: 13944)
- Unicorn-46171.exe (PID: 14104)
- Unicorn-64672.exe (PID: 13928)
- Unicorn-19991.exe (PID: 14212)
- Unicorn-29642.exe (PID: 14084)
- Unicorn-10566.exe (PID: 14200)
- Unicorn-31111.exe (PID: 14176)
- Unicorn-17251.exe (PID: 14268)
- Unicorn-63851.exe (PID: 14380)
- Unicorn-30986.exe (PID: 14352)
- Unicorn-50116.exe (PID: 14372)
- Unicorn-29503.exe (PID: 14456)
- Unicorn-58092.exe (PID: 14500)
- Unicorn-43239.exe (PID: 14464)
- Unicorn-531.exe (PID: 14552)
- Unicorn-6290.exe (PID: 14492)
- Unicorn-17251.exe (PID: 14260)
- Unicorn-33726.exe (PID: 14112)
- Unicorn-8699.exe (PID: 14576)
- Unicorn-45648.exe (PID: 14680)
- Unicorn-18158.exe (PID: 14768)
- Unicorn-65248.exe (PID: 14664)
- Unicorn-6098.exe (PID: 14688)
- Unicorn-33203.exe (PID: 14816)
- Unicorn-33203.exe (PID: 14808)
- Unicorn-33203.exe (PID: 14800)
- Unicorn-1822.exe (PID: 14856)
- Unicorn-4615.exe (PID: 14584)
- Unicorn-53816.exe (PID: 14704)
- Unicorn-9851.exe (PID: 14876)
- Unicorn-46800.exe (PID: 14980)
- Unicorn-50097.exe (PID: 14956)
- Unicorn-58497.exe (PID: 14972)
- Unicorn-4980.exe (PID: 14996)
- Unicorn-4450.exe (PID: 15004)
- Unicorn-28566.exe (PID: 14948)
- Unicorn-26187.exe (PID: 14920)
- Unicorn-29260.exe (PID: 15020)
- Unicorn-9659.exe (PID: 15040)
- Unicorn-863.exe (PID: 14988)
- Unicorn-8143.exe (PID: 15124)
- Unicorn-64559.exe (PID: 14848)
- Unicorn-59795.exe (PID: 15072)
- Unicorn-62124.exe (PID: 15160)
- Unicorn-42331.exe (PID: 15200)
- Unicorn-42139.exe (PID: 15244)
- Unicorn-35263.exe (PID: 15236)
- Unicorn-20270.exe (PID: 15260)
- Unicorn-6535.exe (PID: 15252)
- Unicorn-26955.exe (PID: 15292)
- Unicorn-19694.exe (PID: 15420)
- Unicorn-16954.exe (PID: 15464)
- Unicorn-35072.exe (PID: 15500)
- Unicorn-11387.exe (PID: 15480)
- Unicorn-37890.exe (PID: 15268)
- Unicorn-59820.exe (PID: 15356)
- Unicorn-42280.exe (PID: 15372)
- Unicorn-62005.exe (PID: 15272)
- Unicorn-3550.exe (PID: 15412)
- Unicorn-42743.exe (PID: 15600)
- Unicorn-33098.exe (PID: 15572)
- Unicorn-10832.exe (PID: 15536)
- Unicorn-36799.exe (PID: 15680)
- Unicorn-53327.exe (PID: 15752)
- Unicorn-29974.exe (PID: 15776)
- Unicorn-42664.exe (PID: 15688)
- Unicorn-28630.exe (PID: 15704)
- Unicorn-5470.exe (PID: 15832)
- Unicorn-51672.exe (PID: 15824)
- Unicorn-1902.exe (PID: 15528)
- Unicorn-60417.exe (PID: 15896)
- Unicorn-60972.exe (PID: 15924)
- Unicorn-51288.exe (PID: 15932)
- Unicorn-9170.exe (PID: 15916)
- Unicorn-34759.exe (PID: 15984)
- Unicorn-24356.exe (PID: 16012)
- Unicorn-45041.exe (PID: 16052)
- Unicorn-21091.exe (PID: 16036)
- Unicorn-9607.exe (PID: 16176)
- Unicorn-16067.exe (PID: 16240)
- Unicorn-23342.exe (PID: 16168)
- Unicorn-40765.exe (PID: 16088)
- Unicorn-10339.exe (PID: 976)
- Unicorn-1055.exe (PID: 16284)
- Unicorn-12752.exe (PID: 16348)
- Unicorn-59715.exe (PID: 16372)
- Unicorn-29940.exe (PID: 4056)
- Unicorn-36327.exe (PID: 16400)
- Unicorn-38927.exe (PID: 16448)
- Unicorn-4776.exe (PID: 16260)
- Unicorn-25737.exe (PID: 16464)
- Unicorn-34651.exe (PID: 16484)
- Unicorn-52471.exe (PID: 16508)
- Unicorn-3078.exe (PID: 16536)
- Unicorn-63048.exe (PID: 16564)
- Unicorn-28859.exe (PID: 16592)
- Unicorn-49347.exe (PID: 16708)
- Unicorn-64200.exe (PID: 16676)
- Unicorn-14179.exe (PID: 16652)
- Unicorn-52140.exe (PID: 16628)
- Unicorn-40987.exe (PID: 16764)
- Unicorn-9711.exe (PID: 16820)
- Unicorn-16098.exe (PID: 16836)
- Unicorn-13358.exe (PID: 16872)
- Unicorn-27657.exe (PID: 16892)
- Unicorn-10896.exe (PID: 16924)
- Unicorn-26894.exe (PID: 16900)
- Unicorn-51399.exe (PID: 16996)
- Unicorn-43417.exe (PID: 16612)
- Unicorn-45124.exe (PID: 17232)
- Unicorn-16343.exe (PID: 17208)
- Unicorn-60905.exe (PID: 17248)
- Unicorn-27146.exe (PID: 17352)
- Unicorn-64796.exe (PID: 9532)
- Unicorn-39015.exe (PID: 4652)
- Unicorn-32701.exe (PID: 5044)
- Unicorn-53868.exe (PID: 17436)
- Unicorn-2066.exe (PID: 17444)
- Unicorn-23446.exe (PID: 17664)
- Unicorn-25685.exe (PID: 17592)
- Unicorn-11386.exe (PID: 17552)
- Unicorn-37672.exe (PID: 17628)
- Unicorn-21601.exe (PID: 17600)
- Unicorn-36083.exe (PID: 17488)
- Unicorn-62017.exe (PID: 17792)
- Unicorn-20514.exe (PID: 17856)
- Unicorn-64287.exe (PID: 17800)
- Unicorn-56119.exe (PID: 17772)
- Unicorn-12346.exe (PID: 17820)
- Unicorn-56119.exe (PID: 17776)
- Unicorn-46992.exe (PID: 17932)
- Unicorn-49295.exe (PID: 17948)
- Unicorn-41127.exe (PID: 17940)
- Unicorn-30272.exe (PID: 18048)
- Unicorn-42219.exe (PID: 18064)
- Unicorn-54968.exe (PID: 18072)
- Unicorn-55233.exe (PID: 18096)
- Unicorn-37480.exe (PID: 17684)
- Unicorn-34237.exe (PID: 18384)
- Unicorn-5078.exe (PID: 18160)
- Unicorn-50692.exe (PID: 18228)
- Unicorn-13743.exe (PID: 18152)
- Unicorn-54809.exe (PID: 18280)
- Unicorn-11770.exe (PID: 18324)
- Unicorn-31091.exe (PID: 18236)
- Unicorn-25804.exe (PID: 18340)
- Unicorn-3794.exe (PID: 18296)
- Unicorn-28106.exe (PID: 18376)
- Unicorn-33972.exe (PID: 18360)
- Unicorn-39400.exe (PID: 12528)
- Unicorn-33534.exe (PID: 12376)
- Unicorn-63764.exe (PID: 18136)
- Unicorn-62315.exe (PID: 5512)
- Unicorn-10811.exe (PID: 18460)
- Unicorn-4946.exe (PID: 18436)
- Unicorn-2908.exe (PID: 1300)
- Unicorn-4946.exe (PID: 18444)
- Unicorn-862.exe (PID: 18468)
- Unicorn-10811.exe (PID: 18452)
The sample compiled with chinese language support
- 1 (1357).exe (PID: 1276)
- Unicorn-23185.exe (PID: 5008)
- Unicorn-33133.exe (PID: 6540)
- Unicorn-62764.exe (PID: 1324)
- Unicorn-18938.exe (PID: 3884)
- Unicorn-44412.exe (PID: 8032)
- Unicorn-65071.exe (PID: 8016)
- Unicorn-6158.exe (PID: 1660)
- Unicorn-23489.exe (PID: 920)
- Unicorn-44926.exe (PID: 8064)
- Unicorn-32019.exe (PID: 6040)
- Unicorn-19353.exe (PID: 8056)
- Unicorn-32019.exe (PID: 1056)
- Unicorn-49787.exe (PID: 8108)
- Unicorn-53871.exe (PID: 8132)
- Unicorn-8924.exe (PID: 4040)
- Unicorn-47941.exe (PID: 8100)
- Unicorn-27329.exe (PID: 8188)
- Unicorn-39481.exe (PID: 8164)
- Unicorn-47941.exe (PID: 8092)
- Unicorn-45755.exe (PID: 7220)
- Unicorn-2684.exe (PID: 2552)
- Unicorn-48356.exe (PID: 6576)
- Unicorn-25745.exe (PID: 8156)
- Unicorn-43665.exe (PID: 5868)
- Unicorn-13449.exe (PID: 2772)
- Unicorn-43400.exe (PID: 6668)
- Unicorn-8924.exe (PID: 4988)
- Unicorn-39943.exe (PID: 7368)
- Unicorn-35497.exe (PID: 5352)
- Unicorn-59917.exe (PID: 1812)
- Unicorn-35497.exe (PID: 6644)
- Unicorn-11921.exe (PID: 7232)
- Unicorn-59544.exe (PID: 7352)
- Unicorn-39943.exe (PID: 5204)
- Unicorn-35497.exe (PID: 4180)
- Unicorn-10915.exe (PID: 2904)
- Unicorn-29271.exe (PID: 5384)
- Unicorn-11921.exe (PID: 7228)
- Unicorn-7319.exe (PID: 5984)
- Unicorn-15379.exe (PID: 4996)
- Unicorn-12115.exe (PID: 3008)
- Unicorn-36353.exe (PID: 7260)
- Unicorn-51885.exe (PID: 7180)
- Unicorn-24313.exe (PID: 7664)
- Unicorn-42041.exe (PID: 7648)
- Unicorn-11044.exe (PID: 5436)
- Unicorn-18201.exe (PID: 7896)
- Unicorn-21429.exe (PID: 7460)
- Unicorn-19845.exe (PID: 7680)
- Unicorn-43280.exe (PID: 7476)
- Unicorn-8963.exe (PID: 7912)
- Unicorn-11044.exe (PID: 1096)
- Unicorn-50681.exe (PID: 7944)
- Unicorn-16752.exe (PID: 7244)
- Unicorn-38725.exe (PID: 7812)
- Unicorn-54786.exe (PID: 7748)
- Unicorn-61183.exe (PID: 7776)
- Unicorn-49031.exe (PID: 7796)
- Unicorn-37141.exe (PID: 7868)
- Unicorn-24234.exe (PID: 7852)
- Unicorn-29271.exe (PID: 1532)
- Unicorn-51236.exe (PID: 7964)
- Unicorn-11044.exe (PID: 2236)
- Unicorn-6158.exe (PID: 1188)
- Unicorn-22839.exe (PID: 7932)
- Unicorn-55554.exe (PID: 7708)
- Unicorn-10395.exe (PID: 7992)
- Unicorn-8858.exe (PID: 6244)
- Unicorn-6158.exe (PID: 6272)
- Unicorn-10712.exe (PID: 7420)
- Unicorn-37063.exe (PID: 6156)
- Unicorn-35217.exe (PID: 6516)
- Unicorn-18497.exe (PID: 8288)
- Unicorn-26857.exe (PID: 8208)
- Unicorn-47832.exe (PID: 1272)
- Unicorn-43696.exe (PID: 8368)
- Unicorn-8143.exe (PID: 8316)
- Unicorn-47640.exe (PID: 8272)
- Unicorn-7204.exe (PID: 8344)
- Unicorn-52321.exe (PID: 8336)
- Unicorn-18562.exe (PID: 8524)
- Unicorn-12248.exe (PID: 8640)
- Unicorn-45113.exe (PID: 8500)
- Unicorn-53089.exe (PID: 8620)
- Unicorn-27625.exe (PID: 8400)
- Unicorn-64116.exe (PID: 8376)
- Unicorn-23541.exe (PID: 8440)
- Unicorn-40764.exe (PID: 8564)
- Unicorn-41029.exe (PID: 8572)
- Unicorn-28777.exe (PID: 8540)
- Unicorn-51937.exe (PID: 8420)
- Unicorn-16804.exe (PID: 8488)
- Unicorn-23349.exe (PID: 8476)
- Unicorn-7012.exe (PID: 8392)
- Unicorn-65533.exe (PID: 8508)
- Unicorn-39943.exe (PID: 7360)
- Unicorn-40837.exe (PID: 8696)
- Unicorn-28777.exe (PID: 8556)
- Unicorn-57173.exe (PID: 8592)
- Unicorn-28777.exe (PID: 8548)
- Unicorn-60852.exe (PID: 8456)
- Unicorn-59809.exe (PID: 2600)
- Unicorn-24499.exe (PID: 8900)
- Unicorn-53644.exe (PID: 8632)
- Unicorn-35497.exe (PID: 4112)
- Unicorn-58827.exe (PID: 8816)
- Unicorn-35606.exe (PID: 8840)
- Unicorn-24671.exe (PID: 8800)
- Unicorn-9818.exe (PID: 8888)
- Unicorn-49176.exe (PID: 8872)
- Unicorn-3696.exe (PID: 8768)
- Unicorn-49176.exe (PID: 8880)
- Unicorn-60111.exe (PID: 8848)
- Unicorn-52897.exe (PID: 8752)
- Unicorn-34183.exe (PID: 8916)
- Unicorn-27687.exe (PID: 7252)
- Unicorn-62911.exe (PID: 8864)
- Unicorn-60641.exe (PID: 8856)
- Unicorn-30487.exe (PID: 7192)
- Unicorn-24671.exe (PID: 8792)
- Unicorn-38445.exe (PID: 9036)
- Unicorn-34361.exe (PID: 9044)
- Unicorn-24146.exe (PID: 9068)
- Unicorn-18387.exe (PID: 9076)
- Unicorn-17833.exe (PID: 9116)
- Unicorn-54589.exe (PID: 9100)
- Unicorn-48075.exe (PID: 9176)
- Unicorn-30447.exe (PID: 9140)
- Unicorn-25617.exe (PID: 8268)
- Unicorn-23570.exe (PID: 9200)
- Unicorn-23239.exe (PID: 1760)
- Unicorn-47189.exe (PID: 6044)
- Unicorn-6156.exe (PID: 9292)
- Unicorn-38829.exe (PID: 9248)
- Unicorn-55720.exe (PID: 9328)
- Unicorn-50889.exe (PID: 9316)
- Unicorn-3032.exe (PID: 9352)
- Unicorn-15019.exe (PID: 9372)
- Unicorn-51584.exe (PID: 9400)
- Unicorn-40151.exe (PID: 9408)
- Unicorn-49803.exe (PID: 9392)
- Unicorn-35875.exe (PID: 9448)
- Unicorn-53504.exe (PID: 9516)
- Unicorn-20713.exe (PID: 9576)
- Unicorn-64677.exe (PID: 9488)
- Unicorn-16821.exe (PID: 9540)
- Unicorn-62108.exe (PID: 9600)
- Unicorn-40837.exe (PID: 8688)
- Unicorn-59368.exe (PID: 9636)
- Unicorn-5528.exe (PID: 9620)
- Unicorn-13715.exe (PID: 7388)
- Unicorn-40645.exe (PID: 8784)
- Unicorn-11791.exe (PID: 8824)
- Unicorn-868.exe (PID: 9664)
- Unicorn-21215.exe (PID: 9704)
- Unicorn-35439.exe (PID: 9728)
- Unicorn-10188.exe (PID: 9772)
- Unicorn-14464.exe (PID: 9752)
- Unicorn-35055.exe (PID: 9804)
- Unicorn-63089.exe (PID: 9824)
- Unicorn-14516.exe (PID: 8264)
- Unicorn-1444.exe (PID: 9856)
- Unicorn-59395.exe (PID: 9904)
- Unicorn-31569.exe (PID: 9928)
- Unicorn-4634.exe (PID: 9988)
- Unicorn-56767.exe (PID: 9864)
- Unicorn-57919.exe (PID: 9956)
- Unicorn-63857.exe (PID: 9996)
- Unicorn-11127.exe (PID: 10064)
- Unicorn-37707.exe (PID: 664)
- Unicorn-11496.exe (PID: 10164)
- Unicorn-48408.exe (PID: 8448)
- Unicorn-36696.exe (PID: 2332)
- Unicorn-64589.exe (PID: 10220)
- Unicorn-61465.exe (PID: 10248)
- Unicorn-4096.exe (PID: 10256)
- Unicorn-56997.exe (PID: 10324)
- Unicorn-40661.exe (PID: 10300)
- Unicorn-50920.exe (PID: 10384)
- Unicorn-32493.exe (PID: 10292)
- Unicorn-54812.exe (PID: 10452)
- Unicorn-38283.exe (PID: 10420)
- Unicorn-58149.exe (PID: 10428)
- Unicorn-13032.exe (PID: 10576)
- Unicorn-20438.exe (PID: 10512)
- Unicorn-58896.exe (PID: 10476)
- Unicorn-25477.exe (PID: 10484)
- Unicorn-49789.exe (PID: 10532)
- Unicorn-37921.exe (PID: 10356)
- Unicorn-37921.exe (PID: 10352)
- Unicorn-588.exe (PID: 10644)
- Unicorn-42773.exe (PID: 10716)
- Unicorn-43519.exe (PID: 10752)
- Unicorn-42011.exe (PID: 10724)
- Unicorn-39383.exe (PID: 10636)
- Unicorn-41429.exe (PID: 10608)
- Unicorn-49597.exe (PID: 10624)
- Unicorn-21201.exe (PID: 10592)
- Unicorn-49789.exe (PID: 10540)
- Unicorn-2487.exe (PID: 10800)
- Unicorn-40535.exe (PID: 10856)
- Unicorn-22161.exe (PID: 10936)
- Unicorn-30329.exe (PID: 10824)
- Unicorn-11946.exe (PID: 10908)
- Unicorn-54641.exe (PID: 10992)
- Unicorn-59664.exe (PID: 10924)
- Unicorn-6571.exe (PID: 10780)
- Unicorn-18631.exe (PID: 10848)
- Unicorn-26245.exe (PID: 10916)
- Unicorn-55580.exe (PID: 10888)
- Unicorn-5440.exe (PID: 11092)
- Unicorn-62809.exe (PID: 11076)
- Unicorn-54397.exe (PID: 9132)
- Unicorn-18247.exe (PID: 11036)
- Unicorn-26607.exe (PID: 10976)
- Unicorn-40011.exe (PID: 11196)
- Unicorn-29945.exe (PID: 11020)
- Unicorn-63940.exe (PID: 10772)
- Unicorn-51709.exe (PID: 11172)
- Unicorn-51325.exe (PID: 11436)
- Unicorn-18247.exe (PID: 11028)
- Unicorn-14495.exe (PID: 11460)
- Unicorn-46281.exe (PID: 11060)
- Unicorn-54832.exe (PID: 11444)
- Unicorn-2700.exe (PID: 11228)
- Unicorn-48319.exe (PID: 11152)
- Unicorn-18247.exe (PID: 11044)
- Unicorn-50365.exe (PID: 11052)
- Unicorn-55793.exe (PID: 11216)
- Unicorn-59877.exe (PID: 11208)
- Unicorn-57639.exe (PID: 11488)
- Unicorn-10868.exe (PID: 11244)
- Unicorn-36835.exe (PID: 11540)
- Unicorn-14952.exe (PID: 11260)
- Unicorn-56540.exe (PID: 11236)
- Unicorn-10676.exe (PID: 11356)
- Unicorn-8630.exe (PID: 11424)
- Unicorn-54449.exe (PID: 11160)
- Unicorn-17890.exe (PID: 11524)
- Unicorn-57831.exe (PID: 11332)
- Unicorn-6360.exe (PID: 11384)
- Unicorn-20882.exe (PID: 11396)
- Unicorn-22545.exe (PID: 11624)
- Unicorn-63961.exe (PID: 11340)
- Unicorn-58916.exe (PID: 11376)
- Unicorn-47168.exe (PID: 11288)
- Unicorn-27516.exe (PID: 11768)
- Unicorn-10868.exe (PID: 11252)
- Unicorn-44309.exe (PID: 11644)
- Unicorn-48009.exe (PID: 11824)
- Unicorn-48009.exe (PID: 11832)
- Unicorn-19613.exe (PID: 11760)
- Unicorn-21394.exe (PID: 11416)
- Unicorn-44864.exe (PID: 11716)
- Unicorn-27567.exe (PID: 11296)
- Unicorn-53224.exe (PID: 11660)
- Unicorn-64729.exe (PID: 11724)
- Unicorn-20743.exe (PID: 11988)
- Unicorn-21458.exe (PID: 11856)
- Unicorn-59559.exe (PID: 11928)
- Unicorn-23889.exe (PID: 11676)
- Unicorn-45824.exe (PID: 11920)
- Unicorn-65232.exe (PID: 11968)
- Unicorn-14568.exe (PID: 11516)
Create files in a temporary directory
- 1 (1357).exe (PID: 1276)
- Unicorn-33133.exe (PID: 6540)
- Unicorn-8924.exe (PID: 4988)
- Unicorn-23185.exe (PID: 5008)
- Unicorn-15379.exe (PID: 4996)
- Unicorn-13449.exe (PID: 2772)
- Unicorn-12115.exe (PID: 3008)
- Unicorn-11044.exe (PID: 1096)
- Unicorn-29271.exe (PID: 1532)
- Unicorn-32019.exe (PID: 6040)
- Unicorn-23489.exe (PID: 920)
- Unicorn-62764.exe (PID: 1324)
- Unicorn-30487.exe (PID: 7192)
- Unicorn-7319.exe (PID: 5984)
- Unicorn-18938.exe (PID: 3884)
- Unicorn-36353.exe (PID: 7260)
- Unicorn-11044.exe (PID: 2236)
- Unicorn-18201.exe (PID: 7896)
- Unicorn-11044.exe (PID: 5436)
- Unicorn-16752.exe (PID: 7244)
- Unicorn-6158.exe (PID: 6272)
- Unicorn-51236.exe (PID: 7964)
- Unicorn-6158.exe (PID: 1188)
- Unicorn-22839.exe (PID: 7932)
- Unicorn-44412.exe (PID: 8032)
- Unicorn-6158.exe (PID: 1660)
- Unicorn-19353.exe (PID: 8056)
- Unicorn-47941.exe (PID: 8092)
- Unicorn-47941.exe (PID: 8100)
- Unicorn-39481.exe (PID: 8164)
- Unicorn-8924.exe (PID: 4040)
- Unicorn-2684.exe (PID: 2552)
- Unicorn-25745.exe (PID: 8156)
- Unicorn-48356.exe (PID: 6576)
- Unicorn-43665.exe (PID: 5868)
- Unicorn-39943.exe (PID: 7368)
- Unicorn-35497.exe (PID: 6644)
- Unicorn-11921.exe (PID: 7232)
- Unicorn-59544.exe (PID: 7352)
- Unicorn-10915.exe (PID: 2904)
- Unicorn-35497.exe (PID: 4180)
- Unicorn-39943.exe (PID: 5204)
- Unicorn-29271.exe (PID: 5384)
- Unicorn-24313.exe (PID: 7664)
- Unicorn-19845.exe (PID: 7680)
- Unicorn-8963.exe (PID: 7912)
- Unicorn-50681.exe (PID: 7944)
- Unicorn-38725.exe (PID: 7812)
- Unicorn-49031.exe (PID: 7796)
- Unicorn-37141.exe (PID: 7868)
- Unicorn-24234.exe (PID: 7852)
- Unicorn-35217.exe (PID: 6516)
- Unicorn-10712.exe (PID: 7420)
- Unicorn-37063.exe (PID: 6156)
- Unicorn-26857.exe (PID: 8208)
- Unicorn-18497.exe (PID: 8288)
- Unicorn-44926.exe (PID: 8064)
- Unicorn-47640.exe (PID: 8272)
- Unicorn-47832.exe (PID: 1272)
- Unicorn-43696.exe (PID: 8368)
- Unicorn-8143.exe (PID: 8316)
- Unicorn-7204.exe (PID: 8344)
- Unicorn-53871.exe (PID: 8132)
- Unicorn-32019.exe (PID: 1056)
- Unicorn-52321.exe (PID: 8336)
- Unicorn-18562.exe (PID: 8524)
- Unicorn-27625.exe (PID: 8400)
- Unicorn-49787.exe (PID: 8108)
- Unicorn-12248.exe (PID: 8640)
- Unicorn-53089.exe (PID: 8620)
- Unicorn-45113.exe (PID: 8500)
- Unicorn-23541.exe (PID: 8440)
- Unicorn-64116.exe (PID: 8376)
- Unicorn-40764.exe (PID: 8564)
- Unicorn-51937.exe (PID: 8420)
- Unicorn-28777.exe (PID: 8540)
- Unicorn-45755.exe (PID: 7220)
- Unicorn-23349.exe (PID: 8476)
- Unicorn-16804.exe (PID: 8488)
- Unicorn-40837.exe (PID: 8696)
- Unicorn-39943.exe (PID: 7360)
- Unicorn-65533.exe (PID: 8508)
- Unicorn-43400.exe (PID: 6668)
- Unicorn-28777.exe (PID: 8556)
- Unicorn-28777.exe (PID: 8548)
- Unicorn-53644.exe (PID: 8632)
- Unicorn-57173.exe (PID: 8592)
- Unicorn-60852.exe (PID: 8456)
- Unicorn-24499.exe (PID: 8900)
- Unicorn-3696.exe (PID: 8768)
- Unicorn-58827.exe (PID: 8816)
- Unicorn-9818.exe (PID: 8888)
- Unicorn-49176.exe (PID: 8880)
- Unicorn-52897.exe (PID: 8752)
- Unicorn-34183.exe (PID: 8916)
- Unicorn-35497.exe (PID: 4112)
- Unicorn-60111.exe (PID: 8848)
- Unicorn-11921.exe (PID: 7228)
- Unicorn-24671.exe (PID: 8792)
- Unicorn-62911.exe (PID: 8864)
- Unicorn-60641.exe (PID: 8856)
- Unicorn-51885.exe (PID: 7180)
- Unicorn-38445.exe (PID: 9036)
- Unicorn-34361.exe (PID: 9044)
- Unicorn-17833.exe (PID: 9116)
- Unicorn-54589.exe (PID: 9100)
- Unicorn-48075.exe (PID: 9176)
- Unicorn-43280.exe (PID: 7476)
- Unicorn-25617.exe (PID: 8268)
- Unicorn-61183.exe (PID: 7776)
- Unicorn-49176.exe (PID: 8872)
- Unicorn-54786.exe (PID: 7748)
- Unicorn-23570.exe (PID: 9200)
- Unicorn-47189.exe (PID: 6044)
- Unicorn-55554.exe (PID: 7708)
- Unicorn-6156.exe (PID: 9292)
- Unicorn-38829.exe (PID: 9248)
- Unicorn-10395.exe (PID: 7992)
- Unicorn-8858.exe (PID: 6244)
- Unicorn-50889.exe (PID: 9316)
- Unicorn-35875.exe (PID: 9448)
- Unicorn-53504.exe (PID: 9516)
- Unicorn-64677.exe (PID: 9488)
- Unicorn-20713.exe (PID: 9576)
- Unicorn-41029.exe (PID: 8572)
- Unicorn-35497.exe (PID: 5352)
- Unicorn-7012.exe (PID: 8392)
- Unicorn-5528.exe (PID: 9620)
- Unicorn-62108.exe (PID: 9600)
- Unicorn-27329.exe (PID: 8188)
- Unicorn-59368.exe (PID: 9636)
- Unicorn-13715.exe (PID: 7388)
- Unicorn-59809.exe (PID: 2600)
- Unicorn-35606.exe (PID: 8840)
- Unicorn-24671.exe (PID: 8800)
- Unicorn-59917.exe (PID: 1812)
- Unicorn-40645.exe (PID: 8784)
- Unicorn-11791.exe (PID: 8824)
- Unicorn-27687.exe (PID: 7252)
- Unicorn-868.exe (PID: 9664)
- Unicorn-24146.exe (PID: 9068)
- Unicorn-42041.exe (PID: 7648)
- Unicorn-18387.exe (PID: 9076)
- Unicorn-21215.exe (PID: 9704)
- Unicorn-30447.exe (PID: 9140)
- Unicorn-35439.exe (PID: 9728)
- Unicorn-21429.exe (PID: 7460)
- Unicorn-23239.exe (PID: 1760)
- Unicorn-14464.exe (PID: 9752)
- Unicorn-1444.exe (PID: 9856)
- Unicorn-55720.exe (PID: 9328)
- Unicorn-59395.exe (PID: 9904)
- Unicorn-56767.exe (PID: 9864)
- Unicorn-65071.exe (PID: 8016)
- Unicorn-15019.exe (PID: 9372)
- Unicorn-51584.exe (PID: 9400)
- Unicorn-57919.exe (PID: 9956)
- Unicorn-63857.exe (PID: 9996)
- Unicorn-49803.exe (PID: 9392)
- Unicorn-4634.exe (PID: 9988)
- Unicorn-40151.exe (PID: 9408)
- Unicorn-11127.exe (PID: 10064)
- Unicorn-11496.exe (PID: 10164)
- Unicorn-37707.exe (PID: 664)
- Unicorn-16821.exe (PID: 9540)
- Unicorn-36696.exe (PID: 2332)
- Unicorn-64589.exe (PID: 10220)
- Unicorn-48408.exe (PID: 8448)
- Unicorn-61465.exe (PID: 10248)
- Unicorn-4096.exe (PID: 10256)
- Unicorn-32493.exe (PID: 10292)
Reads security settings of Internet Explorer
- BackgroundTransferHost.exe (PID: 5544)
- BackgroundTransferHost.exe (PID: 2320)
- BackgroundTransferHost.exe (PID: 2096)
Creates files or folders in the user directory
- BackgroundTransferHost.exe (PID: 2320)
Reads the software policy settings
- BackgroundTransferHost.exe (PID: 2320)
- slui.exe (PID: 6372)
Checks proxy server information
- BackgroundTransferHost.exe (PID: 2320)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable (generic) (52.9) |
|---|---|---|
| .exe | | | Generic Win/DOS Executable (23.5) |
| .exe | | | DOS Executable Generic (23.5) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
711
Monitored processes
580
Malicious processes
90
Suspicious processes
61
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 664 | C:\Users\admin\AppData\Local\Temp\Unicorn-37707.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-37707.exe | Unicorn-49787.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 920 | C:\Users\admin\AppData\Local\Temp\Unicorn-23489.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-23489.exe | Unicorn-6158.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 976 | C:\Users\admin\AppData\Local\Temp\Unicorn-10339.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-10339.exe | — | Unicorn-3032.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1056 | C:\Users\admin\AppData\Local\Temp\Unicorn-32019.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-32019.exe | Unicorn-8924.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1096 | C:\Users\admin\AppData\Local\Temp\Unicorn-11044.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-11044.exe | Unicorn-6158.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1188 | C:\Users\admin\AppData\Local\Temp\Unicorn-6158.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-6158.exe | Unicorn-62764.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1272 | C:\Users\admin\AppData\Local\Temp\Unicorn-47832.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-47832.exe | Unicorn-23489.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1276 | "C:\Users\admin\AppData\Local\Temp\1 (1357).exe" | C:\Users\admin\AppData\Local\Temp\1 (1357).exe | explorer.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1300 | C:\Users\admin\AppData\Local\Temp\Unicorn-2908.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2908.exe | — | Unicorn-32493.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1324 | C:\Users\admin\AppData\Local\Temp\Unicorn-62764.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-62764.exe | Unicorn-33133.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
13 814
Read events
13 799
Write events
15
Delete events
0
Modification events
| (PID) Process: | (5544) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (5544) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (5544) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (2320) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (2320) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (2320) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (2096) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (2096) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (2096) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7448) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
Executable files
1 214
Suspicious files
5
Text files
0
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 2320 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\4e979af4-eab0-4670-bc5a-c51fac3c5ae6.down_data | — | |
MD5:— | SHA256:— | |||
| 1276 | 1 (1357).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-15379.exe | executable | |
MD5:0576368F1E67C063D7484D4D6CD30070 | SHA256:FA1DED848A85BCB66B4DDD5F4DEF17DB6A26D81E080706925EE3E94689F9E58E | |||
| 3884 | Unicorn-18938.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13449.exe | executable | |
MD5:3F370418504FD1BEAE05405663BEE9FF | SHA256:B8BC7A6784E3FCD560E1B9B0346430E90E336D0A5E378303B716B0EF9133E64E | |||
| 5008 | Unicorn-23185.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-8924.exe | executable | |
MD5:48C2523AD8BAEDBF318478A558DD2632 | SHA256:2473B6D63A60612C3E31FB45F356E54AF855D05AAB2AECC371974C23124AA4B4 | |||
| 2320 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\4e979af4-eab0-4670-bc5a-c51fac3c5ae6.d569b3ab-8e11-4278-8562-364f2d6d6b0a.down_meta | binary | |
MD5:786218DBF22172D9C1A210379A91F30B | SHA256:86E6D5BCAD65F47182950D80C0A366F867D9EFBEB31C1560234238073A85BAD3 | |||
| 6540 | Unicorn-33133.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-23185.exe | executable | |
MD5:69A7A932198C0050A95BE6A3A1D64763 | SHA256:96069EEDEFB243A7392906234186066EF425E6F98C925B2B07FF6C0F7AF8CC6E | |||
| 2320 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\50e7cecd-a26f-4afc-87d8-0c68605fd4de.d569b3ab-8e11-4278-8562-364f2d6d6b0a.down_meta | binary | |
MD5:786218DBF22172D9C1A210379A91F30B | SHA256:86E6D5BCAD65F47182950D80C0A366F867D9EFBEB31C1560234238073A85BAD3 | |||
| 2320 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10D | binary | |
MD5:4872BABAF39AA62B8D32695EBB7E9173 | SHA256:2EE85DF86EE29BBEB3DCA81AA29B6DE204F605A2769B84C728A329178A2D0999 | |||
| 4988 | Unicorn-8924.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-48356.exe | executable | |
MD5:97B2AA387EDF7081F46672E5B4B8F949 | SHA256:67916D622B4E5C9A499D340AA1A389E9CE459273B564046C0F35EA51927EC671 | |||
| 2320 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\50e7cecd-a26f-4afc-87d8-0c68605fd4de.up_meta_secure | binary | |
MD5:96F11C5FBCB99D73C59D1121CA583B40 | SHA256:315FB4FF91A0242AA3E1807A18B8A04980BDE1F9DA0EA51971A4E5BF10F54BD2 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
25
DNS requests
18
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
5496 | MoUsoCoreWorker.exe | GET | 200 | 23.48.23.143:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | unknown |
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | unknown |
2320 | BackgroundTransferHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | unknown |
7684 | SIHClient.exe | GET | 200 | 2.23.181.156:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | unknown |
5048 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | unknown |
7684 | SIHClient.exe | GET | 200 | 2.23.181.156:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | unknown |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | unknown |
2104 | svchost.exe | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | unknown |
— | — | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | unknown |
5496 | MoUsoCoreWorker.exe | 23.48.23.143:80 | crl.microsoft.com | Akamai International B.V. | DE | unknown |
4 | System | 192.168.100.255:138 | — | — | — | unknown |
6544 | svchost.exe | 40.126.31.1:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | unknown |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | unknown |
3216 | svchost.exe | 40.113.110.67:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | unknown |
2112 | svchost.exe | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | unknown |
5048 | backgroundTaskHost.exe | 20.223.35.26:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | unknown |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| unknown |
google.com |
| unknown |
crl.microsoft.com |
| unknown |
login.live.com |
| unknown |
ocsp.digicert.com |
| unknown |
client.wns.windows.com |
| unknown |
arc.msn.com |
| unknown |
www.bing.com |
| unknown |
slscr.update.microsoft.com |
| unknown |
www.microsoft.com |
| unknown |