| File name: | 1 (395) |
| Full analysis: | https://app.any.run/tasks/8885f1f4-1831-426f-bdce-831a06539e11 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 19:48:45 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 8ACE629E44567AF076DE042EBA8B9AA0 |
| SHA1: | EA51BEE61888D0EB171455D22CE7518679672EC3 |
| SHA256: | 1D6A7B074A595CE0DADFD00BD0E44D0C8282F97323B31AAA56A8E278B96C9461 |
| SSDEEP: | 3072:bwBUSwrbrDRCV/9XikWSW24F2zGcR/xxfpfu4hQoLcBuI2:bwBUSwrPDcVZWVFiRvfpfu4hQoLcBuI |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- 1 (395).exe (PID: 7320)
- Unicorn-21315.exe (PID: 7584)
- Unicorn-33349.exe (PID: 8140)
- Unicorn-31957.exe (PID: 8160)
- Unicorn-1636.exe (PID: 4164)
- Unicorn-35055.exe (PID: 6656)
- Unicorn-63089.exe (PID: 6480)
- Unicorn-650.exe (PID: 5072)
- Unicorn-7427.exe (PID: 2384)
- Unicorn-31931.exe (PID: 6048)
- Unicorn-39545.exe (PID: 7268)
- Unicorn-37499.exe (PID: 6244)
- Unicorn-31123.exe (PID: 6516)
- Unicorn-58320.exe (PID: 4688)
- Unicorn-18679.exe (PID: 4988)
- Unicorn-35107.exe (PID: 2852)
- Unicorn-2342.exe (PID: 4620)
- Unicorn-33623.exe (PID: 6988)
- Unicorn-10245.exe (PID: 6644)
- Unicorn-2897.exe (PID: 1324)
- Unicorn-2897.exe (PID: 4408)
- Unicorn-39545.exe (PID: 7280)
- Unicorn-48791.exe (PID: 2432)
- Unicorn-30137.exe (PID: 1180)
- Unicorn-45082.exe (PID: 5512)
- Unicorn-26607.exe (PID: 2148)
- Unicorn-62809.exe (PID: 7500)
- Unicorn-1932.exe (PID: 7680)
- Unicorn-19730.exe (PID: 7232)
- Unicorn-53079.exe (PID: 7700)
- Unicorn-44646.exe (PID: 7648)
- Unicorn-1740.exe (PID: 7616)
- Unicorn-1740.exe (PID: 7860)
- Unicorn-32467.exe (PID: 7668)
- Unicorn-22161.exe (PID: 7548)
- Unicorn-26245.exe (PID: 7564)
- Unicorn-63795.exe (PID: 1912)
- Unicorn-63795.exe (PID: 5380)
- Unicorn-26245.exe (PID: 7876)
- Unicorn-26245.exe (PID: 7752)
- Unicorn-22763.exe (PID: 1056)
- Unicorn-18679.exe (PID: 4040)
- Unicorn-13992.exe (PID: 616)
- Unicorn-28937.exe (PID: 7948)
- Unicorn-32366.exe (PID: 7952)
- Unicorn-37319.exe (PID: 4068)
- Unicorn-12902.exe (PID: 2136)
- Unicorn-44096.exe (PID: 5260)
- Unicorn-27013.exe (PID: 4188)
- Unicorn-8630.exe (PID: 2552)
- Unicorn-4454.exe (PID: 5964)
- Unicorn-925.exe (PID: 7888)
- Unicorn-370.exe (PID: 5228)
- Unicorn-59685.exe (PID: 7832)
- Unicorn-2408.exe (PID: 208)
- Unicorn-1501.exe (PID: 4380)
- Unicorn-946.exe (PID: 8180)
- Unicorn-17283.exe (PID: 7780)
- Unicorn-52648.exe (PID: 6228)
- Unicorn-57891.exe (PID: 4112)
- Unicorn-39384.exe (PID: 7544)
- Unicorn-60453.exe (PID: 896)
- Unicorn-48201.exe (PID: 4336)
- Unicorn-18797.exe (PID: 8216)
- Unicorn-13390.exe (PID: 7972)
- Unicorn-22881.exe (PID: 8248)
- Unicorn-13390.exe (PID: 968)
- Unicorn-1740.exe (PID: 7604)
- Unicorn-57692.exe (PID: 8228)
- Unicorn-22881.exe (PID: 8240)
- Unicorn-4407.exe (PID: 8300)
- Unicorn-20189.exe (PID: 8372)
- Unicorn-26245.exe (PID: 7520)
- Unicorn-20189.exe (PID: 8348)
- Unicorn-24827.exe (PID: 8424)
- Unicorn-46831.exe (PID: 8328)
- Unicorn-24827.exe (PID: 8412)
- Unicorn-26245.exe (PID: 7868)
- Unicorn-1580.exe (PID: 2236)
- Unicorn-12575.exe (PID: 8448)
- Unicorn-20088.exe (PID: 8588)
- Unicorn-20189.exe (PID: 8344)
- Unicorn-52596.exe (PID: 8640)
- Unicorn-52596.exe (PID: 8648)
- Unicorn-16105.exe (PID: 8320)
- Unicorn-1714.exe (PID: 8568)
- Unicorn-43301.exe (PID: 8476)
- Unicorn-42647.exe (PID: 8596)
- Unicorn-9690.exe (PID: 8824)
- Unicorn-1714.exe (PID: 8540)
- Unicorn-27395.exe (PID: 8628)
- Unicorn-43364.exe (PID: 6944)
- Unicorn-46731.exe (PID: 8664)
- Unicorn-50915.exe (PID: 8360)
- Unicorn-28937.exe (PID: 7956)
- Unicorn-22135.exe (PID: 8616)
- Unicorn-12575.exe (PID: 8452)
- Unicorn-22135.exe (PID: 8516)
- Unicorn-1714.exe (PID: 8552)
- Unicorn-39847.exe (PID: 8604)
- Unicorn-39873.exe (PID: 7704)
- Unicorn-28937.exe (PID: 7984)
- Unicorn-48538.exe (PID: 7812)
- Unicorn-28937.exe (PID: 7968)
- Unicorn-12575.exe (PID: 8468)
- Unicorn-46731.exe (PID: 8656)
- Unicorn-12404.exe (PID: 8876)
- Unicorn-42673.exe (PID: 7692)
- Unicorn-28937.exe (PID: 8044)
- Unicorn-2077.exe (PID: 8860)
- Unicorn-12548.exe (PID: 6388)
- Unicorn-14085.exe (PID: 9008)
- Unicorn-28832.exe (PID: 8896)
- Unicorn-37463.exe (PID: 8952)
- Unicorn-515.exe (PID: 9064)
- Unicorn-22519.exe (PID: 8960)
- Unicorn-50842.exe (PID: 9072)
- Unicorn-55191.exe (PID: 9032)
- Unicorn-36717.exe (PID: 9148)
- Unicorn-16851.exe (PID: 9132)
- Unicorn-44885.exe (PID: 9100)
- Unicorn-28549.exe (PID: 9040)
- Unicorn-32633.exe (PID: 9108)
- Unicorn-6545.exe (PID: 9172)
- Unicorn-49545.exe (PID: 9356)
- Unicorn-20280.exe (PID: 9180)
- Unicorn-5228.exe (PID: 9204)
- Unicorn-57713.exe (PID: 9324)
- Unicorn-24849.exe (PID: 9436)
- Unicorn-17283.exe (PID: 6876)
- Unicorn-29679.exe (PID: 9340)
- Unicorn-37703.exe (PID: 1812)
- Unicorn-846.exe (PID: 7772)
- Unicorn-35155.exe (PID: 9404)
- Unicorn-51226.exe (PID: 9548)
- Unicorn-36338.exe (PID: 9504)
- Unicorn-45269.exe (PID: 9512)
- Unicorn-31625.exe (PID: 9568)
- Unicorn-24849.exe (PID: 9460)
- Unicorn-24849.exe (PID: 9412)
- Unicorn-51491.exe (PID: 9540)
- Unicorn-31625.exe (PID: 9584)
- Unicorn-45361.exe (PID: 9560)
- Unicorn-24849.exe (PID: 9428)
- Unicorn-26025.exe (PID: 9604)
- Unicorn-3086.exe (PID: 9524)
- Unicorn-42315.exe (PID: 9760)
- Unicorn-31625.exe (PID: 9576)
- Unicorn-15466.exe (PID: 9864)
- Unicorn-24189.exe (PID: 9896)
- Unicorn-56691.exe (PID: 10116)
- Unicorn-1714.exe (PID: 8548)
- Unicorn-20088.exe (PID: 8580)
- Unicorn-1714.exe (PID: 8532)
- Unicorn-34709.exe (PID: 10140)
- Unicorn-37401.exe (PID: 10156)
- Unicorn-27418.exe (PID: 10188)
- Unicorn-7966.exe (PID: 10172)
- Unicorn-16043.exe (PID: 10224)
- Unicorn-52991.exe (PID: 10204)
- Unicorn-17365.exe (PID: 9252)
- Unicorn-45954.exe (PID: 6800)
- Unicorn-61635.exe (PID: 7228)
- Unicorn-19311.exe (PID: 9456)
- Unicorn-6571.exe (PID: 7848)
- Unicorn-14480.exe (PID: 9296)
- Unicorn-19232.exe (PID: 9692)
- Unicorn-19141.exe (PID: 4488)
- Unicorn-41507.exe (PID: 9192)
- Unicorn-51905.exe (PID: 9268)
- Unicorn-63058.exe (PID: 8288)
- Unicorn-23417.exe (PID: 6584)
- Unicorn-26131.exe (PID: 10292)
- Unicorn-19909.exe (PID: 10312)
- Unicorn-4650.exe (PID: 6964)
- Unicorn-56473.exe (PID: 9308)
- Unicorn-30385.exe (PID: 7224)
- Unicorn-16379.exe (PID: 10376)
- Unicorn-63551.exe (PID: 8920)
- Unicorn-32161.exe (PID: 10352)
- Unicorn-62787.exe (PID: 10496)
- Unicorn-46359.exe (PID: 10548)
- Unicorn-40883.exe (PID: 10524)
- Unicorn-56665.exe (PID: 10516)
- Unicorn-31969.exe (PID: 10576)
- Unicorn-43069.exe (PID: 7904)
- Unicorn-25838.exe (PID: 10568)
- Unicorn-1242.exe (PID: 10604)
- Unicorn-52389.exe (PID: 10664)
- Unicorn-1910.exe (PID: 10776)
- Unicorn-46935.exe (PID: 10752)
- Unicorn-65409.exe (PID: 10700)
- Unicorn-58611.exe (PID: 10636)
- Unicorn-52389.exe (PID: 10656)
- Unicorn-24377.exe (PID: 10856)
- Unicorn-8040.exe (PID: 10760)
- Unicorn-26515.exe (PID: 10724)
- Unicorn-48881.exe (PID: 10904)
- Unicorn-12124.exe (PID: 10804)
- Unicorn-46935.exe (PID: 10744)
- Unicorn-11859.exe (PID: 10796)
- Unicorn-44035.exe (PID: 10928)
- Unicorn-1714.exe (PID: 8524)
- Unicorn-38667.exe (PID: 11004)
- Unicorn-52965.exe (PID: 10952)
- Unicorn-18709.exe (PID: 11168)
- Unicorn-39951.exe (PID: 10896)
- Unicorn-6457.exe (PID: 11116)
- Unicorn-10541.exe (PID: 11040)
- Unicorn-44797.exe (PID: 11020)
- Unicorn-63271.exe (PID: 10840)
- Unicorn-31969.exe (PID: 10580)
- Unicorn-33099.exe (PID: 10936)
- Unicorn-1626.exe (PID: 11236)
- Unicorn-24931.exe (PID: 11012)
- Unicorn-35045.exe (PID: 11252)
- Unicorn-23952.exe (PID: 11196)
- Unicorn-54911.exe (PID: 8016)
- Unicorn-34491.exe (PID: 11088)
- Unicorn-49865.exe (PID: 11352)
- Unicorn-36172.exe (PID: 11228)
- Unicorn-39129.exe (PID: 1616)
- Unicorn-19835.exe (PID: 11140)
- Unicorn-12487.exe (PID: 11204)
- Unicorn-19835.exe (PID: 11136)
- Unicorn-59550.exe (PID: 11276)
- Unicorn-63634.exe (PID: 11292)
- Unicorn-57625.exe (PID: 11392)
- Unicorn-7748.exe (PID: 11328)
- Unicorn-35045.exe (PID: 11248)
- Unicorn-40713.exe (PID: 10960)
- Unicorn-30407.exe (PID: 11048)
- Unicorn-23369.exe (PID: 11432)
- Unicorn-47219.exe (PID: 11452)
- Unicorn-38886.exe (PID: 11412)
- Unicorn-65117.exe (PID: 11320)
- Unicorn-30791.exe (PID: 11476)
Starts itself from another location
- 1 (395).exe (PID: 7320)
- Unicorn-21315.exe (PID: 7584)
- Unicorn-33349.exe (PID: 8140)
- Unicorn-31957.exe (PID: 8160)
- Unicorn-63089.exe (PID: 6480)
- Unicorn-1636.exe (PID: 4164)
- Unicorn-48791.exe (PID: 2432)
- Unicorn-35055.exe (PID: 6656)
- Unicorn-650.exe (PID: 5072)
- Unicorn-7427.exe (PID: 2384)
- Unicorn-12902.exe (PID: 2136)
- Unicorn-31931.exe (PID: 6048)
- Unicorn-39545.exe (PID: 7268)
- Unicorn-39545.exe (PID: 7280)
- Unicorn-43364.exe (PID: 6944)
- Unicorn-31123.exe (PID: 6516)
- Unicorn-37499.exe (PID: 6244)
- Unicorn-58320.exe (PID: 4688)
- Unicorn-35107.exe (PID: 2852)
- Unicorn-2342.exe (PID: 4620)
- Unicorn-63795.exe (PID: 5380)
- Unicorn-18679.exe (PID: 4988)
- Unicorn-33623.exe (PID: 6988)
- Unicorn-63795.exe (PID: 1912)
- Unicorn-22763.exe (PID: 1056)
- Unicorn-10245.exe (PID: 6644)
- Unicorn-18679.exe (PID: 4040)
- Unicorn-2897.exe (PID: 1324)
- Unicorn-2897.exe (PID: 4408)
- Unicorn-30137.exe (PID: 1180)
- Unicorn-45082.exe (PID: 5512)
- Unicorn-26607.exe (PID: 2148)
- Unicorn-62809.exe (PID: 7500)
- Unicorn-1932.exe (PID: 7680)
- Unicorn-19730.exe (PID: 7232)
- Unicorn-6571.exe (PID: 7848)
- Unicorn-44646.exe (PID: 7648)
- Unicorn-53079.exe (PID: 7700)
- Unicorn-1740.exe (PID: 7616)
- Unicorn-1740.exe (PID: 7604)
- Unicorn-32467.exe (PID: 7668)
- Unicorn-1740.exe (PID: 7860)
- Unicorn-22161.exe (PID: 7548)
- Unicorn-26245.exe (PID: 7876)
- Unicorn-26245.exe (PID: 7564)
- Unicorn-26245.exe (PID: 7752)
- Unicorn-13992.exe (PID: 616)
- Unicorn-26245.exe (PID: 7868)
- Unicorn-26245.exe (PID: 7520)
- Unicorn-1580.exe (PID: 2236)
- Unicorn-12548.exe (PID: 6388)
- Unicorn-32366.exe (PID: 7952)
- Unicorn-28937.exe (PID: 8044)
- Unicorn-48538.exe (PID: 7812)
- Unicorn-28937.exe (PID: 7968)
- Unicorn-28937.exe (PID: 7984)
- Unicorn-28937.exe (PID: 7956)
- Unicorn-39873.exe (PID: 7704)
- Unicorn-37319.exe (PID: 4068)
- Unicorn-42673.exe (PID: 7692)
- Unicorn-44096.exe (PID: 5260)
- Unicorn-27013.exe (PID: 4188)
- Unicorn-8630.exe (PID: 2552)
- Unicorn-370.exe (PID: 5228)
- Unicorn-59685.exe (PID: 7832)
- Unicorn-4454.exe (PID: 5964)
- Unicorn-2408.exe (PID: 208)
- Unicorn-925.exe (PID: 7888)
- Unicorn-946.exe (PID: 8180)
- Unicorn-1501.exe (PID: 4380)
- Unicorn-17283.exe (PID: 6876)
- Unicorn-17283.exe (PID: 7780)
- Unicorn-52648.exe (PID: 6228)
- Unicorn-37703.exe (PID: 1812)
- Unicorn-846.exe (PID: 7772)
- Unicorn-57891.exe (PID: 4112)
- Unicorn-39384.exe (PID: 7544)
- Unicorn-60453.exe (PID: 896)
- Unicorn-48201.exe (PID: 4336)
- Unicorn-13390.exe (PID: 7972)
- Unicorn-22881.exe (PID: 8248)
- Unicorn-13390.exe (PID: 968)
- Unicorn-18797.exe (PID: 8216)
- Unicorn-57692.exe (PID: 8228)
- Unicorn-22881.exe (PID: 8240)
- Unicorn-4407.exe (PID: 8300)
- Unicorn-20189.exe (PID: 8372)
- Unicorn-24827.exe (PID: 8424)
- Unicorn-46831.exe (PID: 8328)
- Unicorn-20189.exe (PID: 8348)
- Unicorn-24827.exe (PID: 8412)
- Unicorn-12575.exe (PID: 8448)
- Unicorn-20189.exe (PID: 8344)
- Unicorn-52596.exe (PID: 8648)
- Unicorn-1714.exe (PID: 8548)
- Unicorn-1714.exe (PID: 8568)
- Unicorn-16105.exe (PID: 8320)
- Unicorn-1714.exe (PID: 8532)
- Unicorn-20088.exe (PID: 8588)
- Unicorn-20088.exe (PID: 8580)
- Unicorn-1714.exe (PID: 8540)
- Unicorn-1714.exe (PID: 8524)
- Unicorn-46731.exe (PID: 8664)
- Unicorn-42647.exe (PID: 8596)
- Unicorn-22135.exe (PID: 8516)
- Unicorn-50915.exe (PID: 8360)
- Unicorn-22135.exe (PID: 8616)
- Unicorn-12575.exe (PID: 8452)
- Unicorn-39847.exe (PID: 8604)
- Unicorn-12575.exe (PID: 8468)
- Unicorn-46731.exe (PID: 8656)
- Unicorn-12404.exe (PID: 8876)
- Unicorn-2077.exe (PID: 8860)
- Unicorn-14085.exe (PID: 9008)
- Unicorn-28832.exe (PID: 8896)
- Unicorn-37463.exe (PID: 8952)
- Unicorn-515.exe (PID: 9064)
- Unicorn-22519.exe (PID: 8960)
- Unicorn-36717.exe (PID: 9148)
- Unicorn-50842.exe (PID: 9072)
- Unicorn-55191.exe (PID: 9032)
- Unicorn-16851.exe (PID: 9132)
- Unicorn-44885.exe (PID: 9100)
- Unicorn-27395.exe (PID: 8628)
- Unicorn-32633.exe (PID: 9108)
- Unicorn-20280.exe (PID: 9180)
- Unicorn-5228.exe (PID: 9204)
- Unicorn-28549.exe (PID: 9040)
- Unicorn-49545.exe (PID: 9356)
- Unicorn-57713.exe (PID: 9324)
- Unicorn-24849.exe (PID: 9436)
- Unicorn-35155.exe (PID: 9404)
- Unicorn-29679.exe (PID: 9340)
- Unicorn-45269.exe (PID: 9512)
- Unicorn-36338.exe (PID: 9504)
- Unicorn-31625.exe (PID: 9568)
- Unicorn-24849.exe (PID: 9460)
- Unicorn-51491.exe (PID: 9540)
- Unicorn-24849.exe (PID: 9412)
- Unicorn-31625.exe (PID: 9584)
- Unicorn-45361.exe (PID: 9560)
- Unicorn-24849.exe (PID: 9428)
- Unicorn-28937.exe (PID: 7948)
- Unicorn-31625.exe (PID: 9576)
- Unicorn-42315.exe (PID: 9760)
- Unicorn-26025.exe (PID: 9604)
- Unicorn-3086.exe (PID: 9524)
- Unicorn-15466.exe (PID: 9864)
- Unicorn-24189.exe (PID: 9896)
- Unicorn-56691.exe (PID: 10116)
- Unicorn-52596.exe (PID: 8640)
- Unicorn-34709.exe (PID: 10140)
- Unicorn-9690.exe (PID: 8824)
- Unicorn-1714.exe (PID: 8552)
- Unicorn-37401.exe (PID: 10156)
- Unicorn-7966.exe (PID: 10172)
- Unicorn-16043.exe (PID: 10224)
- Unicorn-52991.exe (PID: 10204)
- Unicorn-27418.exe (PID: 10188)
- Unicorn-17365.exe (PID: 9252)
- Unicorn-45954.exe (PID: 6800)
- Unicorn-6545.exe (PID: 9172)
- Unicorn-61635.exe (PID: 7228)
- Unicorn-19311.exe (PID: 9456)
- Unicorn-14480.exe (PID: 9296)
Executes application which crashes
- Unicorn-47168.exe (PID: 7904)
- Unicorn-2130.exe (PID: 5056)
- Unicorn-65305.exe (PID: 8264)
- Unicorn-6466.exe (PID: 9380)
INFO
Reads the computer name
- 1 (395).exe (PID: 7320)
- Unicorn-21315.exe (PID: 7584)
- Unicorn-31957.exe (PID: 8160)
- Unicorn-33349.exe (PID: 8140)
- Unicorn-1636.exe (PID: 4164)
- Unicorn-48791.exe (PID: 2432)
- Unicorn-35055.exe (PID: 6656)
- Unicorn-63089.exe (PID: 6480)
- Unicorn-650.exe (PID: 5072)
- Unicorn-31931.exe (PID: 6048)
- Unicorn-7427.exe (PID: 2384)
- Unicorn-43364.exe (PID: 6944)
- Unicorn-39545.exe (PID: 7280)
- Unicorn-37499.exe (PID: 6244)
- Unicorn-12902.exe (PID: 2136)
- Unicorn-31123.exe (PID: 6516)
- Unicorn-2342.exe (PID: 4620)
- Unicorn-35107.exe (PID: 2852)
- Unicorn-63795.exe (PID: 5380)
- Unicorn-18679.exe (PID: 4988)
- Unicorn-12548.exe (PID: 6388)
- Unicorn-18679.exe (PID: 4040)
- Unicorn-22763.exe (PID: 1056)
- Unicorn-63795.exe (PID: 1912)
- Unicorn-33623.exe (PID: 6988)
- Unicorn-1580.exe (PID: 2236)
- Unicorn-2897.exe (PID: 1324)
- Unicorn-2897.exe (PID: 4408)
- Unicorn-30137.exe (PID: 1180)
- Unicorn-1932.exe (PID: 7680)
- Unicorn-19730.exe (PID: 7232)
- Unicorn-62809.exe (PID: 7500)
- Unicorn-53079.exe (PID: 7700)
- Unicorn-44646.exe (PID: 7648)
- Unicorn-6571.exe (PID: 7848)
- Unicorn-1740.exe (PID: 7860)
- Unicorn-1740.exe (PID: 7604)
- Unicorn-32467.exe (PID: 7668)
- Unicorn-22161.exe (PID: 7548)
- Unicorn-26245.exe (PID: 7564)
- Unicorn-13992.exe (PID: 616)
- Unicorn-26245.exe (PID: 7520)
- Unicorn-26245.exe (PID: 7752)
- Unicorn-48538.exe (PID: 7812)
- Unicorn-28937.exe (PID: 8044)
- Unicorn-28937.exe (PID: 7948)
- Unicorn-32366.exe (PID: 7952)
- Unicorn-42673.exe (PID: 7692)
- Unicorn-28937.exe (PID: 7956)
- Unicorn-27013.exe (PID: 4188)
- Unicorn-8630.exe (PID: 2552)
- Unicorn-37319.exe (PID: 4068)
- Unicorn-370.exe (PID: 5228)
- Unicorn-4454.exe (PID: 5964)
- Unicorn-946.exe (PID: 8180)
- Unicorn-47168.exe (PID: 7904)
- Unicorn-1501.exe (PID: 4380)
- Unicorn-59685.exe (PID: 7832)
- Unicorn-17283.exe (PID: 7780)
- Unicorn-37703.exe (PID: 1812)
- Unicorn-57891.exe (PID: 4112)
- Unicorn-2130.exe (PID: 5056)
- Unicorn-39384.exe (PID: 7544)
- Unicorn-13390.exe (PID: 7972)
- Unicorn-22881.exe (PID: 8248)
- Unicorn-13390.exe (PID: 968)
- Unicorn-48201.exe (PID: 4336)
- Unicorn-22881.exe (PID: 8240)
- Unicorn-52596.exe (PID: 8648)
- Unicorn-16105.exe (PID: 8320)
- Unicorn-24827.exe (PID: 8412)
- Unicorn-12575.exe (PID: 8448)
- Unicorn-52596.exe (PID: 8640)
- Unicorn-9690.exe (PID: 8824)
- Unicorn-1714.exe (PID: 8540)
- Unicorn-1714.exe (PID: 8524)
- Unicorn-50915.exe (PID: 8360)
- Unicorn-1714.exe (PID: 8552)
- Unicorn-22135.exe (PID: 8516)
- Unicorn-12575.exe (PID: 8468)
- Unicorn-43301.exe (PID: 8476)
- Unicorn-1714.exe (PID: 8568)
- Unicorn-42647.exe (PID: 8596)
- Unicorn-22135.exe (PID: 8616)
- Unicorn-39847.exe (PID: 8604)
- Unicorn-63551.exe (PID: 8920)
- Unicorn-22519.exe (PID: 8960)
- Unicorn-32633.exe (PID: 9108)
- Unicorn-5228.exe (PID: 9204)
- Unicorn-51226.exe (PID: 9548)
- Unicorn-6466.exe (PID: 9380)
- Unicorn-51491.exe (PID: 9540)
- Unicorn-31625.exe (PID: 9568)
- Unicorn-24849.exe (PID: 9460)
- Unicorn-45361.exe (PID: 9560)
- Unicorn-24849.exe (PID: 9428)
- Unicorn-26025.exe (PID: 9604)
- Unicorn-31625.exe (PID: 9584)
- Unicorn-42315.exe (PID: 9760)
- Unicorn-3086.exe (PID: 9524)
- Unicorn-24189.exe (PID: 9896)
- Unicorn-15466.exe (PID: 9864)
- Unicorn-37401.exe (PID: 10156)
- Unicorn-16043.exe (PID: 10224)
- Unicorn-17365.exe (PID: 9252)
- Unicorn-61635.exe (PID: 7228)
- Unicorn-14480.exe (PID: 9296)
- Unicorn-19141.exe (PID: 4488)
The sample compiled with chinese language support
- 1 (395).exe (PID: 7320)
- Unicorn-46731.exe (PID: 8656)
- Unicorn-12404.exe (PID: 8876)
- Unicorn-32366.exe (PID: 7952)
- Unicorn-28937.exe (PID: 8044)
- Unicorn-26245.exe (PID: 7752)
- Unicorn-42673.exe (PID: 7692)
- Unicorn-12548.exe (PID: 6388)
- Unicorn-2077.exe (PID: 8860)
- Unicorn-39545.exe (PID: 7268)
- Unicorn-2897.exe (PID: 4408)
- Unicorn-31957.exe (PID: 8160)
- Unicorn-37463.exe (PID: 8952)
- Unicorn-45082.exe (PID: 5512)
- Unicorn-44096.exe (PID: 5260)
- Unicorn-30137.exe (PID: 1180)
- Unicorn-14085.exe (PID: 9008)
- Unicorn-28832.exe (PID: 8896)
- Unicorn-31123.exe (PID: 6516)
- Unicorn-515.exe (PID: 9064)
- Unicorn-27013.exe (PID: 4188)
- Unicorn-650.exe (PID: 5072)
- Unicorn-22519.exe (PID: 8960)
- Unicorn-50842.exe (PID: 9072)
- Unicorn-55191.exe (PID: 9032)
- Unicorn-36717.exe (PID: 9148)
- Unicorn-44885.exe (PID: 9100)
- Unicorn-16851.exe (PID: 9132)
- Unicorn-27395.exe (PID: 8628)
- Unicorn-8630.exe (PID: 2552)
- Unicorn-26607.exe (PID: 2148)
- Unicorn-4454.exe (PID: 5964)
- Unicorn-28549.exe (PID: 9040)
- Unicorn-37499.exe (PID: 6244)
- Unicorn-32633.exe (PID: 9108)
- Unicorn-6545.exe (PID: 9172)
- Unicorn-62809.exe (PID: 7500)
- Unicorn-49545.exe (PID: 9356)
- Unicorn-20280.exe (PID: 9180)
- Unicorn-370.exe (PID: 5228)
- Unicorn-5228.exe (PID: 9204)
- Unicorn-925.exe (PID: 7888)
- Unicorn-19730.exe (PID: 7232)
- Unicorn-58320.exe (PID: 4688)
- Unicorn-63089.exe (PID: 6480)
- Unicorn-1501.exe (PID: 4380)
- Unicorn-57713.exe (PID: 9324)
- Unicorn-24849.exe (PID: 9436)
- Unicorn-52648.exe (PID: 6228)
- Unicorn-29679.exe (PID: 9340)
- Unicorn-17283.exe (PID: 6876)
- Unicorn-37703.exe (PID: 1812)
- Unicorn-946.exe (PID: 8180)
- Unicorn-1932.exe (PID: 7680)
- Unicorn-846.exe (PID: 7772)
- Unicorn-35155.exe (PID: 9404)
- Unicorn-51226.exe (PID: 9548)
- Unicorn-39384.exe (PID: 7544)
- Unicorn-57891.exe (PID: 4112)
- Unicorn-35107.exe (PID: 2852)
- Unicorn-33349.exe (PID: 8140)
- Unicorn-53079.exe (PID: 7700)
- Unicorn-7427.exe (PID: 2384)
- Unicorn-45269.exe (PID: 9512)
- Unicorn-35055.exe (PID: 6656)
- Unicorn-36338.exe (PID: 9504)
- Unicorn-31625.exe (PID: 9568)
- Unicorn-24849.exe (PID: 9460)
- Unicorn-51491.exe (PID: 9540)
- Unicorn-24849.exe (PID: 9412)
- Unicorn-28937.exe (PID: 7948)
- Unicorn-45361.exe (PID: 9560)
- Unicorn-24849.exe (PID: 9428)
- Unicorn-31625.exe (PID: 9576)
- Unicorn-31625.exe (PID: 9584)
- Unicorn-26025.exe (PID: 9604)
- Unicorn-42315.exe (PID: 9760)
- Unicorn-3086.exe (PID: 9524)
- Unicorn-1740.exe (PID: 7616)
- Unicorn-18797.exe (PID: 8216)
- Unicorn-1740.exe (PID: 7860)
- Unicorn-18679.exe (PID: 4988)
- Unicorn-13390.exe (PID: 7972)
- Unicorn-22881.exe (PID: 8248)
- Unicorn-13390.exe (PID: 968)
- Unicorn-60453.exe (PID: 896)
- Unicorn-48201.exe (PID: 4336)
- Unicorn-1740.exe (PID: 7604)
- Unicorn-22161.exe (PID: 7548)
- Unicorn-33623.exe (PID: 6988)
- Unicorn-15466.exe (PID: 9864)
- Unicorn-57692.exe (PID: 8228)
- Unicorn-22881.exe (PID: 8240)
- Unicorn-32467.exe (PID: 7668)
- Unicorn-4407.exe (PID: 8300)
- Unicorn-63795.exe (PID: 5380)
- Unicorn-46831.exe (PID: 8328)
- Unicorn-20189.exe (PID: 8372)
- Unicorn-24189.exe (PID: 9896)
- Unicorn-63795.exe (PID: 1912)
- Unicorn-10245.exe (PID: 6644)
- Unicorn-26245.exe (PID: 7520)
- Unicorn-20189.exe (PID: 8348)
- Unicorn-56691.exe (PID: 10116)
- Unicorn-24827.exe (PID: 8424)
- Unicorn-20189.exe (PID: 8344)
- Unicorn-24827.exe (PID: 8412)
- Unicorn-13992.exe (PID: 616)
- Unicorn-26245.exe (PID: 7564)
- Unicorn-1580.exe (PID: 2236)
- Unicorn-20088.exe (PID: 8588)
- Unicorn-22763.exe (PID: 1056)
- Unicorn-1714.exe (PID: 8548)
- Unicorn-52596.exe (PID: 8648)
- Unicorn-12575.exe (PID: 8448)
- Unicorn-26245.exe (PID: 7868)
- Unicorn-16105.exe (PID: 8320)
- Unicorn-1714.exe (PID: 8532)
- Unicorn-1714.exe (PID: 8568)
- Unicorn-20088.exe (PID: 8580)
- Unicorn-42647.exe (PID: 8596)
- Unicorn-2897.exe (PID: 1324)
- Unicorn-50915.exe (PID: 8360)
- Unicorn-22135.exe (PID: 8516)
- Unicorn-34709.exe (PID: 10140)
- Unicorn-48791.exe (PID: 2432)
- Unicorn-22135.exe (PID: 8616)
- Unicorn-9690.exe (PID: 8824)
- Unicorn-43364.exe (PID: 6944)
- Unicorn-39847.exe (PID: 8604)
- Unicorn-37401.exe (PID: 10156)
- Unicorn-39873.exe (PID: 7704)
- Unicorn-28937.exe (PID: 7956)
- Unicorn-18679.exe (PID: 4040)
- Unicorn-28937.exe (PID: 7968)
- Unicorn-31931.exe (PID: 6048)
- Unicorn-39545.exe (PID: 7280)
- Unicorn-48538.exe (PID: 7812)
- Unicorn-21315.exe (PID: 7584)
- Unicorn-12902.exe (PID: 2136)
- Unicorn-28937.exe (PID: 7984)
- Unicorn-7966.exe (PID: 10172)
- Unicorn-27418.exe (PID: 10188)
- Unicorn-37319.exe (PID: 4068)
- Unicorn-52991.exe (PID: 10204)
- Unicorn-16043.exe (PID: 10224)
- Unicorn-59685.exe (PID: 7832)
- Unicorn-17365.exe (PID: 9252)
- Unicorn-45954.exe (PID: 6800)
- Unicorn-2408.exe (PID: 208)
- Unicorn-61635.exe (PID: 7228)
- Unicorn-2342.exe (PID: 4620)
- Unicorn-14480.exe (PID: 9296)
- Unicorn-44646.exe (PID: 7648)
- Unicorn-19232.exe (PID: 9692)
- Unicorn-19141.exe (PID: 4488)
- Unicorn-51905.exe (PID: 9268)
- Unicorn-19311.exe (PID: 9456)
- Unicorn-6571.exe (PID: 7848)
- Unicorn-56473.exe (PID: 9308)
- Unicorn-23417.exe (PID: 6584)
- Unicorn-30385.exe (PID: 7224)
- Unicorn-63058.exe (PID: 8288)
- Unicorn-1714.exe (PID: 8552)
- Unicorn-26131.exe (PID: 10292)
- Unicorn-1636.exe (PID: 4164)
- Unicorn-19909.exe (PID: 10312)
- Unicorn-41507.exe (PID: 9192)
- Unicorn-4650.exe (PID: 6964)
- Unicorn-12575.exe (PID: 8452)
- Unicorn-63551.exe (PID: 8920)
- Unicorn-16379.exe (PID: 10376)
- Unicorn-62787.exe (PID: 10496)
- Unicorn-32161.exe (PID: 10352)
- Unicorn-56665.exe (PID: 10516)
- Unicorn-46359.exe (PID: 10548)
- Unicorn-17283.exe (PID: 7780)
- Unicorn-40883.exe (PID: 10524)
- Unicorn-31969.exe (PID: 10576)
- Unicorn-43069.exe (PID: 7904)
- Unicorn-1242.exe (PID: 10604)
- Unicorn-58611.exe (PID: 10636)
- Unicorn-52389.exe (PID: 10664)
- Unicorn-65409.exe (PID: 10700)
- Unicorn-52389.exe (PID: 10656)
- Unicorn-46935.exe (PID: 10752)
- Unicorn-24377.exe (PID: 10856)
- Unicorn-25838.exe (PID: 10568)
- Unicorn-46731.exe (PID: 8664)
- Unicorn-26515.exe (PID: 10724)
- Unicorn-46935.exe (PID: 10744)
- Unicorn-26245.exe (PID: 7876)
- Unicorn-12124.exe (PID: 10804)
- Unicorn-48881.exe (PID: 10904)
- Unicorn-1910.exe (PID: 10776)
- Unicorn-44035.exe (PID: 10928)
- Unicorn-1714.exe (PID: 8524)
- Unicorn-1714.exe (PID: 8540)
- Unicorn-8040.exe (PID: 10760)
- Unicorn-52965.exe (PID: 10952)
- Unicorn-11859.exe (PID: 10796)
- Unicorn-63271.exe (PID: 10840)
- Unicorn-38667.exe (PID: 11004)
- Unicorn-39951.exe (PID: 10896)
- Unicorn-18709.exe (PID: 11168)
- Unicorn-6457.exe (PID: 11116)
- Unicorn-10541.exe (PID: 11040)
- Unicorn-44797.exe (PID: 11020)
- Unicorn-31969.exe (PID: 10580)
- Unicorn-34491.exe (PID: 11088)
- Unicorn-33099.exe (PID: 10936)
- Unicorn-24931.exe (PID: 11012)
- Unicorn-49865.exe (PID: 11352)
- Unicorn-1626.exe (PID: 11236)
- Unicorn-35045.exe (PID: 11252)
- Unicorn-23952.exe (PID: 11196)
- Unicorn-54911.exe (PID: 8016)
- Unicorn-36172.exe (PID: 11228)
- Unicorn-19835.exe (PID: 11140)
- Unicorn-7748.exe (PID: 11328)
- Unicorn-19835.exe (PID: 11136)
- Unicorn-12487.exe (PID: 11204)
- Unicorn-59550.exe (PID: 11276)
- Unicorn-43301.exe (PID: 8476)
- Unicorn-57625.exe (PID: 11392)
- Unicorn-39129.exe (PID: 1616)
- Unicorn-35045.exe (PID: 11248)
- Unicorn-40713.exe (PID: 10960)
- Unicorn-65117.exe (PID: 11320)
- Unicorn-30407.exe (PID: 11048)
- Unicorn-23369.exe (PID: 11432)
- Unicorn-12575.exe (PID: 8468)
- Unicorn-47219.exe (PID: 11452)
- Unicorn-63634.exe (PID: 11292)
- Unicorn-38886.exe (PID: 11412)
- Unicorn-30791.exe (PID: 11476)
Checks supported languages
- Unicorn-21315.exe (PID: 7584)
- Unicorn-33349.exe (PID: 8140)
- Unicorn-31957.exe (PID: 8160)
- 1 (395).exe (PID: 7320)
- Unicorn-63089.exe (PID: 6480)
- Unicorn-1636.exe (PID: 4164)
- Unicorn-48791.exe (PID: 2432)
- Unicorn-35055.exe (PID: 6656)
- Unicorn-650.exe (PID: 5072)
- Unicorn-12902.exe (PID: 2136)
- Unicorn-31931.exe (PID: 6048)
- Unicorn-37499.exe (PID: 6244)
- Unicorn-39545.exe (PID: 7268)
- Unicorn-43364.exe (PID: 6944)
- Unicorn-31123.exe (PID: 6516)
- Unicorn-58320.exe (PID: 4688)
- Unicorn-35107.exe (PID: 2852)
- Unicorn-63795.exe (PID: 1912)
- Unicorn-33623.exe (PID: 6988)
- Unicorn-18679.exe (PID: 4988)
- Unicorn-12548.exe (PID: 6388)
- Unicorn-22763.exe (PID: 1056)
- Unicorn-1580.exe (PID: 2236)
- Unicorn-10245.exe (PID: 6644)
- Unicorn-2897.exe (PID: 1324)
- Unicorn-26607.exe (PID: 2148)
- Unicorn-30137.exe (PID: 1180)
- Unicorn-44646.exe (PID: 7648)
- Unicorn-53079.exe (PID: 7700)
- Unicorn-19730.exe (PID: 7232)
- Unicorn-1932.exe (PID: 7680)
- Unicorn-62809.exe (PID: 7500)
- Unicorn-1740.exe (PID: 7860)
- Unicorn-22161.exe (PID: 7548)
- Unicorn-26245.exe (PID: 7520)
- Unicorn-26245.exe (PID: 7752)
- Unicorn-26245.exe (PID: 7876)
- Unicorn-26245.exe (PID: 7564)
- Unicorn-39873.exe (PID: 7704)
- Unicorn-48538.exe (PID: 7812)
- Unicorn-32366.exe (PID: 7952)
- Unicorn-28937.exe (PID: 8044)
- Unicorn-28937.exe (PID: 7984)
- Unicorn-42673.exe (PID: 7692)
- Unicorn-26245.exe (PID: 7868)
- Unicorn-44096.exe (PID: 5260)
- Unicorn-8630.exe (PID: 2552)
- Unicorn-27013.exe (PID: 4188)
- Unicorn-2408.exe (PID: 208)
- Unicorn-370.exe (PID: 5228)
- Unicorn-925.exe (PID: 7888)
- Unicorn-47168.exe (PID: 7904)
- Unicorn-1501.exe (PID: 4380)
- Unicorn-4454.exe (PID: 5964)
- Unicorn-52648.exe (PID: 6228)
- Unicorn-17283.exe (PID: 6876)
- Unicorn-17283.exe (PID: 7780)
- Unicorn-2130.exe (PID: 5056)
- Unicorn-39384.exe (PID: 7544)
- Unicorn-57891.exe (PID: 4112)
- Unicorn-37703.exe (PID: 1812)
- Unicorn-60453.exe (PID: 896)
- Unicorn-48201.exe (PID: 4336)
- Unicorn-18797.exe (PID: 8216)
- Unicorn-57692.exe (PID: 8228)
- Unicorn-22881.exe (PID: 8248)
- Unicorn-22881.exe (PID: 8240)
- Unicorn-65305.exe (PID: 8264)
- Unicorn-4407.exe (PID: 8300)
- Unicorn-20189.exe (PID: 8348)
- Unicorn-20189.exe (PID: 8344)
- Unicorn-50915.exe (PID: 8360)
- Unicorn-16105.exe (PID: 8320)
- Unicorn-20189.exe (PID: 8372)
- Unicorn-12575.exe (PID: 8452)
- Unicorn-12575.exe (PID: 8468)
- Unicorn-43301.exe (PID: 8476)
- Unicorn-22135.exe (PID: 8516)
- Unicorn-12575.exe (PID: 8448)
- Unicorn-24827.exe (PID: 8424)
- Unicorn-1714.exe (PID: 8552)
- Unicorn-20088.exe (PID: 8588)
- Unicorn-1714.exe (PID: 8532)
- Unicorn-20088.exe (PID: 8580)
- Unicorn-46731.exe (PID: 8664)
- Unicorn-1714.exe (PID: 8548)
- Unicorn-39847.exe (PID: 8604)
- Unicorn-27395.exe (PID: 8628)
- Unicorn-1714.exe (PID: 8568)
- Unicorn-22135.exe (PID: 8616)
- Unicorn-52596.exe (PID: 8640)
- Unicorn-46731.exe (PID: 8656)
- Unicorn-1714.exe (PID: 8524)
- Unicorn-63551.exe (PID: 8920)
- Unicorn-37463.exe (PID: 8952)
- Unicorn-14085.exe (PID: 9008)
- Unicorn-9690.exe (PID: 8824)
- Unicorn-12404.exe (PID: 8876)
- Unicorn-22519.exe (PID: 8960)
- Unicorn-28549.exe (PID: 9040)
- Unicorn-36717.exe (PID: 9148)
- Unicorn-50842.exe (PID: 9072)
- Unicorn-55191.exe (PID: 9032)
- Unicorn-44885.exe (PID: 9100)
- Unicorn-29679.exe (PID: 9340)
- Unicorn-49545.exe (PID: 9356)
- Unicorn-20280.exe (PID: 9180)
- Unicorn-6545.exe (PID: 9172)
- Unicorn-57713.exe (PID: 9324)
- Unicorn-35155.exe (PID: 9404)
- Unicorn-6466.exe (PID: 9380)
- Unicorn-24849.exe (PID: 9412)
- Unicorn-24849.exe (PID: 9428)
- Unicorn-24849.exe (PID: 9436)
- Unicorn-3086.exe (PID: 9524)
- Unicorn-24849.exe (PID: 9460)
- Unicorn-45269.exe (PID: 9512)
- Unicorn-51491.exe (PID: 9540)
- Unicorn-36338.exe (PID: 9504)
- Unicorn-26025.exe (PID: 9604)
- Unicorn-31625.exe (PID: 9584)
- Unicorn-42315.exe (PID: 9760)
- Unicorn-24189.exe (PID: 9896)
- Unicorn-51226.exe (PID: 9548)
- Unicorn-31625.exe (PID: 9568)
- Unicorn-16043.exe (PID: 10224)
- Unicorn-56691.exe (PID: 10116)
- Unicorn-15466.exe (PID: 9864)
- Unicorn-52991.exe (PID: 10204)
- Unicorn-45954.exe (PID: 6800)
- Unicorn-19311.exe (PID: 9456)
- Unicorn-61635.exe (PID: 7228)
- Unicorn-14480.exe (PID: 9296)
- Unicorn-19141.exe (PID: 4488)
- Unicorn-19232.exe (PID: 9692)
- Unicorn-41507.exe (PID: 9192)
- Unicorn-4650.exe (PID: 6964)
- Unicorn-30385.exe (PID: 7224)
- Unicorn-63058.exe (PID: 8288)
- Unicorn-23417.exe (PID: 6584)
- Unicorn-26131.exe (PID: 10292)
- Unicorn-19909.exe (PID: 10312)
- Unicorn-16379.exe (PID: 10376)
- Unicorn-62787.exe (PID: 10496)
- Unicorn-56665.exe (PID: 10516)
- Unicorn-46359.exe (PID: 10548)
- Unicorn-31969.exe (PID: 10580)
- Unicorn-31969.exe (PID: 10576)
- Unicorn-58611.exe (PID: 10636)
- Unicorn-52389.exe (PID: 10656)
- Unicorn-1242.exe (PID: 10604)
- Unicorn-46935.exe (PID: 10744)
- Unicorn-26515.exe (PID: 10724)
- Unicorn-8040.exe (PID: 10760)
- Unicorn-11859.exe (PID: 10796)
- Unicorn-1910.exe (PID: 10776)
- Unicorn-12124.exe (PID: 10804)
- Unicorn-24377.exe (PID: 10856)
- Unicorn-39951.exe (PID: 10896)
- Unicorn-48881.exe (PID: 10904)
- Unicorn-40713.exe (PID: 10960)
- Unicorn-52965.exe (PID: 10952)
- Unicorn-63271.exe (PID: 10840)
- Unicorn-44797.exe (PID: 11020)
- Unicorn-24931.exe (PID: 11012)
- Unicorn-30407.exe (PID: 11048)
- Unicorn-19835.exe (PID: 11136)
- Unicorn-6457.exe (PID: 11116)
- Unicorn-19835.exe (PID: 11140)
- Unicorn-12487.exe (PID: 11204)
- Unicorn-54911.exe (PID: 8016)
- Unicorn-23952.exe (PID: 11196)
- Unicorn-18709.exe (PID: 11168)
- Unicorn-59550.exe (PID: 11276)
- Unicorn-1626.exe (PID: 11236)
- Unicorn-65117.exe (PID: 11320)
- Unicorn-7748.exe (PID: 11328)
- Unicorn-63634.exe (PID: 11292)
- Unicorn-49865.exe (PID: 11352)
- Unicorn-57625.exe (PID: 11392)
- Unicorn-39129.exe (PID: 1616)
- Unicorn-47219.exe (PID: 11452)
- Unicorn-28653.exe (PID: 11568)
- Unicorn-38859.exe (PID: 11616)
- Unicorn-23369.exe (PID: 11432)
- Unicorn-3962.exe (PID: 11644)
- Unicorn-12627.exe (PID: 11652)
- Unicorn-55871.exe (PID: 11728)
- Unicorn-59955.exe (PID: 11752)
- Unicorn-33313.exe (PID: 11676)
- Unicorn-20869.exe (PID: 11780)
- Unicorn-43982.exe (PID: 11808)
- Unicorn-53541.exe (PID: 11852)
- Unicorn-17361.exe (PID: 11904)
- Unicorn-24137.exe (PID: 11920)
- Unicorn-55493.exe (PID: 11952)
- Unicorn-56255.exe (PID: 11972)
- Unicorn-4916.exe (PID: 11996)
- Unicorn-7054.exe (PID: 11980)
- Unicorn-37681.exe (PID: 12096)
- Unicorn-28605.exe (PID: 12132)
- Unicorn-6477.exe (PID: 12200)
- Unicorn-41984.exe (PID: 12184)
- Unicorn-25721.exe (PID: 12224)
- Unicorn-28605.exe (PID: 12140)
- Unicorn-50509.exe (PID: 12168)
- Unicorn-36338.exe (PID: 12284)
- Unicorn-5200.exe (PID: 12256)
- Unicorn-33073.exe (PID: 12348)
- Unicorn-20821.exe (PID: 12380)
- Unicorn-52939.exe (PID: 12364)
- Unicorn-24905.exe (PID: 12388)
- Unicorn-2347.exe (PID: 12324)
- Unicorn-33073.exe (PID: 12356)
- Unicorn-30935.exe (PID: 12520)
- Unicorn-10515.exe (PID: 12480)
- Unicorn-57023.exe (PID: 12456)
- Unicorn-41871.exe (PID: 12556)
- Unicorn-13944.exe (PID: 12548)
- Unicorn-13944.exe (PID: 12540)
- Unicorn-15535.exe (PID: 12528)
- Unicorn-65191.exe (PID: 12416)
- Unicorn-34233.exe (PID: 12564)
- Unicorn-28243.exe (PID: 12668)
- Unicorn-26105.exe (PID: 12712)
- Unicorn-13944.exe (PID: 12584)
- Unicorn-40395.exe (PID: 12760)
- Unicorn-45155.exe (PID: 12804)
- Unicorn-34849.exe (PID: 12828)
- Unicorn-30189.exe (PID: 12728)
- Unicorn-4122.exe (PID: 12848)
- Unicorn-26681.exe (PID: 12856)
- Unicorn-58730.exe (PID: 13068)
- Unicorn-2652.exe (PID: 13108)
- Unicorn-33754.exe (PID: 13132)
- Unicorn-61216.exe (PID: 13160)
- Unicorn-24267.exe (PID: 13176)
- Unicorn-8682.exe (PID: 12968)
- Unicorn-31895.exe (PID: 13088)
- Unicorn-36519.exe (PID: 13192)
- Unicorn-7760.exe (PID: 2616)
- Unicorn-44033.exe (PID: 13260)
- Unicorn-16020.exe (PID: 13284)
- Unicorn-28735.exe (PID: 9420)
- Unicorn-13790.exe (PID: 11740)
- Unicorn-14345.exe (PID: 13356)
- Unicorn-54942.exe (PID: 13476)
- Unicorn-31808.exe (PID: 13420)
- Unicorn-531.exe (PID: 13492)
- Unicorn-63930.exe (PID: 13548)
- Unicorn-17801.exe (PID: 13304)
- Unicorn-20872.exe (PID: 13652)
- Unicorn-33033.exe (PID: 13712)
- Unicorn-49924.exe (PID: 13732)
- Unicorn-15113.exe (PID: 13748)
- Unicorn-52969.exe (PID: 13620)
- Unicorn-14458.exe (PID: 13776)
- Unicorn-33508.exe (PID: 13836)
- Unicorn-8647.exe (PID: 13820)
- Unicorn-50500.exe (PID: 13868)
- Unicorn-27941.exe (PID: 13896)
- Unicorn-723.exe (PID: 13784)
- Unicorn-19773.exe (PID: 13844)
- Unicorn-1299.exe (PID: 13916)
- Unicorn-3245.exe (PID: 13960)
- Unicorn-42139.exe (PID: 13976)
- Unicorn-42139.exe (PID: 13968)
- Unicorn-54392.exe (PID: 14024)
- Unicorn-47542.exe (PID: 13904)
- Unicorn-27941.exe (PID: 13888)
- Unicorn-9275.exe (PID: 14088)
- Unicorn-5191.exe (PID: 14080)
- Unicorn-35917.exe (PID: 14144)
- Unicorn-28876.exe (PID: 14160)
- Unicorn-35917.exe (PID: 14136)
- Unicorn-56338.exe (PID: 14220)
- Unicorn-9275.exe (PID: 14096)
- Unicorn-34547.exe (PID: 14328)
- Unicorn-27506.exe (PID: 14296)
- Unicorn-17443.exe (PID: 14236)
- Unicorn-56338.exe (PID: 14212)
- Unicorn-17443.exe (PID: 14228)
- Unicorn-21640.exe (PID: 5156)
- Unicorn-7905.exe (PID: 14304)
- Unicorn-34547.exe (PID: 7340)
- Unicorn-48283.exe (PID: 14320)
- Unicorn-50229.exe (PID: 14404)
- Unicorn-21640.exe (PID: 864)
- Unicorn-44107.exe (PID: 14372)
- Unicorn-64619.exe (PID: 14380)
- Unicorn-15418.exe (PID: 14452)
- Unicorn-47429.exe (PID: 14412)
- Unicorn-20786.exe (PID: 14420)
- Unicorn-57154.exe (PID: 14460)
- Unicorn-7905.exe (PID: 14312)
- Unicorn-23687.exe (PID: 14268)
- Unicorn-39069.exe (PID: 14732)
- Unicorn-21448.exe (PID: 14628)
- Unicorn-49872.exe (PID: 14644)
- Unicorn-21448.exe (PID: 14636)
- Unicorn-49872.exe (PID: 14648)
- Unicorn-58860.exe (PID: 14708)
- Unicorn-50448.exe (PID: 14784)
- Unicorn-59436.exe (PID: 14804)
- Unicorn-27670.exe (PID: 14524)
- Unicorn-13935.exe (PID: 14540)
- Unicorn-31754.exe (PID: 14556)
- Unicorn-38823.exe (PID: 14960)
- Unicorn-48575.exe (PID: 14880)
- Unicorn-38823.exe (PID: 14964)
- Unicorn-19529.exe (PID: 15016)
- Unicorn-38823.exe (PID: 14976)
- Unicorn-19795.exe (PID: 15024)
- Unicorn-39453.exe (PID: 15072)
- Unicorn-1875.exe (PID: 15104)
- Unicorn-61812.exe (PID: 15080)
- Unicorn-39399.exe (PID: 15240)
- Unicorn-5880.exe (PID: 15404)
- Unicorn-44775.exe (PID: 15444)
- Unicorn-54989.exe (PID: 15456)
- Unicorn-31039.exe (PID: 15432)
- Unicorn-50640.exe (PID: 15424)
- Unicorn-44775.exe (PID: 15440)
- Unicorn-41153.exe (PID: 15508)
- Unicorn-36031.exe (PID: 15096)
- Unicorn-46245.exe (PID: 15164)
- Unicorn-23255.exe (PID: 15648)
- Unicorn-24546.exe (PID: 15800)
- Unicorn-24546.exe (PID: 15792)
- Unicorn-32628.exe (PID: 15876)
- Unicorn-34496.exe (PID: 15840)
- Unicorn-41559.exe (PID: 15884)
- Unicorn-61019.exe (PID: 15524)
- Unicorn-46721.exe (PID: 15560)
- Unicorn-23255.exe (PID: 15656)
- Unicorn-23255.exe (PID: 15664)
- Unicorn-8865.exe (PID: 15752)
- Unicorn-36991.exe (PID: 15632)
- Unicorn-33391.exe (PID: 15924)
Create files in a temporary directory
- Unicorn-31957.exe (PID: 8160)
- Unicorn-33349.exe (PID: 8140)
- 1 (395).exe (PID: 7320)
- Unicorn-1636.exe (PID: 4164)
- Unicorn-21315.exe (PID: 7584)
- Unicorn-650.exe (PID: 5072)
- Unicorn-7427.exe (PID: 2384)
- Unicorn-39545.exe (PID: 7268)
- Unicorn-31931.exe (PID: 6048)
- Unicorn-37499.exe (PID: 6244)
- Unicorn-35055.exe (PID: 6656)
- Unicorn-31123.exe (PID: 6516)
- Unicorn-63089.exe (PID: 6480)
- Unicorn-18679.exe (PID: 4988)
- Unicorn-33623.exe (PID: 6988)
- Unicorn-2897.exe (PID: 1324)
- Unicorn-2897.exe (PID: 4408)
- Unicorn-48791.exe (PID: 2432)
- Unicorn-30137.exe (PID: 1180)
- Unicorn-26607.exe (PID: 2148)
- Unicorn-45082.exe (PID: 5512)
- Unicorn-58320.exe (PID: 4688)
- Unicorn-19730.exe (PID: 7232)
- Unicorn-1932.exe (PID: 7680)
- Unicorn-35107.exe (PID: 2852)
- Unicorn-53079.exe (PID: 7700)
- Unicorn-1740.exe (PID: 7616)
- Unicorn-1740.exe (PID: 7860)
- Unicorn-22161.exe (PID: 7548)
- Unicorn-26245.exe (PID: 7876)
- Unicorn-26245.exe (PID: 7564)
- Unicorn-13992.exe (PID: 616)
- Unicorn-63795.exe (PID: 1912)
- Unicorn-26245.exe (PID: 7752)
- Unicorn-22763.exe (PID: 1056)
- Unicorn-18679.exe (PID: 4040)
- Unicorn-39545.exe (PID: 7280)
- Unicorn-32366.exe (PID: 7952)
- Unicorn-37319.exe (PID: 4068)
- Unicorn-12902.exe (PID: 2136)
- Unicorn-44096.exe (PID: 5260)
- Unicorn-8630.exe (PID: 2552)
- Unicorn-925.exe (PID: 7888)
- Unicorn-59685.exe (PID: 7832)
- Unicorn-2408.exe (PID: 208)
- Unicorn-370.exe (PID: 5228)
- Unicorn-946.exe (PID: 8180)
- Unicorn-1501.exe (PID: 4380)
- Unicorn-52648.exe (PID: 6228)
- Unicorn-17283.exe (PID: 7780)
- Unicorn-2342.exe (PID: 4620)
- Unicorn-57891.exe (PID: 4112)
- Unicorn-44646.exe (PID: 7648)
- Unicorn-39384.exe (PID: 7544)
- Unicorn-28937.exe (PID: 7948)
- Unicorn-22881.exe (PID: 8248)
- Unicorn-48201.exe (PID: 4336)
- Unicorn-18797.exe (PID: 8216)
- Unicorn-32467.exe (PID: 7668)
- Unicorn-57692.exe (PID: 8228)
- Unicorn-22881.exe (PID: 8240)
- Unicorn-63795.exe (PID: 5380)
- Unicorn-26245.exe (PID: 7520)
- Unicorn-10245.exe (PID: 6644)
- Unicorn-24827.exe (PID: 8412)
- Unicorn-12575.exe (PID: 8448)
- Unicorn-26245.exe (PID: 7868)
- Unicorn-20189.exe (PID: 8344)
- Unicorn-52596.exe (PID: 8648)
- Unicorn-20088.exe (PID: 8588)
- Unicorn-1714.exe (PID: 8540)
- Unicorn-50915.exe (PID: 8360)
- Unicorn-42647.exe (PID: 8596)
- Unicorn-28937.exe (PID: 7956)
- Unicorn-12575.exe (PID: 8452)
- Unicorn-12575.exe (PID: 8468)
- Unicorn-39873.exe (PID: 7704)
- Unicorn-28937.exe (PID: 7984)
- Unicorn-39847.exe (PID: 8604)
- Unicorn-42673.exe (PID: 7692)
- Unicorn-2077.exe (PID: 8860)
- Unicorn-28832.exe (PID: 8896)
- Unicorn-27013.exe (PID: 4188)
- Unicorn-22519.exe (PID: 8960)
- Unicorn-50842.exe (PID: 9072)
- Unicorn-55191.exe (PID: 9032)
- Unicorn-4454.exe (PID: 5964)
- Unicorn-44885.exe (PID: 9100)
- Unicorn-16851.exe (PID: 9132)
- Unicorn-27395.exe (PID: 8628)
- Unicorn-32633.exe (PID: 9108)
- Unicorn-28549.exe (PID: 9040)
- Unicorn-20280.exe (PID: 9180)
- Unicorn-62809.exe (PID: 7500)
- Unicorn-57713.exe (PID: 9324)
- Unicorn-49545.exe (PID: 9356)
- Unicorn-24849.exe (PID: 9436)
- Unicorn-29679.exe (PID: 9340)
- Unicorn-17283.exe (PID: 6876)
- Unicorn-35155.exe (PID: 9404)
- Unicorn-51226.exe (PID: 9548)
- Unicorn-45269.exe (PID: 9512)
- Unicorn-37703.exe (PID: 1812)
- Unicorn-31625.exe (PID: 9568)
- Unicorn-24849.exe (PID: 9460)
- Unicorn-31625.exe (PID: 9584)
- Unicorn-45361.exe (PID: 9560)
- Unicorn-3086.exe (PID: 9524)
- Unicorn-42315.exe (PID: 9760)
- Unicorn-26025.exe (PID: 9604)
- Unicorn-31625.exe (PID: 9576)
- Unicorn-60453.exe (PID: 896)
- Unicorn-15466.exe (PID: 9864)
- Unicorn-13390.exe (PID: 968)
- Unicorn-1740.exe (PID: 7604)
- Unicorn-20189.exe (PID: 8372)
- Unicorn-20189.exe (PID: 8348)
- Unicorn-56691.exe (PID: 10116)
- Unicorn-24827.exe (PID: 8424)
- Unicorn-1714.exe (PID: 8548)
- Unicorn-1580.exe (PID: 2236)
- Unicorn-16105.exe (PID: 8320)
- Unicorn-1714.exe (PID: 8532)
- Unicorn-20088.exe (PID: 8580)
- Unicorn-43364.exe (PID: 6944)
- Unicorn-34709.exe (PID: 10140)
- Unicorn-28937.exe (PID: 7968)
- Unicorn-12404.exe (PID: 8876)
- Unicorn-28937.exe (PID: 8044)
- Unicorn-52991.exe (PID: 10204)
- Unicorn-36717.exe (PID: 9148)
- Unicorn-14085.exe (PID: 9008)
- Unicorn-17365.exe (PID: 9252)
- Unicorn-61635.exe (PID: 7228)
Creates files or folders in the user directory
- WerFault.exe (PID: 9292)
- WerFault.exe (PID: 9688)
- WerFault.exe (PID: 5936)
- WerFault.exe (PID: 12332)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:04:26 10:28:09+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 8192 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13b0 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x0000 |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| ComanyName: | aaaa |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
593
Monitored processes
455
Malicious processes
67
Suspicious processes
64
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 208 | C:\Users\admin\AppData\Local\Temp\Unicorn-2408.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2408.exe | Unicorn-37499.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 616 | C:\Users\admin\AppData\Local\Temp\Unicorn-13992.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13992.exe | Unicorn-2897.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 864 | C:\Users\admin\AppData\Local\Temp\Unicorn-21640.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-21640.exe | — | Unicorn-28937.exe | |||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 896 | C:\Users\admin\AppData\Local\Temp\Unicorn-60453.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-60453.exe | Unicorn-1740.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 968 | C:\Users\admin\AppData\Local\Temp\Unicorn-13390.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13390.exe | Unicorn-32467.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1056 | C:\Users\admin\AppData\Local\Temp\Unicorn-22763.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-22763.exe | Unicorn-43364.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1180 | C:\Users\admin\AppData\Local\Temp\Unicorn-30137.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30137.exe | Unicorn-31123.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1324 | C:\Users\admin\AppData\Local\Temp\Unicorn-2897.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-2897.exe | Unicorn-48791.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1616 | C:\Users\admin\AppData\Local\Temp\Unicorn-39129.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-39129.exe | Unicorn-42673.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1812 | C:\Users\admin\AppData\Local\Temp\Unicorn-37703.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-37703.exe | Unicorn-44646.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
15 999
Read events
15 999
Write events
0
Delete events
0
Modification events
Executable files
1 141
Suspicious files
7
Text files
3
Unknown types
2
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7584 | Unicorn-21315.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-35055.exe | executable | |
MD5:F92EC86C40420B3052096BAB890763FF | SHA256:6503F854C8BAC66A33AABD3E95CDA3C2DE50B01C145E80F4CB4309DD9483435C | |||
| 6480 | Unicorn-63089.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-650.exe | executable | |
MD5:45CCF49EBB37802BF341EBE7D1F94483 | SHA256:55B2A94922F89D189084DFD1F2FC4A52B6717B841CB6004B792EDD378AE4FF28 | |||
| 8140 | Unicorn-33349.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-63089.exe | executable | |
MD5:442497CEE7472FC0773305A4593A23AD | SHA256:1A44EBD959CB1EE342D6EB9A2040C734674FA1CC5C5AABA83EA78B416FD2671B | |||
| 7320 | 1 (395).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-48791.exe | executable | |
MD5:4961E2CC15204967FE84502C757910A2 | SHA256:8A878C278B8E17F17F4C9F00A511CB8A6E599CCB9B960982F3D1EB6BD1AA11AE | |||
| 7320 | 1 (395).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-21315.exe | executable | |
MD5:B7D45A991C515741D754E089B5C236A9 | SHA256:D6661B49790D872A9398A902E7C0F2CF2F5ECB02C6BD2E7C22C52BBAFE0CB7EF | |||
| 7584 | Unicorn-21315.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-33349.exe | executable | |
MD5:41566FF5EAC83DCC85831254D0B247F5 | SHA256:CC9A2E348E197E34BAB374B8907360193D3CA5EF33EEA02296BB1B4286FD222C | |||
| 8140 | Unicorn-33349.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-7427.exe | executable | |
MD5:C383C38CF5F7734C5DFD0987F7D9D5BD | SHA256:224D471E897369F38A2C8DC8C6FC152214B19874ACD465AF14981CCEEFF71F49 | |||
| 4164 | Unicorn-1636.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-12902.exe | executable | |
MD5:E136ABE5B4D77F6D144C7D1CE2DAD2E5 | SHA256:79AEA4172B40C740FA5BE1EBA7CD8D3F262301A429E39A83D430F406A13B578F | |||
| 8160 | Unicorn-31957.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-31931.exe | executable | |
MD5:F100D2A014FBD541A9D989AFCBD7E600 | SHA256:E3315091C3CCADA1AACDD1C6036CBDCE93C51ACB78E0F64365E40B6DC50A33A9 | |||
| 8160 | Unicorn-31957.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-1636.exe | executable | |
MD5:D2D27F1691992A143FACD627E448781A | SHA256:6EC22B4CD4121B3C666DD27647F286064062B2E5EFAD286F498F72B26C1514CA | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
21
DNS requests
15
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
— | — | GET | 200 | 184.24.77.6:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
9264 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
9264 | SIHClient.exe | GET | 200 | 184.30.21.171:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
7784 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
— | — | 184.24.77.6:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
6544 | svchost.exe | 40.126.32.68:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
3216 | svchost.exe | 20.197.71.89:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | SG | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
2104 | svchost.exe | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
7784 | backgroundTaskHost.exe | 20.223.36.55:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
7784 | backgroundTaskHost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
login.live.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |