| File name: | 1 (676) |
| Full analysis: | https://app.any.run/tasks/f7e76657-bedd-48a3-967f-8e39cba48c08 |
| Verdict: | Malicious activity |
| Analysis date: | March 25, 2025, 04:04:02 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | 74C0A29CB5FB5DB413802703B87F1870 |
| SHA1: | CFE6FE608BA3B6AC2B99D319143D62F28B0491F8 |
| SHA256: | 626D7DE0167AD7AEF3EB40282CEC28D7EAE952AC34330391040F9CC0F15043CA |
| SSDEEP: | 6144:NwK5tNIPkDvHA5dEtYevLofxotJ1lvJGBq//yeOCkk/8SwjwpyA4Ehhxxh4JGpIN:N9vecHA5WtTNJHhaq3yeOCWx4QxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- Unicorn-34198.exe (PID: 7524)
- 1 (676).exe (PID: 7348)
- Unicorn-11644.exe (PID: 8016)
- Unicorn-50153.exe (PID: 7192)
- Unicorn-64182.exe (PID: 8008)
- Unicorn-57231.exe (PID: 4776)
- Unicorn-30687.exe (PID: 536)
- Unicorn-44175.exe (PID: 3176)
- Unicorn-34025.exe (PID: 5588)
- Unicorn-36713.exe (PID: 6048)
- Unicorn-5429.exe (PID: 2284)
- Unicorn-63391.exe (PID: 7256)
- Unicorn-58280.exe (PID: 5596)
- Unicorn-36006.exe (PID: 7320)
- Unicorn-13775.exe (PID: 7340)
- Unicorn-65353.exe (PID: 7020)
- Unicorn-45488.exe (PID: 6700)
- Unicorn-26550.exe (PID: 4428)
- Unicorn-38576.exe (PID: 5344)
- Unicorn-13574.exe (PID: 5332)
- Unicorn-51840.exe (PID: 4756)
- Unicorn-49832.exe (PID: 6184)
- Unicorn-6168.exe (PID: 6816)
- Unicorn-57526.exe (PID: 6808)
- Unicorn-18281.exe (PID: 5008)
- Unicorn-63376.exe (PID: 3240)
- Unicorn-600.exe (PID: 3100)
- Unicorn-51264.exe (PID: 4696)
- Unicorn-35769.exe (PID: 2148)
- Unicorn-1176.exe (PID: 1324)
- Unicorn-60199.exe (PID: 4608)
- Unicorn-26894.exe (PID: 1180)
- Unicorn-2328.exe (PID: 1072)
- Unicorn-36537.exe (PID: 5868)
- Unicorn-61855.exe (PID: 7372)
- Unicorn-49593.exe (PID: 5968)
- Unicorn-64720.exe (PID: 672)
- Unicorn-3864.exe (PID: 5972)
- Unicorn-4248.exe (PID: 7152)
- Unicorn-32536.exe (PID: 3304)
- Unicorn-59609.exe (PID: 7148)
- Unicorn-57341.exe (PID: 6132)
- Unicorn-5539.exe (PID: 6564)
- Unicorn-50679.exe (PID: 2852)
- Unicorn-30982.exe (PID: 5256)
- Unicorn-21784.exe (PID: 664)
- Unicorn-56272.exe (PID: 2096)
- Unicorn-9671.exe (PID: 7696)
- Unicorn-3407.exe (PID: 5280)
- Unicorn-20409.exe (PID: 7952)
- Unicorn-10911.exe (PID: 7688)
- Unicorn-8104.exe (PID: 7712)
- Unicorn-21369.exe (PID: 8000)
- Unicorn-52278.exe (PID: 1764)
- Unicorn-46457.exe (PID: 6988)
- Unicorn-34751.exe (PID: 7992)
- Unicorn-29654.exe (PID: 5776)
- Unicorn-33023.exe (PID: 6028)
- Unicorn-22905.exe (PID: 7788)
- Unicorn-543.exe (PID: 7784)
- Unicorn-14278.exe (PID: 2152)
- Unicorn-2847.exe (PID: 8068)
- Unicorn-12751.exe (PID: 6512)
- Unicorn-20025.exe (PID: 6476)
- Unicorn-28703.exe (PID: 2420)
- Unicorn-39817.exe (PID: 7868)
- Unicorn-32809.exe (PID: 7900)
- Unicorn-13135.exe (PID: 8140)
- Unicorn-40009.exe (PID: 7848)
- Unicorn-48856.exe (PID: 7176)
- Unicorn-55860.exe (PID: 5384)
- Unicorn-59072.exe (PID: 8132)
- Unicorn-61639.exe (PID: 7940)
- Unicorn-49337.exe (PID: 7584)
- Unicorn-10639.exe (PID: 8148)
- Unicorn-30313.exe (PID: 8188)
- Unicorn-44553.exe (PID: 8748)
- Unicorn-14184.exe (PID: 8788)
- Unicorn-13800.exe (PID: 8812)
- Unicorn-1096.exe (PID: 6080)
- Unicorn-36591.exe (PID: 3896)
- Unicorn-22470.exe (PID: 8724)
- Unicorn-19295.exe (PID: 8572)
- Unicorn-29462.exe (PID: 8340)
- Unicorn-6184.exe (PID: 7800)
- Unicorn-46000.exe (PID: 5228)
- Unicorn-22944.exe (PID: 8536)
- Unicorn-46872.exe (PID: 7624)
- Unicorn-8024.exe (PID: 8172)
- Unicorn-728.exe (PID: 8964)
- Unicorn-58391.exe (PID: 1040)
- Unicorn-63945.exe (PID: 4464)
- Unicorn-22278.exe (PID: 8700)
- Unicorn-33593.exe (PID: 8976)
- Unicorn-2264.exe (PID: 8348)
- Unicorn-3608.exe (PID: 8384)
- Unicorn-38777.exe (PID: 8592)
- Unicorn-37433.exe (PID: 8512)
- Unicorn-31008.exe (PID: 5360)
- Unicorn-6031.exe (PID: 3140)
- Unicorn-46902.exe (PID: 6300)
- Unicorn-33577.exe (PID: 736)
- Unicorn-56192.exe (PID: 8268)
- Unicorn-38512.exe (PID: 8600)
- Unicorn-50358.exe (PID: 8280)
- Unicorn-45720.exe (PID: 7944)
- Unicorn-11292.exe (PID: 7644)
- Unicorn-58128.exe (PID: 8680)
- Unicorn-29929.exe (PID: 8104)
- Unicorn-3992.exe (PID: 8376)
- Unicorn-31657.exe (PID: 5436)
- Unicorn-29462.exe (PID: 8332)
- Unicorn-44537.exe (PID: 8324)
- Unicorn-59913.exe (PID: 8256)
- Unicorn-58408.exe (PID: 4164)
- Unicorn-22057.exe (PID: 8620)
- Unicorn-13885.exe (PID: 9012)
- Unicorn-25929.exe (PID: 9512)
- Unicorn-26182.exe (PID: 7632)
- Unicorn-25897.exe (PID: 6488)
- Unicorn-27830.exe (PID: 812)
- Unicorn-51216.exe (PID: 9104)
- Unicorn-58793.exe (PID: 9528)
- Unicorn-58999.exe (PID: 616)
- Unicorn-58601.exe (PID: 9616)
- Unicorn-56333.exe (PID: 9972)
- Unicorn-5736.exe (PID: 9136)
- Unicorn-22400.exe (PID: 9952)
- Unicorn-2799.exe (PID: 9944)
- Unicorn-19590.exe (PID: 9200)
- Unicorn-4687.exe (PID: 7560)
- Unicorn-48808.exe (PID: 8460)
- Unicorn-56103.exe (PID: 8892)
- Unicorn-32783.exe (PID: 9812)
- Unicorn-48713.exe (PID: 7288)
- Unicorn-5103.exe (PID: 10096)
- Unicorn-17193.exe (PID: 10328)
- Unicorn-60137.exe (PID: 9696)
- Unicorn-31656.exe (PID: 11224)
- Unicorn-37120.exe (PID: 11232)
- Unicorn-1951.exe (PID: 11156)
- Unicorn-11761.exe (PID: 9752)
- Unicorn-26533.exe (PID: 8480)
- Unicorn-31225.exe (PID: 10264)
- Unicorn-42457.exe (PID: 9520)
- Unicorn-22895.exe (PID: 10664)
- Unicorn-17078.exe (PID: 8548)
- Unicorn-31527.exe (PID: 11000)
- Unicorn-55165.exe (PID: 5084)
- Unicorn-45721.exe (PID: 9740)
- Unicorn-36617.exe (PID: 11052)
- Unicorn-62735.exe (PID: 11760)
- Unicorn-2664.exe (PID: 9272)
- Unicorn-3119.exe (PID: 11840)
- Unicorn-3343.exe (PID: 8556)
- Unicorn-33209.exe (PID: 8992)
- Unicorn-31481.exe (PID: 8908)
- Unicorn-36631.exe (PID: 10640)
- Unicorn-45423.exe (PID: 9156)
- Unicorn-17769.exe (PID: 10840)
- Unicorn-28928.exe (PID: 9732)
- Unicorn-64552.exe (PID: 12480)
- Unicorn-20889.exe (PID: 12496)
- Unicorn-32735.exe (PID: 12552)
- Unicorn-19177.exe (PID: 8424)
- Unicorn-35199.exe (PID: 11416)
- Unicorn-18584.exe (PID: 10552)
- Unicorn-26262.exe (PID: 11708)
- Unicorn-62112.exe (PID: 11696)
- Unicorn-43337.exe (PID: 10900)
- Unicorn-14920.exe (PID: 12432)
- Unicorn-36732.exe (PID: 10008)
- Unicorn-16798.exe (PID: 11752)
- Unicorn-5334.exe (PID: 5452)
- Unicorn-53295.exe (PID: 12212)
- Unicorn-50468.exe (PID: 9980)
- Unicorn-32736.exe (PID: 7576)
- Unicorn-16854.exe (PID: 11880)
- Unicorn-46632.exe (PID: 10392)
- Unicorn-56228.exe (PID: 9636)
- Unicorn-55657.exe (PID: 11744)
- Unicorn-64592.exe (PID: 10444)
- Unicorn-54454.exe (PID: 12152)
- Unicorn-35065.exe (PID: 10416)
- Unicorn-51360.exe (PID: 11784)
- Unicorn-33785.exe (PID: 8364)
- Unicorn-43369.exe (PID: 3968)
- Unicorn-36631.exe (PID: 10672)
- Unicorn-13624.exe (PID: 9704)
- Unicorn-36732.exe (PID: 10028)
- Unicorn-34303.exe (PID: 9308)
- Unicorn-48448.exe (PID: 10400)
- Unicorn-16143.exe (PID: 12460)
- Unicorn-64672.exe (PID: 9264)
- Unicorn-10246.exe (PID: 13284)
- Unicorn-26664.exe (PID: 11728)
- Unicorn-16207.exe (PID: 12692)
- Unicorn-64352.exe (PID: 13296)
- Unicorn-8120.exe (PID: 13376)
- Unicorn-50359.exe (PID: 10612)
- Unicorn-56985.exe (PID: 10512)
- Unicorn-7160.exe (PID: 13404)
- Unicorn-19839.exe (PID: 11864)
- Unicorn-20681.exe (PID: 12248)
- Unicorn-22895.exe (PID: 10688)
- Unicorn-53145.exe (PID: 11060)
- Unicorn-16111.exe (PID: 13276)
- Unicorn-61606.exe (PID: 13420)
- Unicorn-36751.exe (PID: 11808)
- Unicorn-34505.exe (PID: 10956)
- Unicorn-19918.exe (PID: 8716)
- Unicorn-54185.exe (PID: 9864)
- Unicorn-16617.exe (PID: 10384)
- Unicorn-38425.exe (PID: 9852)
- Unicorn-53593.exe (PID: 9316)
- Unicorn-55392.exe (PID: 11736)
- Unicorn-58404.exe (PID: 13104)
- Unicorn-46217.exe (PID: 4220)
- Unicorn-36732.exe (PID: 9988)
- Unicorn-39833.exe (PID: 14108)
- Unicorn-47871.exe (PID: 13508)
- Unicorn-59080.exe (PID: 13236)
- Unicorn-23871.exe (PID: 11936)
- Unicorn-19279.exe (PID: 12664)
- Unicorn-5560.exe (PID: 9844)
- Unicorn-50663.exe (PID: 10504)
- Unicorn-22857.exe (PID: 9924)
- Unicorn-47871.exe (PID: 13532)
- Unicorn-47871.exe (PID: 13516)
- Unicorn-33574.exe (PID: 11872)
- Unicorn-45536.exe (PID: 15032)
- Unicorn-39289.exe (PID: 15980)
- Unicorn-55718.exe (PID: 12072)
- Unicorn-40543.exe (PID: 16012)
- Unicorn-32457.exe (PID: 8832)
- Unicorn-37918.exe (PID: 12128)
- Unicorn-12430.exe (PID: 9292)
- Unicorn-43031.exe (PID: 4304)
- Unicorn-8855.exe (PID: 9768)
- Unicorn-28601.exe (PID: 8736)
- Unicorn-22895.exe (PID: 10656)
- Unicorn-22304.exe (PID: 16020)
- Unicorn-25465.exe (PID: 10628)
- Unicorn-25256.exe (PID: 15452)
- Unicorn-21775.exe (PID: 12880)
- Unicorn-64825.exe (PID: 14524)
- Unicorn-63865.exe (PID: 14572)
- Unicorn-64441.exe (PID: 14552)
- Unicorn-21544.exe (PID: 9344)
- Unicorn-33097.exe (PID: 13264)
- Unicorn-36732.exe (PID: 9996)
- Unicorn-59833.exe (PID: 15152)
- Unicorn-46503.exe (PID: 16044)
- Unicorn-50416.exe (PID: 12732)
- Unicorn-33609.exe (PID: 7408)
- Unicorn-19103.exe (PID: 8608)
- Unicorn-1000.exe (PID: 13256)
- Unicorn-2062.exe (PID: 9680)
- Unicorn-34406.exe (PID: 10136)
- Unicorn-56487.exe (PID: 8856)
- Unicorn-15833.exe (PID: 15304)
- Unicorn-42649.exe (PID: 9536)
- Unicorn-3944.exe (PID: 11068)
- Unicorn-62176.exe (PID: 2772)
- Unicorn-30527.exe (PID: 13244)
Starts itself from another location
- Unicorn-11644.exe (PID: 8016)
- 1 (676).exe (PID: 7348)
- Unicorn-34198.exe (PID: 7524)
- Unicorn-64182.exe (PID: 8008)
- Unicorn-50153.exe (PID: 7192)
- Unicorn-5429.exe (PID: 2284)
- Unicorn-30687.exe (PID: 536)
- Unicorn-57231.exe (PID: 4776)
- Unicorn-34025.exe (PID: 5588)
- Unicorn-57526.exe (PID: 6808)
- Unicorn-44175.exe (PID: 3176)
- Unicorn-58280.exe (PID: 5596)
- Unicorn-36006.exe (PID: 7320)
- Unicorn-36713.exe (PID: 6048)
- Unicorn-13775.exe (PID: 7340)
- Unicorn-49593.exe (PID: 5968)
- Unicorn-45488.exe (PID: 6700)
- Unicorn-26550.exe (PID: 4428)
- Unicorn-38576.exe (PID: 5344)
- Unicorn-13574.exe (PID: 5332)
- Unicorn-51840.exe (PID: 4756)
- Unicorn-6168.exe (PID: 6816)
- Unicorn-49832.exe (PID: 6184)
- Unicorn-63391.exe (PID: 7256)
- Unicorn-18281.exe (PID: 5008)
- Unicorn-65353.exe (PID: 7020)
- Unicorn-600.exe (PID: 3100)
- Unicorn-51264.exe (PID: 4696)
- Unicorn-35769.exe (PID: 2148)
- Unicorn-1176.exe (PID: 1324)
- Unicorn-60199.exe (PID: 4608)
- Unicorn-26894.exe (PID: 1180)
- Unicorn-36537.exe (PID: 5868)
- Unicorn-61855.exe (PID: 7372)
- Unicorn-64720.exe (PID: 672)
- Unicorn-59609.exe (PID: 7148)
- Unicorn-3864.exe (PID: 5972)
- Unicorn-4248.exe (PID: 7152)
- Unicorn-32536.exe (PID: 3304)
- Unicorn-57341.exe (PID: 6132)
- Unicorn-5539.exe (PID: 6564)
- Unicorn-50679.exe (PID: 2852)
- Unicorn-30982.exe (PID: 5256)
- Unicorn-3407.exe (PID: 5280)
- Unicorn-21784.exe (PID: 664)
- Unicorn-56272.exe (PID: 2096)
- Unicorn-20409.exe (PID: 7952)
- Unicorn-10911.exe (PID: 7688)
- Unicorn-9671.exe (PID: 7696)
- Unicorn-8104.exe (PID: 7712)
- Unicorn-58408.exe (PID: 4164)
- Unicorn-52278.exe (PID: 1764)
- Unicorn-34751.exe (PID: 7992)
- Unicorn-21369.exe (PID: 8000)
- Unicorn-29654.exe (PID: 5776)
- Unicorn-46457.exe (PID: 6988)
- Unicorn-14278.exe (PID: 2152)
- Unicorn-33023.exe (PID: 6028)
- Unicorn-543.exe (PID: 7784)
- Unicorn-20025.exe (PID: 6476)
- Unicorn-22905.exe (PID: 7788)
- Unicorn-2847.exe (PID: 8068)
- Unicorn-12751.exe (PID: 6512)
- Unicorn-32809.exe (PID: 7900)
- Unicorn-28703.exe (PID: 2420)
- Unicorn-13135.exe (PID: 8140)
- Unicorn-40009.exe (PID: 7848)
- Unicorn-39817.exe (PID: 7868)
- Unicorn-48856.exe (PID: 7176)
- Unicorn-55860.exe (PID: 5384)
- Unicorn-59072.exe (PID: 8132)
- Unicorn-49337.exe (PID: 7584)
- Unicorn-10639.exe (PID: 8148)
- Unicorn-30313.exe (PID: 8188)
- Unicorn-44553.exe (PID: 8748)
- Unicorn-14184.exe (PID: 8788)
- Unicorn-1096.exe (PID: 6080)
- Unicorn-36591.exe (PID: 3896)
- Unicorn-13800.exe (PID: 8812)
- Unicorn-22470.exe (PID: 8724)
- Unicorn-29462.exe (PID: 8340)
- Unicorn-19295.exe (PID: 8572)
- Unicorn-8024.exe (PID: 8172)
- Unicorn-22944.exe (PID: 8536)
- Unicorn-46872.exe (PID: 7624)
- Unicorn-6184.exe (PID: 7800)
- Unicorn-46000.exe (PID: 5228)
- Unicorn-33593.exe (PID: 8976)
- Unicorn-728.exe (PID: 8964)
- Unicorn-58391.exe (PID: 1040)
- Unicorn-61079.exe (PID: 8168)
- Unicorn-22278.exe (PID: 8700)
- Unicorn-37433.exe (PID: 8512)
- Unicorn-2264.exe (PID: 8348)
- Unicorn-28601.exe (PID: 8736)
- Unicorn-38777.exe (PID: 8592)
- Unicorn-19177.exe (PID: 8424)
- Unicorn-46902.exe (PID: 6300)
- Unicorn-33577.exe (PID: 736)
- Unicorn-2328.exe (PID: 1072)
- Unicorn-56192.exe (PID: 8268)
- Unicorn-50358.exe (PID: 8280)
- Unicorn-45720.exe (PID: 7944)
- Unicorn-38512.exe (PID: 8600)
- Unicorn-11292.exe (PID: 7644)
- Unicorn-58128.exe (PID: 8680)
- Unicorn-63945.exe (PID: 4464)
- Unicorn-3608.exe (PID: 8384)
- Unicorn-29929.exe (PID: 8104)
- Unicorn-29462.exe (PID: 8332)
- Unicorn-44537.exe (PID: 8324)
- Unicorn-6031.exe (PID: 3140)
- Unicorn-3992.exe (PID: 8376)
- Unicorn-59913.exe (PID: 8256)
- Unicorn-22057.exe (PID: 8620)
- Unicorn-26182.exe (PID: 7632)
- Unicorn-13885.exe (PID: 9012)
- Unicorn-25897.exe (PID: 6488)
- Unicorn-25929.exe (PID: 9512)
- Unicorn-31657.exe (PID: 5436)
- Unicorn-27830.exe (PID: 812)
- Unicorn-58793.exe (PID: 9528)
- Unicorn-51216.exe (PID: 9104)
- Unicorn-58601.exe (PID: 9616)
- Unicorn-58999.exe (PID: 616)
- Unicorn-2799.exe (PID: 9944)
- Unicorn-56333.exe (PID: 9972)
- Unicorn-5736.exe (PID: 9136)
- Unicorn-22400.exe (PID: 9952)
- Unicorn-4687.exe (PID: 7560)
- Unicorn-19590.exe (PID: 9200)
- Unicorn-19103.exe (PID: 8608)
- Unicorn-48713.exe (PID: 7288)
- Unicorn-48808.exe (PID: 8460)
- Unicorn-61639.exe (PID: 7940)
- Unicorn-32783.exe (PID: 9812)
- Unicorn-17193.exe (PID: 10328)
- Unicorn-60137.exe (PID: 9696)
- Unicorn-5103.exe (PID: 10096)
- Unicorn-37120.exe (PID: 11232)
- Unicorn-31656.exe (PID: 11224)
- Unicorn-1951.exe (PID: 11156)
- Unicorn-56487.exe (PID: 8856)
- Unicorn-26533.exe (PID: 8480)
- Unicorn-31225.exe (PID: 10264)
- Unicorn-42457.exe (PID: 9520)
- Unicorn-22895.exe (PID: 10664)
- Unicorn-17078.exe (PID: 8548)
- Unicorn-31527.exe (PID: 11000)
- Unicorn-55165.exe (PID: 5084)
- Unicorn-56228.exe (PID: 9636)
- Unicorn-36617.exe (PID: 11052)
- Unicorn-62735.exe (PID: 11760)
- Unicorn-2664.exe (PID: 9272)
- Unicorn-11761.exe (PID: 9752)
- Unicorn-3119.exe (PID: 11840)
- Unicorn-3343.exe (PID: 8556)
- Unicorn-31481.exe (PID: 8908)
- Unicorn-45721.exe (PID: 9740)
- Unicorn-36631.exe (PID: 10640)
- Unicorn-45423.exe (PID: 9156)
- Unicorn-17769.exe (PID: 10840)
- Unicorn-28928.exe (PID: 9732)
- Unicorn-64552.exe (PID: 12480)
- Unicorn-20889.exe (PID: 12496)
- Unicorn-31008.exe (PID: 5360)
- Unicorn-35199.exe (PID: 11416)
- Unicorn-18584.exe (PID: 10552)
- Unicorn-26262.exe (PID: 11708)
- Unicorn-62112.exe (PID: 11696)
- Unicorn-43337.exe (PID: 10900)
- Unicorn-5334.exe (PID: 5452)
- Unicorn-14920.exe (PID: 12432)
- Unicorn-16798.exe (PID: 11752)
- Unicorn-53295.exe (PID: 12212)
- Unicorn-36732.exe (PID: 10008)
- Unicorn-16854.exe (PID: 11880)
- Unicorn-46632.exe (PID: 10392)
- Unicorn-55657.exe (PID: 11744)
- Unicorn-64592.exe (PID: 10444)
- Unicorn-54454.exe (PID: 12152)
- Unicorn-35065.exe (PID: 10416)
- Unicorn-51360.exe (PID: 11784)
- Unicorn-33785.exe (PID: 8364)
- Unicorn-36631.exe (PID: 10672)
- Unicorn-43369.exe (PID: 3968)
- Unicorn-13624.exe (PID: 9704)
- Unicorn-47871.exe (PID: 13516)
- Unicorn-47871.exe (PID: 13532)
- Unicorn-47871.exe (PID: 13524)
- Unicorn-36732.exe (PID: 10028)
- Unicorn-34303.exe (PID: 9308)
- Unicorn-48448.exe (PID: 10400)
- Unicorn-63865.exe (PID: 14572)
- Unicorn-64441.exe (PID: 14552)
- Unicorn-64825.exe (PID: 14524)
- Unicorn-16143.exe (PID: 12460)
- Unicorn-64672.exe (PID: 9264)
- Unicorn-10246.exe (PID: 13284)
- Unicorn-26664.exe (PID: 11728)
- Unicorn-16207.exe (PID: 12692)
- Unicorn-56103.exe (PID: 8892)
- Unicorn-64352.exe (PID: 13296)
- Unicorn-50359.exe (PID: 10612)
- Unicorn-7160.exe (PID: 13404)
- Unicorn-32735.exe (PID: 12552)
- Unicorn-56985.exe (PID: 10512)
- Unicorn-8120.exe (PID: 13376)
- Unicorn-33209.exe (PID: 8992)
- Unicorn-22895.exe (PID: 10688)
- Unicorn-19839.exe (PID: 11864)
- Unicorn-53145.exe (PID: 11060)
- Unicorn-20681.exe (PID: 12248)
- Unicorn-16111.exe (PID: 13276)
- Unicorn-61606.exe (PID: 13420)
- Unicorn-36751.exe (PID: 11808)
- Unicorn-34505.exe (PID: 10956)
- Unicorn-54185.exe (PID: 9864)
- Unicorn-19918.exe (PID: 8716)
- Unicorn-16617.exe (PID: 10384)
- Unicorn-33609.exe (PID: 7408)
- Unicorn-38425.exe (PID: 9852)
- Unicorn-1000.exe (PID: 13256)
- Unicorn-22304.exe (PID: 16020)
- Unicorn-40543.exe (PID: 16012)
- Unicorn-39289.exe (PID: 15980)
- Unicorn-36732.exe (PID: 9988)
- Unicorn-46217.exe (PID: 4220)
- Unicorn-53593.exe (PID: 9316)
- Unicorn-39833.exe (PID: 14108)
- Unicorn-33929.exe (PID: 10992)
- Unicorn-59080.exe (PID: 13236)
- Unicorn-5560.exe (PID: 9844)
- Unicorn-50663.exe (PID: 10504)
- Unicorn-23871.exe (PID: 11936)
- Unicorn-19279.exe (PID: 12664)
- Unicorn-22857.exe (PID: 9924)
- Unicorn-2406.exe (PID: 16136)
- Unicorn-33705.exe (PID: 4208)
- Unicorn-45536.exe (PID: 15032)
- Unicorn-60928.exe (PID: 15672)
- Unicorn-33574.exe (PID: 11872)
- Unicorn-46503.exe (PID: 16044)
- Unicorn-59833.exe (PID: 15152)
Executes application which crashes
- Unicorn-28681.exe (PID: 13832)
INFO
The sample compiled with chinese language support
- 1 (676).exe (PID: 7348)
Reads the computer name
- Unicorn-34198.exe (PID: 7524)
- 1 (676).exe (PID: 7348)
- Unicorn-11644.exe (PID: 8016)
- Unicorn-64182.exe (PID: 8008)
- Unicorn-50153.exe (PID: 7192)
- Unicorn-57231.exe (PID: 4776)
- Unicorn-30687.exe (PID: 536)
- Unicorn-34025.exe (PID: 5588)
- Unicorn-44175.exe (PID: 3176)
- Unicorn-5429.exe (PID: 2284)
- Unicorn-36713.exe (PID: 6048)
- Unicorn-57526.exe (PID: 6808)
- Unicorn-58280.exe (PID: 5596)
- Unicorn-63391.exe (PID: 7256)
- Unicorn-36006.exe (PID: 7320)
- Unicorn-13775.exe (PID: 7340)
- Unicorn-65353.exe (PID: 7020)
- Unicorn-49593.exe (PID: 5968)
- Unicorn-45488.exe (PID: 6700)
- Unicorn-51840.exe (PID: 4756)
- Unicorn-13574.exe (PID: 5332)
- Unicorn-49832.exe (PID: 6184)
- Unicorn-6168.exe (PID: 6816)
- Unicorn-18281.exe (PID: 5008)
- Unicorn-26550.exe (PID: 4428)
- Unicorn-38576.exe (PID: 5344)
- Unicorn-63376.exe (PID: 3240)
- Unicorn-600.exe (PID: 3100)
- Unicorn-1176.exe (PID: 1324)
- Unicorn-51264.exe (PID: 4696)
- Unicorn-35769.exe (PID: 2148)
- Unicorn-2328.exe (PID: 1072)
- Unicorn-26894.exe (PID: 1180)
- Unicorn-64720.exe (PID: 672)
- Unicorn-36537.exe (PID: 5868)
- Unicorn-61855.exe (PID: 7372)
- Unicorn-60199.exe (PID: 4608)
- Unicorn-3864.exe (PID: 5972)
- Unicorn-4248.exe (PID: 7152)
- Unicorn-30982.exe (PID: 5256)
- Unicorn-32536.exe (PID: 3304)
- Unicorn-5539.exe (PID: 6564)
- Unicorn-57341.exe (PID: 6132)
- Unicorn-59609.exe (PID: 7148)
- Unicorn-50679.exe (PID: 2852)
- Unicorn-21784.exe (PID: 664)
- Unicorn-3407.exe (PID: 5280)
- Unicorn-56272.exe (PID: 2096)
- Unicorn-9671.exe (PID: 7696)
- Unicorn-20409.exe (PID: 7952)
- Unicorn-10911.exe (PID: 7688)
- Unicorn-21369.exe (PID: 8000)
- Unicorn-8104.exe (PID: 7712)
- Unicorn-58408.exe (PID: 4164)
- Unicorn-29654.exe (PID: 5776)
- Unicorn-52278.exe (PID: 1764)
- Unicorn-46457.exe (PID: 6988)
- Unicorn-34751.exe (PID: 7992)
- Unicorn-14278.exe (PID: 2152)
- Unicorn-543.exe (PID: 7784)
- Unicorn-33023.exe (PID: 6028)
- Unicorn-13135.exe (PID: 8140)
- Unicorn-20025.exe (PID: 6476)
- Unicorn-2847.exe (PID: 8068)
- Unicorn-22905.exe (PID: 7788)
- Unicorn-12751.exe (PID: 6512)
- Unicorn-39817.exe (PID: 7868)
- Unicorn-32809.exe (PID: 7900)
- Unicorn-55860.exe (PID: 5384)
- Unicorn-28703.exe (PID: 2420)
- Unicorn-40009.exe (PID: 7848)
- Unicorn-48856.exe (PID: 7176)
- Unicorn-59072.exe (PID: 8132)
- Unicorn-49337.exe (PID: 7584)
- Unicorn-61639.exe (PID: 7940)
- Unicorn-10639.exe (PID: 8148)
- Unicorn-30313.exe (PID: 8188)
- Unicorn-14184.exe (PID: 8788)
- Unicorn-1096.exe (PID: 6080)
- Unicorn-13800.exe (PID: 8812)
- Unicorn-36591.exe (PID: 3896)
- Unicorn-19295.exe (PID: 8572)
- Unicorn-22470.exe (PID: 8724)
- Unicorn-44553.exe (PID: 8748)
- Unicorn-8024.exe (PID: 8172)
- Unicorn-46000.exe (PID: 5228)
- Unicorn-46872.exe (PID: 7624)
- Unicorn-22944.exe (PID: 8536)
- Unicorn-22278.exe (PID: 8700)
- Unicorn-33593.exe (PID: 8976)
- Unicorn-29462.exe (PID: 8340)
- Unicorn-6184.exe (PID: 7800)
- Unicorn-728.exe (PID: 8964)
- Unicorn-58391.exe (PID: 1040)
- Unicorn-63945.exe (PID: 4464)
- Unicorn-61079.exe (PID: 8168)
- Unicorn-2264.exe (PID: 8348)
- Unicorn-28601.exe (PID: 8736)
- Unicorn-3608.exe (PID: 8384)
- Unicorn-37433.exe (PID: 8512)
- Unicorn-19177.exe (PID: 8424)
- Unicorn-38777.exe (PID: 8592)
- Unicorn-31008.exe (PID: 5360)
- Unicorn-6031.exe (PID: 3140)
- Unicorn-33577.exe (PID: 736)
- Unicorn-46902.exe (PID: 6300)
- Unicorn-56192.exe (PID: 8268)
- Unicorn-50358.exe (PID: 8280)
- Unicorn-45720.exe (PID: 7944)
- Unicorn-38512.exe (PID: 8600)
- Unicorn-11292.exe (PID: 7644)
- Unicorn-31657.exe (PID: 5436)
- Unicorn-58128.exe (PID: 8680)
- Unicorn-29462.exe (PID: 8332)
- Unicorn-3992.exe (PID: 8376)
- Unicorn-59913.exe (PID: 8256)
- Unicorn-44537.exe (PID: 8324)
- Unicorn-29929.exe (PID: 8104)
- Unicorn-22057.exe (PID: 8620)
- Unicorn-26182.exe (PID: 7632)
- Unicorn-25929.exe (PID: 9512)
- Unicorn-13885.exe (PID: 9012)
- Unicorn-25897.exe (PID: 6488)
- Unicorn-27830.exe (PID: 812)
- Unicorn-58999.exe (PID: 616)
- Unicorn-2799.exe (PID: 9944)
- Unicorn-51216.exe (PID: 9104)
- Unicorn-58601.exe (PID: 9616)
- Unicorn-58793.exe (PID: 9528)
- Unicorn-22400.exe (PID: 9952)
- Unicorn-56333.exe (PID: 9972)
- Unicorn-5736.exe (PID: 9136)
- Unicorn-19590.exe (PID: 9200)
- Unicorn-19103.exe (PID: 8608)
- Unicorn-4687.exe (PID: 7560)
- Unicorn-48808.exe (PID: 8460)
- Unicorn-32783.exe (PID: 9812)
- Unicorn-17193.exe (PID: 10328)
- Unicorn-48713.exe (PID: 7288)
- Unicorn-60137.exe (PID: 9696)
- Unicorn-56103.exe (PID: 8892)
- Unicorn-56457.exe (PID: 668)
- Unicorn-1951.exe (PID: 11156)
- Unicorn-5103.exe (PID: 10096)
- Unicorn-31225.exe (PID: 10264)
- Unicorn-31656.exe (PID: 11224)
- Unicorn-37120.exe (PID: 11232)
- Unicorn-11761.exe (PID: 9752)
- Unicorn-56487.exe (PID: 8856)
- Unicorn-26533.exe (PID: 8480)
- Unicorn-3343.exe (PID: 8556)
- Unicorn-31481.exe (PID: 8908)
- Unicorn-17078.exe (PID: 8548)
- Unicorn-22895.exe (PID: 10664)
- Unicorn-55165.exe (PID: 5084)
- Unicorn-35065.exe (PID: 10416)
- Unicorn-31527.exe (PID: 11000)
- Unicorn-56228.exe (PID: 9636)
- Unicorn-45721.exe (PID: 9740)
- Unicorn-36617.exe (PID: 11052)
- Unicorn-17769.exe (PID: 10840)
- Unicorn-62112.exe (PID: 11696)
- Unicorn-2664.exe (PID: 9272)
- Unicorn-42457.exe (PID: 9520)
- Unicorn-62735.exe (PID: 11760)
- Unicorn-3119.exe (PID: 11840)
- Unicorn-45423.exe (PID: 9156)
- Unicorn-33209.exe (PID: 8992)
- Unicorn-36631.exe (PID: 10640)
- Unicorn-28928.exe (PID: 9732)
- Unicorn-64552.exe (PID: 12480)
- Unicorn-20889.exe (PID: 12496)
- Unicorn-32735.exe (PID: 12552)
- Unicorn-26262.exe (PID: 11708)
- Unicorn-18584.exe (PID: 10552)
- Unicorn-35199.exe (PID: 11416)
- Unicorn-43337.exe (PID: 10900)
- Unicorn-16798.exe (PID: 11752)
- Unicorn-5334.exe (PID: 5452)
- Unicorn-14920.exe (PID: 12432)
- Unicorn-48448.exe (PID: 10400)
- Unicorn-32736.exe (PID: 7576)
- Unicorn-36732.exe (PID: 10008)
- Unicorn-50468.exe (PID: 9980)
- Unicorn-53295.exe (PID: 12212)
- Unicorn-16854.exe (PID: 11880)
- Unicorn-46632.exe (PID: 10392)
- Unicorn-13624.exe (PID: 9704)
- Unicorn-55657.exe (PID: 11744)
- Unicorn-33609.exe (PID: 7408)
- Unicorn-64592.exe (PID: 10444)
- Unicorn-54454.exe (PID: 12152)
- Unicorn-51360.exe (PID: 11784)
- Unicorn-33785.exe (PID: 8364)
- Unicorn-43369.exe (PID: 3968)
- Unicorn-36631.exe (PID: 10672)
- Unicorn-55392.exe (PID: 11736)
- Unicorn-47871.exe (PID: 13532)
- Unicorn-47871.exe (PID: 13524)
- Unicorn-47871.exe (PID: 13516)
- Unicorn-36751.exe (PID: 11808)
- Unicorn-53593.exe (PID: 9316)
- Unicorn-36732.exe (PID: 10028)
- Unicorn-38425.exe (PID: 9852)
- Unicorn-19918.exe (PID: 8716)
- Unicorn-34303.exe (PID: 9308)
- Unicorn-16617.exe (PID: 10384)
- Unicorn-64825.exe (PID: 14524)
- Unicorn-1000.exe (PID: 13256)
- Unicorn-22857.exe (PID: 9924)
- Unicorn-63865.exe (PID: 14572)
- Unicorn-64441.exe (PID: 14552)
- Unicorn-64672.exe (PID: 9264)
- Unicorn-16143.exe (PID: 12460)
- Unicorn-30527.exe (PID: 13244)
- Unicorn-10246.exe (PID: 13284)
- Unicorn-26664.exe (PID: 11728)
- Unicorn-16207.exe (PID: 12692)
- Unicorn-19279.exe (PID: 12664)
- Unicorn-64352.exe (PID: 13296)
- Unicorn-23871.exe (PID: 11936)
- Unicorn-50359.exe (PID: 10612)
- Unicorn-7160.exe (PID: 13404)
- Unicorn-58404.exe (PID: 13104)
- Unicorn-8120.exe (PID: 13376)
- Unicorn-22895.exe (PID: 10688)
- Unicorn-39833.exe (PID: 14108)
- Unicorn-19839.exe (PID: 11864)
- Unicorn-20681.exe (PID: 12248)
- Unicorn-56985.exe (PID: 10512)
- Unicorn-53145.exe (PID: 11060)
- Unicorn-16111.exe (PID: 13276)
- Unicorn-33929.exe (PID: 10992)
- Unicorn-59080.exe (PID: 13236)
- Unicorn-50663.exe (PID: 10504)
- Unicorn-34505.exe (PID: 10956)
- Unicorn-61606.exe (PID: 13420)
- Unicorn-2062.exe (PID: 9680)
- Unicorn-54185.exe (PID: 9864)
- Unicorn-47871.exe (PID: 13508)
- Unicorn-39289.exe (PID: 15980)
- Unicorn-5560.exe (PID: 9844)
- Unicorn-22304.exe (PID: 16020)
- Unicorn-40543.exe (PID: 16012)
- Unicorn-36732.exe (PID: 9988)
- Unicorn-55718.exe (PID: 12072)
- Unicorn-46217.exe (PID: 4220)
- Unicorn-33574.exe (PID: 11872)
- Unicorn-2406.exe (PID: 16136)
- Unicorn-33705.exe (PID: 4208)
- Unicorn-45536.exe (PID: 15032)
- Unicorn-60928.exe (PID: 15672)
- Unicorn-46503.exe (PID: 16044)
- Unicorn-59833.exe (PID: 15152)
- Unicorn-32457.exe (PID: 8832)
- Unicorn-21544.exe (PID: 9344)
- Unicorn-22895.exe (PID: 10656)
- Unicorn-25465.exe (PID: 10628)
Checks supported languages
- Unicorn-34198.exe (PID: 7524)
- 1 (676).exe (PID: 7348)
- Unicorn-11644.exe (PID: 8016)
- Unicorn-64182.exe (PID: 8008)
- Unicorn-50153.exe (PID: 7192)
- Unicorn-57231.exe (PID: 4776)
- Unicorn-5429.exe (PID: 2284)
- Unicorn-30687.exe (PID: 536)
- Unicorn-34025.exe (PID: 5588)
- Unicorn-44175.exe (PID: 3176)
- Unicorn-63391.exe (PID: 7256)
- Unicorn-57526.exe (PID: 6808)
- Unicorn-58280.exe (PID: 5596)
- Unicorn-36006.exe (PID: 7320)
- Unicorn-13775.exe (PID: 7340)
- Unicorn-36713.exe (PID: 6048)
- Unicorn-45488.exe (PID: 6700)
- Unicorn-26550.exe (PID: 4428)
- Unicorn-38576.exe (PID: 5344)
- Unicorn-51840.exe (PID: 4756)
- Unicorn-49593.exe (PID: 5968)
- Unicorn-65353.exe (PID: 7020)
- Unicorn-18281.exe (PID: 5008)
- Unicorn-63376.exe (PID: 3240)
- Unicorn-1176.exe (PID: 1324)
- Unicorn-13574.exe (PID: 5332)
- Unicorn-6168.exe (PID: 6816)
- Unicorn-49832.exe (PID: 6184)
- Unicorn-600.exe (PID: 3100)
- Unicorn-60199.exe (PID: 4608)
- Unicorn-26894.exe (PID: 1180)
- Unicorn-35769.exe (PID: 2148)
- Unicorn-51264.exe (PID: 4696)
- Unicorn-64720.exe (PID: 672)
- Unicorn-2328.exe (PID: 1072)
- Unicorn-32536.exe (PID: 3304)
- Unicorn-30982.exe (PID: 5256)
- Unicorn-61855.exe (PID: 7372)
- Unicorn-36537.exe (PID: 5868)
- Unicorn-3864.exe (PID: 5972)
- Unicorn-59609.exe (PID: 7148)
- Unicorn-50679.exe (PID: 2852)
- Unicorn-57341.exe (PID: 6132)
- Unicorn-21784.exe (PID: 664)
- Unicorn-5539.exe (PID: 6564)
- Unicorn-56272.exe (PID: 2096)
- Unicorn-4248.exe (PID: 7152)
- Unicorn-3407.exe (PID: 5280)
- Unicorn-9671.exe (PID: 7696)
- Unicorn-543.exe (PID: 7784)
- Unicorn-20409.exe (PID: 7952)
- Unicorn-20025.exe (PID: 6476)
- Unicorn-33023.exe (PID: 6028)
- Unicorn-10911.exe (PID: 7688)
- Unicorn-14278.exe (PID: 2152)
- Unicorn-34751.exe (PID: 7992)
- Unicorn-21369.exe (PID: 8000)
- Unicorn-61639.exe (PID: 7940)
- Unicorn-40009.exe (PID: 7848)
- Unicorn-29654.exe (PID: 5776)
- Unicorn-8104.exe (PID: 7712)
- Unicorn-39817.exe (PID: 7868)
- Unicorn-52278.exe (PID: 1764)
- Unicorn-2847.exe (PID: 8068)
- Unicorn-58408.exe (PID: 4164)
- Unicorn-6184.exe (PID: 7800)
- Unicorn-10639.exe (PID: 8148)
- Unicorn-22905.exe (PID: 7788)
- Unicorn-48856.exe (PID: 7176)
- Unicorn-13135.exe (PID: 8140)
- Unicorn-59072.exe (PID: 8132)
- Unicorn-46457.exe (PID: 6988)
- Unicorn-55860.exe (PID: 5384)
- Unicorn-12751.exe (PID: 6512)
- Unicorn-28703.exe (PID: 2420)
- Unicorn-30313.exe (PID: 8188)
- Unicorn-31657.exe (PID: 5436)
- Unicorn-63945.exe (PID: 4464)
- Unicorn-27830.exe (PID: 812)
- Unicorn-31008.exe (PID: 5360)
- Unicorn-29929.exe (PID: 8104)
- Unicorn-1096.exe (PID: 6080)
- Unicorn-33577.exe (PID: 736)
- Unicorn-58391.exe (PID: 1040)
- Unicorn-49337.exe (PID: 7584)
- Unicorn-32736.exe (PID: 7576)
- Unicorn-11292.exe (PID: 7644)
- Unicorn-46872.exe (PID: 7624)
- Unicorn-26182.exe (PID: 7632)
- Unicorn-46000.exe (PID: 5228)
- Unicorn-32809.exe (PID: 7900)
- Unicorn-45720.exe (PID: 7944)
- Unicorn-61079.exe (PID: 8168)
- Unicorn-56457.exe (PID: 668)
- Unicorn-36591.exe (PID: 3896)
- Unicorn-25897.exe (PID: 6488)
- Unicorn-6031.exe (PID: 3140)
- Unicorn-46902.exe (PID: 6300)
- Unicorn-8024.exe (PID: 8172)
- Unicorn-4687.exe (PID: 7560)
- Unicorn-56192.exe (PID: 8268)
- Unicorn-50358.exe (PID: 8280)
- Unicorn-44537.exe (PID: 8324)
- Unicorn-59913.exe (PID: 8256)
- Unicorn-29462.exe (PID: 8340)
- Unicorn-33785.exe (PID: 8364)
- Unicorn-3992.exe (PID: 8376)
- Unicorn-14184.exe (PID: 8788)
- Unicorn-3608.exe (PID: 8384)
- Unicorn-29462.exe (PID: 8332)
- Unicorn-44553.exe (PID: 8748)
- Unicorn-26533.exe (PID: 8480)
- Unicorn-37433.exe (PID: 8512)
- Unicorn-19295.exe (PID: 8572)
- Unicorn-3343.exe (PID: 8556)
- Unicorn-17078.exe (PID: 8548)
- Unicorn-38777.exe (PID: 8592)
- Unicorn-50079.exe (PID: 8580)
- Unicorn-13800.exe (PID: 8812)
- Unicorn-48808.exe (PID: 8460)
- Unicorn-22278.exe (PID: 8700)
- Unicorn-2264.exe (PID: 8348)
- Unicorn-19918.exe (PID: 8716)
- Unicorn-22470.exe (PID: 8724)
- Unicorn-28601.exe (PID: 8736)
- Unicorn-38512.exe (PID: 8600)
- Unicorn-19103.exe (PID: 8608)
- Unicorn-22057.exe (PID: 8620)
- Unicorn-58128.exe (PID: 8680)
- Unicorn-22944.exe (PID: 8536)
- Unicorn-31481.exe (PID: 8908)
- Unicorn-728.exe (PID: 8964)
- Unicorn-33593.exe (PID: 8976)
- Unicorn-33209.exe (PID: 8992)
- Unicorn-19177.exe (PID: 8424)
- Unicorn-56487.exe (PID: 8856)
- Unicorn-45705.exe (PID: 8884)
- Unicorn-56103.exe (PID: 8892)
- Unicorn-5736.exe (PID: 9136)
- Unicorn-51216.exe (PID: 9104)
- Unicorn-45423.exe (PID: 9156)
- Unicorn-13885.exe (PID: 9012)
- Unicorn-58585.exe (PID: 9208)
- Unicorn-55165.exe (PID: 5084)
- Unicorn-19590.exe (PID: 9200)
- Unicorn-43401.exe (PID: 8316)
- Unicorn-62176.exe (PID: 2772)
- Unicorn-32457.exe (PID: 8832)
- Unicorn-58999.exe (PID: 616)
- Unicorn-33609.exe (PID: 7408)
- Unicorn-57543.exe (PID: 2192)
- Unicorn-30376.exe (PID: 9244)
- Unicorn-64672.exe (PID: 9264)
- Unicorn-12430.exe (PID: 9292)
- Unicorn-53593.exe (PID: 9316)
- Unicorn-34303.exe (PID: 9308)
- Unicorn-2664.exe (PID: 9272)
- Unicorn-50256.exe (PID: 9328)
- Unicorn-21544.exe (PID: 9344)
- Unicorn-25929.exe (PID: 9512)
- Unicorn-58793.exe (PID: 9528)
- Unicorn-42457.exe (PID: 9520)
- Unicorn-58601.exe (PID: 9616)
- Unicorn-56228.exe (PID: 9636)
- Unicorn-35424.exe (PID: 9624)
- Unicorn-42492.exe (PID: 9644)
- Unicorn-21662.exe (PID: 9672)
- Unicorn-2062.exe (PID: 9680)
- Unicorn-56333.exe (PID: 9972)
- Unicorn-2799.exe (PID: 9944)
- Unicorn-22400.exe (PID: 9952)
- Unicorn-60137.exe (PID: 9696)
- Unicorn-13624.exe (PID: 9704)
- Unicorn-53225.exe (PID: 9804)
- Unicorn-29001.exe (PID: 9716)
- Unicorn-29193.exe (PID: 9724)
- Unicorn-27465.exe (PID: 9660)
- Unicorn-3832.exe (PID: 9792)
- Unicorn-8855.exe (PID: 9768)
- Unicorn-11761.exe (PID: 9752)
- Unicorn-5560.exe (PID: 9844)
- Unicorn-46608.exe (PID: 9220)
- Unicorn-791.exe (PID: 9832)
- Unicorn-38425.exe (PID: 9852)
- Unicorn-54185.exe (PID: 9864)
- Unicorn-21129.exe (PID: 9872)
- Unicorn-28928.exe (PID: 9732)
- Unicorn-45721.exe (PID: 9740)
- Unicorn-53152.exe (PID: 9884)
- Unicorn-14456.exe (PID: 9916)
- Unicorn-22857.exe (PID: 9924)
- Unicorn-50468.exe (PID: 9980)
- Unicorn-36732.exe (PID: 9988)
- Unicorn-36732.exe (PID: 10008)
- Unicorn-36732.exe (PID: 9996)
- Unicorn-34406.exe (PID: 10136)
- Unicorn-36732.exe (PID: 10040)
- Unicorn-47668.exe (PID: 10052)
- Unicorn-5103.exe (PID: 10096)
- Unicorn-4527.exe (PID: 10124)
- Unicorn-40872.exe (PID: 10232)
- Unicorn-19977.exe (PID: 9820)
- Unicorn-46217.exe (PID: 4220)
- Unicorn-42649.exe (PID: 9536)
- Unicorn-46632.exe (PID: 10392)
- Unicorn-22895.exe (PID: 10656)
- Unicorn-31225.exe (PID: 10264)
- Unicorn-32783.exe (PID: 9812)
- Unicorn-22895.exe (PID: 10648)
- Unicorn-61136.exe (PID: 10252)
- Unicorn-34105.exe (PID: 10316)
- Unicorn-27887.exe (PID: 10284)
- Unicorn-17193.exe (PID: 10328)
- Unicorn-29807.exe (PID: 10364)
- Unicorn-16617.exe (PID: 10384)
- Unicorn-48713.exe (PID: 7288)
- Unicorn-58637.exe (PID: 3956)
- Unicorn-22895.exe (PID: 10680)
- Unicorn-22895.exe (PID: 10688)
- Unicorn-36631.exe (PID: 10672)
- Unicorn-22895.exe (PID: 10664)
- Unicorn-50359.exe (PID: 10612)
- Unicorn-25465.exe (PID: 10628)
- Unicorn-42496.exe (PID: 10604)
- Unicorn-33830.exe (PID: 10584)
- Unicorn-959.exe (PID: 10568)
- Unicorn-64089.exe (PID: 10272)
- Unicorn-17295.exe (PID: 10620)
- Unicorn-18584.exe (PID: 10552)
- Unicorn-33942.exe (PID: 10540)
- Unicorn-7784.exe (PID: 10524)
- Unicorn-1951.exe (PID: 11156)
- Unicorn-56985.exe (PID: 10512)
- Unicorn-48448.exe (PID: 10400)
- Unicorn-36732.exe (PID: 10028)
- Unicorn-53648.exe (PID: 10492)
- Unicorn-8916.exe (PID: 10436)
- Unicorn-64592.exe (PID: 10444)
- Unicorn-36732.exe (PID: 10020)
- Unicorn-35065.exe (PID: 10416)
- Unicorn-9631.exe (PID: 10560)
- Unicorn-50663.exe (PID: 10504)
- Unicorn-31656.exe (PID: 11224)
- Unicorn-37120.exe (PID: 11232)
- Unicorn-43337.exe (PID: 10900)
- Unicorn-2216.exe (PID: 10940)
- Unicorn-34121.exe (PID: 10976)
- Unicorn-40649.exe (PID: 10484)
- Unicorn-34505.exe (PID: 10956)
- Unicorn-31527.exe (PID: 11000)
- Unicorn-34697.exe (PID: 10964)
- Unicorn-33929.exe (PID: 10992)
- Unicorn-36617.exe (PID: 11052)
- Unicorn-53145.exe (PID: 11060)
- Unicorn-3944.exe (PID: 11068)
- Unicorn-20665.exe (PID: 11248)
- Unicorn-17769.exe (PID: 10840)
- Unicorn-30783.exe (PID: 10984)
- Unicorn-36631.exe (PID: 10640)
- Unicorn-35199.exe (PID: 11416)
- Unicorn-56055.exe (PID: 11676)
- Unicorn-23976.exe (PID: 11688)
- Unicorn-62112.exe (PID: 11696)
- Unicorn-55392.exe (PID: 11736)
- Unicorn-55657.exe (PID: 11744)
- Unicorn-62735.exe (PID: 11760)
- Unicorn-26262.exe (PID: 11708)
- Unicorn-26664.exe (PID: 11728)
- Unicorn-62295.exe (PID: 11792)
- Unicorn-36751.exe (PID: 11816)
- Unicorn-3119.exe (PID: 11840)
- Unicorn-22720.exe (PID: 11848)
- Unicorn-29814.exe (PID: 11768)
- Unicorn-49527.exe (PID: 11776)
- Unicorn-51360.exe (PID: 11784)
- Unicorn-31049.exe (PID: 12008)
- Unicorn-56160.exe (PID: 11968)
- Unicorn-49881.exe (PID: 11984)
- Unicorn-19839.exe (PID: 11864)
- Unicorn-16854.exe (PID: 11880)
- Unicorn-33574.exe (PID: 11872)
- Unicorn-36071.exe (PID: 11888)
- Unicorn-23871.exe (PID: 11936)
- Unicorn-36363.exe (PID: 12000)
- Unicorn-31183.exe (PID: 12048)
- Unicorn-50473.exe (PID: 12056)
- Unicorn-55718.exe (PID: 12064)
- Unicorn-62791.exe (PID: 12112)
- Unicorn-57254.exe (PID: 12136)
- Unicorn-55718.exe (PID: 12072)
- Unicorn-64552.exe (PID: 12480)
- Unicorn-20889.exe (PID: 12496)
- Unicorn-37918.exe (PID: 12128)
- Unicorn-32735.exe (PID: 12552)
- Unicorn-52201.exe (PID: 12172)
- Unicorn-7093.exe (PID: 12204)
- Unicorn-19337.exe (PID: 12144)
- Unicorn-54454.exe (PID: 12152)
- Unicorn-63119.exe (PID: 12160)
- Unicorn-53353.exe (PID: 3124)
- Unicorn-43369.exe (PID: 3968)
- Unicorn-36751.exe (PID: 11808)
- Unicorn-5334.exe (PID: 5452)
- Unicorn-11464.exe (PID: 5740)
- Unicorn-53295.exe (PID: 12212)
- Unicorn-7093.exe (PID: 12220)
- Unicorn-20681.exe (PID: 12248)
- Unicorn-55657.exe (PID: 12272)
- Unicorn-16798.exe (PID: 11752)
- Unicorn-48662.exe (PID: 12440)
- Unicorn-27609.exe (PID: 12304)
- Unicorn-14014.exe (PID: 12312)
- Unicorn-14920.exe (PID: 12432)
- Unicorn-63545.exe (PID: 12452)
- Unicorn-59080.exe (PID: 13236)
- Unicorn-1000.exe (PID: 13256)
- Unicorn-30527.exe (PID: 13244)
- Unicorn-33097.exe (PID: 13264)
- Unicorn-47871.exe (PID: 13524)
- Unicorn-47871.exe (PID: 13532)
- Unicorn-47871.exe (PID: 13516)
- Unicorn-10246.exe (PID: 13284)
- Unicorn-64352.exe (PID: 13296)
- Unicorn-34249.exe (PID: 2656)
- Unicorn-16111.exe (PID: 13276)
- Unicorn-7160.exe (PID: 13404)
- Unicorn-61606.exe (PID: 13420)
- Unicorn-61606.exe (PID: 13436)
- Unicorn-61606.exe (PID: 13428)
- Unicorn-1934.exe (PID: 13452)
- Unicorn-8120.exe (PID: 13376)
- Unicorn-48509.exe (PID: 13320)
- Unicorn-1898.exe (PID: 13384)
- Unicorn-61606.exe (PID: 13412)
- Unicorn-47871.exe (PID: 13540)
- Unicorn-47871.exe (PID: 13500)
- Unicorn-47871.exe (PID: 13460)
- Unicorn-2950.exe (PID: 13576)
- Unicorn-20054.exe (PID: 13476)
- Unicorn-47871.exe (PID: 13468)
- Unicorn-47871.exe (PID: 13492)
- Unicorn-38415.exe (PID: 13592)
- Unicorn-55904.exe (PID: 13736)
- Unicorn-55904.exe (PID: 13728)
- Unicorn-55904.exe (PID: 13744)
- Unicorn-64825.exe (PID: 14524)
- Unicorn-55904.exe (PID: 13752)
- Unicorn-8815.exe (PID: 13568)
- Unicorn-52151.exe (PID: 13584)
- Unicorn-54948.exe (PID: 13688)
- Unicorn-64441.exe (PID: 14552)
- Unicorn-50304.exe (PID: 13760)
- Unicorn-63865.exe (PID: 14572)
- Unicorn-4102.exe (PID: 13768)
- Unicorn-9967.exe (PID: 13776)
- Unicorn-65055.exe (PID: 13784)
- Unicorn-27526.exe (PID: 12648)
- Unicorn-57270.exe (PID: 12640)
- Unicorn-17545.exe (PID: 13904)
- Unicorn-19465.exe (PID: 13944)
- Unicorn-36185.exe (PID: 13912)
- Unicorn-14264.exe (PID: 13084)
- Unicorn-61592.exe (PID: 13896)
- Unicorn-255.exe (PID: 12632)
- Unicorn-33881.exe (PID: 13888)
- Unicorn-13990.exe (PID: 12592)
- Unicorn-16591.exe (PID: 12624)
- Unicorn-255.exe (PID: 12608)
- Unicorn-255.exe (PID: 12600)
- Unicorn-28297.exe (PID: 13852)
- Unicorn-11190.exe (PID: 12616)
- Unicorn-63.exe (PID: 12572)
- Unicorn-28681.exe (PID: 13832)
- Unicorn-54057.exe (PID: 13960)
- Unicorn-19279.exe (PID: 12664)
- Unicorn-16207.exe (PID: 12684)
- Unicorn-16143.exe (PID: 12460)
- Unicorn-23336.exe (PID: 13816)
- Unicorn-50503.exe (PID: 12760)
- Unicorn-6856.exe (PID: 12800)
- Unicorn-50416.exe (PID: 12732)
- Unicorn-35511.exe (PID: 12888)
- Unicorn-22425.exe (PID: 12712)
- Unicorn-16870.exe (PID: 12836)
- Unicorn-21775.exe (PID: 12880)
- Unicorn-16207.exe (PID: 12692)
- Unicorn-18127.exe (PID: 12724)
- Unicorn-41376.exe (PID: 12924)
- Unicorn-21775.exe (PID: 12896)
- Unicorn-21775.exe (PID: 12904)
- Unicorn-53600.exe (PID: 13332)
- Unicorn-37264.exe (PID: 14064)
- Unicorn-41376.exe (PID: 12932)
- Unicorn-32710.exe (PID: 12948)
- Unicorn-35511.exe (PID: 12912)
- Unicorn-2838.exe (PID: 12956)
- Unicorn-54640.exe (PID: 12940)
- Unicorn-54640.exe (PID: 12964)
- Unicorn-58404.exe (PID: 13104)
- Unicorn-32137.exe (PID: 13204)
- Unicorn-48473.exe (PID: 13184)
- Unicorn-7366.exe (PID: 13172)
- Unicorn-39833.exe (PID: 14108)
- Unicorn-6584.exe (PID: 14120)
- Unicorn-58806.exe (PID: 13444)
- Unicorn-65031.exe (PID: 14160)
- Unicorn-2287.exe (PID: 14172)
- Unicorn-50086.exe (PID: 14208)
- Unicorn-47871.exe (PID: 13508)
- Unicorn-47871.exe (PID: 13484)
- Unicorn-36350.exe (PID: 14216)
- Unicorn-28697.exe (PID: 14224)
- Unicorn-38519.exe (PID: 14260)
- Unicorn-21990.exe (PID: 14248)
- Unicorn-40543.exe (PID: 14284)
- Unicorn-22304.exe (PID: 16020)
- Unicorn-40543.exe (PID: 16012)
- Unicorn-54279.exe (PID: 14292)
- Unicorn-60144.exe (PID: 14300)
- Unicorn-40543.exe (PID: 14308)
- Unicorn-21606.exe (PID: 14332)
- Unicorn-39289.exe (PID: 15980)
- Unicorn-44649.exe (PID: 14276)
- Unicorn-51479.exe (PID: 14324)
- Unicorn-46518.exe (PID: 7356)
- Unicorn-37886.exe (PID: 14372)
- Unicorn-26703.exe (PID: 14396)
- Unicorn-56967.exe (PID: 7492)
- Unicorn-36863.exe (PID: 14448)
- Unicorn-26703.exe (PID: 14424)
- Unicorn-40439.exe (PID: 14388)
- Unicorn-38169.exe (PID: 14464)
- Unicorn-52009.exe (PID: 14316)
- Unicorn-21103.exe (PID: 14456)
- Unicorn-62064.exe (PID: 14488)
- Unicorn-56391.exe (PID: 14496)
- Unicorn-20534.exe (PID: 14504)
- Unicorn-29200.exe (PID: 14512)
- Unicorn-9246.exe (PID: 14584)
- Unicorn-62256.exe (PID: 14480)
- Unicorn-37638.exe (PID: 14472)
- Unicorn-47337.exe (PID: 14636)
- Unicorn-581.exe (PID: 14596)
- Unicorn-9511.exe (PID: 14612)
- Unicorn-33689.exe (PID: 14648)
- Unicorn-54384.exe (PID: 14716)
- Unicorn-39081.exe (PID: 14756)
- Unicorn-35359.exe (PID: 14728)
- Unicorn-45967.exe (PID: 14744)
- Unicorn-45536.exe (PID: 15032)
- Unicorn-2966.exe (PID: 15004)
- Unicorn-34595.exe (PID: 14944)
- Unicorn-41385.exe (PID: 15024)
- Unicorn-16591.exe (PID: 12656)
- Unicorn-43305.exe (PID: 15144)
- Unicorn-59833.exe (PID: 15152)
- Unicorn-6960.exe (PID: 15188)
- Unicorn-4638.exe (PID: 15180)
- Unicorn-12774.exe (PID: 15420)
- Unicorn-62376.exe (PID: 15444)
- Unicorn-53591.exe (PID: 14848)
- Unicorn-32729.exe (PID: 14764)
- Unicorn-20559.exe (PID: 14888)
- Unicorn-36319.exe (PID: 14900)
- Unicorn-56704.exe (PID: 15728)
- Unicorn-5199.exe (PID: 16160)
- Unicorn-40439.exe (PID: 14404)
- Unicorn-55848.exe (PID: 15656)
- Unicorn-2406.exe (PID: 16136)
- Unicorn-60928.exe (PID: 15672)
- Unicorn-18822.exe (PID: 15700)
- Unicorn-61961.exe (PID: 15756)
- Unicorn-53056.exe (PID: 15956)
- Unicorn-35199.exe (PID: 11408)
- Unicorn-54954.exe (PID: 16416)
- Unicorn-46585.exe (PID: 15852)
- Unicorn-22185.exe (PID: 15896)
- Unicorn-13439.exe (PID: 15052)
- Unicorn-59833.exe (PID: 15156)
- Unicorn-65228.exe (PID: 16556)
- Unicorn-46503.exe (PID: 16044)
- Unicorn-46646.exe (PID: 16088)
- Unicorn-7871.exe (PID: 16060)
- Unicorn-6619.exe (PID: 16672)
- Unicorn-63619.exe (PID: 16424)
- Unicorn-45052.exe (PID: 16336)
- Unicorn-45820.exe (PID: 16272)
- Unicorn-37678.exe (PID: 15372)
- Unicorn-33705.exe (PID: 4208)
- Unicorn-50236.exe (PID: 16608)
- Unicorn-18271.exe (PID: 15912)
- Unicorn-42848.exe (PID: 15212)
- Unicorn-36407.exe (PID: 15248)
- Unicorn-25256.exe (PID: 15452)
- Unicorn-38272.exe (PID: 11376)
- Unicorn-21606.exe (PID: 16052)
- Unicorn-46304.exe (PID: 14416)
- Unicorn-33960.exe (PID: 11352)
- Unicorn-35625.exe (PID: 15384)
- Unicorn-26495.exe (PID: 15364)
- Unicorn-13647.exe (PID: 7824)
- Unicorn-42848.exe (PID: 15220)
- Unicorn-13266.exe (PID: 16244)
- Unicorn-18671.exe (PID: 11384)
- Unicorn-15833.exe (PID: 15304)
- Unicorn-36911.exe (PID: 16192)
- Unicorn-21017.exe (PID: 15484)
- Unicorn-3455.exe (PID: 15528)
- Unicorn-37353.exe (PID: 15496)
- Unicorn-63403.exe (PID: 16544)
- Unicorn-35007.exe (PID: 11368)
- Unicorn-13972.exe (PID: 16628)
- Unicorn-21033.exe (PID: 15940)
- Unicorn-3988.exe (PID: 16644)
- Unicorn-33248.exe (PID: 7832)
- Unicorn-47782.exe (PID: 15240)
- Unicorn-20351.exe (PID: 14080)
- Unicorn-30636.exe (PID: 16448)
- Unicorn-17564.exe (PID: 16616)
- Unicorn-21030.exe (PID: 15172)
- Unicorn-48316.exe (PID: 16588)
- Unicorn-56512.exe (PID: 16208)
- Unicorn-64076.exe (PID: 16392)
- Unicorn-28713.exe (PID: 15772)
- Unicorn-3988.exe (PID: 16656)
- Unicorn-48935.exe (PID: 11392)
- Unicorn-39097.exe (PID: 16028)
- Unicorn-29767.exe (PID: 15312)
- Unicorn-50647.exe (PID: 16200)
- Unicorn-22377.exe (PID: 15904)
- Unicorn-62848.exe (PID: 2596)
- Unicorn-13647.exe (PID: 1616)
- Unicorn-36632.exe (PID: 16104)
- Unicorn-58505.exe (PID: 15580)
- Unicorn-36407.exe (PID: 15232)
- Unicorn-44825.exe (PID: 13864)
- Unicorn-51727.exe (PID: 17196)
- Unicorn-646.exe (PID: 14092)
- Unicorn-56009.exe (PID: 17188)
- Unicorn-8536.exe (PID: 16128)
- Unicorn-57248.exe (PID: 4056)
- Unicorn-45241.exe (PID: 15792)
- Unicorn-22498.exe (PID: 7204)
- Unicorn-22171.exe (PID: 7232)
- Unicorn-14107.exe (PID: 17652)
- Unicorn-38965.exe (PID: 17416)
- Unicorn-5970.exe (PID: 17444)
- Unicorn-38538.exe (PID: 17452)
- Unicorn-12601.exe (PID: 17676)
- Unicorn-18924.exe (PID: 17688)
- Unicorn-64298.exe (PID: 17872)
- Unicorn-11435.exe (PID: 17896)
- Unicorn-20489.exe (PID: 17980)
- Unicorn-40443.exe (PID: 18032)
- Unicorn-62172.exe (PID: 17996)
- Unicorn-64570.exe (PID: 17356)
- Unicorn-36873.exe (PID: 11424)
- Unicorn-43031.exe (PID: 4304)
- Unicorn-11538.exe (PID: 17564)
- Unicorn-57621.exe (PID: 17904)
- Unicorn-8228.exe (PID: 17888)
- Unicorn-37564.exe (PID: 17860)
- Unicorn-23205.exe (PID: 17388)
- Unicorn-21228.exe (PID: 17880)
- Unicorn-49362.exe (PID: 300)
- Unicorn-2011.exe (PID: 17696)
- Unicorn-19705.exe (PID: 17436)
- Unicorn-43650.exe (PID: 18044)
- Unicorn-11995.exe (PID: 17464)
Create files in a temporary directory
- Unicorn-11644.exe (PID: 8016)
- 1 (676).exe (PID: 7348)
- Unicorn-34198.exe (PID: 7524)
- Unicorn-64182.exe (PID: 8008)
- Unicorn-50153.exe (PID: 7192)
- Unicorn-57231.exe (PID: 4776)
- Unicorn-30687.exe (PID: 536)
- Unicorn-44175.exe (PID: 3176)
- Unicorn-34025.exe (PID: 5588)
- Unicorn-5429.exe (PID: 2284)
- Unicorn-36713.exe (PID: 6048)
- Unicorn-63391.exe (PID: 7256)
- Unicorn-58280.exe (PID: 5596)
- Unicorn-36006.exe (PID: 7320)
- Unicorn-65353.exe (PID: 7020)
- Unicorn-45488.exe (PID: 6700)
- Unicorn-26550.exe (PID: 4428)
- Unicorn-38576.exe (PID: 5344)
- Unicorn-51840.exe (PID: 4756)
- Unicorn-6168.exe (PID: 6816)
- Unicorn-49832.exe (PID: 6184)
- Unicorn-57526.exe (PID: 6808)
- Unicorn-13574.exe (PID: 5332)
- Unicorn-18281.exe (PID: 5008)
- Unicorn-600.exe (PID: 3100)
- Unicorn-51264.exe (PID: 4696)
- Unicorn-35769.exe (PID: 2148)
- Unicorn-1176.exe (PID: 1324)
- Unicorn-13775.exe (PID: 7340)
- Unicorn-60199.exe (PID: 4608)
- Unicorn-26894.exe (PID: 1180)
- Unicorn-2328.exe (PID: 1072)
- Unicorn-36537.exe (PID: 5868)
- Unicorn-49593.exe (PID: 5968)
- Unicorn-61855.exe (PID: 7372)
- Unicorn-64720.exe (PID: 672)
- Unicorn-59609.exe (PID: 7148)
- Unicorn-3864.exe (PID: 5972)
- Unicorn-32536.exe (PID: 3304)
- Unicorn-4248.exe (PID: 7152)
- Unicorn-63376.exe (PID: 3240)
- Unicorn-5539.exe (PID: 6564)
- Unicorn-50679.exe (PID: 2852)
- Unicorn-30982.exe (PID: 5256)
- Unicorn-57341.exe (PID: 6132)
- Unicorn-21784.exe (PID: 664)
- Unicorn-56272.exe (PID: 2096)
- Unicorn-9671.exe (PID: 7696)
- Unicorn-3407.exe (PID: 5280)
- Unicorn-20409.exe (PID: 7952)
- Unicorn-10911.exe (PID: 7688)
- Unicorn-8104.exe (PID: 7712)
- Unicorn-21369.exe (PID: 8000)
- Unicorn-52278.exe (PID: 1764)
- Unicorn-46457.exe (PID: 6988)
- Unicorn-34751.exe (PID: 7992)
- Unicorn-14278.exe (PID: 2152)
- Unicorn-29654.exe (PID: 5776)
- Unicorn-543.exe (PID: 7784)
- Unicorn-22905.exe (PID: 7788)
- Unicorn-33023.exe (PID: 6028)
- Unicorn-2847.exe (PID: 8068)
- Unicorn-12751.exe (PID: 6512)
- Unicorn-20025.exe (PID: 6476)
- Unicorn-39817.exe (PID: 7868)
- Unicorn-32809.exe (PID: 7900)
- Unicorn-28703.exe (PID: 2420)
- Unicorn-13135.exe (PID: 8140)
- Unicorn-40009.exe (PID: 7848)
- Unicorn-48856.exe (PID: 7176)
- Unicorn-55860.exe (PID: 5384)
- Unicorn-59072.exe (PID: 8132)
- Unicorn-61639.exe (PID: 7940)
- Unicorn-49337.exe (PID: 7584)
- Unicorn-10639.exe (PID: 8148)
- Unicorn-30313.exe (PID: 8188)
- Unicorn-13800.exe (PID: 8812)
- Unicorn-44553.exe (PID: 8748)
- Unicorn-14184.exe (PID: 8788)
- Unicorn-1096.exe (PID: 6080)
- Unicorn-36591.exe (PID: 3896)
- Unicorn-19295.exe (PID: 8572)
- Unicorn-22470.exe (PID: 8724)
- Unicorn-29462.exe (PID: 8340)
- Unicorn-8024.exe (PID: 8172)
- Unicorn-46000.exe (PID: 5228)
- Unicorn-22944.exe (PID: 8536)
- Unicorn-46872.exe (PID: 7624)
- Unicorn-22278.exe (PID: 8700)
- Unicorn-6184.exe (PID: 7800)
- Unicorn-33593.exe (PID: 8976)
- Unicorn-728.exe (PID: 8964)
- Unicorn-58391.exe (PID: 1040)
- Unicorn-63945.exe (PID: 4464)
- Unicorn-2264.exe (PID: 8348)
- Unicorn-3608.exe (PID: 8384)
- Unicorn-38777.exe (PID: 8592)
- Unicorn-37433.exe (PID: 8512)
- Unicorn-31008.exe (PID: 5360)
- Unicorn-46902.exe (PID: 6300)
- Unicorn-33577.exe (PID: 736)
- Unicorn-56192.exe (PID: 8268)
- Unicorn-6031.exe (PID: 3140)
- Unicorn-45720.exe (PID: 7944)
- Unicorn-38512.exe (PID: 8600)
- Unicorn-50358.exe (PID: 8280)
- Unicorn-29929.exe (PID: 8104)
- Unicorn-11292.exe (PID: 7644)
- Unicorn-58128.exe (PID: 8680)
- Unicorn-31657.exe (PID: 5436)
- Unicorn-29462.exe (PID: 8332)
- Unicorn-3992.exe (PID: 8376)
- Unicorn-44537.exe (PID: 8324)
- Unicorn-13885.exe (PID: 9012)
- Unicorn-26182.exe (PID: 7632)
- Unicorn-25929.exe (PID: 9512)
- Unicorn-22057.exe (PID: 8620)
- Unicorn-25897.exe (PID: 6488)
- Unicorn-59913.exe (PID: 8256)
- Unicorn-58408.exe (PID: 4164)
- Unicorn-27830.exe (PID: 812)
- Unicorn-58601.exe (PID: 9616)
- Unicorn-58793.exe (PID: 9528)
- Unicorn-58999.exe (PID: 616)
- Unicorn-51216.exe (PID: 9104)
- Unicorn-2799.exe (PID: 9944)
- Unicorn-5736.exe (PID: 9136)
- Unicorn-22400.exe (PID: 9952)
- Unicorn-56333.exe (PID: 9972)
- Unicorn-19590.exe (PID: 9200)
- Unicorn-4687.exe (PID: 7560)
- Unicorn-48808.exe (PID: 8460)
- Unicorn-56103.exe (PID: 8892)
- Unicorn-32783.exe (PID: 9812)
- Unicorn-48713.exe (PID: 7288)
- Unicorn-17193.exe (PID: 10328)
- Unicorn-60137.exe (PID: 9696)
- Unicorn-5103.exe (PID: 10096)
- Unicorn-37120.exe (PID: 11232)
- Unicorn-1951.exe (PID: 11156)
- Unicorn-31656.exe (PID: 11224)
- Unicorn-26533.exe (PID: 8480)
- Unicorn-31225.exe (PID: 10264)
- Unicorn-11761.exe (PID: 9752)
- Unicorn-42457.exe (PID: 9520)
- Unicorn-22895.exe (PID: 10664)
- Unicorn-17078.exe (PID: 8548)
- Unicorn-45721.exe (PID: 9740)
- Unicorn-31527.exe (PID: 11000)
- Unicorn-55165.exe (PID: 5084)
- Unicorn-36617.exe (PID: 11052)
- Unicorn-62735.exe (PID: 11760)
- Unicorn-2664.exe (PID: 9272)
- Unicorn-3119.exe (PID: 11840)
- Unicorn-3343.exe (PID: 8556)
- Unicorn-31481.exe (PID: 8908)
- Unicorn-36631.exe (PID: 10640)
- Unicorn-17769.exe (PID: 10840)
- Unicorn-28928.exe (PID: 9732)
- Unicorn-64552.exe (PID: 12480)
- Unicorn-20889.exe (PID: 12496)
- Unicorn-32735.exe (PID: 12552)
- Unicorn-19177.exe (PID: 8424)
- Unicorn-35199.exe (PID: 11416)
- Unicorn-18584.exe (PID: 10552)
- Unicorn-26262.exe (PID: 11708)
- Unicorn-62112.exe (PID: 11696)
- Unicorn-43337.exe (PID: 10900)
- Unicorn-14920.exe (PID: 12432)
- Unicorn-16798.exe (PID: 11752)
- Unicorn-5334.exe (PID: 5452)
- Unicorn-36732.exe (PID: 10008)
- Unicorn-53295.exe (PID: 12212)
- Unicorn-50468.exe (PID: 9980)
- Unicorn-32736.exe (PID: 7576)
- Unicorn-16854.exe (PID: 11880)
- Unicorn-46632.exe (PID: 10392)
- Unicorn-56228.exe (PID: 9636)
- Unicorn-55657.exe (PID: 11744)
- Unicorn-64592.exe (PID: 10444)
- Unicorn-54454.exe (PID: 12152)
- Unicorn-35065.exe (PID: 10416)
- Unicorn-51360.exe (PID: 11784)
- Unicorn-33785.exe (PID: 8364)
- Unicorn-36631.exe (PID: 10672)
- Unicorn-43369.exe (PID: 3968)
- Unicorn-13624.exe (PID: 9704)
- Unicorn-47871.exe (PID: 13532)
- Unicorn-47871.exe (PID: 13516)
- Unicorn-36732.exe (PID: 10028)
- Unicorn-34303.exe (PID: 9308)
- Unicorn-64825.exe (PID: 14524)
- Unicorn-48448.exe (PID: 10400)
- Unicorn-63865.exe (PID: 14572)
- Unicorn-64441.exe (PID: 14552)
- Unicorn-64672.exe (PID: 9264)
- Unicorn-16143.exe (PID: 12460)
- Unicorn-10246.exe (PID: 13284)
- Unicorn-26664.exe (PID: 11728)
- Unicorn-16207.exe (PID: 12692)
- Unicorn-8120.exe (PID: 13376)
- Unicorn-64352.exe (PID: 13296)
- Unicorn-33209.exe (PID: 8992)
- Unicorn-50359.exe (PID: 10612)
- Unicorn-56985.exe (PID: 10512)
- Unicorn-45423.exe (PID: 9156)
- Unicorn-7160.exe (PID: 13404)
- Unicorn-19839.exe (PID: 11864)
- Unicorn-22895.exe (PID: 10688)
- Unicorn-53145.exe (PID: 11060)
- Unicorn-20681.exe (PID: 12248)
- Unicorn-61606.exe (PID: 13420)
- Unicorn-16111.exe (PID: 13276)
- Unicorn-36751.exe (PID: 11808)
- Unicorn-34505.exe (PID: 10956)
- Unicorn-19918.exe (PID: 8716)
- Unicorn-54185.exe (PID: 9864)
- Unicorn-38425.exe (PID: 9852)
- Unicorn-53593.exe (PID: 9316)
- Unicorn-55392.exe (PID: 11736)
- Unicorn-16617.exe (PID: 10384)
- Unicorn-58404.exe (PID: 13104)
- Unicorn-39289.exe (PID: 15980)
- Unicorn-22304.exe (PID: 16020)
- Unicorn-40543.exe (PID: 16012)
- Unicorn-36732.exe (PID: 9988)
- Unicorn-46217.exe (PID: 4220)
- Unicorn-39833.exe (PID: 14108)
- Unicorn-47871.exe (PID: 13508)
- Unicorn-59080.exe (PID: 13236)
- Unicorn-5560.exe (PID: 9844)
- Unicorn-50663.exe (PID: 10504)
- Unicorn-23871.exe (PID: 11936)
- Unicorn-19279.exe (PID: 12664)
- Unicorn-22857.exe (PID: 9924)
Reads the software policy settings
- slui.exe (PID: 7428)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
726
Monitored processes
592
Malicious processes
91
Suspicious processes
73
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 300 | C:\Users\admin\AppData\Local\Temp\Unicorn-49362.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-49362.exe | — | Unicorn-34198.exe | |||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 536 | C:\Users\admin\AppData\Local\Temp\Unicorn-30687.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30687.exe | Unicorn-64182.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 616 | C:\Users\admin\AppData\Local\Temp\Unicorn-58999.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-58999.exe | Unicorn-49593.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 664 | C:\Users\admin\AppData\Local\Temp\Unicorn-21784.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-21784.exe | Unicorn-49832.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 668 | C:\Users\admin\AppData\Local\Temp\Unicorn-56457.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-56457.exe | — | Unicorn-20409.exe | |||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 672 | C:\Users\admin\AppData\Local\Temp\Unicorn-64720.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-64720.exe | Unicorn-44175.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 736 | C:\Users\admin\AppData\Local\Temp\Unicorn-33577.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-33577.exe | Unicorn-5539.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 812 | C:\Users\admin\AppData\Local\Temp\Unicorn-27830.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-27830.exe | Unicorn-63391.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 1040 | C:\Users\admin\AppData\Local\Temp\Unicorn-58391.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-58391.exe | Unicorn-36713.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
| 1072 | C:\Users\admin\AppData\Local\Temp\Unicorn-2328.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2328.exe | Unicorn-45488.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Modules
| |||||||||||||||
Total events
13 509
Read events
13 509
Write events
0
Delete events
0
Modification events
Executable files
766
Suspicious files
0
Text files
0
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 4776 | Unicorn-57231.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-36713.exe | executable | |
MD5:F12FFE6D0E1759C9430BAC33A2AC6274 | SHA256:A80C31132FA95D06A0318ABD3EF313487BEBC542840C4BCFFF28C2DB927254AE | |||
| 7348 | 1 (676).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-63391.exe | executable | |
MD5:CAB4165F280268A771E7A5DF290CB085 | SHA256:D336315B2A34830E10BCC7B16F07534F0C4D7728766EA7C5CD49421D4A7B88B9 | |||
| 7192 | Unicorn-50153.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-45488.exe | executable | |
MD5:82E35A940F47804C56A46C0765F39490 | SHA256:0D4061609359D7B5379CE8A7F1939CD1461A41CEB1BB9C7AFA5F3B9065551254 | |||
| 8008 | Unicorn-64182.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30687.exe | executable | |
MD5:5E4AFCF04FED21EB371AFEB15816E4CD | SHA256:587F30D85FF1D5E2C0C04CF31D925EECF5E7BA5240DEABFDADF5DC6CCA19EB9A | |||
| 7524 | Unicorn-34198.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-57231.exe | executable | |
MD5:89D17D02B3A80DA6DAA408DE7B1A42BC | SHA256:39E06A9CEB265A950DA4FC631D5502C5F0199E1F3B19103459655F22A6490B9D | |||
| 8016 | Unicorn-11644.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-44175.exe | executable | |
MD5:248DCC2BF3F313AE4EA406ED8018B4EA | SHA256:15C71E43093EAFFC8DEA20A0C1C379FF2F5AC3339379514AABC5A6DEDB4D7643 | |||
| 4776 | Unicorn-57231.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13775.exe | executable | |
MD5:E157DA54241E4D5915997EB283379255 | SHA256:E03274254C9EB399424B91093D6BE285DFB64160C069C35AB7E10BE23592F688 | |||
| 536 | Unicorn-30687.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-58280.exe | executable | |
MD5:E242703C6955F2A65BDE20B75A3EC23D | SHA256:167A14024CB5D6304665E912EB3DF731ECB43EB1C4FB23D2B86DE9C9BDC01BB6 | |||
| 8008 | Unicorn-64182.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-36006.exe | executable | |
MD5:17DBB26682B776ECFD79218CDEFD7EB6 | SHA256:E408C77CE1A0F77EB500FE00DF6AAA50AED6D193AF45711DDC9FCFFE650988FC | |||
| 7348 | 1 (676).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-11644.exe | executable | |
MD5:371E90165B1FB9C01403B3566B24B011 | SHA256:AAEA5D02FD712AD626FF605E4ECABA852CBF374B1740B29B5498CEC5DC33520B | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
23
DNS requests
16
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
— | — | GET | 200 | 2.16.164.72:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
7572 | backgroundTaskHost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
1132 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
1132 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
2104 | svchost.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
— | — | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 2.16.164.72:80 | crl.microsoft.com | Akamai International B.V. | NL | whitelisted |
6544 | svchost.exe | 20.190.160.131:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 2.23.77.188:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
3216 | svchost.exe | 40.115.3.253:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
2112 | svchost.exe | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
7572 | backgroundTaskHost.exe | 20.223.36.55:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |