| File name: | 1 (136) |
| Full analysis: | https://app.any.run/tasks/92075e0b-b78f-46ab-ab7a-908caaaf1c85 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 11:49:57 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 3A08CF15325E64507FC28394FF8149C0 |
| SHA1: | CEA225E8512D73333104EBBE2A7B0F8BAFC1372C |
| SHA256: | EEF02DD087C845E18B7BDCEDAEF8CBBB603866EE319060F5D93DE7F4C6F304AA |
| SSDEEP: | 6144:97w8nD9fKDcfA5LjpgeEH5jx5wPq5p8GBf/Wy1OZ5k/8SwjwpyAvEhKVLbEMsQpa:9sOpnfA5/pbdP0+afOy1OZwx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- Unicorn-64003.exe (PID: 7356)
- 1 (136).exe (PID: 7288)
- Unicorn-469.exe (PID: 8048)
- Unicorn-5944.exe (PID: 8004)
- Unicorn-14204.exe (PID: 7996)
- Unicorn-37719.exe (PID: 7720)
- Unicorn-33997.exe (PID: 7732)
- Unicorn-5944.exe (PID: 8012)
- Unicorn-37748.exe (PID: 8152)
- Unicorn-26464.exe (PID: 8172)
- Unicorn-37063.exe (PID: 8116)
- Unicorn-17328.exe (PID: 8136)
- Unicorn-46471.exe (PID: 7216)
- Unicorn-799.exe (PID: 1676)
- Unicorn-46471.exe (PID: 664)
- Unicorn-17145.exe (PID: 7232)
- Unicorn-63762.exe (PID: 1328)
- Unicorn-53134.exe (PID: 2240)
- Unicorn-22922.exe (PID: 5964)
- Unicorn-10285.exe (PID: 668)
- Unicorn-51738.exe (PID: 5956)
- Unicorn-52003.exe (PID: 720)
- Unicorn-35667.exe (PID: 6752)
- Unicorn-43835.exe (PID: 2552)
- Unicorn-43512.exe (PID: 5756)
- Unicorn-63553.exe (PID: 7208)
- Unicorn-4146.exe (PID: 6800)
- Unicorn-63553.exe (PID: 976)
- Unicorn-3384.exe (PID: 812)
- Unicorn-49818.exe (PID: 1280)
- Unicorn-13622.exe (PID: 6476)
- Unicorn-22537.exe (PID: 1180)
- Unicorn-47255.exe (PID: 6240)
- Unicorn-20512.exe (PID: 2152)
- Unicorn-4146.exe (PID: 780)
- Unicorn-1754.exe (PID: 856)
- Unicorn-5838.exe (PID: 7392)
- Unicorn-10155.exe (PID: 6080)
- Unicorn-32572.exe (PID: 7540)
- Unicorn-23990.exe (PID: 5112)
- Unicorn-7929.exe (PID: 7344)
- Unicorn-27795.exe (PID: 7340)
- Unicorn-46169.exe (PID: 7636)
- Unicorn-50955.exe (PID: 4628)
- Unicorn-7545.exe (PID: 7792)
- Unicorn-7867.exe (PID: 7784)
- Unicorn-10425.exe (PID: 7884)
- Unicorn-7867.exe (PID: 4024)
- Unicorn-65236.exe (PID: 7888)
- Unicorn-65236.exe (PID: 7552)
- Unicorn-50524.exe (PID: 7628)
- Unicorn-7867.exe (PID: 6040)
- Unicorn-10798.exe (PID: 5868)
- Unicorn-45371.exe (PID: 7840)
- Unicorn-27411.exe (PID: 7812)
- Unicorn-65236.exe (PID: 7148)
- Unicorn-65236.exe (PID: 7804)
- Unicorn-30133.exe (PID: 7876)
- Unicorn-18480.exe (PID: 7708)
- Unicorn-21189.exe (PID: 4300)
- Unicorn-16398.exe (PID: 6044)
- Unicorn-44515.exe (PID: 7928)
- Unicorn-35999.exe (PID: 7760)
- Unicorn-61406.exe (PID: 7980)
- Unicorn-11650.exe (PID: 7968)
- Unicorn-42469.exe (PID: 7984)
- Unicorn-33585.exe (PID: 4220)
- Unicorn-37115.exe (PID: 5576)
- Unicorn-21473.exe (PID: 5968)
- Unicorn-1297.exe (PID: 3888)
- Unicorn-45091.exe (PID: 5204)
- Unicorn-10446.exe (PID: 6324)
- Unicorn-49388.exe (PID: 5212)
- Unicorn-53342.exe (PID: 6132)
- Unicorn-52595.exe (PID: 7012)
- Unicorn-20883.exe (PID: 5416)
- Unicorn-4141.exe (PID: 6032)
- Unicorn-10913.exe (PID: 6940)
- Unicorn-35173.exe (PID: 7764)
- Unicorn-4354.exe (PID: 4896)
- Unicorn-41303.exe (PID: 5972)
- Unicorn-20883.exe (PID: 2320)
- Unicorn-32678.exe (PID: 8248)
- Unicorn-4909.exe (PID: 8232)
- Unicorn-17292.exe (PID: 8272)
- Unicorn-6200.exe (PID: 8200)
- Unicorn-7862.exe (PID: 8316)
- Unicorn-5869.exe (PID: 8372)
- Unicorn-50239.exe (PID: 8340)
- Unicorn-41281.exe (PID: 8288)
- Unicorn-5122.exe (PID: 8356)
- Unicorn-13098.exe (PID: 8404)
- Unicorn-6968.exe (PID: 8396)
- Unicorn-41879.exe (PID: 8436)
- Unicorn-40733.exe (PID: 8548)
- Unicorn-16398.exe (PID: 2616)
- Unicorn-58023.exe (PID: 8468)
- Unicorn-8822.exe (PID: 8492)
- Unicorn-22419.exe (PID: 8660)
- Unicorn-62107.exe (PID: 8460)
- Unicorn-8630.exe (PID: 8592)
- Unicorn-62107.exe (PID: 8452)
- Unicorn-49663.exe (PID: 8556)
- Unicorn-37411.exe (PID: 8616)
- Unicorn-53747.exe (PID: 8540)
- Unicorn-18889.exe (PID: 8688)
- Unicorn-13461.exe (PID: 8624)
- Unicorn-30587.exe (PID: 8680)
- Unicorn-26865.exe (PID: 8764)
- Unicorn-25159.exe (PID: 8608)
- Unicorn-46923.exe (PID: 8720)
- Unicorn-6466.exe (PID: 8996)
- Unicorn-44493.exe (PID: 8780)
- Unicorn-26673.exe (PID: 8860)
- Unicorn-20180.exe (PID: 8740)
- Unicorn-10721.exe (PID: 8672)
- Unicorn-42455.exe (PID: 8868)
- Unicorn-26079.exe (PID: 8752)
- Unicorn-47591.exe (PID: 9024)
- Unicorn-51178.exe (PID: 8796)
- Unicorn-58022.exe (PID: 8824)
- Unicorn-8796.exe (PID: 8968)
- Unicorn-25164.exe (PID: 8948)
- Unicorn-2666.exe (PID: 8984)
- Unicorn-59102.exe (PID: 9112)
- Unicorn-59154.exe (PID: 8896)
- Unicorn-9133.exe (PID: 8904)
- Unicorn-8796.exe (PID: 8960)
- Unicorn-39693.exe (PID: 9060)
- Unicorn-11105.exe (PID: 9080)
- Unicorn-9818.exe (PID: 2084)
- Unicorn-47207.exe (PID: 9144)
- Unicorn-56051.exe (PID: 9208)
- Unicorn-45314.exe (PID: 9264)
- Unicorn-35631.exe (PID: 2332)
- Unicorn-35823.exe (PID: 5776)
- Unicorn-43097.exe (PID: 9232)
- Unicorn-48651.exe (PID: 9292)
- Unicorn-3778.exe (PID: 8308)
- Unicorn-28260.exe (PID: 9316)
Executable content was dropped or overwritten
- Unicorn-64003.exe (PID: 7356)
- 1 (136).exe (PID: 7288)
- Unicorn-37719.exe (PID: 7720)
- Unicorn-469.exe (PID: 8048)
- Unicorn-5944.exe (PID: 8012)
- Unicorn-5944.exe (PID: 8004)
- Unicorn-33997.exe (PID: 7732)
- Unicorn-14204.exe (PID: 7996)
- Unicorn-17328.exe (PID: 8136)
- Unicorn-37748.exe (PID: 8152)
- Unicorn-26464.exe (PID: 8172)
- Unicorn-37063.exe (PID: 8116)
- Unicorn-799.exe (PID: 1676)
- Unicorn-46471.exe (PID: 664)
- Unicorn-46471.exe (PID: 7216)
- Unicorn-63762.exe (PID: 1328)
- Unicorn-53134.exe (PID: 2240)
- Unicorn-10155.exe (PID: 6080)
- Unicorn-22922.exe (PID: 5964)
- Unicorn-10285.exe (PID: 668)
- Unicorn-43512.exe (PID: 5756)
- Unicorn-35667.exe (PID: 6752)
- Unicorn-43835.exe (PID: 2552)
- Unicorn-63553.exe (PID: 7208)
- Unicorn-4146.exe (PID: 780)
- Unicorn-17145.exe (PID: 7232)
- Unicorn-13622.exe (PID: 6476)
- Unicorn-22537.exe (PID: 1180)
- Unicorn-47255.exe (PID: 6240)
- Unicorn-20512.exe (PID: 2152)
- Unicorn-1754.exe (PID: 856)
- Unicorn-5838.exe (PID: 7392)
- Unicorn-32572.exe (PID: 7540)
- Unicorn-23990.exe (PID: 5112)
- Unicorn-7929.exe (PID: 7344)
- Unicorn-46169.exe (PID: 7636)
- Unicorn-50955.exe (PID: 4628)
- Unicorn-7545.exe (PID: 7792)
- Unicorn-7867.exe (PID: 7784)
- Unicorn-51738.exe (PID: 5956)
- Unicorn-7867.exe (PID: 4024)
- Unicorn-65236.exe (PID: 7888)
- Unicorn-65236.exe (PID: 7552)
- Unicorn-10425.exe (PID: 7884)
- Unicorn-50524.exe (PID: 7628)
- Unicorn-27411.exe (PID: 7812)
- Unicorn-10798.exe (PID: 5868)
- Unicorn-45371.exe (PID: 7840)
- Unicorn-65236.exe (PID: 7148)
- Unicorn-65236.exe (PID: 7804)
- Unicorn-30133.exe (PID: 7876)
- Unicorn-63553.exe (PID: 976)
- Unicorn-18480.exe (PID: 7708)
- Unicorn-21189.exe (PID: 4300)
- Unicorn-4146.exe (PID: 6800)
- Unicorn-16398.exe (PID: 6044)
- Unicorn-35999.exe (PID: 7760)
- Unicorn-52003.exe (PID: 720)
- Unicorn-16398.exe (PID: 2616)
- Unicorn-3384.exe (PID: 812)
- Unicorn-44515.exe (PID: 7928)
- Unicorn-49818.exe (PID: 1280)
- Unicorn-61406.exe (PID: 7980)
- Unicorn-42469.exe (PID: 7984)
- Unicorn-33585.exe (PID: 4220)
- Unicorn-37115.exe (PID: 5576)
- Unicorn-21473.exe (PID: 5968)
- Unicorn-45091.exe (PID: 5204)
- Unicorn-1297.exe (PID: 3888)
- Unicorn-10446.exe (PID: 6324)
- Unicorn-53342.exe (PID: 6132)
- Unicorn-52595.exe (PID: 7012)
- Unicorn-20883.exe (PID: 5416)
- Unicorn-4141.exe (PID: 6032)
- Unicorn-27795.exe (PID: 7340)
- Unicorn-10913.exe (PID: 6940)
- Unicorn-35173.exe (PID: 7764)
- Unicorn-41303.exe (PID: 5972)
- Unicorn-20883.exe (PID: 2320)
- Unicorn-6200.exe (PID: 8200)
- Unicorn-32678.exe (PID: 8248)
- Unicorn-17292.exe (PID: 8272)
- Unicorn-3778.exe (PID: 8308)
- Unicorn-7862.exe (PID: 8316)
- Unicorn-5869.exe (PID: 8372)
- Unicorn-41281.exe (PID: 8288)
- Unicorn-50239.exe (PID: 8340)
- Unicorn-5122.exe (PID: 8356)
- Unicorn-13098.exe (PID: 8404)
- Unicorn-6968.exe (PID: 8396)
- Unicorn-41879.exe (PID: 8436)
- Unicorn-22419.exe (PID: 8660)
- Unicorn-40733.exe (PID: 8548)
- Unicorn-58023.exe (PID: 8468)
- Unicorn-8822.exe (PID: 8492)
- Unicorn-62107.exe (PID: 8452)
- Unicorn-11650.exe (PID: 7968)
- Unicorn-8630.exe (PID: 8592)
- Unicorn-62107.exe (PID: 8460)
- Unicorn-18889.exe (PID: 8688)
- Unicorn-49663.exe (PID: 8556)
- Unicorn-37411.exe (PID: 8616)
- Unicorn-13461.exe (PID: 8624)
- Unicorn-30587.exe (PID: 8680)
- Unicorn-5506.exe (PID: 8804)
- Unicorn-46923.exe (PID: 8720)
- Unicorn-44493.exe (PID: 8780)
- Unicorn-26673.exe (PID: 8860)
- Unicorn-20180.exe (PID: 8740)
- Unicorn-51178.exe (PID: 8796)
- Unicorn-10721.exe (PID: 8672)
- Unicorn-42455.exe (PID: 8868)
- Unicorn-26079.exe (PID: 8752)
- Unicorn-47591.exe (PID: 9024)
- Unicorn-59154.exe (PID: 8896)
- Unicorn-59102.exe (PID: 9112)
- Unicorn-8796.exe (PID: 8968)
- Unicorn-2666.exe (PID: 8984)
- Unicorn-39693.exe (PID: 9060)
- Unicorn-8796.exe (PID: 8960)
- Unicorn-11105.exe (PID: 9080)
- Unicorn-47207.exe (PID: 9144)
- Unicorn-9133.exe (PID: 8904)
- Unicorn-9818.exe (PID: 2084)
- Unicorn-35631.exe (PID: 2332)
- Unicorn-56051.exe (PID: 9208)
- Unicorn-24723.exe (PID: 2092)
- Unicorn-45314.exe (PID: 9264)
- Unicorn-35823.exe (PID: 5776)
- Unicorn-49388.exe (PID: 5212)
- Unicorn-48651.exe (PID: 9292)
- Unicorn-43097.exe (PID: 9232)
- Unicorn-4354.exe (PID: 4896)
- Unicorn-4909.exe (PID: 8232)
- Unicorn-7867.exe (PID: 6040)
- Unicorn-26865.exe (PID: 8764)
- Unicorn-53747.exe (PID: 8540)
- Unicorn-28260.exe (PID: 9316)
- Unicorn-25164.exe (PID: 8948)
- Unicorn-58022.exe (PID: 8824)
- Unicorn-25159.exe (PID: 8608)
- Unicorn-38401.exe (PID: 9764)
- Unicorn-29487.exe (PID: 9844)
- Unicorn-43777.exe (PID: 9804)
- Unicorn-29487.exe (PID: 9840)
- Unicorn-6466.exe (PID: 8996)
- Unicorn-4188.exe (PID: 9872)
- Unicorn-47146.exe (PID: 10064)
- Unicorn-50867.exe (PID: 9976)
- Unicorn-1209.exe (PID: 10072)
- Unicorn-31193.exe (PID: 9888)
- Unicorn-30639.exe (PID: 9960)
- Unicorn-49205.exe (PID: 9860)
- Unicorn-13653.exe (PID: 10088)
- Unicorn-9621.exe (PID: 9832)
- Unicorn-18387.exe (PID: 9948)
- Unicorn-55314.exe (PID: 10080)
- Unicorn-64271.exe (PID: 10184)
- Unicorn-64271.exe (PID: 10176)
- Unicorn-9456.exe (PID: 9936)
- Unicorn-32292.exe (PID: 10144)
- Unicorn-3565.exe (PID: 10220)
- Unicorn-61256.exe (PID: 10236)
- Unicorn-2626.exe (PID: 6876)
- Unicorn-3373.exe (PID: 3968)
- Unicorn-4664.exe (PID: 4172)
- Unicorn-55341.exe (PID: 10168)
- Unicorn-35491.exe (PID: 6816)
- Unicorn-45313.exe (PID: 10304)
- Unicorn-64826.exe (PID: 6852)
- Unicorn-34339.exe (PID: 10108)
- Unicorn-2413.exe (PID: 10028)
- Unicorn-3503.exe (PID: 7144)
- Unicorn-59995.exe (PID: 5392)
- Unicorn-52190.exe (PID: 10248)
Executes application which crashes
- Unicorn-62854.exe (PID: 8516)
- Unicorn-23768.exe (PID: 9248)
- Unicorn-10913.exe (PID: 6940)
INFO
Reads the computer name
- Unicorn-37719.exe (PID: 7720)
- Unicorn-33997.exe (PID: 7732)
- Unicorn-64003.exe (PID: 7356)
- 1 (136).exe (PID: 7288)
- Unicorn-5944.exe (PID: 8004)
- Unicorn-5944.exe (PID: 8012)
- Unicorn-14204.exe (PID: 7996)
- Unicorn-469.exe (PID: 8048)
- Unicorn-46471.exe (PID: 7216)
- Unicorn-37063.exe (PID: 8116)
- Unicorn-17328.exe (PID: 8136)
- Unicorn-26464.exe (PID: 8172)
- Unicorn-37748.exe (PID: 8152)
- Unicorn-799.exe (PID: 1676)
- Unicorn-46471.exe (PID: 664)
- Unicorn-17145.exe (PID: 7232)
- Unicorn-63762.exe (PID: 1328)
- Unicorn-53134.exe (PID: 2240)
- Unicorn-22922.exe (PID: 5964)
- Unicorn-10155.exe (PID: 6080)
- Unicorn-43512.exe (PID: 5756)
- Unicorn-35667.exe (PID: 6752)
- Unicorn-51738.exe (PID: 5956)
- Unicorn-10285.exe (PID: 668)
- Unicorn-49818.exe (PID: 1280)
- Unicorn-52003.exe (PID: 720)
- Unicorn-43835.exe (PID: 2552)
- Unicorn-63553.exe (PID: 976)
- Unicorn-3384.exe (PID: 812)
- Unicorn-4146.exe (PID: 780)
- Unicorn-63553.exe (PID: 7208)
- Unicorn-4146.exe (PID: 6800)
- Unicorn-13622.exe (PID: 6476)
- Unicorn-22537.exe (PID: 1180)
- Unicorn-47255.exe (PID: 6240)
- Unicorn-20512.exe (PID: 2152)
- Unicorn-1754.exe (PID: 856)
- Unicorn-32572.exe (PID: 7540)
- Unicorn-23990.exe (PID: 5112)
- Unicorn-5838.exe (PID: 7392)
- Unicorn-7929.exe (PID: 7344)
- Unicorn-46169.exe (PID: 7636)
- Unicorn-27795.exe (PID: 7340)
- Unicorn-50955.exe (PID: 4628)
- Unicorn-65236.exe (PID: 7552)
- Unicorn-10425.exe (PID: 7884)
- Unicorn-65236.exe (PID: 7888)
- Unicorn-7867.exe (PID: 4024)
- Unicorn-7545.exe (PID: 7792)
- Unicorn-10798.exe (PID: 5868)
- Unicorn-50524.exe (PID: 7628)
- Unicorn-45371.exe (PID: 7840)
- Unicorn-65236.exe (PID: 7804)
- Unicorn-18480.exe (PID: 7708)
- Unicorn-65236.exe (PID: 7148)
- Unicorn-21189.exe (PID: 4300)
- Unicorn-16398.exe (PID: 6044)
- Unicorn-16398.exe (PID: 2616)
- Unicorn-44515.exe (PID: 7928)
- Unicorn-11650.exe (PID: 7968)
- Unicorn-35999.exe (PID: 7760)
- Unicorn-42469.exe (PID: 7984)
- Unicorn-61406.exe (PID: 7980)
- Unicorn-33585.exe (PID: 4220)
- Unicorn-37115.exe (PID: 5576)
- Unicorn-21473.exe (PID: 5968)
- Unicorn-45091.exe (PID: 5204)
- Unicorn-1297.exe (PID: 3888)
- Unicorn-10446.exe (PID: 6324)
- Unicorn-49388.exe (PID: 5212)
- Unicorn-53342.exe (PID: 6132)
- Unicorn-52595.exe (PID: 7012)
- Unicorn-20883.exe (PID: 5416)
- Unicorn-4141.exe (PID: 6032)
- Unicorn-4354.exe (PID: 4896)
- Unicorn-20883.exe (PID: 2320)
- Unicorn-7862.exe (PID: 8316)
- Unicorn-4909.exe (PID: 8232)
- Unicorn-3778.exe (PID: 8308)
- Unicorn-5869.exe (PID: 8372)
- Unicorn-41281.exe (PID: 8288)
- Unicorn-50239.exe (PID: 8340)
- Unicorn-13098.exe (PID: 8404)
- Unicorn-6968.exe (PID: 8396)
- Unicorn-6200.exe (PID: 8200)
- Unicorn-32678.exe (PID: 8248)
- Unicorn-58023.exe (PID: 8468)
- Unicorn-40733.exe (PID: 8548)
- Unicorn-8822.exe (PID: 8492)
- Unicorn-41879.exe (PID: 8436)
- Unicorn-62107.exe (PID: 8452)
- Unicorn-62854.exe (PID: 8516)
- Unicorn-49663.exe (PID: 8556)
- Unicorn-62107.exe (PID: 8460)
- Unicorn-8630.exe (PID: 8592)
- Unicorn-37411.exe (PID: 8616)
- Unicorn-53747.exe (PID: 8540)
- Unicorn-18889.exe (PID: 8688)
- Unicorn-13461.exe (PID: 8624)
- Unicorn-26865.exe (PID: 8764)
- Unicorn-30587.exe (PID: 8680)
- Unicorn-6466.exe (PID: 8996)
- Unicorn-5506.exe (PID: 8804)
- Unicorn-26673.exe (PID: 8860)
- Unicorn-10721.exe (PID: 8672)
- Unicorn-58022.exe (PID: 8824)
- Unicorn-20180.exe (PID: 8740)
- Unicorn-42455.exe (PID: 8868)
- Unicorn-26079.exe (PID: 8752)
- Unicorn-51178.exe (PID: 8796)
- Unicorn-47591.exe (PID: 9024)
- Unicorn-59154.exe (PID: 8896)
- Unicorn-25164.exe (PID: 8948)
- Unicorn-8796.exe (PID: 8968)
- Unicorn-9133.exe (PID: 8904)
- Unicorn-39693.exe (PID: 9060)
- Unicorn-2666.exe (PID: 8984)
- Unicorn-8796.exe (PID: 8960)
- Unicorn-11105.exe (PID: 9080)
- Unicorn-47207.exe (PID: 9144)
- Unicorn-24723.exe (PID: 2092)
- Unicorn-9818.exe (PID: 2084)
- Unicorn-35823.exe (PID: 5776)
- Unicorn-43097.exe (PID: 9232)
- Unicorn-35631.exe (PID: 2332)
- Unicorn-56051.exe (PID: 9208)
- Unicorn-45314.exe (PID: 9264)
Create files in a temporary directory
- Unicorn-37719.exe (PID: 7720)
- 1 (136).exe (PID: 7288)
- Unicorn-469.exe (PID: 8048)
- Unicorn-5944.exe (PID: 8004)
- Unicorn-64003.exe (PID: 7356)
- Unicorn-26464.exe (PID: 8172)
- Unicorn-46471.exe (PID: 7216)
- Unicorn-37063.exe (PID: 8116)
- Unicorn-37748.exe (PID: 8152)
- Unicorn-14204.exe (PID: 7996)
- Unicorn-46471.exe (PID: 664)
- Unicorn-33997.exe (PID: 7732)
- Unicorn-799.exe (PID: 1676)
- Unicorn-63762.exe (PID: 1328)
- Unicorn-53134.exe (PID: 2240)
- Unicorn-22922.exe (PID: 5964)
- Unicorn-5944.exe (PID: 8012)
- Unicorn-10155.exe (PID: 6080)
- Unicorn-17328.exe (PID: 8136)
- Unicorn-10285.exe (PID: 668)
- Unicorn-43512.exe (PID: 5756)
- Unicorn-35667.exe (PID: 6752)
- Unicorn-43835.exe (PID: 2552)
- Unicorn-63553.exe (PID: 7208)
- Unicorn-4146.exe (PID: 780)
- Unicorn-13622.exe (PID: 6476)
- Unicorn-47255.exe (PID: 6240)
- Unicorn-20512.exe (PID: 2152)
- Unicorn-1754.exe (PID: 856)
- Unicorn-23990.exe (PID: 5112)
- Unicorn-7929.exe (PID: 7344)
- Unicorn-32572.exe (PID: 7540)
- Unicorn-7867.exe (PID: 7784)
- Unicorn-50955.exe (PID: 4628)
- Unicorn-65236.exe (PID: 7552)
- Unicorn-51738.exe (PID: 5956)
- Unicorn-50524.exe (PID: 7628)
- Unicorn-7867.exe (PID: 4024)
- Unicorn-45371.exe (PID: 7840)
- Unicorn-18480.exe (PID: 7708)
- Unicorn-10798.exe (PID: 5868)
- Unicorn-65236.exe (PID: 7804)
- Unicorn-65236.exe (PID: 7148)
- Unicorn-30133.exe (PID: 7876)
- Unicorn-21189.exe (PID: 4300)
- Unicorn-52003.exe (PID: 720)
- Unicorn-16398.exe (PID: 6044)
- Unicorn-4146.exe (PID: 6800)
- Unicorn-35999.exe (PID: 7760)
- Unicorn-16398.exe (PID: 2616)
- Unicorn-3384.exe (PID: 812)
- Unicorn-44515.exe (PID: 7928)
- Unicorn-49818.exe (PID: 1280)
- Unicorn-61406.exe (PID: 7980)
- Unicorn-17145.exe (PID: 7232)
- Unicorn-42469.exe (PID: 7984)
- Unicorn-22537.exe (PID: 1180)
- Unicorn-37115.exe (PID: 5576)
- Unicorn-33585.exe (PID: 4220)
- Unicorn-45091.exe (PID: 5204)
- Unicorn-21473.exe (PID: 5968)
- Unicorn-1297.exe (PID: 3888)
- Unicorn-5838.exe (PID: 7392)
- Unicorn-10446.exe (PID: 6324)
- Unicorn-53342.exe (PID: 6132)
- Unicorn-52595.exe (PID: 7012)
- Unicorn-20883.exe (PID: 5416)
- Unicorn-4141.exe (PID: 6032)
- Unicorn-27795.exe (PID: 7340)
- Unicorn-10913.exe (PID: 6940)
- Unicorn-46169.exe (PID: 7636)
- Unicorn-41303.exe (PID: 5972)
- Unicorn-20883.exe (PID: 2320)
- Unicorn-6200.exe (PID: 8200)
- Unicorn-35173.exe (PID: 7764)
- Unicorn-7545.exe (PID: 7792)
- Unicorn-32678.exe (PID: 8248)
- Unicorn-10425.exe (PID: 7884)
- Unicorn-17292.exe (PID: 8272)
- Unicorn-7862.exe (PID: 8316)
- Unicorn-65236.exe (PID: 7888)
- Unicorn-5869.exe (PID: 8372)
- Unicorn-3778.exe (PID: 8308)
- Unicorn-27411.exe (PID: 7812)
- Unicorn-41281.exe (PID: 8288)
- Unicorn-50239.exe (PID: 8340)
- Unicorn-13098.exe (PID: 8404)
- Unicorn-6968.exe (PID: 8396)
- Unicorn-63553.exe (PID: 976)
- Unicorn-41879.exe (PID: 8436)
- Unicorn-58023.exe (PID: 8468)
- Unicorn-40733.exe (PID: 8548)
- Unicorn-22419.exe (PID: 8660)
- Unicorn-8822.exe (PID: 8492)
- Unicorn-11650.exe (PID: 7968)
- Unicorn-62107.exe (PID: 8452)
- Unicorn-8630.exe (PID: 8592)
- Unicorn-49663.exe (PID: 8556)
- Unicorn-37411.exe (PID: 8616)
- Unicorn-18889.exe (PID: 8688)
- Unicorn-30587.exe (PID: 8680)
- Unicorn-46923.exe (PID: 8720)
- Unicorn-13461.exe (PID: 8624)
- Unicorn-5506.exe (PID: 8804)
- Unicorn-26673.exe (PID: 8860)
- Unicorn-20180.exe (PID: 8740)
- Unicorn-51178.exe (PID: 8796)
- Unicorn-44493.exe (PID: 8780)
- Unicorn-42455.exe (PID: 8868)
- Unicorn-26079.exe (PID: 8752)
- Unicorn-47591.exe (PID: 9024)
- Unicorn-2666.exe (PID: 8984)
- Unicorn-59102.exe (PID: 9112)
- Unicorn-9133.exe (PID: 8904)
- Unicorn-59154.exe (PID: 8896)
- Unicorn-8796.exe (PID: 8968)
- Unicorn-39693.exe (PID: 9060)
- Unicorn-8796.exe (PID: 8960)
- Unicorn-11105.exe (PID: 9080)
- Unicorn-9818.exe (PID: 2084)
- Unicorn-35631.exe (PID: 2332)
- Unicorn-47207.exe (PID: 9144)
- Unicorn-45314.exe (PID: 9264)
- Unicorn-24723.exe (PID: 2092)
- Unicorn-56051.exe (PID: 9208)
- Unicorn-35823.exe (PID: 5776)
- Unicorn-49388.exe (PID: 5212)
- Unicorn-4354.exe (PID: 4896)
- Unicorn-7867.exe (PID: 6040)
- Unicorn-5122.exe (PID: 8356)
- Unicorn-53747.exe (PID: 8540)
- Unicorn-26865.exe (PID: 8764)
- Unicorn-28260.exe (PID: 9316)
- Unicorn-62107.exe (PID: 8460)
- Unicorn-10721.exe (PID: 8672)
- Unicorn-25164.exe (PID: 8948)
Checks supported languages
- Unicorn-33997.exe (PID: 7732)
- Unicorn-37719.exe (PID: 7720)
- Unicorn-64003.exe (PID: 7356)
- 1 (136).exe (PID: 7288)
- Unicorn-5944.exe (PID: 8004)
- Unicorn-14204.exe (PID: 7996)
- Unicorn-469.exe (PID: 8048)
- Unicorn-5944.exe (PID: 8012)
- Unicorn-17328.exe (PID: 8136)
- Unicorn-37063.exe (PID: 8116)
- Unicorn-37748.exe (PID: 8152)
- Unicorn-26464.exe (PID: 8172)
- Unicorn-46471.exe (PID: 664)
- Unicorn-799.exe (PID: 1676)
- Unicorn-17145.exe (PID: 7232)
- Unicorn-46471.exe (PID: 7216)
- Unicorn-63762.exe (PID: 1328)
- Unicorn-53134.exe (PID: 2240)
- Unicorn-22922.exe (PID: 5964)
- Unicorn-10285.exe (PID: 668)
- Unicorn-10155.exe (PID: 6080)
- Unicorn-43512.exe (PID: 5756)
- Unicorn-35667.exe (PID: 6752)
- Unicorn-43835.exe (PID: 2552)
- Unicorn-51738.exe (PID: 5956)
- Unicorn-52003.exe (PID: 720)
- Unicorn-49818.exe (PID: 1280)
- Unicorn-3384.exe (PID: 812)
- Unicorn-63553.exe (PID: 976)
- Unicorn-4146.exe (PID: 6800)
- Unicorn-63553.exe (PID: 7208)
- Unicorn-4146.exe (PID: 780)
- Unicorn-13622.exe (PID: 6476)
- Unicorn-22537.exe (PID: 1180)
- Unicorn-47255.exe (PID: 6240)
- Unicorn-1754.exe (PID: 856)
- Unicorn-5838.exe (PID: 7392)
- Unicorn-23990.exe (PID: 5112)
- Unicorn-20512.exe (PID: 2152)
- Unicorn-7929.exe (PID: 7344)
- Unicorn-7867.exe (PID: 6040)
- Unicorn-27795.exe (PID: 7340)
- Unicorn-46169.exe (PID: 7636)
- Unicorn-7867.exe (PID: 7784)
- Unicorn-7867.exe (PID: 4024)
- Unicorn-32572.exe (PID: 7540)
- Unicorn-50955.exe (PID: 4628)
- Unicorn-18480.exe (PID: 7708)
- Unicorn-7545.exe (PID: 7792)
- Unicorn-27411.exe (PID: 7812)
- Unicorn-50524.exe (PID: 7628)
- Unicorn-10425.exe (PID: 7884)
- Unicorn-65236.exe (PID: 7888)
- Unicorn-45371.exe (PID: 7840)
- Unicorn-21189.exe (PID: 4300)
- Unicorn-65236.exe (PID: 7804)
- Unicorn-65236.exe (PID: 7552)
- Unicorn-16398.exe (PID: 2616)
- Unicorn-16398.exe (PID: 6044)
- Unicorn-30133.exe (PID: 7876)
- Unicorn-35999.exe (PID: 7760)
- Unicorn-42469.exe (PID: 7984)
- Unicorn-11650.exe (PID: 7968)
- Unicorn-61406.exe (PID: 7980)
- Unicorn-44515.exe (PID: 7928)
- Unicorn-37115.exe (PID: 5576)
- Unicorn-33585.exe (PID: 4220)
- Unicorn-65236.exe (PID: 7148)
- Unicorn-10798.exe (PID: 5868)
- Unicorn-45091.exe (PID: 5204)
- Unicorn-21473.exe (PID: 5968)
- Unicorn-1297.exe (PID: 3888)
- Unicorn-52595.exe (PID: 7012)
- Unicorn-53342.exe (PID: 6132)
- Unicorn-10446.exe (PID: 6324)
- Unicorn-4141.exe (PID: 6032)
- Unicorn-49388.exe (PID: 5212)
- Unicorn-10913.exe (PID: 6940)
- Unicorn-20883.exe (PID: 5416)
- Unicorn-4354.exe (PID: 4896)
- Unicorn-6200.exe (PID: 8200)
- Unicorn-41303.exe (PID: 5972)
- Unicorn-35173.exe (PID: 7764)
- Unicorn-20883.exe (PID: 2320)
- Unicorn-32678.exe (PID: 8248)
- Unicorn-4909.exe (PID: 8232)
- Unicorn-17292.exe (PID: 8272)
- Unicorn-3778.exe (PID: 8308)
- Unicorn-50239.exe (PID: 8340)
- Unicorn-5122.exe (PID: 8356)
- Unicorn-5869.exe (PID: 8372)
- Unicorn-6968.exe (PID: 8396)
- Unicorn-13098.exe (PID: 8404)
- Unicorn-7862.exe (PID: 8316)
- Unicorn-41281.exe (PID: 8288)
- Unicorn-58023.exe (PID: 8468)
- Unicorn-62107.exe (PID: 8460)
- Unicorn-8822.exe (PID: 8492)
- Unicorn-62107.exe (PID: 8452)
- Unicorn-62854.exe (PID: 8516)
- Unicorn-49663.exe (PID: 8556)
- Unicorn-8630.exe (PID: 8592)
- Unicorn-13461.exe (PID: 8624)
- Unicorn-25159.exe (PID: 8608)
- Unicorn-53747.exe (PID: 8540)
- Unicorn-40733.exe (PID: 8548)
- Unicorn-30587.exe (PID: 8680)
- Unicorn-22419.exe (PID: 8660)
- Unicorn-37411.exe (PID: 8616)
- Unicorn-46923.exe (PID: 8720)
- Unicorn-26079.exe (PID: 8752)
- Unicorn-44493.exe (PID: 8780)
- Unicorn-26865.exe (PID: 8764)
- Unicorn-5506.exe (PID: 8804)
- Unicorn-58022.exe (PID: 8824)
- Unicorn-10721.exe (PID: 8672)
- Unicorn-18889.exe (PID: 8688)
- Unicorn-20180.exe (PID: 8740)
- Unicorn-59154.exe (PID: 8896)
- Unicorn-9133.exe (PID: 8904)
- Unicorn-25164.exe (PID: 8948)
- Unicorn-8796.exe (PID: 8960)
- Unicorn-47591.exe (PID: 9024)
- Unicorn-2666.exe (PID: 8984)
- Unicorn-8796.exe (PID: 8968)
- Unicorn-42455.exe (PID: 8868)
- Unicorn-26673.exe (PID: 8860)
- Unicorn-11105.exe (PID: 9080)
- Unicorn-39693.exe (PID: 9060)
- Unicorn-47207.exe (PID: 9144)
- Unicorn-56051.exe (PID: 9208)
- Unicorn-35823.exe (PID: 5776)
- Unicorn-35631.exe (PID: 2332)
- Unicorn-59102.exe (PID: 9112)
- Unicorn-9818.exe (PID: 2084)
- Unicorn-24723.exe (PID: 2092)
- Unicorn-43097.exe (PID: 9232)
- Unicorn-23768.exe (PID: 9248)
- Unicorn-45314.exe (PID: 9264)
- Unicorn-48651.exe (PID: 9292)
- Unicorn-28260.exe (PID: 9316)
- Unicorn-38401.exe (PID: 9764)
- Unicorn-43777.exe (PID: 9804)
- Unicorn-9621.exe (PID: 9832)
- Unicorn-29487.exe (PID: 9844)
- Unicorn-29487.exe (PID: 9840)
- Unicorn-49205.exe (PID: 9860)
- Unicorn-31193.exe (PID: 9888)
- Unicorn-9456.exe (PID: 9936)
- Unicorn-30639.exe (PID: 9960)
- Unicorn-4188.exe (PID: 9872)
- Unicorn-34339.exe (PID: 10108)
- Unicorn-47146.exe (PID: 10064)
- Unicorn-55314.exe (PID: 10080)
- Unicorn-13653.exe (PID: 10088)
- Unicorn-1209.exe (PID: 10072)
- Unicorn-18387.exe (PID: 9948)
- Unicorn-50867.exe (PID: 9976)
- Unicorn-2413.exe (PID: 10028)
- Unicorn-2413.exe (PID: 10020)
- Unicorn-64271.exe (PID: 10184)
- Unicorn-32292.exe (PID: 10144)
- Unicorn-55341.exe (PID: 10168)
- Unicorn-64271.exe (PID: 10176)
- Unicorn-3565.exe (PID: 10220)
- Unicorn-61256.exe (PID: 10236)
- Unicorn-2626.exe (PID: 6876)
- Unicorn-4664.exe (PID: 4172)
- Unicorn-64826.exe (PID: 6852)
- Unicorn-35491.exe (PID: 6816)
- Unicorn-35491.exe (PID: 3900)
- Unicorn-59995.exe (PID: 5392)
- Unicorn-3373.exe (PID: 3968)
- Unicorn-3503.exe (PID: 7144)
- Unicorn-52190.exe (PID: 10248)
- Unicorn-10602.exe (PID: 8112)
- Unicorn-31215.exe (PID: 10296)
- Unicorn-45313.exe (PID: 10304)
- Unicorn-44022.exe (PID: 4812)
- Unicorn-16549.exe (PID: 10436)
- Unicorn-48667.exe (PID: 10456)
- Unicorn-40499.exe (PID: 10428)
- Unicorn-44583.exe (PID: 10468)
- Unicorn-14421.exe (PID: 10376)
- Unicorn-26939.exe (PID: 10384)
- Unicorn-60358.exe (PID: 10368)
- Unicorn-49414.exe (PID: 10508)
- Unicorn-44946.exe (PID: 10604)
- Unicorn-4105.exe (PID: 10652)
- Unicorn-32693.exe (PID: 10596)
- Unicorn-39345.exe (PID: 10612)
- Unicorn-23971.exe (PID: 10668)
- Unicorn-49414.exe (PID: 10516)
- Unicorn-49414.exe (PID: 10524)
- Unicorn-61666.exe (PID: 10532)
- Unicorn-26200.exe (PID: 10564)
- Unicorn-12081.exe (PID: 10772)
- Unicorn-7442.exe (PID: 10752)
- Unicorn-52922.exe (PID: 10856)
- Unicorn-41961.exe (PID: 10800)
- Unicorn-28225.exe (PID: 10792)
- Unicorn-41961.exe (PID: 10804)
- Unicorn-16497.exe (PID: 10936)
- Unicorn-10632.exe (PID: 10952)
- Unicorn-52368.exe (PID: 10944)
- Unicorn-8189.exe (PID: 10692)
- Unicorn-38069.exe (PID: 10728)
- Unicorn-12273.exe (PID: 10680)
- Unicorn-45714.exe (PID: 11008)
- Unicorn-57179.exe (PID: 11000)
- Unicorn-59449.exe (PID: 11016)
- Unicorn-6356.exe (PID: 11052)
- Unicorn-12486.exe (PID: 11060)
- Unicorn-60733.exe (PID: 11100)
- Unicorn-44894.exe (PID: 10988)
- Unicorn-16379.exe (PID: 11152)
- Unicorn-41437.exe (PID: 11092)
- Unicorn-63533.exe (PID: 11108)
- Unicorn-20463.exe (PID: 11140)
- Unicorn-32715.exe (PID: 11160)
- Unicorn-24547.exe (PID: 11128)
- Unicorn-20271.exe (PID: 11240)
- Unicorn-18085.exe (PID: 11260)
- Unicorn-41770.exe (PID: 11252)
- Unicorn-12657.exe (PID: 11232)
- Unicorn-35713.exe (PID: 11276)
- Unicorn-15484.exe (PID: 10352)
- Unicorn-41843.exe (PID: 11284)
- Unicorn-405.exe (PID: 11220)
- Unicorn-64426.exe (PID: 11212)
- Unicorn-37686.exe (PID: 10288)
- Unicorn-41386.exe (PID: 11352)
- Unicorn-24744.exe (PID: 11336)
- Unicorn-54095.exe (PID: 11304)
- Unicorn-10130.exe (PID: 11440)
- Unicorn-34635.exe (PID: 11472)
- Unicorn-34635.exe (PID: 11464)
- Unicorn-53711.exe (PID: 11388)
- Unicorn-4702.exe (PID: 11404)
- Unicorn-53711.exe (PID: 11396)
- Unicorn-34635.exe (PID: 11480)
- Unicorn-26275.exe (PID: 11520)
- Unicorn-6409.exe (PID: 11528)
- Unicorn-929.exe (PID: 11628)
- Unicorn-28120.exe (PID: 11592)
- Unicorn-6409.exe (PID: 11536)
- Unicorn-14385.exe (PID: 11584)
- Unicorn-17723.exe (PID: 11656)
- Unicorn-17723.exe (PID: 11648)
- Unicorn-14021.exe (PID: 11672)
- Unicorn-47058.exe (PID: 11548)
- Unicorn-28112.exe (PID: 11752)
- Unicorn-51547.exe (PID: 11732)
- Unicorn-4768.exe (PID: 11696)
- Unicorn-13913.exe (PID: 11716)
- Unicorn-22959.exe (PID: 11776)
- Unicorn-64354.exe (PID: 11816)
- Unicorn-18683.exe (PID: 11832)
- Unicorn-59523.exe (PID: 11800)
- Unicorn-59523.exe (PID: 11792)
- Unicorn-17697.exe (PID: 11888)
- Unicorn-56399.exe (PID: 11920)
- Unicorn-64567.exe (PID: 11948)
- Unicorn-64567.exe (PID: 11940)
- Unicorn-39871.exe (PID: 11996)
- Unicorn-56954.exe (PID: 12040)
- Unicorn-11474.exe (PID: 11932)
- Unicorn-53192.exe (PID: 12112)
- Unicorn-39679.exe (PID: 12120)
- Unicorn-11282.exe (PID: 12032)
- Unicorn-2465.exe (PID: 12144)
- Unicorn-32855.exe (PID: 12160)
- Unicorn-48807.exe (PID: 12184)
- Unicorn-50753.exe (PID: 12208)
- Unicorn-31807.exe (PID: 12444)
- Unicorn-14126.exe (PID: 12432)
- Unicorn-39975.exe (PID: 12484)
- Unicorn-11194.exe (PID: 12552)
- Unicorn-2834.exe (PID: 12608)
- Unicorn-32383.exe (PID: 12732)
- Unicorn-28469.exe (PID: 12896)
- Unicorn-60706.exe (PID: 12740)
- Unicorn-34228.exe (PID: 12792)
- Unicorn-57442.exe (PID: 12832)
- Unicorn-16217.exe (PID: 12872)
- Unicorn-21645.exe (PID: 13008)
- Unicorn-56238.exe (PID: 12908)
- Unicorn-63902.exe (PID: 12956)
- Unicorn-21784.exe (PID: 12940)
- Unicorn-21645.exe (PID: 13000)
- Unicorn-46342.exe (PID: 13040)
- Unicorn-55927.exe (PID: 12600)
- Unicorn-42781.exe (PID: 12688)
- Unicorn-19044.exe (PID: 13092)
- Unicorn-43357.exe (PID: 13136)
- Unicorn-18852.exe (PID: 13180)
- Unicorn-14768.exe (PID: 13156)
- Unicorn-36280.exe (PID: 13196)
- Unicorn-57198.exe (PID: 13236)
- Unicorn-36280.exe (PID: 13204)
- Unicorn-16985.exe (PID: 13272)
- Unicorn-9009.exe (PID: 13260)
- Unicorn-3409.exe (PID: 13252)
- Unicorn-20249.exe (PID: 2432)
- Unicorn-41489.exe (PID: 300)
- Unicorn-49850.exe (PID: 12356)
- Unicorn-649.exe (PID: 7680)
- Unicorn-34665.exe (PID: 12332)
- Unicorn-42973.exe (PID: 13308)
- Unicorn-40233.exe (PID: 12424)
- Unicorn-38749.exe (PID: 9256)
- Unicorn-15728.exe (PID: 4120)
- Unicorn-51879.exe (PID: 13316)
- Unicorn-5065.exe (PID: 13356)
- Unicorn-51002.exe (PID: 13348)
- Unicorn-39849.exe (PID: 13392)
- Unicorn-58978.exe (PID: 13452)
- Unicorn-26113.exe (PID: 13408)
- Unicorn-31488.exe (PID: 13508)
- Unicorn-43741.exe (PID: 13552)
- Unicorn-51909.exe (PID: 13608)
- Unicorn-13669.exe (PID: 13516)
- Unicorn-40233.exe (PID: 12352)
- Unicorn-37048.exe (PID: 13416)
- Unicorn-57774.exe (PID: 13600)
- Unicorn-24664.exe (PID: 13832)
- Unicorn-43741.exe (PID: 13548)
- Unicorn-32832.exe (PID: 13716)
- Unicorn-49169.exe (PID: 13760)
- Unicorn-61613.exe (PID: 13784)
- Unicorn-51962.exe (PID: 13776)
- Unicorn-34230.exe (PID: 13936)
- Unicorn-30530.exe (PID: 13820)
- Unicorn-4052.exe (PID: 13880)
- Unicorn-42532.exe (PID: 13872)
- Unicorn-26254.exe (PID: 13896)
- Unicorn-28364.exe (PID: 13944)
- Unicorn-58542.exe (PID: 14004)
- Unicorn-9036.exe (PID: 14036)
- Unicorn-51909.exe (PID: 13616)
- Unicorn-30005.exe (PID: 13540)
- Unicorn-30563.exe (PID: 13704)
- Unicorn-53961.exe (PID: 13996)
- Unicorn-40093.exe (PID: 14200)
- Unicorn-55802.exe (PID: 14112)
- Unicorn-23541.exe (PID: 14012)
- Unicorn-36201.exe (PID: 14120)
- Unicorn-9989.exe (PID: 14164)
- Unicorn-29324.exe (PID: 14156)
- Unicorn-60706.exe (PID: 14244)
- Unicorn-40093.exe (PID: 14208)
- Unicorn-60706.exe (PID: 14252)
- Unicorn-59694.exe (PID: 14204)
- Unicorn-39115.exe (PID: 14312)
- Unicorn-49553.exe (PID: 14324)
- Unicorn-52346.exe (PID: 9492)
- Unicorn-59197.exe (PID: 9416)
- Unicorn-39466.exe (PID: 14076)
- Unicorn-9800.exe (PID: 14068)
- Unicorn-11836.exe (PID: 14044)
- Unicorn-544.exe (PID: 13504)
- Unicorn-61997.exe (PID: 9404)
- Unicorn-60322.exe (PID: 14360)
- Unicorn-14385.exe (PID: 14352)
- Unicorn-11121.exe (PID: 14388)
- Unicorn-39693.exe (PID: 14412)
- Unicorn-65522.exe (PID: 14436)
- Unicorn-24297.exe (PID: 14460)
- Unicorn-20021.exe (PID: 14492)
- Unicorn-55226.exe (PID: 9408)
- Unicorn-35071.exe (PID: 9488)
- Unicorn-52886.exe (PID: 14528)
- Unicorn-65138.exe (PID: 14536)
- Unicorn-37893.exe (PID: 14580)
- Unicorn-12813.exe (PID: 14708)
- Unicorn-59797.exe (PID: 14604)
- Unicorn-51629.exe (PID: 14588)
- Unicorn-51629.exe (PID: 14596)
- Unicorn-8101.exe (PID: 14660)
- Unicorn-11688.exe (PID: 14668)
- Unicorn-12813.exe (PID: 14700)
- Unicorn-61227.exe (PID: 14752)
- Unicorn-61194.exe (PID: 14732)
- Unicorn-28138.exe (PID: 14772)
- Unicorn-53654.exe (PID: 14808)
- Unicorn-41401.exe (PID: 14792)
- Unicorn-52886.exe (PID: 14520)
- Unicorn-5605.exe (PID: 14880)
- Unicorn-7088.exe (PID: 14936)
- Unicorn-57182.exe (PID: 14968)
- Unicorn-46254.exe (PID: 14984)
- Unicorn-6565.exe (PID: 15004)
- Unicorn-31069.exe (PID: 15036)
- Unicorn-31069.exe (PID: 15020)
- Unicorn-31069.exe (PID: 15024)
- Unicorn-2481.exe (PID: 15072)
- Unicorn-34385.exe (PID: 14824)
- Unicorn-34193.exe (PID: 14900)
- Unicorn-34193.exe (PID: 14896)
- Unicorn-58890.exe (PID: 14928)
The sample compiled with chinese language support
- 1 (136).exe (PID: 7288)
Creates files or folders in the user directory
- WerFault.exe (PID: 10348)
- WerFault.exe (PID: 12396)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
562
Monitored processes
424
Malicious processes
66
Suspicious processes
59
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 300 | C:\Users\admin\AppData\Local\Temp\Unicorn-41489.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-41489.exe | — | Unicorn-41303.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 664 | C:\Users\admin\AppData\Local\Temp\Unicorn-46471.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-46471.exe | Unicorn-33997.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 668 | C:\Users\admin\AppData\Local\Temp\Unicorn-10285.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-10285.exe | Unicorn-37748.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 720 | C:\Users\admin\AppData\Local\Temp\Unicorn-52003.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-52003.exe | Unicorn-799.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 780 | C:\Users\admin\AppData\Local\Temp\Unicorn-4146.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-4146.exe | Unicorn-17145.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 812 | C:\Users\admin\AppData\Local\Temp\Unicorn-3384.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-3384.exe | 1 (136).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 856 | C:\Users\admin\AppData\Local\Temp\Unicorn-1754.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-1754.exe | Unicorn-22922.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 976 | C:\Users\admin\AppData\Local\Temp\Unicorn-63553.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-63553.exe | Unicorn-37719.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1180 | C:\Users\admin\AppData\Local\Temp\Unicorn-22537.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-22537.exe | Unicorn-37063.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1280 | C:\Users\admin\AppData\Local\Temp\Unicorn-49818.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-49818.exe | Unicorn-14204.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
13 966
Read events
13 966
Write events
0
Delete events
0
Modification events
Executable files
831
Suspicious files
3
Text files
1
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7720 | Unicorn-37719.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-5944.exe | executable | |
MD5:36654734AE5C50FBA8A7440E5D6195CC | SHA256:883D927AF355BCD20916A40AA1F2A3CBE30EBFC9CE2B42CA521061A5C443D9F7 | |||
| 7288 | 1 (136).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-64003.exe | executable | |
MD5:FFF31356BD14D47D9CFEBA06B8B0C861 | SHA256:347105982CF6C5A4A84E9C03D0FEECE3122F1862A9BC38E52889A44D42E00194 | |||
| 7356 | Unicorn-64003.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-37719.exe | executable | |
MD5:41E1CC54B2C2A5A91CA1D93F14532184 | SHA256:E5B866BA982F0B5D97935BF0ECC1A0A15BED7DC4ABEADCEF98C15A39C5CD3A10 | |||
| 7356 | Unicorn-64003.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-469.exe | executable | |
MD5:6F06F2CCED721B05814B4875B9F49CB7 | SHA256:BC78B85CB92C6F217E4E21EB22FE571D599933BC5D4E9F97BB832462D38DFF5F | |||
| 7356 | Unicorn-64003.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-26464.exe | executable | |
MD5:08B670EC0D60716A41C8BBF9FBBC82DF | SHA256:0360814D5230E30673E14060DF43615F5E7720A1D0E6062AB1C981001DC0B8AA | |||
| 7996 | Unicorn-14204.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-799.exe | executable | |
MD5:5A7CB3641916F6A4877B21BCEAFB6D28 | SHA256:2B0F5A7DEF3F4AA65A3990E58F28A8610456372CBB840ED067AE679CDB16AC41 | |||
| 7288 | 1 (136).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-33997.exe | executable | |
MD5:FCFACA16CF3120A831A7DC97C74A03F3 | SHA256:634A203DC3DC38BFA969E3BBE168650E6A9F30EEF7EF08048005C3B54AA75A62 | |||
| 8004 | Unicorn-5944.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-37748.exe | executable | |
MD5:62FE93C9A3EF8330D40EAE677FAA4C1E | SHA256:2D6064B87E9CA6491A6369864BEA55E6E601B3B83DC3F184CF2F797F881FAC64 | |||
| 8012 | Unicorn-5944.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-17328.exe | executable | |
MD5:C4B2B1A6625840EE6034D857E92D68AA | SHA256:9BCD01B1F939A2B88DCFA90888AF59670185FF822EF4AE516F7576ED617EFAAE | |||
| 8172 | Unicorn-26464.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-35667.exe | executable | |
MD5:6EDFE2B6AAE9453BCDF3737314C1F1D4 | SHA256:E73FC7C8CC6FB589C1968A4A9A19A9E02C64406737987A116ADA33E1D783E1C8 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
7
TCP/UDP connections
35
DNS requests
21
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
— | — | GET | 200 | 2.16.164.106:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
— | — | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
3284 | svchost.exe | GET | 200 | 104.124.11.17:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
5720 | backgroundTaskHost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
6768 | SIHClient.exe | GET | 200 | 2.23.246.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
6768 | SIHClient.exe | GET | 200 | 2.23.246.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
3284 | svchost.exe | GET | 200 | 23.219.150.101:80 | http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
— | — | 2.16.164.106:80 | crl.microsoft.com | Akamai International B.V. | NL | whitelisted |
— | — | 20.190.160.4:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
— | — | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
— | — | 40.113.110.67:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
3216 | svchost.exe | 40.113.110.67:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
5496 | MoUsoCoreWorker.exe | 4.231.128.59:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4628 | RUXIMICS.exe | 4.231.128.59:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 20.190.160.4:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |