| File name: | 1 (651) |
| Full analysis: | https://app.any.run/tasks/0d478621-19a9-4feb-ac10-390605a2b202 |
| Verdict: | Malicious activity |
| Analysis date: | March 25, 2025, 01:51:18 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 66D08825D3DD73819AD7394A264D4D60 |
| SHA1: | 8A282D104DF043C4BE0DB2A6CDCB6EDE8FEA4D0F |
| SHA256: | 90D83CD06E4CBB32DBF5B2C7E38F8C815B5F1E446F986A1DF9B6597721EFEA7B |
| SSDEEP: | 6144:U7mgdyWE8DXHA55+mqeWiKax5tpqWvJGBB/xAeUATk/8SwjwpyAvhhLSCuz0Fpaa:Uag1XHA5omF7pfhaBJAeUAJx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- Unicorn-24273.exe (PID: 1184)
- Unicorn-43947.exe (PID: 1280)
- 1 (651).exe (PID: 7020)
- Unicorn-16456.exe (PID: 4172)
- Unicorn-13537.exe (PID: 5380)
- Unicorn-30123.exe (PID: 728)
- Unicorn-10257.exe (PID: 2096)
- Unicorn-23992.exe (PID: 1532)
- Unicorn-42923.exe (PID: 5548)
- Unicorn-43883.exe (PID: 4988)
- Unicorn-43883.exe (PID: 1660)
- Unicorn-41614.exe (PID: 668)
- Unicorn-23249.exe (PID: 720)
- Unicorn-61215.exe (PID: 5960)
- Unicorn-55350.exe (PID: 632)
- Unicorn-1543.exe (PID: 1240)
- Unicorn-50251.exe (PID: 7204)
- Unicorn-61910.exe (PID: 7256)
- Unicorn-19883.exe (PID: 7352)
- Unicorn-20075.exe (PID: 7384)
- Unicorn-19883.exe (PID: 7360)
- Unicorn-37672.exe (PID: 7416)
- Unicorn-61990.exe (PID: 7452)
- Unicorn-37672.exe (PID: 7424)
- Unicorn-33457.exe (PID: 7436)
- Unicorn-20075.exe (PID: 7392)
- Unicorn-5118.exe (PID: 7468)
- Unicorn-64683.exe (PID: 8084)
- Unicorn-12721.exe (PID: 8156)
- Unicorn-29768.exe (PID: 7292)
- Unicorn-63339.exe (PID: 7272)
- Unicorn-15134.exe (PID: 7528)
- Unicorn-62571.exe (PID: 7228)
- Unicorn-48112.exe (PID: 7572)
- Unicorn-48112.exe (PID: 7576)
- Unicorn-64790.exe (PID: 7460)
- Unicorn-59211.exe (PID: 3100)
- Unicorn-59211.exe (PID: 6576)
- Unicorn-4369.exe (PID: 7776)
- Unicorn-56715.exe (PID: 856)
- Unicorn-36849.exe (PID: 3008)
- Unicorn-37041.exe (PID: 4464)
- Unicorn-18104.exe (PID: 2692)
- Unicorn-28075.exe (PID: 4120)
- Unicorn-61323.exe (PID: 672)
- Unicorn-61323.exe (PID: 1096)
- Unicorn-9169.exe (PID: 7716)
- Unicorn-61515.exe (PID: 7736)
- Unicorn-41457.exe (PID: 6272)
- Unicorn-22904.exe (PID: 7860)
- Unicorn-28712.exe (PID: 7708)
- Unicorn-45864.exe (PID: 1228)
- Unicorn-20104.exe (PID: 7792)
- Unicorn-45864.exe (PID: 1180)
- Unicorn-3569.exe (PID: 7744)
- Unicorn-48313.exe (PID: 7756)
- Unicorn-43883.exe (PID: 900)
- Unicorn-24753.exe (PID: 7884)
- Unicorn-16555.exe (PID: 7320)
- Unicorn-65288.exe (PID: 7592)
- Unicorn-11370.exe (PID: 8072)
- Unicorn-60882.exe (PID: 6808)
- Unicorn-55304.exe (PID: 2516)
- Unicorn-43865.exe (PID: 7552)
- Unicorn-53010.exe (PID: 6392)
- Unicorn-4131.exe (PID: 7988)
- Unicorn-440.exe (PID: 7732)
- Unicorn-26908.exe (PID: 7992)
- Unicorn-48459.exe (PID: 6388)
- Unicorn-23217.exe (PID: 8120)
- Unicorn-16197.exe (PID: 1348)
- Unicorn-11422.exe (PID: 4268)
- Unicorn-22559.exe (PID: 8004)
- Unicorn-45522.exe (PID: 8208)
- Unicorn-64427.exe (PID: 7880)
- Unicorn-27531.exe (PID: 8320)
- Unicorn-37515.exe (PID: 8244)
- Unicorn-2408.exe (PID: 8272)
- Unicorn-25995.exe (PID: 8380)
- Unicorn-59819.exe (PID: 8300)
- Unicorn-39382.exe (PID: 8348)
- Unicorn-46306.exe (PID: 8408)
- Unicorn-8625.exe (PID: 8364)
- Unicorn-62315.exe (PID: 8512)
- Unicorn-61090.exe (PID: 8488)
- Unicorn-39176.exe (PID: 8600)
- Unicorn-5173.exe (PID: 8400)
- Unicorn-30603.exe (PID: 8432)
- Unicorn-10161.exe (PID: 8548)
- Unicorn-2481.exe (PID: 8616)
- Unicorn-11535.exe (PID: 8452)
- Unicorn-52907.exe (PID: 8652)
- Unicorn-52907.exe (PID: 8660)
- Unicorn-13607.exe (PID: 8496)
- Unicorn-56939.exe (PID: 8732)
- Unicorn-52907.exe (PID: 8700)
- Unicorn-37640.exe (PID: 8644)
- Unicorn-65368.exe (PID: 8940)
- Unicorn-48302.exe (PID: 8948)
- Unicorn-52907.exe (PID: 8692)
- Unicorn-40712.exe (PID: 8892)
- Unicorn-35345.exe (PID: 8844)
- Unicorn-52907.exe (PID: 8684)
- Unicorn-53135.exe (PID: 8868)
- Unicorn-1333.exe (PID: 8876)
- Unicorn-9959.exe (PID: 8836)
- Unicorn-7198.exe (PID: 8884)
- Unicorn-49849.exe (PID: 8908)
- Unicorn-56582.exe (PID: 9016)
- Unicorn-49849.exe (PID: 8916)
- Unicorn-23368.exe (PID: 8928)
- Unicorn-8618.exe (PID: 9076)
- Unicorn-21045.exe (PID: 9124)
- Unicorn-57352.exe (PID: 9152)
- Unicorn-12650.exe (PID: 8296)
- Unicorn-21425.exe (PID: 8236)
- Unicorn-44171.exe (PID: 3888)
- Unicorn-8270.exe (PID: 8476)
- Unicorn-35723.exe (PID: 6768)
- Unicorn-16817.exe (PID: 9060)
- Unicorn-61305.exe (PID: 7904)
- Unicorn-20264.exe (PID: 9044)
- Unicorn-38210.exe (PID: 8144)
- Unicorn-5281.exe (PID: 9112)
- Unicorn-4010.exe (PID: 9244)
- Unicorn-6506.exe (PID: 9224)
- Unicorn-37259.exe (PID: 9252)
- Unicorn-6506.exe (PID: 1088)
- Unicorn-16834.exe (PID: 9336)
- Unicorn-36569.exe (PID: 9348)
- Unicorn-49122.exe (PID: 9308)
- Unicorn-39755.exe (PID: 9236)
- Unicorn-62635.exe (PID: 9320)
- Unicorn-47321.exe (PID: 9404)
- Unicorn-27720.exe (PID: 9416)
- Unicorn-60969.exe (PID: 9428)
- Unicorn-27720.exe (PID: 9412)
- Unicorn-47586.exe (PID: 9464)
- Unicorn-13745.exe (PID: 9560)
- Unicorn-55161.exe (PID: 9436)
- Unicorn-38656.exe (PID: 9396)
- Unicorn-14377.exe (PID: 9636)
- Unicorn-11577.exe (PID: 9628)
- Unicorn-55727.exe (PID: 9604)
- Unicorn-43729.exe (PID: 9576)
- Unicorn-55183.exe (PID: 9720)
- Unicorn-11047.exe (PID: 9700)
- Unicorn-43528.exe (PID: 9676)
- Unicorn-52089.exe (PID: 9752)
- Unicorn-53419.exe (PID: 9792)
- Unicorn-57778.exe (PID: 9860)
- Unicorn-36881.exe (PID: 8712)
- Unicorn-37483.exe (PID: 9944)
- Unicorn-13642.exe (PID: 9920)
- Unicorn-41131.exe (PID: 10028)
- Unicorn-30584.exe (PID: 10000)
- Unicorn-23560.exe (PID: 10060)
- Unicorn-49330.exe (PID: 9976)
- Unicorn-59112.exe (PID: 10052)
- Unicorn-39595.exe (PID: 10076)
- Unicorn-58920.exe (PID: 10044)
- Unicorn-9719.exe (PID: 10116)
- Unicorn-49439.exe (PID: 10172)
- Unicorn-25784.exe (PID: 10136)
- Unicorn-43185.exe (PID: 10212)
- Unicorn-49346.exe (PID: 10192)
- Unicorn-1608.exe (PID: 9120)
- Unicorn-18184.exe (PID: 8480)
- Unicorn-35179.exe (PID: 9104)
- Unicorn-17416.exe (PID: 8576)
- Unicorn-53186.exe (PID: 5064)
- Unicorn-17416.exe (PID: 8528)
- Unicorn-44642.exe (PID: 4220)
- Unicorn-6314.exe (PID: 8036)
- Unicorn-7563.exe (PID: 5204)
- Unicorn-30641.exe (PID: 10264)
- Unicorn-8331.exe (PID: 10272)
- Unicorn-10552.exe (PID: 10312)
- Unicorn-59068.exe (PID: 10340)
- Unicorn-11393.exe (PID: 10372)
- Unicorn-28363.exe (PID: 10420)
- Unicorn-42352.exe (PID: 10460)
- Unicorn-26888.exe (PID: 10520)
- Unicorn-35746.exe (PID: 10444)
- Unicorn-60329.exe (PID: 10548)
- Unicorn-6209.exe (PID: 10584)
- Unicorn-33105.exe (PID: 10620)
- Unicorn-6209.exe (PID: 10592)
- Unicorn-37538.exe (PID: 10656)
- Unicorn-36770.exe (PID: 10632)
- Unicorn-22219.exe (PID: 10692)
- Unicorn-41570.exe (PID: 10700)
- Unicorn-20517.exe (PID: 10676)
- Unicorn-53099.exe (PID: 8672)
- Unicorn-54953.exe (PID: 10720)
- Unicorn-42146.exe (PID: 10756)
- Unicorn-13002.exe (PID: 10836)
- Unicorn-47621.exe (PID: 10812)
- Unicorn-54953.exe (PID: 10712)
Executable content was dropped or overwritten
- Unicorn-16456.exe (PID: 4172)
- 1 (651).exe (PID: 7020)
- Unicorn-24273.exe (PID: 1184)
- Unicorn-43947.exe (PID: 1280)
- Unicorn-30123.exe (PID: 728)
- Unicorn-13537.exe (PID: 5380)
- Unicorn-42923.exe (PID: 5548)
- Unicorn-43883.exe (PID: 1660)
- Unicorn-41614.exe (PID: 668)
- Unicorn-55350.exe (PID: 632)
- Unicorn-23249.exe (PID: 720)
- Unicorn-23992.exe (PID: 1532)
- Unicorn-1543.exe (PID: 1240)
- Unicorn-50251.exe (PID: 7204)
- Unicorn-61910.exe (PID: 7256)
- Unicorn-19883.exe (PID: 7352)
- Unicorn-20075.exe (PID: 7384)
- Unicorn-43883.exe (PID: 4988)
- Unicorn-37672.exe (PID: 7416)
- Unicorn-61990.exe (PID: 7452)
- Unicorn-20075.exe (PID: 7392)
- Unicorn-43883.exe (PID: 900)
- Unicorn-61215.exe (PID: 5960)
- Unicorn-5118.exe (PID: 7468)
- Unicorn-64683.exe (PID: 8084)
- Unicorn-12721.exe (PID: 8156)
- Unicorn-29768.exe (PID: 7292)
- Unicorn-63339.exe (PID: 7272)
- Unicorn-62571.exe (PID: 7228)
- Unicorn-15134.exe (PID: 7528)
- Unicorn-48112.exe (PID: 7576)
- Unicorn-10257.exe (PID: 2096)
- Unicorn-48112.exe (PID: 7572)
- Unicorn-64790.exe (PID: 7460)
- Unicorn-59211.exe (PID: 3100)
- Unicorn-56715.exe (PID: 856)
- Unicorn-36849.exe (PID: 3008)
- Unicorn-59211.exe (PID: 6576)
- Unicorn-19883.exe (PID: 7360)
- Unicorn-4369.exe (PID: 7776)
- Unicorn-28075.exe (PID: 4120)
- Unicorn-61323.exe (PID: 672)
- Unicorn-37041.exe (PID: 4464)
- Unicorn-18104.exe (PID: 2692)
- Unicorn-61323.exe (PID: 1096)
- Unicorn-61515.exe (PID: 7736)
- Unicorn-41457.exe (PID: 6272)
- Unicorn-45864.exe (PID: 1228)
- Unicorn-45864.exe (PID: 1180)
- Unicorn-20104.exe (PID: 7792)
- Unicorn-48313.exe (PID: 7756)
- Unicorn-33457.exe (PID: 7436)
- Unicorn-37672.exe (PID: 7424)
- Unicorn-24753.exe (PID: 7884)
- Unicorn-65288.exe (PID: 7592)
- Unicorn-16555.exe (PID: 7320)
- Unicorn-60882.exe (PID: 6808)
- Unicorn-11370.exe (PID: 8072)
- Unicorn-38210.exe (PID: 8144)
- Unicorn-55304.exe (PID: 2516)
- Unicorn-48459.exe (PID: 6388)
- Unicorn-43865.exe (PID: 7552)
- Unicorn-440.exe (PID: 7732)
- Unicorn-26908.exe (PID: 7992)
- Unicorn-4131.exe (PID: 7988)
- Unicorn-23217.exe (PID: 8120)
- Unicorn-16197.exe (PID: 1348)
- Unicorn-11422.exe (PID: 4268)
- Unicorn-64427.exe (PID: 7880)
- Unicorn-22559.exe (PID: 8004)
- Unicorn-37515.exe (PID: 8244)
- Unicorn-45522.exe (PID: 8208)
- Unicorn-27531.exe (PID: 8320)
- Unicorn-25995.exe (PID: 8380)
- Unicorn-2408.exe (PID: 8272)
- Unicorn-59819.exe (PID: 8300)
- Unicorn-39382.exe (PID: 8348)
- Unicorn-46306.exe (PID: 8408)
- Unicorn-8625.exe (PID: 8364)
- Unicorn-62315.exe (PID: 8512)
- Unicorn-30603.exe (PID: 8432)
- Unicorn-61090.exe (PID: 8488)
- Unicorn-5173.exe (PID: 8400)
- Unicorn-10161.exe (PID: 8548)
- Unicorn-2481.exe (PID: 8616)
- Unicorn-11535.exe (PID: 8452)
- Unicorn-52907.exe (PID: 8652)
- Unicorn-52907.exe (PID: 8660)
- Unicorn-13607.exe (PID: 8496)
- Unicorn-9169.exe (PID: 7716)
- Unicorn-53099.exe (PID: 8672)
- Unicorn-52907.exe (PID: 8700)
- Unicorn-36881.exe (PID: 8712)
- Unicorn-37640.exe (PID: 8644)
- Unicorn-65368.exe (PID: 8940)
- Unicorn-52907.exe (PID: 8692)
- Unicorn-48302.exe (PID: 8948)
- Unicorn-40712.exe (PID: 8892)
- Unicorn-53135.exe (PID: 8868)
- Unicorn-35345.exe (PID: 8844)
- Unicorn-9959.exe (PID: 8836)
- Unicorn-3569.exe (PID: 7744)
- Unicorn-1333.exe (PID: 8876)
- Unicorn-7198.exe (PID: 8884)
- Unicorn-49849.exe (PID: 8908)
- Unicorn-56582.exe (PID: 9016)
- Unicorn-23368.exe (PID: 8928)
- Unicorn-8618.exe (PID: 9076)
- Unicorn-28712.exe (PID: 7708)
- Unicorn-22904.exe (PID: 7860)
- Unicorn-21045.exe (PID: 9124)
- Unicorn-57352.exe (PID: 9152)
- Unicorn-12650.exe (PID: 8296)
- Unicorn-21425.exe (PID: 8236)
- Unicorn-44171.exe (PID: 3888)
- Unicorn-35723.exe (PID: 6768)
- Unicorn-8270.exe (PID: 8476)
- Unicorn-20264.exe (PID: 9044)
- Unicorn-16817.exe (PID: 9060)
- Unicorn-61305.exe (PID: 7904)
- Unicorn-5281.exe (PID: 9112)
- Unicorn-37259.exe (PID: 9252)
- Unicorn-6506.exe (PID: 9224)
- Unicorn-6506.exe (PID: 1088)
- Unicorn-16834.exe (PID: 9336)
- Unicorn-36569.exe (PID: 9348)
- Unicorn-49122.exe (PID: 9308)
- Unicorn-39755.exe (PID: 9236)
- Unicorn-62635.exe (PID: 9320)
- Unicorn-47321.exe (PID: 9404)
- Unicorn-27720.exe (PID: 9416)
- Unicorn-60969.exe (PID: 9428)
- Unicorn-27720.exe (PID: 9412)
- Unicorn-47586.exe (PID: 9464)
- Unicorn-13745.exe (PID: 9560)
- Unicorn-43729.exe (PID: 9576)
- Unicorn-38656.exe (PID: 9396)
- Unicorn-55727.exe (PID: 9604)
- Unicorn-11047.exe (PID: 9700)
- Unicorn-14377.exe (PID: 9636)
- Unicorn-55183.exe (PID: 9720)
- Unicorn-43528.exe (PID: 9676)
- Unicorn-52089.exe (PID: 9752)
- Unicorn-53419.exe (PID: 9792)
- Unicorn-57778.exe (PID: 9860)
- Unicorn-49849.exe (PID: 8916)
- Unicorn-37483.exe (PID: 9944)
- Unicorn-13642.exe (PID: 9920)
- Unicorn-30584.exe (PID: 10000)
- Unicorn-41131.exe (PID: 10028)
- Unicorn-23560.exe (PID: 10060)
- Unicorn-49330.exe (PID: 9976)
- Unicorn-58920.exe (PID: 10044)
- Unicorn-59112.exe (PID: 10052)
- Unicorn-12049.exe (PID: 10144)
- Unicorn-25784.exe (PID: 10136)
- Unicorn-49439.exe (PID: 10172)
- Unicorn-43185.exe (PID: 10212)
- Unicorn-9719.exe (PID: 10116)
- Unicorn-35179.exe (PID: 9104)
- Unicorn-49346.exe (PID: 10192)
- Unicorn-1608.exe (PID: 9120)
- Unicorn-18184.exe (PID: 8480)
- Unicorn-17416.exe (PID: 8576)
- Unicorn-17416.exe (PID: 8528)
- Unicorn-53186.exe (PID: 5064)
- Unicorn-4010.exe (PID: 9244)
- Unicorn-6314.exe (PID: 8036)
- Unicorn-44642.exe (PID: 4220)
- Unicorn-7563.exe (PID: 5204)
- Unicorn-30641.exe (PID: 10264)
- Unicorn-8331.exe (PID: 10272)
- Unicorn-10552.exe (PID: 10312)
- Unicorn-59068.exe (PID: 10340)
- Unicorn-11393.exe (PID: 10372)
- Unicorn-11577.exe (PID: 9628)
- Unicorn-28363.exe (PID: 10420)
- Unicorn-42352.exe (PID: 10460)
- Unicorn-35746.exe (PID: 10444)
- Unicorn-26888.exe (PID: 10520)
- Unicorn-60329.exe (PID: 10548)
- Unicorn-6209.exe (PID: 10592)
- Unicorn-39176.exe (PID: 8600)
- Unicorn-6209.exe (PID: 10584)
- Unicorn-33105.exe (PID: 10620)
- Unicorn-37538.exe (PID: 10656)
- Unicorn-36770.exe (PID: 10632)
- Unicorn-22219.exe (PID: 10692)
- Unicorn-41570.exe (PID: 10700)
- Unicorn-56939.exe (PID: 8732)
- Unicorn-57797.exe (PID: 10768)
- Unicorn-42146.exe (PID: 10756)
- Unicorn-54953.exe (PID: 10712)
- Unicorn-54953.exe (PID: 10720)
- Unicorn-47621.exe (PID: 10812)
- Unicorn-8321.exe (PID: 10792)
- Unicorn-13002.exe (PID: 10836)
- Unicorn-47621.exe (PID: 10808)
- Unicorn-55474.exe (PID: 10964)
- Unicorn-12296.exe (PID: 10824)
- Unicorn-39595.exe (PID: 10076)
- Unicorn-65.exe (PID: 10872)
- Unicorn-60240.exe (PID: 10916)
- Unicorn-15332.exe (PID: 10880)
- Unicorn-11720.exe (PID: 10996)
- Unicorn-30626.exe (PID: 10956)
- Unicorn-695.exe (PID: 10948)
- Unicorn-46313.exe (PID: 10904)
- Unicorn-53010.exe (PID: 6392)
- Unicorn-16843.exe (PID: 11080)
- Unicorn-40995.exe (PID: 11188)
- Unicorn-47273.exe (PID: 11168)
- Unicorn-49131.exe (PID: 11028)
- Unicorn-29871.exe (PID: 11060)
- Unicorn-49131.exe (PID: 11036)
- Unicorn-47138.exe (PID: 11148)
- Unicorn-43769.exe (PID: 11108)
- Unicorn-34393.exe (PID: 11208)
- Unicorn-30033.exe (PID: 11100)
- Unicorn-13832.exe (PID: 11116)
- Unicorn-53904.exe (PID: 11240)
- Unicorn-49835.exe (PID: 5392)
- Unicorn-20517.exe (PID: 10676)
- Unicorn-59769.exe (PID: 11244)
- Unicorn-60034.exe (PID: 11256)
- Unicorn-52907.exe (PID: 8684)
- Unicorn-10184.exe (PID: 11328)
- Unicorn-55161.exe (PID: 9436)
- Unicorn-20066.exe (PID: 11412)
- Unicorn-28514.exe (PID: 11392)
- Unicorn-34492.exe (PID: 11448)
- Unicorn-3848.exe (PID: 11492)
Executes application which crashes
- Unicorn-62674.exe (PID: 7180)
- Unicorn-21234.exe (PID: 16448)
- Unicorn-28965.exe (PID: 10484)
INFO
The sample compiled with chinese language support
- 1 (651).exe (PID: 7020)
- Unicorn-56582.exe (PID: 9016)
- Unicorn-23368.exe (PID: 8928)
- Unicorn-8618.exe (PID: 9076)
- Unicorn-33457.exe (PID: 7436)
- Unicorn-15332.exe (PID: 10880)
- Unicorn-30584.exe (PID: 10000)
- Unicorn-57352.exe (PID: 9152)
- Unicorn-58920.exe (PID: 10044)
- Unicorn-55474.exe (PID: 10964)
- Unicorn-12296.exe (PID: 10824)
- Unicorn-65.exe (PID: 10872)
- Unicorn-60240.exe (PID: 10916)
- Unicorn-39595.exe (PID: 10076)
- Unicorn-44171.exe (PID: 3888)
- Unicorn-11720.exe (PID: 10996)
- Unicorn-53010.exe (PID: 6392)
- Unicorn-8270.exe (PID: 8476)
- Unicorn-61305.exe (PID: 7904)
- Unicorn-43865.exe (PID: 7552)
- Unicorn-50251.exe (PID: 7204)
- Unicorn-55304.exe (PID: 2516)
- Unicorn-48459.exe (PID: 6388)
- Unicorn-5281.exe (PID: 9112)
- Unicorn-17416.exe (PID: 8528)
- Unicorn-53186.exe (PID: 5064)
- Unicorn-35723.exe (PID: 6768)
- Unicorn-30626.exe (PID: 10956)
- Unicorn-6314.exe (PID: 8036)
- Unicorn-23249.exe (PID: 720)
- Unicorn-6506.exe (PID: 1088)
- Unicorn-4010.exe (PID: 9244)
- Unicorn-11422.exe (PID: 4268)
- Unicorn-44642.exe (PID: 4220)
- Unicorn-26908.exe (PID: 7992)
- Unicorn-39755.exe (PID: 9236)
- Unicorn-23992.exe (PID: 1532)
- Unicorn-40995.exe (PID: 11188)
- Unicorn-6506.exe (PID: 9224)
- Unicorn-15134.exe (PID: 7528)
- Unicorn-22559.exe (PID: 8004)
- Unicorn-29768.exe (PID: 7292)
- Unicorn-440.exe (PID: 7732)
- Unicorn-16843.exe (PID: 11080)
- Unicorn-48112.exe (PID: 7576)
- Unicorn-10552.exe (PID: 10312)
- Unicorn-29871.exe (PID: 11060)
- Unicorn-7563.exe (PID: 5204)
- Unicorn-30641.exe (PID: 10264)
- Unicorn-49131.exe (PID: 11036)
- Unicorn-10257.exe (PID: 2096)
- Unicorn-64790.exe (PID: 7460)
- Unicorn-43947.exe (PID: 1280)
- Unicorn-49131.exe (PID: 11028)
- Unicorn-63339.exe (PID: 7272)
- Unicorn-47273.exe (PID: 11168)
- Unicorn-62635.exe (PID: 9320)
- Unicorn-16197.exe (PID: 1348)
- Unicorn-61910.exe (PID: 7256)
- Unicorn-47321.exe (PID: 9404)
- Unicorn-45522.exe (PID: 8208)
- Unicorn-14377.exe (PID: 9636)
- Unicorn-47138.exe (PID: 11148)
- Unicorn-59211.exe (PID: 3100)
- Unicorn-59068.exe (PID: 10340)
- Unicorn-43769.exe (PID: 11108)
- Unicorn-38656.exe (PID: 9396)
- Unicorn-19883.exe (PID: 7352)
- Unicorn-13745.exe (PID: 9560)
- Unicorn-11393.exe (PID: 10372)
- Unicorn-47586.exe (PID: 9464)
- Unicorn-43729.exe (PID: 9576)
- Unicorn-60969.exe (PID: 9428)
- Unicorn-37515.exe (PID: 8244)
- Unicorn-59211.exe (PID: 6576)
- Unicorn-35746.exe (PID: 10444)
- Unicorn-13832.exe (PID: 11116)
- Unicorn-43528.exe (PID: 9676)
- Unicorn-26888.exe (PID: 10520)
- Unicorn-19883.exe (PID: 7360)
- Unicorn-49122.exe (PID: 9308)
- Unicorn-34393.exe (PID: 11208)
- Unicorn-56715.exe (PID: 856)
- Unicorn-8321.exe (PID: 10792)
- Unicorn-30033.exe (PID: 11100)
- Unicorn-28363.exe (PID: 10420)
- Unicorn-11577.exe (PID: 9628)
- Unicorn-55727.exe (PID: 9604)
- Unicorn-25995.exe (PID: 8380)
- Unicorn-52089.exe (PID: 9752)
- Unicorn-46306.exe (PID: 8408)
- Unicorn-6209.exe (PID: 10592)
- Unicorn-53904.exe (PID: 11240)
- Unicorn-36849.exe (PID: 3008)
- Unicorn-20075.exe (PID: 7384)
- Unicorn-4369.exe (PID: 7776)
- Unicorn-41614.exe (PID: 668)
- Unicorn-30603.exe (PID: 8432)
- Unicorn-11535.exe (PID: 8452)
- Unicorn-62315.exe (PID: 8512)
- Unicorn-37041.exe (PID: 4464)
- Unicorn-6209.exe (PID: 10584)
- Unicorn-61323.exe (PID: 672)
- Unicorn-60329.exe (PID: 10548)
- Unicorn-55183.exe (PID: 9720)
- Unicorn-49835.exe (PID: 5392)
- Unicorn-10161.exe (PID: 8548)
- Unicorn-39176.exe (PID: 8600)
- Unicorn-18104.exe (PID: 2692)
- Unicorn-13537.exe (PID: 5380)
- Unicorn-45864.exe (PID: 1228)
- Unicorn-33105.exe (PID: 10620)
- Unicorn-2481.exe (PID: 8616)
- Unicorn-37538.exe (PID: 10656)
- Unicorn-43883.exe (PID: 4988)
- Unicorn-53419.exe (PID: 9792)
- Unicorn-43883.exe (PID: 1660)
- Unicorn-20075.exe (PID: 7392)
- Unicorn-36770.exe (PID: 10632)
- Unicorn-37672.exe (PID: 7416)
- Unicorn-52907.exe (PID: 8660)
- Unicorn-13607.exe (PID: 8496)
- Unicorn-20517.exe (PID: 10676)
- Unicorn-61515.exe (PID: 7736)
- Unicorn-54953.exe (PID: 10720)
- Unicorn-57797.exe (PID: 10768)
- Unicorn-59769.exe (PID: 11244)
- Unicorn-53099.exe (PID: 8672)
- Unicorn-52907.exe (PID: 8700)
- Unicorn-54953.exe (PID: 10712)
- Unicorn-42146.exe (PID: 10756)
- Unicorn-64427.exe (PID: 7880)
- Unicorn-57778.exe (PID: 9860)
- Unicorn-36881.exe (PID: 8712)
- Unicorn-37640.exe (PID: 8644)
- Unicorn-52907.exe (PID: 8692)
- Unicorn-48302.exe (PID: 8948)
- Unicorn-20104.exe (PID: 7792)
- Unicorn-41570.exe (PID: 10700)
- Unicorn-9169.exe (PID: 7716)
- Unicorn-28075.exe (PID: 4120)
- Unicorn-35345.exe (PID: 8844)
- Unicorn-52907.exe (PID: 8684)
- Unicorn-3569.exe (PID: 7744)
- Unicorn-61990.exe (PID: 7452)
- Unicorn-9959.exe (PID: 8836)
- Unicorn-16456.exe (PID: 4172)
- Unicorn-61323.exe (PID: 1096)
- Unicorn-49849.exe (PID: 8908)
- Unicorn-13002.exe (PID: 10836)
- Unicorn-48313.exe (PID: 7756)
- Unicorn-49849.exe (PID: 8916)
- Unicorn-37672.exe (PID: 7424)
- Unicorn-47621.exe (PID: 10812)
- Unicorn-5118.exe (PID: 7468)
- Unicorn-30123.exe (PID: 728)
- Unicorn-40712.exe (PID: 8892)
- Unicorn-60034.exe (PID: 11256)
- Unicorn-37483.exe (PID: 9944)
- Unicorn-22904.exe (PID: 7860)
- Unicorn-55350.exe (PID: 632)
- Unicorn-13642.exe (PID: 9920)
- Unicorn-41131.exe (PID: 10028)
- Unicorn-24273.exe (PID: 1184)
- Unicorn-43883.exe (PID: 900)
- Unicorn-24753.exe (PID: 7884)
- Unicorn-49330.exe (PID: 9976)
- Unicorn-47621.exe (PID: 10808)
- Unicorn-21045.exe (PID: 9124)
- Unicorn-23560.exe (PID: 10060)
- Unicorn-1543.exe (PID: 1240)
- Unicorn-11370.exe (PID: 8072)
- Unicorn-59112.exe (PID: 10052)
- Unicorn-61215.exe (PID: 5960)
- Unicorn-28712.exe (PID: 7708)
- Unicorn-9719.exe (PID: 10116)
- Unicorn-49439.exe (PID: 10172)
- Unicorn-64683.exe (PID: 8084)
- Unicorn-695.exe (PID: 10948)
- Unicorn-46313.exe (PID: 10904)
- Unicorn-16555.exe (PID: 7320)
- Unicorn-43185.exe (PID: 10212)
- Unicorn-12721.exe (PID: 8156)
- Unicorn-16817.exe (PID: 9060)
- Unicorn-17416.exe (PID: 8576)
- Unicorn-35179.exe (PID: 9104)
- Unicorn-10184.exe (PID: 11328)
- Unicorn-12049.exe (PID: 10144)
- Unicorn-12650.exe (PID: 8296)
- Unicorn-21425.exe (PID: 8236)
- Unicorn-60882.exe (PID: 6808)
- Unicorn-65288.exe (PID: 7592)
- Unicorn-4131.exe (PID: 7988)
- Unicorn-48112.exe (PID: 7572)
- Unicorn-23217.exe (PID: 8120)
- Unicorn-28514.exe (PID: 11392)
- Unicorn-27720.exe (PID: 9412)
- Unicorn-27720.exe (PID: 9416)
- Unicorn-42352.exe (PID: 10460)
- Unicorn-36569.exe (PID: 9348)
- Unicorn-55161.exe (PID: 9436)
- Unicorn-20066.exe (PID: 11412)
- Unicorn-11047.exe (PID: 9700)
- Unicorn-2408.exe (PID: 8272)
- Unicorn-1608.exe (PID: 9120)
- Unicorn-42923.exe (PID: 5548)
- Unicorn-62571.exe (PID: 7228)
- Unicorn-34492.exe (PID: 11448)
- Unicorn-52907.exe (PID: 8652)
- Unicorn-56939.exe (PID: 8732)
- Unicorn-3848.exe (PID: 11492)
- Unicorn-41457.exe (PID: 6272)
- Unicorn-53135.exe (PID: 8868)
- Unicorn-59819.exe (PID: 8300)
- Unicorn-7198.exe (PID: 8884)
- Unicorn-39382.exe (PID: 8348)
- Unicorn-27531.exe (PID: 8320)
- Unicorn-5173.exe (PID: 8400)
- Unicorn-61090.exe (PID: 8488)
Reads the computer name
- 1 (651).exe (PID: 7020)
- Unicorn-16456.exe (PID: 4172)
- Unicorn-43947.exe (PID: 1280)
- Unicorn-24273.exe (PID: 1184)
- Unicorn-10257.exe (PID: 2096)
- Unicorn-30123.exe (PID: 728)
- Unicorn-13537.exe (PID: 5380)
- Unicorn-23992.exe (PID: 1532)
- Unicorn-42923.exe (PID: 5548)
- Unicorn-23249.exe (PID: 720)
- Unicorn-43883.exe (PID: 4988)
- Unicorn-43883.exe (PID: 1660)
- Unicorn-55350.exe (PID: 632)
- Unicorn-43883.exe (PID: 900)
- Unicorn-41614.exe (PID: 668)
- Unicorn-61215.exe (PID: 5960)
- Unicorn-61910.exe (PID: 7256)
- Unicorn-1543.exe (PID: 1240)
- Unicorn-50251.exe (PID: 7204)
- Unicorn-37672.exe (PID: 7416)
- Unicorn-19883.exe (PID: 7352)
- Unicorn-19883.exe (PID: 7360)
- Unicorn-20075.exe (PID: 7392)
- Unicorn-20075.exe (PID: 7384)
- Unicorn-33457.exe (PID: 7436)
- Unicorn-61990.exe (PID: 7452)
- Unicorn-64790.exe (PID: 7460)
- Unicorn-37672.exe (PID: 7424)
- Unicorn-5118.exe (PID: 7468)
- Unicorn-64683.exe (PID: 8084)
- Unicorn-12721.exe (PID: 8156)
- Unicorn-62571.exe (PID: 7228)
- Unicorn-15134.exe (PID: 7528)
- Unicorn-29768.exe (PID: 7292)
- Unicorn-63339.exe (PID: 7272)
- Unicorn-48112.exe (PID: 7572)
- Unicorn-48112.exe (PID: 7576)
- Unicorn-59211.exe (PID: 3100)
- Unicorn-56715.exe (PID: 856)
- Unicorn-36849.exe (PID: 3008)
- Unicorn-37041.exe (PID: 4464)
- Unicorn-18104.exe (PID: 2692)
- Unicorn-59211.exe (PID: 6576)
- Unicorn-4369.exe (PID: 7776)
- Unicorn-61323.exe (PID: 672)
- Unicorn-45864.exe (PID: 1228)
- Unicorn-28075.exe (PID: 4120)
- Unicorn-61323.exe (PID: 1096)
- Unicorn-61515.exe (PID: 7736)
- Unicorn-41457.exe (PID: 6272)
- Unicorn-3569.exe (PID: 7744)
- Unicorn-20104.exe (PID: 7792)
- Unicorn-45864.exe (PID: 1180)
- Unicorn-48313.exe (PID: 7756)
- Unicorn-28712.exe (PID: 7708)
- Unicorn-9169.exe (PID: 7716)
- Unicorn-22904.exe (PID: 7860)
- Unicorn-24753.exe (PID: 7884)
- Unicorn-11370.exe (PID: 8072)
- Unicorn-16555.exe (PID: 7320)
- Unicorn-65288.exe (PID: 7592)
- Unicorn-43865.exe (PID: 7552)
- Unicorn-60882.exe (PID: 6808)
- Unicorn-38210.exe (PID: 8144)
- Unicorn-53010.exe (PID: 6392)
- Unicorn-55304.exe (PID: 2516)
- Unicorn-48459.exe (PID: 6388)
- Unicorn-4131.exe (PID: 7988)
- Unicorn-440.exe (PID: 7732)
- Unicorn-22559.exe (PID: 8004)
- Unicorn-11422.exe (PID: 4268)
- Unicorn-26908.exe (PID: 7992)
- Unicorn-23217.exe (PID: 8120)
- Unicorn-16197.exe (PID: 1348)
- Unicorn-64427.exe (PID: 7880)
- Unicorn-45522.exe (PID: 8208)
- Unicorn-37515.exe (PID: 8244)
- Unicorn-2408.exe (PID: 8272)
- Unicorn-27531.exe (PID: 8320)
- Unicorn-39382.exe (PID: 8348)
- Unicorn-25995.exe (PID: 8380)
- Unicorn-8625.exe (PID: 8364)
- Unicorn-46306.exe (PID: 8408)
- Unicorn-62315.exe (PID: 8512)
- Unicorn-5173.exe (PID: 8400)
- Unicorn-39176.exe (PID: 8600)
- Unicorn-11535.exe (PID: 8452)
- Unicorn-10161.exe (PID: 8548)
- Unicorn-2481.exe (PID: 8616)
- Unicorn-52907.exe (PID: 8652)
- Unicorn-13607.exe (PID: 8496)
- Unicorn-52907.exe (PID: 8660)
- Unicorn-30603.exe (PID: 8432)
- Unicorn-61090.exe (PID: 8488)
- Unicorn-56939.exe (PID: 8732)
- Unicorn-53099.exe (PID: 8672)
- Unicorn-52907.exe (PID: 8700)
- Unicorn-37640.exe (PID: 8644)
- Unicorn-36881.exe (PID: 8712)
- Unicorn-65368.exe (PID: 8940)
- Unicorn-48302.exe (PID: 8948)
- Unicorn-40712.exe (PID: 8892)
- Unicorn-52907.exe (PID: 8692)
- Unicorn-53135.exe (PID: 8868)
- Unicorn-52907.exe (PID: 8684)
- Unicorn-1333.exe (PID: 8876)
- Unicorn-7198.exe (PID: 8884)
- Unicorn-9959.exe (PID: 8836)
- Unicorn-35345.exe (PID: 8844)
- Unicorn-49849.exe (PID: 8916)
- Unicorn-56582.exe (PID: 9016)
- Unicorn-49849.exe (PID: 8908)
- Unicorn-8618.exe (PID: 9076)
- Unicorn-21045.exe (PID: 9124)
- Unicorn-57352.exe (PID: 9152)
- Unicorn-12650.exe (PID: 8296)
- Unicorn-21425.exe (PID: 8236)
- Unicorn-35723.exe (PID: 6768)
- Unicorn-8270.exe (PID: 8476)
- Unicorn-16817.exe (PID: 9060)
- Unicorn-20264.exe (PID: 9044)
- Unicorn-5281.exe (PID: 9112)
- Unicorn-61305.exe (PID: 7904)
- Unicorn-4010.exe (PID: 9244)
- Unicorn-39755.exe (PID: 9236)
- Unicorn-6506.exe (PID: 1088)
- Unicorn-6506.exe (PID: 9224)
- Unicorn-37259.exe (PID: 9252)
- Unicorn-36569.exe (PID: 9348)
- Unicorn-62635.exe (PID: 9320)
- Unicorn-16834.exe (PID: 9336)
- Unicorn-27720.exe (PID: 9416)
- Unicorn-27720.exe (PID: 9412)
- Unicorn-47586.exe (PID: 9464)
- Unicorn-55161.exe (PID: 9436)
- Unicorn-47321.exe (PID: 9404)
- Unicorn-43729.exe (PID: 9576)
- Unicorn-14377.exe (PID: 9636)
- Unicorn-55727.exe (PID: 9604)
- Unicorn-13745.exe (PID: 9560)
- Unicorn-11047.exe (PID: 9700)
- Unicorn-43528.exe (PID: 9676)
- Unicorn-55183.exe (PID: 9720)
- Unicorn-52089.exe (PID: 9752)
- Unicorn-53419.exe (PID: 9792)
- Unicorn-57778.exe (PID: 9860)
- Unicorn-37483.exe (PID: 9944)
- Unicorn-13642.exe (PID: 9920)
- Unicorn-49330.exe (PID: 9976)
- Unicorn-30584.exe (PID: 10000)
- Unicorn-41131.exe (PID: 10028)
- Unicorn-58920.exe (PID: 10044)
- Unicorn-59112.exe (PID: 10052)
- Unicorn-23560.exe (PID: 10060)
- Unicorn-25784.exe (PID: 10136)
- Unicorn-9719.exe (PID: 10116)
- Unicorn-12049.exe (PID: 10144)
- Unicorn-39595.exe (PID: 10076)
- Unicorn-49346.exe (PID: 10192)
- Unicorn-43185.exe (PID: 10212)
- Unicorn-35179.exe (PID: 9104)
- Unicorn-17416.exe (PID: 8576)
- Unicorn-18184.exe (PID: 8480)
- Unicorn-53186.exe (PID: 5064)
- Unicorn-17416.exe (PID: 8528)
- Unicorn-44642.exe (PID: 4220)
- Unicorn-7563.exe (PID: 5204)
- Unicorn-30641.exe (PID: 10264)
- Unicorn-8331.exe (PID: 10272)
- Unicorn-10552.exe (PID: 10312)
- Unicorn-59068.exe (PID: 10340)
- Unicorn-11393.exe (PID: 10372)
- Unicorn-42352.exe (PID: 10460)
- Unicorn-35746.exe (PID: 10444)
- Unicorn-28363.exe (PID: 10420)
- Unicorn-60329.exe (PID: 10548)
- Unicorn-26888.exe (PID: 10520)
- Unicorn-37538.exe (PID: 10656)
- Unicorn-6209.exe (PID: 10584)
- Unicorn-33105.exe (PID: 10620)
- Unicorn-57797.exe (PID: 10768)
- Unicorn-22219.exe (PID: 10692)
- Unicorn-36770.exe (PID: 10632)
- Unicorn-20517.exe (PID: 10676)
- Unicorn-54953.exe (PID: 10720)
- Unicorn-54953.exe (PID: 10712)
- Unicorn-13002.exe (PID: 10836)
- Unicorn-47621.exe (PID: 10812)
- Unicorn-8321.exe (PID: 10792)
- Unicorn-47621.exe (PID: 10808)
- Unicorn-55474.exe (PID: 10964)
Checks supported languages
- 1 (651).exe (PID: 7020)
- Unicorn-16456.exe (PID: 4172)
- Unicorn-24273.exe (PID: 1184)
- Unicorn-43947.exe (PID: 1280)
- Unicorn-13537.exe (PID: 5380)
- Unicorn-42923.exe (PID: 5548)
- Unicorn-23249.exe (PID: 720)
- Unicorn-43883.exe (PID: 900)
- Unicorn-43883.exe (PID: 1660)
- Unicorn-43883.exe (PID: 4988)
- Unicorn-30123.exe (PID: 728)
- Unicorn-23992.exe (PID: 1532)
- Unicorn-10257.exe (PID: 2096)
- Unicorn-41614.exe (PID: 668)
- Unicorn-55350.exe (PID: 632)
- Unicorn-1543.exe (PID: 1240)
- Unicorn-62674.exe (PID: 7180)
- Unicorn-61215.exe (PID: 5960)
- Unicorn-61910.exe (PID: 7256)
- Unicorn-19883.exe (PID: 7352)
- Unicorn-19883.exe (PID: 7360)
- Unicorn-20075.exe (PID: 7384)
- Unicorn-50251.exe (PID: 7204)
- Unicorn-20075.exe (PID: 7392)
- Unicorn-37672.exe (PID: 7424)
- Unicorn-37672.exe (PID: 7416)
- Unicorn-33457.exe (PID: 7436)
- Unicorn-61990.exe (PID: 7452)
- Unicorn-64790.exe (PID: 7460)
- Unicorn-5118.exe (PID: 7468)
- Unicorn-64683.exe (PID: 8084)
- Unicorn-12721.exe (PID: 8156)
- Unicorn-62571.exe (PID: 7228)
- Unicorn-29768.exe (PID: 7292)
- Unicorn-48112.exe (PID: 7576)
- Unicorn-63339.exe (PID: 7272)
- Unicorn-15134.exe (PID: 7528)
- Unicorn-48112.exe (PID: 7572)
- Unicorn-36849.exe (PID: 3008)
- Unicorn-56715.exe (PID: 856)
- Unicorn-37041.exe (PID: 4464)
- Unicorn-59211.exe (PID: 3100)
- Unicorn-59211.exe (PID: 6576)
- Unicorn-18104.exe (PID: 2692)
- Unicorn-4369.exe (PID: 7776)
- Unicorn-28075.exe (PID: 4120)
- Unicorn-22904.exe (PID: 7860)
- Unicorn-45864.exe (PID: 1228)
- Unicorn-61515.exe (PID: 7736)
- Unicorn-45864.exe (PID: 1180)
- Unicorn-48313.exe (PID: 7756)
- Unicorn-3569.exe (PID: 7744)
- Unicorn-9169.exe (PID: 7716)
- Unicorn-28712.exe (PID: 7708)
- Unicorn-20104.exe (PID: 7792)
- Unicorn-41457.exe (PID: 6272)
- Unicorn-61323.exe (PID: 672)
- Unicorn-61323.exe (PID: 1096)
- Unicorn-11370.exe (PID: 8072)
- Unicorn-24753.exe (PID: 7884)
- Unicorn-16555.exe (PID: 7320)
- Unicorn-65288.exe (PID: 7592)
- Unicorn-60882.exe (PID: 6808)
- Unicorn-440.exe (PID: 7732)
- Unicorn-48459.exe (PID: 6388)
- Unicorn-43865.exe (PID: 7552)
- Unicorn-53010.exe (PID: 6392)
- Unicorn-55304.exe (PID: 2516)
- Unicorn-16197.exe (PID: 1348)
- Unicorn-11422.exe (PID: 4268)
- Unicorn-22559.exe (PID: 8004)
- Unicorn-38210.exe (PID: 8144)
- Unicorn-4131.exe (PID: 7988)
- Unicorn-26908.exe (PID: 7992)
- Unicorn-23217.exe (PID: 8120)
- Unicorn-64427.exe (PID: 7880)
- Unicorn-37515.exe (PID: 8244)
- Unicorn-2408.exe (PID: 8272)
- Unicorn-59819.exe (PID: 8300)
- Unicorn-8625.exe (PID: 8364)
- Unicorn-27531.exe (PID: 8320)
- Unicorn-39382.exe (PID: 8348)
- Unicorn-45522.exe (PID: 8208)
- Unicorn-25995.exe (PID: 8380)
- Unicorn-5173.exe (PID: 8400)
- Unicorn-11535.exe (PID: 8452)
- Unicorn-61090.exe (PID: 8488)
- Unicorn-62315.exe (PID: 8512)
- Unicorn-13607.exe (PID: 8496)
- Unicorn-46306.exe (PID: 8408)
- Unicorn-39176.exe (PID: 8600)
- Unicorn-2481.exe (PID: 8616)
- Unicorn-52907.exe (PID: 8684)
- Unicorn-52907.exe (PID: 8660)
- Unicorn-52907.exe (PID: 8652)
- Unicorn-53099.exe (PID: 8672)
- Unicorn-52907.exe (PID: 8692)
- Unicorn-36881.exe (PID: 8712)
- Unicorn-56939.exe (PID: 8732)
- Unicorn-37640.exe (PID: 8644)
- Unicorn-53135.exe (PID: 8868)
- Unicorn-23368.exe (PID: 8928)
- Unicorn-40712.exe (PID: 8892)
- Unicorn-9959.exe (PID: 8836)
- Unicorn-35345.exe (PID: 8844)
- Unicorn-49849.exe (PID: 8908)
- Unicorn-8618.exe (PID: 9076)
- Unicorn-21045.exe (PID: 9124)
- Unicorn-1333.exe (PID: 8876)
- Unicorn-49849.exe (PID: 8916)
- Unicorn-65368.exe (PID: 8940)
- Unicorn-48302.exe (PID: 8948)
- Unicorn-56582.exe (PID: 9016)
- Unicorn-21425.exe (PID: 8236)
- Unicorn-12650.exe (PID: 8296)
- Unicorn-8270.exe (PID: 8476)
- Unicorn-57352.exe (PID: 9152)
- Unicorn-61305.exe (PID: 7904)
- Unicorn-20264.exe (PID: 9044)
- Unicorn-35723.exe (PID: 6768)
- Unicorn-5281.exe (PID: 9112)
- Unicorn-6314.exe (PID: 8036)
- Unicorn-6506.exe (PID: 1088)
- Unicorn-6506.exe (PID: 9224)
- Unicorn-4010.exe (PID: 9244)
- Unicorn-39755.exe (PID: 9236)
- Unicorn-37259.exe (PID: 9252)
- Unicorn-16834.exe (PID: 9336)
- Unicorn-36569.exe (PID: 9348)
- Unicorn-38656.exe (PID: 9396)
- Unicorn-47321.exe (PID: 9404)
- Unicorn-49122.exe (PID: 9308)
- Unicorn-55161.exe (PID: 9436)
- Unicorn-43729.exe (PID: 9576)
- Unicorn-13745.exe (PID: 9560)
- Unicorn-55727.exe (PID: 9604)
- Unicorn-11577.exe (PID: 9628)
- Unicorn-14377.exe (PID: 9636)
- Unicorn-27720.exe (PID: 9412)
- Unicorn-27720.exe (PID: 9416)
- Unicorn-47586.exe (PID: 9464)
- Unicorn-60969.exe (PID: 9428)
- Unicorn-11047.exe (PID: 9700)
- Unicorn-55183.exe (PID: 9720)
- Unicorn-52089.exe (PID: 9752)
- Unicorn-43528.exe (PID: 9676)
- Unicorn-57778.exe (PID: 9860)
- Unicorn-13642.exe (PID: 9920)
- Unicorn-53419.exe (PID: 9792)
- Unicorn-37483.exe (PID: 9944)
- Unicorn-49330.exe (PID: 9976)
- Unicorn-30584.exe (PID: 10000)
- Unicorn-41131.exe (PID: 10028)
- Unicorn-23560.exe (PID: 10060)
- Unicorn-58920.exe (PID: 10044)
- Unicorn-39595.exe (PID: 10076)
- Unicorn-25784.exe (PID: 10136)
- Unicorn-12049.exe (PID: 10144)
- Unicorn-49346.exe (PID: 10192)
- Unicorn-43185.exe (PID: 10212)
- Unicorn-9719.exe (PID: 10116)
- Unicorn-49439.exe (PID: 10172)
- Unicorn-35179.exe (PID: 9104)
- Unicorn-17416.exe (PID: 8576)
- Unicorn-17416.exe (PID: 8528)
- Unicorn-1608.exe (PID: 9120)
- Unicorn-18184.exe (PID: 8480)
- Unicorn-53186.exe (PID: 5064)
- Unicorn-44642.exe (PID: 4220)
- Unicorn-7563.exe (PID: 5204)
- Unicorn-8331.exe (PID: 10272)
- Unicorn-39572.exe (PID: 10280)
- Unicorn-59068.exe (PID: 10340)
- Unicorn-11393.exe (PID: 10372)
- Unicorn-35746.exe (PID: 10444)
- Unicorn-28363.exe (PID: 10420)
- Unicorn-42352.exe (PID: 10460)
- Unicorn-30641.exe (PID: 10264)
- Unicorn-10552.exe (PID: 10312)
- Unicorn-60329.exe (PID: 10548)
- Unicorn-33105.exe (PID: 10620)
- Unicorn-28965.exe (PID: 10484)
- Unicorn-26888.exe (PID: 10520)
- Unicorn-6209.exe (PID: 10584)
- Unicorn-6209.exe (PID: 10592)
- Unicorn-37538.exe (PID: 10656)
- Unicorn-20517.exe (PID: 10676)
- Unicorn-22219.exe (PID: 10692)
- Unicorn-41570.exe (PID: 10700)
- Unicorn-36770.exe (PID: 10632)
- Unicorn-57797.exe (PID: 10768)
- Unicorn-54953.exe (PID: 10712)
- Unicorn-42146.exe (PID: 10756)
- Unicorn-8321.exe (PID: 10792)
- Unicorn-54953.exe (PID: 10720)
- Unicorn-47621.exe (PID: 10812)
- Unicorn-12296.exe (PID: 10824)
- Unicorn-13002.exe (PID: 10836)
- Unicorn-47621.exe (PID: 10808)
- Unicorn-15332.exe (PID: 10880)
- Unicorn-65.exe (PID: 10872)
- Unicorn-46313.exe (PID: 10904)
- Unicorn-60240.exe (PID: 10916)
- Unicorn-55474.exe (PID: 10964)
- Unicorn-30626.exe (PID: 10956)
- Unicorn-11720.exe (PID: 10996)
- Unicorn-49131.exe (PID: 11036)
- Unicorn-49131.exe (PID: 11028)
- Unicorn-695.exe (PID: 10948)
- Unicorn-30033.exe (PID: 11100)
- Unicorn-43769.exe (PID: 11108)
- Unicorn-13832.exe (PID: 11116)
- Unicorn-47138.exe (PID: 11148)
- Unicorn-40995.exe (PID: 11188)
- Unicorn-47273.exe (PID: 11168)
- Unicorn-34393.exe (PID: 11208)
- Unicorn-16843.exe (PID: 11080)
- Unicorn-29871.exe (PID: 11060)
- Unicorn-44171.exe (PID: 3888)
- Unicorn-49835.exe (PID: 5392)
- Unicorn-10184.exe (PID: 11328)
- Unicorn-20066.exe (PID: 11412)
- Unicorn-53904.exe (PID: 11240)
- Unicorn-59769.exe (PID: 11244)
- Unicorn-60034.exe (PID: 11256)
- Unicorn-28514.exe (PID: 11392)
- Unicorn-29381.exe (PID: 11540)
- Unicorn-34492.exe (PID: 11448)
- Unicorn-3848.exe (PID: 11492)
- Unicorn-13153.exe (PID: 11608)
- Unicorn-24594.exe (PID: 11636)
- Unicorn-60937.exe (PID: 11644)
- Unicorn-63973.exe (PID: 11668)
- Unicorn-34097.exe (PID: 11700)
- Unicorn-29957.exe (PID: 11556)
- Unicorn-60875.exe (PID: 11576)
- Unicorn-57097.exe (PID: 11828)
- Unicorn-33935.exe (PID: 11776)
- Unicorn-20715.exe (PID: 11796)
- Unicorn-56101.exe (PID: 11720)
- Unicorn-54025.exe (PID: 11728)
- Unicorn-3183.exe (PID: 11848)
- Unicorn-25759.exe (PID: 11912)
- Unicorn-42234.exe (PID: 11940)
- Unicorn-61036.exe (PID: 11972)
- Unicorn-35650.exe (PID: 11960)
- Unicorn-61228.exe (PID: 11992)
- Unicorn-61228.exe (PID: 11984)
- Unicorn-59282.exe (PID: 12024)
- Unicorn-25349.exe (PID: 11868)
- Unicorn-43065.exe (PID: 11884)
- Unicorn-61804.exe (PID: 12040)
- Unicorn-20165.exe (PID: 12076)
- Unicorn-53221.exe (PID: 12164)
- Unicorn-37762.exe (PID: 12140)
- Unicorn-51145.exe (PID: 12188)
- Unicorn-64108.exe (PID: 12228)
- Unicorn-5281.exe (PID: 12176)
- Unicorn-33931.exe (PID: 12212)
- Unicorn-51493.exe (PID: 12260)
- Unicorn-52261.exe (PID: 12284)
- Unicorn-31055.exe (PID: 5304)
- Unicorn-11512.exe (PID: 1748)
- Unicorn-37186.exe (PID: 5020)
- Unicorn-27801.exe (PID: 924)
- Unicorn-48649.exe (PID: 12240)
- Unicorn-8200.exe (PID: 9148)
- Unicorn-28066.exe (PID: 12300)
- Unicorn-11720.exe (PID: 2968)
- Unicorn-3570.exe (PID: 12400)
- Unicorn-44485.exe (PID: 12356)
- Unicorn-20591.exe (PID: 12376)
- Unicorn-65275.exe (PID: 12416)
- Unicorn-5672.exe (PID: 12436)
- Unicorn-30873.exe (PID: 12444)
- Unicorn-31055.exe (PID: 2960)
- Unicorn-51340.exe (PID: 12592)
- Unicorn-5092.exe (PID: 12552)
- Unicorn-55362.exe (PID: 12544)
- Unicorn-44267.exe (PID: 12492)
- Unicorn-22114.exe (PID: 12516)
- Unicorn-15023.exe (PID: 12668)
- Unicorn-1226.exe (PID: 12636)
- Unicorn-1226.exe (PID: 12628)
- Unicorn-4059.exe (PID: 12688)
- Unicorn-23458.exe (PID: 12720)
- Unicorn-35845.exe (PID: 12616)
- Unicorn-15970.exe (PID: 12768)
- Unicorn-32005.exe (PID: 12808)
- Unicorn-32005.exe (PID: 12800)
- Unicorn-26834.exe (PID: 12924)
- Unicorn-15778.exe (PID: 12748)
- Unicorn-10577.exe (PID: 12848)
- Unicorn-41547.exe (PID: 13108)
- Unicorn-44418.exe (PID: 13140)
- Unicorn-5999.exe (PID: 13160)
- Unicorn-25570.exe (PID: 13180)
- Unicorn-32907.exe (PID: 13232)
- Unicorn-37698.exe (PID: 13248)
- Unicorn-58569.exe (PID: 13012)
- Unicorn-61221.exe (PID: 13076)
- Unicorn-25423.exe (PID: 13392)
- Unicorn-42746.exe (PID: 7828)
- Unicorn-16658.exe (PID: 8080)
- Unicorn-40505.exe (PID: 5504)
- Unicorn-15096.exe (PID: 4608)
- Unicorn-29343.exe (PID: 1312)
- Unicorn-15314.exe (PID: 13348)
- Unicorn-9960.exe (PID: 13468)
- Unicorn-56940.exe (PID: 13408)
- Unicorn-9384.exe (PID: 13436)
- Unicorn-9384.exe (PID: 13444)
- Unicorn-61548.exe (PID: 13492)
- Unicorn-47817.exe (PID: 13272)
- Unicorn-50469.exe (PID: 13300)
- Unicorn-30603.exe (PID: 13284)
- Unicorn-35128.exe (PID: 13340)
- Unicorn-54412.exe (PID: 13552)
- Unicorn-44553.exe (PID: 13560)
- Unicorn-24159.exe (PID: 13644)
- Unicorn-58288.exe (PID: 13568)
- Unicorn-56448.exe (PID: 13612)
- Unicorn-36872.exe (PID: 13660)
- Unicorn-39717.exe (PID: 13688)
- Unicorn-4776.exe (PID: 13696)
- Unicorn-7355.exe (PID: 13728)
- Unicorn-4859.exe (PID: 13756)
- Unicorn-62316.exe (PID: 13512)
- Unicorn-10706.exe (PID: 13536)
- Unicorn-56364.exe (PID: 13852)
- Unicorn-56364.exe (PID: 13844)
- Unicorn-6120.exe (PID: 13876)
- Unicorn-6634.exe (PID: 13908)
- Unicorn-19855.exe (PID: 13884)
- Unicorn-22155.exe (PID: 13928)
- Unicorn-46188.exe (PID: 13948)
- Unicorn-46956.exe (PID: 13968)
- Unicorn-46956.exe (PID: 13972)
- Unicorn-36104.exe (PID: 13788)
- Unicorn-17551.exe (PID: 13804)
- Unicorn-53872.exe (PID: 13824)
- Unicorn-45202.exe (PID: 14032)
- Unicorn-45424.exe (PID: 14016)
- Unicorn-26072.exe (PID: 14004)
- Unicorn-33800.exe (PID: 14108)
- Unicorn-64937.exe (PID: 14044)
- Unicorn-23001.exe (PID: 14144)
- Unicorn-36737.exe (PID: 14128)
- Unicorn-23001.exe (PID: 14136)
- Unicorn-47698.exe (PID: 14152)
- Unicorn-2472.exe (PID: 14200)
- Unicorn-46192.exe (PID: 14236)
- Unicorn-19576.exe (PID: 14244)
- Unicorn-2472.exe (PID: 14196)
- Unicorn-26098.exe (PID: 14080)
- Unicorn-23159.exe (PID: 14272)
- Unicorn-33224.exe (PID: 14280)
- Unicorn-17824.exe (PID: 14288)
- Unicorn-5551.exe (PID: 14324)
- Unicorn-52723.exe (PID: 14360)
- Unicorn-41099.exe (PID: 6564)
- Unicorn-41099.exe (PID: 6656)
- Unicorn-26082.exe (PID: 5528)
- Unicorn-36657.exe (PID: 7144)
- Unicorn-58588.exe (PID: 14352)
- Unicorn-17442.exe (PID: 14368)
- Unicorn-52531.exe (PID: 14344)
- Unicorn-38224.exe (PID: 14424)
- Unicorn-15521.exe (PID: 14496)
- Unicorn-15714.exe (PID: 14504)
- Unicorn-58889.exe (PID: 14528)
- Unicorn-4287.exe (PID: 14540)
- Unicorn-4817.exe (PID: 14552)
- Unicorn-12952.exe (PID: 14536)
- Unicorn-18888.exe (PID: 14416)
- Unicorn-21474.exe (PID: 14464)
- Unicorn-4001.exe (PID: 14680)
- Unicorn-21992.exe (PID: 14748)
- Unicorn-41858.exe (PID: 14756)
- Unicorn-5163.exe (PID: 14816)
- Unicorn-55589.exe (PID: 14856)
- Unicorn-63408.exe (PID: 14660)
- Unicorn-20971.exe (PID: 14864)
- Unicorn-64930.exe (PID: 14952)
- Unicorn-7186.exe (PID: 14980)
- Unicorn-48677.exe (PID: 14972)
- Unicorn-31874.exe (PID: 15024)
- Unicorn-31874.exe (PID: 15016)
- Unicorn-56000.exe (PID: 14924)
- Unicorn-34178.exe (PID: 15104)
- Unicorn-49445.exe (PID: 15112)
- Unicorn-29579.exe (PID: 15096)
- Unicorn-61588.exe (PID: 15144)
- Unicorn-46793.exe (PID: 15080)
- Unicorn-49097.exe (PID: 15064)
- Unicorn-59554.exe (PID: 15200)
- Unicorn-21899.exe (PID: 15188)
- Unicorn-27458.exe (PID: 15212)
- Unicorn-57753.exe (PID: 15260)
- Unicorn-52080.exe (PID: 15272)
- Unicorn-57452.exe (PID: 15300)
- Unicorn-56688.exe (PID: 15320)
- Unicorn-56658.exe (PID: 15332)
- Unicorn-35032.exe (PID: 15356)
- Unicorn-46731.exe (PID: 8308)
- Unicorn-53410.exe (PID: 15392)
- Unicorn-3524.exe (PID: 15400)
- Unicorn-680.exe (PID: 15372)
- Unicorn-51106.exe (PID: 15444)
- Unicorn-25816.exe (PID: 15456)
- Unicorn-51308.exe (PID: 15500)
- Unicorn-34588.exe (PID: 15492)
- Unicorn-11857.exe (PID: 15520)
- Unicorn-24194.exe (PID: 15536)
- Unicorn-14687.exe (PID: 15512)
- Unicorn-37323.exe (PID: 15528)
- Unicorn-2216.exe (PID: 15616)
- Unicorn-15951.exe (PID: 15608)
- Unicorn-49008.exe (PID: 15640)
- Unicorn-49008.exe (PID: 15648)
- Unicorn-31986.exe (PID: 15664)
- Unicorn-64275.exe (PID: 15632)
- Unicorn-56019.exe (PID: 15676)
- Unicorn-15169.exe (PID: 15740)
- Unicorn-60649.exe (PID: 15724)
- Unicorn-60649.exe (PID: 15732)
- Unicorn-8881.exe (PID: 15844)
- Unicorn-41600.exe (PID: 15932)
- Unicorn-20440.exe (PID: 15804)
- Unicorn-59305.exe (PID: 15816)
- Unicorn-57353.exe (PID: 15852)
- Unicorn-65532.exe (PID: 15880)
- Unicorn-45932.exe (PID: 15888)
- Unicorn-20440.exe (PID: 15996)
- Unicorn-25096.exe (PID: 15752)
- Unicorn-38832.exe (PID: 15760)
- Unicorn-16440.exe (PID: 16048)
- Unicorn-45356.exe (PID: 15828)
- Unicorn-18242.exe (PID: 15940)
- Unicorn-43863.exe (PID: 16080)
- Unicorn-32722.exe (PID: 16108)
- Unicorn-54251.exe (PID: 16140)
- Unicorn-65532.exe (PID: 15900)
- Unicorn-55740.exe (PID: 16312)
- Unicorn-57323.exe (PID: 16372)
- Unicorn-7307.exe (PID: 16320)
- Unicorn-44400.exe (PID: 15920)
- Unicorn-60649.exe (PID: 15716)
- Unicorn-7499.exe (PID: 16440)
- Unicorn-44194.exe (PID: 6700)
- Unicorn-17176.exe (PID: 16512)
- Unicorn-7499.exe (PID: 16432)
- Unicorn-56233.exe (PID: 16592)
- Unicorn-58720.exe (PID: 16568)
- Unicorn-56233.exe (PID: 16600)
- Unicorn-2113.exe (PID: 16576)
- Unicorn-3441.exe (PID: 16584)
- Unicorn-577.exe (PID: 16680)
- Unicorn-7307.exe (PID: 7848)
- Unicorn-34137.exe (PID: 16560)
- Unicorn-31339.exe (PID: 16776)
- Unicorn-36514.exe (PID: 16860)
- Unicorn-31339.exe (PID: 16768)
- Unicorn-19493.exe (PID: 16884)
- Unicorn-32107.exe (PID: 16832)
- Unicorn-32875.exe (PID: 16716)
- Unicorn-32107.exe (PID: 16836)
- Unicorn-60834.exe (PID: 16932)
- Unicorn-22905.exe (PID: 17088)
- Unicorn-32472.exe (PID: 17136)
- Unicorn-45986.exe (PID: 17152)
- Unicorn-8187.exe (PID: 17192)
- Unicorn-63824.exe (PID: 16900)
- Unicorn-32250.exe (PID: 17160)
- Unicorn-32578.exe (PID: 17228)
- Unicorn-47513.exe (PID: 16452)
- Unicorn-57875.exe (PID: 17376)
- Unicorn-46745.exe (PID: 17116)
- Unicorn-39397.exe (PID: 17332)
- Unicorn-44140.exe (PID: 17388)
- Unicorn-57875.exe (PID: 17380)
- Unicorn-57875.exe (PID: 17368)
- Unicorn-44332.exe (PID: 17404)
- Unicorn-10127.exe (PID: 16356)
- Unicorn-8452.exe (PID: 17200)
- Unicorn-38856.exe (PID: 17216)
- Unicorn-15682.exe (PID: 16528)
- Unicorn-41611.exe (PID: 17320)
- Unicorn-19256.exe (PID: 17420)
- Unicorn-50585.exe (PID: 17492)
- Unicorn-3983.exe (PID: 17544)
- Unicorn-3983.exe (PID: 17540)
- Unicorn-58629.exe (PID: 17580)
- Unicorn-17880.exe (PID: 17596)
- Unicorn-20210.exe (PID: 17628)
- Unicorn-28466.exe (PID: 17412)
- Unicorn-54025.exe (PID: 17792)
- Unicorn-8504.exe (PID: 17660)
- Unicorn-35696.exe (PID: 17692)
- Unicorn-54763.exe (PID: 17676)
- Unicorn-33426.exe (PID: 17684)
- Unicorn-20200.exe (PID: 17744)
- Unicorn-8015.exe (PID: 17812)
- Unicorn-5519.exe (PID: 17836)
- Unicorn-4913.exe (PID: 17848)
- Unicorn-51427.exe (PID: 17912)
- Unicorn-41561.exe (PID: 17696)
- Unicorn-18178.exe (PID: 17872)
- Unicorn-46355.exe (PID: 17992)
- Unicorn-36258.exe (PID: 17960)
- Unicorn-2168.exe (PID: 18064)
- Unicorn-36953.exe (PID: 18000)
- Unicorn-20005.exe (PID: 18020)
- Unicorn-34722.exe (PID: 18072)
- Unicorn-11841.exe (PID: 17884)
- Unicorn-36258.exe (PID: 17968)
- Unicorn-54524.exe (PID: 18160)
- Unicorn-16230.exe (PID: 18096)
- Unicorn-19656.exe (PID: 18200)
- Unicorn-39522.exe (PID: 18192)
- Unicorn-6968.exe (PID: 18248)
- Unicorn-47673.exe (PID: 18280)
- Unicorn-33967.exe (PID: 18256)
- Unicorn-16230.exe (PID: 18104)
- Unicorn-35682.exe (PID: 18140)
- Unicorn-33391.exe (PID: 18180)
- Unicorn-65104.exe (PID: 18336)
- Unicorn-5697.exe (PID: 18352)
- Unicorn-65104.exe (PID: 18344)
- Unicorn-48083.exe (PID: 18372)
- Unicorn-53948.exe (PID: 18384)
- Unicorn-29849.exe (PID: 18116)
- Unicorn-23983.exe (PID: 2192)
Create files in a temporary directory
- Unicorn-16456.exe (PID: 4172)
- 1 (651).exe (PID: 7020)
- Unicorn-24273.exe (PID: 1184)
- Unicorn-43947.exe (PID: 1280)
- Unicorn-30123.exe (PID: 728)
- Unicorn-13537.exe (PID: 5380)
- Unicorn-41614.exe (PID: 668)
- Unicorn-55350.exe (PID: 632)
- Unicorn-43883.exe (PID: 1660)
- Unicorn-23992.exe (PID: 1532)
- Unicorn-1543.exe (PID: 1240)
- Unicorn-50251.exe (PID: 7204)
- Unicorn-42923.exe (PID: 5548)
- Unicorn-23249.exe (PID: 720)
- Unicorn-61910.exe (PID: 7256)
- Unicorn-19883.exe (PID: 7360)
- Unicorn-43883.exe (PID: 4988)
- Unicorn-61990.exe (PID: 7452)
- Unicorn-5118.exe (PID: 7468)
- Unicorn-20075.exe (PID: 7392)
- Unicorn-37672.exe (PID: 7416)
- Unicorn-43883.exe (PID: 900)
- Unicorn-61215.exe (PID: 5960)
- Unicorn-64683.exe (PID: 8084)
- Unicorn-12721.exe (PID: 8156)
- Unicorn-62571.exe (PID: 7228)
- Unicorn-29768.exe (PID: 7292)
- Unicorn-63339.exe (PID: 7272)
- Unicorn-10257.exe (PID: 2096)
- Unicorn-48112.exe (PID: 7572)
- Unicorn-19883.exe (PID: 7352)
- Unicorn-59211.exe (PID: 3100)
- Unicorn-64790.exe (PID: 7460)
- Unicorn-4369.exe (PID: 7776)
- Unicorn-36849.exe (PID: 3008)
- Unicorn-59211.exe (PID: 6576)
- Unicorn-37041.exe (PID: 4464)
- Unicorn-61323.exe (PID: 672)
- Unicorn-45864.exe (PID: 1228)
- Unicorn-61515.exe (PID: 7736)
- Unicorn-41457.exe (PID: 6272)
- Unicorn-61323.exe (PID: 1096)
- Unicorn-20104.exe (PID: 7792)
- Unicorn-45864.exe (PID: 1180)
- Unicorn-37672.exe (PID: 7424)
- Unicorn-33457.exe (PID: 7436)
- Unicorn-48313.exe (PID: 7756)
- Unicorn-24753.exe (PID: 7884)
- Unicorn-16555.exe (PID: 7320)
- Unicorn-65288.exe (PID: 7592)
- Unicorn-60882.exe (PID: 6808)
- Unicorn-11370.exe (PID: 8072)
- Unicorn-55304.exe (PID: 2516)
- Unicorn-43865.exe (PID: 7552)
- Unicorn-38210.exe (PID: 8144)
- Unicorn-4131.exe (PID: 7988)
- Unicorn-26908.exe (PID: 7992)
- Unicorn-11422.exe (PID: 4268)
- Unicorn-48459.exe (PID: 6388)
- Unicorn-16197.exe (PID: 1348)
- Unicorn-15134.exe (PID: 7528)
- Unicorn-23217.exe (PID: 8120)
- Unicorn-64427.exe (PID: 7880)
- Unicorn-45522.exe (PID: 8208)
- Unicorn-27531.exe (PID: 8320)
- Unicorn-37515.exe (PID: 8244)
- Unicorn-56715.exe (PID: 856)
- Unicorn-25995.exe (PID: 8380)
- Unicorn-8625.exe (PID: 8364)
- Unicorn-59819.exe (PID: 8300)
- Unicorn-2408.exe (PID: 8272)
- Unicorn-46306.exe (PID: 8408)
- Unicorn-39382.exe (PID: 8348)
- Unicorn-20075.exe (PID: 7384)
- Unicorn-62315.exe (PID: 8512)
- Unicorn-61090.exe (PID: 8488)
- Unicorn-5173.exe (PID: 8400)
- Unicorn-30603.exe (PID: 8432)
- Unicorn-10161.exe (PID: 8548)
- Unicorn-18104.exe (PID: 2692)
- Unicorn-2481.exe (PID: 8616)
- Unicorn-11535.exe (PID: 8452)
- Unicorn-52907.exe (PID: 8660)
- Unicorn-13607.exe (PID: 8496)
- Unicorn-52907.exe (PID: 8652)
- Unicorn-9169.exe (PID: 7716)
- Unicorn-53099.exe (PID: 8672)
- Unicorn-28075.exe (PID: 4120)
- Unicorn-52907.exe (PID: 8700)
- Unicorn-36881.exe (PID: 8712)
- Unicorn-65368.exe (PID: 8940)
- Unicorn-48302.exe (PID: 8948)
- Unicorn-37640.exe (PID: 8644)
- Unicorn-3569.exe (PID: 7744)
- Unicorn-53135.exe (PID: 8868)
- Unicorn-52907.exe (PID: 8692)
- Unicorn-40712.exe (PID: 8892)
- Unicorn-1333.exe (PID: 8876)
- Unicorn-7198.exe (PID: 8884)
- Unicorn-56582.exe (PID: 9016)
- Unicorn-23368.exe (PID: 8928)
- Unicorn-49849.exe (PID: 8908)
- Unicorn-28712.exe (PID: 7708)
- Unicorn-22904.exe (PID: 7860)
- Unicorn-8618.exe (PID: 9076)
- Unicorn-21045.exe (PID: 9124)
- Unicorn-57352.exe (PID: 9152)
- Unicorn-21425.exe (PID: 8236)
- Unicorn-44171.exe (PID: 3888)
- Unicorn-12650.exe (PID: 8296)
- Unicorn-35723.exe (PID: 6768)
- Unicorn-8270.exe (PID: 8476)
- Unicorn-20264.exe (PID: 9044)
- Unicorn-16817.exe (PID: 9060)
- Unicorn-61305.exe (PID: 7904)
- Unicorn-440.exe (PID: 7732)
- Unicorn-5281.exe (PID: 9112)
- Unicorn-6506.exe (PID: 1088)
- Unicorn-37259.exe (PID: 9252)
- Unicorn-39755.exe (PID: 9236)
- Unicorn-6506.exe (PID: 9224)
- Unicorn-16834.exe (PID: 9336)
- Unicorn-36569.exe (PID: 9348)
- Unicorn-22559.exe (PID: 8004)
- Unicorn-49122.exe (PID: 9308)
- Unicorn-62635.exe (PID: 9320)
- Unicorn-48112.exe (PID: 7576)
- Unicorn-47321.exe (PID: 9404)
- Unicorn-27720.exe (PID: 9412)
- Unicorn-47586.exe (PID: 9464)
- Unicorn-27720.exe (PID: 9416)
- Unicorn-60969.exe (PID: 9428)
- Unicorn-13745.exe (PID: 9560)
- Unicorn-43729.exe (PID: 9576)
- Unicorn-38656.exe (PID: 9396)
- Unicorn-55727.exe (PID: 9604)
- Unicorn-11047.exe (PID: 9700)
- Unicorn-14377.exe (PID: 9636)
- Unicorn-43528.exe (PID: 9676)
- Unicorn-55183.exe (PID: 9720)
- Unicorn-52089.exe (PID: 9752)
- Unicorn-53419.exe (PID: 9792)
- Unicorn-57778.exe (PID: 9860)
- Unicorn-35345.exe (PID: 8844)
- Unicorn-9959.exe (PID: 8836)
- Unicorn-49849.exe (PID: 8916)
- Unicorn-37483.exe (PID: 9944)
- Unicorn-13642.exe (PID: 9920)
- Unicorn-49330.exe (PID: 9976)
- Unicorn-30584.exe (PID: 10000)
- Unicorn-41131.exe (PID: 10028)
- Unicorn-23560.exe (PID: 10060)
- Unicorn-58920.exe (PID: 10044)
- Unicorn-12049.exe (PID: 10144)
- Unicorn-59112.exe (PID: 10052)
- Unicorn-25784.exe (PID: 10136)
- Unicorn-49439.exe (PID: 10172)
- Unicorn-43185.exe (PID: 10212)
- Unicorn-9719.exe (PID: 10116)
- Unicorn-49346.exe (PID: 10192)
- Unicorn-35179.exe (PID: 9104)
- Unicorn-18184.exe (PID: 8480)
- Unicorn-17416.exe (PID: 8576)
- Unicorn-1608.exe (PID: 9120)
- Unicorn-53186.exe (PID: 5064)
- Unicorn-17416.exe (PID: 8528)
- Unicorn-44642.exe (PID: 4220)
- Unicorn-6314.exe (PID: 8036)
- Unicorn-7563.exe (PID: 5204)
- Unicorn-30641.exe (PID: 10264)
- Unicorn-8331.exe (PID: 10272)
- Unicorn-10552.exe (PID: 10312)
- Unicorn-59068.exe (PID: 10340)
- Unicorn-11393.exe (PID: 10372)
- Unicorn-11577.exe (PID: 9628)
- Unicorn-28363.exe (PID: 10420)
- Unicorn-42352.exe (PID: 10460)
- Unicorn-35746.exe (PID: 10444)
- Unicorn-26888.exe (PID: 10520)
- Unicorn-60329.exe (PID: 10548)
- Unicorn-39176.exe (PID: 8600)
- Unicorn-6209.exe (PID: 10584)
- Unicorn-33105.exe (PID: 10620)
- Unicorn-36770.exe (PID: 10632)
- Unicorn-22219.exe (PID: 10692)
- Unicorn-54953.exe (PID: 10720)
- Unicorn-42146.exe (PID: 10756)
- Unicorn-54953.exe (PID: 10712)
Reads security settings of Internet Explorer
- BackgroundTransferHost.exe (PID: 2984)
- BackgroundTransferHost.exe (PID: 7716)
- BackgroundTransferHost.exe (PID: 7892)
- BackgroundTransferHost.exe (PID: 8132)
- BackgroundTransferHost.exe (PID: 8048)
Creates files or folders in the user directory
- WerFault.exe (PID: 7324)
- BackgroundTransferHost.exe (PID: 7716)
- WerFault.exe (PID: 16532)
Checks proxy server information
- BackgroundTransferHost.exe (PID: 7716)
Reads the software policy settings
- BackgroundTransferHost.exe (PID: 7716)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:20 00:32:00+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
730
Monitored processes
594
Malicious processes
95
Suspicious processes
57
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 632 | C:\Users\admin\AppData\Local\Temp\Unicorn-55350.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-55350.exe | Unicorn-16456.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 668 | C:\Users\admin\AppData\Local\Temp\Unicorn-41614.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-41614.exe | Unicorn-24273.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 672 | C:\Users\admin\AppData\Local\Temp\Unicorn-61323.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-61323.exe | Unicorn-37672.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 720 | C:\Users\admin\AppData\Local\Temp\Unicorn-23249.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-23249.exe | Unicorn-43947.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 728 | C:\Users\admin\AppData\Local\Temp\Unicorn-30123.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30123.exe | Unicorn-24273.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 856 | C:\Users\admin\AppData\Local\Temp\Unicorn-56715.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-56715.exe | Unicorn-20075.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 900 | C:\Users\admin\AppData\Local\Temp\Unicorn-43883.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-43883.exe | Unicorn-23992.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 924 | C:\Users\admin\AppData\Local\Temp\Unicorn-27801.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-27801.exe | — | Unicorn-61910.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1088 | C:\Users\admin\AppData\Local\Temp\Unicorn-6506.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-6506.exe | Unicorn-53010.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1096 | C:\Users\admin\AppData\Local\Temp\Unicorn-61323.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-61323.exe | Unicorn-37672.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
18 389
Read events
18 374
Write events
15
Delete events
0
Modification events
| (PID) Process: | (2984) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (2984) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (2984) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7892) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7892) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7892) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7716) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7716) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7716) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (8132) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
Executable files
921
Suspicious files
8
Text files
1
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 4172 | Unicorn-16456.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-43947.exe | executable | |
MD5:26D1B8C90D7331C98A33EFA6249EFCBE | SHA256:69FC7B04C99E849564D880E5BC4F0A9106DEBD5B02624FE038A0E184B22C01CB | |||
| 1184 | Unicorn-24273.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30123.exe | executable | |
MD5:A3A25995108FEA30AF4A99398A146270 | SHA256:DC3014CFFE951BBBD75B0C503C6DA008642DDA841AFC8E595E70BA3193DB8DAE | |||
| 7020 | 1 (651).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-23992.exe | executable | |
MD5:07EBED1BCC01C215D81B847E1BE38330 | SHA256:723B9A4EF71B73A923D32788B61829F8970091B76C1FAFFC074E629BBEF8BB8F | |||
| 7020 | 1 (651).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-24273.exe | executable | |
MD5:BCA99EBCFBE993098BFBBF0BC8D2FFE2 | SHA256:57C8E3F5A8FDDE7368C759788E644186401A798D1F66F026A38E01C1AE3B94BD | |||
| 7020 | 1 (651).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-61215.exe | executable | |
MD5:B3087376D488E078D8A43728C7576995 | SHA256:AF89FCD2431FFC7316914D174C4D8852D76A67DD9F75EBA03DA8754867F5E33D | |||
| 4172 | Unicorn-16456.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-10257.exe | executable | |
MD5:1250A61F9F90F9CAFEC40C08F278028F | SHA256:AB907BDAFAB9388130DCCCBB34CD04541344B892E64855F594FE315AD4BB9BE6 | |||
| 5548 | Unicorn-42923.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-1543.exe | executable | |
MD5:FD7CF08D4D34F5852B63CABF50EDEFA3 | SHA256:E64A40E2DD9BB8203E9C953053028808FD4DB1354FE217E7858DAD3E1474DC50 | |||
| 1280 | Unicorn-43947.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-23249.exe | executable | |
MD5:16A683C4173B1CA60DDE39098FB6B7AF | SHA256:2C757BB53C794E39B0D0A4A34592EF196E6F2A6A82C298D442705A5212EC3DB4 | |||
| 7324 | WerFault.exe | C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Unicorn-62674.ex_f47a50ca972d9c249c9683a889a7c1179f1e7b8_56693aea_97fb3d58-9886-44df-bccc-1cbec1ddbdaf\Report.wer | — | |
MD5:— | SHA256:— | |||
| 728 | Unicorn-30123.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-43883.exe | executable | |
MD5:AC1B8CEA18D51A7B6B54E9D64EF9A96A | SHA256:D82A7C38EF53ECEFE28266BBE5E93A0C12496BB5BF9A191E9887485AF31D282C | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
8
TCP/UDP connections
30
DNS requests
18
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
— | — | GET | 200 | 23.216.77.6:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
9052 | SIHClient.exe | GET | 200 | 23.219.150.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
7716 | BackgroundTransferHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | whitelisted |
3888 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
9052 | SIHClient.exe | GET | 200 | 23.219.150.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
3284 | svchost.exe | GET | 200 | 23.216.77.6:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
3284 | svchost.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 23.216.77.6:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
2104 | svchost.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
2112 | svchost.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
3216 | svchost.exe | 20.198.162.78:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | SG | whitelisted |
6544 | svchost.exe | 40.126.31.131:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
3888 | backgroundTaskHost.exe | 20.31.169.57:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
www.bing.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |