| File name: | 1 (546) |
| Full analysis: | https://app.any.run/tasks/8cebcb74-5ac4-4567-ad1f-8f31ece58066 |
| Verdict: | Malicious activity |
| Analysis date: | March 25, 2025, 00:07:38 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 35A8A17B38CEF1F2C014E4179D908420 |
| SHA1: | D06E6641FB1353A52DB7D57FB6F714312DED7699 |
| SHA256: | B55A5D4529706C445673BC7585899455C0DE62272531F73727BB126FE6B4ADE5 |
| SSDEEP: | 6144:S7igAKwyMDpHAkVXTZeMvvfC4KBqlvJGBmIW2eEXak/8SwjwpyivEhbs5kjAsWka:SmZvzHAkFTYDBMhamz2eEXix4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- 1 (546).exe (PID: 7508)
- Unicorn-20800.exe (PID: 7716)
- Unicorn-29630.exe (PID: 5428)
- Unicorn-60751.exe (PID: 2136)
- Unicorn-40798.exe (PID: 7492)
- Unicorn-9168.exe (PID: 6264)
- Unicorn-22903.exe (PID: 7544)
- Unicorn-2415.exe (PID: 6964)
- Unicorn-1891.exe (PID: 1852)
- Unicorn-47563.exe (PID: 4300)
- Unicorn-8375.exe (PID: 4608)
- Unicorn-55664.exe (PID: 5380)
- Unicorn-35798.exe (PID: 4164)
- Unicorn-55664.exe (PID: 5404)
- Unicorn-47533.exe (PID: 5072)
- Unicorn-2510.exe (PID: 2088)
- Unicorn-20282.exe (PID: 5868)
- Unicorn-60790.exe (PID: 6436)
- Unicorn-51117.exe (PID: 7172)
- Unicorn-60261.exe (PID: 4428)
- Unicorn-52617.exe (PID: 2244)
- Unicorn-2918.exe (PID: 2152)
- Unicorn-2918.exe (PID: 7200)
- Unicorn-43427.exe (PID: 7204)
- Unicorn-60977.exe (PID: 7248)
- Unicorn-8459.exe (PID: 7232)
- Unicorn-52312.exe (PID: 6184)
- Unicorn-61173.exe (PID: 7580)
- Unicorn-5039.exe (PID: 7572)
- Unicorn-42755.exe (PID: 7776)
- Unicorn-48885.exe (PID: 7900)
- Unicorn-11725.exe (PID: 4268)
- Unicorn-55550.exe (PID: 3100)
- Unicorn-10555.exe (PID: 5328)
- Unicorn-10999.exe (PID: 6048)
- Unicorn-30651.exe (PID: 6036)
- Unicorn-2918.exe (PID: 5800)
- Unicorn-17788.exe (PID: 7940)
- Unicorn-2918.exe (PID: 7196)
- Unicorn-39220.exe (PID: 8064)
- Unicorn-38229.exe (PID: 7880)
- Unicorn-18363.exe (PID: 7924)
- Unicorn-37964.exe (PID: 7832)
- Unicorn-31146.exe (PID: 5176)
- Unicorn-20893.exe (PID: 1300)
- Unicorn-13767.exe (PID: 7348)
- Unicorn-10547.exe (PID: 7892)
- Unicorn-20893.exe (PID: 8172)
- Unicorn-10547.exe (PID: 7896)
- Unicorn-10547.exe (PID: 7828)
- Unicorn-10547.exe (PID: 7964)
- Unicorn-21106.exe (PID: 8076)
- Unicorn-65459.exe (PID: 7352)
- Unicorn-65459.exe (PID: 7756)
- Unicorn-19522.exe (PID: 8108)
- Unicorn-20893.exe (PID: 3896)
- Unicorn-23906.exe (PID: 8072)
- Unicorn-34624.exe (PID: 664)
- Unicorn-10171.exe (PID: 8144)
- Unicorn-4571.exe (PID: 1276)
- Unicorn-34555.exe (PID: 4112)
- Unicorn-21315.exe (PID: 1328)
- Unicorn-42482.exe (PID: 5984)
- Unicorn-23876.exe (PID: 7300)
- Unicorn-54583.exe (PID: 3008)
- Unicorn-63390.exe (PID: 5260)
- Unicorn-42747.exe (PID: 5400)
- Unicorn-37265.exe (PID: 7308)
- Unicorn-43460.exe (PID: 8052)
- Unicorn-18336.exe (PID: 7360)
- Unicorn-23376.exe (PID: 8044)
- Unicorn-41726.exe (PID: 5640)
- Unicorn-29507.exe (PID: 8024)
- Unicorn-26959.exe (PID: 8028)
- Unicorn-19246.exe (PID: 4408)
- Unicorn-47346.exe (PID: 8004)
- Unicorn-43460.exe (PID: 8056)
- Unicorn-14163.exe (PID: 7996)
- Unicorn-15722.exe (PID: 7456)
- Unicorn-24528.exe (PID: 2960)
- Unicorn-8005.exe (PID: 6324)
- Unicorn-55944.exe (PID: 6644)
- Unicorn-52321.exe (PID: 2644)
- Unicorn-1396.exe (PID: 5084)
- Unicorn-904.exe (PID: 6344)
- Unicorn-8508.exe (PID: 8308)
- Unicorn-39277.exe (PID: 8356)
- Unicorn-59800.exe (PID: 8316)
- Unicorn-15194.exe (PID: 8280)
- Unicorn-55089.exe (PID: 8396)
- Unicorn-49469.exe (PID: 8388)
- Unicorn-49469.exe (PID: 8380)
- Unicorn-22897.exe (PID: 8348)
- Unicorn-54041.exe (PID: 8432)
- Unicorn-47469.exe (PID: 8508)
- Unicorn-55704.exe (PID: 8456)
- Unicorn-52041.exe (PID: 8588)
- Unicorn-4412.exe (PID: 8440)
- Unicorn-36747.exe (PID: 8604)
- Unicorn-35181.exe (PID: 8596)
- Unicorn-47469.exe (PID: 8500)
- Unicorn-15263.exe (PID: 8524)
- Unicorn-37220.exe (PID: 8488)
- Unicorn-10032.exe (PID: 8472)
- Unicorn-22893.exe (PID: 8696)
- Unicorn-48881.exe (PID: 8728)
- Unicorn-59816.exe (PID: 8744)
- Unicorn-4474.exe (PID: 8808)
- Unicorn-4474.exe (PID: 8752)
- Unicorn-36358.exe (PID: 8704)
- Unicorn-56276.exe (PID: 8768)
- Unicorn-47680.exe (PID: 8860)
- Unicorn-56276.exe (PID: 8776)
- Unicorn-48881.exe (PID: 8736)
- Unicorn-50676.exe (PID: 8784)
- Unicorn-45990.exe (PID: 4756)
- Unicorn-37220.exe (PID: 8480)
- Unicorn-50959.exe (PID: 8908)
- Unicorn-24977.exe (PID: 1280)
- Unicorn-4611.exe (PID: 9064)
- Unicorn-31016.exe (PID: 9084)
- Unicorn-5472.exe (PID: 9008)
- Unicorn-4948.exe (PID: 9020)
- Unicorn-41813.exe (PID: 9152)
- Unicorn-23933.exe (PID: 9112)
- Unicorn-58736.exe (PID: 9200)
- Unicorn-6915.exe (PID: 9040)
- Unicorn-8102.exe (PID: 9144)
- Unicorn-14631.exe (PID: 5452)
- Unicorn-26567.exe (PID: 9052)
- Unicorn-57327.exe (PID: 4228)
- Unicorn-2958.exe (PID: 1764)
- Unicorn-16693.exe (PID: 7152)
- Unicorn-22348.exe (PID: 9160)
- Unicorn-9568.exe (PID: 9288)
- Unicorn-50475.exe (PID: 9360)
- Unicorn-3012.exe (PID: 9336)
- Unicorn-47454.exe (PID: 9468)
- Unicorn-50441.exe (PID: 9420)
- Unicorn-17231.exe (PID: 9440)
- Unicorn-47454.exe (PID: 9460)
- Unicorn-41331.exe (PID: 9500)
- Unicorn-7956.exe (PID: 9508)
- Unicorn-14086.exe (PID: 9560)
- Unicorn-17707.exe (PID: 9600)
- Unicorn-29657.exe (PID: 9668)
- Unicorn-37235.exe (PID: 9704)
- Unicorn-24947.exe (PID: 9764)
- Unicorn-37235.exe (PID: 9712)
- Unicorn-61282.exe (PID: 9696)
- Unicorn-41297.exe (PID: 9744)
- Unicorn-1322.exe (PID: 9804)
- Unicorn-1322.exe (PID: 9796)
- Unicorn-22417.exe (PID: 9840)
- Unicorn-42018.exe (PID: 9832)
- Unicorn-53210.exe (PID: 9912)
- Unicorn-11134.exe (PID: 9880)
- Unicorn-9031.exe (PID: 9904)
- Unicorn-60833.exe (PID: 9888)
- Unicorn-46999.exe (PID: 9964)
- Unicorn-60522.exe (PID: 9944)
- Unicorn-13680.exe (PID: 9996)
- Unicorn-44449.exe (PID: 10032)
- Unicorn-47999.exe (PID: 10076)
- Unicorn-13657.exe (PID: 8128)
- Unicorn-2839.exe (PID: 10056)
- Unicorn-62218.exe (PID: 10092)
- Unicorn-51095.exe (PID: 10112)
- Unicorn-10339.exe (PID: 8792)
- Unicorn-14841.exe (PID: 10148)
- Unicorn-40307.exe (PID: 10156)
- Unicorn-43569.exe (PID: 10220)
Executable content was dropped or overwritten
- Unicorn-20800.exe (PID: 7716)
- 1 (546).exe (PID: 7508)
- Unicorn-47533.exe (PID: 5072)
- Unicorn-60751.exe (PID: 2136)
- Unicorn-40798.exe (PID: 7492)
- Unicorn-9168.exe (PID: 6264)
- Unicorn-29630.exe (PID: 5428)
- Unicorn-2415.exe (PID: 6964)
- Unicorn-47563.exe (PID: 4300)
- Unicorn-1891.exe (PID: 1852)
- Unicorn-2510.exe (PID: 2088)
- Unicorn-22903.exe (PID: 7544)
- Unicorn-11725.exe (PID: 4268)
- Unicorn-55550.exe (PID: 3100)
- Unicorn-20282.exe (PID: 5868)
- Unicorn-10555.exe (PID: 5328)
- Unicorn-60790.exe (PID: 6436)
- Unicorn-51117.exe (PID: 7172)
- Unicorn-2918.exe (PID: 7200)
- Unicorn-2918.exe (PID: 7196)
- Unicorn-52312.exe (PID: 6184)
- Unicorn-55664.exe (PID: 5404)
- Unicorn-8375.exe (PID: 4608)
- Unicorn-5039.exe (PID: 7572)
- Unicorn-61173.exe (PID: 7580)
- Unicorn-48885.exe (PID: 7900)
- Unicorn-42755.exe (PID: 7776)
- Unicorn-10999.exe (PID: 6048)
- Unicorn-30651.exe (PID: 6036)
- Unicorn-17788.exe (PID: 7940)
- Unicorn-2918.exe (PID: 5800)
- Unicorn-39220.exe (PID: 8064)
- Unicorn-38229.exe (PID: 7880)
- Unicorn-18363.exe (PID: 7924)
- Unicorn-31146.exe (PID: 5176)
- Unicorn-37964.exe (PID: 7832)
- Unicorn-20893.exe (PID: 1300)
- Unicorn-13767.exe (PID: 7348)
- Unicorn-2918.exe (PID: 2152)
- Unicorn-10547.exe (PID: 7892)
- Unicorn-20893.exe (PID: 8172)
- Unicorn-10547.exe (PID: 7828)
- Unicorn-10547.exe (PID: 7964)
- Unicorn-65459.exe (PID: 7352)
- Unicorn-13657.exe (PID: 8128)
- Unicorn-65459.exe (PID: 7756)
- Unicorn-52617.exe (PID: 2244)
- Unicorn-34624.exe (PID: 664)
- Unicorn-23906.exe (PID: 8072)
- Unicorn-20893.exe (PID: 3896)
- Unicorn-43427.exe (PID: 7204)
- Unicorn-10171.exe (PID: 8144)
- Unicorn-60977.exe (PID: 7248)
- Unicorn-8459.exe (PID: 7232)
- Unicorn-55664.exe (PID: 5380)
- Unicorn-4571.exe (PID: 1276)
- Unicorn-35798.exe (PID: 4164)
- Unicorn-60261.exe (PID: 4428)
- Unicorn-45990.exe (PID: 4756)
- Unicorn-34555.exe (PID: 4112)
- Unicorn-24977.exe (PID: 1280)
- Unicorn-21315.exe (PID: 1328)
- Unicorn-42482.exe (PID: 5984)
- Unicorn-23876.exe (PID: 7300)
- Unicorn-42747.exe (PID: 5400)
- Unicorn-54583.exe (PID: 3008)
- Unicorn-63390.exe (PID: 5260)
- Unicorn-37265.exe (PID: 7308)
- Unicorn-43460.exe (PID: 8052)
- Unicorn-18336.exe (PID: 7360)
- Unicorn-23376.exe (PID: 8044)
- Unicorn-41726.exe (PID: 5640)
- Unicorn-29507.exe (PID: 8024)
- Unicorn-47346.exe (PID: 8004)
- Unicorn-43460.exe (PID: 8056)
- Unicorn-15722.exe (PID: 7456)
- Unicorn-8005.exe (PID: 6324)
- Unicorn-24528.exe (PID: 2960)
- Unicorn-904.exe (PID: 6344)
- Unicorn-55944.exe (PID: 6644)
- Unicorn-52321.exe (PID: 2644)
- Unicorn-1396.exe (PID: 5084)
- Unicorn-8508.exe (PID: 8308)
- Unicorn-39277.exe (PID: 8356)
- Unicorn-59800.exe (PID: 8316)
- Unicorn-15194.exe (PID: 8280)
- Unicorn-49469.exe (PID: 8380)
- Unicorn-22897.exe (PID: 8348)
- Unicorn-55089.exe (PID: 8396)
- Unicorn-49469.exe (PID: 8388)
- Unicorn-47469.exe (PID: 8508)
- Unicorn-10547.exe (PID: 7896)
- Unicorn-52041.exe (PID: 8588)
- Unicorn-55704.exe (PID: 8456)
- Unicorn-37220.exe (PID: 8480)
- Unicorn-36747.exe (PID: 8604)
- Unicorn-35181.exe (PID: 8596)
- Unicorn-4412.exe (PID: 8440)
- Unicorn-37220.exe (PID: 8488)
- Unicorn-10032.exe (PID: 8472)
- Unicorn-19522.exe (PID: 8108)
- Unicorn-15263.exe (PID: 8524)
- Unicorn-22893.exe (PID: 8696)
- Unicorn-48881.exe (PID: 8728)
- Unicorn-59816.exe (PID: 8744)
- Unicorn-21106.exe (PID: 8076)
- Unicorn-4474.exe (PID: 8808)
- Unicorn-56276.exe (PID: 8768)
- Unicorn-4474.exe (PID: 8752)
- Unicorn-47680.exe (PID: 8860)
- Unicorn-56276.exe (PID: 8776)
- Unicorn-48881.exe (PID: 8736)
- Unicorn-39545.exe (PID: 8884)
- Unicorn-10339.exe (PID: 8792)
- Unicorn-50676.exe (PID: 8784)
- Unicorn-50959.exe (PID: 8908)
- Unicorn-5472.exe (PID: 9008)
- Unicorn-31016.exe (PID: 9084)
- Unicorn-4611.exe (PID: 9064)
- Unicorn-23933.exe (PID: 9112)
- Unicorn-41813.exe (PID: 9152)
- Unicorn-58736.exe (PID: 9200)
- Unicorn-26567.exe (PID: 9052)
- Unicorn-4948.exe (PID: 9020)
- Unicorn-6915.exe (PID: 9040)
- Unicorn-8102.exe (PID: 9144)
- Unicorn-14631.exe (PID: 5452)
- Unicorn-57327.exe (PID: 4228)
- Unicorn-16693.exe (PID: 7152)
- Unicorn-22348.exe (PID: 9160)
- Unicorn-2958.exe (PID: 1764)
- Unicorn-26959.exe (PID: 8028)
- Unicorn-9568.exe (PID: 9288)
- Unicorn-19246.exe (PID: 4408)
- Unicorn-14163.exe (PID: 7996)
- Unicorn-50475.exe (PID: 9360)
- Unicorn-3012.exe (PID: 9336)
- Unicorn-50441.exe (PID: 9420)
- Unicorn-47454.exe (PID: 9468)
- Unicorn-47454.exe (PID: 9460)
- Unicorn-41331.exe (PID: 9500)
- Unicorn-7956.exe (PID: 9508)
- Unicorn-17231.exe (PID: 9440)
- Unicorn-37235.exe (PID: 9704)
- Unicorn-29657.exe (PID: 9668)
- Unicorn-17707.exe (PID: 9600)
- Unicorn-41297.exe (PID: 9744)
- Unicorn-24947.exe (PID: 9764)
- Unicorn-61282.exe (PID: 9696)
- Unicorn-22417.exe (PID: 9840)
- Unicorn-42018.exe (PID: 9832)
- Unicorn-1322.exe (PID: 9804)
- Unicorn-1322.exe (PID: 9796)
- Unicorn-53210.exe (PID: 9912)
- Unicorn-11134.exe (PID: 9880)
- Unicorn-9031.exe (PID: 9904)
- Unicorn-60833.exe (PID: 9888)
- Unicorn-46999.exe (PID: 9964)
- Unicorn-60522.exe (PID: 9944)
- Unicorn-47469.exe (PID: 8500)
- Unicorn-13680.exe (PID: 9996)
- Unicorn-44449.exe (PID: 10032)
- Unicorn-2839.exe (PID: 10056)
- Unicorn-62218.exe (PID: 10092)
- Unicorn-51095.exe (PID: 10112)
- Unicorn-14841.exe (PID: 10148)
- Unicorn-40307.exe (PID: 10156)
- Unicorn-39252.exe (PID: 10128)
- Unicorn-43569.exe (PID: 10220)
- Unicorn-32052.exe (PID: 4436)
- Unicorn-58791.exe (PID: 10308)
- Unicorn-17764.exe (PID: 10272)
- Unicorn-23860.exe (PID: 10328)
- Unicorn-47999.exe (PID: 10076)
- Unicorn-11638.exe (PID: 10340)
- Unicorn-47436.exe (PID: 10396)
- Unicorn-16743.exe (PID: 10584)
- Unicorn-6505.exe (PID: 10460)
- Unicorn-8617.exe (PID: 10476)
- Unicorn-43319.exe (PID: 10448)
- Unicorn-52664.exe (PID: 8244)
- Unicorn-37235.exe (PID: 9712)
- Unicorn-42792.exe (PID: 10264)
- Unicorn-36358.exe (PID: 8704)
- Unicorn-9617.exe (PID: 10628)
- Unicorn-9550.exe (PID: 10668)
- Unicorn-64414.exe (PID: 10504)
- Unicorn-46929.exe (PID: 10424)
- Unicorn-6505.exe (PID: 10456)
- Unicorn-16195.exe (PID: 10520)
- Unicorn-47466.exe (PID: 10528)
- Unicorn-17195.exe (PID: 10708)
- Unicorn-21839.exe (PID: 10604)
- Unicorn-9285.exe (PID: 10652)
- Unicorn-31696.exe (PID: 10764)
- Unicorn-25986.exe (PID: 10736)
- Unicorn-1872.exe (PID: 10804)
- Unicorn-58703.exe (PID: 10820)
- Unicorn-51126.exe (PID: 10788)
- Unicorn-12163.exe (PID: 10860)
- Unicorn-51578.exe (PID: 10844)
- Unicorn-18294.exe (PID: 10868)
- Unicorn-49578.exe (PID: 10916)
- Unicorn-29645.exe (PID: 10968)
- Unicorn-54674.exe (PID: 10952)
- Unicorn-6454.exe (PID: 10908)
- Unicorn-53637.exe (PID: 10376)
- Unicorn-6620.exe (PID: 10992)
- Unicorn-22453.exe (PID: 11008)
- Unicorn-57765.exe (PID: 11164)
- Unicorn-51466.exe (PID: 11132)
- Unicorn-55059.exe (PID: 11032)
- Unicorn-19088.exe (PID: 10196)
- Unicorn-30196.exe (PID: 11100)
- Unicorn-55222.exe (PID: 10660)
- Unicorn-28483.exe (PID: 10488)
- Unicorn-63850.exe (PID: 11072)
- Unicorn-63850.exe (PID: 11068)
- Unicorn-4409.exe (PID: 11208)
- Unicorn-2930.exe (PID: 11216)
- Unicorn-44480.exe (PID: 11200)
- Unicorn-10869.exe (PID: 6632)
- Unicorn-19270.exe (PID: 11296)
- Unicorn-24366.exe (PID: 11312)
- Unicorn-63292.exe (PID: 11248)
- Unicorn-57875.exe (PID: 11424)
- Unicorn-56920.exe (PID: 11416)
- Unicorn-22004.exe (PID: 11432)
- Unicorn-2192.exe (PID: 11340)
- Unicorn-54041.exe (PID: 8432)
- Unicorn-60799.exe (PID: 11492)
- Unicorn-19884.exe (PID: 11580)
- Unicorn-54752.exe (PID: 10352)
- Unicorn-6641.exe (PID: 11600)
- Unicorn-43891.exe (PID: 11564)
- Unicorn-7947.exe (PID: 7476)
- Unicorn-43505.exe (PID: 11184)
- Unicorn-7505.exe (PID: 11320)
- Unicorn-13139.exe (PID: 11280)
Executes application which crashes
- Unicorn-1129.exe (PID: 9188)
INFO
Checks supported languages
- Unicorn-20800.exe (PID: 7716)
- Unicorn-29630.exe (PID: 5428)
- Unicorn-47533.exe (PID: 5072)
- Unicorn-40798.exe (PID: 7492)
- Unicorn-22903.exe (PID: 7544)
- Unicorn-60751.exe (PID: 2136)
- Unicorn-2415.exe (PID: 6964)
- Unicorn-47563.exe (PID: 4300)
- Unicorn-55664.exe (PID: 5404)
- Unicorn-35798.exe (PID: 4164)
- Unicorn-8375.exe (PID: 4608)
- Unicorn-55664.exe (PID: 5380)
- 1 (546).exe (PID: 7508)
- Unicorn-1891.exe (PID: 1852)
- Unicorn-55550.exe (PID: 3100)
- Unicorn-11725.exe (PID: 4268)
- Unicorn-9168.exe (PID: 6264)
- Unicorn-51117.exe (PID: 7172)
- Unicorn-20282.exe (PID: 5868)
- Unicorn-60790.exe (PID: 6436)
- Unicorn-10555.exe (PID: 5328)
- Unicorn-2918.exe (PID: 2152)
- Unicorn-2918.exe (PID: 7196)
- Unicorn-43427.exe (PID: 7204)
- Unicorn-2918.exe (PID: 5800)
- Unicorn-2918.exe (PID: 7200)
- Unicorn-52312.exe (PID: 6184)
- Unicorn-8459.exe (PID: 7232)
- Unicorn-52617.exe (PID: 2244)
- Unicorn-2510.exe (PID: 2088)
- Unicorn-60261.exe (PID: 4428)
- Unicorn-60977.exe (PID: 7248)
- Unicorn-42755.exe (PID: 7776)
- Unicorn-48885.exe (PID: 7900)
- Unicorn-10999.exe (PID: 6048)
- Unicorn-30651.exe (PID: 6036)
- Unicorn-17788.exe (PID: 7940)
- Unicorn-39220.exe (PID: 8064)
- Unicorn-37964.exe (PID: 7832)
- Unicorn-18363.exe (PID: 7924)
- Unicorn-31146.exe (PID: 5176)
- Unicorn-38229.exe (PID: 7880)
- Unicorn-20893.exe (PID: 1300)
- Unicorn-20893.exe (PID: 8172)
- Unicorn-20893.exe (PID: 3896)
- Unicorn-10547.exe (PID: 7892)
- Unicorn-10547.exe (PID: 7828)
- Unicorn-10547.exe (PID: 7964)
- Unicorn-13767.exe (PID: 7348)
- Unicorn-13657.exe (PID: 8128)
- Unicorn-10547.exe (PID: 7896)
- Unicorn-34624.exe (PID: 664)
- Unicorn-19522.exe (PID: 8108)
- Unicorn-21106.exe (PID: 8076)
- Unicorn-4571.exe (PID: 1276)
- Unicorn-65459.exe (PID: 7756)
- Unicorn-23906.exe (PID: 8072)
- Unicorn-10171.exe (PID: 8144)
- Unicorn-34555.exe (PID: 4112)
- Unicorn-45990.exe (PID: 4756)
- Unicorn-23876.exe (PID: 7300)
- Unicorn-65459.exe (PID: 7352)
- Unicorn-24977.exe (PID: 1280)
- Unicorn-42482.exe (PID: 5984)
- Unicorn-42747.exe (PID: 5400)
- Unicorn-63390.exe (PID: 5260)
- Unicorn-61173.exe (PID: 7580)
- Unicorn-21315.exe (PID: 1328)
- Unicorn-54583.exe (PID: 3008)
- Unicorn-37265.exe (PID: 7308)
- Unicorn-5039.exe (PID: 7572)
- Unicorn-26959.exe (PID: 8028)
- Unicorn-29507.exe (PID: 8024)
- Unicorn-23376.exe (PID: 8044)
- Unicorn-43460.exe (PID: 8052)
- Unicorn-43460.exe (PID: 8056)
- Unicorn-47346.exe (PID: 8004)
- Unicorn-18336.exe (PID: 7360)
- Unicorn-15722.exe (PID: 7456)
- Unicorn-41726.exe (PID: 5640)
- Unicorn-8005.exe (PID: 6324)
- Unicorn-19246.exe (PID: 4408)
- Unicorn-55944.exe (PID: 6644)
- Unicorn-904.exe (PID: 6344)
- Unicorn-1396.exe (PID: 5084)
- Unicorn-24528.exe (PID: 2960)
- Unicorn-52321.exe (PID: 2644)
- Unicorn-14163.exe (PID: 7996)
- Unicorn-15194.exe (PID: 8280)
- Unicorn-8508.exe (PID: 8308)
- Unicorn-59800.exe (PID: 8316)
- Unicorn-22897.exe (PID: 8348)
- Unicorn-39277.exe (PID: 8356)
- Unicorn-55089.exe (PID: 8396)
- Unicorn-49469.exe (PID: 8388)
- Unicorn-49469.exe (PID: 8380)
- Unicorn-54041.exe (PID: 8432)
- Unicorn-4412.exe (PID: 8440)
- Unicorn-37220.exe (PID: 8488)
- Unicorn-37220.exe (PID: 8480)
- Unicorn-55704.exe (PID: 8456)
- Unicorn-10032.exe (PID: 8472)
- Unicorn-47469.exe (PID: 8500)
- Unicorn-15263.exe (PID: 8524)
- Unicorn-47469.exe (PID: 8508)
- Unicorn-52041.exe (PID: 8588)
- Unicorn-35181.exe (PID: 8596)
- Unicorn-22893.exe (PID: 8696)
- Unicorn-36358.exe (PID: 8704)
- Unicorn-36747.exe (PID: 8604)
- Unicorn-4474.exe (PID: 8752)
- Unicorn-59816.exe (PID: 8744)
- Unicorn-56276.exe (PID: 8768)
- Unicorn-50676.exe (PID: 8784)
- Unicorn-56276.exe (PID: 8776)
- Unicorn-48881.exe (PID: 8736)
- Unicorn-47680.exe (PID: 8860)
- Unicorn-4474.exe (PID: 8808)
- Unicorn-39545.exe (PID: 8884)
- Unicorn-10339.exe (PID: 8792)
- Unicorn-48881.exe (PID: 8728)
- Unicorn-5472.exe (PID: 9008)
- Unicorn-4948.exe (PID: 9020)
- Unicorn-6915.exe (PID: 9040)
- Unicorn-26567.exe (PID: 9052)
- Unicorn-50959.exe (PID: 8908)
- Unicorn-31016.exe (PID: 9084)
- Unicorn-4611.exe (PID: 9064)
- Unicorn-23933.exe (PID: 9112)
- Unicorn-22348.exe (PID: 9160)
- Unicorn-41813.exe (PID: 9152)
- Unicorn-58736.exe (PID: 9200)
- Unicorn-1129.exe (PID: 9188)
- Unicorn-16693.exe (PID: 7152)
- Unicorn-14631.exe (PID: 5452)
- Unicorn-57327.exe (PID: 4228)
- Unicorn-2958.exe (PID: 1764)
- Unicorn-9568.exe (PID: 9288)
- Unicorn-8102.exe (PID: 9144)
- Unicorn-3012.exe (PID: 9336)
- Unicorn-50475.exe (PID: 9360)
- Unicorn-50441.exe (PID: 9420)
- Unicorn-17231.exe (PID: 9440)
- Unicorn-47454.exe (PID: 9460)
- Unicorn-14086.exe (PID: 9560)
- Unicorn-41331.exe (PID: 9500)
- Unicorn-7956.exe (PID: 9508)
- Unicorn-17707.exe (PID: 9600)
- Unicorn-47454.exe (PID: 9468)
- Unicorn-29657.exe (PID: 9668)
- Unicorn-37235.exe (PID: 9704)
- Unicorn-41297.exe (PID: 9744)
- Unicorn-61282.exe (PID: 9696)
- Unicorn-24947.exe (PID: 9764)
- Unicorn-1322.exe (PID: 9796)
- Unicorn-1322.exe (PID: 9804)
- Unicorn-37235.exe (PID: 9712)
- Unicorn-42018.exe (PID: 9832)
- Unicorn-22417.exe (PID: 9840)
- Unicorn-11134.exe (PID: 9880)
- Unicorn-53210.exe (PID: 9912)
- Unicorn-9031.exe (PID: 9904)
- Unicorn-60833.exe (PID: 9888)
- Unicorn-60522.exe (PID: 9944)
- Unicorn-46999.exe (PID: 9964)
- Unicorn-44449.exe (PID: 10032)
- Unicorn-13680.exe (PID: 9996)
- Unicorn-2839.exe (PID: 10056)
- Unicorn-47999.exe (PID: 10076)
- Unicorn-62218.exe (PID: 10092)
- Unicorn-51095.exe (PID: 10112)
- Unicorn-39252.exe (PID: 10128)
- Unicorn-14841.exe (PID: 10148)
- Unicorn-40307.exe (PID: 10156)
- Unicorn-52664.exe (PID: 8244)
- Unicorn-19088.exe (PID: 10196)
- Unicorn-43569.exe (PID: 10220)
- Unicorn-32052.exe (PID: 4436)
- Unicorn-17764.exe (PID: 10272)
- Unicorn-42792.exe (PID: 10264)
- Unicorn-11638.exe (PID: 10340)
- Unicorn-58791.exe (PID: 10308)
- Unicorn-23860.exe (PID: 10328)
- Unicorn-54752.exe (PID: 10352)
- Unicorn-53637.exe (PID: 10376)
- Unicorn-47436.exe (PID: 10396)
- Unicorn-46929.exe (PID: 10424)
- Unicorn-43319.exe (PID: 10448)
- Unicorn-64414.exe (PID: 10504)
- Unicorn-28483.exe (PID: 10488)
- Unicorn-6505.exe (PID: 10460)
- Unicorn-6505.exe (PID: 10456)
- Unicorn-47466.exe (PID: 10528)
- Unicorn-16195.exe (PID: 10520)
- Unicorn-16743.exe (PID: 10584)
- Unicorn-9617.exe (PID: 10628)
- Unicorn-4454.exe (PID: 10640)
- Unicorn-9285.exe (PID: 10652)
- Unicorn-8617.exe (PID: 10476)
- Unicorn-21839.exe (PID: 10604)
- Unicorn-9550.exe (PID: 10668)
- Unicorn-17195.exe (PID: 10708)
- Unicorn-31696.exe (PID: 10764)
- Unicorn-1872.exe (PID: 10804)
- Unicorn-55222.exe (PID: 10660)
- Unicorn-25986.exe (PID: 10736)
- Unicorn-51126.exe (PID: 10788)
- Unicorn-51578.exe (PID: 10844)
- Unicorn-12163.exe (PID: 10860)
- Unicorn-18294.exe (PID: 10868)
- Unicorn-54059.exe (PID: 10892)
- Unicorn-6454.exe (PID: 10908)
- Unicorn-58703.exe (PID: 10820)
- Unicorn-29645.exe (PID: 10968)
- Unicorn-6620.exe (PID: 10992)
- Unicorn-22453.exe (PID: 11008)
- Unicorn-30196.exe (PID: 11100)
- Unicorn-63850.exe (PID: 11068)
- Unicorn-63850.exe (PID: 11072)
- Unicorn-49578.exe (PID: 10916)
- Unicorn-54674.exe (PID: 10952)
- Unicorn-55059.exe (PID: 11032)
- Unicorn-57765.exe (PID: 11164)
- Unicorn-51466.exe (PID: 11132)
- Unicorn-43505.exe (PID: 11184)
- Unicorn-2930.exe (PID: 11216)
- Unicorn-44480.exe (PID: 11200)
- Unicorn-7947.exe (PID: 7476)
- Unicorn-19270.exe (PID: 11296)
- Unicorn-19004.exe (PID: 11272)
- Unicorn-24366.exe (PID: 11312)
- Unicorn-13139.exe (PID: 11288)
- Unicorn-7505.exe (PID: 11320)
- Unicorn-4409.exe (PID: 11208)
- Unicorn-63292.exe (PID: 11248)
- Unicorn-13139.exe (PID: 11280)
- Unicorn-56920.exe (PID: 11416)
- Unicorn-22004.exe (PID: 11432)
- Unicorn-60799.exe (PID: 11492)
- Unicorn-2192.exe (PID: 11340)
- Unicorn-10857.exe (PID: 11332)
- Unicorn-10869.exe (PID: 6632)
- Unicorn-57875.exe (PID: 11424)
- Unicorn-19884.exe (PID: 11580)
- Unicorn-7596.exe (PID: 11616)
- Unicorn-16411.exe (PID: 11712)
- Unicorn-64986.exe (PID: 11640)
- Unicorn-13184.exe (PID: 11648)
- Unicorn-14195.exe (PID: 11692)
- Unicorn-1420.exe (PID: 11672)
- Unicorn-43891.exe (PID: 11564)
- Unicorn-6641.exe (PID: 11600)
- Unicorn-32675.exe (PID: 11764)
- Unicorn-58252.exe (PID: 11824)
- Unicorn-52541.exe (PID: 11780)
- Unicorn-63882.exe (PID: 11884)
- Unicorn-8662.exe (PID: 11852)
- Unicorn-19597.exe (PID: 11844)
- Unicorn-30796.exe (PID: 11892)
- Unicorn-30537.exe (PID: 11944)
- Unicorn-58175.exe (PID: 11744)
- Unicorn-32675.exe (PID: 11768)
- Unicorn-23869.exe (PID: 11984)
- Unicorn-18773.exe (PID: 11964)
- Unicorn-60820.exe (PID: 12016)
- Unicorn-36157.exe (PID: 11924)
- Unicorn-43825.exe (PID: 12044)
- Unicorn-17291.exe (PID: 12084)
- Unicorn-65392.exe (PID: 12072)
- Unicorn-32026.exe (PID: 12156)
- Unicorn-40816.exe (PID: 12120)
- Unicorn-7575.exe (PID: 12176)
- Unicorn-54541.exe (PID: 12036)
- Unicorn-62841.exe (PID: 12276)
- Unicorn-24432.exe (PID: 12256)
- Unicorn-62052.exe (PID: 3024)
- Unicorn-47424.exe (PID: 2332)
- Unicorn-30163.exe (PID: 3032)
- Unicorn-2864.exe (PID: 12240)
- Unicorn-25462.exe (PID: 12320)
- Unicorn-25462.exe (PID: 12316)
- Unicorn-5587.exe (PID: 12348)
- Unicorn-60447.exe (PID: 12368)
- Unicorn-9207.exe (PID: 12392)
- Unicorn-28034.exe (PID: 12408)
- Unicorn-33645.exe (PID: 12416)
- Unicorn-7525.exe (PID: 12444)
- Unicorn-30040.exe (PID: 12300)
- Unicorn-54740.exe (PID: 12532)
- Unicorn-63899.exe (PID: 12496)
- Unicorn-23059.exe (PID: 12516)
- Unicorn-17270.exe (PID: 12568)
- Unicorn-29549.exe (PID: 12548)
- Unicorn-17270.exe (PID: 12560)
- Unicorn-63903.exe (PID: 12468)
- Unicorn-50168.exe (PID: 12460)
- Unicorn-44390.exe (PID: 12636)
- Unicorn-3629.exe (PID: 12616)
- Unicorn-34783.exe (PID: 12664)
- Unicorn-50486.exe (PID: 12684)
- Unicorn-50486.exe (PID: 12700)
- Unicorn-56351.exe (PID: 12692)
- Unicorn-47162.exe (PID: 12724)
- Unicorn-5207.exe (PID: 12736)
- Unicorn-41273.exe (PID: 12788)
- Unicorn-5496.exe (PID: 12600)
- Unicorn-49016.exe (PID: 12844)
- Unicorn-961.exe (PID: 12928)
- Unicorn-11845.exe (PID: 12856)
- Unicorn-13501.exe (PID: 12996)
- Unicorn-31708.exe (PID: 12944)
- Unicorn-26904.exe (PID: 12968)
- Unicorn-2036.exe (PID: 13004)
- Unicorn-5918.exe (PID: 13024)
- Unicorn-1008.exe (PID: 13036)
- Unicorn-34591.exe (PID: 12836)
- Unicorn-62878.exe (PID: 12880)
- Unicorn-35190.exe (PID: 13064)
- Unicorn-14110.exe (PID: 13092)
- Unicorn-5180.exe (PID: 13084)
- Unicorn-25474.exe (PID: 13172)
- Unicorn-33591.exe (PID: 13244)
- Unicorn-33591.exe (PID: 13252)
- Unicorn-38687.exe (PID: 13260)
- Unicorn-59242.exe (PID: 13296)
- Unicorn-63787.exe (PID: 13196)
- Unicorn-54863.exe (PID: 13212)
- Unicorn-40403.exe (PID: 13400)
- Unicorn-40403.exe (PID: 13392)
- Unicorn-10682.exe (PID: 13324)
- Unicorn-31425.exe (PID: 13364)
- Unicorn-41927.exe (PID: 13484)
- Unicorn-36307.exe (PID: 13492)
- Unicorn-29115.exe (PID: 13592)
- Unicorn-10944.exe (PID: 13628)
- Unicorn-47162.exe (PID: 13744)
- Unicorn-47162.exe (PID: 13752)
- Unicorn-44002.exe (PID: 13792)
- Unicorn-16102.exe (PID: 13816)
- Unicorn-44328.exe (PID: 13660)
- Unicorn-22847.exe (PID: 13864)
- Unicorn-14792.exe (PID: 13924)
- Unicorn-52905.exe (PID: 13944)
- Unicorn-22323.exe (PID: 13988)
- Unicorn-4415.exe (PID: 14004)
- Unicorn-60097.exe (PID: 13848)
- Unicorn-13557.exe (PID: 13884)
- Unicorn-15302.exe (PID: 13872)
- Unicorn-17871.exe (PID: 14032)
- Unicorn-7752.exe (PID: 14104)
- Unicorn-35108.exe (PID: 14236)
- Unicorn-10958.exe (PID: 14168)
- Unicorn-62760.exe (PID: 14148)
- Unicorn-62760.exe (PID: 14140)
- Unicorn-35632.exe (PID: 14184)
- Unicorn-2602.exe (PID: 14160)
- Unicorn-31569.exe (PID: 14220)
- Unicorn-23344.exe (PID: 14288)
- Unicorn-33762.exe (PID: 14048)
- Unicorn-7752.exe (PID: 14100)
- Unicorn-11992.exe (PID: 14064)
- Unicorn-9669.exe (PID: 14296)
- Unicorn-15289.exe (PID: 14272)
- Unicorn-49707.exe (PID: 14304)
- Unicorn-3511.exe (PID: 3156)
- Unicorn-45534.exe (PID: 14348)
- Unicorn-34279.exe (PID: 14280)
- Unicorn-61471.exe (PID: 14312)
- Unicorn-55327.exe (PID: 5036)
- Unicorn-23743.exe (PID: 14340)
- Unicorn-33229.exe (PID: 14488)
- Unicorn-47091.exe (PID: 14456)
- Unicorn-24868.exe (PID: 14512)
- Unicorn-11193.exe (PID: 14540)
- Unicorn-62995.exe (PID: 14528)
- Unicorn-37556.exe (PID: 14576)
- Unicorn-37556.exe (PID: 14572)
- Unicorn-59624.exe (PID: 14372)
- Unicorn-59889.exe (PID: 14388)
- Unicorn-64305.exe (PID: 14432)
- Unicorn-59889.exe (PID: 14380)
- Unicorn-13628.exe (PID: 14496)
- Unicorn-65305.exe (PID: 14736)
- Unicorn-21034.exe (PID: 14848)
- Unicorn-65305.exe (PID: 14728)
- Unicorn-14537.exe (PID: 14812)
- Unicorn-42981.exe (PID: 14900)
- Unicorn-55757.exe (PID: 14924)
- Unicorn-21206.exe (PID: 14644)
- Unicorn-26839.exe (PID: 14620)
- Unicorn-58822.exe (PID: 14668)
- Unicorn-27702.exe (PID: 14700)
- Unicorn-13503.exe (PID: 14720)
- Unicorn-54971.exe (PID: 15008)
- Unicorn-3126.exe (PID: 14956)
- Unicorn-51926.exe (PID: 15028)
- Unicorn-48827.exe (PID: 15052)
- Unicorn-1816.exe (PID: 15068)
- Unicorn-60608.exe (PID: 14932)
- Unicorn-58338.exe (PID: 14940)
- Unicorn-19986.exe (PID: 14976)
- Unicorn-57287.exe (PID: 15060)
Create files in a temporary directory
- 1 (546).exe (PID: 7508)
- Unicorn-20800.exe (PID: 7716)
- Unicorn-29630.exe (PID: 5428)
- Unicorn-47533.exe (PID: 5072)
- Unicorn-60751.exe (PID: 2136)
- Unicorn-40798.exe (PID: 7492)
- Unicorn-9168.exe (PID: 6264)
- Unicorn-2415.exe (PID: 6964)
- Unicorn-47563.exe (PID: 4300)
- Unicorn-1891.exe (PID: 1852)
- Unicorn-55664.exe (PID: 5404)
- Unicorn-2510.exe (PID: 2088)
- Unicorn-22903.exe (PID: 7544)
- Unicorn-11725.exe (PID: 4268)
- Unicorn-55550.exe (PID: 3100)
- Unicorn-20282.exe (PID: 5868)
- Unicorn-10555.exe (PID: 5328)
- Unicorn-51117.exe (PID: 7172)
- Unicorn-60790.exe (PID: 6436)
- Unicorn-2918.exe (PID: 7196)
- Unicorn-2918.exe (PID: 7200)
- Unicorn-52312.exe (PID: 6184)
- Unicorn-35798.exe (PID: 4164)
- Unicorn-61173.exe (PID: 7580)
- Unicorn-5039.exe (PID: 7572)
- Unicorn-42755.exe (PID: 7776)
- Unicorn-48885.exe (PID: 7900)
- Unicorn-10999.exe (PID: 6048)
- Unicorn-30651.exe (PID: 6036)
- Unicorn-17788.exe (PID: 7940)
- Unicorn-2918.exe (PID: 5800)
- Unicorn-39220.exe (PID: 8064)
- Unicorn-38229.exe (PID: 7880)
- Unicorn-8375.exe (PID: 4608)
- Unicorn-18363.exe (PID: 7924)
- Unicorn-37964.exe (PID: 7832)
- Unicorn-31146.exe (PID: 5176)
- Unicorn-20893.exe (PID: 1300)
- Unicorn-13767.exe (PID: 7348)
- Unicorn-2918.exe (PID: 2152)
- Unicorn-10547.exe (PID: 7892)
- Unicorn-20893.exe (PID: 8172)
- Unicorn-10547.exe (PID: 7828)
- Unicorn-65459.exe (PID: 7756)
- Unicorn-52617.exe (PID: 2244)
- Unicorn-65459.exe (PID: 7352)
- Unicorn-21106.exe (PID: 8076)
- Unicorn-10547.exe (PID: 7964)
- Unicorn-34624.exe (PID: 664)
- Unicorn-23906.exe (PID: 8072)
- Unicorn-20893.exe (PID: 3896)
- Unicorn-10171.exe (PID: 8144)
- Unicorn-60977.exe (PID: 7248)
- Unicorn-8459.exe (PID: 7232)
- Unicorn-4571.exe (PID: 1276)
- Unicorn-43427.exe (PID: 7204)
- Unicorn-60261.exe (PID: 4428)
- Unicorn-55664.exe (PID: 5380)
- Unicorn-45990.exe (PID: 4756)
- Unicorn-34555.exe (PID: 4112)
- Unicorn-24977.exe (PID: 1280)
- Unicorn-42482.exe (PID: 5984)
- Unicorn-23876.exe (PID: 7300)
- Unicorn-21315.exe (PID: 1328)
- Unicorn-42747.exe (PID: 5400)
- Unicorn-54583.exe (PID: 3008)
- Unicorn-63390.exe (PID: 5260)
- Unicorn-37265.exe (PID: 7308)
- Unicorn-26959.exe (PID: 8028)
- Unicorn-18336.exe (PID: 7360)
- Unicorn-23376.exe (PID: 8044)
- Unicorn-41726.exe (PID: 5640)
- Unicorn-47346.exe (PID: 8004)
- Unicorn-43460.exe (PID: 8056)
- Unicorn-15722.exe (PID: 7456)
- Unicorn-24528.exe (PID: 2960)
- Unicorn-8005.exe (PID: 6324)
- Unicorn-55944.exe (PID: 6644)
- Unicorn-1396.exe (PID: 5084)
- Unicorn-52321.exe (PID: 2644)
- Unicorn-904.exe (PID: 6344)
- Unicorn-15194.exe (PID: 8280)
- Unicorn-8508.exe (PID: 8308)
- Unicorn-43460.exe (PID: 8052)
- Unicorn-39277.exe (PID: 8356)
- Unicorn-59800.exe (PID: 8316)
- Unicorn-49469.exe (PID: 8388)
- Unicorn-49469.exe (PID: 8380)
- Unicorn-22897.exe (PID: 8348)
- Unicorn-47469.exe (PID: 8508)
- Unicorn-55089.exe (PID: 8396)
- Unicorn-55704.exe (PID: 8456)
- Unicorn-10547.exe (PID: 7896)
- Unicorn-52041.exe (PID: 8588)
- Unicorn-4412.exe (PID: 8440)
- Unicorn-35181.exe (PID: 8596)
- Unicorn-37220.exe (PID: 8480)
- Unicorn-37220.exe (PID: 8488)
- Unicorn-36747.exe (PID: 8604)
- Unicorn-10032.exe (PID: 8472)
- Unicorn-19522.exe (PID: 8108)
- Unicorn-15263.exe (PID: 8524)
- Unicorn-48881.exe (PID: 8728)
- Unicorn-59816.exe (PID: 8744)
- Unicorn-22893.exe (PID: 8696)
- Unicorn-4474.exe (PID: 8752)
- Unicorn-56276.exe (PID: 8768)
- Unicorn-13657.exe (PID: 8128)
- Unicorn-4474.exe (PID: 8808)
- Unicorn-56276.exe (PID: 8776)
- Unicorn-47680.exe (PID: 8860)
- Unicorn-39545.exe (PID: 8884)
- Unicorn-10339.exe (PID: 8792)
- Unicorn-48881.exe (PID: 8736)
- Unicorn-50676.exe (PID: 8784)
- Unicorn-50959.exe (PID: 8908)
- Unicorn-5472.exe (PID: 9008)
- Unicorn-4611.exe (PID: 9064)
- Unicorn-31016.exe (PID: 9084)
- Unicorn-41813.exe (PID: 9152)
- Unicorn-58736.exe (PID: 9200)
- Unicorn-26567.exe (PID: 9052)
- Unicorn-4948.exe (PID: 9020)
- Unicorn-23933.exe (PID: 9112)
- Unicorn-8102.exe (PID: 9144)
- Unicorn-14631.exe (PID: 5452)
- Unicorn-6915.exe (PID: 9040)
- Unicorn-16693.exe (PID: 7152)
- Unicorn-22348.exe (PID: 9160)
- Unicorn-57327.exe (PID: 4228)
- Unicorn-2958.exe (PID: 1764)
- Unicorn-9568.exe (PID: 9288)
- Unicorn-19246.exe (PID: 4408)
- Unicorn-50475.exe (PID: 9360)
- Unicorn-14163.exe (PID: 7996)
- Unicorn-3012.exe (PID: 9336)
- Unicorn-50441.exe (PID: 9420)
- Unicorn-47454.exe (PID: 9468)
- Unicorn-41331.exe (PID: 9500)
- Unicorn-7956.exe (PID: 9508)
- Unicorn-17231.exe (PID: 9440)
- Unicorn-47454.exe (PID: 9460)
- Unicorn-29657.exe (PID: 9668)
- Unicorn-17707.exe (PID: 9600)
- Unicorn-41297.exe (PID: 9744)
- Unicorn-37235.exe (PID: 9704)
- Unicorn-24947.exe (PID: 9764)
- Unicorn-61282.exe (PID: 9696)
- Unicorn-1322.exe (PID: 9796)
- Unicorn-22417.exe (PID: 9840)
- Unicorn-42018.exe (PID: 9832)
- Unicorn-1322.exe (PID: 9804)
- Unicorn-53210.exe (PID: 9912)
- Unicorn-11134.exe (PID: 9880)
- Unicorn-9031.exe (PID: 9904)
- Unicorn-60833.exe (PID: 9888)
- Unicorn-60522.exe (PID: 9944)
- Unicorn-46999.exe (PID: 9964)
- Unicorn-47469.exe (PID: 8500)
- Unicorn-13680.exe (PID: 9996)
- Unicorn-44449.exe (PID: 10032)
- Unicorn-2839.exe (PID: 10056)
- Unicorn-62218.exe (PID: 10092)
- Unicorn-51095.exe (PID: 10112)
Reads the computer name
- 1 (546).exe (PID: 7508)
- Unicorn-20800.exe (PID: 7716)
- Unicorn-29630.exe (PID: 5428)
- Unicorn-47533.exe (PID: 5072)
- Unicorn-40798.exe (PID: 7492)
- Unicorn-60751.exe (PID: 2136)
- Unicorn-22903.exe (PID: 7544)
- Unicorn-9168.exe (PID: 6264)
- Unicorn-2415.exe (PID: 6964)
- Unicorn-55664.exe (PID: 5404)
- Unicorn-35798.exe (PID: 4164)
- Unicorn-55664.exe (PID: 5380)
- Unicorn-2510.exe (PID: 2088)
- Unicorn-55550.exe (PID: 3100)
- Unicorn-11725.exe (PID: 4268)
- Unicorn-8375.exe (PID: 4608)
- Unicorn-20282.exe (PID: 5868)
- Unicorn-51117.exe (PID: 7172)
- Unicorn-60790.exe (PID: 6436)
- Unicorn-10555.exe (PID: 5328)
- Unicorn-2918.exe (PID: 5800)
- Unicorn-2918.exe (PID: 7196)
- Unicorn-8459.exe (PID: 7232)
- Unicorn-1891.exe (PID: 1852)
- Unicorn-43427.exe (PID: 7204)
- Unicorn-47563.exe (PID: 4300)
- Unicorn-60977.exe (PID: 7248)
- Unicorn-52617.exe (PID: 2244)
- Unicorn-61173.exe (PID: 7580)
- Unicorn-42755.exe (PID: 7776)
- Unicorn-48885.exe (PID: 7900)
- Unicorn-2918.exe (PID: 7200)
- Unicorn-2918.exe (PID: 2152)
- Unicorn-52312.exe (PID: 6184)
- Unicorn-60261.exe (PID: 4428)
- Unicorn-5039.exe (PID: 7572)
- Unicorn-10999.exe (PID: 6048)
- Unicorn-30651.exe (PID: 6036)
- Unicorn-17788.exe (PID: 7940)
- Unicorn-39220.exe (PID: 8064)
- Unicorn-38229.exe (PID: 7880)
- Unicorn-18363.exe (PID: 7924)
- Unicorn-37964.exe (PID: 7832)
- Unicorn-31146.exe (PID: 5176)
- Unicorn-20893.exe (PID: 1300)
- Unicorn-13767.exe (PID: 7348)
- Unicorn-20893.exe (PID: 8172)
- Unicorn-10547.exe (PID: 7896)
- Unicorn-10547.exe (PID: 7964)
- Unicorn-65459.exe (PID: 7756)
- Unicorn-65459.exe (PID: 7352)
- Unicorn-21106.exe (PID: 8076)
- Unicorn-10547.exe (PID: 7892)
- Unicorn-10547.exe (PID: 7828)
- Unicorn-10171.exe (PID: 8144)
- Unicorn-20893.exe (PID: 3896)
- Unicorn-34624.exe (PID: 664)
- Unicorn-4571.exe (PID: 1276)
- Unicorn-23906.exe (PID: 8072)
- Unicorn-45990.exe (PID: 4756)
- Unicorn-23876.exe (PID: 7300)
- Unicorn-63390.exe (PID: 5260)
- Unicorn-42747.exe (PID: 5400)
- Unicorn-34555.exe (PID: 4112)
- Unicorn-24977.exe (PID: 1280)
- Unicorn-21315.exe (PID: 1328)
- Unicorn-42482.exe (PID: 5984)
- Unicorn-19522.exe (PID: 8108)
- Unicorn-13657.exe (PID: 8128)
- Unicorn-54583.exe (PID: 3008)
- Unicorn-37265.exe (PID: 7308)
- Unicorn-41726.exe (PID: 5640)
- Unicorn-18336.exe (PID: 7360)
- Unicorn-43460.exe (PID: 8052)
- Unicorn-29507.exe (PID: 8024)
- Unicorn-26959.exe (PID: 8028)
- Unicorn-23376.exe (PID: 8044)
- Unicorn-47346.exe (PID: 8004)
- Unicorn-19246.exe (PID: 4408)
- Unicorn-43460.exe (PID: 8056)
- Unicorn-14163.exe (PID: 7996)
- Unicorn-15722.exe (PID: 7456)
- Unicorn-8005.exe (PID: 6324)
- Unicorn-24528.exe (PID: 2960)
- Unicorn-55944.exe (PID: 6644)
- Unicorn-904.exe (PID: 6344)
- Unicorn-52321.exe (PID: 2644)
- Unicorn-1396.exe (PID: 5084)
- Unicorn-8508.exe (PID: 8308)
- Unicorn-15194.exe (PID: 8280)
- Unicorn-39277.exe (PID: 8356)
- Unicorn-59800.exe (PID: 8316)
- Unicorn-54041.exe (PID: 8432)
- Unicorn-55089.exe (PID: 8396)
- Unicorn-49469.exe (PID: 8388)
- Unicorn-49469.exe (PID: 8380)
- Unicorn-22897.exe (PID: 8348)
- Unicorn-47469.exe (PID: 8508)
- Unicorn-52041.exe (PID: 8588)
- Unicorn-55704.exe (PID: 8456)
- Unicorn-4412.exe (PID: 8440)
- Unicorn-37220.exe (PID: 8480)
- Unicorn-15263.exe (PID: 8524)
- Unicorn-10032.exe (PID: 8472)
- Unicorn-22893.exe (PID: 8696)
- Unicorn-48881.exe (PID: 8728)
- Unicorn-59816.exe (PID: 8744)
- Unicorn-4474.exe (PID: 8808)
- Unicorn-36747.exe (PID: 8604)
- Unicorn-35181.exe (PID: 8596)
- Unicorn-47469.exe (PID: 8500)
- Unicorn-37220.exe (PID: 8488)
- Unicorn-56276.exe (PID: 8768)
- Unicorn-36358.exe (PID: 8704)
- Unicorn-4474.exe (PID: 8752)
- Unicorn-56276.exe (PID: 8776)
- Unicorn-47680.exe (PID: 8860)
- Unicorn-48881.exe (PID: 8736)
- Unicorn-10339.exe (PID: 8792)
- Unicorn-39545.exe (PID: 8884)
- Unicorn-50676.exe (PID: 8784)
- Unicorn-50959.exe (PID: 8908)
- Unicorn-5472.exe (PID: 9008)
- Unicorn-4611.exe (PID: 9064)
- Unicorn-4948.exe (PID: 9020)
- Unicorn-23933.exe (PID: 9112)
- Unicorn-41813.exe (PID: 9152)
- Unicorn-58736.exe (PID: 9200)
- Unicorn-31016.exe (PID: 9084)
- Unicorn-26567.exe (PID: 9052)
- Unicorn-6915.exe (PID: 9040)
- Unicorn-8102.exe (PID: 9144)
- Unicorn-14631.exe (PID: 5452)
- Unicorn-57327.exe (PID: 4228)
- Unicorn-2958.exe (PID: 1764)
- Unicorn-22348.exe (PID: 9160)
- Unicorn-16693.exe (PID: 7152)
- Unicorn-50475.exe (PID: 9360)
- Unicorn-9568.exe (PID: 9288)
- Unicorn-3012.exe (PID: 9336)
- Unicorn-50441.exe (PID: 9420)
- Unicorn-47454.exe (PID: 9468)
- Unicorn-47454.exe (PID: 9460)
- Unicorn-17231.exe (PID: 9440)
- Unicorn-7956.exe (PID: 9508)
- Unicorn-14086.exe (PID: 9560)
- Unicorn-41331.exe (PID: 9500)
- Unicorn-37235.exe (PID: 9712)
- Unicorn-41297.exe (PID: 9744)
- Unicorn-24947.exe (PID: 9764)
- Unicorn-61282.exe (PID: 9696)
- Unicorn-37235.exe (PID: 9704)
- Unicorn-17707.exe (PID: 9600)
- Unicorn-29657.exe (PID: 9668)
- Unicorn-1322.exe (PID: 9804)
- Unicorn-1322.exe (PID: 9796)
- Unicorn-22417.exe (PID: 9840)
- Unicorn-42018.exe (PID: 9832)
- Unicorn-53210.exe (PID: 9912)
- Unicorn-11134.exe (PID: 9880)
- Unicorn-9031.exe (PID: 9904)
- Unicorn-60833.exe (PID: 9888)
- Unicorn-60522.exe (PID: 9944)
- Unicorn-13680.exe (PID: 9996)
- Unicorn-46999.exe (PID: 9964)
- Unicorn-2839.exe (PID: 10056)
- Unicorn-44449.exe (PID: 10032)
- Unicorn-47999.exe (PID: 10076)
- Unicorn-62218.exe (PID: 10092)
- Unicorn-51095.exe (PID: 10112)
- Unicorn-14841.exe (PID: 10148)
- Unicorn-40307.exe (PID: 10156)
- Unicorn-19088.exe (PID: 10196)
- Unicorn-39252.exe (PID: 10128)
- Unicorn-43569.exe (PID: 10220)
- Unicorn-14792.exe (PID: 13924)
The sample compiled with chinese language support
- 1 (546).exe (PID: 7508)
Creates files or folders in the user directory
- WerFault.exe (PID: 9316)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable (generic) (52.9) |
|---|---|---|
| .exe | | | Generic Win/DOS Executable (23.5) |
| .exe | | | DOS Executable Generic (23.5) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:20 00:32:00+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
574
Monitored processes
439
Malicious processes
65
Suspicious processes
57
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 664 | C:\Users\admin\AppData\Local\Temp\Unicorn-34624.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-34624.exe | Unicorn-52312.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1276 | C:\Users\admin\AppData\Local\Temp\Unicorn-4571.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-4571.exe | 1 (546).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1280 | C:\Users\admin\AppData\Local\Temp\Unicorn-24977.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-24977.exe | Unicorn-55550.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1300 | C:\Users\admin\AppData\Local\Temp\Unicorn-20893.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-20893.exe | Unicorn-2918.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1328 | C:\Users\admin\AppData\Local\Temp\Unicorn-21315.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-21315.exe | Unicorn-42755.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1764 | C:\Users\admin\AppData\Local\Temp\Unicorn-2958.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2958.exe | Unicorn-48885.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1852 | C:\Users\admin\AppData\Local\Temp\Unicorn-1891.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-1891.exe | Unicorn-40798.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 2088 | C:\Users\admin\AppData\Local\Temp\Unicorn-2510.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2510.exe | Unicorn-20800.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 2136 | C:\Users\admin\AppData\Local\Temp\Unicorn-60751.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-60751.exe | Unicorn-29630.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 2152 | C:\Users\admin\AppData\Local\Temp\Unicorn-2918.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2918.exe | Unicorn-8375.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
10 275
Read events
10 275
Write events
0
Delete events
0
Modification events
Executable files
984
Suspicious files
3
Text files
1
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 5428 | Unicorn-29630.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-60751.exe | executable | |
MD5:3B113DD343941012258E4E33B407D37D | SHA256:104B3C30B295B8F58DC71CD9DD4DA1EE8104C6D354F191C8C0A341A3AB330B50 | |||
| 7492 | Unicorn-40798.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-51117.exe | executable | |
MD5:7A2DEAE89BD58FF13B6AA772F6CBCC89 | SHA256:0D3854ABE81C348D58AC25793A7BA91E85D0EA423E90E0B66A335915DD679D1E | |||
| 2136 | Unicorn-60751.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2415.exe | executable | |
MD5:76214C4CCF37EA88C21FA93146351859 | SHA256:33A5BF95FE499E4F0073AE8D19E38F58ACF600AE5237AEAE20CF539325041CCA | |||
| 7492 | Unicorn-40798.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-1891.exe | executable | |
MD5:A3B5D42185ADA006858928606CC203CC | SHA256:5E51AF7C4C15B2034CA19770B5EB44BFE2153B7821682EE971A05F775C4BFDA7 | |||
| 6964 | Unicorn-2415.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-55550.exe | executable | |
MD5:D4666013643E75A9B7D68166B77EE41B | SHA256:916BC8535B646202CCECF8C1F5386C87E7313A8815FCE2A3D6DD4BDDD7CFBEC0 | |||
| 7716 | Unicorn-20800.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-9168.exe | executable | |
MD5:5747A2F6CDADBA4E11D82DB4911115D9 | SHA256:892407A2DC1C63D12A44D4DAC2C192F6D905C3C806476B0BDE7C12133E89A385 | |||
| 5072 | Unicorn-47533.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-40798.exe | executable | |
MD5:54069273BB37A68F9B5D505D71D45E66 | SHA256:A078CCECEFDF4DB65058271864C188E8290ADA07320A51B60254D3C93769704E | |||
| 7508 | 1 (546).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-22903.exe | executable | |
MD5:8B1AADB28135C4E68D85DBE4FB81854E | SHA256:944DB7617EFF1FC73D257A2B8CB2C3827C1E22867D7B8F5FB99F9706916A5DE6 | |||
| 7508 | 1 (546).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-8375.exe | executable | |
MD5:38E664E76AFA7043FB4C29D59E39420E | SHA256:8ABC6590A1E99F92E199434DE7D7CBA3765D2A5222DFE9F61548E6A19F925AE0 | |||
| 7716 | Unicorn-20800.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2510.exe | executable | |
MD5:0A67373518B30D3AA11A22CAC1A57B2A | SHA256:FE2ABBC637C43A1AC4F6A5CE4F65D09EACF79A742488A641ECD499B8C2ADAE23 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
21
DNS requests
16
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
— | — | GET | 200 | 23.48.23.156:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
8004 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
8672 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
8672 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
— | — | 23.48.23.156:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
3216 | svchost.exe | 20.198.162.76:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | SG | whitelisted |
6544 | svchost.exe | 40.126.32.68:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
2104 | svchost.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
8004 | backgroundTaskHost.exe | 20.223.35.26:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
8004 | backgroundTaskHost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |