| File name: | 1 (235) |
| Full analysis: | https://app.any.run/tasks/9dbec1d4-fd8a-404c-a170-00bfc687bf10 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 19:07:09 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 5ADC894D93021F7C8E013E22715C0260 |
| SHA1: | DA924C0BF1D5F2E2A012C13AFE9ED5998BB44A9A |
| SHA256: | B9A892C1CBFC52E5B84CEB07EFE946870F0ACAB913C411DF0D227C183C48A404 |
| SSDEEP: | 6144:V7w8ngucQD8vA5tVkoeCy5Sx5tPqlp8GBV/WyeOdTk/8SwjwpyAvlhKkZ106suwa:VsOFkvA5Xkj4PM+aVOyeOdxx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- Unicorn-64257.exe (PID: 7724)
- Unicorn-15487.exe (PID: 7216)
- 1 (235).exe (PID: 720)
- Unicorn-20314.exe (PID: 7908)
- Unicorn-51040.exe (PID: 7936)
- Unicorn-44910.exe (PID: 7928)
- Unicorn-10417.exe (PID: 7704)
- Unicorn-34189.exe (PID: 7960)
- Unicorn-25322.exe (PID: 8008)
- Unicorn-60132.exe (PID: 8028)
- Unicorn-49826.exe (PID: 8060)
- Unicorn-39197.exe (PID: 8088)
- Unicorn-40266.exe (PID: 8036)
- Unicorn-58798.exe (PID: 8080)
- Unicorn-2462.exe (PID: 8112)
- Unicorn-60800.exe (PID: 8120)
- Unicorn-42810.exe (PID: 8168)
- Unicorn-13707.exe (PID: 8188)
- Unicorn-37164.exe (PID: 4040)
- Unicorn-51454.exe (PID: 2384)
- Unicorn-62223.exe (PID: 5548)
- Unicorn-61668.exe (PID: 2140)
- Unicorn-53007.exe (PID: 456)
- Unicorn-46463.exe (PID: 7572)
- Unicorn-58160.exe (PID: 7460)
- Unicorn-43770.exe (PID: 7516)
- Unicorn-62244.exe (PID: 7408)
- Unicorn-46877.exe (PID: 7668)
- Unicorn-8197.exe (PID: 5956)
- Unicorn-53007.exe (PID: 1072)
- Unicorn-16862.exe (PID: 7676)
- Unicorn-15950.exe (PID: 7884)
- Unicorn-26810.exe (PID: 7876)
- Unicorn-37247.exe (PID: 2240)
- Unicorn-40546.exe (PID: 7864)
- Unicorn-12228.exe (PID: 7984)
- Unicorn-48430.exe (PID: 1012)
- Unicorn-3816.exe (PID: 2552)
- Unicorn-53182.exe (PID: 1240)
- Unicorn-59312.exe (PID: 208)
- Unicorn-27194.exe (PID: 3008)
- Unicorn-47060.exe (PID: 736)
- Unicorn-59120.exe (PID: 7380)
- Unicorn-43338.exe (PID: 7588)
- Unicorn-48814.exe (PID: 7604)
- Unicorn-30916.exe (PID: 2908)
- Unicorn-4273.exe (PID: 7248)
- Unicorn-42383.exe (PID: 7640)
- Unicorn-5897.exe (PID: 6228)
- Unicorn-29847.exe (PID: 7752)
- Unicorn-29847.exe (PID: 7764)
- Unicorn-14065.exe (PID: 6540)
- Unicorn-12996.exe (PID: 7792)
- Unicorn-30916.exe (PID: 5328)
- Unicorn-64657.exe (PID: 1388)
- Unicorn-33931.exe (PID: 7616)
- Unicorn-59239.exe (PID: 7404)
- Unicorn-5726.exe (PID: 8200)
- Unicorn-38508.exe (PID: 5936)
- Unicorn-7396.exe (PID: 4944)
- Unicorn-12917.exe (PID: 7148)
- Unicorn-38134.exe (PID: 8304)
- Unicorn-32268.exe (PID: 8296)
- Unicorn-50329.exe (PID: 8220)
- Unicorn-45176.exe (PID: 8252)
- Unicorn-39468.exe (PID: 8236)
- Unicorn-11756.exe (PID: 8276)
- Unicorn-30807.exe (PID: 8352)
- Unicorn-65041.exe (PID: 8260)
- Unicorn-2995.exe (PID: 8404)
- Unicorn-26208.exe (PID: 8372)
- Unicorn-62410.exe (PID: 8388)
- Unicorn-34206.exe (PID: 8512)
- Unicorn-32260.exe (PID: 8476)
- Unicorn-23900.exe (PID: 8548)
- Unicorn-10256.exe (PID: 8496)
- Unicorn-21762.exe (PID: 8584)
- Unicorn-45696.exe (PID: 8528)
- Unicorn-1341.exe (PID: 8568)
- Unicorn-13493.exe (PID: 8652)
- Unicorn-21762.exe (PID: 8588)
- Unicorn-30734.exe (PID: 8616)
- Unicorn-22316.exe (PID: 8632)
- Unicorn-4610.exe (PID: 8668)
- Unicorn-30314.exe (PID: 8784)
- Unicorn-22700.exe (PID: 8808)
- Unicorn-36980.exe (PID: 8928)
- Unicorn-37072.exe (PID: 8856)
- Unicorn-53508.exe (PID: 8840)
- Unicorn-20008.exe (PID: 8816)
- Unicorn-22267.exe (PID: 8872)
- Unicorn-46829.exe (PID: 8952)
- Unicorn-62999.exe (PID: 9088)
- Unicorn-15381.exe (PID: 9056)
- Unicorn-41256.exe (PID: 9040)
- Unicorn-27442.exe (PID: 9144)
- Unicorn-799.exe (PID: 9160)
- Unicorn-62999.exe (PID: 9096)
- Unicorn-37748.exe (PID: 9124)
- Unicorn-62252.exe (PID: 9180)
- Unicorn-40248.exe (PID: 9200)
- Unicorn-30710.exe (PID: 7012)
- Unicorn-15766.exe (PID: 5244)
- Unicorn-5459.exe (PID: 8452)
- Unicorn-58068.exe (PID: 2980)
- Unicorn-32656.exe (PID: 8688)
- Unicorn-17712.exe (PID: 8880)
- Unicorn-40270.exe (PID: 8920)
- Unicorn-11489.exe (PID: 9248)
- Unicorn-21796.exe (PID: 9236)
- Unicorn-15763.exe (PID: 644)
- Unicorn-21695.exe (PID: 9268)
- Unicorn-21695.exe (PID: 9276)
- Unicorn-26864.exe (PID: 9336)
- Unicorn-16128.exe (PID: 9284)
- Unicorn-60266.exe (PID: 9388)
- Unicorn-53706.exe (PID: 9320)
- Unicorn-5267.exe (PID: 9356)
- Unicorn-5267.exe (PID: 9344)
- Unicorn-12620.exe (PID: 9440)
- Unicorn-56013.exe (PID: 9464)
- Unicorn-52806.exe (PID: 9552)
- Unicorn-1567.exe (PID: 9572)
- Unicorn-44281.exe (PID: 9592)
- Unicorn-38516.exe (PID: 9536)
- Unicorn-56990.exe (PID: 9504)
- Unicorn-17141.exe (PID: 9620)
- Unicorn-30156.exe (PID: 9640)
- Unicorn-42408.exe (PID: 9668)
- Unicorn-11681.exe (PID: 9660)
- Unicorn-38324.exe (PID: 9692)
- Unicorn-41592.exe (PID: 9780)
- Unicorn-17502.exe (PID: 9760)
- Unicorn-16268.exe (PID: 9716)
- Unicorn-32870.exe (PID: 9740)
- Unicorn-6782.exe (PID: 9796)
- Unicorn-41592.exe (PID: 9784)
- Unicorn-55236.exe (PID: 9844)
- Unicorn-16241.exe (PID: 9932)
- Unicorn-31862.exe (PID: 9960)
- Unicorn-35370.exe (PID: 9836)
- Unicorn-61266.exe (PID: 9908)
- Unicorn-63788.exe (PID: 9996)
- Unicorn-4857.exe (PID: 10140)
- Unicorn-54058.exe (PID: 10084)
- Unicorn-27416.exe (PID: 10104)
- Unicorn-60280.exe (PID: 10044)
- Unicorn-50529.exe (PID: 10132)
- Unicorn-14971.exe (PID: 10236)
- Unicorn-29362.exe (PID: 10172)
- Unicorn-46492.exe (PID: 8692)
- Unicorn-21748.exe (PID: 10224)
- Unicorn-32468.exe (PID: 10180)
- Unicorn-17664.exe (PID: 10192)
- Unicorn-2719.exe (PID: 10200)
- Unicorn-12568.exe (PID: 5544)
- Unicorn-36548.exe (PID: 9376)
- Unicorn-12833.exe (PID: 6584)
- Unicorn-32630.exe (PID: 684)
- Unicorn-8556.exe (PID: 10280)
- Unicorn-61074.exe (PID: 9476)
- Unicorn-34576.exe (PID: 10304)
- Unicorn-17686.exe (PID: 10260)
- Unicorn-44792.exe (PID: 4220)
Executable content was dropped or overwritten
- 1 (235).exe (PID: 720)
- Unicorn-10417.exe (PID: 7704)
- Unicorn-15487.exe (PID: 7216)
- Unicorn-64257.exe (PID: 7724)
- Unicorn-34189.exe (PID: 7960)
- Unicorn-20314.exe (PID: 7908)
- Unicorn-51040.exe (PID: 7936)
- Unicorn-44910.exe (PID: 7928)
- Unicorn-25322.exe (PID: 8008)
- Unicorn-40266.exe (PID: 8036)
- Unicorn-60132.exe (PID: 8028)
- Unicorn-49826.exe (PID: 8060)
- Unicorn-39197.exe (PID: 8088)
- Unicorn-58798.exe (PID: 8080)
- Unicorn-42810.exe (PID: 8168)
- Unicorn-2462.exe (PID: 8112)
- Unicorn-13707.exe (PID: 8188)
- Unicorn-37164.exe (PID: 4040)
- Unicorn-51454.exe (PID: 2384)
- Unicorn-61668.exe (PID: 2140)
- Unicorn-62223.exe (PID: 5548)
- Unicorn-58160.exe (PID: 7460)
- Unicorn-46463.exe (PID: 7572)
- Unicorn-53007.exe (PID: 456)
- Unicorn-60800.exe (PID: 8120)
- Unicorn-43770.exe (PID: 7516)
- Unicorn-46877.exe (PID: 7668)
- Unicorn-16862.exe (PID: 7676)
- Unicorn-8197.exe (PID: 5956)
- Unicorn-38508.exe (PID: 5936)
- Unicorn-15950.exe (PID: 7884)
- Unicorn-37247.exe (PID: 2240)
- Unicorn-12228.exe (PID: 7984)
- Unicorn-40546.exe (PID: 7864)
- Unicorn-26810.exe (PID: 7876)
- Unicorn-48430.exe (PID: 1012)
- Unicorn-59312.exe (PID: 208)
- Unicorn-3816.exe (PID: 2552)
- Unicorn-53182.exe (PID: 1240)
- Unicorn-59120.exe (PID: 7380)
- Unicorn-47060.exe (PID: 736)
- Unicorn-48814.exe (PID: 7604)
- Unicorn-42383.exe (PID: 7640)
- Unicorn-43338.exe (PID: 7588)
- Unicorn-30916.exe (PID: 2908)
- Unicorn-4273.exe (PID: 7248)
- Unicorn-62244.exe (PID: 7408)
- Unicorn-29847.exe (PID: 7764)
- Unicorn-5897.exe (PID: 6228)
- Unicorn-29847.exe (PID: 7752)
- Unicorn-30916.exe (PID: 5328)
- Unicorn-14065.exe (PID: 6540)
- Unicorn-12996.exe (PID: 7792)
- Unicorn-15763.exe (PID: 644)
- Unicorn-53007.exe (PID: 1072)
- Unicorn-64657.exe (PID: 1388)
- Unicorn-33931.exe (PID: 7616)
- Unicorn-7396.exe (PID: 4944)
- Unicorn-59239.exe (PID: 7404)
- Unicorn-44792.exe (PID: 4220)
- Unicorn-12917.exe (PID: 7148)
- Unicorn-38134.exe (PID: 8304)
- Unicorn-50329.exe (PID: 8220)
- Unicorn-45176.exe (PID: 8252)
- Unicorn-39468.exe (PID: 8236)
- Unicorn-32268.exe (PID: 8296)
- Unicorn-30807.exe (PID: 8352)
- Unicorn-65041.exe (PID: 8260)
- Unicorn-11756.exe (PID: 8276)
- Unicorn-62410.exe (PID: 8388)
- Unicorn-2995.exe (PID: 8404)
- Unicorn-34206.exe (PID: 8512)
- Unicorn-26208.exe (PID: 8372)
- Unicorn-32260.exe (PID: 8476)
- Unicorn-23900.exe (PID: 8548)
- Unicorn-13493.exe (PID: 8652)
- Unicorn-10256.exe (PID: 8496)
- Unicorn-45696.exe (PID: 8528)
- Unicorn-1341.exe (PID: 8568)
- Unicorn-27194.exe (PID: 3008)
- Unicorn-21762.exe (PID: 8584)
- Unicorn-30734.exe (PID: 8616)
- Unicorn-22316.exe (PID: 8632)
- Unicorn-21762.exe (PID: 8588)
- Unicorn-30314.exe (PID: 8784)
- Unicorn-20008.exe (PID: 8816)
- Unicorn-4610.exe (PID: 8668)
- Unicorn-37072.exe (PID: 8856)
- Unicorn-53508.exe (PID: 8840)
- Unicorn-22267.exe (PID: 8872)
- Unicorn-22700.exe (PID: 8808)
- Unicorn-46829.exe (PID: 8952)
- Unicorn-41256.exe (PID: 9040)
- Unicorn-62999.exe (PID: 9088)
- Unicorn-15381.exe (PID: 9056)
- Unicorn-62999.exe (PID: 9096)
- Unicorn-27442.exe (PID: 9144)
- Unicorn-799.exe (PID: 9160)
- Unicorn-37748.exe (PID: 9124)
- Unicorn-62252.exe (PID: 9180)
- Unicorn-40248.exe (PID: 9200)
- Unicorn-58068.exe (PID: 2980)
- Unicorn-30710.exe (PID: 7012)
- Unicorn-46492.exe (PID: 8692)
- Unicorn-15766.exe (PID: 5244)
- Unicorn-5459.exe (PID: 8452)
- Unicorn-32656.exe (PID: 8688)
- Unicorn-17712.exe (PID: 8880)
- Unicorn-11489.exe (PID: 9248)
- Unicorn-40270.exe (PID: 8920)
- Unicorn-21695.exe (PID: 9268)
- Unicorn-21695.exe (PID: 9276)
- Unicorn-21796.exe (PID: 9236)
- Unicorn-36548.exe (PID: 9376)
- Unicorn-16128.exe (PID: 9284)
- Unicorn-60266.exe (PID: 9388)
- Unicorn-53706.exe (PID: 9320)
- Unicorn-26864.exe (PID: 9336)
- Unicorn-5267.exe (PID: 9344)
- Unicorn-12620.exe (PID: 9440)
- Unicorn-5267.exe (PID: 9356)
- Unicorn-56013.exe (PID: 9464)
- Unicorn-61074.exe (PID: 9476)
- Unicorn-52806.exe (PID: 9552)
- Unicorn-56990.exe (PID: 9504)
- Unicorn-44281.exe (PID: 9592)
- Unicorn-38516.exe (PID: 9536)
- Unicorn-1567.exe (PID: 9572)
- Unicorn-30156.exe (PID: 9640)
- Unicorn-11681.exe (PID: 9660)
- Unicorn-42408.exe (PID: 9668)
- Unicorn-17141.exe (PID: 9620)
- Unicorn-38324.exe (PID: 9692)
- Unicorn-41592.exe (PID: 9780)
- Unicorn-17502.exe (PID: 9760)
- Unicorn-16268.exe (PID: 9716)
- Unicorn-32870.exe (PID: 9740)
- Unicorn-41592.exe (PID: 9784)
- Unicorn-6782.exe (PID: 9796)
- Unicorn-35370.exe (PID: 9836)
- Unicorn-16241.exe (PID: 9932)
- Unicorn-31862.exe (PID: 9960)
- Unicorn-55236.exe (PID: 9844)
- Unicorn-63788.exe (PID: 9996)
- Unicorn-60280.exe (PID: 10044)
- Unicorn-36980.exe (PID: 8928)
- Unicorn-54058.exe (PID: 10084)
- Unicorn-27416.exe (PID: 10104)
- Unicorn-4857.exe (PID: 10140)
- Unicorn-6730.exe (PID: 10068)
- Unicorn-29362.exe (PID: 10172)
- Unicorn-17664.exe (PID: 10192)
- Unicorn-14971.exe (PID: 10236)
- Unicorn-21748.exe (PID: 10224)
- Unicorn-32468.exe (PID: 10180)
- Unicorn-12568.exe (PID: 5544)
- Unicorn-12833.exe (PID: 6584)
- Unicorn-5726.exe (PID: 8200)
- Unicorn-19632.exe (PID: 10324)
- Unicorn-8556.exe (PID: 10280)
- Unicorn-32630.exe (PID: 684)
- Unicorn-17686.exe (PID: 10260)
- Unicorn-12018.exe (PID: 10356)
- Unicorn-51542.exe (PID: 10396)
- Unicorn-5241.exe (PID: 10348)
- Unicorn-9133.exe (PID: 10452)
- Unicorn-61266.exe (PID: 9908)
- Unicorn-34576.exe (PID: 10304)
- Unicorn-1057.exe (PID: 10432)
- Unicorn-56864.exe (PID: 10480)
- Unicorn-38874.exe (PID: 10612)
- Unicorn-52688.exe (PID: 10504)
- Unicorn-1349.exe (PID: 10544)
- Unicorn-51105.exe (PID: 10528)
- Unicorn-20400.exe (PID: 10676)
- Unicorn-38874.exe (PID: 10604)
- Unicorn-14924.exe (PID: 10620)
- Unicorn-44328.exe (PID: 10568)
- Unicorn-8147.exe (PID: 10660)
- Unicorn-50529.exe (PID: 10132)
- Unicorn-55765.exe (PID: 10716)
- Unicorn-36636.exe (PID: 10768)
- Unicorn-9828.exe (PID: 10724)
- Unicorn-18816.exe (PID: 10752)
- Unicorn-31090.exe (PID: 10796)
- Unicorn-2017.exe (PID: 10668)
- Unicorn-2719.exe (PID: 10200)
- Unicor÷-27198.exe (PID: 10884)
- Unicorn-15500.exe (PID: 10912)
- Unicorn-43534.exe (PID: 10932)
- Unicor÷-48194.exe (PID: 10996)
- Unicorn-26705.exe (PID: 11004)
- Unicorn-7161.exe (PID: 11060)
- Unicorn-36357.exe (PID: 10820)
- Unicorn-43726.exe (PID: 10848)
- Unicorn-52833.exe (PID: 11052)
- Unicorn-51593.exe (PID: 11256)
- Unicorn-12376.exe (PID: 11192)
- Unicorn-4923.exe (PID: 11168)
- Unicorn-2392.exe (PID: 7564)
- Unicorn-27966.exe (PID: 6816)
- Unicorn-21643.exe (PID: 10976)
- Unicorn-39834.exe (PID: 11100)
- Unicorn-4208.exe (PID: 11176)
- Unicorn-52781.exe (PID: 11384)
- Unicorn-35619.exe (PID: 2064)
- Unicorn-11437.exe (PID: 11292)
- Unicorn-30488.exe (PID: 11420)
- Unicorn-22411.exe (PID: 11340)
- Unicorn-21342.exe (PID: 11360)
- Unicorn-16098.exe (PID: 11468)
- Unicorn-48386.exe (PID: 6392)
- Unicorn-15906.exe (PID: 11664)
- Unicorn-42548.exe (PID: 11684)
- Unicorn-26212.exe (PID: 11644)
- Unicorn-23197.exe (PID: 11568)
- Unicorn-16652.exe (PID: 11588)
- Unicorn-44686.exe (PID: 11604)
Executes application which crashes
- Unicorn-62799.exe (PID: 3192)
INFO
The sample compiled with chinese language support
- 1 (235).exe (PID: 720)
- Unicorn-10417.exe (PID: 7704)
- Unicorn-15487.exe (PID: 7216)
- Unicorn-64257.exe (PID: 7724)
- Unicorn-51040.exe (PID: 7936)
- Unicorn-44910.exe (PID: 7928)
- Unicorn-25322.exe (PID: 8008)
- Unicorn-20314.exe (PID: 7908)
- Unicorn-40266.exe (PID: 8036)
- Unicorn-34189.exe (PID: 7960)
- Unicorn-60132.exe (PID: 8028)
- Unicorn-49826.exe (PID: 8060)
- Unicorn-39197.exe (PID: 8088)
- Unicorn-58798.exe (PID: 8080)
- Unicorn-2462.exe (PID: 8112)
- Unicorn-42810.exe (PID: 8168)
- Unicorn-13707.exe (PID: 8188)
- Unicorn-37164.exe (PID: 4040)
- Unicorn-51454.exe (PID: 2384)
- Unicorn-61668.exe (PID: 2140)
- Unicorn-62223.exe (PID: 5548)
- Unicorn-58160.exe (PID: 7460)
- Unicorn-46463.exe (PID: 7572)
- Unicorn-53007.exe (PID: 456)
- Unicorn-60800.exe (PID: 8120)
- Unicorn-16862.exe (PID: 7676)
- Unicorn-46877.exe (PID: 7668)
- Unicorn-8197.exe (PID: 5956)
- Unicorn-43770.exe (PID: 7516)
- Unicorn-38508.exe (PID: 5936)
- Unicorn-15950.exe (PID: 7884)
- Unicorn-37247.exe (PID: 2240)
- Unicorn-40546.exe (PID: 7864)
- Unicorn-26810.exe (PID: 7876)
- Unicorn-12228.exe (PID: 7984)
- Unicorn-48430.exe (PID: 1012)
- Unicorn-3816.exe (PID: 2552)
- Unicorn-53182.exe (PID: 1240)
- Unicorn-59312.exe (PID: 208)
- Unicorn-59120.exe (PID: 7380)
- Unicorn-47060.exe (PID: 736)
- Unicorn-48814.exe (PID: 7604)
- Unicorn-42383.exe (PID: 7640)
- Unicorn-43338.exe (PID: 7588)
- Unicorn-4273.exe (PID: 7248)
- Unicorn-62244.exe (PID: 7408)
- Unicorn-30916.exe (PID: 2908)
- Unicorn-5897.exe (PID: 6228)
- Unicorn-29847.exe (PID: 7752)
- Unicorn-30916.exe (PID: 5328)
- Unicorn-29847.exe (PID: 7764)
- Unicorn-53007.exe (PID: 1072)
- Unicorn-12996.exe (PID: 7792)
- Unicorn-14065.exe (PID: 6540)
- Unicorn-33931.exe (PID: 7616)
- Unicorn-64657.exe (PID: 1388)
- Unicorn-7396.exe (PID: 4944)
- Unicorn-15763.exe (PID: 644)
- Unicorn-59239.exe (PID: 7404)
- Unicorn-44792.exe (PID: 4220)
- Unicorn-12917.exe (PID: 7148)
- Unicorn-38134.exe (PID: 8304)
- Unicorn-32268.exe (PID: 8296)
- Unicorn-50329.exe (PID: 8220)
- Unicorn-45176.exe (PID: 8252)
- Unicorn-39468.exe (PID: 8236)
- Unicorn-11756.exe (PID: 8276)
- Unicorn-30807.exe (PID: 8352)
- Unicorn-65041.exe (PID: 8260)
- Unicorn-62410.exe (PID: 8388)
- Unicorn-2995.exe (PID: 8404)
- Unicorn-34206.exe (PID: 8512)
- Unicorn-26208.exe (PID: 8372)
- Unicorn-13493.exe (PID: 8652)
- Unicorn-23900.exe (PID: 8548)
- Unicorn-10256.exe (PID: 8496)
- Unicorn-32260.exe (PID: 8476)
- Unicorn-45696.exe (PID: 8528)
- Unicorn-1341.exe (PID: 8568)
- Unicorn-27194.exe (PID: 3008)
- Unicorn-21762.exe (PID: 8584)
- Unicorn-30734.exe (PID: 8616)
- Unicorn-22316.exe (PID: 8632)
- Unicorn-21762.exe (PID: 8588)
- Unicorn-4610.exe (PID: 8668)
- Unicorn-30314.exe (PID: 8784)
- Unicorn-20008.exe (PID: 8816)
- Unicorn-53508.exe (PID: 8840)
- Unicorn-22267.exe (PID: 8872)
- Unicorn-22700.exe (PID: 8808)
- Unicorn-37072.exe (PID: 8856)
- Unicorn-41256.exe (PID: 9040)
- Unicorn-46829.exe (PID: 8952)
- Unicorn-62999.exe (PID: 9088)
- Unicorn-15381.exe (PID: 9056)
- Unicorn-62999.exe (PID: 9096)
- Unicorn-37748.exe (PID: 9124)
- Unicorn-27442.exe (PID: 9144)
- Unicorn-799.exe (PID: 9160)
- Unicorn-62252.exe (PID: 9180)
- Unicorn-40248.exe (PID: 9200)
- Unicorn-30710.exe (PID: 7012)
- Unicorn-58068.exe (PID: 2980)
- Unicorn-46492.exe (PID: 8692)
- Unicorn-15766.exe (PID: 5244)
- Unicorn-5459.exe (PID: 8452)
- Unicorn-17712.exe (PID: 8880)
- Unicorn-40270.exe (PID: 8920)
- Unicorn-11489.exe (PID: 9248)
- Unicorn-32656.exe (PID: 8688)
- Unicorn-21695.exe (PID: 9268)
- Unicorn-21695.exe (PID: 9276)
- Unicorn-21796.exe (PID: 9236)
- Unicorn-36548.exe (PID: 9376)
- Unicorn-60266.exe (PID: 9388)
- Unicorn-16128.exe (PID: 9284)
- Unicorn-53706.exe (PID: 9320)
- Unicorn-26864.exe (PID: 9336)
- Unicorn-5267.exe (PID: 9356)
- Unicorn-5267.exe (PID: 9344)
- Unicorn-56013.exe (PID: 9464)
- Unicorn-61074.exe (PID: 9476)
- Unicorn-52806.exe (PID: 9552)
- Unicorn-12620.exe (PID: 9440)
- Unicorn-1567.exe (PID: 9572)
- Unicorn-44281.exe (PID: 9592)
- Unicorn-38516.exe (PID: 9536)
- Unicorn-56990.exe (PID: 9504)
- Unicorn-17141.exe (PID: 9620)
- Unicorn-11681.exe (PID: 9660)
- Unicorn-42408.exe (PID: 9668)
- Unicorn-30156.exe (PID: 9640)
- Unicorn-38324.exe (PID: 9692)
- Unicorn-41592.exe (PID: 9780)
- Unicorn-17502.exe (PID: 9760)
- Unicorn-16268.exe (PID: 9716)
- Unicorn-32870.exe (PID: 9740)
- Unicorn-6782.exe (PID: 9796)
- Unicorn-41592.exe (PID: 9784)
- Unicorn-35370.exe (PID: 9836)
- Unicorn-16241.exe (PID: 9932)
- Unicorn-55236.exe (PID: 9844)
- Unicorn-31862.exe (PID: 9960)
- Unicorn-36980.exe (PID: 8928)
- Unicorn-63788.exe (PID: 9996)
- Unicorn-54058.exe (PID: 10084)
- Unicorn-6730.exe (PID: 10068)
- Unicorn-27416.exe (PID: 10104)
- Unicorn-60280.exe (PID: 10044)
- Unicorn-4857.exe (PID: 10140)
- Unicorn-14971.exe (PID: 10236)
- Unicorn-29362.exe (PID: 10172)
- Unicorn-17664.exe (PID: 10192)
- Unicorn-21748.exe (PID: 10224)
- Unicorn-32468.exe (PID: 10180)
- Unicorn-12568.exe (PID: 5544)
- Unicorn-12833.exe (PID: 6584)
- Unicorn-19632.exe (PID: 10324)
- Unicorn-32630.exe (PID: 684)
- Unicorn-8556.exe (PID: 10280)
- Unicorn-34576.exe (PID: 10304)
- Unicorn-17686.exe (PID: 10260)
- Unicorn-51542.exe (PID: 10396)
- Unicorn-12018.exe (PID: 10356)
- Unicorn-5241.exe (PID: 10348)
- Unicorn-1057.exe (PID: 10432)
- Unicorn-9133.exe (PID: 10452)
- Unicorn-5726.exe (PID: 8200)
- Unicorn-61266.exe (PID: 9908)
- Unicorn-51105.exe (PID: 10528)
- Unicorn-52688.exe (PID: 10504)
- Unicorn-44328.exe (PID: 10568)
- Unicorn-1349.exe (PID: 10544)
- Unicorn-38874.exe (PID: 10604)
- Unicorn-20400.exe (PID: 10676)
- Unicorn-56864.exe (PID: 10480)
- Unicorn-38874.exe (PID: 10612)
- Unicorn-8147.exe (PID: 10660)
- Unicorn-50529.exe (PID: 10132)
- Unicorn-18816.exe (PID: 10752)
- Unicorn-9828.exe (PID: 10724)
- Unicorn-36636.exe (PID: 10768)
- Unicorn-31090.exe (PID: 10796)
- Unicorn-14924.exe (PID: 10620)
- Unicorn-2017.exe (PID: 10668)
- Unicorn-55765.exe (PID: 10716)
- Unicorn-2719.exe (PID: 10200)
- Unicorn-43726.exe (PID: 10848)
- Unicor÷-27198.exe (PID: 10884)
- Unicorn-15500.exe (PID: 10912)
- Unicorn-43534.exe (PID: 10932)
- Unicorn-26705.exe (PID: 11004)
- Unicorn-7161.exe (PID: 11060)
- Unicorn-36357.exe (PID: 10820)
- Unicor÷-48194.exe (PID: 10996)
- Unicorn-52833.exe (PID: 11052)
- Unicorn-39834.exe (PID: 11100)
- Unicorn-51593.exe (PID: 11256)
- Unicorn-12376.exe (PID: 11192)
- Unicorn-4208.exe (PID: 11176)
- Unicorn-4923.exe (PID: 11168)
- Unicorn-21643.exe (PID: 10976)
- Unicorn-2392.exe (PID: 7564)
- Unicorn-27966.exe (PID: 6816)
- Unicorn-52781.exe (PID: 11384)
- Unicorn-30488.exe (PID: 11420)
- Unicorn-35619.exe (PID: 2064)
- Unicorn-11437.exe (PID: 11292)
- Unicorn-22411.exe (PID: 11340)
- Unicorn-21342.exe (PID: 11360)
- Unicorn-16098.exe (PID: 11468)
- Unicorn-48386.exe (PID: 6392)
- Unicorn-15906.exe (PID: 11664)
- Unicorn-44686.exe (PID: 11604)
- Unicorn-42548.exe (PID: 11684)
- Unicorn-26212.exe (PID: 11644)
- Unicorn-23197.exe (PID: 11568)
- Unicorn-16652.exe (PID: 11588)
Reads the computer name
- 1 (235).exe (PID: 720)
- Unicorn-15487.exe (PID: 7216)
- Unicorn-64257.exe (PID: 7724)
- Unicorn-10417.exe (PID: 7704)
- Unicorn-34189.exe (PID: 7960)
- Unicorn-20314.exe (PID: 7908)
- Unicorn-60132.exe (PID: 8028)
- Unicorn-58798.exe (PID: 8080)
- Unicorn-40266.exe (PID: 8036)
- Unicorn-39197.exe (PID: 8088)
- Unicorn-2462.exe (PID: 8112)
- Unicorn-13707.exe (PID: 8188)
- Unicorn-42810.exe (PID: 8168)
- Unicorn-61668.exe (PID: 2140)
- Unicorn-8197.exe (PID: 5956)
- Unicorn-46877.exe (PID: 7668)
- Unicorn-53007.exe (PID: 456)
- Unicorn-62244.exe (PID: 7408)
- Unicorn-16862.exe (PID: 7676)
- Unicorn-53007.exe (PID: 1072)
- Unicorn-38508.exe (PID: 5936)
- Unicorn-40546.exe (PID: 7864)
- Unicorn-26810.exe (PID: 7876)
- Unicorn-37247.exe (PID: 2240)
- Unicorn-12228.exe (PID: 7984)
- Unicorn-3816.exe (PID: 2552)
- Unicorn-48430.exe (PID: 1012)
- Unicorn-59312.exe (PID: 208)
- Unicorn-27194.exe (PID: 3008)
- Unicorn-59120.exe (PID: 7380)
- Unicorn-48814.exe (PID: 7604)
- Unicorn-30916.exe (PID: 2908)
- Unicorn-4273.exe (PID: 7248)
- Unicorn-29847.exe (PID: 7764)
- Unicorn-29847.exe (PID: 7752)
- Unicorn-30916.exe (PID: 5328)
- Unicorn-14065.exe (PID: 6540)
- Unicorn-59239.exe (PID: 7404)
- Unicorn-15763.exe (PID: 644)
- Unicorn-44792.exe (PID: 4220)
- Unicorn-38134.exe (PID: 8304)
- Unicorn-32268.exe (PID: 8296)
- Unicorn-45176.exe (PID: 8252)
- Unicorn-7396.exe (PID: 4944)
- Unicorn-30807.exe (PID: 8352)
- Unicorn-26208.exe (PID: 8372)
- Unicorn-32260.exe (PID: 8476)
- Unicorn-45696.exe (PID: 8528)
- Unicorn-13493.exe (PID: 8652)
- Unicorn-21762.exe (PID: 8588)
- Unicorn-4610.exe (PID: 8668)
- Unicorn-22267.exe (PID: 8872)
- Unicorn-46829.exe (PID: 8952)
- Unicorn-41256.exe (PID: 9040)
- Unicorn-15381.exe (PID: 9056)
- Unicorn-40248.exe (PID: 9200)
- Unicorn-37748.exe (PID: 9124)
- Unicorn-5459.exe (PID: 8452)
- Unicorn-21796.exe (PID: 9236)
- Unicorn-21695.exe (PID: 9268)
- Unicorn-53706.exe (PID: 9320)
- Unicorn-5267.exe (PID: 9356)
- Unicorn-5267.exe (PID: 9344)
- Unicorn-56013.exe (PID: 9464)
- Unicorn-61074.exe (PID: 9476)
- Unicorn-44281.exe (PID: 9592)
- Unicorn-38516.exe (PID: 9536)
- Unicorn-38324.exe (PID: 9692)
- Unicorn-61266.exe (PID: 9908)
- Unicorn-27416.exe (PID: 10104)
- Unicorn-29362.exe (PID: 10172)
- Unicorn-31940.exe (PID: 13904)
- Unicorn-60280.exe (PID: 10044)
- Unicorn-12833.exe (PID: 6584)
- Unicorn-8556.exe (PID: 10280)
- Unicorn-51542.exe (PID: 10396)
- Unicorn-5241.exe (PID: 10348)
Checks supported languages
- 1 (235).exe (PID: 720)
- Unicorn-15487.exe (PID: 7216)
- Unicorn-64257.exe (PID: 7724)
- Unicorn-10417.exe (PID: 7704)
- Unicorn-51040.exe (PID: 7936)
- Unicorn-34189.exe (PID: 7960)
- Unicorn-60132.exe (PID: 8028)
- Unicorn-40266.exe (PID: 8036)
- Unicorn-2462.exe (PID: 8112)
- Unicorn-42810.exe (PID: 8168)
- Unicorn-39197.exe (PID: 8088)
- Unicorn-37164.exe (PID: 4040)
- Unicorn-46463.exe (PID: 7572)
- Unicorn-61668.exe (PID: 2140)
- Unicorn-62223.exe (PID: 5548)
- Unicorn-62244.exe (PID: 7408)
- Unicorn-46877.exe (PID: 7668)
- Unicorn-53007.exe (PID: 1072)
- Unicorn-43770.exe (PID: 7516)
- Unicorn-8197.exe (PID: 5956)
- Unicorn-53007.exe (PID: 456)
- Unicorn-15950.exe (PID: 7884)
- Unicorn-26810.exe (PID: 7876)
- Unicorn-40546.exe (PID: 7864)
- Unicorn-12228.exe (PID: 7984)
- Unicorn-48430.exe (PID: 1012)
- Unicorn-27194.exe (PID: 3008)
- Unicorn-59312.exe (PID: 208)
- Unicorn-53182.exe (PID: 1240)
- Unicorn-3816.exe (PID: 2552)
- Unicorn-43338.exe (PID: 7588)
- Unicorn-48814.exe (PID: 7604)
- Unicorn-4273.exe (PID: 7248)
- Unicorn-59120.exe (PID: 7380)
- Unicorn-30916.exe (PID: 2908)
- Unicorn-14065.exe (PID: 6540)
- Unicorn-33931.exe (PID: 7616)
- Unicorn-59239.exe (PID: 7404)
- Unicorn-44792.exe (PID: 4220)
- Unicorn-12917.exe (PID: 7148)
- Unicorn-5726.exe (PID: 8200)
- Unicorn-50329.exe (PID: 8220)
- Unicorn-39468.exe (PID: 8236)
- Unicorn-7396.exe (PID: 4944)
- Unicorn-29847.exe (PID: 7764)
- Unicorn-38134.exe (PID: 8304)
- Unicorn-11756.exe (PID: 8276)
- Unicorn-45176.exe (PID: 8252)
- Unicorn-30807.exe (PID: 8352)
- Unicorn-26208.exe (PID: 8372)
- Unicorn-65041.exe (PID: 8260)
- Unicorn-10256.exe (PID: 8496)
- Unicorn-23900.exe (PID: 8548)
- Unicorn-21762.exe (PID: 8584)
- Unicorn-21762.exe (PID: 8588)
- Unicorn-30734.exe (PID: 8616)
- Unicorn-13493.exe (PID: 8652)
- Unicorn-30314.exe (PID: 8784)
- Unicorn-4610.exe (PID: 8668)
- Unicorn-22316.exe (PID: 8632)
- Unicorn-20008.exe (PID: 8816)
- Unicorn-22700.exe (PID: 8808)
- Unicorn-37072.exe (PID: 8856)
- Unicorn-22267.exe (PID: 8872)
- Unicorn-46829.exe (PID: 8952)
- Unicorn-36980.exe (PID: 8928)
- Unicorn-41256.exe (PID: 9040)
- Unicorn-15381.exe (PID: 9056)
- Unicorn-37748.exe (PID: 9124)
- Unicorn-27442.exe (PID: 9144)
- Unicorn-799.exe (PID: 9160)
- Unicorn-58068.exe (PID: 2980)
- Unicorn-40248.exe (PID: 9200)
- Unicorn-15766.exe (PID: 5244)
- Unicorn-62252.exe (PID: 9180)
- Unicorn-40270.exe (PID: 8920)
- Unicorn-5459.exe (PID: 8452)
- Unicorn-32656.exe (PID: 8688)
- Unicorn-53706.exe (PID: 9320)
- Unicorn-16128.exe (PID: 9284)
- Unicorn-26864.exe (PID: 9336)
- Unicorn-5267.exe (PID: 9344)
- Unicorn-60266.exe (PID: 9388)
- Unicorn-12620.exe (PID: 9440)
- Unicorn-21796.exe (PID: 9236)
- Unicorn-11489.exe (PID: 9248)
- Unicorn-56990.exe (PID: 9504)
- Unicorn-52806.exe (PID: 9552)
- Unicorn-38516.exe (PID: 9536)
- Unicorn-61074.exe (PID: 9476)
- Unicorn-44281.exe (PID: 9592)
- Unicorn-30156.exe (PID: 9640)
- Unicorn-16268.exe (PID: 9716)
- Unicorn-6782.exe (PID: 9796)
- Unicorn-41592.exe (PID: 9784)
- Unicorn-11681.exe (PID: 9660)
- Unicorn-16241.exe (PID: 9932)
- Unicorn-61266.exe (PID: 9908)
- Unicorn-60280.exe (PID: 10044)
- Unicorn-54058.exe (PID: 10084)
- Unicorn-6730.exe (PID: 10068)
- Unicorn-4857.exe (PID: 10140)
- Unicorn-29362.exe (PID: 10172)
- Unicorn-17664.exe (PID: 10192)
- Unicorn-32468.exe (PID: 10180)
- Unicorn-14971.exe (PID: 10236)
- Unicorn-12833.exe (PID: 6584)
- Unicorn-32630.exe (PID: 684)
- Unicorn-19632.exe (PID: 10324)
- Unicorn-12018.exe (PID: 10356)
- Unicorn-51542.exe (PID: 10396)
- Unicorn-8556.exe (PID: 10280)
- Unicorn-9133.exe (PID: 10452)
- Unicorn-1057.exe (PID: 10432)
- Unicorn-52688.exe (PID: 10504)
- Unicorn-56864.exe (PID: 10480)
- Unicorn-44328.exe (PID: 10568)
- Unicorn-14924.exe (PID: 10620)
- Unicorn-38874.exe (PID: 10604)
- Unicorn-51105.exe (PID: 10528)
- Unicorn-38874.exe (PID: 10612)
- Unicorn-2017.exe (PID: 10668)
- Unicorn-55765.exe (PID: 10716)
- Unicorn-18816.exe (PID: 10752)
- Unicorn-9828.exe (PID: 10724)
- Unicorn-36636.exe (PID: 10768)
- Unicorn-31090.exe (PID: 10796)
- Unicorn-8147.exe (PID: 10660)
- Unicorn-20400.exe (PID: 10676)
- Unicorn-43534.exe (PID: 10932)
- Unicorn-15500.exe (PID: 10912)
- Unicor÷-48194.exe (PID: 10996)
- Unicorn-26705.exe (PID: 11004)
- Unicorn-7161.exe (PID: 11060)
- Unicorn-39834.exe (PID: 11100)
- Unicorn-12376.exe (PID: 11192)
- Unicorn-63523.exe (PID: 11228)
- Unicorn-51593.exe (PID: 11256)
- Unicorn-4923.exe (PID: 11168)
- Unicorn-48386.exe (PID: 6392)
- Unicorn-21342.exe (PID: 11360)
- Unicorn-11437.exe (PID: 11292)
- Unicorn-22411.exe (PID: 11340)
- Unicorn-15906.exe (PID: 11664)
- Unicorn-42548.exe (PID: 11684)
- Unicorn-63600.exe (PID: 11780)
- Unicorn-8832.exe (PID: 11824)
- Unicorn-20530.exe (PID: 11808)
- Unicorn-49118.exe (PID: 11896)
- Unicorn-57286.exe (PID: 11940)
- Unicorn-16756.exe (PID: 11996)
- Unicorn-37804.exe (PID: 12256)
- Unicorn-46165.exe (PID: 12144)
- Unicorn-18392.exe (PID: 11884)
- Unicorn-48351.exe (PID: 12128)
- Unicorn-41910.exe (PID: 12384)
- Unicorn-10918.exe (PID: 12368)
- Unicorn-23990.exe (PID: 12512)
- Unicorn-39010.exe (PID: 12552)
- Unicorn-29466.exe (PID: 12604)
- Unicorn-49886.exe (PID: 12664)
- Unicorn-64176.exe (PID: 12716)
- Unicorn-21197.exe (PID: 12688)
- Unicorn-21197.exe (PID: 12680)
- Unicorn-45480.exe (PID: 12544)
- Unicorn-32079.exe (PID: 12780)
- Unicorn-42848.exe (PID: 12848)
- Unicorn-7291.exe (PID: 12936)
- Unicorn-50270.exe (PID: 12952)
- Unicorn-56492.exe (PID: 12920)
- Unicorn-3591.exe (PID: 13104)
- Unicorn-47125.exe (PID: 13220)
- Unicorn-30788.exe (PID: 13172)
- Unicorn-41724.exe (PID: 13164)
- Unicorn-26342.exe (PID: 12984)
- Unicorn-57068.exe (PID: 13004)
- Unicorn-45100.exe (PID: 6988)
- Unicorn-45755.exe (PID: 13304)
- Unicorn-51785.exe (PID: 5112)
- Unicorn-25142.exe (PID: 13320)
- Unicorn-36077.exe (PID: 13328)
- Unicorn-51130.exe (PID: 13372)
- Unicorn-34470.exe (PID: 13396)
- Unicorn-39340.exe (PID: 13428)
- Unicorn-53076.exe (PID: 13420)
- Unicorn-6860.exe (PID: 13256)
- Unicorn-65355.exe (PID: 13296)
- Unicorn-57644.exe (PID: 13632)
- Unicorn-59325.exe (PID: 13700)
- Unicorn-48469.exe (PID: 13756)
- Unicorn-12698.exe (PID: 13460)
- Unicorn-14863.exe (PID: 13964)
- Unicorn-9138.exe (PID: 14008)
- Unicorn-61410.exe (PID: 14260)
- Unicorn-2558.exe (PID: 14276)
- Unicorn-29339.exe (PID: 13820)
- Unicorn-12693.exe (PID: 14400)
- Unicorn-59756.exe (PID: 14432)
- Unicorn-26791.exe (PID: 14552)
- Unicorn-26791.exe (PID: 14548)
- Unicorn-48609.exe (PID: 14332)
- Unicorn-58002.exe (PID: 14756)
- Unicorn-40082.exe (PID: 14864)
- Unicorn-38136.exe (PID: 14748)
- Unicorn-64124.exe (PID: 14808)
- Unicorn-20569.exe (PID: 14628)
- Unicorn-28022.exe (PID: 14680)
- Unicorn-45558.exe (PID: 14912)
- Unicorn-53461.exe (PID: 14944)
- Unicorn-56440.exe (PID: 15044)
- Unicorn-39589.exe (PID: 15076)
- Unicorn-60424.exe (PID: 15116)
- Unicorn-46689.exe (PID: 15124)
- Unicorn-59455.exe (PID: 15088)
- Unicorn-64416.exe (PID: 15204)
- Unicorn-21337.exe (PID: 15284)
- Unicorn-5001.exe (PID: 15256)
- Unicorn-25833.exe (PID: 15308)
- Unicorn-28790.exe (PID: 15300)
- Unicorn-40388.exe (PID: 8540)
- Unicorn-26652.exe (PID: 14472)
- Unicorn-4094.exe (PID: 5216)
- Unicorn-1572.exe (PID: 15192)
- Unicorn-63025.exe (PID: 15156)
- Unicorn-6040.exe (PID: 15444)
- Unicorn-51157.exe (PID: 15364)
- Unicorn-16346.exe (PID: 15380)
- Unicorn-44280.exe (PID: 15484)
- Unicorn-5293.exe (PID: 15608)
- Unicorn-25090.exe (PID: 15640)
Create files in a temporary directory
- Unicorn-10417.exe (PID: 7704)
- 1 (235).exe (PID: 720)
- Unicorn-44910.exe (PID: 7928)
- Unicorn-15487.exe (PID: 7216)
- Unicorn-40266.exe (PID: 8036)
- Unicorn-60132.exe (PID: 8028)
- Unicorn-39197.exe (PID: 8088)
- Unicorn-49826.exe (PID: 8060)
- Unicorn-42810.exe (PID: 8168)
- Unicorn-13707.exe (PID: 8188)
- Unicorn-25322.exe (PID: 8008)
- Unicorn-64257.exe (PID: 7724)
- Unicorn-62223.exe (PID: 5548)
- Unicorn-61668.exe (PID: 2140)
- Unicorn-51040.exe (PID: 7936)
- Unicorn-58160.exe (PID: 7460)
- Unicorn-60800.exe (PID: 8120)
- Unicorn-43770.exe (PID: 7516)
- Unicorn-58798.exe (PID: 8080)
- Unicorn-26810.exe (PID: 7876)
- Unicorn-37247.exe (PID: 2240)
- Unicorn-37164.exe (PID: 4040)
- Unicorn-12228.exe (PID: 7984)
- Unicorn-48430.exe (PID: 1012)
- Unicorn-3816.exe (PID: 2552)
- Unicorn-53182.exe (PID: 1240)
- Unicorn-59120.exe (PID: 7380)
- Unicorn-43338.exe (PID: 7588)
- Unicorn-48814.exe (PID: 7604)
- Unicorn-46463.exe (PID: 7572)
- Unicorn-4273.exe (PID: 7248)
- Unicorn-29847.exe (PID: 7764)
- Unicorn-29847.exe (PID: 7752)
- Unicorn-30916.exe (PID: 5328)
- Unicorn-53007.exe (PID: 1072)
- Unicorn-8197.exe (PID: 5956)
- Unicorn-14065.exe (PID: 6540)
- Unicorn-59239.exe (PID: 7404)
- Unicorn-33931.exe (PID: 7616)
- Unicorn-64657.exe (PID: 1388)
- Unicorn-2462.exe (PID: 8112)
- Unicorn-46877.exe (PID: 7668)
- Unicorn-16862.exe (PID: 7676)
- Unicorn-50329.exe (PID: 8220)
- Unicorn-20314.exe (PID: 7908)
- Unicorn-65041.exe (PID: 8260)
- Unicorn-45176.exe (PID: 8252)
- Unicorn-34189.exe (PID: 7960)
- Unicorn-30807.exe (PID: 8352)
- Unicorn-15950.exe (PID: 7884)
- Unicorn-26208.exe (PID: 8372)
- Unicorn-11756.exe (PID: 8276)
- Unicorn-62410.exe (PID: 8388)
- Unicorn-23900.exe (PID: 8548)
- Unicorn-13493.exe (PID: 8652)
- Unicorn-27194.exe (PID: 3008)
- Unicorn-21762.exe (PID: 8584)
- Unicorn-59312.exe (PID: 208)
- Unicorn-30734.exe (PID: 8616)
- Unicorn-22316.exe (PID: 8632)
- Unicorn-30314.exe (PID: 8784)
- Unicorn-20008.exe (PID: 8816)
- Unicorn-4610.exe (PID: 8668)
- Unicorn-37072.exe (PID: 8856)
- Unicorn-53508.exe (PID: 8840)
- Unicorn-22267.exe (PID: 8872)
- Unicorn-42383.exe (PID: 7640)
- Unicorn-15381.exe (PID: 9056)
- Unicorn-62244.exe (PID: 7408)
- Unicorn-62999.exe (PID: 9096)
- Unicorn-41256.exe (PID: 9040)
- Unicorn-62999.exe (PID: 9088)
- Unicorn-27442.exe (PID: 9144)
- Unicorn-53007.exe (PID: 456)
- Unicorn-5897.exe (PID: 6228)
- Unicorn-37748.exe (PID: 9124)
- Unicorn-40248.exe (PID: 9200)
- Unicorn-58068.exe (PID: 2980)
- Unicorn-5459.exe (PID: 8452)
- Unicorn-15766.exe (PID: 5244)
- Unicorn-46492.exe (PID: 8692)
- Unicorn-17712.exe (PID: 8880)
- Unicorn-12996.exe (PID: 7792)
- Unicorn-40270.exe (PID: 8920)
- Unicorn-21796.exe (PID: 9236)
- Unicorn-15763.exe (PID: 644)
- Unicorn-21695.exe (PID: 9268)
- Unicorn-26864.exe (PID: 9336)
- Unicorn-36548.exe (PID: 9376)
- Unicorn-53706.exe (PID: 9320)
- Unicorn-7396.exe (PID: 4944)
- Unicorn-5267.exe (PID: 9344)
- Unicorn-44792.exe (PID: 4220)
- Unicorn-38134.exe (PID: 8304)
- Unicorn-38508.exe (PID: 5936)
- Unicorn-56990.exe (PID: 9504)
- Unicorn-52806.exe (PID: 9552)
- Unicorn-44281.exe (PID: 9592)
- Unicorn-38516.exe (PID: 9536)
- Unicorn-40546.exe (PID: 7864)
- Unicorn-11681.exe (PID: 9660)
- Unicorn-41592.exe (PID: 9780)
- Unicorn-17502.exe (PID: 9760)
- Unicorn-38324.exe (PID: 9692)
- Unicorn-10256.exe (PID: 8496)
- Unicorn-51454.exe (PID: 2384)
- Unicorn-34206.exe (PID: 8512)
- Unicorn-41592.exe (PID: 9784)
- Unicorn-45696.exe (PID: 8528)
- Unicorn-35370.exe (PID: 9836)
- Unicorn-47060.exe (PID: 736)
- Unicorn-16241.exe (PID: 9932)
- Unicorn-22700.exe (PID: 8808)
- Unicorn-36980.exe (PID: 8928)
- Unicorn-55236.exe (PID: 9844)
- Unicorn-30916.exe (PID: 2908)
- Unicorn-14971.exe (PID: 10236)
- Unicorn-32656.exe (PID: 8688)
- Unicorn-11489.exe (PID: 9248)
- Unicorn-60266.exe (PID: 9388)
- Unicorn-21695.exe (PID: 9276)
Creates files or folders in the user directory
- WerFault.exe (PID: 7544)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
580
Monitored processes
443
Malicious processes
64
Suspicious processes
63
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 208 | C:\Users\admin\AppData\Local\Temp\Unicorn-59312.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-59312.exe | Unicorn-62223.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 456 | C:\Users\admin\AppData\Local\Temp\Unicorn-53007.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53007.exe | Unicorn-60800.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 644 | C:\Users\admin\AppData\Local\Temp\Unicorn-15763.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-15763.exe | Unicorn-15487.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 684 | C:\Users\admin\AppData\Local\Temp\Unicorn-32630.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-32630.exe | Unicorn-27194.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 720 | "C:\Users\admin\AppData\Local\Temp\1 (235).exe" | C:\Users\admin\AppData\Local\Temp\1 (235).exe | explorer.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 736 | C:\Users\admin\AppData\Local\Temp\Unicorn-47060.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-47060.exe | Unicorn-61668.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 976 | C:\Users\admin\AppData\Local\Temp\Unicorn-17829.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-17829.exe | — | Unicorn-64657.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1012 | C:\Users\admin\AppData\Local\Temp\Unicorn-48430.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-48430.exe | Unicorn-51454.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1072 | C:\Users\admin\AppData\Local\Temp\Unicorn-53007.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53007.exe | Unicorn-2462.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1116 | "C:\WINDOWS\System32\SLUI.exe" RuleId=3482d82e-ca2c-4e1f-8864-da0267b484b2;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=TimerEvent | C:\Windows\System32\slui.exe | — | SppExtComObj.Exe | |||||||||||
User: NETWORK SERVICE Company: Microsoft Corporation Integrity Level: SYSTEM Description: Windows Activation Client Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
Total events
10 406
Read events
10 406
Write events
0
Delete events
0
Modification events
Executable files
1 169
Suspicious files
2
Text files
2
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7908 | Unicorn-20314.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-25322.exe | executable | |
MD5:34140F0258CA230E365C870680BE4E92 | SHA256:4A7B9644502BD97439152C2B57B089FC09C4FFE594F59BB882F1F497459C7CC8 | |||
| 720 | 1 (235).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-64257.exe | executable | |
MD5:0AECB4AB034369AF8375BA2D62F28510 | SHA256:10E736329EE02EC6E8DBAEF3B06A46AD77112FFB4C7A15C3EBFDBF8CE208EECA | |||
| 7724 | Unicorn-64257.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-20314.exe | executable | |
MD5:95222B2D259F5AA1507FBA5A300A6081 | SHA256:99A4139A442F53A91FD847B4ED25333155C045AF21841D887CC2ACC7A3CBE7B9 | |||
| 7936 | Unicorn-51040.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-60132.exe | executable | |
MD5:C50C9A53293657B4739695CC56B2202A | SHA256:814D3B33E1C51BFF8CB4F3AD6C1DB6E74D88778D08158F73F54AB14F524E8E14 | |||
| 7928 | Unicorn-44910.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-49826.exe | executable | |
MD5:FEF147F679C6D71FBFB1B5CB311420FD | SHA256:FA448F8E4235693D8AF07E69AC03978F287AE081D49B1CC770AEB2DBE7556F5A | |||
| 7704 | Unicorn-10417.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-51040.exe | executable | |
MD5:57F42DF8545ED31545E83F3D3F1B3D6C | SHA256:EE89FC3014ABAC8AF952110FF8137AF3DF7409E483A62D3AD0EC065C739F5CFC | |||
| 7724 | Unicorn-64257.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-40266.exe | executable | |
MD5:278AC3E54D7FEF4F62493F01A9BA9EE0 | SHA256:15F8C9B4E81F016F3A66AEF37D8C5AA9A06053E67B88561F6C97F4475C3A88C2 | |||
| 720 | 1 (235).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-58798.exe | executable | |
MD5:A8F9E5CD96BC9EE51F178B7ECD5AD6EC | SHA256:E9E352F057AF04F1D8687EE42FAD0E62AA3E4482154B3FD67221087D830E90F6 | |||
| 7216 | Unicorn-15487.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-60800.exe | executable | |
MD5:C69FE1ED488613BEF42B98F967828AF1 | SHA256:D3158865E9C05FF384A7C83994DF89A9E060AB5D71EAA99B575C498030A7E892 | |||
| 7704 | Unicorn-10417.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-39197.exe | executable | |
MD5:CEC97CD50ECBC4E1360D7675ACEA8111 | SHA256:E2E0C315754EF29943B9A87DE56D74467EA62A505360A74604EDA795649A64C0 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
25
DNS requests
20
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
— | — | GET | 200 | 184.24.77.37:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
7252 | backgroundTaskHost.exe | GET | 200 | 23.54.109.203:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 23.54.109.203:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
2656 | backgroundTaskHost.exe | GET | 200 | 23.54.109.203:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
8684 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
8684 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 184.24.77.37:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
2104 | svchost.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
— | — | 4.231.128.59:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
3216 | svchost.exe | 40.115.3.253:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.160.65:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 23.54.109.203:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
2112 | svchost.exe | 4.231.128.59:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
7252 | backgroundTaskHost.exe | 20.74.47.205:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | FR | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
crl.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |