| File name: | 1 (483) |
| Full analysis: | https://app.any.run/tasks/a0e728ca-c34b-4ff6-998f-1d10886950ef |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 21:40:24 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 13E1C4C8C37BEFD68F2C476665C63700 |
| SHA1: | 69D370BBE37B71DB8E2ADBA387C16B2C57BDDD8B |
| SHA256: | 1209B63E4DB361BB596CF20041AE557414CB38F9752EBA77CE6EDC627CB75F30 |
| SSDEEP: | 6144:ACHQIeIVDD8HA5vQgyeWV1fxOtBulp8GBsLWydOHwk/8SwuwpyAvEhlDfXqQk2b/:AetFOHA54gNPBY+as6ydOHtxxDxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- Unicorn-38439.exe (PID: 300)
- Unicorn-47039.exe (PID: 3192)
- 1 (483).exe (PID: 1300)
- Unicorn-23495.exe (PID: 5244)
- Unicorn-34761.exe (PID: 6800)
- Unicorn-4034.exe (PID: 5512)
- Unicorn-37453.exe (PID: 5176)
- Unicorn-51189.exe (PID: 6964)
- Unicorn-2233.exe (PID: 5984)
- Unicorn-36297.exe (PID: 1616)
- Unicorn-30821.exe (PID: 6080)
- Unicorn-60993.exe (PID: 1388)
- Unicorn-47179.exe (PID: 5756)
- Unicorn-16453.exe (PID: 6752)
- Unicorn-32880.exe (PID: 5228)
- Unicorn-25197.exe (PID: 4272)
- Unicorn-42819.exe (PID: 7184)
- Unicorn-49264.exe (PID: 7228)
- Unicorn-15623.exe (PID: 7200)
- Unicorn-13847.exe (PID: 7264)
- Unicorn-7262.exe (PID: 7256)
- Unicorn-17377.exe (PID: 7288)
- Unicorn-30698.exe (PID: 7340)
- Unicorn-46057.exe (PID: 7312)
- Unicorn-5700.exe (PID: 7364)
- Unicorn-50817.exe (PID: 7412)
- Unicorn-22783.exe (PID: 7440)
- Unicorn-33718.exe (PID: 7448)
- Unicorn-34662.exe (PID: 2552)
- Unicorn-42384.exe (PID: 7432)
- Unicorn-10552.exe (PID: 7660)
- Unicorn-44356.exe (PID: 7768)
- Unicorn-51969.exe (PID: 7792)
- Unicorn-37579.exe (PID: 7776)
- Unicorn-41087.exe (PID: 7736)
- Unicorn-6395.exe (PID: 7876)
- Unicorn-17927.exe (PID: 8132)
- Unicorn-52737.exe (PID: 8156)
- Unicorn-60805.exe (PID: 8184)
- Unicorn-38901.exe (PID: 2320)
- Unicorn-29987.exe (PID: 1672)
- Unicorn-44377.exe (PID: 7176)
- Unicorn-57376.exe (PID: 904)
- Unicorn-58575.exe (PID: 7396)
- Unicorn-23765.exe (PID: 7632)
- Unicorn-38709.exe (PID: 7308)
- Unicorn-23765.exe (PID: 2644)
- Unicorn-19415.exe (PID: 5800)
- Unicorn-7027.exe (PID: 7936)
- Unicorn-33002.exe (PID: 7668)
- Unicorn-5700.exe (PID: 7356)
- Unicorn-19487.exe (PID: 7612)
- Unicorn-7027.exe (PID: 7900)
- Unicorn-62473.exe (PID: 8012)
- Unicorn-61678.exe (PID: 7388)
- Unicorn-33002.exe (PID: 7652)
- Unicorn-13136.exe (PID: 7884)
- Unicorn-13157.exe (PID: 7596)
- Unicorn-20065.exe (PID: 8112)
- Unicorn-20065.exe (PID: 8104)
- Unicorn-9850.exe (PID: 8164)
- Unicorn-43780.exe (PID: 7692)
- Unicorn-61652.exe (PID: 8180)
- Unicorn-22779.exe (PID: 4244)
- Unicorn-49784.exe (PID: 8224)
- Unicorn-51367.exe (PID: 8072)
- Unicorn-51367.exe (PID: 8044)
- Unicorn-22678.exe (PID: 8064)
- Unicorn-49421.exe (PID: 6004)
- Unicorn-60282.exe (PID: 4336)
- Unicorn-35585.exe (PID: 8048)
- Unicorn-31448.exe (PID: 7760)
- Unicorn-28809.exe (PID: 8080)
- Unicorn-4112.exe (PID: 8208)
- Unicorn-64803.exe (PID: 8216)
- Unicorn-11273.exe (PID: 8464)
- Unicorn-16941.exe (PID: 8416)
- Unicorn-21963.exe (PID: 8544)
- Unicorn-19847.exe (PID: 8636)
- Unicorn-43391.exe (PID: 8484)
- Unicorn-7137.exe (PID: 8672)
- Unicorn-27914.exe (PID: 8692)
- Unicorn-5456.exe (PID: 8604)
- Unicorn-20209.exe (PID: 8732)
- Unicorn-62851.exe (PID: 7148)
- Unicorn-57079.exe (PID: 8784)
- Unicorn-45612.exe (PID: 8812)
- Unicorn-45612.exe (PID: 8816)
- Unicorn-32845.exe (PID: 8856)
- Unicorn-17735.exe (PID: 7488)
- Unicorn-56302.exe (PID: 8908)
- Unicorn-557.exe (PID: 8952)
- Unicorn-32845.exe (PID: 8848)
- Unicorn-38705.exe (PID: 8980)
- Unicorn-25061.exe (PID: 9024)
- Unicorn-57179.exe (PID: 9004)
- Unicorn-33251.exe (PID: 9084)
- Unicorn-18861.exe (PID: 9176)
- Unicorn-5539.exe (PID: 9136)
- Unicorn-5217.exe (PID: 9092)
- Unicorn-64946.exe (PID: 9128)
- Unicorn-37143.exe (PID: 9192)
- Unicorn-62394.exe (PID: 8372)
- Unicorn-61647.exe (PID: 8560)
- Unicorn-43173.exe (PID: 5528)
- Unicorn-37143.exe (PID: 9184)
- Unicorn-61647.exe (PID: 8520)
- Unicorn-65352.exe (PID: 7568)
- Unicorn-57563.exe (PID: 8620)
- Unicorn-56801.exe (PID: 8564)
- Unicorn-49130.exe (PID: 8808)
- Unicorn-64096.exe (PID: 8976)
- Unicorn-9685.exe (PID: 8904)
- Unicorn-43709.exe (PID: 8324)
- Unicorn-21383.exe (PID: 8508)
- Unicorn-24018.exe (PID: 7852)
- Unicorn-62123.exe (PID: 9220)
- Unicorn-16145.exe (PID: 3332)
- Unicorn-1325.exe (PID: 9228)
- Unicorn-6892.exe (PID: 9252)
- Unicorn-54418.exe (PID: 9272)
- Unicorn-52457.exe (PID: 9292)
- Unicorn-36121.exe (PID: 9320)
- Unicorn-22285.exe (PID: 9344)
- Unicorn-25623.exe (PID: 9440)
- Unicorn-9862.exe (PID: 9500)
- Unicorn-15316.exe (PID: 9476)
- Unicorn-22115.exe (PID: 9524)
- Unicorn-50438.exe (PID: 9592)
- Unicorn-57288.exe (PID: 9912)
- Unicorn-53396.exe (PID: 9684)
- Unicorn-56349.exe (PID: 9508)
- Unicorn-3732.exe (PID: 9484)
- Unicorn-36505.exe (PID: 9548)
- Unicorn-50703.exe (PID: 9604)
- Unicorn-46619.exe (PID: 9636)
- Unicorn-30261.exe (PID: 9556)
- Unicorn-40589.exe (PID: 9532)
- Unicorn-50703.exe (PID: 9600)
- Unicorn-7724.exe (PID: 9720)
- Unicorn-11232.exe (PID: 9468)
- Unicorn-52265.exe (PID: 9540)
- Unicorn-17354.exe (PID: 9648)
- Unicorn-1117.exe (PID: 9936)
- Unicorn-28699.exe (PID: 9844)
- Unicorn-48465.exe (PID: 9888)
- Unicorn-47003.exe (PID: 9984)
- Unicorn-39635.exe (PID: 9836)
- Unicorn-26391.exe (PID: 10000)
- Unicorn-50987.exe (PID: 10036)
- Unicorn-23420.exe (PID: 8944)
- Unicorn-30859.exe (PID: 10120)
- Unicorn-12555.exe (PID: 10072)
- Unicorn-29659.exe (PID: 10092)
- Unicorn-3847.exe (PID: 8032)
- Unicorn-26674.exe (PID: 10140)
- Unicorn-52327.exe (PID: 8756)
- Unicorn-59063.exe (PID: 10052)
- Unicorn-23075.exe (PID: 10220)
- Unicorn-11761.exe (PID: 6988)
- Unicorn-43495.exe (PID: 5544)
- Unicorn-43495.exe (PID: 668)
- Unicorn-58357.exe (PID: 9768)
- Unicorn-64491.exe (PID: 1132)
- Unicorn-54356.exe (PID: 4488)
- Unicorn-55561.exe (PID: 4220)
- Unicorn-48902.exe (PID: 8516)
- Unicorn-27278.exe (PID: 4988)
- Unicorn-15190.exe (PID: 10244)
- Unicorn-7122.exe (PID: 2064)
- Unicorn-7122.exe (PID: 2332)
- Unicorn-36649.exe (PID: 10424)
- Unicorn-14283.exe (PID: 10312)
- Unicorn-4792.exe (PID: 10200)
- Unicorn-13846.exe (PID: 9616)
- Unicorn-6930.exe (PID: 10184)
- Unicorn-48565.exe (PID: 9852)
- Unicorn-2249.exe (PID: 9492)
- Unicorn-64610.exe (PID: 10284)
- Unicorn-3422.exe (PID: 10388)
- Unicorn-14091.exe (PID: 10408)
- Unicorn-62114.exe (PID: 9516)
- Unicorn-55145.exe (PID: 10448)
- Unicorn-27029.exe (PID: 9160)
- Unicorn-26648.exe (PID: 10804)
- Unicorn-63405.exe (PID: 10480)
- Unicorn-20719.exe (PID: 10708)
- Unicorn-34624.exe (PID: 10572)
- Unicorn-42701.exe (PID: 10652)
- Unicorn-39001.exe (PID: 10844)
- Unicorn-106.exe (PID: 10760)
- Unicorn-44455.exe (PID: 10304)
- Unicorn-64875.exe (PID: 10292)
- Unicorn-27495.exe (PID: 10724)
- Unicorn-23049.exe (PID: 10976)
- Unicorn-32779.exe (PID: 10816)
- Unicorn-60189.exe (PID: 11232)
- Unicorn-32399.exe (PID: 9572)
- Unicorn-47553.exe (PID: 11044)
- Unicorn-22857.exe (PID: 11064)
- Unicorn-52213.exe (PID: 11128)
- Unicorn-25470.exe (PID: 11164)
- Unicorn-17211.exe (PID: 11256)
- Unicorn-60381.exe (PID: 11100)
- Unicorn-52213.exe (PID: 11136)
- Unicorn-19847.exe (PID: 8632)
- Unicorn-14972.exe (PID: 10908)
- Unicorn-62690.exe (PID: 10944)
- Unicorn-14859.exe (PID: 10860)
- Unicorn-21465.exe (PID: 11084)
- Unicorn-29463.exe (PID: 11200)
- Unicorn-59924.exe (PID: 11224)
- Unicorn-57236.exe (PID: 11296)
- Unicorn-10173.exe (PID: 10612)
- Unicorn-21849.exe (PID: 10544)
- Unicorn-34485.exe (PID: 11380)
Starts itself from another location
- Unicorn-47039.exe (PID: 3192)
- 1 (483).exe (PID: 1300)
- Unicorn-23495.exe (PID: 5244)
- Unicorn-38439.exe (PID: 300)
- Unicorn-34761.exe (PID: 6800)
- Unicorn-4034.exe (PID: 5512)
- Unicorn-51189.exe (PID: 6964)
- Unicorn-37453.exe (PID: 5176)
- Unicorn-2233.exe (PID: 5984)
- Unicorn-30821.exe (PID: 6080)
- Unicorn-60993.exe (PID: 1388)
- Unicorn-47179.exe (PID: 5756)
- Unicorn-32880.exe (PID: 5228)
- Unicorn-25197.exe (PID: 4272)
- Unicorn-15623.exe (PID: 7200)
- Unicorn-49264.exe (PID: 7228)
- Unicorn-42819.exe (PID: 7184)
- Unicorn-36297.exe (PID: 1616)
- Unicorn-13847.exe (PID: 7264)
- Unicorn-7262.exe (PID: 7256)
- Unicorn-46057.exe (PID: 7312)
- Unicorn-30698.exe (PID: 7340)
- Unicorn-5700.exe (PID: 7364)
- Unicorn-50817.exe (PID: 7412)
- Unicorn-17377.exe (PID: 7288)
- Unicorn-16453.exe (PID: 6752)
- Unicorn-5700.exe (PID: 7356)
- Unicorn-33718.exe (PID: 7448)
- Unicorn-61678.exe (PID: 7388)
- Unicorn-34662.exe (PID: 2552)
- Unicorn-42384.exe (PID: 7432)
- Unicorn-10552.exe (PID: 7660)
- Unicorn-43780.exe (PID: 7692)
- Unicorn-44356.exe (PID: 7768)
- Unicorn-37579.exe (PID: 7776)
- Unicorn-51969.exe (PID: 7792)
- Unicorn-41087.exe (PID: 7736)
- Unicorn-6395.exe (PID: 7876)
- Unicorn-31448.exe (PID: 7760)
- Unicorn-17927.exe (PID: 8132)
- Unicorn-52737.exe (PID: 8156)
- Unicorn-38901.exe (PID: 2320)
- Unicorn-62851.exe (PID: 7148)
- Unicorn-17735.exe (PID: 7488)
- Unicorn-29987.exe (PID: 1672)
- Unicorn-57376.exe (PID: 904)
- Unicorn-23765.exe (PID: 7632)
- Unicorn-58575.exe (PID: 7396)
- Unicorn-44377.exe (PID: 7176)
- Unicorn-38709.exe (PID: 7308)
- Unicorn-22783.exe (PID: 7440)
- Unicorn-23765.exe (PID: 2644)
- Unicorn-19415.exe (PID: 5800)
- Unicorn-65352.exe (PID: 7568)
- Unicorn-7027.exe (PID: 7936)
- Unicorn-33002.exe (PID: 7668)
- Unicorn-19487.exe (PID: 7612)
- Unicorn-7027.exe (PID: 7900)
- Unicorn-13136.exe (PID: 7884)
- Unicorn-24018.exe (PID: 7852)
- Unicorn-62473.exe (PID: 8012)
- Unicorn-33002.exe (PID: 7652)
- Unicorn-13157.exe (PID: 7596)
- Unicorn-20065.exe (PID: 8112)
- Unicorn-9850.exe (PID: 8164)
- Unicorn-20065.exe (PID: 8104)
- Unicorn-49421.exe (PID: 6004)
- Unicorn-60282.exe (PID: 4336)
- Unicorn-61652.exe (PID: 8180)
- Unicorn-49784.exe (PID: 8224)
- Unicorn-22678.exe (PID: 8064)
- Unicorn-51367.exe (PID: 8044)
- Unicorn-22779.exe (PID: 4244)
- Unicorn-51367.exe (PID: 8072)
- Unicorn-3847.exe (PID: 8032)
- Unicorn-28809.exe (PID: 8080)
- Unicorn-35585.exe (PID: 8048)
- Unicorn-4112.exe (PID: 8208)
- Unicorn-64803.exe (PID: 8216)
- Unicorn-11273.exe (PID: 8464)
- Unicorn-16941.exe (PID: 8416)
- Unicorn-21963.exe (PID: 8544)
- Unicorn-43391.exe (PID: 8484)
- Unicorn-5456.exe (PID: 8604)
- Unicorn-19847.exe (PID: 8632)
- Unicorn-27914.exe (PID: 8692)
- Unicorn-19847.exe (PID: 8636)
- Unicorn-7137.exe (PID: 8672)
- Unicorn-20209.exe (PID: 8732)
- Unicorn-60805.exe (PID: 8184)
- Unicorn-45612.exe (PID: 8816)
- Unicorn-45612.exe (PID: 8812)
- Unicorn-56302.exe (PID: 8908)
- Unicorn-32845.exe (PID: 8848)
- Unicorn-557.exe (PID: 8952)
- Unicorn-38705.exe (PID: 8980)
- Unicorn-25061.exe (PID: 9024)
- Unicorn-33251.exe (PID: 9084)
- Unicorn-57179.exe (PID: 9004)
- Unicorn-5217.exe (PID: 9092)
- Unicorn-64946.exe (PID: 9128)
- Unicorn-18861.exe (PID: 9176)
- Unicorn-27029.exe (PID: 9160)
- Unicorn-37143.exe (PID: 9192)
- Unicorn-62394.exe (PID: 8372)
- Unicorn-61647.exe (PID: 8560)
- Unicorn-43173.exe (PID: 5528)
- Unicorn-37143.exe (PID: 9184)
- Unicorn-56801.exe (PID: 8564)
- Unicorn-61647.exe (PID: 8520)
- Unicorn-57563.exe (PID: 8620)
- Unicorn-23420.exe (PID: 8944)
- Unicorn-64096.exe (PID: 8976)
- Unicorn-49130.exe (PID: 8808)
- Unicorn-9685.exe (PID: 8904)
- Unicorn-43709.exe (PID: 8324)
- Unicorn-16145.exe (PID: 3332)
- Unicorn-1325.exe (PID: 9228)
- Unicorn-6892.exe (PID: 9252)
- Unicorn-54418.exe (PID: 9272)
- Unicorn-52457.exe (PID: 9292)
- Unicorn-22285.exe (PID: 9344)
- Unicorn-36121.exe (PID: 9320)
- Unicorn-25623.exe (PID: 9440)
- Unicorn-57079.exe (PID: 8784)
- Unicorn-52327.exe (PID: 8756)
- Unicorn-9862.exe (PID: 9500)
- Unicorn-32845.exe (PID: 8856)
- Unicorn-15316.exe (PID: 9476)
- Unicorn-53396.exe (PID: 9684)
- Unicorn-50438.exe (PID: 9592)
- Unicorn-2249.exe (PID: 9492)
- Unicorn-57288.exe (PID: 9912)
- Unicorn-50703.exe (PID: 9604)
- Unicorn-62114.exe (PID: 9516)
- Unicorn-13846.exe (PID: 9616)
- Unicorn-36505.exe (PID: 9548)
- Unicorn-22115.exe (PID: 9524)
- Unicorn-56349.exe (PID: 9508)
- Unicorn-46619.exe (PID: 9636)
- Unicorn-40589.exe (PID: 9532)
- Unicorn-32399.exe (PID: 9572)
- Unicorn-11232.exe (PID: 9468)
- Unicorn-48565.exe (PID: 9852)
- Unicorn-58357.exe (PID: 9768)
- Unicorn-30261.exe (PID: 9556)
- Unicorn-7724.exe (PID: 9720)
- Unicorn-52265.exe (PID: 9540)
- Unicorn-17354.exe (PID: 9648)
- Unicorn-1117.exe (PID: 9936)
- Unicorn-28699.exe (PID: 9844)
- Unicorn-48465.exe (PID: 9888)
- Unicorn-39635.exe (PID: 9836)
- Unicorn-26391.exe (PID: 10000)
- Unicorn-50703.exe (PID: 9600)
- Unicorn-47003.exe (PID: 9984)
- Unicorn-50987.exe (PID: 10036)
- Unicorn-59063.exe (PID: 10052)
- Unicorn-12555.exe (PID: 10072)
- Unicorn-21383.exe (PID: 8508)
Executes application which crashes
- Unicorn-10500.exe (PID: 1348)
- Unicorn-28975.exe (PID: 5408)
INFO
Checks supported languages
- 1 (483).exe (PID: 1300)
- Unicorn-47039.exe (PID: 3192)
- Unicorn-38439.exe (PID: 300)
- Unicorn-4034.exe (PID: 5512)
- Unicorn-23495.exe (PID: 5244)
- Unicorn-34761.exe (PID: 6800)
- Unicorn-60993.exe (PID: 1388)
- Unicorn-2233.exe (PID: 5984)
- Unicorn-36297.exe (PID: 1616)
- Unicorn-30821.exe (PID: 6080)
- Unicorn-51189.exe (PID: 6964)
- Unicorn-37453.exe (PID: 5176)
- Unicorn-34662.exe (PID: 2552)
- Unicorn-16453.exe (PID: 6752)
- Unicorn-32880.exe (PID: 5228)
- Unicorn-47179.exe (PID: 5756)
- Unicorn-25197.exe (PID: 4272)
- Unicorn-42819.exe (PID: 7184)
- Unicorn-15623.exe (PID: 7200)
- Unicorn-49264.exe (PID: 7228)
- Unicorn-13847.exe (PID: 7264)
- Unicorn-7262.exe (PID: 7256)
- Unicorn-17377.exe (PID: 7288)
- Unicorn-46057.exe (PID: 7312)
- Unicorn-5700.exe (PID: 7364)
- Unicorn-30698.exe (PID: 7340)
- Unicorn-5700.exe (PID: 7356)
- Unicorn-42384.exe (PID: 7432)
- Unicorn-22783.exe (PID: 7440)
- Unicorn-33718.exe (PID: 7448)
- Unicorn-61678.exe (PID: 7388)
- Unicorn-50817.exe (PID: 7412)
- Unicorn-10552.exe (PID: 7660)
- Unicorn-43780.exe (PID: 7692)
- Unicorn-44356.exe (PID: 7768)
- Unicorn-6395.exe (PID: 7876)
- Unicorn-37579.exe (PID: 7776)
- Unicorn-51969.exe (PID: 7792)
- Unicorn-31448.exe (PID: 7760)
- Unicorn-41087.exe (PID: 7736)
- Unicorn-52737.exe (PID: 8156)
- Unicorn-17927.exe (PID: 8132)
- Unicorn-60805.exe (PID: 8184)
- Unicorn-38901.exe (PID: 2320)
- Unicorn-62851.exe (PID: 7148)
- Unicorn-57376.exe (PID: 904)
- Unicorn-29987.exe (PID: 1672)
- Unicorn-17735.exe (PID: 7488)
- Unicorn-44377.exe (PID: 7176)
- Unicorn-58575.exe (PID: 7396)
- Unicorn-38709.exe (PID: 7308)
- Unicorn-23765.exe (PID: 2644)
- Unicorn-33002.exe (PID: 7668)
- Unicorn-33002.exe (PID: 7652)
- Unicorn-13136.exe (PID: 7884)
- Unicorn-23765.exe (PID: 7632)
- Unicorn-19415.exe (PID: 5800)
- Unicorn-7027.exe (PID: 7900)
- Unicorn-7027.exe (PID: 7936)
- Unicorn-19487.exe (PID: 7612)
- Unicorn-13157.exe (PID: 7596)
- Unicorn-20065.exe (PID: 8112)
- Unicorn-62473.exe (PID: 8012)
- Unicorn-61652.exe (PID: 8180)
- Unicorn-20065.exe (PID: 8104)
- Unicorn-24018.exe (PID: 7852)
- Unicorn-65352.exe (PID: 7568)
- Unicorn-9850.exe (PID: 8164)
- Unicorn-22779.exe (PID: 4244)
- Unicorn-60282.exe (PID: 4336)
- Unicorn-49421.exe (PID: 6004)
- Unicorn-28809.exe (PID: 8080)
- Unicorn-64803.exe (PID: 8216)
- Unicorn-51367.exe (PID: 8044)
- Unicorn-3847.exe (PID: 8032)
- Unicorn-35585.exe (PID: 8048)
- Unicorn-49784.exe (PID: 8224)
- Unicorn-4112.exe (PID: 8208)
- Unicorn-51367.exe (PID: 8072)
- Unicorn-22678.exe (PID: 8064)
- Unicorn-11273.exe (PID: 8464)
- Unicorn-43391.exe (PID: 8484)
- Unicorn-21963.exe (PID: 8544)
- Unicorn-5456.exe (PID: 8604)
- Unicorn-16941.exe (PID: 8416)
- Unicorn-19847.exe (PID: 8632)
- Unicorn-7137.exe (PID: 8672)
- Unicorn-27914.exe (PID: 8692)
- Unicorn-20209.exe (PID: 8732)
- Unicorn-19847.exe (PID: 8636)
- Unicorn-52327.exe (PID: 8756)
- Unicorn-57079.exe (PID: 8784)
- Unicorn-32845.exe (PID: 8848)
- Unicorn-45612.exe (PID: 8812)
- Unicorn-45612.exe (PID: 8816)
- Unicorn-32845.exe (PID: 8856)
- Unicorn-56302.exe (PID: 8908)
- Unicorn-557.exe (PID: 8952)
- Unicorn-38705.exe (PID: 8980)
- Unicorn-57179.exe (PID: 9004)
- Unicorn-25061.exe (PID: 9024)
- Unicorn-5539.exe (PID: 9136)
- Unicorn-33251.exe (PID: 9084)
- Unicorn-5217.exe (PID: 9092)
- Unicorn-64946.exe (PID: 9128)
- Unicorn-27029.exe (PID: 9160)
- Unicorn-62394.exe (PID: 8372)
- Unicorn-37143.exe (PID: 9192)
- Unicorn-37143.exe (PID: 9184)
- Unicorn-18861.exe (PID: 9176)
- Unicorn-10500.exe (PID: 1348)
- Unicorn-28975.exe (PID: 5408)
- Unicorn-9685.exe (PID: 8904)
- Unicorn-61647.exe (PID: 8520)
- Unicorn-56801.exe (PID: 8564)
- Unicorn-43173.exe (PID: 5528)
- Unicorn-61647.exe (PID: 8560)
- Unicorn-57563.exe (PID: 8620)
- Unicorn-49130.exe (PID: 8808)
- Unicorn-23420.exe (PID: 8944)
- Unicorn-64096.exe (PID: 8976)
- Unicorn-21383.exe (PID: 8508)
- Unicorn-43709.exe (PID: 8324)
- Unicorn-16145.exe (PID: 3332)
- Unicorn-62123.exe (PID: 9220)
- Unicorn-54418.exe (PID: 9272)
- Unicorn-52457.exe (PID: 9292)
- Unicorn-36121.exe (PID: 9320)
- Unicorn-1325.exe (PID: 9228)
- Unicorn-6892.exe (PID: 9252)
- Unicorn-22285.exe (PID: 9344)
- Unicorn-25623.exe (PID: 9440)
- Unicorn-40589.exe (PID: 9532)
- Unicorn-62114.exe (PID: 9516)
- Unicorn-11232.exe (PID: 9468)
- Unicorn-3732.exe (PID: 9484)
- Unicorn-15316.exe (PID: 9476)
- Unicorn-50438.exe (PID: 9592)
- Unicorn-50703.exe (PID: 9604)
- Unicorn-13846.exe (PID: 9616)
- Unicorn-56349.exe (PID: 9508)
- Unicorn-9862.exe (PID: 9500)
- Unicorn-22115.exe (PID: 9524)
- Unicorn-32399.exe (PID: 9572)
- Unicorn-50703.exe (PID: 9600)
- Unicorn-53396.exe (PID: 9684)
- Unicorn-2249.exe (PID: 9492)
- Unicorn-46619.exe (PID: 9636)
- Unicorn-36505.exe (PID: 9548)
- Unicorn-58357.exe (PID: 9768)
- Unicorn-7724.exe (PID: 9720)
- Unicorn-39635.exe (PID: 9836)
- Unicorn-30261.exe (PID: 9556)
- Unicorn-17354.exe (PID: 9648)
- Unicorn-52265.exe (PID: 9540)
- Unicorn-48465.exe (PID: 9888)
- Unicorn-57288.exe (PID: 9912)
- Unicorn-26391.exe (PID: 10000)
- Unicorn-47003.exe (PID: 9984)
- Unicorn-50987.exe (PID: 10036)
- Unicorn-48565.exe (PID: 9852)
- Unicorn-28699.exe (PID: 9844)
- Unicorn-1117.exe (PID: 9936)
- Unicorn-59063.exe (PID: 10052)
- Unicorn-12555.exe (PID: 10072)
- Unicorn-29659.exe (PID: 10092)
- Unicorn-30859.exe (PID: 10120)
- Unicorn-26674.exe (PID: 10140)
- Unicorn-4792.exe (PID: 10200)
- Unicorn-23075.exe (PID: 10220)
- Unicorn-43495.exe (PID: 668)
- Unicorn-43495.exe (PID: 5544)
- Unicorn-54356.exe (PID: 4488)
- Unicorn-6930.exe (PID: 10184)
- Unicorn-48902.exe (PID: 8516)
- Unicorn-27278.exe (PID: 4988)
- Unicorn-55561.exe (PID: 4220)
- Unicorn-64491.exe (PID: 1132)
- Unicorn-11761.exe (PID: 6988)
- Unicorn-7122.exe (PID: 2064)
- Unicorn-7122.exe (PID: 2332)
- Unicorn-44455.exe (PID: 10304)
- Unicorn-64610.exe (PID: 10284)
- Unicorn-64875.exe (PID: 10292)
- Unicorn-14283.exe (PID: 10312)
- Unicorn-3422.exe (PID: 10388)
- Unicorn-36649.exe (PID: 10424)
- Unicorn-14091.exe (PID: 10408)
- Unicorn-15190.exe (PID: 10244)
- Unicorn-34624.exe (PID: 10572)
- Unicorn-42701.exe (PID: 10652)
- Unicorn-55145.exe (PID: 10448)
- Unicorn-63405.exe (PID: 10480)
- Unicorn-20719.exe (PID: 10708)
- Unicorn-27495.exe (PID: 10724)
- Unicorn-106.exe (PID: 10760)
- Unicorn-32779.exe (PID: 10816)
- Unicorn-26648.exe (PID: 10804)
- Unicorn-14859.exe (PID: 10860)
- Unicorn-14972.exe (PID: 10908)
- Unicorn-62690.exe (PID: 10944)
- Unicorn-23049.exe (PID: 10976)
- Unicorn-39001.exe (PID: 10844)
- Unicorn-47553.exe (PID: 11044)
- Unicorn-21465.exe (PID: 11084)
- Unicorn-60381.exe (PID: 11100)
- Unicorn-22857.exe (PID: 11064)
- Unicorn-25470.exe (PID: 11164)
- Unicorn-60189.exe (PID: 11232)
- Unicorn-52213.exe (PID: 11136)
- Unicorn-52213.exe (PID: 11128)
- Unicorn-29463.exe (PID: 11200)
- Unicorn-41715.exe (PID: 10552)
- Unicorn-10173.exe (PID: 10612)
- Unicorn-21849.exe (PID: 10544)
- Unicorn-64849.exe (PID: 10736)
- Unicorn-59924.exe (PID: 11224)
- Unicorn-17211.exe (PID: 11256)
- Unicorn-9618.exe (PID: 6972)
- Unicorn-57236.exe (PID: 11296)
- Unicorn-22425.exe (PID: 11284)
- Unicorn-50459.exe (PID: 6192)
- Unicorn-5434.exe (PID: 11304)
- Unicorn-3204.exe (PID: 11340)
- Unicorn-44984.exe (PID: 6852)
- Unicorn-34485.exe (PID: 11380)
- Unicorn-19541.exe (PID: 11440)
- Unicorn-15456.exe (PID: 11416)
- Unicorn-15456.exe (PID: 11408)
- Unicorn-63842.exe (PID: 11520)
- Unicorn-34507.exe (PID: 11484)
- Unicorn-6903.exe (PID: 11552)
- Unicorn-63842.exe (PID: 11512)
- Unicorn-52027.exe (PID: 11604)
- Unicorn-61704.exe (PID: 11568)
- Unicorn-37007.exe (PID: 11592)
- Unicorn-61512.exe (PID: 11676)
- Unicorn-51446.exe (PID: 11660)
- Unicorn-40437.exe (PID: 11652)
- Unicorn-6910.exe (PID: 11668)
- Unicorn-21570.exe (PID: 11720)
- Unicorn-58554.exe (PID: 11632)
- Unicorn-44965.exe (PID: 11736)
- Unicorn-6302.exe (PID: 11748)
- Unicorn-61433.exe (PID: 11784)
- Unicorn-1761.exe (PID: 11800)
- Unicorn-59130.exe (PID: 11832)
- Unicorn-41013.exe (PID: 11840)
- Unicorn-15155.exe (PID: 11916)
- Unicorn-53173.exe (PID: 11884)
- Unicorn-47506.exe (PID: 11928)
- Unicorn-51782.exe (PID: 11892)
- Unicorn-14178.exe (PID: 11980)
- Unicorn-35083.exe (PID: 12020)
- Unicorn-35637.exe (PID: 12052)
- Unicorn-18646.exe (PID: 12084)
- Unicorn-35637.exe (PID: 12060)
- Unicorn-35637.exe (PID: 12068)
- Unicorn-16225.exe (PID: 11956)
- Unicorn-49373.exe (PID: 12076)
- Unicorn-4911.exe (PID: 12196)
- Unicorn-22730.exe (PID: 12152)
- Unicorn-8175.exe (PID: 12208)
- Unicorn-54112.exe (PID: 12216)
- Unicorn-15793.exe (PID: 12244)
- Unicorn-54112.exe (PID: 12224)
- Unicorn-46573.exe (PID: 12168)
- Unicorn-29528.exe (PID: 12252)
- Unicorn-58217.exe (PID: 12280)
- Unicorn-4911.exe (PID: 12128)
- Unicorn-8175.exe (PID: 8388)
- Unicorn-7678.exe (PID: 12120)
- Unicorn-39721.exe (PID: 12100)
- Unicorn-51419.exe (PID: 12136)
- Unicorn-35637.exe (PID: 12144)
- Unicorn-27390.exe (PID: 7012)
- Unicorn-22730.exe (PID: 12108)
- Unicorn-8055.exe (PID: 4300)
- Unicorn-13655.exe (PID: 12360)
- Unicorn-41457.exe (PID: 12400)
- Unicorn-5931.exe (PID: 12428)
- Unicorn-16237.exe (PID: 12448)
- Unicorn-54120.exe (PID: 12480)
- Unicorn-31918.exe (PID: 12496)
- Unicorn-26351.exe (PID: 12488)
- Unicorn-7625.exe (PID: 4452)
- Unicorn-55238.exe (PID: 12160)
- Unicorn-16919.exe (PID: 12300)
- Unicorn-25252.exe (PID: 12372)
- Unicorn-27743.exe (PID: 12532)
- Unicorn-1100.exe (PID: 12552)
- Unicorn-16621.exe (PID: 12620)
- Unicorn-50420.exe (PID: 12656)
- Unicorn-62837.exe (PID: 12716)
- Unicorn-14291.exe (PID: 12764)
- Unicorn-60507.exe (PID: 12564)
- Unicorn-49678.exe (PID: 12800)
- Unicorn-53570.exe (PID: 12968)
- Unicorn-41509.exe (PID: 12856)
- Unicorn-2423.exe (PID: 12876)
- Unicorn-2423.exe (PID: 12884)
- Unicorn-7990.exe (PID: 12896)
- Unicorn-47969.exe (PID: 12980)
- Unicorn-1768.exe (PID: 12960)
- Unicorn-39293.exe (PID: 13008)
- Unicorn-36492.exe (PID: 13020)
- Unicorn-39755.exe (PID: 13084)
- Unicorn-51453.exe (PID: 13120)
- Unicorn-51188.exe (PID: 13104)
- Unicorn-43285.exe (PID: 13160)
- Unicorn-39755.exe (PID: 13076)
- Unicorn-17773.exe (PID: 13252)
- Unicorn-45045.exe (PID: 13216)
- Unicorn-8950.exe (PID: 13236)
- Unicorn-25286.exe (PID: 7496)
- Unicorn-31971.exe (PID: 13304)
- Unicorn-60097.exe (PID: 4572)
- Unicorn-14888.exe (PID: 13348)
- Unicorn-18973.exe (PID: 13356)
- Unicorn-20653.exe (PID: 13408)
- Unicorn-48308.exe (PID: 13400)
- Unicorn-18973.exe (PID: 13364)
- Unicorn-20919.exe (PID: 13424)
- Unicorn-8666.exe (PID: 13472)
- Unicorn-16835.exe (PID: 13456)
- Unicorn-43477.exe (PID: 13480)
- Unicorn-15199.exe (PID: 13524)
- Unicorn-20103.exe (PID: 13672)
- Unicorn-15464.exe (PID: 13532)
- Unicorn-31225.exe (PID: 13560)
- Unicorn-43477.exe (PID: 13488)
- Unicorn-47561.exe (PID: 13448)
- Unicorn-35309.exe (PID: 13496)
- Unicorn-19549.exe (PID: 13548)
- Unicorn-8666.exe (PID: 13464)
- Unicorn-19357.exe (PID: 13720)
- Unicorn-44608.exe (PID: 13736)
- Unicorn-34624.exe (PID: 13784)
- Unicorn-58251.exe (PID: 13700)
- Unicorn-15827.exe (PID: 13836)
- Unicorn-34624.exe (PID: 13792)
- Unicorn-58827.exe (PID: 13876)
- Unicorn-35693.exe (PID: 13852)
- Unicorn-25963.exe (PID: 13964)
- Unicorn-7004.exe (PID: 13768)
- Unicorn-13134.exe (PID: 13844)
- Unicorn-60197.exe (PID: 13760)
- Unicorn-28655.exe (PID: 13972)
- Unicorn-48421.exe (PID: 14016)
- Unicorn-36269.exe (PID: 14024)
- Unicorn-33866.exe (PID: 14056)
- Unicorn-42199.exe (PID: 14072)
- Unicorn-28485.exe (PID: 14120)
- Unicorn-27093.exe (PID: 14132)
- Unicorn-29039.exe (PID: 14180)
- Unicorn-25698.exe (PID: 13956)
- Unicorn-6097.exe (PID: 13948)
- Unicorn-41099.exe (PID: 14296)
- Unicorn-24955.exe (PID: 14196)
- Unicorn-36653.exe (PID: 14212)
- Unicorn-9910.exe (PID: 14236)
- Unicorn-49460.exe (PID: 14268)
- Unicorn-25339.exe (PID: 14344)
- Unicorn-41099.exe (PID: 14284)
- Unicorn-51982.exe (PID: 4024)
- Unicorn-32112.exe (PID: 14328)
- Unicorn-62917.exe (PID: 2656)
- Unicorn-20509.exe (PID: 14380)
- Unicorn-22766.exe (PID: 14624)
- Unicorn-38883.exe (PID: 14500)
- Unicorn-8156.exe (PID: 14452)
- Unicorn-25147.exe (PID: 14492)
- Unicorn-59958.exe (PID: 14516)
- Unicorn-47706.exe (PID: 14524)
- Unicorn-27861.exe (PID: 14568)
- Unicorn-33315.exe (PID: 14532)
- Unicorn-47051.exe (PID: 14468)
- Unicorn-38983.exe (PID: 14388)
- Unicorn-63639.exe (PID: 14880)
- Unicorn-37975.exe (PID: 14632)
- Unicorn-5111.exe (PID: 14752)
- Unicorn-49573.exe (PID: 14744)
- Unicorn-31753.exe (PID: 14780)
- Unicorn-41867.exe (PID: 14860)
- Unicorn-57741.exe (PID: 14892)
- Unicorn-8540.exe (PID: 14868)
- Unicorn-23506.exe (PID: 14944)
- Unicorn-55318.exe (PID: 15012)
- Unicorn-9216.exe (PID: 14976)
- Unicorn-16900.exe (PID: 14684)
- Unicorn-5111.exe (PID: 14732)
- Unicorn-47654.exe (PID: 15096)
- Unicorn-20514.exe (PID: 15056)
- Unicorn-56179.exe (PID: 15004)
- Unicorn-37805.exe (PID: 15048)
- Unicorn-41789.exe (PID: 15088)
- Unicorn-22453.exe (PID: 15080)
- Unicorn-12653.exe (PID: 15072)
The sample compiled with chinese language support
- 1 (483).exe (PID: 1300)
- Unicorn-33002.exe (PID: 7652)
- Unicorn-37143.exe (PID: 9184)
- Unicorn-37453.exe (PID: 5176)
- Unicorn-21465.exe (PID: 11084)
- Unicorn-50987.exe (PID: 10036)
- Unicorn-59063.exe (PID: 10052)
- Unicorn-16145.exe (PID: 3332)
- Unicorn-9850.exe (PID: 8164)
- Unicorn-29463.exe (PID: 11200)
- Unicorn-62394.exe (PID: 8372)
- Unicorn-59924.exe (PID: 11224)
- Unicorn-62123.exe (PID: 9220)
- Unicorn-42701.exe (PID: 10652)
- Unicorn-27495.exe (PID: 10724)
- Unicorn-50703.exe (PID: 9600)
- Unicorn-43780.exe (PID: 7692)
- Unicorn-1325.exe (PID: 9228)
- Unicorn-32880.exe (PID: 5228)
- Unicorn-30859.exe (PID: 10120)
- Unicorn-20065.exe (PID: 8112)
- Unicorn-61647.exe (PID: 8560)
- Unicorn-65352.exe (PID: 7568)
- Unicorn-51367.exe (PID: 8044)
- Unicorn-2233.exe (PID: 5984)
- Unicorn-3847.exe (PID: 8032)
- Unicorn-60993.exe (PID: 1388)
- Unicorn-41087.exe (PID: 7736)
- Unicorn-49264.exe (PID: 7228)
- Unicorn-49784.exe (PID: 8224)
- Unicorn-31448.exe (PID: 7760)
- Unicorn-52457.exe (PID: 9292)
- Unicorn-35585.exe (PID: 8048)
- Unicorn-10552.exe (PID: 7660)
- Unicorn-25197.exe (PID: 4272)
- Unicorn-60282.exe (PID: 4336)
- Unicorn-54418.exe (PID: 9272)
- Unicorn-57236.exe (PID: 11296)
- Unicorn-10173.exe (PID: 10612)
- Unicorn-43173.exe (PID: 5528)
- Unicorn-6892.exe (PID: 9252)
- Unicorn-9685.exe (PID: 8904)
- Unicorn-37579.exe (PID: 7776)
- Unicorn-34761.exe (PID: 6800)
- Unicorn-28809.exe (PID: 8080)
- Unicorn-21849.exe (PID: 10544)
- Unicorn-23495.exe (PID: 5244)
- Unicorn-39001.exe (PID: 10844)
- Unicorn-15623.exe (PID: 7200)
- Unicorn-42819.exe (PID: 7184)
- Unicorn-106.exe (PID: 10760)
- Unicorn-22779.exe (PID: 4244)
- Unicorn-6395.exe (PID: 7876)
- Unicorn-11273.exe (PID: 8464)
- Unicorn-36121.exe (PID: 9320)
- Unicorn-16941.exe (PID: 8416)
Reads the computer name
- Unicorn-47039.exe (PID: 3192)
- 1 (483).exe (PID: 1300)
- Unicorn-23495.exe (PID: 5244)
- Unicorn-38439.exe (PID: 300)
- Unicorn-51189.exe (PID: 6964)
- Unicorn-37453.exe (PID: 5176)
- Unicorn-60993.exe (PID: 1388)
- Unicorn-34761.exe (PID: 6800)
- Unicorn-4034.exe (PID: 5512)
- Unicorn-2233.exe (PID: 5984)
- Unicorn-36297.exe (PID: 1616)
- Unicorn-30821.exe (PID: 6080)
- Unicorn-47179.exe (PID: 5756)
- Unicorn-34662.exe (PID: 2552)
- Unicorn-16453.exe (PID: 6752)
- Unicorn-32880.exe (PID: 5228)
- Unicorn-25197.exe (PID: 4272)
- Unicorn-42819.exe (PID: 7184)
- Unicorn-15623.exe (PID: 7200)
- Unicorn-49264.exe (PID: 7228)
- Unicorn-13847.exe (PID: 7264)
- Unicorn-7262.exe (PID: 7256)
- Unicorn-17377.exe (PID: 7288)
- Unicorn-30698.exe (PID: 7340)
- Unicorn-46057.exe (PID: 7312)
- Unicorn-5700.exe (PID: 7364)
- Unicorn-50817.exe (PID: 7412)
- Unicorn-5700.exe (PID: 7356)
- Unicorn-22783.exe (PID: 7440)
- Unicorn-61678.exe (PID: 7388)
- Unicorn-10552.exe (PID: 7660)
- Unicorn-43780.exe (PID: 7692)
- Unicorn-33718.exe (PID: 7448)
- Unicorn-42384.exe (PID: 7432)
- Unicorn-31448.exe (PID: 7760)
- Unicorn-6395.exe (PID: 7876)
- Unicorn-44356.exe (PID: 7768)
- Unicorn-41087.exe (PID: 7736)
- Unicorn-37579.exe (PID: 7776)
- Unicorn-51969.exe (PID: 7792)
- Unicorn-17927.exe (PID: 8132)
- Unicorn-52737.exe (PID: 8156)
- Unicorn-62851.exe (PID: 7148)
- Unicorn-38901.exe (PID: 2320)
- Unicorn-60805.exe (PID: 8184)
- Unicorn-57376.exe (PID: 904)
- Unicorn-58575.exe (PID: 7396)
- Unicorn-44377.exe (PID: 7176)
- Unicorn-23765.exe (PID: 7632)
- Unicorn-17735.exe (PID: 7488)
- Unicorn-29987.exe (PID: 1672)
- Unicorn-38709.exe (PID: 7308)
- Unicorn-23765.exe (PID: 2644)
- Unicorn-65352.exe (PID: 7568)
- Unicorn-19415.exe (PID: 5800)
- Unicorn-33002.exe (PID: 7668)
- Unicorn-7027.exe (PID: 7936)
- Unicorn-7027.exe (PID: 7900)
- Unicorn-19487.exe (PID: 7612)
- Unicorn-33002.exe (PID: 7652)
- Unicorn-13157.exe (PID: 7596)
- Unicorn-20065.exe (PID: 8112)
- Unicorn-62473.exe (PID: 8012)
- Unicorn-24018.exe (PID: 7852)
- Unicorn-13136.exe (PID: 7884)
- Unicorn-20065.exe (PID: 8104)
- Unicorn-9850.exe (PID: 8164)
- Unicorn-22779.exe (PID: 4244)
- Unicorn-61652.exe (PID: 8180)
- Unicorn-49421.exe (PID: 6004)
- Unicorn-60282.exe (PID: 4336)
- Unicorn-49784.exe (PID: 8224)
- Unicorn-22678.exe (PID: 8064)
- Unicorn-51367.exe (PID: 8072)
- Unicorn-51367.exe (PID: 8044)
- Unicorn-3847.exe (PID: 8032)
- Unicorn-28809.exe (PID: 8080)
- Unicorn-4112.exe (PID: 8208)
- Unicorn-35585.exe (PID: 8048)
- Unicorn-64803.exe (PID: 8216)
- Unicorn-11273.exe (PID: 8464)
- Unicorn-16941.exe (PID: 8416)
- Unicorn-43391.exe (PID: 8484)
- Unicorn-21963.exe (PID: 8544)
- Unicorn-19847.exe (PID: 8636)
- Unicorn-5456.exe (PID: 8604)
- Unicorn-7137.exe (PID: 8672)
- Unicorn-27914.exe (PID: 8692)
- Unicorn-20209.exe (PID: 8732)
- Unicorn-19847.exe (PID: 8632)
- Unicorn-52327.exe (PID: 8756)
- Unicorn-57079.exe (PID: 8784)
- Unicorn-45612.exe (PID: 8812)
- Unicorn-32845.exe (PID: 8856)
- Unicorn-45612.exe (PID: 8816)
- Unicorn-56302.exe (PID: 8908)
- Unicorn-557.exe (PID: 8952)
- Unicorn-32845.exe (PID: 8848)
- Unicorn-25061.exe (PID: 9024)
- Unicorn-57179.exe (PID: 9004)
- Unicorn-38705.exe (PID: 8980)
- Unicorn-5217.exe (PID: 9092)
- Unicorn-33251.exe (PID: 9084)
- Unicorn-18861.exe (PID: 9176)
- Unicorn-5539.exe (PID: 9136)
- Unicorn-27029.exe (PID: 9160)
- Unicorn-37143.exe (PID: 9192)
- Unicorn-62394.exe (PID: 8372)
- Unicorn-37143.exe (PID: 9184)
- Unicorn-64946.exe (PID: 9128)
- Unicorn-43173.exe (PID: 5528)
- Unicorn-56801.exe (PID: 8564)
- Unicorn-61647.exe (PID: 8560)
- Unicorn-57563.exe (PID: 8620)
- Unicorn-9685.exe (PID: 8904)
- Unicorn-23420.exe (PID: 8944)
- Unicorn-49130.exe (PID: 8808)
- Unicorn-64096.exe (PID: 8976)
- Unicorn-61647.exe (PID: 8520)
- Unicorn-43709.exe (PID: 8324)
- Unicorn-21383.exe (PID: 8508)
- Unicorn-1325.exe (PID: 9228)
- Unicorn-16145.exe (PID: 3332)
- Unicorn-62123.exe (PID: 9220)
- Unicorn-6892.exe (PID: 9252)
- Unicorn-54418.exe (PID: 9272)
- Unicorn-52457.exe (PID: 9292)
- Unicorn-36121.exe (PID: 9320)
- Unicorn-22285.exe (PID: 9344)
- Unicorn-9862.exe (PID: 9500)
- Unicorn-15316.exe (PID: 9476)
- Unicorn-2249.exe (PID: 9492)
- Unicorn-57288.exe (PID: 9912)
- Unicorn-50438.exe (PID: 9592)
- Unicorn-25623.exe (PID: 9440)
- Unicorn-50703.exe (PID: 9604)
- Unicorn-13846.exe (PID: 9616)
- Unicorn-40589.exe (PID: 9532)
- Unicorn-36505.exe (PID: 9548)
- Unicorn-46619.exe (PID: 9636)
- Unicorn-30261.exe (PID: 9556)
- Unicorn-62114.exe (PID: 9516)
- Unicorn-56349.exe (PID: 9508)
- Unicorn-3732.exe (PID: 9484)
- Unicorn-32399.exe (PID: 9572)
- Unicorn-7724.exe (PID: 9720)
- Unicorn-50703.exe (PID: 9600)
- Unicorn-11232.exe (PID: 9468)
- Unicorn-58357.exe (PID: 9768)
- Unicorn-48565.exe (PID: 9852)
- Unicorn-52265.exe (PID: 9540)
- Unicorn-17354.exe (PID: 9648)
- Unicorn-28699.exe (PID: 9844)
- Unicorn-1117.exe (PID: 9936)
- Unicorn-48465.exe (PID: 9888)
- Unicorn-26391.exe (PID: 10000)
- Unicorn-47003.exe (PID: 9984)
- Unicorn-59063.exe (PID: 10052)
- Unicorn-50987.exe (PID: 10036)
- Unicorn-12555.exe (PID: 10072)
- Unicorn-29659.exe (PID: 10092)
- Unicorn-30859.exe (PID: 10120)
Create files in a temporary directory
- Unicorn-38439.exe (PID: 300)
- 1 (483).exe (PID: 1300)
- Unicorn-23495.exe (PID: 5244)
- Unicorn-47039.exe (PID: 3192)
- Unicorn-4034.exe (PID: 5512)
- Unicorn-34761.exe (PID: 6800)
- Unicorn-51189.exe (PID: 6964)
- Unicorn-37453.exe (PID: 5176)
- Unicorn-30821.exe (PID: 6080)
- Unicorn-2233.exe (PID: 5984)
- Unicorn-47179.exe (PID: 5756)
- Unicorn-16453.exe (PID: 6752)
- Unicorn-32880.exe (PID: 5228)
- Unicorn-25197.exe (PID: 4272)
- Unicorn-60993.exe (PID: 1388)
- Unicorn-49264.exe (PID: 7228)
- Unicorn-7262.exe (PID: 7256)
- Unicorn-36297.exe (PID: 1616)
- Unicorn-46057.exe (PID: 7312)
- Unicorn-30698.exe (PID: 7340)
- Unicorn-50817.exe (PID: 7412)
- Unicorn-33718.exe (PID: 7448)
- Unicorn-34662.exe (PID: 2552)
- Unicorn-42384.exe (PID: 7432)
- Unicorn-22783.exe (PID: 7440)
- Unicorn-10552.exe (PID: 7660)
- Unicorn-42819.exe (PID: 7184)
- Unicorn-51969.exe (PID: 7792)
- Unicorn-15623.exe (PID: 7200)
- Unicorn-37579.exe (PID: 7776)
- Unicorn-6395.exe (PID: 7876)
- Unicorn-52737.exe (PID: 8156)
- Unicorn-38901.exe (PID: 2320)
- Unicorn-60805.exe (PID: 8184)
- Unicorn-17377.exe (PID: 7288)
- Unicorn-57376.exe (PID: 904)
- Unicorn-44377.exe (PID: 7176)
- Unicorn-29987.exe (PID: 1672)
- Unicorn-5700.exe (PID: 7364)
- Unicorn-19415.exe (PID: 5800)
- Unicorn-7027.exe (PID: 7936)
- Unicorn-33002.exe (PID: 7668)
- Unicorn-7027.exe (PID: 7900)
- Unicorn-19487.exe (PID: 7612)
- Unicorn-5700.exe (PID: 7356)
- Unicorn-62473.exe (PID: 8012)
- Unicorn-61678.exe (PID: 7388)
- Unicorn-13136.exe (PID: 7884)
- Unicorn-20065.exe (PID: 8104)
- Unicorn-43780.exe (PID: 7692)
- Unicorn-9850.exe (PID: 8164)
- Unicorn-22779.exe (PID: 4244)
- Unicorn-41087.exe (PID: 7736)
- Unicorn-61652.exe (PID: 8180)
- Unicorn-49421.exe (PID: 6004)
- Unicorn-60282.exe (PID: 4336)
- Unicorn-49784.exe (PID: 8224)
- Unicorn-51367.exe (PID: 8072)
- Unicorn-44356.exe (PID: 7768)
- Unicorn-22678.exe (PID: 8064)
- Unicorn-51367.exe (PID: 8044)
- Unicorn-31448.exe (PID: 7760)
- Unicorn-4112.exe (PID: 8208)
- Unicorn-16941.exe (PID: 8416)
- Unicorn-13847.exe (PID: 7264)
- Unicorn-11273.exe (PID: 8464)
- Unicorn-21963.exe (PID: 8544)
- Unicorn-17927.exe (PID: 8132)
- Unicorn-5456.exe (PID: 8604)
- Unicorn-7137.exe (PID: 8672)
- Unicorn-27914.exe (PID: 8692)
- Unicorn-20209.exe (PID: 8732)
- Unicorn-62851.exe (PID: 7148)
- Unicorn-57079.exe (PID: 8784)
- Unicorn-32845.exe (PID: 8856)
- Unicorn-45612.exe (PID: 8812)
- Unicorn-56302.exe (PID: 8908)
- Unicorn-557.exe (PID: 8952)
- Unicorn-38705.exe (PID: 8980)
- Unicorn-25061.exe (PID: 9024)
- Unicorn-58575.exe (PID: 7396)
- Unicorn-23765.exe (PID: 7632)
- Unicorn-33251.exe (PID: 9084)
- Unicorn-57179.exe (PID: 9004)
- Unicorn-64946.exe (PID: 9128)
- Unicorn-38709.exe (PID: 7308)
- Unicorn-18861.exe (PID: 9176)
- Unicorn-27029.exe (PID: 9160)
- Unicorn-5217.exe (PID: 9092)
- Unicorn-37143.exe (PID: 9192)
- Unicorn-62394.exe (PID: 8372)
- Unicorn-37143.exe (PID: 9184)
- Unicorn-61647.exe (PID: 8560)
- Unicorn-23765.exe (PID: 2644)
- Unicorn-43173.exe (PID: 5528)
- Unicorn-56801.exe (PID: 8564)
- Unicorn-61647.exe (PID: 8520)
- Unicorn-65352.exe (PID: 7568)
- Unicorn-57563.exe (PID: 8620)
- Unicorn-23420.exe (PID: 8944)
- Unicorn-49130.exe (PID: 8808)
- Unicorn-64096.exe (PID: 8976)
- Unicorn-33002.exe (PID: 7652)
- Unicorn-21383.exe (PID: 8508)
- Unicorn-43709.exe (PID: 8324)
- Unicorn-24018.exe (PID: 7852)
- Unicorn-13157.exe (PID: 7596)
- Unicorn-62123.exe (PID: 9220)
- Unicorn-16145.exe (PID: 3332)
- Unicorn-20065.exe (PID: 8112)
- Unicorn-1325.exe (PID: 9228)
- Unicorn-54418.exe (PID: 9272)
- Unicorn-35585.exe (PID: 8048)
- Unicorn-6892.exe (PID: 9252)
- Unicorn-28809.exe (PID: 8080)
- Unicorn-52457.exe (PID: 9292)
- Unicorn-64803.exe (PID: 8216)
- Unicorn-43391.exe (PID: 8484)
- Unicorn-36121.exe (PID: 9320)
- Unicorn-22285.exe (PID: 9344)
- Unicorn-19847.exe (PID: 8636)
- Unicorn-9862.exe (PID: 9500)
- Unicorn-25623.exe (PID: 9440)
- Unicorn-17735.exe (PID: 7488)
- Unicorn-57288.exe (PID: 9912)
- Unicorn-15316.exe (PID: 9476)
- Unicorn-45612.exe (PID: 8816)
- Unicorn-32845.exe (PID: 8848)
- Unicorn-53396.exe (PID: 9684)
- Unicorn-22115.exe (PID: 9524)
- Unicorn-50438.exe (PID: 9592)
- Unicorn-56349.exe (PID: 9508)
- Unicorn-40589.exe (PID: 9532)
- Unicorn-50703.exe (PID: 9604)
- Unicorn-36505.exe (PID: 9548)
- Unicorn-46619.exe (PID: 9636)
- Unicorn-3732.exe (PID: 9484)
- Unicorn-30261.exe (PID: 9556)
- Unicorn-11232.exe (PID: 9468)
- Unicorn-50703.exe (PID: 9600)
- Unicorn-1117.exe (PID: 9936)
- Unicorn-7724.exe (PID: 9720)
- Unicorn-52265.exe (PID: 9540)
- Unicorn-17354.exe (PID: 9648)
- Unicorn-48465.exe (PID: 9888)
- Unicorn-28699.exe (PID: 9844)
- Unicorn-39635.exe (PID: 9836)
- Unicorn-5539.exe (PID: 9136)
- Unicorn-47003.exe (PID: 9984)
- Unicorn-26391.exe (PID: 10000)
- Unicorn-50987.exe (PID: 10036)
- Unicorn-59063.exe (PID: 10052)
Reads security settings of Internet Explorer
- BackgroundTransferHost.exe (PID: 7052)
- BackgroundTransferHost.exe (PID: 5328)
- BackgroundTransferHost.exe (PID: 7588)
- BackgroundTransferHost.exe (PID: 8040)
- BackgroundTransferHost.exe (PID: 8300)
Checks proxy server information
- BackgroundTransferHost.exe (PID: 5328)
Reads the software policy settings
- BackgroundTransferHost.exe (PID: 5328)
Creates files or folders in the user directory
- BackgroundTransferHost.exe (PID: 5328)
- WerFault.exe (PID: 10624)
- WerFault.exe (PID: 10616)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable (generic) (52.9) |
|---|---|---|
| .exe | | | Generic Win/DOS Executable (23.5) |
| .exe | | | DOS Executable Generic (23.5) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
550
Monitored processes
416
Malicious processes
62
Suspicious processes
57
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 300 | C:\Users\admin\AppData\Local\Temp\Unicorn-38439.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-38439.exe | 1 (483).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 668 | C:\Users\admin\AppData\Local\Temp\Unicorn-43495.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-43495.exe | Unicorn-19847.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 904 | C:\Users\admin\AppData\Local\Temp\Unicorn-57376.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-57376.exe | Unicorn-30821.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1132 | C:\Users\admin\AppData\Local\Temp\Unicorn-64491.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-64491.exe | Unicorn-20209.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1300 | "C:\Users\admin\AppData\Local\Temp\1 (483).exe" | C:\Users\admin\AppData\Local\Temp\1 (483).exe | explorer.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1348 | C:\Users\admin\AppData\Local\Temp\Unicorn-10500.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-10500.exe | Unicorn-19487.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Exit code: 0 Version: 1.00 Modules
| |||||||||||||||
| 1388 | C:\Users\admin\AppData\Local\Temp\Unicorn-60993.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-60993.exe | Unicorn-34761.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1616 | C:\Users\admin\AppData\Local\Temp\Unicorn-36297.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-36297.exe | Unicorn-4034.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1672 | C:\Users\admin\AppData\Local\Temp\Unicorn-29987.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-29987.exe | Unicorn-46057.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 2064 | C:\Users\admin\AppData\Local\Temp\Unicorn-7122.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-7122.exe | Unicorn-57079.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
13 447
Read events
13 432
Write events
15
Delete events
0
Modification events
| (PID) Process: | (7052) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7052) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7052) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (5328) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (5328) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (5328) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7588) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7588) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7588) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (8040) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
Executable files
1 093
Suspicious files
11
Text files
2
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 1300 | 1 (483).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-34662.exe | executable | |
MD5:4B06C6060546426EA8237AE4987A7975 | SHA256:1887699C912E4EB229070DE1D81E71487DB416D0AE3ECCD99DB3DF79572F4817 | |||
| 1300 | 1 (483).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-47039.exe | executable | |
MD5:28B1ABC51CD5B7CDECBB8DFE44A8C261 | SHA256:79001BB9F939F3CA03280090D2973A1D099077AAC150DA8CC1D26E60623FA153 | |||
| 6964 | Unicorn-51189.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-47179.exe | executable | |
MD5:91C05C7105D107A2FFAF094170305832 | SHA256:CCD6D63FFF039DC7F9781CCAE26B78C6C08BB0AD9B1127F61DA62D5F84BFE595 | |||
| 1300 | 1 (483).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-51189.exe | executable | |
MD5:AF70F2D22F58198B0D367B5BB43479F6 | SHA256:C6F152823C06FB97BDF17CA76810ED2A7C63080292A9758813DFD12C3D191858 | |||
| 5244 | Unicorn-23495.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-34761.exe | executable | |
MD5:908CB2EC7959B5C17520B3DF5BB301D2 | SHA256:E3059FAA6C7E49FA73F9C08A3A5B0956B4C7119914DB7A1EC1D41C9320B236D3 | |||
| 300 | Unicorn-38439.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-4034.exe | executable | |
MD5:E0843EB87676687AF41E486E02939CC3 | SHA256:C7CFF6F0543611A3BE31876148344B556A92DAA3703ACA9BC0FBFDFC23D06FB9 | |||
| 3192 | Unicorn-47039.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-37453.exe | executable | |
MD5:C1DDA5885CC7CCDF66A454A45E41F471 | SHA256:95E8C4DFB12AF72BEA551904CFB759FCB2938E6655BC1150C68C2154EB453DD6 | |||
| 6800 | Unicorn-34761.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-60993.exe | executable | |
MD5:BD01AE0CDEF2A2B12C26B9B8B1B8C1E5 | SHA256:649E8041AA5AEF0E696935FED44A67DBCA95E66CBF809B7B3363AC6B11079D25 | |||
| 5512 | Unicorn-4034.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-36297.exe | executable | |
MD5:683C496E454EE7A2F277098AF7680E8E | SHA256:CB1C5D22CC94E9956A3EE393ACEF2E1791D4F55A4B3A1E9D6D9A24F43AE0F7EA | |||
| 5176 | Unicorn-37453.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-16453.exe | executable | |
MD5:869FAEECE65DE669CA0B619016976542 | SHA256:F38BCD043C53D6C7E0BE24AEB69422B8ADD2FDBD1D1D705BC46735F2DACA147E | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
25
DNS requests
17
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
6544 | svchost.exe | GET | 200 | 23.54.109.203:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
— | — | GET | 200 | 23.48.23.179:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
5328 | BackgroundTransferHost.exe | GET | 200 | 23.54.109.203:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | whitelisted |
8336 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
8336 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
4220 | backgroundTaskHost.exe | GET | 200 | 23.54.109.203:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 51.104.136.2:443 | — | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
— | — | 23.48.23.179:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
2104 | svchost.exe | 51.104.136.2:443 | — | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
3216 | svchost.exe | 40.115.3.253:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.159.129:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 23.54.109.203:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
2112 | svchost.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4220 | backgroundTaskHost.exe | 20.223.35.26:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4220 | backgroundTaskHost.exe | 23.54.109.203:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
arc.msn.com |
| whitelisted |
www.bing.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |