| File name: | 1 (516) |
| Full analysis: | https://app.any.run/tasks/cc68302c-fbe7-4467-a30a-437076a93b82 |
| Verdict: | Malicious activity |
| Analysis date: | March 25, 2025, 00:58:43 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections |
| MD5: | 24DB8CF8077416B7BA6AF5A047A4DDE0 |
| SHA1: | 022E0B3D5A98BAB3485F5FD5336ED91B174F5DAD |
| SHA256: | 9D0A8C0ADF0434D9C5F55F080AC4CD0C6F266EC7A7AE8A2A20598124EFBAC22E |
| SSDEEP: | 6144:e7K8f7CJeDNOA5DlUse+1aGx/cBQlvJGBH/WyeOiFk/8SwjwpyAvEhGJs6y+soEa:e+amaOA55UPFBmhaHOyeOiJx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- Unicorn-23385.exe (PID: 5972)
- Unicorn-14623.exe (PID: 1020)
- Unicorn-58183.exe (PID: 5176)
- Unicorn-11679.exe (PID: 4244)
- Unicorn-12919.exe (PID: 6540)
- Unicorn-32785.exe (PID: 6724)
- Unicorn-52311.exe (PID: 5680)
- 1 (516).exe (PID: 6964)
- Unicorn-17152.exe (PID: 5256)
- Unicorn-22545.exe (PID: 6512)
- Unicorn-26715.exe (PID: 1012)
- Unicorn-1439.exe (PID: 1388)
- Unicorn-32581.exe (PID: 6156)
- Unicorn-37018.exe (PID: 5360)
- Unicorn-15678.exe (PID: 4408)
- Unicorn-13264.exe (PID: 5392)
- Unicorn-22545.exe (PID: 2772)
- Unicorn-5584.exe (PID: 5228)
- Unicorn-11157.exe (PID: 6872)
- Unicorn-51727.exe (PID: 7192)
- Unicorn-44749.exe (PID: 7236)
- Unicorn-41111.exe (PID: 7244)
- Unicorn-4276.exe (PID: 7224)
- Unicorn-12980.exe (PID: 6752)
- Unicorn-20110.exe (PID: 7256)
- Unicorn-28797.exe (PID: 7316)
- Unicorn-24988.exe (PID: 7292)
- Unicorn-65418.exe (PID: 7332)
- Unicorn-63669.exe (PID: 7272)
- Unicorn-30637.exe (PID: 7348)
- Unicorn-22158.exe (PID: 7444)
- Unicorn-3024.exe (PID: 7464)
- Unicorn-60881.exe (PID: 7476)
- Unicorn-36768.exe (PID: 7340)
- Unicorn-26630.exe (PID: 7452)
- Unicorn-13901.exe (PID: 7512)
- Unicorn-16624.exe (PID: 7524)
- Unicorn-38519.exe (PID: 7484)
- Unicorn-393.exe (PID: 7500)
- Unicorn-30560.exe (PID: 7616)
- Unicorn-33943.exe (PID: 7572)
- Unicorn-48593.exe (PID: 7592)
- Unicorn-5309.exe (PID: 7668)
- Unicorn-64291.exe (PID: 7704)
- Unicorn-49034.exe (PID: 7632)
- Unicorn-21920.exe (PID: 7660)
- Unicorn-60709.exe (PID: 7676)
- Unicorn-37184.exe (PID: 7936)
- Unicorn-43869.exe (PID: 7968)
- Unicorn-52241.exe (PID: 7544)
- Unicorn-45981.exe (PID: 7980)
- Unicorn-2265.exe (PID: 7828)
- Unicorn-53085.exe (PID: 7808)
- Unicorn-2198.exe (PID: 8104)
- Unicorn-29504.exe (PID: 8072)
- Unicorn-33812.exe (PID: 7924)
- Unicorn-46517.exe (PID: 2908)
- Unicorn-9707.exe (PID: 5024)
- Unicorn-59107.exe (PID: 7744)
- Unicorn-61605.exe (PID: 8096)
- Unicorn-46298.exe (PID: 1188)
- Unicorn-39194.exe (PID: 6632)
- Unicorn-30938.exe (PID: 5084)
- Unicorn-1658.exe (PID: 8136)
- Unicorn-17507.exe (PID: 7792)
- Unicorn-44180.exe (PID: 7884)
- Unicorn-49370.exe (PID: 8088)
- Unicorn-31933.exe (PID: 6272)
- Unicorn-41690.exe (PID: 3300)
- Unicorn-33812.exe (PID: 7916)
- Unicorn-16929.exe (PID: 8112)
- Unicorn-9442.exe (PID: 7212)
- Unicorn-15274.exe (PID: 4120)
- Unicorn-6231.exe (PID: 7780)
- Unicorn-14186.exe (PID: 8488)
- Unicorn-34586.exe (PID: 920)
- Unicorn-4246.exe (PID: 5548)
- Unicorn-45621.exe (PID: 7324)
- Unicorn-45877.exe (PID: 7892)
- Unicorn-43226.exe (PID: 7188)
- Unicorn-21524.exe (PID: 8128)
- Unicorn-5373.exe (PID: 7852)
- Unicorn-37672.exe (PID: 4188)
- Unicorn-1277.exe (PID: 8980)
- Unicorn-7519.exe (PID: 7736)
- Unicorn-29699.exe (PID: 9016)
- Unicorn-3088.exe (PID: 8996)
- Unicorn-3194.exe (PID: 8120)
- Unicorn-33038.exe (PID: 8300)
- Unicorn-20276.exe (PID: 8284)
- Unicorn-24069.exe (PID: 8816)
- Unicorn-4563.exe (PID: 8240)
- Unicorn-16666.exe (PID: 8396)
- Unicorn-27354.exe (PID: 8740)
- Unicorn-52728.exe (PID: 6656)
- Unicorn-25882.exe (PID: 8340)
- Unicorn-28852.exe (PID: 7768)
- Unicorn-29056.exe (PID: 8724)
- Unicorn-52740.exe (PID: 8708)
- Unicorn-412.exe (PID: 8432)
- Unicorn-6242.exe (PID: 9500)
- Unicorn-37434.exe (PID: 8164)
- Unicorn-28430.exe (PID: 8376)
- Unicorn-27401.exe (PID: 8248)
- Unicorn-16602.exe (PID: 8776)
- Unicorn-11923.exe (PID: 9928)
- Unicorn-22074.exe (PID: 8748)
- Unicorn-35517.exe (PID: 8264)
- Unicorn-44747.exe (PID: 9264)
- Unicorn-46941.exe (PID: 7876)
- Unicorn-45012.exe (PID: 9232)
- Unicorn-52692.exe (PID: 2432)
- Unicorn-56292.exe (PID: 5244)
- Unicorn-57367.exe (PID: 9960)
- Unicorn-21278.exe (PID: 9968)
- Unicorn-33498.exe (PID: 8652)
- Unicorn-41332.exe (PID: 9512)
- Unicorn-11124.exe (PID: 1452)
- Unicorn-10243.exe (PID: 9524)
- Unicorn-60670.exe (PID: 9088)
- Unicorn-34011.exe (PID: 8276)
- Unicorn-59594.exe (PID: 9284)
- Unicorn-8441.exe (PID: 1132)
- Unicorn-46269.exe (PID: 8232)
- Unicorn-54756.exe (PID: 3784)
- Unicorn-63701.exe (PID: 2564)
- Unicorn-36745.exe (PID: 7720)
- Unicorn-57242.exe (PID: 9724)
- Unicorn-59164.exe (PID: 9136)
- Unicorn-57256.exe (PID: 9616)
- Unicorn-7171.exe (PID: 9576)
- Unicorn-25146.exe (PID: 9224)
- Unicorn-2496.exe (PID: 11204)
- Unicorn-65044.exe (PID: 11224)
- Unicorn-2496.exe (PID: 11212)
- Unicorn-31997.exe (PID: 8660)
- Unicorn-63511.exe (PID: 9852)
- Unicorn-19617.exe (PID: 9744)
- Unicorn-55709.exe (PID: 8924)
- Unicorn-55014.exe (PID: 9048)
- Unicorn-47531.exe (PID: 7860)
- Unicorn-6503.exe (PID: 10856)
- Unicorn-18778.exe (PID: 10740)
- Unicorn-8164.exe (PID: 9676)
- Unicorn-44267.exe (PID: 9592)
- Unicorn-7104.exe (PID: 11112)
- Unicorn-32292.exe (PID: 11180)
- Unicorn-6044.exe (PID: 9204)
- Unicorn-3094.exe (PID: 10188)
- Unicorn-38094.exe (PID: 11708)
- Unicorn-59165.exe (PID: 11348)
- Unicorn-58018.exe (PID: 10508)
- Unicorn-23944.exe (PID: 8972)
- Unicorn-27747.exe (PID: 8536)
- Unicorn-10563.exe (PID: 9844)
- Unicorn-8441.exe (PID: 1180)
- Unicorn-55218.exe (PID: 10528)
- Unicorn-16573.exe (PID: 9172)
- Unicorn-53869.exe (PID: 12752)
- Unicorn-36325.exe (PID: 11064)
- Unicorn-23588.exe (PID: 12876)
- Unicorn-4585.exe (PID: 12744)
- Unicorn-48913.exe (PID: 9640)
- Unicorn-27933.exe (PID: 9828)
- Unicorn-12858.exe (PID: 9480)
- Unicorn-25060.exe (PID: 10228)
- Unicorn-36762.exe (PID: 10876)
- Unicorn-24451.exe (PID: 12052)
- Unicorn-2672.exe (PID: 9112)
- Unicorn-38298.exe (PID: 10960)
- Unicorn-35377.exe (PID: 13368)
- Unicorn-21641.exe (PID: 12328)
- Unicorn-26803.exe (PID: 13572)
- Unicorn-26298.exe (PID: 11948)
- Unicorn-36989.exe (PID: 10944)
- Unicorn-31088.exe (PID: 9256)
- Unicorn-30345.exe (PID: 9900)
- Unicorn-52774.exe (PID: 10640)
- Unicorn-45892.exe (PID: 10748)
- Unicorn-47929.exe (PID: 14384)
- Unicorn-3942.exe (PID: 13436)
- Unicorn-23003.exe (PID: 13172)
- Unicorn-42205.exe (PID: 15492)
- Unicorn-11623.exe (PID: 11164)
- Unicorn-50430.exe (PID: 9532)
- Unicorn-61006.exe (PID: 15668)
- Unicorn-2391.exe (PID: 15532)
Executable content was dropped or overwritten
- 1 (516).exe (PID: 6964)
- Unicorn-14623.exe (PID: 1020)
- Unicorn-23385.exe (PID: 5972)
- Unicorn-58183.exe (PID: 5176)
- Unicorn-11679.exe (PID: 4244)
- Unicorn-12919.exe (PID: 6540)
- Unicorn-52311.exe (PID: 5680)
- Unicorn-17152.exe (PID: 5256)
- Unicorn-22545.exe (PID: 6512)
- Unicorn-22545.exe (PID: 2772)
- Unicorn-26715.exe (PID: 1012)
- Unicorn-1439.exe (PID: 1388)
- Unicorn-32581.exe (PID: 6156)
- Unicorn-37018.exe (PID: 5360)
- Unicorn-12980.exe (PID: 6752)
- Unicorn-15678.exe (PID: 4408)
- Unicorn-13264.exe (PID: 5392)
- Unicorn-5584.exe (PID: 5228)
- Unicorn-11157.exe (PID: 6872)
- Unicorn-32785.exe (PID: 6724)
- Unicorn-44749.exe (PID: 7236)
- Unicorn-51727.exe (PID: 7192)
- Unicorn-41111.exe (PID: 7244)
- Unicorn-4276.exe (PID: 7224)
- Unicorn-45621.exe (PID: 7324)
- Unicorn-28797.exe (PID: 7316)
- Unicorn-20110.exe (PID: 7256)
- Unicorn-63669.exe (PID: 7272)
- Unicorn-65418.exe (PID: 7332)
- Unicorn-24988.exe (PID: 7292)
- Unicorn-36768.exe (PID: 7340)
- Unicorn-30637.exe (PID: 7348)
- Unicorn-3024.exe (PID: 7464)
- Unicorn-60881.exe (PID: 7476)
- Unicorn-26630.exe (PID: 7452)
- Unicorn-13901.exe (PID: 7512)
- Unicorn-16624.exe (PID: 7524)
- Unicorn-30560.exe (PID: 7616)
- Unicorn-393.exe (PID: 7500)
- Unicorn-38519.exe (PID: 7484)
- Unicorn-5309.exe (PID: 7668)
- Unicorn-48593.exe (PID: 7592)
- Unicorn-49034.exe (PID: 7632)
- Unicorn-21920.exe (PID: 7660)
- Unicorn-60709.exe (PID: 7676)
- Unicorn-37184.exe (PID: 7936)
- Unicorn-36745.exe (PID: 7720)
- Unicorn-43869.exe (PID: 7968)
- Unicorn-52241.exe (PID: 7544)
- Unicorn-45981.exe (PID: 7980)
- Unicorn-2265.exe (PID: 7828)
- Unicorn-53085.exe (PID: 7808)
- Unicorn-2198.exe (PID: 8104)
- Unicorn-44180.exe (PID: 7884)
- Unicorn-29504.exe (PID: 8072)
- Unicorn-61605.exe (PID: 8096)
- Unicorn-33812.exe (PID: 7924)
- Unicorn-64291.exe (PID: 7704)
- Unicorn-17507.exe (PID: 7792)
- Unicorn-9707.exe (PID: 5024)
- Unicorn-59107.exe (PID: 7744)
- Unicorn-15274.exe (PID: 4120)
- Unicorn-39194.exe (PID: 6632)
- Unicorn-33943.exe (PID: 7572)
- Unicorn-22158.exe (PID: 7444)
- Unicorn-30938.exe (PID: 5084)
- Unicorn-1658.exe (PID: 8136)
- Unicorn-49370.exe (PID: 8088)
- Unicorn-33812.exe (PID: 7916)
- Unicorn-16929.exe (PID: 8112)
- Unicorn-45877.exe (PID: 7892)
- Unicorn-6231.exe (PID: 7780)
- Unicorn-14186.exe (PID: 8488)
- Unicorn-43226.exe (PID: 7188)
- Unicorn-34586.exe (PID: 920)
- Unicorn-4246.exe (PID: 5548)
- Unicorn-35517.exe (PID: 8264)
- Unicorn-5373.exe (PID: 7852)
- Unicorn-37672.exe (PID: 4188)
- Unicorn-21524.exe (PID: 8128)
- Unicorn-1277.exe (PID: 8980)
- Unicorn-7519.exe (PID: 7736)
- Unicorn-29699.exe (PID: 9016)
- Unicorn-3194.exe (PID: 8120)
- Unicorn-4563.exe (PID: 8240)
- Unicorn-3088.exe (PID: 8996)
- Unicorn-33038.exe (PID: 8300)
- Unicorn-20276.exe (PID: 8284)
- Unicorn-24069.exe (PID: 8816)
- Unicorn-27354.exe (PID: 8740)
- Unicorn-16666.exe (PID: 8396)
- Unicorn-52728.exe (PID: 6656)
- Unicorn-25882.exe (PID: 8340)
- Unicorn-29056.exe (PID: 8724)
- Unicorn-28852.exe (PID: 7768)
- Unicorn-52740.exe (PID: 8708)
- Unicorn-412.exe (PID: 8432)
- Unicorn-6242.exe (PID: 9500)
- Unicorn-28430.exe (PID: 8376)
- Unicorn-22074.exe (PID: 8748)
- Unicorn-27401.exe (PID: 8248)
- Unicorn-37434.exe (PID: 8164)
- Unicorn-16602.exe (PID: 8776)
- Unicorn-11923.exe (PID: 9928)
- Unicorn-56292.exe (PID: 5244)
- Unicorn-52692.exe (PID: 2432)
- Unicorn-44747.exe (PID: 9264)
- Unicorn-46941.exe (PID: 7876)
- Unicorn-46517.exe (PID: 2908)
- Unicorn-57367.exe (PID: 9960)
- Unicorn-33498.exe (PID: 8652)
- Unicorn-41332.exe (PID: 9512)
- Unicorn-11124.exe (PID: 1452)
- Unicorn-10243.exe (PID: 9524)
- Unicorn-60670.exe (PID: 9088)
- Unicorn-59594.exe (PID: 9284)
- Unicorn-31997.exe (PID: 8660)
- Unicorn-8441.exe (PID: 1132)
- Unicorn-46269.exe (PID: 8232)
- Unicorn-54756.exe (PID: 3784)
- Unicorn-63701.exe (PID: 2564)
- Unicorn-57242.exe (PID: 9724)
- Unicorn-59164.exe (PID: 9136)
- Unicorn-7171.exe (PID: 9576)
- Unicorn-57256.exe (PID: 9616)
- Unicorn-2496.exe (PID: 11204)
- Unicorn-2496.exe (PID: 11212)
- Unicorn-65044.exe (PID: 11224)
- Unicorn-25146.exe (PID: 9224)
- Unicorn-63511.exe (PID: 9852)
- Unicorn-19617.exe (PID: 9744)
- Unicorn-55014.exe (PID: 9048)
- Unicorn-55709.exe (PID: 8924)
- Unicorn-18778.exe (PID: 10740)
- Unicorn-47531.exe (PID: 7860)
- Unicorn-6503.exe (PID: 10856)
- Unicorn-8164.exe (PID: 9676)
- Unicorn-7104.exe (PID: 11112)
- Unicorn-44267.exe (PID: 9592)
- Unicorn-3094.exe (PID: 10188)
- Unicorn-32292.exe (PID: 11180)
- Unicorn-6044.exe (PID: 9204)
- Unicorn-23944.exe (PID: 8972)
- Unicorn-59165.exe (PID: 11348)
- Unicorn-10563.exe (PID: 9844)
- Unicorn-38094.exe (PID: 11708)
- Unicorn-58018.exe (PID: 10508)
- Unicorn-27747.exe (PID: 8536)
- Unicorn-8441.exe (PID: 1180)
- Unicorn-21278.exe (PID: 9968)
- Unicorn-45012.exe (PID: 9232)
- Unicorn-55218.exe (PID: 10528)
- Unicorn-16573.exe (PID: 9172)
- Unicorn-53869.exe (PID: 12752)
- Unicorn-36325.exe (PID: 11064)
- Unicorn-23588.exe (PID: 12876)
- Unicorn-4585.exe (PID: 12744)
- Unicorn-48913.exe (PID: 9640)
- Unicorn-27933.exe (PID: 9828)
- Unicorn-36762.exe (PID: 10876)
- Unicorn-25060.exe (PID: 10228)
- Unicorn-24451.exe (PID: 12052)
- Unicorn-2672.exe (PID: 9112)
- Unicorn-38298.exe (PID: 10960)
- Unicorn-36989.exe (PID: 10944)
- Unicorn-31088.exe (PID: 9256)
- Unicorn-26298.exe (PID: 11948)
- Unicorn-45892.exe (PID: 10748)
- Unicorn-30345.exe (PID: 9900)
- Unicorn-52774.exe (PID: 10640)
- Unicorn-3942.exe (PID: 13436)
- Unicorn-63883.exe (PID: 10520)
- Unicorn-50430.exe (PID: 9532)
- Unicorn-41690.exe (PID: 3300)
- Unicorn-23003.exe (PID: 13172)
- Unicorn-21641.exe (PID: 12328)
- Unicorn-62363.exe (PID: 14464)
- Unicorn-64321.exe (PID: 9180)
- Unicorn-27684.exe (PID: 11156)
- Unicorn-19540.exe (PID: 10256)
- Unicorn-11623.exe (PID: 11164)
- Unicorn-57181.exe (PID: 3132)
- Unicorn-26803.exe (PID: 13572)
- Unicorn-26084.exe (PID: 11860)
- Unicorn-16503.exe (PID: 11048)
- Unicorn-6218.exe (PID: 6564)
- Unicorn-54779.exe (PID: 12724)
- Unicorn-42878.exe (PID: 9816)
- Unicorn-37809.exe (PID: 12012)
- Unicorn-49836.exe (PID: 10656)
- Unicorn-15719.exe (PID: 10680)
- Unicorn-18660.exe (PID: 13396)
- Unicorn-31933.exe (PID: 6272)
- Unicorn-47929.exe (PID: 14384)
- Unicorn-34011.exe (PID: 8276)
- Unicorn-46298.exe (PID: 1188)
- Unicorn-37646.exe (PID: 8256)
- Unicorn-42205.exe (PID: 15492)
- Unicorn-37809.exe (PID: 12020)
- Unicorn-61006.exe (PID: 15668)
- Unicorn-52004.exe (PID: 13652)
- Unicorn-39575.exe (PID: 8796)
- Unicorn-9442.exe (PID: 7212)
- Unicorn-11033.exe (PID: 8852)
- Unicorn-35377.exe (PID: 13368)
- Unicorn-36325.exe (PID: 11056)
- Unicorn-2391.exe (PID: 15532)
- Unicorn-21850.exe (PID: 10692)
- Unicorn-29454.exe (PID: 11848)
- Unicorn-21696.exe (PID: 11792)
- Unicorn-25047.exe (PID: 9608)
- Unicorn-12858.exe (PID: 9480)
- Unicorn-36081.exe (PID: 9272)
Executes application which crashes
- Unicorn-63166.exe (PID: 8948)
- Unicorn-29082.exe (PID: 11016)
Reads security settings of Internet Explorer
- ShellExperienceHost.exe (PID: 12520)
INFO
The sample compiled with chinese language support
- 1 (516).exe (PID: 6964)
- Unicorn-14623.exe (PID: 1020)
- Unicorn-58183.exe (PID: 5176)
- Unicorn-11679.exe (PID: 4244)
- Unicorn-12919.exe (PID: 6540)
- Unicorn-52311.exe (PID: 5680)
- Unicorn-23385.exe (PID: 5972)
- Unicorn-17152.exe (PID: 5256)
- Unicorn-22545.exe (PID: 6512)
- Unicorn-32785.exe (PID: 6724)
- Unicorn-26715.exe (PID: 1012)
- Unicorn-1439.exe (PID: 1388)
- Unicorn-12980.exe (PID: 6752)
- Unicorn-13264.exe (PID: 5392)
- Unicorn-22545.exe (PID: 2772)
- Unicorn-5584.exe (PID: 5228)
- Unicorn-11157.exe (PID: 6872)
- Unicorn-51727.exe (PID: 7192)
- Unicorn-41111.exe (PID: 7244)
- Unicorn-44749.exe (PID: 7236)
- Unicorn-4276.exe (PID: 7224)
- Unicorn-37018.exe (PID: 5360)
- Unicorn-20110.exe (PID: 7256)
- Unicorn-45621.exe (PID: 7324)
- Unicorn-28797.exe (PID: 7316)
- Unicorn-32581.exe (PID: 6156)
- Unicorn-63669.exe (PID: 7272)
- Unicorn-24988.exe (PID: 7292)
- Unicorn-36768.exe (PID: 7340)
- Unicorn-30637.exe (PID: 7348)
- Unicorn-3024.exe (PID: 7464)
- Unicorn-65418.exe (PID: 7332)
- Unicorn-15678.exe (PID: 4408)
- Unicorn-60881.exe (PID: 7476)
- Unicorn-26630.exe (PID: 7452)
- Unicorn-13901.exe (PID: 7512)
- Unicorn-16624.exe (PID: 7524)
- Unicorn-393.exe (PID: 7500)
- Unicorn-38519.exe (PID: 7484)
- Unicorn-30560.exe (PID: 7616)
- Unicorn-52241.exe (PID: 7544)
- Unicorn-48593.exe (PID: 7592)
- Unicorn-5309.exe (PID: 7668)
- Unicorn-64291.exe (PID: 7704)
- Unicorn-49034.exe (PID: 7632)
- Unicorn-21920.exe (PID: 7660)
- Unicorn-36745.exe (PID: 7720)
- Unicorn-60709.exe (PID: 7676)
- Unicorn-37184.exe (PID: 7936)
- Unicorn-45981.exe (PID: 7980)
- Unicorn-43869.exe (PID: 7968)
- Unicorn-53085.exe (PID: 7808)
- Unicorn-2265.exe (PID: 7828)
- Unicorn-2198.exe (PID: 8104)
- Unicorn-29504.exe (PID: 8072)
- Unicorn-44180.exe (PID: 7884)
- Unicorn-33812.exe (PID: 7924)
- Unicorn-17507.exe (PID: 7792)
- Unicorn-61605.exe (PID: 8096)
- Unicorn-9707.exe (PID: 5024)
- Unicorn-59107.exe (PID: 7744)
- Unicorn-15274.exe (PID: 4120)
- Unicorn-39194.exe (PID: 6632)
- Unicorn-33943.exe (PID: 7572)
- Unicorn-30938.exe (PID: 5084)
- Unicorn-22158.exe (PID: 7444)
- Unicorn-1658.exe (PID: 8136)
- Unicorn-49370.exe (PID: 8088)
- Unicorn-33812.exe (PID: 7916)
- Unicorn-16929.exe (PID: 8112)
- Unicorn-45877.exe (PID: 7892)
- Unicorn-6231.exe (PID: 7780)
- Unicorn-14186.exe (PID: 8488)
- Unicorn-43226.exe (PID: 7188)
- Unicorn-34586.exe (PID: 920)
- Unicorn-4246.exe (PID: 5548)
- Unicorn-35517.exe (PID: 8264)
- Unicorn-37672.exe (PID: 4188)
- Unicorn-5373.exe (PID: 7852)
- Unicorn-21524.exe (PID: 8128)
- Unicorn-1277.exe (PID: 8980)
- Unicorn-7519.exe (PID: 7736)
- Unicorn-29699.exe (PID: 9016)
- Unicorn-4563.exe (PID: 8240)
- Unicorn-3194.exe (PID: 8120)
- Unicorn-3088.exe (PID: 8996)
- Unicorn-33038.exe (PID: 8300)
- Unicorn-20276.exe (PID: 8284)
- Unicorn-24069.exe (PID: 8816)
- Unicorn-16666.exe (PID: 8396)
- Unicorn-27354.exe (PID: 8740)
- Unicorn-52728.exe (PID: 6656)
- Unicorn-29056.exe (PID: 8724)
- Unicorn-28852.exe (PID: 7768)
- Unicorn-25882.exe (PID: 8340)
- Unicorn-52740.exe (PID: 8708)
- Unicorn-6242.exe (PID: 9500)
- Unicorn-412.exe (PID: 8432)
- Unicorn-27401.exe (PID: 8248)
- Unicorn-37434.exe (PID: 8164)
- Unicorn-28430.exe (PID: 8376)
- Unicorn-16602.exe (PID: 8776)
- Unicorn-11923.exe (PID: 9928)
- Unicorn-22074.exe (PID: 8748)
- Unicorn-56292.exe (PID: 5244)
- Unicorn-46941.exe (PID: 7876)
- Unicorn-44747.exe (PID: 9264)
- Unicorn-52692.exe (PID: 2432)
- Unicorn-41332.exe (PID: 9512)
- Unicorn-46517.exe (PID: 2908)
- Unicorn-57367.exe (PID: 9960)
- Unicorn-33498.exe (PID: 8652)
- Unicorn-10243.exe (PID: 9524)
- Unicorn-11124.exe (PID: 1452)
- Unicorn-60670.exe (PID: 9088)
- Unicorn-31997.exe (PID: 8660)
- Unicorn-8441.exe (PID: 1132)
- Unicorn-46269.exe (PID: 8232)
- Unicorn-59594.exe (PID: 9284)
- Unicorn-54756.exe (PID: 3784)
- Unicorn-63701.exe (PID: 2564)
- Unicorn-57256.exe (PID: 9616)
- Unicorn-59164.exe (PID: 9136)
- Unicorn-57242.exe (PID: 9724)
- Unicorn-7171.exe (PID: 9576)
- Unicorn-25146.exe (PID: 9224)
- Unicorn-2496.exe (PID: 11212)
- Unicorn-65044.exe (PID: 11224)
- Unicorn-2496.exe (PID: 11204)
- Unicorn-63511.exe (PID: 9852)
- Unicorn-19617.exe (PID: 9744)
- Unicorn-55709.exe (PID: 8924)
- Unicorn-55014.exe (PID: 9048)
- Unicorn-47531.exe (PID: 7860)
- Unicorn-6503.exe (PID: 10856)
- Unicorn-18778.exe (PID: 10740)
- Unicorn-8164.exe (PID: 9676)
- Unicorn-7104.exe (PID: 11112)
- Unicorn-44267.exe (PID: 9592)
- Unicorn-6044.exe (PID: 9204)
- Unicorn-23944.exe (PID: 8972)
- Unicorn-3094.exe (PID: 10188)
- Unicorn-32292.exe (PID: 11180)
- Unicorn-38094.exe (PID: 11708)
- Unicorn-59165.exe (PID: 11348)
- Unicorn-58018.exe (PID: 10508)
- Unicorn-27747.exe (PID: 8536)
- Unicorn-10563.exe (PID: 9844)
- Unicorn-8441.exe (PID: 1180)
- Unicorn-21278.exe (PID: 9968)
- Unicorn-55218.exe (PID: 10528)
- Unicorn-45012.exe (PID: 9232)
- Unicorn-16573.exe (PID: 9172)
- Unicorn-53869.exe (PID: 12752)
- Unicorn-36325.exe (PID: 11064)
- Unicorn-23588.exe (PID: 12876)
- Unicorn-4585.exe (PID: 12744)
- Unicorn-48913.exe (PID: 9640)
- Unicorn-27933.exe (PID: 9828)
- Unicorn-36762.exe (PID: 10876)
- Unicorn-24451.exe (PID: 12052)
- Unicorn-25060.exe (PID: 10228)
- Unicorn-2672.exe (PID: 9112)
- Unicorn-38298.exe (PID: 10960)
- Unicorn-36989.exe (PID: 10944)
- Unicorn-31088.exe (PID: 9256)
- Unicorn-26298.exe (PID: 11948)
- Unicorn-63883.exe (PID: 10520)
- Unicorn-30345.exe (PID: 9900)
- Unicorn-52774.exe (PID: 10640)
- Unicorn-45892.exe (PID: 10748)
- Unicorn-50430.exe (PID: 9532)
- Unicorn-3942.exe (PID: 13436)
- Unicorn-23003.exe (PID: 13172)
- Unicorn-41690.exe (PID: 3300)
- Unicorn-11623.exe (PID: 11164)
- Unicorn-21641.exe (PID: 12328)
- Unicorn-62363.exe (PID: 14464)
- Unicorn-64321.exe (PID: 9180)
- Unicorn-27684.exe (PID: 11156)
- Unicorn-49836.exe (PID: 10656)
- Unicorn-26084.exe (PID: 11860)
- Unicorn-16503.exe (PID: 11048)
- Unicorn-6218.exe (PID: 6564)
- Unicorn-42878.exe (PID: 9816)
- Unicorn-54779.exe (PID: 12724)
- Unicorn-19540.exe (PID: 10256)
- Unicorn-57181.exe (PID: 3132)
- Unicorn-26803.exe (PID: 13572)
- Unicorn-18660.exe (PID: 13396)
- Unicorn-31933.exe (PID: 6272)
- Unicorn-47929.exe (PID: 14384)
- Unicorn-34011.exe (PID: 8276)
- Unicorn-46298.exe (PID: 1188)
- Unicorn-37646.exe (PID: 8256)
- Unicorn-37809.exe (PID: 12012)
- Unicorn-37809.exe (PID: 12020)
- Unicorn-15719.exe (PID: 10680)
- Unicorn-2391.exe (PID: 15532)
- Unicorn-61006.exe (PID: 15668)
- Unicorn-52004.exe (PID: 13652)
- Unicorn-39575.exe (PID: 8796)
- Unicorn-11033.exe (PID: 8852)
- Unicorn-9442.exe (PID: 7212)
- Unicorn-36325.exe (PID: 11056)
- Unicorn-35377.exe (PID: 13368)
- Unicorn-42205.exe (PID: 15492)
- Unicorn-12858.exe (PID: 9480)
- Unicorn-21850.exe (PID: 10692)
- Unicorn-36081.exe (PID: 9272)
- Unicorn-21696.exe (PID: 11792)
- Unicorn-29454.exe (PID: 11848)
- Unicorn-25047.exe (PID: 9608)
Checks supported languages
- 1 (516).exe (PID: 6964)
- Unicorn-23385.exe (PID: 5972)
- Unicorn-14623.exe (PID: 1020)
- Unicorn-58183.exe (PID: 5176)
- Unicorn-11679.exe (PID: 4244)
- Unicorn-12919.exe (PID: 6540)
- Unicorn-52311.exe (PID: 5680)
- Unicorn-32785.exe (PID: 6724)
- Unicorn-22545.exe (PID: 6512)
- Unicorn-32581.exe (PID: 6156)
- Unicorn-1439.exe (PID: 1388)
- Unicorn-22545.exe (PID: 2772)
- Unicorn-12980.exe (PID: 6752)
- Unicorn-26715.exe (PID: 1012)
- Unicorn-37018.exe (PID: 5360)
- Unicorn-15678.exe (PID: 4408)
- Unicorn-5584.exe (PID: 5228)
- Unicorn-13264.exe (PID: 5392)
- Unicorn-11157.exe (PID: 6872)
- Unicorn-4276.exe (PID: 7224)
- Unicorn-44749.exe (PID: 7236)
- Unicorn-17152.exe (PID: 5256)
- Unicorn-20110.exe (PID: 7256)
- Unicorn-28797.exe (PID: 7316)
- Unicorn-51727.exe (PID: 7192)
- Unicorn-45621.exe (PID: 7324)
- Unicorn-41111.exe (PID: 7244)
- Unicorn-65418.exe (PID: 7332)
- Unicorn-36768.exe (PID: 7340)
- Unicorn-30637.exe (PID: 7348)
- Unicorn-22158.exe (PID: 7444)
- Unicorn-26630.exe (PID: 7452)
- Unicorn-3024.exe (PID: 7464)
- Unicorn-60881.exe (PID: 7476)
- Unicorn-38519.exe (PID: 7484)
- Unicorn-13901.exe (PID: 7512)
- Unicorn-393.exe (PID: 7500)
- Unicorn-16624.exe (PID: 7524)
- Unicorn-33943.exe (PID: 7572)
- Unicorn-48593.exe (PID: 7592)
- Unicorn-63669.exe (PID: 7272)
- Unicorn-52241.exe (PID: 7544)
- Unicorn-21920.exe (PID: 7660)
- Unicorn-5309.exe (PID: 7668)
- Unicorn-49034.exe (PID: 7632)
- Unicorn-24988.exe (PID: 7292)
- Unicorn-60709.exe (PID: 7676)
- Unicorn-7519.exe (PID: 7736)
- Unicorn-59107.exe (PID: 7744)
- Unicorn-64291.exe (PID: 7704)
- Unicorn-36745.exe (PID: 7720)
- Unicorn-6231.exe (PID: 7780)
- Unicorn-17507.exe (PID: 7792)
- Unicorn-53085.exe (PID: 7808)
- Unicorn-37184.exe (PID: 7936)
- Unicorn-2265.exe (PID: 7828)
- Unicorn-5373.exe (PID: 7852)
- Unicorn-28852.exe (PID: 7768)
- Unicorn-47531.exe (PID: 7860)
- Unicorn-30560.exe (PID: 7616)
- Unicorn-45981.exe (PID: 7980)
- Unicorn-45877.exe (PID: 7892)
- Unicorn-46941.exe (PID: 7876)
- Unicorn-44180.exe (PID: 7884)
- Unicorn-33812.exe (PID: 7924)
- Unicorn-29504.exe (PID: 8072)
- Unicorn-49370.exe (PID: 8088)
- Unicorn-33812.exe (PID: 7916)
- Unicorn-2198.exe (PID: 8104)
- Unicorn-61605.exe (PID: 8096)
- Unicorn-16929.exe (PID: 8112)
- Unicorn-3194.exe (PID: 8120)
- Unicorn-21524.exe (PID: 8128)
- Unicorn-1658.exe (PID: 8136)
- Unicorn-43226.exe (PID: 7188)
- Unicorn-9707.exe (PID: 5024)
- Unicorn-37672.exe (PID: 4188)
- Unicorn-9442.exe (PID: 7212)
- Unicorn-15274.exe (PID: 4120)
- Unicorn-46298.exe (PID: 1188)
- Unicorn-39194.exe (PID: 6632)
- Unicorn-46517.exe (PID: 2908)
- Unicorn-41690.exe (PID: 3300)
- Unicorn-30938.exe (PID: 5084)
- Unicorn-54756.exe (PID: 3784)
- Unicorn-31933.exe (PID: 6272)
- Unicorn-43869.exe (PID: 7968)
- Unicorn-8441.exe (PID: 1132)
- Unicorn-52728.exe (PID: 6656)
- Unicorn-4246.exe (PID: 5548)
- Unicorn-53020.exe (PID: 5216)
- Unicorn-63701.exe (PID: 2564)
- Unicorn-6218.exe (PID: 6564)
- Unicorn-34586.exe (PID: 920)
- Unicorn-46269.exe (PID: 8232)
- Unicorn-4563.exe (PID: 8240)
- Unicorn-27401.exe (PID: 8248)
- Unicorn-32093.exe (PID: 5588)
- Unicorn-20276.exe (PID: 8284)
- Unicorn-35517.exe (PID: 8264)
- Unicorn-34011.exe (PID: 8276)
- Unicorn-33038.exe (PID: 8300)
- Unicorn-11124.exe (PID: 1452)
- Unicorn-41242.exe (PID: 8208)
- Unicorn-25882.exe (PID: 8340)
- Unicorn-28430.exe (PID: 8376)
- Unicorn-8441.exe (PID: 1180)
- Unicorn-14186.exe (PID: 8488)
- Unicorn-37646.exe (PID: 8256)
- Unicorn-412.exe (PID: 8432)
- Unicorn-33498.exe (PID: 8652)
- Unicorn-29725.exe (PID: 8668)
- Unicorn-52740.exe (PID: 8708)
- Unicorn-27354.exe (PID: 8740)
- Unicorn-16602.exe (PID: 8776)
- Unicorn-39575.exe (PID: 8796)
- Unicorn-31997.exe (PID: 8660)
- Unicorn-11033.exe (PID: 8852)
- Unicorn-29056.exe (PID: 8724)
- Unicorn-1277.exe (PID: 8980)
- Unicorn-17773.exe (PID: 8916)
- Unicorn-3088.exe (PID: 8996)
- Unicorn-55709.exe (PID: 8924)
- Unicorn-29699.exe (PID: 9016)
- Unicorn-62932.exe (PID: 8756)
- Unicorn-63166.exe (PID: 8948)
- Unicorn-32788.exe (PID: 8964)
- Unicorn-24069.exe (PID: 8816)
- Unicorn-23944.exe (PID: 8972)
- Unicorn-55014.exe (PID: 9048)
- Unicorn-60670.exe (PID: 9088)
- Unicorn-16666.exe (PID: 8396)
- Unicorn-37291.exe (PID: 9104)
- Unicorn-2672.exe (PID: 9112)
- Unicorn-59164.exe (PID: 9136)
- Unicorn-16573.exe (PID: 9172)
- Unicorn-64321.exe (PID: 9180)
- Unicorn-6044.exe (PID: 9196)
- Unicorn-27747.exe (PID: 8536)
- Unicorn-56292.exe (PID: 5244)
- Unicorn-51732.exe (PID: 672)
- Unicorn-37434.exe (PID: 8164)
- Unicorn-20762.exe (PID: 9188)
- Unicorn-6044.exe (PID: 9204)
- Unicorn-57181.exe (PID: 3132)
- Unicorn-22074.exe (PID: 8748)
- Unicorn-25146.exe (PID: 9224)
- Unicorn-7058.exe (PID: 9240)
- Unicorn-15458.exe (PID: 9248)
- Unicorn-31088.exe (PID: 9256)
- Unicorn-44747.exe (PID: 9264)
- Unicorn-36081.exe (PID: 9272)
- Unicorn-59594.exe (PID: 9284)
- Unicorn-52692.exe (PID: 2432)
- Unicorn-45012.exe (PID: 9232)
- Unicorn-269.exe (PID: 9440)
- Unicorn-12858.exe (PID: 9480)
- Unicorn-15650.exe (PID: 9488)
- Unicorn-26593.exe (PID: 9464)
- Unicorn-41332.exe (PID: 9512)
- Unicorn-6242.exe (PID: 9500)
- Unicorn-10243.exe (PID: 9524)
- Unicorn-50430.exe (PID: 9532)
- Unicorn-14566.exe (PID: 9568)
- Unicorn-37803.exe (PID: 9448)
- Unicorn-7171.exe (PID: 9576)
- Unicorn-11923.exe (PID: 9928)
- Unicorn-44267.exe (PID: 9592)
- Unicorn-20439.exe (PID: 9600)
- Unicorn-40513.exe (PID: 9632)
- Unicorn-21278.exe (PID: 9968)
- Unicorn-25047.exe (PID: 9608)
- Unicorn-57256.exe (PID: 9616)
- Unicorn-24092.exe (PID: 9656)
- Unicorn-48913.exe (PID: 9640)
- Unicorn-24357.exe (PID: 9648)
- Unicorn-57367.exe (PID: 9960)
- Unicorn-8164.exe (PID: 9676)
- Unicorn-36500.exe (PID: 9684)
- Unicorn-57242.exe (PID: 9724)
- Unicorn-32459.exe (PID: 9456)
- Unicorn-54184.exe (PID: 9756)
- Unicorn-19617.exe (PID: 9744)
- Unicorn-1060.exe (PID: 9736)
- Unicorn-50833.exe (PID: 9796)
- Unicorn-56355.exe (PID: 9836)
- Unicorn-42878.exe (PID: 9816)
- Unicorn-27933.exe (PID: 9828)
- Unicorn-59966.exe (PID: 9668)
- Unicorn-10563.exe (PID: 9844)
- Unicorn-63511.exe (PID: 9852)
- Unicorn-30345.exe (PID: 9900)
- Unicorn-50211.exe (PID: 9908)
- Unicorn-15872.exe (PID: 10020)
- Unicorn-33786.exe (PID: 9764)
- Unicorn-3094.exe (PID: 10188)
- Unicorn-47589.exe (PID: 10036)
- Unicorn-52183.exe (PID: 10056)
- Unicorn-64064.exe (PID: 10208)
- Unicorn-25060.exe (PID: 10228)
- Unicorn-34065.exe (PID: 2800)
- Unicorn-19540.exe (PID: 10256)
- Unicorn-43354.exe (PID: 10384)
- Unicorn-12262.exe (PID: 10200)
- Unicorn-38673.exe (PID: 10216)
- Unicorn-17693.exe (PID: 10416)
- Unicorn-16384.exe (PID: 10480)
- Unicorn-38682.exe (PID: 10504)
- Unicorn-55218.exe (PID: 10528)
- Unicorn-63883.exe (PID: 10520)
- Unicorn-63883.exe (PID: 10536)
- Unicorn-58018.exe (PID: 10508)
- Unicorn-44283.exe (PID: 10544)
- Unicorn-49836.exe (PID: 10656)
- Unicorn-15719.exe (PID: 10680)
- Unicorn-21850.exe (PID: 10692)
- Unicorn-52820.exe (PID: 10728)
- Unicorn-2496.exe (PID: 11204)
- Unicorn-45892.exe (PID: 10748)
- Unicorn-2496.exe (PID: 11212)
- Unicorn-65044.exe (PID: 11224)
- Unicorn-18778.exe (PID: 10740)
- Unicorn-25623.exe (PID: 10840)
- Unicorn-45140.exe (PID: 10772)
- Unicorn-31191.exe (PID: 10832)
- Unicorn-61149.exe (PID: 10816)
- Unicorn-39747.exe (PID: 10848)
- Unicorn-6503.exe (PID: 10856)
- Unicorn-36762.exe (PID: 10876)
- Unicorn-5267.exe (PID: 10888)
- Unicorn-5267.exe (PID: 10896)
- Unicorn-18205.exe (PID: 10912)
- Unicorn-9789.exe (PID: 10864)
- Unicorn-7104.exe (PID: 11112)
- Unicorn-27684.exe (PID: 11156)
- Unicorn-8671.exe (PID: 11004)
- Unicorn-38298.exe (PID: 10968)
- Unicorn-36325.exe (PID: 11064)
- Unicorn-29619.exe (PID: 10928)
- Unicorn-15884.exe (PID: 10936)
- Unicorn-52774.exe (PID: 10640)
- Unicorn-38298.exe (PID: 10960)
- Unicorn-26819.exe (PID: 10920)
- Unicorn-16503.exe (PID: 11048)
- Unicorn-11623.exe (PID: 11164)
- Unicorn-13949.exe (PID: 11148)
- Unicorn-36311.exe (PID: 11136)
- Unicorn-54660.exe (PID: 11120)
- Unicorn-29082.exe (PID: 11016)
- Unicorn-64900.exe (PID: 10976)
- Unicorn-59476.exe (PID: 11040)
- Unicorn-23898.exe (PID: 11076)
- Unicorn-22096.exe (PID: 11196)
- Unicorn-36325.exe (PID: 11056)
- Unicorn-36989.exe (PID: 10944)
- Unicorn-59165.exe (PID: 11348)
- Unicorn-32292.exe (PID: 11180)
- Unicorn-7103.exe (PID: 11172)
- Unicorn-2496.exe (PID: 11188)
- Unicorn-28547.exe (PID: 11436)
- Unicorn-49387.exe (PID: 11424)
- Unicorn-18482.exe (PID: 11444)
- Unicorn-1433.exe (PID: 11500)
- Unicorn-38548.exe (PID: 11492)
- Unicorn-2780.exe (PID: 11700)
- Unicorn-14806.exe (PID: 11580)
- Unicorn-63898.exe (PID: 11456)
- Unicorn-38094.exe (PID: 11708)
- Unicorn-19802.exe (PID: 11740)
- Unicorn-1244.exe (PID: 11732)
- Unicorn-29454.exe (PID: 11848)
- Unicorn-26084.exe (PID: 11860)
- Unicorn-29454.exe (PID: 11828)
- Unicorn-21696.exe (PID: 11792)
- ShellExperienceHost.exe (PID: 12520)
- Unicorn-50772.exe (PID: 11892)
- Unicorn-29156.exe (PID: 11884)
- Unicorn-26298.exe (PID: 11948)
- Unicorn-57579.exe (PID: 11908)
- Unicorn-21274.exe (PID: 11960)
- Unicorn-12349.exe (PID: 11868)
- Unicorn-53869.exe (PID: 12752)
- Unicorn-25053.exe (PID: 12116)
- Unicorn-46475.exe (PID: 11968)
- Unicorn-26874.exe (PID: 11976)
- Unicorn-46475.exe (PID: 11992)
- Unicorn-24451.exe (PID: 12052)
- Unicorn-40610.exe (PID: 12004)
- Unicorn-37809.exe (PID: 12012)
- Unicorn-47249.exe (PID: 12248)
- Unicorn-29930.exe (PID: 12188)
- Unicorn-15457.exe (PID: 12276)
- Unicorn-14711.exe (PID: 12268)
- Unicorn-16887.exe (PID: 12296)
- Unicorn-26874.exe (PID: 11984)
- Unicorn-37336.exe (PID: 12136)
- Unicorn-33736.exe (PID: 12256)
- Unicorn-23588.exe (PID: 12876)
- Unicorn-4585.exe (PID: 12744)
- Unicorn-43760.exe (PID: 12436)
- Unicorn-37809.exe (PID: 12020)
- Unicorn-63085.exe (PID: 12384)
- Unicorn-54779.exe (PID: 12724)
- Unicorn-1722.exe (PID: 12284)
- Unicorn-42906.exe (PID: 4108)
- Unicorn-41370.exe (PID: 3396)
- Unicorn-36492.exe (PID: 6944)
- Unicorn-50340.exe (PID: 12540)
- Unicorn-38094.exe (PID: 11640)
- Unicorn-10743.exe (PID: 12472)
- Unicorn-8471.exe (PID: 12308)
- Unicorn-16887.exe (PID: 11656)
- Unicorn-61563.exe (PID: 11724)
- Unicorn-36200.exe (PID: 11620)
- Unicorn-14842.exe (PID: 5596)
- Unicorn-36200.exe (PID: 12164)
- Unicorn-57579.exe (PID: 12700)
- Unicorn-11689.exe (PID: 12644)
- Unicorn-60449.exe (PID: 12588)
- Unicorn-23508.exe (PID: 4572)
- Unicorn-58126.exe (PID: 4284)
- Unicorn-63709.exe (PID: 12688)
- Unicorn-47725.exe (PID: 13072)
- Unicorn-45613.exe (PID: 13096)
- Unicorn-16887.exe (PID: 11672)
- Unicorn-23003.exe (PID: 13172)
- Unicorn-25764.exe (PID: 13352)
- Unicorn-51690.exe (PID: 13424)
- Unicorn-10963.exe (PID: 13412)
- Unicorn-3942.exe (PID: 13436)
- Unicorn-43434.exe (PID: 13452)
- Unicorn-8851.exe (PID: 13480)
- Unicorn-62088.exe (PID: 14232)
- Unicorn-32403.exe (PID: 13576)
- Unicorn-17003.exe (PID: 13548)
- Unicorn-54056.exe (PID: 13492)
- Unicorn-61652.exe (PID: 14124)
- Unicorn-46506.exe (PID: 13520)
- Unicorn-16453.exe (PID: 14188)
- Unicorn-52830.exe (PID: 14180)
- Unicorn-27629.exe (PID: 14160)
- Unicorn-4283.exe (PID: 14096)
- Unicorn-21641.exe (PID: 14040)
- Unicorn-21641.exe (PID: 14032)
- Unicorn-12030.exe (PID: 13888)
- Unicorn-9389.exe (PID: 14020)
- Unicorn-40081.exe (PID: 14168)
- Unicorn-35483.exe (PID: 14000)
- Unicorn-45549.exe (PID: 13992)
- Unicorn-56239.exe (PID: 13984)
- Unicorn-8304.exe (PID: 13956)
- Unicorn-52025.exe (PID: 13840)
- Unicorn-32642.exe (PID: 14140)
- Unicorn-43339.exe (PID: 13644)
- Unicorn-33009.exe (PID: 13636)
- Unicorn-18660.exe (PID: 13396)
- Unicorn-8314.exe (PID: 14132)
- Unicorn-64771.exe (PID: 13776)
- Unicorn-53021.exe (PID: 14116)
- Unicorn-44853.exe (PID: 14108)
- Unicorn-5517.exe (PID: 13796)
- Unicorn-21641.exe (PID: 12328)
- Unicorn-32424.exe (PID: 13832)
- Unicorn-22039.exe (PID: 13856)
- Unicorn-19274.exe (PID: 13620)
- Unicorn-8304.exe (PID: 13948)
- Unicorn-35377.exe (PID: 13368)
- Unicorn-8304.exe (PID: 13940)
- Unicorn-52004.exe (PID: 13652)
- Unicorn-37961.exe (PID: 13880)
- Unicorn-50209.exe (PID: 13752)
- Unicorn-27905.exe (PID: 13904)
- Unicorn-38875.exe (PID: 13604)
- Unicorn-46348.exe (PID: 13912)
- Unicorn-26803.exe (PID: 13572)
- Unicorn-22039.exe (PID: 14308)
- Unicorn-22039.exe (PID: 14300)
- Unicorn-15685.exe (PID: 13564)
- Unicorn-8304.exe (PID: 14340)
- Unicorn-33009.exe (PID: 13628)
- Unicorn-64157.exe (PID: 13896)
- Unicorn-28876.exe (PID: 13932)
- Unicorn-19239.exe (PID: 13924)
- Unicorn-4220.exe (PID: 14348)
- Unicorn-41538.exe (PID: 14356)
- Unicorn-17955.exe (PID: 13872)
- Unicorn-46139.exe (PID: 13584)
- Unicorn-14560.exe (PID: 14368)
- Unicorn-42064.exe (PID: 14376)
- Unicorn-16321.exe (PID: 14392)
- Unicorn-50193.exe (PID: 13612)
- Unicorn-38875.exe (PID: 13596)
- Unicorn-53273.exe (PID: 14456)
- Unicorn-47929.exe (PID: 14384)
- Unicorn-54967.exe (PID: 14516)
- Unicorn-42205.exe (PID: 15492)
- Unicorn-2391.exe (PID: 15532)
- Unicorn-62363.exe (PID: 14464)
- Unicorn-15058.exe (PID: 14488)
- Unicorn-10668.exe (PID: 14696)
- Unicorn-64333.exe (PID: 14636)
- Unicorn-40021.exe (PID: 14628)
- Unicorn-23375.exe (PID: 13760)
- Unicorn-55781.exe (PID: 14588)
- Unicorn-15787.exe (PID: 14720)
- Unicorn-61458.exe (PID: 14728)
- Unicorn-8594.exe (PID: 14836)
- Unicorn-58536.exe (PID: 14844)
- Unicorn-44830.exe (PID: 14852)
- Unicorn-64768.exe (PID: 14532)
- Unicorn-37961.exe (PID: 13864)
- Unicorn-21795.exe (PID: 14676)
- Unicorn-53638.exe (PID: 14668)
- Unicorn-36778.exe (PID: 14816)
- Unicorn-64676.exe (PID: 14940)
- Unicorn-120.exe (PID: 14948)
- Unicorn-57577.exe (PID: 14956)
- Unicorn-57036.exe (PID: 14976)
- Unicorn-40389.exe (PID: 15048)
- Unicorn-61006.exe (PID: 15668)
- Unicorn-36311.exe (PID: 14752)
- Unicorn-35153.exe (PID: 15068)
- Unicorn-11524.exe (PID: 15104)
- Unicorn-56782.exe (PID: 15116)
- Unicorn-5773.exe (PID: 15132)
- Unicorn-63688.exe (PID: 15144)
- Unicorn-11638.exe (PID: 15168)
- Unicorn-11638.exe (PID: 15160)
- Unicorn-5773.exe (PID: 15176)
- Unicorn-11638.exe (PID: 15184)
- Unicorn-57575.exe (PID: 15192)
- Unicorn-61659.exe (PID: 15208)
- Unicorn-53408.exe (PID: 15200)
- Unicorn-15722.exe (PID: 15152)
- Unicorn-63367.exe (PID: 15420)
- Unicorn-18566.exe (PID: 14524)
- Unicorn-51826.exe (PID: 15476)
- Unicorn-482.exe (PID: 15736)
- Unicorn-23368.exe (PID: 15704)
- Unicorn-56067.exe (PID: 15804)
- Unicorn-18125.exe (PID: 4884)
- Unicorn-59283.exe (PID: 15412)
- Unicorn-9895.exe (PID: 15692)
- Unicorn-16438.exe (PID: 15888)
- Unicorn-27185.exe (PID: 15920)
- Unicorn-37320.exe (PID: 15976)
- Unicorn-60123.exe (PID: 15224)
- Unicorn-9857.exe (PID: 15232)
- Unicorn-54523.exe (PID: 15268)
- Unicorn-64207.exe (PID: 15216)
- Unicorn-10102.exe (PID: 15260)
- Unicorn-14186.exe (PID: 15276)
- Unicorn-38000.exe (PID: 15332)
- Unicorn-38192.exe (PID: 15312)
- Unicorn-60785.exe (PID: 16380)
- Unicorn-2973.exe (PID: 15240)
- Unicorn-47840.exe (PID: 15344)
- Unicorn-18267.exe (PID: 15840)
- Unicorn-16705.exe (PID: 15848)
- Unicorn-50472.exe (PID: 15856)
- Unicorn-47050.exe (PID: 16676)
Reads the computer name
- 1 (516).exe (PID: 6964)
- Unicorn-58183.exe (PID: 5176)
- Unicorn-23385.exe (PID: 5972)
- Unicorn-14623.exe (PID: 1020)
- Unicorn-11679.exe (PID: 4244)
- Unicorn-12919.exe (PID: 6540)
- Unicorn-32785.exe (PID: 6724)
- Unicorn-52311.exe (PID: 5680)
- Unicorn-22545.exe (PID: 6512)
- Unicorn-17152.exe (PID: 5256)
- Unicorn-22545.exe (PID: 2772)
- Unicorn-26715.exe (PID: 1012)
- Unicorn-1439.exe (PID: 1388)
- Unicorn-12980.exe (PID: 6752)
- Unicorn-32581.exe (PID: 6156)
- Unicorn-15678.exe (PID: 4408)
- Unicorn-13264.exe (PID: 5392)
- Unicorn-5584.exe (PID: 5228)
- Unicorn-11157.exe (PID: 6872)
- Unicorn-37018.exe (PID: 5360)
- Unicorn-44749.exe (PID: 7236)
- Unicorn-51727.exe (PID: 7192)
- Unicorn-4276.exe (PID: 7224)
- Unicorn-45621.exe (PID: 7324)
- Unicorn-20110.exe (PID: 7256)
- Unicorn-24988.exe (PID: 7292)
- Unicorn-65418.exe (PID: 7332)
- Unicorn-28797.exe (PID: 7316)
- Unicorn-63669.exe (PID: 7272)
- Unicorn-30637.exe (PID: 7348)
- Unicorn-36768.exe (PID: 7340)
- Unicorn-22158.exe (PID: 7444)
- Unicorn-3024.exe (PID: 7464)
- Unicorn-60881.exe (PID: 7476)
- Unicorn-26630.exe (PID: 7452)
- Unicorn-16624.exe (PID: 7524)
- Unicorn-393.exe (PID: 7500)
- Unicorn-38519.exe (PID: 7484)
- Unicorn-41111.exe (PID: 7244)
- Unicorn-13901.exe (PID: 7512)
- Unicorn-33943.exe (PID: 7572)
- Unicorn-52241.exe (PID: 7544)
- Unicorn-48593.exe (PID: 7592)
- Unicorn-30560.exe (PID: 7616)
- Unicorn-5309.exe (PID: 7668)
- Unicorn-64291.exe (PID: 7704)
- Unicorn-49034.exe (PID: 7632)
- Unicorn-21920.exe (PID: 7660)
- Unicorn-36745.exe (PID: 7720)
- Unicorn-60709.exe (PID: 7676)
- Unicorn-37184.exe (PID: 7936)
- Unicorn-43869.exe (PID: 7968)
- Unicorn-2265.exe (PID: 7828)
- Unicorn-45981.exe (PID: 7980)
- Unicorn-2198.exe (PID: 8104)
- Unicorn-53085.exe (PID: 7808)
- Unicorn-29504.exe (PID: 8072)
- Unicorn-44180.exe (PID: 7884)
- Unicorn-46517.exe (PID: 2908)
- Unicorn-17507.exe (PID: 7792)
- Unicorn-33812.exe (PID: 7924)
- Unicorn-61605.exe (PID: 8096)
- Unicorn-9707.exe (PID: 5024)
- Unicorn-59107.exe (PID: 7744)
- Unicorn-15274.exe (PID: 4120)
- Unicorn-46298.exe (PID: 1188)
- Unicorn-39194.exe (PID: 6632)
- Unicorn-1658.exe (PID: 8136)
- Unicorn-30938.exe (PID: 5084)
- Unicorn-31933.exe (PID: 6272)
- Unicorn-49370.exe (PID: 8088)
- Unicorn-45877.exe (PID: 7892)
- Unicorn-41690.exe (PID: 3300)
- Unicorn-33812.exe (PID: 7916)
- Unicorn-16929.exe (PID: 8112)
- Unicorn-43226.exe (PID: 7188)
- Unicorn-34586.exe (PID: 920)
- Unicorn-14186.exe (PID: 8488)
- Unicorn-9442.exe (PID: 7212)
- Unicorn-6231.exe (PID: 7780)
- Unicorn-4246.exe (PID: 5548)
- Unicorn-35517.exe (PID: 8264)
- Unicorn-37672.exe (PID: 4188)
- Unicorn-21524.exe (PID: 8128)
- Unicorn-5373.exe (PID: 7852)
- Unicorn-1277.exe (PID: 8980)
- Unicorn-4563.exe (PID: 8240)
- Unicorn-3194.exe (PID: 8120)
- Unicorn-7519.exe (PID: 7736)
- Unicorn-33038.exe (PID: 8300)
- Unicorn-20276.exe (PID: 8284)
- Unicorn-29699.exe (PID: 9016)
- Unicorn-3088.exe (PID: 8996)
- Unicorn-16666.exe (PID: 8396)
- Unicorn-27354.exe (PID: 8740)
- Unicorn-52728.exe (PID: 6656)
- Unicorn-24069.exe (PID: 8816)
- Unicorn-29056.exe (PID: 8724)
- Unicorn-25882.exe (PID: 8340)
- Unicorn-28852.exe (PID: 7768)
- Unicorn-52740.exe (PID: 8708)
- Unicorn-412.exe (PID: 8432)
- Unicorn-6242.exe (PID: 9500)
- Unicorn-16602.exe (PID: 8776)
- Unicorn-40513.exe (PID: 9632)
- Unicorn-27401.exe (PID: 8248)
- Unicorn-28430.exe (PID: 8376)
- Unicorn-37434.exe (PID: 8164)
- Unicorn-22074.exe (PID: 8748)
- Unicorn-46941.exe (PID: 7876)
- Unicorn-11923.exe (PID: 9928)
- Unicorn-56292.exe (PID: 5244)
- Unicorn-44747.exe (PID: 9264)
- Unicorn-45012.exe (PID: 9232)
- Unicorn-52692.exe (PID: 2432)
- Unicorn-41332.exe (PID: 9512)
- Unicorn-21278.exe (PID: 9968)
- Unicorn-57367.exe (PID: 9960)
- Unicorn-33498.exe (PID: 8652)
- Unicorn-11124.exe (PID: 1452)
- Unicorn-10243.exe (PID: 9524)
- Unicorn-31997.exe (PID: 8660)
- Unicorn-34011.exe (PID: 8276)
- Unicorn-8441.exe (PID: 1132)
- Unicorn-59594.exe (PID: 9284)
- Unicorn-46269.exe (PID: 8232)
- Unicorn-54756.exe (PID: 3784)
- Unicorn-63701.exe (PID: 2564)
- Unicorn-25146.exe (PID: 9224)
- Unicorn-57242.exe (PID: 9724)
- Unicorn-60670.exe (PID: 9088)
- Unicorn-59164.exe (PID: 9136)
- Unicorn-57256.exe (PID: 9616)
- Unicorn-47531.exe (PID: 7860)
- Unicorn-7171.exe (PID: 9576)
- Unicorn-2496.exe (PID: 11204)
- Unicorn-2496.exe (PID: 11212)
- Unicorn-65044.exe (PID: 11224)
- Unicorn-19617.exe (PID: 9744)
- Unicorn-55014.exe (PID: 9048)
- Unicorn-6503.exe (PID: 10856)
- Unicorn-18778.exe (PID: 10740)
- Unicorn-27747.exe (PID: 8536)
- Unicorn-8164.exe (PID: 9676)
- Unicorn-59165.exe (PID: 11348)
- Unicorn-63511.exe (PID: 9852)
- Unicorn-23944.exe (PID: 8972)
- Unicorn-55709.exe (PID: 8924)
- Unicorn-44267.exe (PID: 9592)
- Unicorn-7104.exe (PID: 11112)
- Unicorn-3094.exe (PID: 10188)
- Unicorn-29082.exe (PID: 11016)
- Unicorn-6044.exe (PID: 9204)
- Unicorn-10563.exe (PID: 9844)
- Unicorn-2672.exe (PID: 9112)
- Unicorn-38094.exe (PID: 11708)
- Unicorn-55218.exe (PID: 10528)
- Unicorn-32292.exe (PID: 11180)
- ShellExperienceHost.exe (PID: 12520)
- Unicorn-58018.exe (PID: 10508)
- Unicorn-8441.exe (PID: 1180)
- Unicorn-36325.exe (PID: 11064)
- Unicorn-16573.exe (PID: 9172)
- Unicorn-53869.exe (PID: 12752)
- Unicorn-23588.exe (PID: 12876)
- Unicorn-12858.exe (PID: 9480)
- Unicorn-4585.exe (PID: 12744)
- Unicorn-48913.exe (PID: 9640)
- Unicorn-36762.exe (PID: 10876)
- Unicorn-27933.exe (PID: 9828)
- Unicorn-25060.exe (PID: 10228)
- Unicorn-24451.exe (PID: 12052)
- Unicorn-52774.exe (PID: 10640)
- Unicorn-45892.exe (PID: 10748)
- Unicorn-21641.exe (PID: 12328)
- Unicorn-26803.exe (PID: 13572)
- Unicorn-35377.exe (PID: 13368)
- Unicorn-36989.exe (PID: 10944)
- Unicorn-26298.exe (PID: 11948)
- Unicorn-63883.exe (PID: 10520)
- Unicorn-38298.exe (PID: 10960)
- Unicorn-30345.exe (PID: 9900)
- Unicorn-3942.exe (PID: 13436)
- Unicorn-50430.exe (PID: 9532)
- Unicorn-31088.exe (PID: 9256)
- Unicorn-47929.exe (PID: 14384)
- Unicorn-23003.exe (PID: 13172)
- Unicorn-11623.exe (PID: 11164)
- Unicorn-42205.exe (PID: 15492)
- Unicorn-61006.exe (PID: 15668)
- Unicorn-2391.exe (PID: 15532)
- Unicorn-39575.exe (PID: 8796)
Create files in a temporary directory
- 1 (516).exe (PID: 6964)
- Unicorn-14623.exe (PID: 1020)
- Unicorn-23385.exe (PID: 5972)
- Unicorn-58183.exe (PID: 5176)
- Unicorn-11679.exe (PID: 4244)
- Unicorn-12919.exe (PID: 6540)
- Unicorn-52311.exe (PID: 5680)
- Unicorn-17152.exe (PID: 5256)
- Unicorn-22545.exe (PID: 6512)
- Unicorn-22545.exe (PID: 2772)
- Unicorn-26715.exe (PID: 1012)
- Unicorn-1439.exe (PID: 1388)
- Unicorn-12980.exe (PID: 6752)
- Unicorn-32581.exe (PID: 6156)
- Unicorn-37018.exe (PID: 5360)
- Unicorn-15678.exe (PID: 4408)
- Unicorn-13264.exe (PID: 5392)
- Unicorn-5584.exe (PID: 5228)
- Unicorn-11157.exe (PID: 6872)
- Unicorn-32785.exe (PID: 6724)
- Unicorn-51727.exe (PID: 7192)
- Unicorn-44749.exe (PID: 7236)
- Unicorn-41111.exe (PID: 7244)
- Unicorn-20110.exe (PID: 7256)
- Unicorn-4276.exe (PID: 7224)
- Unicorn-45621.exe (PID: 7324)
- Unicorn-28797.exe (PID: 7316)
- Unicorn-24988.exe (PID: 7292)
- Unicorn-65418.exe (PID: 7332)
- Unicorn-30637.exe (PID: 7348)
- Unicorn-3024.exe (PID: 7464)
- Unicorn-36768.exe (PID: 7340)
- Unicorn-60881.exe (PID: 7476)
- Unicorn-26630.exe (PID: 7452)
- Unicorn-16624.exe (PID: 7524)
- Unicorn-13901.exe (PID: 7512)
- Unicorn-38519.exe (PID: 7484)
- Unicorn-393.exe (PID: 7500)
- Unicorn-30560.exe (PID: 7616)
- Unicorn-52241.exe (PID: 7544)
- Unicorn-48593.exe (PID: 7592)
- Unicorn-5309.exe (PID: 7668)
- Unicorn-64291.exe (PID: 7704)
- Unicorn-49034.exe (PID: 7632)
- Unicorn-21920.exe (PID: 7660)
- Unicorn-63669.exe (PID: 7272)
- Unicorn-36745.exe (PID: 7720)
- Unicorn-60709.exe (PID: 7676)
- Unicorn-43869.exe (PID: 7968)
- Unicorn-45981.exe (PID: 7980)
- Unicorn-2265.exe (PID: 7828)
- Unicorn-53085.exe (PID: 7808)
- Unicorn-2198.exe (PID: 8104)
- Unicorn-29504.exe (PID: 8072)
- Unicorn-44180.exe (PID: 7884)
- Unicorn-33812.exe (PID: 7924)
- Unicorn-61605.exe (PID: 8096)
- Unicorn-17507.exe (PID: 7792)
- Unicorn-9707.exe (PID: 5024)
- Unicorn-59107.exe (PID: 7744)
- Unicorn-37184.exe (PID: 7936)
- Unicorn-15274.exe (PID: 4120)
- Unicorn-39194.exe (PID: 6632)
- Unicorn-33943.exe (PID: 7572)
- Unicorn-30938.exe (PID: 5084)
- Unicorn-22158.exe (PID: 7444)
- Unicorn-1658.exe (PID: 8136)
- Unicorn-45877.exe (PID: 7892)
- Unicorn-49370.exe (PID: 8088)
- Unicorn-43226.exe (PID: 7188)
- Unicorn-33812.exe (PID: 7916)
- Unicorn-16929.exe (PID: 8112)
- Unicorn-6231.exe (PID: 7780)
- Unicorn-14186.exe (PID: 8488)
- Unicorn-34586.exe (PID: 920)
- Unicorn-4246.exe (PID: 5548)
- Unicorn-35517.exe (PID: 8264)
- Unicorn-5373.exe (PID: 7852)
- Unicorn-37672.exe (PID: 4188)
- Unicorn-21524.exe (PID: 8128)
- Unicorn-7519.exe (PID: 7736)
- Unicorn-29699.exe (PID: 9016)
- Unicorn-1277.exe (PID: 8980)
- Unicorn-4563.exe (PID: 8240)
- Unicorn-3088.exe (PID: 8996)
- Unicorn-3194.exe (PID: 8120)
- Unicorn-20276.exe (PID: 8284)
- Unicorn-24069.exe (PID: 8816)
- Unicorn-27354.exe (PID: 8740)
- Unicorn-33038.exe (PID: 8300)
- Unicorn-16666.exe (PID: 8396)
- Unicorn-52728.exe (PID: 6656)
- Unicorn-25882.exe (PID: 8340)
- Unicorn-29056.exe (PID: 8724)
- Unicorn-28852.exe (PID: 7768)
- Unicorn-52740.exe (PID: 8708)
- Unicorn-6242.exe (PID: 9500)
- Unicorn-412.exe (PID: 8432)
- Unicorn-27401.exe (PID: 8248)
- Unicorn-37434.exe (PID: 8164)
- Unicorn-28430.exe (PID: 8376)
- Unicorn-22074.exe (PID: 8748)
- Unicorn-16602.exe (PID: 8776)
- Unicorn-11923.exe (PID: 9928)
- Unicorn-46941.exe (PID: 7876)
- Unicorn-56292.exe (PID: 5244)
- Unicorn-52692.exe (PID: 2432)
- Unicorn-41332.exe (PID: 9512)
- Unicorn-44747.exe (PID: 9264)
- Unicorn-46517.exe (PID: 2908)
- Unicorn-57367.exe (PID: 9960)
- Unicorn-33498.exe (PID: 8652)
- Unicorn-11124.exe (PID: 1452)
- Unicorn-60670.exe (PID: 9088)
- Unicorn-10243.exe (PID: 9524)
- Unicorn-31997.exe (PID: 8660)
- Unicorn-59594.exe (PID: 9284)
- Unicorn-46269.exe (PID: 8232)
- Unicorn-8441.exe (PID: 1132)
- Unicorn-54756.exe (PID: 3784)
- Unicorn-63701.exe (PID: 2564)
- Unicorn-57256.exe (PID: 9616)
- Unicorn-57242.exe (PID: 9724)
- Unicorn-59164.exe (PID: 9136)
- Unicorn-7171.exe (PID: 9576)
- Unicorn-2496.exe (PID: 11204)
- Unicorn-2496.exe (PID: 11212)
- Unicorn-65044.exe (PID: 11224)
- Unicorn-25146.exe (PID: 9224)
- Unicorn-63511.exe (PID: 9852)
- Unicorn-19617.exe (PID: 9744)
- Unicorn-55014.exe (PID: 9048)
- Unicorn-18778.exe (PID: 10740)
- Unicorn-55709.exe (PID: 8924)
- Unicorn-47531.exe (PID: 7860)
- Unicorn-6503.exe (PID: 10856)
- Unicorn-8164.exe (PID: 9676)
- Unicorn-44267.exe (PID: 9592)
- Unicorn-7104.exe (PID: 11112)
- Unicorn-3094.exe (PID: 10188)
- Unicorn-23944.exe (PID: 8972)
- Unicorn-6044.exe (PID: 9204)
- Unicorn-32292.exe (PID: 11180)
- Unicorn-58018.exe (PID: 10508)
- Unicorn-59165.exe (PID: 11348)
- Unicorn-10563.exe (PID: 9844)
- Unicorn-27747.exe (PID: 8536)
- Unicorn-38094.exe (PID: 11708)
- Unicorn-8441.exe (PID: 1180)
- Unicorn-21278.exe (PID: 9968)
- Unicorn-45012.exe (PID: 9232)
- Unicorn-55218.exe (PID: 10528)
- Unicorn-16573.exe (PID: 9172)
- Unicorn-53869.exe (PID: 12752)
- Unicorn-36325.exe (PID: 11064)
- Unicorn-23588.exe (PID: 12876)
- Unicorn-4585.exe (PID: 12744)
- Unicorn-27933.exe (PID: 9828)
- Unicorn-48913.exe (PID: 9640)
- Unicorn-25060.exe (PID: 10228)
- Unicorn-36762.exe (PID: 10876)
- Unicorn-24451.exe (PID: 12052)
- Unicorn-2672.exe (PID: 9112)
- Unicorn-26803.exe (PID: 13572)
- Unicorn-35377.exe (PID: 13368)
- Unicorn-21641.exe (PID: 12328)
- Unicorn-38298.exe (PID: 10960)
- Unicorn-36989.exe (PID: 10944)
- Unicorn-31088.exe (PID: 9256)
- Unicorn-26298.exe (PID: 11948)
- Unicorn-45892.exe (PID: 10748)
- Unicorn-30345.exe (PID: 9900)
- Unicorn-63883.exe (PID: 10520)
- Unicorn-52774.exe (PID: 10640)
- Unicorn-3942.exe (PID: 13436)
- Unicorn-50430.exe (PID: 9532)
- Unicorn-23003.exe (PID: 13172)
- Unicorn-41690.exe (PID: 3300)
- Unicorn-11623.exe (PID: 11164)
Reads security settings of Internet Explorer
- BackgroundTransferHost.exe (PID: 6872)
- BackgroundTransferHost.exe (PID: 4120)
- BackgroundTransferHost.exe (PID: 2904)
- BackgroundTransferHost.exe (PID: 6872)
- BackgroundTransferHost.exe (PID: 644)
Checks proxy server information
- BackgroundTransferHost.exe (PID: 644)
Reads the software policy settings
- BackgroundTransferHost.exe (PID: 644)
- slui.exe (PID: 5116)
Creates files or folders in the user directory
- BackgroundTransferHost.exe (PID: 644)
- WerFault.exe (PID: 9824)
- WerFault.exe (PID: 13556)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
662
Monitored processes
525
Malicious processes
82
Suspicious processes
61
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 644 | "BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.1 | C:\Windows\System32\BackgroundTransferHost.exe | svchost.exe | ||||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Download/Upload Host Exit code: 1 Version: 10.0.19041.3636 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 672 | C:\Users\admin\AppData\Local\Temp\Unicorn-51732.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-51732.exe | — | Unicorn-16929.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 684 | C:\Users\admin\AppData\Local\Temp\Unicorn-48255.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-48255.exe | — | Unicorn-43869.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 920 | C:\Users\admin\AppData\Local\Temp\Unicorn-34586.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-34586.exe | Unicorn-64291.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1012 | C:\Users\admin\AppData\Local\Temp\Unicorn-26715.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-26715.exe | Unicorn-23385.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1020 | C:\Users\admin\AppData\Local\Temp\Unicorn-14623.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-14623.exe | Unicorn-23385.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1132 | C:\Users\admin\AppData\Local\Temp\Unicorn-8441.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-8441.exe | Unicorn-51727.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1180 | C:\Users\admin\AppData\Local\Temp\Unicorn-8441.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-8441.exe | Unicorn-41111.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1188 | C:\Users\admin\AppData\Local\Temp\Unicorn-46298.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-46298.exe | Unicorn-30560.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1388 | C:\Users\admin\AppData\Local\Temp\Unicorn-1439.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-1439.exe | Unicorn-11679.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
16 461
Read events
16 444
Write events
17
Delete events
0
Modification events
| (PID) Process: | (6872) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (6872) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (6872) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (644) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (644) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (644) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (4120) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (4120) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (4120) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (6872) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
Executable files
772
Suspicious files
7
Text files
2
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 644 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\84e17e34-f736-42eb-be38-2335a44defed.down_data | — | |
MD5:— | SHA256:— | |||
| 6964 | 1 (516).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-52311.exe | executable | |
MD5:C4A5F6C04A06BF8E74B0A1D6480FA917 | SHA256:8E19775DC136747E346E58EC2D62F409955CA0F9441F6F27162D96068DD3BF94 | |||
| 5972 | Unicorn-23385.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-12919.exe | executable | |
MD5:0FBEAE86CDEE65E8E28538D05B71218E | SHA256:012C47C79F5DA65B36F7BAC7697BEE6659995283958A5D273C35E04375F7671F | |||
| 644 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\84e17e34-f736-42eb-be38-2335a44defed.7f529f1d-44c7-4d03-a62c-6845d572540f.down_meta | binary | |
MD5:A2364217774148E3791FF120BBAB3C7C | SHA256:A7A36FD2B5C46E099C609E213A4FAE1455D31A9B7379823BD034C6B605852A24 | |||
| 4244 | Unicorn-11679.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-1439.exe | executable | |
MD5:0DF0840434D41E357B9CD4F4A0489BC5 | SHA256:8C33C8DBD8CF2DD04C38F533980A41F8DDA737666C182D058D183CAEAF007E92 | |||
| 6964 | 1 (516).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-23385.exe | executable | |
MD5:C05D1E34AD203D455D456FEC743F63C3 | SHA256:2358BEE060A12F31046E8E4CC62E855C114A60BAAFA58EC2963657D1640FF628 | |||
| 5256 | Unicorn-17152.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-15678.exe | executable | |
MD5:1D4930EB02C52A9BFC3E8D6CA70B1ED9 | SHA256:045E4E6645C3151CB95676B79784A4F450C8F95D65A2B3A8C2A0F946E4ADE851 | |||
| 5176 | Unicorn-58183.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-12980.exe | executable | |
MD5:11A0733326ED80ED47E78B866D025DDE | SHA256:E45D0C1A550ABEED34DD885D771EF2024D656681A326F4FED199C74D66F748A3 | |||
| 5972 | Unicorn-23385.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-26715.exe | executable | |
MD5:FEECB31C9D426C72D3490463058410E0 | SHA256:923D4CEEE4CD8E295308EA9326DB60CF5FA77C390628373CABA5D4B8F1474EF8 | |||
| 6964 | 1 (516).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-58183.exe | executable | |
MD5:2AC52E1352650C182DCF416F20F74B09 | SHA256:396D8A94C5886C087812536D3515FF8B58BC9AE36944BF802F21C0E2E6E2A906 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
8
TCP/UDP connections
28
DNS requests
22
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
6048 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
644 | BackgroundTransferHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | whitelisted |
7156 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
6048 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
— | — | GET | 200 | 23.48.23.156:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
— | — | GET | 200 | 23.48.23.143:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
— | — | GET | 200 | 95.101.149.131:80 | http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
2104 | svchost.exe | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
— | — | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
— | — | 23.48.23.143:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
2112 | svchost.exe | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
3216 | svchost.exe | 40.113.103.199:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 40.126.31.128:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
www.bing.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |