| File name: | 1 (454) |
| Full analysis: | https://app.any.run/tasks/ef02c802-0666-42b0-a4af-9ec8daabcb0a |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 22:06:56 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | 9D1049F6544A8750114EF6410B70FC70 |
| SHA1: | 89429AB3FD447757EFA77D34E7D7568D780FAED4 |
| SHA256: | 875316D0869A635F233D458EBDA98A1C65CC34BA64274977013AAE990A5B1492 |
| SSDEEP: | 6144:U7tgRchVaDULU5L64ZeUXxcx5W7Xfp8GBV/aDVOH+k/8SwjwpyAvEhhBl/zDQRya:UZgyBLU5O4YQ7v+aVSDVOH2x4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- Unicorn-6310.exe (PID: 920)
- Unicorn-57623.exe (PID: 7380)
- 1 (454).exe (PID: 5304)
- Unicorn-64400.exe (PID: 7392)
- Unicorn-17707.exe (PID: 7472)
- Unicorn-26067.exe (PID: 7444)
- Unicorn-2522.exe (PID: 7512)
- Unicorn-63378.exe (PID: 7460)
- Unicorn-58521.exe (PID: 7544)
- Unicorn-7929.exe (PID: 7576)
- Unicorn-34134.exe (PID: 7480)
- Unicorn-40025.exe (PID: 7528)
- Unicorn-27530.exe (PID: 7556)
- Unicorn-48115.exe (PID: 7584)
- Unicorn-13165.exe (PID: 7788)
- Unicorn-14556.exe (PID: 7776)
- Unicorn-41099.exe (PID: 7824)
- Unicorn-39807.exe (PID: 7808)
- Unicorn-51313.exe (PID: 7816)
- Unicorn-14364.exe (PID: 7864)
- Unicorn-55205.exe (PID: 7888)
- Unicorn-8889.exe (PID: 7880)
- Unicorn-46772.exe (PID: 7916)
- Unicorn-42953.exe (PID: 7904)
- Unicorn-3296.exe (PID: 7924)
- Unicorn-49075.exe (PID: 7896)
- Unicorn-52557.exe (PID: 8144)
- Unicorn-61188.exe (PID: 8168)
- Unicorn-9486.exe (PID: 8128)
- Unicorn-54411.exe (PID: 8160)
- Unicorn-13378.exe (PID: 7172)
- Unicorn-39756.exe (PID: 6964)
- Unicorn-29907.exe (PID: 8188)
- Unicorn-21638.exe (PID: 728)
- Unicorn-53596.exe (PID: 5548)
- Unicorn-44681.exe (PID: 4488)
- Unicorn-65101.exe (PID: 6540)
- Unicorn-16093.exe (PID: 4920)
- Unicorn-13762.exe (PID: 4408)
- Unicorn-54033.exe (PID: 1184)
- Unicorn-17031.exe (PID: 7188)
- Unicorn-61017.exe (PID: 5124)
- Unicorn-45236.exe (PID: 6184)
- Unicorn-43119.exe (PID: 7296)
- Unicorn-140.exe (PID: 7312)
- Unicorn-56833.exe (PID: 6468)
- Unicorn-49896.exe (PID: 4120)
- Unicorn-14914.exe (PID: 2108)
- Unicorn-55185.exe (PID: 7420)
- Unicorn-62709.exe (PID: 2772)
- Unicorn-44058.exe (PID: 7232)
- Unicorn-59839.exe (PID: 7152)
- Unicorn-19731.exe (PID: 1388)
- Unicorn-59626.exe (PID: 6132)
- Unicorn-13060.exe (PID: 7208)
- Unicorn-31851.exe (PID: 6644)
- Unicorn-39859.exe (PID: 2040)
- Unicorn-8500.exe (PID: 2516)
- Unicorn-61520.exe (PID: 4944)
- Unicorn-37089.exe (PID: 5048)
- Unicorn-60471.exe (PID: 6592)
- Unicorn-21677.exe (PID: 4188)
- Unicorn-41749.exe (PID: 7224)
- Unicorn-62724.exe (PID: 7364)
- Unicorn-17785.exe (PID: 7992)
- Unicorn-21883.exe (PID: 7268)
- Unicorn-53772.exe (PID: 3332)
- Unicorn-53342.exe (PID: 7676)
- Unicorn-3970.exe (PID: 8060)
- Unicorn-49087.exe (PID: 7972)
- Unicorn-20093.exe (PID: 6752)
- Unicorn-43996.exe (PID: 1676)
- Unicorn-60955.exe (PID: 3300)
- Unicorn-57037.exe (PID: 8784)
- Unicorn-9782.exe (PID: 8812)
- Unicorn-5122.exe (PID: 8368)
- Unicorn-52211.exe (PID: 900)
- Unicorn-51007.exe (PID: 8760)
- Unicorn-3586.exe (PID: 2092)
- Unicorn-30783.exe (PID: 7848)
- Unicorn-62643.exe (PID: 8576)
- Unicorn-42673.exe (PID: 8124)
- Unicorn-25761.exe (PID: 5964)
- Unicorn-25351.exe (PID: 8232)
- Unicorn-43695.exe (PID: 7256)
- Unicorn-34406.exe (PID: 8688)
- Unicorn-14368.exe (PID: 8084)
- Unicorn-34505.exe (PID: 2644)
- Unicorn-25351.exe (PID: 8228)
- Unicorn-9185.exe (PID: 5576)
- Unicorn-46627.exe (PID: 7236)
- Unicorn-21665.exe (PID: 7304)
- Unicorn-43419.exe (PID: 7876)
- Unicorn-13405.exe (PID: 8460)
- Unicorn-19273.exe (PID: 7432)
- Unicorn-22035.exe (PID: 8540)
- Unicorn-32511.exe (PID: 8344)
- Unicorn-37363.exe (PID: 8728)
- Unicorn-36617.exe (PID: 8748)
- Unicorn-26503.exe (PID: 8700)
- Unicorn-44937.exe (PID: 8940)
- Unicorn-57447.exe (PID: 8212)
- Unicorn-22035.exe (PID: 8532)
- Unicorn-654.exe (PID: 8264)
- Unicorn-9055.exe (PID: 5936)
- Unicorn-23789.exe (PID: 8668)
- Unicorn-16341.exe (PID: 7412)
- Unicorn-59149.exe (PID: 9288)
- Unicorn-21241.exe (PID: 8000)
- Unicorn-20582.exe (PID: 8324)
- Unicorn-12257.exe (PID: 7356)
- Unicorn-44903.exe (PID: 8028)
- Unicorn-35033.exe (PID: 8852)
- Unicorn-52569.exe (PID: 8616)
- Unicorn-42983.exe (PID: 4892)
- Unicorn-22755.exe (PID: 9336)
- Unicorn-30076.exe (PID: 6244)
- Unicorn-40129.exe (PID: 10160)
- Unicorn-25647.exe (PID: 10196)
- Unicorn-24255.exe (PID: 10232)
- Unicorn-54707.exe (PID: 8588)
- Unicorn-39357.exe (PID: 8292)
- Unicorn-30373.exe (PID: 8376)
- Unicorn-56269.exe (PID: 8432)
- Unicorn-23597.exe (PID: 8384)
- Unicorn-48299.exe (PID: 8720)
- Unicorn-47115.exe (PID: 8920)
- Unicorn-18247.exe (PID: 10624)
- Unicorn-30691.exe (PID: 10432)
- Unicorn-15839.exe (PID: 5556)
- Unicorn-60909.exe (PID: 9652)
- Unicorn-20944.exe (PID: 8504)
- Unicorn-39803.exe (PID: 5504)
- Unicorn-56004.exe (PID: 8420)
- Unicorn-4447.exe (PID: 9008)
- Unicorn-3560.exe (PID: 8512)
- Unicorn-20284.exe (PID: 10584)
- Unicorn-8412.exe (PID: 8868)
- Unicorn-52071.exe (PID: 10568)
- Unicorn-45941.exe (PID: 10572)
- Unicorn-34391.exe (PID: 2332)
- Unicorn-39501.exe (PID: 8972)
- Unicorn-21437.exe (PID: 6068)
- Unicorn-56990.exe (PID: 9232)
- Unicorn-23086.exe (PID: 9048)
- Unicorn-56849.exe (PID: 9972)
- Unicorn-56435.exe (PID: 9272)
- Unicorn-56606.exe (PID: 6108)
- Unicorn-1593.exe (PID: 8440)
- Unicorn-40675.exe (PID: 9280)
- Unicorn-14255.exe (PID: 812)
- Unicorn-25299.exe (PID: 9984)
- Unicorn-11070.exe (PID: 9928)
- Unicorn-20254.exe (PID: 10908)
- Unicorn-47027.exe (PID: 10536)
- Unicorn-60903.exe (PID: 9396)
- Unicorn-36143.exe (PID: 10876)
- Unicorn-37167.exe (PID: 9616)
- Unicorn-9594.exe (PID: 10408)
- Unicorn-7042.exe (PID: 9164)
- Unicorn-10010.exe (PID: 9644)
- Unicorn-3254.exe (PID: 11384)
- Unicorn-35443.exe (PID: 11024)
- Unicorn-23330.exe (PID: 12816)
- Unicorn-54764.exe (PID: 11236)
- Unicorn-2818.exe (PID: 12792)
- Unicorn-18771.exe (PID: 12728)
- Unicorn-23047.exe (PID: 12648)
- Unicorn-48620.exe (PID: 12636)
- Unicorn-4691.exe (PID: 8984)
- Unicorn-60327.exe (PID: 9192)
- Unicorn-48205.exe (PID: 6572)
- Unicorn-30156.exe (PID: 5308)
- Unicorn-43777.exe (PID: 4172)
- Unicorn-19576.exe (PID: 10324)
- Unicorn-59341.exe (PID: 9500)
- Unicorn-20259.exe (PID: 8660)
- Unicorn-62418.exe (PID: 9588)
- Unicorn-2574.exe (PID: 9040)
- Unicorn-25520.exe (PID: 11260)
- Unicorn-53787.exe (PID: 9568)
- Unicorn-33989.exe (PID: 10916)
- Unicorn-40051.exe (PID: 9576)
- Unicorn-59751.exe (PID: 9108)
- Unicorn-3564.exe (PID: 10276)
- Unicorn-30561.exe (PID: 9524)
- Unicorn-23177.exe (PID: 13984)
- Unicorn-49554.exe (PID: 14004)
- Unicorn-135.exe (PID: 9920)
- Unicorn-9694.exe (PID: 10284)
- Unicorn-37529.exe (PID: 9468)
- Unicorn-39575.exe (PID: 12880)
- Unicorn-38424.exe (PID: 12784)
- Unicorn-16672.exe (PID: 8884)
- Unicorn-24255.exe (PID: 4976)
- Unicorn-7238.exe (PID: 11208)
- Unicorn-27161.exe (PID: 10528)
- Unicorn-45938.exe (PID: 9436)
- Unicorn-44619.exe (PID: 6668)
- Unicorn-2932.exe (PID: 9704)
- Unicorn-57971.exe (PID: 10044)
- Unicorn-7997.exe (PID: 13044)
- Unicorn-38515.exe (PID: 12324)
- Unicorn-28417.exe (PID: 13124)
- Unicorn-8006.exe (PID: 11628)
- Unicorn-5008.exe (PID: 11216)
- Unicorn-29601.exe (PID: 15068)
- Unicorn-64711.exe (PID: 13132)
- Unicorn-17261.exe (PID: 7736)
- Unicorn-30177.exe (PID: 9388)
- Unicorn-63010.exe (PID: 14424)
- Unicorn-39579.exe (PID: 11848)
- Unicorn-7997.exe (PID: 13052)
- Unicorn-55479.exe (PID: 10884)
- Unicorn-27302.exe (PID: 11244)
- Unicorn-16467.exe (PID: 11840)
- Unicorn-28722.exe (PID: 13896)
- Unicorn-39497.exe (PID: 10008)
- Unicorn-48345.exe (PID: 6264)
- Unicorn-5662.exe (PID: 14532)
- Unicorn-11785.exe (PID: 10032)
- Unicorn-29601.exe (PID: 15084)
- Unicorn-26.exe (PID: 9456)
- Unicorn-29601.exe (PID: 15076)
- Unicorn-3150.exe (PID: 9248)
- Unicorn-54982.exe (PID: 2800)
- Unicorn-30857.exe (PID: 12044)
- Unicorn-46439.exe (PID: 8628)
- Unicorn-2962.exe (PID: 11228)
- Unicorn-47577.exe (PID: 12116)
- Unicorn-24339.exe (PID: 9296)
- Unicorn-41308.exe (PID: 11032)
- Unicorn-42943.exe (PID: 10504)
- Unicorn-30209.exe (PID: 11832)
- Unicorn-14281.exe (PID: 5452)
- Unicorn-54903.exe (PID: 7648)
- Unicorn-12372.exe (PID: 17392)
- Unicorn-21540.exe (PID: 13164)
- Unicorn-37529.exe (PID: 9476)
- Unicorn-43778.exe (PID: 8904)
- Unicorn-59139.exe (PID: 14748)
- Unicorn-35173.exe (PID: 5680)
- Unicorn-4463.exe (PID: 14792)
- Unicorn-47001.exe (PID: 11468)
- Unicorn-21215.exe (PID: 9960)
- Unicorn-42101.exe (PID: 12076)
- Unicorn-17534.exe (PID: 17376)
- Unicorn-28722.exe (PID: 13888)
- Unicorn-18167.exe (PID: 8252)
- Unicorn-46892.exe (PID: 12972)
- Unicorn-3259.exe (PID: 17356)
Starts itself from another location
- 1 (454).exe (PID: 5304)
- Unicorn-57623.exe (PID: 7380)
- Unicorn-6310.exe (PID: 920)
- Unicorn-64400.exe (PID: 7392)
- Unicorn-26067.exe (PID: 7444)
- Unicorn-34134.exe (PID: 7480)
- Unicorn-2522.exe (PID: 7512)
- Unicorn-40025.exe (PID: 7528)
- Unicorn-58521.exe (PID: 7544)
- Unicorn-7929.exe (PID: 7576)
- Unicorn-48115.exe (PID: 7584)
- Unicorn-27530.exe (PID: 7556)
- Unicorn-13165.exe (PID: 7788)
- Unicorn-14556.exe (PID: 7776)
- Unicorn-41099.exe (PID: 7824)
- Unicorn-39807.exe (PID: 7808)
- Unicorn-17707.exe (PID: 7472)
- Unicorn-51313.exe (PID: 7816)
- Unicorn-55205.exe (PID: 7888)
- Unicorn-14364.exe (PID: 7864)
- Unicorn-8889.exe (PID: 7880)
- Unicorn-42953.exe (PID: 7904)
- Unicorn-3296.exe (PID: 7924)
- Unicorn-49075.exe (PID: 7896)
- Unicorn-46772.exe (PID: 7916)
- Unicorn-9486.exe (PID: 8128)
- Unicorn-52557.exe (PID: 8144)
- Unicorn-54411.exe (PID: 8160)
- Unicorn-61188.exe (PID: 8168)
- Unicorn-29907.exe (PID: 8188)
- Unicorn-13378.exe (PID: 7172)
- Unicorn-39756.exe (PID: 6964)
- Unicorn-59626.exe (PID: 6132)
- Unicorn-21638.exe (PID: 728)
- Unicorn-65101.exe (PID: 6540)
- Unicorn-13762.exe (PID: 4408)
- Unicorn-44681.exe (PID: 4488)
- Unicorn-16093.exe (PID: 4920)
- Unicorn-17031.exe (PID: 7188)
- Unicorn-54033.exe (PID: 1184)
- Unicorn-61017.exe (PID: 5124)
- Unicorn-45236.exe (PID: 6184)
- Unicorn-43119.exe (PID: 7296)
- Unicorn-46627.exe (PID: 7236)
- Unicorn-56833.exe (PID: 6468)
- Unicorn-49896.exe (PID: 4120)
- Unicorn-53596.exe (PID: 5548)
- Unicorn-21665.exe (PID: 7304)
- Unicorn-55185.exe (PID: 7420)
- Unicorn-62709.exe (PID: 2772)
- Unicorn-14914.exe (PID: 2108)
- Unicorn-44058.exe (PID: 7232)
- Unicorn-13060.exe (PID: 7208)
- Unicorn-140.exe (PID: 7312)
- Unicorn-59839.exe (PID: 7152)
- Unicorn-19731.exe (PID: 1388)
- Unicorn-31851.exe (PID: 6644)
- Unicorn-8500.exe (PID: 2516)
- Unicorn-39859.exe (PID: 2040)
- Unicorn-61520.exe (PID: 4944)
- Unicorn-9055.exe (PID: 5936)
- Unicorn-37089.exe (PID: 5048)
- Unicorn-60471.exe (PID: 6592)
- Unicorn-21677.exe (PID: 4188)
- Unicorn-41749.exe (PID: 7224)
- Unicorn-62724.exe (PID: 7364)
- Unicorn-17785.exe (PID: 7992)
- Unicorn-43695.exe (PID: 7256)
- Unicorn-53772.exe (PID: 3332)
- Unicorn-39803.exe (PID: 5504)
- Unicorn-3970.exe (PID: 8060)
- Unicorn-49087.exe (PID: 7972)
- Unicorn-20093.exe (PID: 6752)
- Unicorn-60955.exe (PID: 3300)
- Unicorn-21883.exe (PID: 7268)
- Unicorn-51007.exe (PID: 8760)
- Unicorn-57037.exe (PID: 8784)
- Unicorn-9782.exe (PID: 8812)
- Unicorn-5122.exe (PID: 8368)
- Unicorn-53342.exe (PID: 7676)
- Unicorn-3586.exe (PID: 2092)
- Unicorn-30783.exe (PID: 7848)
- Unicorn-52211.exe (PID: 900)
- Unicorn-25351.exe (PID: 8232)
- Unicorn-62643.exe (PID: 8576)
- Unicorn-42673.exe (PID: 8124)
- Unicorn-25761.exe (PID: 5964)
- Unicorn-34406.exe (PID: 8688)
- Unicorn-14368.exe (PID: 8084)
- Unicorn-34505.exe (PID: 2644)
- Unicorn-25351.exe (PID: 8228)
- Unicorn-9185.exe (PID: 5576)
- Unicorn-19273.exe (PID: 7432)
- Unicorn-43419.exe (PID: 7876)
- Unicorn-13405.exe (PID: 8460)
- Unicorn-22035.exe (PID: 8540)
- Unicorn-32511.exe (PID: 8344)
- Unicorn-37363.exe (PID: 8728)
- Unicorn-26503.exe (PID: 8700)
- Unicorn-44937.exe (PID: 8940)
- Unicorn-54707.exe (PID: 8588)
- Unicorn-36617.exe (PID: 8748)
- Unicorn-22035.exe (PID: 8532)
- Unicorn-654.exe (PID: 8264)
- Unicorn-23789.exe (PID: 8668)
- Unicorn-16341.exe (PID: 7412)
- Unicorn-59149.exe (PID: 9288)
- Unicorn-21241.exe (PID: 8000)
- Unicorn-20582.exe (PID: 8324)
- Unicorn-22755.exe (PID: 9336)
- Unicorn-44903.exe (PID: 8028)
- Unicorn-35033.exe (PID: 8852)
- Unicorn-12257.exe (PID: 7356)
- Unicorn-52569.exe (PID: 8616)
- Unicorn-57447.exe (PID: 8212)
- Unicorn-42983.exe (PID: 4892)
- Unicorn-30076.exe (PID: 6244)
- Unicorn-40129.exe (PID: 10160)
- Unicorn-25647.exe (PID: 10196)
- Unicorn-24255.exe (PID: 10232)
- Unicorn-39357.exe (PID: 8292)
- Unicorn-825.exe (PID: 8200)
- Unicorn-8412.exe (PID: 8868)
- Unicorn-56269.exe (PID: 8432)
- Unicorn-47115.exe (PID: 8920)
- Unicorn-23597.exe (PID: 8384)
- Unicorn-18247.exe (PID: 10624)
- Unicorn-30691.exe (PID: 10432)
- Unicorn-15839.exe (PID: 5556)
- Unicorn-20944.exe (PID: 8504)
- Unicorn-45938.exe (PID: 9436)
- Unicorn-60909.exe (PID: 9652)
- Unicorn-48299.exe (PID: 8720)
- Unicorn-30373.exe (PID: 8376)
- Unicorn-56004.exe (PID: 8420)
- Unicorn-3560.exe (PID: 8512)
- Unicorn-45941.exe (PID: 10572)
- Unicorn-52071.exe (PID: 10568)
- Unicorn-17261.exe (PID: 7736)
- Unicorn-20284.exe (PID: 10584)
- Unicorn-4447.exe (PID: 9008)
- Unicorn-34391.exe (PID: 2332)
- Unicorn-21437.exe (PID: 6068)
- Unicorn-39501.exe (PID: 8972)
- Unicorn-56990.exe (PID: 9232)
- Unicorn-23086.exe (PID: 9048)
- Unicorn-56849.exe (PID: 9972)
- Unicorn-56606.exe (PID: 6108)
- Unicorn-14255.exe (PID: 812)
- Unicorn-1593.exe (PID: 8440)
- Unicorn-24339.exe (PID: 9296)
- Unicorn-56435.exe (PID: 9272)
- Unicorn-11070.exe (PID: 9928)
- Unicorn-11785.exe (PID: 10032)
- Unicorn-20254.exe (PID: 10908)
- Unicorn-47027.exe (PID: 10536)
- Unicorn-43996.exe (PID: 1676)
- Unicorn-36143.exe (PID: 10876)
- Unicorn-26.exe (PID: 9456)
- Unicorn-40675.exe (PID: 9280)
- Unicorn-60903.exe (PID: 9396)
- Unicorn-37167.exe (PID: 9616)
- Unicorn-9594.exe (PID: 10408)
- Unicorn-25299.exe (PID: 9984)
- Unicorn-7042.exe (PID: 9164)
- Unicorn-10010.exe (PID: 9644)
- Unicorn-3254.exe (PID: 11384)
- Unicorn-35443.exe (PID: 11024)
- Unicorn-54764.exe (PID: 11236)
- Unicorn-2818.exe (PID: 12792)
- Unicorn-38424.exe (PID: 12784)
- Unicorn-23330.exe (PID: 12816)
- Unicorn-18771.exe (PID: 12728)
- Unicorn-23047.exe (PID: 12648)
- Unicorn-48620.exe (PID: 12636)
- Unicorn-4691.exe (PID: 8984)
- Unicorn-48205.exe (PID: 6572)
- Unicorn-43777.exe (PID: 4172)
- Unicorn-19576.exe (PID: 10324)
- Unicorn-59341.exe (PID: 9500)
- Unicorn-53787.exe (PID: 9568)
- Unicorn-62418.exe (PID: 9588)
- Unicorn-2574.exe (PID: 9040)
- Unicorn-25520.exe (PID: 11260)
- Unicorn-20259.exe (PID: 8660)
- Unicorn-33989.exe (PID: 10916)
- Unicorn-40051.exe (PID: 9576)
- Unicorn-59751.exe (PID: 9108)
- Unicorn-3564.exe (PID: 10276)
- Unicorn-30561.exe (PID: 9524)
- Unicorn-23177.exe (PID: 13984)
- Unicorn-49554.exe (PID: 14004)
- Unicorn-135.exe (PID: 9920)
- Unicorn-46439.exe (PID: 8628)
- Unicorn-29601.exe (PID: 15084)
- Unicorn-29601.exe (PID: 15076)
- Unicorn-39575.exe (PID: 12880)
- Unicorn-37529.exe (PID: 9468)
- Unicorn-2932.exe (PID: 9704)
- Unicorn-27161.exe (PID: 10528)
- Unicorn-44619.exe (PID: 6668)
- Unicorn-24255.exe (PID: 4976)
- Unicorn-7238.exe (PID: 11208)
- Unicorn-16672.exe (PID: 8884)
- Unicorn-7997.exe (PID: 13044)
- Unicorn-8006.exe (PID: 11628)
- Unicorn-14281.exe (PID: 5452)
- Unicorn-5008.exe (PID: 11216)
- Unicorn-29601.exe (PID: 15068)
- Unicorn-64711.exe (PID: 13132)
- Unicorn-30177.exe (PID: 9388)
- Unicorn-11785.exe (PID: 10248)
- Unicorn-29518.exe (PID: 11692)
- Unicorn-55479.exe (PID: 10884)
- Unicorn-63010.exe (PID: 14424)
- Unicorn-39579.exe (PID: 11848)
- Unicorn-27302.exe (PID: 11244)
- Unicorn-28722.exe (PID: 13896)
- Unicorn-39497.exe (PID: 10008)
- Unicorn-7997.exe (PID: 13052)
- Unicorn-5662.exe (PID: 14532)
- Unicorn-57971.exe (PID: 10044)
- Unicorn-48345.exe (PID: 6264)
- Unicorn-12360.exe (PID: 15112)
- Unicorn-3259.exe (PID: 17356)
- Unicorn-41308.exe (PID: 11032)
- Unicorn-42101.exe (PID: 12076)
- Unicorn-3150.exe (PID: 9248)
- Unicorn-30156.exe (PID: 5308)
- Unicorn-38515.exe (PID: 12324)
- Unicorn-30857.exe (PID: 12044)
- Unicorn-54982.exe (PID: 2800)
Executes application which crashes
- Unicorn-63378.exe (PID: 7460)
- Unicorn-28755.exe (PID: 7872)
- Unicorn-29575.exe (PID: 9696)
INFO
The sample compiled with chinese language support
- 1 (454).exe (PID: 5304)
Reads the computer name
- 1 (454).exe (PID: 5304)
- Unicorn-6310.exe (PID: 920)
- Unicorn-57623.exe (PID: 7380)
- Unicorn-64400.exe (PID: 7392)
- Unicorn-34134.exe (PID: 7480)
- Unicorn-26067.exe (PID: 7444)
- Unicorn-17707.exe (PID: 7472)
- Unicorn-63378.exe (PID: 7460)
- Unicorn-2522.exe (PID: 7512)
- Unicorn-7929.exe (PID: 7576)
- Unicorn-58521.exe (PID: 7544)
- Unicorn-48115.exe (PID: 7584)
- Unicorn-27530.exe (PID: 7556)
- Unicorn-40025.exe (PID: 7528)
- Unicorn-14556.exe (PID: 7776)
- Unicorn-41099.exe (PID: 7824)
- Unicorn-13165.exe (PID: 7788)
- Unicorn-39807.exe (PID: 7808)
- Unicorn-55205.exe (PID: 7888)
- Unicorn-51313.exe (PID: 7816)
- Unicorn-14364.exe (PID: 7864)
- Unicorn-49075.exe (PID: 7896)
- Unicorn-8889.exe (PID: 7880)
- Unicorn-3296.exe (PID: 7924)
- Unicorn-46772.exe (PID: 7916)
- Unicorn-42953.exe (PID: 7904)
- Unicorn-9486.exe (PID: 8128)
- Unicorn-52557.exe (PID: 8144)
- Unicorn-54411.exe (PID: 8160)
- Unicorn-61188.exe (PID: 8168)
- Unicorn-29907.exe (PID: 8188)
- Unicorn-13378.exe (PID: 7172)
- Unicorn-39756.exe (PID: 6964)
- Unicorn-53596.exe (PID: 5548)
- Unicorn-59626.exe (PID: 6132)
- Unicorn-16093.exe (PID: 4920)
- Unicorn-44681.exe (PID: 4488)
- Unicorn-65101.exe (PID: 6540)
- Unicorn-13762.exe (PID: 4408)
- Unicorn-54033.exe (PID: 1184)
- Unicorn-21638.exe (PID: 728)
- Unicorn-17031.exe (PID: 7188)
- Unicorn-61017.exe (PID: 5124)
- Unicorn-43119.exe (PID: 7296)
- Unicorn-45236.exe (PID: 6184)
- Unicorn-140.exe (PID: 7312)
- Unicorn-46627.exe (PID: 7236)
- Unicorn-56833.exe (PID: 6468)
- Unicorn-49896.exe (PID: 4120)
- Unicorn-14914.exe (PID: 2108)
- Unicorn-21665.exe (PID: 7304)
- Unicorn-55185.exe (PID: 7420)
- Unicorn-62709.exe (PID: 2772)
- Unicorn-59839.exe (PID: 7152)
- Unicorn-44058.exe (PID: 7232)
- Unicorn-13060.exe (PID: 7208)
- Unicorn-19731.exe (PID: 1388)
- Unicorn-31851.exe (PID: 6644)
- Unicorn-8500.exe (PID: 2516)
- Unicorn-9055.exe (PID: 5936)
- Unicorn-39859.exe (PID: 2040)
- Unicorn-61520.exe (PID: 4944)
- Unicorn-37089.exe (PID: 5048)
- Unicorn-60471.exe (PID: 6592)
- Unicorn-21677.exe (PID: 4188)
- Unicorn-41749.exe (PID: 7224)
- Unicorn-62724.exe (PID: 7364)
- Unicorn-17785.exe (PID: 7992)
- Unicorn-21883.exe (PID: 7268)
- Unicorn-43695.exe (PID: 7256)
- Unicorn-39803.exe (PID: 5504)
- Unicorn-53772.exe (PID: 3332)
- Unicorn-53342.exe (PID: 7676)
- Unicorn-3970.exe (PID: 8060)
- Unicorn-49087.exe (PID: 7972)
- Unicorn-20093.exe (PID: 6752)
- Unicorn-43996.exe (PID: 1676)
- Unicorn-51007.exe (PID: 8760)
- Unicorn-60955.exe (PID: 3300)
- Unicorn-57037.exe (PID: 8784)
- Unicorn-9782.exe (PID: 8812)
- Unicorn-5122.exe (PID: 8368)
- Unicorn-52211.exe (PID: 900)
- Unicorn-3586.exe (PID: 2092)
- Unicorn-30783.exe (PID: 7848)
- Unicorn-25351.exe (PID: 8232)
- Unicorn-25761.exe (PID: 5964)
- Unicorn-34406.exe (PID: 8688)
- Unicorn-14368.exe (PID: 8084)
- Unicorn-34505.exe (PID: 2644)
- Unicorn-62643.exe (PID: 8576)
- Unicorn-42673.exe (PID: 8124)
- Unicorn-25351.exe (PID: 8228)
- Unicorn-9185.exe (PID: 5576)
- Unicorn-43419.exe (PID: 7876)
- Unicorn-22035.exe (PID: 8540)
- Unicorn-13405.exe (PID: 8460)
- Unicorn-26503.exe (PID: 8700)
- Unicorn-32511.exe (PID: 8344)
- Unicorn-19273.exe (PID: 7432)
- Unicorn-54707.exe (PID: 8588)
- Unicorn-37363.exe (PID: 8728)
- Unicorn-44937.exe (PID: 8940)
- Unicorn-36617.exe (PID: 8748)
- Unicorn-825.exe (PID: 8200)
- Unicorn-57447.exe (PID: 8212)
- Unicorn-22035.exe (PID: 8532)
- Unicorn-44903.exe (PID: 8028)
- Unicorn-16341.exe (PID: 7412)
- Unicorn-23789.exe (PID: 8668)
- Unicorn-654.exe (PID: 8264)
- Unicorn-21241.exe (PID: 8000)
- Unicorn-20582.exe (PID: 8324)
- Unicorn-22755.exe (PID: 9336)
- Unicorn-35033.exe (PID: 8852)
- Unicorn-59149.exe (PID: 9288)
- Unicorn-12257.exe (PID: 7356)
- Unicorn-42983.exe (PID: 4892)
- Unicorn-52569.exe (PID: 8616)
- Unicorn-30076.exe (PID: 6244)
- Unicorn-39357.exe (PID: 8292)
- Unicorn-40129.exe (PID: 10160)
- Unicorn-25647.exe (PID: 10196)
- Unicorn-24255.exe (PID: 10232)
- Unicorn-48299.exe (PID: 8720)
- Unicorn-30373.exe (PID: 8376)
- Unicorn-56269.exe (PID: 8432)
- Unicorn-23597.exe (PID: 8384)
- Unicorn-47115.exe (PID: 8920)
- Unicorn-8412.exe (PID: 8868)
- Unicorn-30691.exe (PID: 10432)
- Unicorn-18247.exe (PID: 10624)
- Unicorn-34391.exe (PID: 2332)
- Unicorn-15839.exe (PID: 5556)
- Unicorn-4447.exe (PID: 9008)
- Unicorn-45938.exe (PID: 9436)
- Unicorn-20944.exe (PID: 8504)
- Unicorn-60909.exe (PID: 9652)
- Unicorn-56004.exe (PID: 8420)
- Unicorn-3560.exe (PID: 8512)
- Unicorn-20284.exe (PID: 10584)
- Unicorn-17261.exe (PID: 7736)
- Unicorn-52071.exe (PID: 10568)
- Unicorn-45941.exe (PID: 10572)
- Unicorn-39501.exe (PID: 8972)
- Unicorn-21437.exe (PID: 6068)
- Unicorn-40051.exe (PID: 9576)
- Unicorn-56849.exe (PID: 9972)
- Unicorn-59751.exe (PID: 9108)
- Unicorn-26.exe (PID: 9456)
- Unicorn-23086.exe (PID: 9048)
- Unicorn-40675.exe (PID: 9280)
- Unicorn-24339.exe (PID: 9296)
- Unicorn-56435.exe (PID: 9272)
- Unicorn-14255.exe (PID: 812)
- Unicorn-56606.exe (PID: 6108)
- Unicorn-56990.exe (PID: 9232)
- Unicorn-11070.exe (PID: 9928)
- Unicorn-7042.exe (PID: 9164)
- Unicorn-25299.exe (PID: 9984)
- Unicorn-47027.exe (PID: 10536)
- Unicorn-60903.exe (PID: 9396)
- Unicorn-1593.exe (PID: 8440)
- Unicorn-11785.exe (PID: 10032)
- Unicorn-36143.exe (PID: 10876)
- Unicorn-20254.exe (PID: 10908)
- Unicorn-30156.exe (PID: 5308)
- Unicorn-62418.exe (PID: 9588)
- Unicorn-54764.exe (PID: 11236)
- Unicorn-9594.exe (PID: 10408)
- Unicorn-3254.exe (PID: 11384)
- Unicorn-35443.exe (PID: 11024)
- Unicorn-37167.exe (PID: 9616)
- Unicorn-60327.exe (PID: 9192)
- Unicorn-33989.exe (PID: 10916)
- Unicorn-10010.exe (PID: 9644)
- Unicorn-2818.exe (PID: 12792)
- Unicorn-38424.exe (PID: 12784)
- Unicorn-18771.exe (PID: 12728)
- Unicorn-23330.exe (PID: 12816)
- Unicorn-4691.exe (PID: 8984)
- Unicorn-48620.exe (PID: 12636)
- Unicorn-23047.exe (PID: 12648)
- Unicorn-48205.exe (PID: 6572)
- Unicorn-53787.exe (PID: 9568)
- Unicorn-19576.exe (PID: 10324)
- Unicorn-20259.exe (PID: 8660)
- Unicorn-59341.exe (PID: 9500)
- Unicorn-43777.exe (PID: 4172)
- Unicorn-24255.exe (PID: 4976)
- Unicorn-2574.exe (PID: 9040)
- Unicorn-25520.exe (PID: 11260)
- Unicorn-3564.exe (PID: 10276)
- Unicorn-23177.exe (PID: 13984)
- Unicorn-49554.exe (PID: 14004)
- Unicorn-30561.exe (PID: 9524)
- Unicorn-135.exe (PID: 9920)
- Unicorn-41308.exe (PID: 11032)
- Unicorn-37529.exe (PID: 9468)
- Unicorn-9694.exe (PID: 10284)
- Unicorn-2932.exe (PID: 9704)
- Unicorn-46439.exe (PID: 8628)
- Unicorn-3150.exe (PID: 9248)
- Unicorn-29601.exe (PID: 15084)
- Unicorn-29601.exe (PID: 15076)
- Unicorn-12360.exe (PID: 15112)
- Unicorn-43778.exe (PID: 8904)
- Unicorn-39575.exe (PID: 12880)
- Unicorn-30857.exe (PID: 12044)
- Unicorn-27161.exe (PID: 10528)
- Unicorn-55479.exe (PID: 10884)
- Unicorn-39497.exe (PID: 10008)
- Unicorn-16672.exe (PID: 8884)
- Unicorn-16467.exe (PID: 11840)
- Unicorn-7238.exe (PID: 11208)
- Unicorn-44619.exe (PID: 6668)
- Unicorn-64711.exe (PID: 13132)
- Unicorn-57971.exe (PID: 10044)
- Unicorn-7997.exe (PID: 13044)
- Unicorn-38515.exe (PID: 12324)
- Unicorn-5008.exe (PID: 11216)
- Unicorn-29601.exe (PID: 15068)
- Unicorn-28417.exe (PID: 13124)
- Unicorn-54982.exe (PID: 2800)
- Unicorn-63010.exe (PID: 14424)
- Unicorn-14281.exe (PID: 5452)
- Unicorn-39579.exe (PID: 11848)
- Unicorn-27302.exe (PID: 11244)
- Unicorn-5662.exe (PID: 14532)
- Unicorn-48345.exe (PID: 6264)
- Unicorn-28722.exe (PID: 13896)
- Unicorn-42101.exe (PID: 12076)
- Unicorn-8006.exe (PID: 11628)
- Unicorn-30177.exe (PID: 9388)
- Unicorn-29518.exe (PID: 11692)
- Unicorn-11785.exe (PID: 10248)
- Unicorn-7997.exe (PID: 13052)
- Unicorn-46892.exe (PID: 12972)
- Unicorn-4463.exe (PID: 14792)
- Unicorn-30209.exe (PID: 11832)
- Unicorn-35173.exe (PID: 5680)
- Unicorn-47577.exe (PID: 12116)
- Unicorn-42943.exe (PID: 10504)
- Unicorn-3259.exe (PID: 17356)
- Unicorn-17534.exe (PID: 17376)
- Unicorn-2962.exe (PID: 11228)
- Unicorn-12372.exe (PID: 17392)
- Unicorn-28722.exe (PID: 13888)
- Unicorn-38801.exe (PID: 17204)
- Unicorn-38801.exe (PID: 17212)
- Unicorn-18167.exe (PID: 8252)
Checks supported languages
- Unicorn-6310.exe (PID: 920)
- 1 (454).exe (PID: 5304)
- Unicorn-64400.exe (PID: 7392)
- Unicorn-57623.exe (PID: 7380)
- Unicorn-26067.exe (PID: 7444)
- Unicorn-40025.exe (PID: 7528)
- Unicorn-17707.exe (PID: 7472)
- Unicorn-34134.exe (PID: 7480)
- Unicorn-2522.exe (PID: 7512)
- Unicorn-63378.exe (PID: 7460)
- Unicorn-27530.exe (PID: 7556)
- Unicorn-58521.exe (PID: 7544)
- Unicorn-48115.exe (PID: 7584)
- Unicorn-13165.exe (PID: 7788)
- Unicorn-7929.exe (PID: 7576)
- Unicorn-14556.exe (PID: 7776)
- Unicorn-39807.exe (PID: 7808)
- Unicorn-41099.exe (PID: 7824)
- Unicorn-51313.exe (PID: 7816)
- Unicorn-14364.exe (PID: 7864)
- Unicorn-28755.exe (PID: 7872)
- Unicorn-8889.exe (PID: 7880)
- Unicorn-55205.exe (PID: 7888)
- Unicorn-49075.exe (PID: 7896)
- Unicorn-42953.exe (PID: 7904)
- Unicorn-46772.exe (PID: 7916)
- Unicorn-3296.exe (PID: 7924)
- Unicorn-9486.exe (PID: 8128)
- Unicorn-52557.exe (PID: 8144)
- Unicorn-54411.exe (PID: 8160)
- Unicorn-61188.exe (PID: 8168)
- Unicorn-29907.exe (PID: 8188)
- Unicorn-13378.exe (PID: 7172)
- Unicorn-39756.exe (PID: 6964)
- Unicorn-21638.exe (PID: 728)
- Unicorn-53596.exe (PID: 5548)
- Unicorn-16093.exe (PID: 4920)
- Unicorn-44681.exe (PID: 4488)
- Unicorn-59626.exe (PID: 6132)
- Unicorn-46627.exe (PID: 7236)
- Unicorn-61017.exe (PID: 5124)
- Unicorn-45236.exe (PID: 6184)
- Unicorn-65101.exe (PID: 6540)
- Unicorn-13762.exe (PID: 4408)
- Unicorn-21665.exe (PID: 7304)
- Unicorn-56833.exe (PID: 6468)
- Unicorn-54033.exe (PID: 1184)
- Unicorn-49896.exe (PID: 4120)
- Unicorn-43119.exe (PID: 7296)
- Unicorn-140.exe (PID: 7312)
- Unicorn-31851.exe (PID: 6644)
- Unicorn-17031.exe (PID: 7188)
- Unicorn-59839.exe (PID: 7152)
- Unicorn-44058.exe (PID: 7232)
- Unicorn-8500.exe (PID: 2516)
- Unicorn-37089.exe (PID: 5048)
- Unicorn-61520.exe (PID: 4944)
- Unicorn-9055.exe (PID: 5936)
- Unicorn-14914.exe (PID: 2108)
- Unicorn-21883.exe (PID: 7268)
- Unicorn-62709.exe (PID: 2772)
- Unicorn-41749.exe (PID: 7224)
- Unicorn-43695.exe (PID: 7256)
- Unicorn-62724.exe (PID: 7364)
- Unicorn-39803.exe (PID: 5504)
- Unicorn-55185.exe (PID: 7420)
- Unicorn-13060.exe (PID: 7208)
- Unicorn-19731.exe (PID: 1388)
- Unicorn-25761.exe (PID: 5964)
- Unicorn-21677.exe (PID: 4188)
- Unicorn-20093.exe (PID: 6752)
- Unicorn-60471.exe (PID: 6592)
- Unicorn-52211.exe (PID: 900)
- Unicorn-44619.exe (PID: 6668)
- Unicorn-19273.exe (PID: 7432)
- Unicorn-39859.exe (PID: 2040)
- Unicorn-60955.exe (PID: 3300)
- Unicorn-53342.exe (PID: 7676)
- Unicorn-3586.exe (PID: 2092)
- Unicorn-53772.exe (PID: 3332)
- Unicorn-30783.exe (PID: 7848)
- Unicorn-15839.exe (PID: 5556)
- Unicorn-14255.exe (PID: 812)
- Unicorn-14368.exe (PID: 8084)
- Unicorn-3970.exe (PID: 8060)
- Unicorn-43419.exe (PID: 7876)
- Unicorn-21437.exe (PID: 6068)
- Unicorn-42673.exe (PID: 8124)
- Unicorn-34505.exe (PID: 2644)
- Unicorn-30156.exe (PID: 5308)
- Unicorn-35173.exe (PID: 5680)
- Unicorn-17785.exe (PID: 7992)
- Unicorn-49087.exe (PID: 7972)
- Unicorn-9185.exe (PID: 5576)
- Unicorn-43996.exe (PID: 1676)
- Unicorn-825.exe (PID: 8200)
- Unicorn-57447.exe (PID: 8212)
- Unicorn-25351.exe (PID: 8228)
- Unicorn-18167.exe (PID: 8252)
- Unicorn-654.exe (PID: 8264)
- Unicorn-44903.exe (PID: 8028)
- Unicorn-39357.exe (PID: 8292)
- Unicorn-25351.exe (PID: 8232)
- Unicorn-32511.exe (PID: 8344)
- Unicorn-5122.exe (PID: 8368)
- Unicorn-23597.exe (PID: 8384)
- Unicorn-20582.exe (PID: 8324)
- Unicorn-51007.exe (PID: 8760)
- Unicorn-56269.exe (PID: 8432)
- Unicorn-56004.exe (PID: 8420)
- Unicorn-1593.exe (PID: 8440)
- Unicorn-57037.exe (PID: 8784)
- Unicorn-13405.exe (PID: 8460)
- Unicorn-20944.exe (PID: 8504)
- Unicorn-9782.exe (PID: 8812)
- Unicorn-52569.exe (PID: 8616)
- Unicorn-46439.exe (PID: 8628)
- Unicorn-20259.exe (PID: 8660)
- Unicorn-23789.exe (PID: 8668)
- Unicorn-30373.exe (PID: 8376)
- Unicorn-34406.exe (PID: 8688)
- Unicorn-48299.exe (PID: 8720)
- Unicorn-26503.exe (PID: 8700)
- Unicorn-51099.exe (PID: 8708)
- Unicorn-37363.exe (PID: 8728)
- Unicorn-22035.exe (PID: 8540)
- Unicorn-35033.exe (PID: 8852)
- Unicorn-22035.exe (PID: 8532)
- Unicorn-8412.exe (PID: 8868)
- Unicorn-62643.exe (PID: 8576)
- Unicorn-54707.exe (PID: 8588)
- Unicorn-36617.exe (PID: 8748)
- Unicorn-43778.exe (PID: 8904)
- Unicorn-47115.exe (PID: 8920)
- Unicorn-44937.exe (PID: 8940)
- Unicorn-39501.exe (PID: 8972)
- Unicorn-16672.exe (PID: 8884)
- Unicorn-4447.exe (PID: 9008)
- Unicorn-3560.exe (PID: 8512)
- Unicorn-4691.exe (PID: 8984)
- Unicorn-21241.exe (PID: 8000)
- Unicorn-16341.exe (PID: 7412)
- Unicorn-30076.exe (PID: 6244)
- Unicorn-42983.exe (PID: 4892)
- Unicorn-12257.exe (PID: 7356)
- Unicorn-23086.exe (PID: 9048)
- Unicorn-2574.exe (PID: 9040)
- Unicorn-11318.exe (PID: 9224)
- Unicorn-56990.exe (PID: 9232)
- Unicorn-3150.exe (PID: 9248)
- Unicorn-56435.exe (PID: 9272)
- Unicorn-22755.exe (PID: 9336)
- Unicorn-30177.exe (PID: 9388)
- Unicorn-40675.exe (PID: 9280)
- Unicorn-59149.exe (PID: 9288)
- Unicorn-24339.exe (PID: 9296)
- Unicorn-49227.exe (PID: 9428)
- Unicorn-45938.exe (PID: 9436)
- Unicorn-60903.exe (PID: 9396)
- Unicorn-37529.exe (PID: 9468)
- Unicorn-30561.exe (PID: 9524)
- Unicorn-41178.exe (PID: 9548)
- Unicorn-40129.exe (PID: 10160)
- Unicorn-40051.exe (PID: 9576)
- Unicorn-62418.exe (PID: 9588)
- Unicorn-37167.exe (PID: 9616)
- Unicorn-25647.exe (PID: 10196)
- Unicorn-10524.exe (PID: 9624)
- Unicorn-32699.exe (PID: 9488)
- Unicorn-59341.exe (PID: 9500)
- Unicorn-53787.exe (PID: 9568)
- Unicorn-10010.exe (PID: 9644)
- Unicorn-60909.exe (PID: 9652)
- Unicorn-59751.exe (PID: 9108)
- Unicorn-9735.exe (PID: 9184)
- Unicorn-26.exe (PID: 9456)
- Unicorn-62465.exe (PID: 9136)
- Unicorn-56606.exe (PID: 6108)
- Unicorn-23470.exe (PID: 9172)
- Unicorn-24255.exe (PID: 10232)
- Unicorn-47857.exe (PID: 9720)
- Unicorn-21215.exe (PID: 9960)
- Unicorn-25299.exe (PID: 9984)
- Unicorn-39497.exe (PID: 10008)
- Unicorn-57971.exe (PID: 10044)
- Unicorn-37529.exe (PID: 9476)
- Unicorn-7042.exe (PID: 9164)
- Unicorn-16646.exe (PID: 9664)
- Unicorn-2911.exe (PID: 9676)
- Unicorn-2932.exe (PID: 9704)
- Unicorn-24255.exe (PID: 4976)
- Unicorn-54982.exe (PID: 2800)
- Unicorn-60327.exe (PID: 9192)
- Unicorn-48205.exe (PID: 6572)
- Unicorn-29611.exe (PID: 9636)
- Unicorn-54903.exe (PID: 7648)
- Unicorn-52481.exe (PID: 10068)
- Unicorn-50343.exe (PID: 10144)
- Unicorn-19576.exe (PID: 10324)
- Unicorn-65480.exe (PID: 10352)
- Unicorn-27977.exe (PID: 10332)
- Unicorn-53804.exe (PID: 10420)
- Unicorn-20284.exe (PID: 10584)
- Unicorn-34391.exe (PID: 2332)
- Unicorn-11811.exe (PID: 5020)
- Unicorn-32637.exe (PID: 10480)
- Unicorn-23126.exe (PID: 10608)
- Unicorn-9694.exe (PID: 10284)
- Unicorn-18247.exe (PID: 10624)
- Unicorn-20385.exe (PID: 10488)
- Unicorn-34098.exe (PID: 10308)
- Unicorn-30691.exe (PID: 10432)
- Unicorn-11070.exe (PID: 9928)
- Unicorn-36529.exe (PID: 10640)
- Unicorn-28361.exe (PID: 10660)
- Unicorn-50919.exe (PID: 10680)
- Unicorn-47027.exe (PID: 10536)
- Unicorn-42943.exe (PID: 10504)
- Unicorn-56849.exe (PID: 9972)
- Unicorn-43113.exe (PID: 9944)
- Unicorn-36143.exe (PID: 10876)
- Unicorn-45941.exe (PID: 10572)
- Unicorn-52071.exe (PID: 10568)
- Unicorn-17261.exe (PID: 7736)
- Unicorn-33989.exe (PID: 10916)
- Unicorn-3564.exe (PID: 10276)
- Unicorn-27161.exe (PID: 10528)
- Unicorn-61344.exe (PID: 10956)
- Unicorn-33191.exe (PID: 10616)
- Unicorn-55479.exe (PID: 10884)
- Unicorn-9128.exe (PID: 10900)
- Unicorn-20254.exe (PID: 10908)
- Unicorn-41743.exe (PID: 10948)
- Unicorn-45828.exe (PID: 10972)
- Unicorn-135.exe (PID: 9920)
- Unicorn-25136.exe (PID: 11064)
- Unicorn-5008.exe (PID: 11216)
- Unicorn-31742.exe (PID: 11184)
- Unicorn-7238.exe (PID: 11208)
- Unicorn-25621.exe (PID: 11200)
- Unicorn-54764.exe (PID: 11236)
- Unicorn-2962.exe (PID: 11228)
- Unicorn-32642.exe (PID: 11016)
- Unicorn-35443.exe (PID: 11024)
- Unicorn-41308.exe (PID: 11032)
- Unicorn-21707.exe (PID: 11040)
- Unicorn-58293.exe (PID: 10992)
- Unicorn-36311.exe (PID: 3900)
- Unicorn-27686.exe (PID: 11364)
- Unicorn-58485.exe (PID: 11172)
- Unicorn-16445.exe (PID: 6560)
- Unicorn-3346.exe (PID: 11348)
- Unicorn-55724.exe (PID: 11420)
- Unicorn-6185.exe (PID: 11252)
- Unicorn-25520.exe (PID: 11260)
- Unicorn-11785.exe (PID: 10248)
- Unicorn-52163.exe (PID: 10040)
- Unicorn-9594.exe (PID: 10408)
- Unicorn-25407.exe (PID: 10924)
- Unicorn-47001.exe (PID: 11468)
- Unicorn-11785.exe (PID: 10032)
- Unicorn-28745.exe (PID: 10984)
- Unicorn-30281.exe (PID: 11724)
- Unicorn-2486.exe (PID: 11112)
- Unicorn-3254.exe (PID: 11384)
- Unicorn-27302.exe (PID: 11244)
- Unicorn-49331.exe (PID: 11812)
- Unicorn-18583.exe (PID: 11700)
- Unicorn-38184.exe (PID: 11712)
- Unicorn-59616.exe (PID: 11752)
- Unicorn-8006.exe (PID: 11628)
- Unicorn-13679.exe (PID: 11736)
- Unicorn-59616.exe (PID: 11744)
- Unicorn-1692.exe (PID: 11660)
- Unicorn-30209.exe (PID: 11832)
- Unicorn-16467.exe (PID: 11840)
- Unicorn-49231.exe (PID: 11804)
- Unicorn-6715.exe (PID: 11856)
- Unicorn-29518.exe (PID: 11692)
- Unicorn-39579.exe (PID: 11848)
- Unicorn-14328.exe (PID: 11864)
- Unicorn-30857.exe (PID: 12044)
- Unicorn-42101.exe (PID: 12076)
- Unicorn-46186.exe (PID: 12104)
- Unicorn-47577.exe (PID: 12116)
- Unicorn-43685.exe (PID: 12252)
- Unicorn-34754.exe (PID: 12236)
- Unicorn-43685.exe (PID: 12244)
- Unicorn-43777.exe (PID: 4172)
- Unicorn-706.exe (PID: 12268)
- Unicorn-30041.exe (PID: 12280)
- Unicorn-441.exe (PID: 12260)
- Unicorn-2029.exe (PID: 5740)
- Unicorn-23330.exe (PID: 12816)
- Unicorn-38424.exe (PID: 12784)
- Unicorn-2818.exe (PID: 12792)
- Unicorn-48272.exe (PID: 5024)
- Unicorn-48345.exe (PID: 6264)
- Unicorn-14281.exe (PID: 5452)
- Unicorn-44161.exe (PID: 12292)
- Unicorn-38515.exe (PID: 12324)
- Unicorn-24825.exe (PID: 12300)
- Unicorn-61073.exe (PID: 12352)
- Unicorn-24779.exe (PID: 12332)
- Unicorn-44380.exe (PID: 12340)
- Unicorn-35029.exe (PID: 12596)
- Unicorn-26555.exe (PID: 12548)
- Unicorn-44837.exe (PID: 12584)
- Unicorn-48620.exe (PID: 12636)
- Unicorn-23047.exe (PID: 12648)
- Unicorn-48620.exe (PID: 12628)
- Unicorn-16057.exe (PID: 12432)
- Unicorn-12335.exe (PID: 12456)
- Unicorn-62927.exe (PID: 12464)
- Unicorn-29439.exe (PID: 12500)
- Unicorn-55143.exe (PID: 12608)
- Unicorn-12832.exe (PID: 12660)
- Unicorn-31682.exe (PID: 12980)
- Unicorn-18771.exe (PID: 12728)
- Unicorn-4956.exe (PID: 12748)
- Unicorn-39575.exe (PID: 12880)
- Unicorn-38506.exe (PID: 12956)
- Unicorn-21732.exe (PID: 12996)
- Unicorn-46892.exe (PID: 12972)
- Unicorn-21732.exe (PID: 12988)
- Unicorn-21732.exe (PID: 13004)
- Unicorn-45413.exe (PID: 12668)
- Unicorn-47551.exe (PID: 12704)
- Unicorn-63228.exe (PID: 13108)
- Unicorn-32501.exe (PID: 13096)
- Unicorn-28417.exe (PID: 13116)
- Unicorn-28417.exe (PID: 13124)
- Unicorn-7805.exe (PID: 13172)
- Unicorn-33123.exe (PID: 13016)
- Unicorn-7997.exe (PID: 13044)
- Unicorn-1312.exe (PID: 13060)
- Unicorn-39850.exe (PID: 13152)
- Unicorn-64711.exe (PID: 13132)
- Unicorn-23177.exe (PID: 13984)
- Unicorn-18687.exe (PID: 13484)
- Unicorn-7997.exe (PID: 13052)
- Unicorn-8464.exe (PID: 13316)
- Unicorn-38723.exe (PID: 13384)
- Unicorn-7997.exe (PID: 13036)
- Unicorn-15155.exe (PID: 13028)
- Unicorn-62071.exe (PID: 13964)
- Unicorn-21540.exe (PID: 13164)
- Unicorn-25533.exe (PID: 13236)
- Unicorn-44391.exe (PID: 13596)
- Unicorn-4681.exe (PID: 13636)
- Unicorn-49554.exe (PID: 14036)
- Unicorn-62071.exe (PID: 13968)
- Unicorn-30577.exe (PID: 13652)
- Unicorn-29708.exe (PID: 13252)
- Unicorn-49554.exe (PID: 14004)
- Unicorn-33984.exe (PID: 13144)
- Unicorn-26555.exe (PID: 13220)
- Unicorn-34588.exe (PID: 13936)
- Unicorn-34588.exe (PID: 13928)
- Unicorn-51381.exe (PID: 13824)
- Unicorn-42948.exe (PID: 13836)
- Unicorn-14716.exe (PID: 13744)
- Unicorn-49335.exe (PID: 13808)
- Unicorn-27681.exe (PID: 13800)
- Unicorn-39056.exe (PID: 13768)
- Unicorn-23347.exe (PID: 13852)
- Unicorn-18879.exe (PID: 13680)
- Unicorn-33190.exe (PID: 13784)
- Unicorn-.exe (PID: 13664)
- Unicorn-53611.exe (PID: 13752)
- Unicorn-37083.exe (PID: 13944)
- Unicorn-33190.exe (PID: 13776)
- Unicorn-28722.exe (PID: 13896)
- Unicorn-25922.exe (PID: 13904)
- Unicorn-14987.exe (PID: 13912)
- Unicorn-28722.exe (PID: 13888)
- Unicorn-48044.exe (PID: 13732)
- Unicorn-55657.exe (PID: 13760)
- Unicorn-34282.exe (PID: 13860)
- Unicorn-51552.exe (PID: 13724)
- Unicorn-28722.exe (PID: 13880)
- Unicorn-10903.exe (PID: 13872)
- Unicorn-14987.exe (PID: 13920)
- Unicorn-4318.exe (PID: 13844)
- Unicorn-48428.exe (PID: 14044)
- Unicorn-55273.exe (PID: 13628)
- Unicorn-44173.exe (PID: 6640)
- Unicorn-29601.exe (PID: 15076)
- Unicorn-29601.exe (PID: 15084)
- Unicorn-12360.exe (PID: 15112)
- Unicorn-60317.exe (PID: 14396)
- Unicorn-58926.exe (PID: 14404)
- Unicorn-11208.exe (PID: 14440)
- Unicorn-9725.exe (PID: 14412)
- Unicorn-17073.exe (PID: 14432)
- Unicorn-11208.exe (PID: 14448)
- Unicorn-63010.exe (PID: 14464)
- Unicorn-63010.exe (PID: 14456)
- Unicorn-11208.exe (PID: 14472)
- Unicorn-63010.exe (PID: 14424)
- Unicorn-35621.exe (PID: 14484)
- Unicorn-5662.exe (PID: 14532)
- Unicorn-44292.exe (PID: 14524)
- Unicorn-56809.exe (PID: 14508)
- Unicorn-21733.exe (PID: 14516)
- Unicorn-54331.exe (PID: 14556)
- Unicorn-21574.exe (PID: 14572)
- Unicorn-7032.exe (PID: 14492)
- Unicorn-18469.exe (PID: 14580)
- Unicorn-36005.exe (PID: 14596)
- Unicorn-35740.exe (PID: 14604)
- Unicorn-61277.exe (PID: 14696)
- Unicorn-10659.exe (PID: 14668)
- Unicorn-46311.exe (PID: 14640)
- Unicorn-11500.exe (PID: 14660)
- Unicorn-14769.exe (PID: 14676)
- Unicorn-47442.exe (PID: 14740)
- Unicorn-22383.exe (PID: 14684)
- Unicorn-12168.exe (PID: 14708)
- Unicorn-27598.exe (PID: 14716)
- Unicorn-24329.exe (PID: 14732)
- Unicorn-50971.exe (PID: 14768)
- Unicorn-30721.exe (PID: 14564)
- Unicorn-8163.exe (PID: 14620)
- Unicorn-38143.exe (PID: 14652)
- Unicorn-108.exe (PID: 15140)
- Unicorn-10000.exe (PID: 15012)
- Unicorn-9560.exe (PID: 15132)
- Unicorn-18225.exe (PID: 15120)
- Unicorn-59139.exe (PID: 14748)
- Unicorn-8931.exe (PID: 14964)
- Unicorn-23321.exe (PID: 15004)
- Unicorn-29601.exe (PID: 15068)
- Unicorn-27405.exe (PID: 14976)
- Unicorn-21465.exe (PID: 14996)
- Unicorn-4400.exe (PID: 14988)
- Unicorn-43415.exe (PID: 14808)
- Unicorn-4463.exe (PID: 14792)
- Unicorn-38527.exe (PID: 14876)
- Unicorn-16715.exe (PID: 14852)
- Unicorn-59615.exe (PID: 14908)
- Unicorn-49223.exe (PID: 15576)
- Unicorn-58900.exe (PID: 15552)
- Unicorn-34103.exe (PID: 14776)
- Unicorn-58542.exe (PID: 14760)
- Unicorn-48039.exe (PID: 15532)
- Unicorn-47198.exe (PID: 15396)
- Unicorn-56570.exe (PID: 5072)
- Unicorn-16737.exe (PID: 15388)
- Unicorn-15860.exe (PID: 8120)
- Unicorn-23735.exe (PID: 15036)
- Unicorn-23735.exe (PID: 15028)
- Unicorn-8931.exe (PID: 14960)
- Unicorn-23735.exe (PID: 15044)
- Unicorn-52215.exe (PID: 15416)
- Unicorn-2922.exe (PID: 15508)
- Unicorn-29601.exe (PID: 15060)
- Unicorn-29601.exe (PID: 15148)
- Unicorn-46020.exe (PID: 15988)
- Unicorn-45323.exe (PID: 15940)
- Unicorn-57775.exe (PID: 15932)
- Unicorn-38209.exe (PID: 15924)
- Unicorn-20819.exe (PID: 15996)
- Unicorn-10000.exe (PID: 15020)
- Unicorn-20935.exe (PID: 15052)
- Unicorn-54453.exe (PID: 15964)
- Unicorn-44074.exe (PID: 15916)
- Unicorn-41936.exe (PID: 15972)
- Unicorn-49607.exe (PID: 15952)
- Unicorn-37660.exe (PID: 16020)
- Unicorn-28771.exe (PID: 16412)
- Unicorn-41936.exe (PID: 15980)
- Unicorn-4437.exe (PID: 16032)
- Unicorn-57852.exe (PID: 16348)
- Unicorn-57852.exe (PID: 7400)
- Unicorn-28771.exe (PID: 16404)
- Unicorn-28771.exe (PID: 16396)
- Unicorn-23295.exe (PID: 16424)
- Unicorn-35977.exe (PID: 16444)
- Unicorn-55313.exe (PID: 16452)
- Unicorn-51308.exe (PID: 16120)
- Unicorn-37354.exe (PID: 16004)
- Unicorn-12372.exe (PID: 17392)
- Unicorn-3259.exe (PID: 17356)
- Unicorn-17534.exe (PID: 17376)
- Unicorn-61065.exe (PID: 16808)
- Unicorn-12142.exe (PID: 16760)
- Unicorn-47590.exe (PID: 16740)
- Unicorn-12854.exe (PID: 16752)
- Unicorn-13373.exe (PID: 16768)
- Unicorn-42783.exe (PID: 16780)
- Unicorn-49383.exe (PID: 16840)
- Unicorn-9118.exe (PID: 16848)
- Unicorn-54135.exe (PID: 16856)
- Unicorn-21270.exe (PID: 16872)
- Unicorn-22547.exe (PID: 16864)
- Unicorn-21270.exe (PID: 16880)
- Unicorn-44921.exe (PID: 16972)
- Unicorn-56529.exe (PID: 6072)
- Unicorn-60820.exe (PID: 16908)
- Unicorn-46238.exe (PID: 4024)
- Unicorn-6855.exe (PID: 5796)
- Unicorn-10302.exe (PID: 16896)
- Unicorn-35661.exe (PID: 17400)
- Unicorn-38801.exe (PID: 17204)
- Unicorn-38801.exe (PID: 17212)
- Unicorn-6374.exe (PID: 17196)
- Unicorn-4204.exe (PID: 4688)
- Unicorn-50810.exe (PID: 17228)
- Unicorn-27840.exe (PID: 17188)
- Unicorn-29978.exe (PID: 16980)
- Unicorn-29786.exe (PID: 17180)
- Unicorn-63306.exe (PID: 16988)
- Unicorn-7535.exe (PID: 16888)
- Unicorn-34422.exe (PID: 16820)
- Unicorn-3502.exe (PID: 18064)
- Unicorn-11967.exe (PID: 7600)
- Unicorn-6367.exe (PID: 7636)
- Unicorn-16217.exe (PID: 18056)
- Unicorn-55735.exe (PID: 18428)
- Unicorn-11967.exe (PID: 17512)
- Unicorn-13332.exe (PID: 17724)
- Unicorn-8625.exe (PID: 18400)
- Unicorn-39975.exe (PID: 17716)
- Unicorn-11967.exe (PID: 7592)
- Unicorn-25702.exe (PID: 7500)
- Unicorn-11967.exe (PID: 17416)
- Unicorn-11967.exe (PID: 17496)
- Unicorn-1464.exe (PID: 18016)
- Unicorn-31568.exe (PID: 17440)
- Unicorn-11967.exe (PID: 17432)
- Unicorn-11578.exe (PID: 18032)
- Unicorn-2377.exe (PID: 17640)
- Unicorn-40359.exe (PID: 17996)
- Unicorn-23831.exe (PID: 18008)
- Unicorn-48527.exe (PID: 17960)
- Unicorn-11967.exe (PID: 17536)
- Unicorn-23432.exe (PID: 17544)
- Unicorn-63135.exe (PID: 17556)
- Unicorn-23432.exe (PID: 17472)
- Unicorn-31568.exe (PID: 17448)
- Unicorn-34329.exe (PID: 17944)
- Unicorn-56695.exe (PID: 17952)
- Unicorn-62917.exe (PID: 17936)
Create files in a temporary directory
- 1 (454).exe (PID: 5304)
- Unicorn-64400.exe (PID: 7392)
- Unicorn-57623.exe (PID: 7380)
- Unicorn-6310.exe (PID: 920)
- Unicorn-26067.exe (PID: 7444)
- Unicorn-17707.exe (PID: 7472)
- Unicorn-63378.exe (PID: 7460)
- Unicorn-2522.exe (PID: 7512)
- Unicorn-58521.exe (PID: 7544)
- Unicorn-34134.exe (PID: 7480)
- Unicorn-7929.exe (PID: 7576)
- Unicorn-40025.exe (PID: 7528)
- Unicorn-27530.exe (PID: 7556)
- Unicorn-48115.exe (PID: 7584)
- Unicorn-13165.exe (PID: 7788)
- Unicorn-14556.exe (PID: 7776)
- Unicorn-41099.exe (PID: 7824)
- Unicorn-39807.exe (PID: 7808)
- Unicorn-51313.exe (PID: 7816)
- Unicorn-14364.exe (PID: 7864)
- Unicorn-55205.exe (PID: 7888)
- Unicorn-8889.exe (PID: 7880)
- Unicorn-46772.exe (PID: 7916)
- Unicorn-42953.exe (PID: 7904)
- Unicorn-3296.exe (PID: 7924)
- Unicorn-49075.exe (PID: 7896)
- Unicorn-52557.exe (PID: 8144)
- Unicorn-54411.exe (PID: 8160)
- Unicorn-61188.exe (PID: 8168)
- Unicorn-9486.exe (PID: 8128)
- Unicorn-13378.exe (PID: 7172)
- Unicorn-39756.exe (PID: 6964)
- Unicorn-29907.exe (PID: 8188)
- Unicorn-21638.exe (PID: 728)
- Unicorn-44681.exe (PID: 4488)
- Unicorn-53596.exe (PID: 5548)
- Unicorn-65101.exe (PID: 6540)
- Unicorn-13762.exe (PID: 4408)
- Unicorn-16093.exe (PID: 4920)
- Unicorn-54033.exe (PID: 1184)
- Unicorn-17031.exe (PID: 7188)
- Unicorn-61017.exe (PID: 5124)
- Unicorn-45236.exe (PID: 6184)
- Unicorn-43119.exe (PID: 7296)
- Unicorn-56833.exe (PID: 6468)
- Unicorn-49896.exe (PID: 4120)
- Unicorn-14914.exe (PID: 2108)
- Unicorn-55185.exe (PID: 7420)
- Unicorn-62709.exe (PID: 2772)
- Unicorn-44058.exe (PID: 7232)
- Unicorn-13060.exe (PID: 7208)
- Unicorn-140.exe (PID: 7312)
- Unicorn-19731.exe (PID: 1388)
- Unicorn-31851.exe (PID: 6644)
- Unicorn-59626.exe (PID: 6132)
- Unicorn-59839.exe (PID: 7152)
- Unicorn-39859.exe (PID: 2040)
- Unicorn-8500.exe (PID: 2516)
- Unicorn-61520.exe (PID: 4944)
- Unicorn-37089.exe (PID: 5048)
- Unicorn-60471.exe (PID: 6592)
- Unicorn-21677.exe (PID: 4188)
- Unicorn-41749.exe (PID: 7224)
- Unicorn-17785.exe (PID: 7992)
- Unicorn-21883.exe (PID: 7268)
- Unicorn-53342.exe (PID: 7676)
- Unicorn-62724.exe (PID: 7364)
- Unicorn-53772.exe (PID: 3332)
- Unicorn-3970.exe (PID: 8060)
- Unicorn-49087.exe (PID: 7972)
- Unicorn-60955.exe (PID: 3300)
- Unicorn-20093.exe (PID: 6752)
- Unicorn-43996.exe (PID: 1676)
- Unicorn-51007.exe (PID: 8760)
- Unicorn-57037.exe (PID: 8784)
- Unicorn-9782.exe (PID: 8812)
- Unicorn-5122.exe (PID: 8368)
- Unicorn-52211.exe (PID: 900)
- Unicorn-3586.exe (PID: 2092)
- Unicorn-30783.exe (PID: 7848)
- Unicorn-42673.exe (PID: 8124)
- Unicorn-25761.exe (PID: 5964)
- Unicorn-43695.exe (PID: 7256)
- Unicorn-25351.exe (PID: 8232)
- Unicorn-62643.exe (PID: 8576)
- Unicorn-14368.exe (PID: 8084)
- Unicorn-34505.exe (PID: 2644)
- Unicorn-34406.exe (PID: 8688)
- Unicorn-21665.exe (PID: 7304)
- Unicorn-25351.exe (PID: 8228)
- Unicorn-9185.exe (PID: 5576)
- Unicorn-46627.exe (PID: 7236)
- Unicorn-19273.exe (PID: 7432)
- Unicorn-43419.exe (PID: 7876)
- Unicorn-13405.exe (PID: 8460)
- Unicorn-26503.exe (PID: 8700)
- Unicorn-22035.exe (PID: 8540)
- Unicorn-32511.exe (PID: 8344)
- Unicorn-37363.exe (PID: 8728)
- Unicorn-36617.exe (PID: 8748)
- Unicorn-44937.exe (PID: 8940)
- Unicorn-9055.exe (PID: 5936)
- Unicorn-57447.exe (PID: 8212)
- Unicorn-654.exe (PID: 8264)
- Unicorn-22035.exe (PID: 8532)
- Unicorn-23789.exe (PID: 8668)
- Unicorn-16341.exe (PID: 7412)
- Unicorn-21241.exe (PID: 8000)
- Unicorn-20582.exe (PID: 8324)
- Unicorn-22755.exe (PID: 9336)
- Unicorn-59149.exe (PID: 9288)
- Unicorn-44903.exe (PID: 8028)
- Unicorn-35033.exe (PID: 8852)
- Unicorn-12257.exe (PID: 7356)
- Unicorn-42983.exe (PID: 4892)
- Unicorn-52569.exe (PID: 8616)
- Unicorn-30076.exe (PID: 6244)
- Unicorn-40129.exe (PID: 10160)
- Unicorn-24255.exe (PID: 10232)
- Unicorn-54707.exe (PID: 8588)
- Unicorn-39357.exe (PID: 8292)
- Unicorn-25647.exe (PID: 10196)
- Unicorn-56269.exe (PID: 8432)
- Unicorn-23597.exe (PID: 8384)
- Unicorn-48299.exe (PID: 8720)
- Unicorn-30373.exe (PID: 8376)
- Unicorn-47115.exe (PID: 8920)
- Unicorn-18247.exe (PID: 10624)
- Unicorn-30691.exe (PID: 10432)
- Unicorn-4447.exe (PID: 9008)
- Unicorn-20944.exe (PID: 8504)
- Unicorn-60909.exe (PID: 9652)
- Unicorn-39803.exe (PID: 5504)
- Unicorn-15839.exe (PID: 5556)
- Unicorn-56004.exe (PID: 8420)
- Unicorn-3560.exe (PID: 8512)
- Unicorn-8412.exe (PID: 8868)
- Unicorn-45941.exe (PID: 10572)
- Unicorn-20284.exe (PID: 10584)
- Unicorn-52071.exe (PID: 10568)
- Unicorn-34391.exe (PID: 2332)
- Unicorn-21437.exe (PID: 6068)
- Unicorn-39501.exe (PID: 8972)
- Unicorn-56990.exe (PID: 9232)
- Unicorn-23086.exe (PID: 9048)
- Unicorn-56849.exe (PID: 9972)
- Unicorn-14255.exe (PID: 812)
- Unicorn-56606.exe (PID: 6108)
- Unicorn-1593.exe (PID: 8440)
- Unicorn-40675.exe (PID: 9280)
- Unicorn-56435.exe (PID: 9272)
- Unicorn-25299.exe (PID: 9984)
- Unicorn-11070.exe (PID: 9928)
- Unicorn-20254.exe (PID: 10908)
- Unicorn-47027.exe (PID: 10536)
- Unicorn-36143.exe (PID: 10876)
- Unicorn-60903.exe (PID: 9396)
- Unicorn-37167.exe (PID: 9616)
- Unicorn-9594.exe (PID: 10408)
- Unicorn-35443.exe (PID: 11024)
- Unicorn-7042.exe (PID: 9164)
- Unicorn-10010.exe (PID: 9644)
- Unicorn-3254.exe (PID: 11384)
- Unicorn-2818.exe (PID: 12792)
- Unicorn-23330.exe (PID: 12816)
- Unicorn-54764.exe (PID: 11236)
- Unicorn-18771.exe (PID: 12728)
- Unicorn-23047.exe (PID: 12648)
- Unicorn-48620.exe (PID: 12636)
- Unicorn-60327.exe (PID: 9192)
- Unicorn-4691.exe (PID: 8984)
- Unicorn-48205.exe (PID: 6572)
- Unicorn-30156.exe (PID: 5308)
- Unicorn-43777.exe (PID: 4172)
- Unicorn-19576.exe (PID: 10324)
- Unicorn-20259.exe (PID: 8660)
- Unicorn-59341.exe (PID: 9500)
- Unicorn-53787.exe (PID: 9568)
- Unicorn-62418.exe (PID: 9588)
- Unicorn-25520.exe (PID: 11260)
- Unicorn-2574.exe (PID: 9040)
- Unicorn-17261.exe (PID: 7736)
- Unicorn-40051.exe (PID: 9576)
- Unicorn-59751.exe (PID: 9108)
- Unicorn-33989.exe (PID: 10916)
- Unicorn-30561.exe (PID: 9524)
- Unicorn-3564.exe (PID: 10276)
- Unicorn-23177.exe (PID: 13984)
- Unicorn-49554.exe (PID: 14004)
- Unicorn-135.exe (PID: 9920)
- Unicorn-12360.exe (PID: 15112)
- Unicorn-9694.exe (PID: 10284)
- Unicorn-45938.exe (PID: 9436)
- Unicorn-37529.exe (PID: 9468)
- Unicorn-39575.exe (PID: 12880)
- Unicorn-16672.exe (PID: 8884)
- Unicorn-38424.exe (PID: 12784)
- Unicorn-2932.exe (PID: 9704)
- Unicorn-27161.exe (PID: 10528)
- Unicorn-44619.exe (PID: 6668)
- Unicorn-7238.exe (PID: 11208)
- Unicorn-24255.exe (PID: 4976)
- Unicorn-57971.exe (PID: 10044)
- Unicorn-7997.exe (PID: 13044)
- Unicorn-38515.exe (PID: 12324)
- Unicorn-8006.exe (PID: 11628)
- Unicorn-28417.exe (PID: 13124)
- Unicorn-5008.exe (PID: 11216)
- Unicorn-29601.exe (PID: 15068)
- Unicorn-64711.exe (PID: 13132)
- Unicorn-55479.exe (PID: 10884)
- Unicorn-63010.exe (PID: 14424)
- Unicorn-39579.exe (PID: 11848)
- Unicorn-7997.exe (PID: 13052)
- Unicorn-30177.exe (PID: 9388)
- Unicorn-27302.exe (PID: 11244)
- Unicorn-39497.exe (PID: 10008)
- Unicorn-16467.exe (PID: 11840)
- Unicorn-28722.exe (PID: 13896)
- Unicorn-48345.exe (PID: 6264)
- Unicorn-5662.exe (PID: 14532)
- Unicorn-11785.exe (PID: 10032)
- Unicorn-17534.exe (PID: 17376)
- Unicorn-29601.exe (PID: 15084)
- Unicorn-26.exe (PID: 9456)
- Unicorn-29601.exe (PID: 15076)
Creates files or folders in the user directory
- WerFault.exe (PID: 7676)
- WerFault.exe (PID: 8028)
- WerFault.exe (PID: 10564)
Reads the software policy settings
- slui.exe (PID: 6944)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable (generic) (52.9) |
|---|---|---|
| .exe | | | Generic Win/DOS Executable (23.5) |
| .exe | | | DOS Executable Generic (23.5) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
778
Monitored processes
636
Malicious processes
96
Suspicious processes
80
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 684 | C:\Users\admin\AppData\Local\Temp\Unicorn-49014.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-49014.exe | — | Unicorn-6310.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 | |||||||||||||||
| 728 | C:\Users\admin\AppData\Local\Temp\Unicorn-21638.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-21638.exe | Unicorn-17707.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 776 | C:\Users\admin\AppData\Local\Temp\Unicorn-2211.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2211.exe | — | Unicorn-23177.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 | |||||||||||||||
| 812 | C:\Users\admin\AppData\Local\Temp\Unicorn-14255.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-14255.exe | Unicorn-8889.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 900 | C:\Users\admin\AppData\Local\Temp\Unicorn-52211.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-52211.exe | Unicorn-65101.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 920 | C:\Users\admin\AppData\Local\Temp\Unicorn-6310.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-6310.exe | 1 (454).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1128 | C:\Users\admin\AppData\Local\Temp\Unicorn-59025.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-59025.exe | — | Unicorn-41308.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 | |||||||||||||||
| 1184 | C:\Users\admin\AppData\Local\Temp\Unicorn-54033.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-54033.exe | Unicorn-6310.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1388 | C:\Users\admin\AppData\Local\Temp\Unicorn-19731.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-19731.exe | Unicorn-21638.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1676 | C:\Users\admin\AppData\Local\Temp\Unicorn-43996.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-43996.exe | Unicorn-42953.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
17 298
Read events
17 298
Write events
0
Delete events
0
Modification events
Executable files
772
Suspicious files
9
Text files
3
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7676 | WerFault.exe | C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Unicorn-63378.ex_aebfc5975428a961324eb98ac36a32d79ba1215_407e21c5_61b60205-2b1e-4c00-a437-03f808b5ab64\Report.wer | — | |
MD5:— | SHA256:— | |||
| 5304 | 1 (454).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-6310.exe | executable | |
MD5:1BEDCA828302824C248FE9824E243126 | SHA256:9164CBF9D84883523D3AAB2BC728C23BA7684759B6CE2F5CAB5F201AC238E497 | |||
| 920 | Unicorn-6310.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-57623.exe | executable | |
MD5:E22A02FB424242672F767C7BF4133424 | SHA256:7E5C968B7EF8A96F70CDCC5959A45C627089E916F763B917161F631BDB670E93 | |||
| 7380 | Unicorn-57623.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-26067.exe | executable | |
MD5:E3F687F56DF284011562ABBD702DE8B1 | SHA256:11C0B6AFA0015C36A8E2E785D31F204FBCC3557B66B6EDB9BA63023C7BD60B94 | |||
| 7444 | Unicorn-26067.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2522.exe | executable | |
MD5:54792CC78CF06F6134CD83C72D158712 | SHA256:61E69D80916B8CFF38BE33E3D09F7E6EDED9246D11B436A2304F94F3DBE18FC1 | |||
| 7512 | Unicorn-2522.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-14556.exe | executable | |
MD5:8F9AA65ECD2CF2C8C592187DF812E092 | SHA256:F90E7C85C78E424B55D540E9531AA11CD0AD1DB3BAAB21E4F0FA4656E5AA09DB | |||
| 7676 | WerFault.exe | C:\ProgramData\Microsoft\Windows\WER\Temp\WERF4C3.tmp.WERInternalMetadata.xml | binary | |
MD5:8314889CB5F08ACD69A90299116AB060 | SHA256:6812720EDFD5AD0D4DEFF56C73720E3C70BE35B0AAD9DF8808047547FA9D3F31 | |||
| 7676 | WerFault.exe | C:\ProgramData\Microsoft\Windows\WER\Temp\WERF4F3.tmp.xml | xml | |
MD5:72C196D3DB530F0A5636ABF9411DF01C | SHA256:84B19548613B5CB327AD19F0FAF27E1C1AF7CA778A15AB339B20C5BA3CF486C5 | |||
| 7676 | WerFault.exe | C:\Users\admin\AppData\Local\CrashDumps\Unicorn-63378.exe.7460.dmp | binary | |
MD5:AC7B76D2E8F3031D681B430A73598EA5 | SHA256:85BF15B4466E8A832925D53BE66F4DCE8A21782CC841ABEFEC24F3BBA3165C18 | |||
| 7392 | Unicorn-64400.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-7929.exe | executable | |
MD5:1B2AB27C3D9DCC142DEC2E7021A84DC6 | SHA256:8B7B67EF8D5D04DC9BEC7DAA0ED7553BA4AF50A6AE852881AC3855ECA2B98A26 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
8
TCP/UDP connections
32
DNS requests
22
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
5496 | MoUsoCoreWorker.exe | GET | 200 | 23.48.23.141:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 2.17.190.73:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
2108 | backgroundTaskHost.exe | GET | 200 | 2.17.190.73:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
3284 | svchost.exe | GET | 200 | 23.48.23.159:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
5228 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
3284 | svchost.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl | unknown | — | — | whitelisted |
5228 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
9748 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
5496 | MoUsoCoreWorker.exe | 23.48.23.141:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
4208 | RUXIMICS.exe | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
5496 | MoUsoCoreWorker.exe | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
3216 | svchost.exe | 40.115.3.253:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 40.126.32.140:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 2.17.190.73:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
2108 | backgroundTaskHost.exe | 20.223.35.26:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
watson.events.data.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |