| File name: | 1 (323) |
| Full analysis: | https://app.any.run/tasks/8c2c8131-5435-4791-80aa-1fe61f9b8bf6 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 21:22:22 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 6E7436205FCB5E67B6ED1346CABA0260 |
| SHA1: | 33E0F808D66C2E8429F1BF8F658F258FF376AFAE |
| SHA256: | 25B7F0164B7283EBC204F013E8FC6E85528E9AB8B81ADD18DFFDD16DE12853B3 |
| SSDEEP: | 6144:hRN6X7ItFD1HA5ClMVYR6iH5tBqGvJGB3/cyAeyTk/8SwjwpyAvEhxYzPBwG+qxk:h3kMRHA56MOvBvha3EyAeysx4Dxm3sR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- 1 (323).exe (PID: 4892)
- Unicorn-3229.exe (PID: 5332)
- Unicorn-32970.exe (PID: 7372)
- Unicorn-9020.exe (PID: 7392)
- Unicorn-56488.exe (PID: 7440)
- Unicorn-32538.exe (PID: 7456)
- Unicorn-1257.exe (PID: 7468)
- Unicorn-56580.exe (PID: 7488)
- Unicorn-23562.exe (PID: 8104)
- Unicorn-42590.exe (PID: 8144)
- Unicorn-15201.exe (PID: 8184)
- Unicorn-35714.exe (PID: 4784)
- Unicorn-45928.exe (PID: 1244)
- Unicorn-11117.exe (PID: 5968)
- Unicorn-36368.exe (PID: 7000)
- Unicorn-55969.exe (PID: 6644)
- Unicorn-4101.exe (PID: 6668)
- Unicorn-37520.exe (PID: 2516)
- Unicorn-40858.exe (PID: 5048)
- Unicorn-61370.exe (PID: 4180)
- Unicorn-54755.exe (PID: 7428)
- Unicorn-29182.exe (PID: 1388)
- Unicorn-8569.exe (PID: 2268)
- Unicorn-64604.exe (PID: 2240)
- Unicorn-64869.exe (PID: 6676)
- Unicorn-27598.exe (PID: 1568)
- Unicorn-36281.exe (PID: 6576)
- Unicorn-16415.exe (PID: 7612)
- Unicorn-19644.exe (PID: 7700)
- Unicorn-42756.exe (PID: 208)
- Unicorn-50178.exe (PID: 7548)
- Unicorn-19543.exe (PID: 7540)
- Unicorn-9145.exe (PID: 7520)
- Unicorn-35788.exe (PID: 7796)
- Unicorn-45279.exe (PID: 7836)
- Unicorn-60960.exe (PID: 7916)
- Unicorn-38973.exe (PID: 5384)
- Unicorn-4075.exe (PID: 7944)
- Unicorn-48616.exe (PID: 7748)
- Unicorn-2684.exe (PID: 7960)
- Unicorn-63390.exe (PID: 7980)
- Unicorn-31080.exe (PID: 8000)
- Unicorn-34610.exe (PID: 7904)
- Unicorn-52322.exe (PID: 7884)
- Unicorn-57168.exe (PID: 8016)
- Unicorn-48808.exe (PID: 7864)
- Unicorn-16690.exe (PID: 8040)
- Unicorn-48808.exe (PID: 8096)
- Unicorn-12653.exe (PID: 7604)
- Unicorn-30150.exe (PID: 6752)
- Unicorn-54765.exe (PID: 7232)
- Unicorn-59114.exe (PID: 8160)
- Unicorn-55030.exe (PID: 5728)
- Unicorn-7006.exe (PID: 672)
- Unicorn-48900.exe (PID: 5864)
- Unicorn-26341.exe (PID: 4620)
- Unicorn-35164.exe (PID: 7252)
- Unicorn-27350.exe (PID: 1096)
- Unicorn-12606.exe (PID: 5256)
- Unicorn-12435.exe (PID: 8056)
- Unicorn-59498.exe (PID: 6132)
- Unicorn-45855.exe (PID: 7256)
- Unicorn-4578.exe (PID: 5548)
- Unicorn-63582.exe (PID: 7344)
- Unicorn-14473.exe (PID: 744)
- Unicorn-43738.exe (PID: 4000)
- Unicorn-19788.exe (PID: 7236)
- Unicorn-48808.exe (PID: 7856)
- Unicorn-13888.exe (PID: 4692)
- Unicorn-41408.exe (PID: 6960)
- Unicorn-41408.exe (PID: 1280)
- Unicorn-5206.exe (PID: 7284)
- Unicorn-17048.exe (PID: 7824)
- Unicorn-15922.exe (PID: 7508)
- Unicorn-58051.exe (PID: 4244)
- Unicorn-50152.exe (PID: 8204)
- Unicorn-47116.exe (PID: 6516)
- Unicorn-23702.exe (PID: 5084)
- Unicorn-13888.exe (PID: 7332)
- Unicorn-18941.exe (PID: 7280)
- Unicorn-40592.exe (PID: 8224)
- Unicorn-29156.exe (PID: 7292)
- Unicorn-29156.exe (PID: 7324)
- Unicorn-62496.exe (PID: 8252)
- Unicorn-31605.exe (PID: 7156)
- Unicorn-64634.exe (PID: 1300)
- Unicorn-22166.exe (PID: 7820)
- Unicorn-5511.exe (PID: 8384)
- Unicorn-35762.exe (PID: 8276)
- Unicorn-42538.exe (PID: 8288)
- Unicorn-25024.exe (PID: 8436)
- Unicorn-15533.exe (PID: 8420)
- Unicorn-5611.exe (PID: 8332)
- Unicorn-38668.exe (PID: 8452)
- Unicorn-45445.exe (PID: 8484)
- Unicorn-57142.exe (PID: 8472)
- Unicorn-23316.exe (PID: 8512)
- Unicorn-32986.exe (PID: 8576)
- Unicorn-12565.exe (PID: 8628)
- Unicorn-28710.exe (PID: 8760)
- Unicorn-64267.exe (PID: 8732)
- Unicorn-3665.exe (PID: 8560)
- Unicorn-58045.exe (PID: 8784)
- Unicorn-25180.exe (PID: 8804)
- Unicorn-10235.exe (PID: 8820)
- Unicorn-64651.exe (PID: 9020)
- Unicorn-17034.exe (PID: 8888)
- Unicorn-1342.exe (PID: 8920)
- Unicorn-812.exe (PID: 8912)
- Unicorn-29286.exe (PID: 8844)
- Unicorn-35316.exe (PID: 8940)
- Unicorn-64096.exe (PID: 8836)
- Unicorn-32200.exe (PID: 9100)
- Unicorn-29840.exe (PID: 8996)
- Unicorn-20825.exe (PID: 9124)
- Unicorn-38008.exe (PID: 9004)
- Unicorn-26691.exe (PID: 9116)
- Unicorn-9612.exe (PID: 9168)
- Unicorn-62342.exe (PID: 9148)
- Unicorn-11003.exe (PID: 9192)
- Unicorn-30054.exe (PID: 1168)
- Unicorn-61772.exe (PID: 9220)
- Unicorn-64672.exe (PID: 8552)
- Unicorn-60588.exe (PID: 8556)
- Unicorn-52420.exe (PID: 9088)
- Unicorn-61335.exe (PID: 8536)
- Unicorn-18740.exe (PID: 9240)
- Unicorn-46774.exe (PID: 9296)
- Unicorn-48647.exe (PID: 9256)
- Unicorn-38606.exe (PID: 9248)
- Unicorn-54983.exe (PID: 4608)
- Unicorn-22632.exe (PID: 9320)
- Unicorn-16523.exe (PID: 9412)
- Unicorn-57848.exe (PID: 9484)
- Unicorn-47542.exe (PID: 9500)
- Unicorn-4563.exe (PID: 9468)
- Unicorn-6317.exe (PID: 9660)
- Unicorn-59602.exe (PID: 9708)
- Unicorn-4947.exe (PID: 9748)
- Unicorn-57656.exe (PID: 9588)
- Unicorn-31568.exe (PID: 9668)
- Unicorn-50043.exe (PID: 9556)
- Unicorn-57656.exe (PID: 9608)
- Unicorn-26930.exe (PID: 9580)
- Unicorn-14603.exe (PID: 8644)
- Unicorn-21838.exe (PID: 9840)
- Unicorn-10977.exe (PID: 9796)
- Unicorn-16238.exe (PID: 9808)
- Unicorn-15253.exe (PID: 9764)
- Unicorn-35574.exe (PID: 9848)
- Unicorn-2295.exe (PID: 9896)
- Unicorn-41704.exe (PID: 9856)
- Unicorn-16030.exe (PID: 9904)
- Unicorn-41604.exe (PID: 10040)
- Unicorn-10877.exe (PID: 10012)
- Unicorn-13478.exe (PID: 9948)
- Unicorn-29260.exe (PID: 9980)
- Unicorn-9415.exe (PID: 10104)
- Unicorn-57609.exe (PID: 9012)
- Unicorn-31952.exe (PID: 10004)
- Unicorn-1247.exe (PID: 10076)
- Unicorn-10811.exe (PID: 8988)
- Unicorn-59986.exe (PID: 10048)
- Unicorn-9415.exe (PID: 10112)
- Unicorn-54267.exe (PID: 10144)
- Unicorn-64454.exe (PID: 8320)
- Unicorn-10599.exe (PID: 10220)
- Unicorn-1802.exe (PID: 10172)
- Unicorn-35601.exe (PID: 10180)
- Unicorn-65201.exe (PID: 10228)
- Unicorn-64546.exe (PID: 10204)
- Unicorn-29286.exe (PID: 8852)
- Unicorn-17392.exe (PID: 9292)
- Unicorn-30966.exe (PID: 5200)
- Unicorn-30220.exe (PID: 10244)
- Unicorn-24089.exe (PID: 5204)
- Unicorn-38388.exe (PID: 10272)
- Unicorn-42015.exe (PID: 10316)
- Unicorn-56374.exe (PID: 8232)
- Unicorn-52290.exe (PID: 2908)
- Unicorn-28658.exe (PID: 10392)
- Unicorn-1994.exe (PID: 10360)
- Unicorn-65314.exe (PID: 10440)
- Unicorn-28876.exe (PID: 9620)
- Unicorn-25538.exe (PID: 9572)
- Unicorn-9415.exe (PID: 10096)
- Unicorn-13691.exe (PID: 10340)
- Unicorn-41464.exe (PID: 10416)
- Unicorn-14895.exe (PID: 8964)
- Unicorn-59747.exe (PID: 10472)
- Unicorn-3836.exe (PID: 1452)
- Unicorn-49270.exe (PID: 10560)
- Unicorn-17174.exe (PID: 10584)
- Unicorn-7422.exe (PID: 10608)
- Unicorn-41486.exe (PID: 10632)
- Unicorn-23103.exe (PID: 10656)
- Unicorn-60515.exe (PID: 10696)
- Unicorn-29810.exe (PID: 10760)
- Unicorn-13241.exe (PID: 10744)
- Unicorn-15755.exe (PID: 5776)
- Unicorn-515.exe (PID: 10816)
- Unicorn-13836.exe (PID: 10836)
- Unicorn-62958.exe (PID: 10904)
- Unicorn-35383.exe (PID: 10884)
- Unicorn-5668.exe (PID: 10860)
- Unicorn-19700.exe (PID: 9912)
- Unicorn-54790.exe (PID: 10984)
- Unicorn-42446.exe (PID: 10920)
- Unicorn-42446.exe (PID: 10928)
- Unicorn-56836.exe (PID: 11004)
- Unicorn-1413.exe (PID: 11020)
- Unicorn-6052.exe (PID: 11112)
- Unicorn-45046.exe (PID: 8812)
- Unicorn-22580.exe (PID: 10936)
- Unicorn-58682.exe (PID: 11044)
- Unicorn-58590.exe (PID: 11204)
- Unicorn-14220.exe (PID: 11052)
- Unicorn-59258.exe (PID: 5868)
- Unicorn-28531.exe (PID: 11244)
- Unicorn-55683.exe (PID: 11172)
- Unicorn-22388.exe (PID: 11076)
- Unicorn-22388.exe (PID: 11084)
- Unicorn-61283.exe (PID: 11188)
- Unicorn-7998.exe (PID: 11196)
- Unicorn-3743.exe (PID: 11348)
- Unicorn-14796.exe (PID: 11260)
- Unicorn-22388.exe (PID: 11068)
- Unicorn-56458.exe (PID: 2340)
- Unicorn-51217.exe (PID: 11180)
- Unicorn-7827.exe (PID: 11396)
- Unicorn-5881.exe (PID: 8612)
- Unicorn-21834.exe (PID: 11100)
- Unicorn-20272.exe (PID: 11316)
- Unicorn-44776.exe (PID: 11292)
- Unicorn-32259.exe (PID: 11272)
- Unicorn-34470.exe (PID: 11356)
- Unicorn-56266.exe (PID: 11368)
- Unicorn-64931.exe (PID: 11412)
- Unicorn-65196.exe (PID: 11376)
- Unicorn-59258.exe (PID: 5020)
- Unicorn-12103.exe (PID: 7084)
- Unicorn-5689.exe (PID: 11492)
- Unicorn-32524.exe (PID: 11284)
Starts itself from another location
- Unicorn-3229.exe (PID: 5332)
- 1 (323).exe (PID: 4892)
- Unicorn-9020.exe (PID: 7392)
- Unicorn-56488.exe (PID: 7440)
- Unicorn-1257.exe (PID: 7468)
- Unicorn-32538.exe (PID: 7456)
- Unicorn-56580.exe (PID: 7488)
- Unicorn-23562.exe (PID: 8104)
- Unicorn-42590.exe (PID: 8144)
- Unicorn-15201.exe (PID: 8184)
- Unicorn-35714.exe (PID: 4784)
- Unicorn-45928.exe (PID: 1244)
- Unicorn-11117.exe (PID: 5968)
- Unicorn-36368.exe (PID: 7000)
- Unicorn-32970.exe (PID: 7372)
- Unicorn-55969.exe (PID: 6644)
- Unicorn-4101.exe (PID: 6668)
- Unicorn-37520.exe (PID: 2516)
- Unicorn-40858.exe (PID: 5048)
- Unicorn-61370.exe (PID: 4180)
- Unicorn-54755.exe (PID: 7428)
- Unicorn-38973.exe (PID: 5384)
- Unicorn-29182.exe (PID: 1388)
- Unicorn-8569.exe (PID: 2268)
- Unicorn-64604.exe (PID: 2240)
- Unicorn-64869.exe (PID: 6676)
- Unicorn-30150.exe (PID: 6752)
- Unicorn-27598.exe (PID: 1568)
- Unicorn-12653.exe (PID: 7604)
- Unicorn-36281.exe (PID: 6576)
- Unicorn-16415.exe (PID: 7612)
- Unicorn-27350.exe (PID: 1096)
- Unicorn-19644.exe (PID: 7700)
- Unicorn-42756.exe (PID: 208)
- Unicorn-50178.exe (PID: 7548)
- Unicorn-9145.exe (PID: 7520)
- Unicorn-19543.exe (PID: 7540)
- Unicorn-17048.exe (PID: 7824)
- Unicorn-35788.exe (PID: 7796)
- Unicorn-22166.exe (PID: 7820)
- Unicorn-45279.exe (PID: 7836)
- Unicorn-15922.exe (PID: 7508)
- Unicorn-4075.exe (PID: 7944)
- Unicorn-60960.exe (PID: 7916)
- Unicorn-48616.exe (PID: 7748)
- Unicorn-2684.exe (PID: 7960)
- Unicorn-63390.exe (PID: 7980)
- Unicorn-34610.exe (PID: 7904)
- Unicorn-57168.exe (PID: 8016)
- Unicorn-52322.exe (PID: 7884)
- Unicorn-16690.exe (PID: 8040)
- Unicorn-48808.exe (PID: 7864)
- Unicorn-48808.exe (PID: 7856)
- Unicorn-7006.exe (PID: 672)
- Unicorn-48900.exe (PID: 5864)
- Unicorn-59114.exe (PID: 8176)
- Unicorn-59114.exe (PID: 8160)
- Unicorn-55030.exe (PID: 5728)
- Unicorn-54765.exe (PID: 7232)
- Unicorn-35164.exe (PID: 7252)
- Unicorn-26341.exe (PID: 4620)
- Unicorn-12606.exe (PID: 5256)
- Unicorn-45855.exe (PID: 7256)
- Unicorn-59498.exe (PID: 6132)
- Unicorn-12435.exe (PID: 8056)
- Unicorn-4578.exe (PID: 5548)
- Unicorn-14473.exe (PID: 744)
- Unicorn-19788.exe (PID: 7236)
- Unicorn-48808.exe (PID: 8096)
- Unicorn-43738.exe (PID: 4000)
- Unicorn-13888.exe (PID: 4692)
- Unicorn-41408.exe (PID: 1280)
- Unicorn-5206.exe (PID: 7284)
- Unicorn-41408.exe (PID: 6960)
- Unicorn-13888.exe (PID: 7332)
- Unicorn-47116.exe (PID: 6516)
- Unicorn-58051.exe (PID: 4244)
- Unicorn-52290.exe (PID: 2908)
- Unicorn-23702.exe (PID: 5084)
- Unicorn-18941.exe (PID: 7280)
- Unicorn-40592.exe (PID: 8224)
- Unicorn-64634.exe (PID: 1300)
- Unicorn-29156.exe (PID: 7324)
- Unicorn-62496.exe (PID: 8252)
- Unicorn-3836.exe (PID: 1452)
- Unicorn-31605.exe (PID: 7156)
- Unicorn-56374.exe (PID: 8232)
- Unicorn-42538.exe (PID: 8288)
- Unicorn-5511.exe (PID: 8384)
- Unicorn-35762.exe (PID: 8276)
- Unicorn-25024.exe (PID: 8436)
- Unicorn-31080.exe (PID: 8000)
- Unicorn-15533.exe (PID: 8420)
- Unicorn-5611.exe (PID: 8332)
- Unicorn-38668.exe (PID: 8452)
- Unicorn-45445.exe (PID: 8484)
- Unicorn-23316.exe (PID: 8512)
- Unicorn-32986.exe (PID: 8576)
- Unicorn-3665.exe (PID: 8560)
- Unicorn-28710.exe (PID: 8760)
- Unicorn-64267.exe (PID: 8732)
- Unicorn-58045.exe (PID: 8784)
- Unicorn-25180.exe (PID: 8804)
- Unicorn-10811.exe (PID: 8988)
- Unicorn-812.exe (PID: 8912)
- Unicorn-10235.exe (PID: 8820)
- Unicorn-1342.exe (PID: 8920)
- Unicorn-29286.exe (PID: 8844)
- Unicorn-45046.exe (PID: 8812)
- Unicorn-64096.exe (PID: 8836)
- Unicorn-57609.exe (PID: 9012)
- Unicorn-17034.exe (PID: 8888)
- Unicorn-29840.exe (PID: 8996)
- Unicorn-32200.exe (PID: 9100)
- Unicorn-35316.exe (PID: 8940)
- Unicorn-14895.exe (PID: 8964)
- Unicorn-26691.exe (PID: 9116)
- Unicorn-38008.exe (PID: 9004)
- Unicorn-20825.exe (PID: 9124)
- Unicorn-62342.exe (PID: 9148)
- Unicorn-9612.exe (PID: 9168)
- Unicorn-63582.exe (PID: 7344)
- Unicorn-30054.exe (PID: 1168)
- Unicorn-29286.exe (PID: 8852)
- Unicorn-61772.exe (PID: 9220)
- Unicorn-15755.exe (PID: 5776)
- Unicorn-64651.exe (PID: 9020)
- Unicorn-61335.exe (PID: 8536)
- Unicorn-60588.exe (PID: 8556)
- Unicorn-52420.exe (PID: 9088)
- Unicorn-64672.exe (PID: 8552)
- Unicorn-18740.exe (PID: 9240)
- Unicorn-46774.exe (PID: 9296)
- Unicorn-50152.exe (PID: 8204)
- Unicorn-48647.exe (PID: 9256)
- Unicorn-54983.exe (PID: 4608)
- Unicorn-22632.exe (PID: 9320)
- Unicorn-16523.exe (PID: 9412)
INFO
The sample compiled with chinese language support
- 1 (323).exe (PID: 4892)
- Unicorn-29286.exe (PID: 8844)
- Unicorn-64096.exe (PID: 8836)
- Unicorn-32200.exe (PID: 9100)
- Unicorn-12435.exe (PID: 8056)
- Unicorn-62342.exe (PID: 9148)
- Unicorn-59498.exe (PID: 6132)
- Unicorn-42756.exe (PID: 208)
- Unicorn-14473.exe (PID: 744)
- Unicorn-56488.exe (PID: 7440)
- Unicorn-18740.exe (PID: 9240)
- Unicorn-5206.exe (PID: 7284)
- Unicorn-58051.exe (PID: 4244)
- Unicorn-15922.exe (PID: 7508)
- Unicorn-13888.exe (PID: 7332)
- Unicorn-41408.exe (PID: 1280)
- Unicorn-47116.exe (PID: 6516)
- Unicorn-23702.exe (PID: 5084)
- Unicorn-18941.exe (PID: 7280)
- Unicorn-46774.exe (PID: 9296)
- Unicorn-38606.exe (PID: 9248)
- Unicorn-54983.exe (PID: 4608)
- Unicorn-48647.exe (PID: 9256)
- Unicorn-40592.exe (PID: 8224)
- Unicorn-32970.exe (PID: 7372)
- Unicorn-48616.exe (PID: 7748)
- Unicorn-61370.exe (PID: 4180)
- Unicorn-4075.exe (PID: 7944)
- Unicorn-40858.exe (PID: 5048)
- Unicorn-60960.exe (PID: 7916)
- Unicorn-64634.exe (PID: 1300)
- Unicorn-42590.exe (PID: 8144)
- Unicorn-29156.exe (PID: 7324)
- Unicorn-31605.exe (PID: 7156)
- Unicorn-15201.exe (PID: 8184)
- Unicorn-45279.exe (PID: 7836)
- Unicorn-29182.exe (PID: 1388)
- Unicorn-54755.exe (PID: 7428)
- Unicorn-62496.exe (PID: 8252)
- Unicorn-35714.exe (PID: 4784)
- Unicorn-2684.exe (PID: 7960)
- Unicorn-38973.exe (PID: 5384)
- Unicorn-17048.exe (PID: 7824)
- Unicorn-32538.exe (PID: 7456)
- Unicorn-35762.exe (PID: 8276)
- Unicorn-42538.exe (PID: 8288)
- Unicorn-22166.exe (PID: 7820)
- Unicorn-8569.exe (PID: 2268)
- Unicorn-5611.exe (PID: 8332)
- Unicorn-45928.exe (PID: 1244)
- Unicorn-25024.exe (PID: 8436)
- Unicorn-63390.exe (PID: 7980)
- Unicorn-5511.exe (PID: 8384)
- Unicorn-16523.exe (PID: 9412)
- Unicorn-57848.exe (PID: 9484)
- Unicorn-64604.exe (PID: 2240)
- Unicorn-45445.exe (PID: 8484)
- Unicorn-4563.exe (PID: 9468)
- Unicorn-34610.exe (PID: 7904)
- Unicorn-47542.exe (PID: 9500)
- Unicorn-38668.exe (PID: 8452)
- Unicorn-23316.exe (PID: 8512)
- Unicorn-57142.exe (PID: 8472)
- Unicorn-52322.exe (PID: 7884)
- Unicorn-64869.exe (PID: 6676)
- Unicorn-31080.exe (PID: 8000)
- Unicorn-15533.exe (PID: 8420)
- Unicorn-29156.exe (PID: 7292)
- Unicorn-57168.exe (PID: 8016)
- Unicorn-6317.exe (PID: 9660)
- Unicorn-59602.exe (PID: 9708)
- Unicorn-26930.exe (PID: 9580)
- Unicorn-32986.exe (PID: 8576)
- Unicorn-3229.exe (PID: 5332)
- Unicorn-4947.exe (PID: 9748)
- Unicorn-57656.exe (PID: 9588)
- Unicorn-16690.exe (PID: 8040)
- Unicorn-48808.exe (PID: 7864)
- Unicorn-31568.exe (PID: 9668)
- Unicorn-50043.exe (PID: 9556)
- Unicorn-57656.exe (PID: 9608)
- Unicorn-48808.exe (PID: 7856)
- Unicorn-11117.exe (PID: 5968)
- Unicorn-12653.exe (PID: 7604)
- Unicorn-14603.exe (PID: 8644)
- Unicorn-15253.exe (PID: 9764)
- Unicorn-27598.exe (PID: 1568)
- Unicorn-28710.exe (PID: 8760)
- Unicorn-21838.exe (PID: 9840)
- Unicorn-3665.exe (PID: 8560)
- Unicorn-10977.exe (PID: 9796)
- Unicorn-16238.exe (PID: 9808)
- Unicorn-48808.exe (PID: 8096)
- Unicorn-35574.exe (PID: 9848)
- Unicorn-27350.exe (PID: 1096)
- Unicorn-16030.exe (PID: 9904)
- Unicorn-41704.exe (PID: 9856)
- Unicorn-9020.exe (PID: 7392)
- Unicorn-26341.exe (PID: 4620)
- Unicorn-58045.exe (PID: 8784)
- Unicorn-30150.exe (PID: 6752)
- Unicorn-48900.exe (PID: 5864)
- Unicorn-59114.exe (PID: 8160)
- Unicorn-64267.exe (PID: 8732)
- Unicorn-55030.exe (PID: 5728)
- Unicorn-2295.exe (PID: 9896)
- Unicorn-25180.exe (PID: 8804)
- Unicorn-41604.exe (PID: 10040)
- Unicorn-16415.exe (PID: 7612)
- Unicorn-36281.exe (PID: 6576)
- Unicorn-1342.exe (PID: 8920)
- Unicorn-10877.exe (PID: 10012)
- Unicorn-13478.exe (PID: 9948)
- Unicorn-36368.exe (PID: 7000)
- Unicorn-10235.exe (PID: 8820)
- Unicorn-12606.exe (PID: 5256)
- Unicorn-29260.exe (PID: 9980)
- Unicorn-1257.exe (PID: 7468)
- Unicorn-56580.exe (PID: 7488)
- Unicorn-55969.exe (PID: 6644)
- Unicorn-57609.exe (PID: 9012)
- Unicorn-1247.exe (PID: 10076)
- Unicorn-31952.exe (PID: 10004)
- Unicorn-38008.exe (PID: 9004)
- Unicorn-9415.exe (PID: 10104)
- Unicorn-26691.exe (PID: 9116)
- Unicorn-19644.exe (PID: 7700)
- Unicorn-10811.exe (PID: 8988)
- Unicorn-59986.exe (PID: 10048)
- Unicorn-17034.exe (PID: 8888)
- Unicorn-29840.exe (PID: 8996)
- Unicorn-9415.exe (PID: 10112)
- Unicorn-54267.exe (PID: 10144)
- Unicorn-11003.exe (PID: 9192)
- Unicorn-4101.exe (PID: 6668)
- Unicorn-9612.exe (PID: 9168)
- Unicorn-1802.exe (PID: 10172)
- Unicorn-35601.exe (PID: 10180)
- Unicorn-63582.exe (PID: 7344)
- Unicorn-30054.exe (PID: 1168)
- Unicorn-64454.exe (PID: 8320)
- Unicorn-20825.exe (PID: 9124)
- Unicorn-45855.exe (PID: 7256)
- Unicorn-10599.exe (PID: 10220)
- Unicorn-64546.exe (PID: 10204)
- Unicorn-19543.exe (PID: 7540)
- Unicorn-19788.exe (PID: 7236)
- Unicorn-65201.exe (PID: 10228)
- Unicorn-29286.exe (PID: 8852)
- Unicorn-61772.exe (PID: 9220)
- Unicorn-37520.exe (PID: 2516)
- Unicorn-17392.exe (PID: 9292)
- Unicorn-61335.exe (PID: 8536)
- Unicorn-30966.exe (PID: 5200)
- Unicorn-64672.exe (PID: 8552)
- Unicorn-23562.exe (PID: 8104)
- Unicorn-50178.exe (PID: 7548)
- Unicorn-13888.exe (PID: 4692)
- Unicorn-41408.exe (PID: 6960)
- Unicorn-35788.exe (PID: 7796)
- Unicorn-30220.exe (PID: 10244)
- Unicorn-9145.exe (PID: 7520)
- Unicorn-38388.exe (PID: 10272)
- Unicorn-22632.exe (PID: 9320)
- Unicorn-24089.exe (PID: 5204)
- Unicorn-56374.exe (PID: 8232)
- Unicorn-52290.exe (PID: 2908)
- Unicorn-60588.exe (PID: 8556)
- Unicorn-52420.exe (PID: 9088)
- Unicorn-42015.exe (PID: 10316)
- Unicorn-65314.exe (PID: 10440)
- Unicorn-41464.exe (PID: 10416)
- Unicorn-25538.exe (PID: 9572)
- Unicorn-28876.exe (PID: 9620)
- Unicorn-9415.exe (PID: 10096)
- Unicorn-12565.exe (PID: 8628)
- Unicorn-7006.exe (PID: 672)
- Unicorn-13691.exe (PID: 10340)
- Unicorn-1994.exe (PID: 10360)
- Unicorn-28658.exe (PID: 10392)
- Unicorn-14895.exe (PID: 8964)
- Unicorn-812.exe (PID: 8912)
- Unicorn-64651.exe (PID: 9020)
- Unicorn-50152.exe (PID: 8204)
- Unicorn-59747.exe (PID: 10472)
- Unicorn-49270.exe (PID: 10560)
- Unicorn-3836.exe (PID: 1452)
- Unicorn-17174.exe (PID: 10584)
- Unicorn-7422.exe (PID: 10608)
- Unicorn-41486.exe (PID: 10632)
- Unicorn-23103.exe (PID: 10656)
- Unicorn-4578.exe (PID: 5548)
- Unicorn-60515.exe (PID: 10696)
- Unicorn-13241.exe (PID: 10744)
- Unicorn-29810.exe (PID: 10760)
- Unicorn-13836.exe (PID: 10836)
- Unicorn-35383.exe (PID: 10884)
- Unicorn-54765.exe (PID: 7232)
- Unicorn-5668.exe (PID: 10860)
- Unicorn-19700.exe (PID: 9912)
- Unicorn-35164.exe (PID: 7252)
- Unicorn-15755.exe (PID: 5776)
- Unicorn-515.exe (PID: 10816)
- Unicorn-22580.exe (PID: 10936)
- Unicorn-42446.exe (PID: 10920)
- Unicorn-54790.exe (PID: 10984)
- Unicorn-1413.exe (PID: 11020)
- Unicorn-42446.exe (PID: 10928)
- Unicorn-56836.exe (PID: 11004)
- Unicorn-62958.exe (PID: 10904)
- Unicorn-35316.exe (PID: 8940)
- Unicorn-45046.exe (PID: 8812)
- Unicorn-43738.exe (PID: 4000)
- Unicorn-58682.exe (PID: 11044)
- Unicorn-58590.exe (PID: 11204)
- Unicorn-14220.exe (PID: 11052)
- Unicorn-61283.exe (PID: 11188)
- Unicorn-28531.exe (PID: 11244)
- Unicorn-59258.exe (PID: 5868)
- Unicorn-22388.exe (PID: 11076)
- Unicorn-6052.exe (PID: 11112)
- Unicorn-22388.exe (PID: 11084)
- Unicorn-5881.exe (PID: 8612)
- Unicorn-21834.exe (PID: 11100)
- Unicorn-22388.exe (PID: 11068)
- Unicorn-14796.exe (PID: 11260)
- Unicorn-56458.exe (PID: 2340)
- Unicorn-7998.exe (PID: 11196)
- Unicorn-51217.exe (PID: 11180)
- Unicorn-55683.exe (PID: 11172)
- Unicorn-3743.exe (PID: 11348)
- Unicorn-12103.exe (PID: 7084)
- Unicorn-34470.exe (PID: 11356)
- Unicorn-56266.exe (PID: 11368)
- Unicorn-44776.exe (PID: 11292)
- Unicorn-32259.exe (PID: 11272)
- Unicorn-64931.exe (PID: 11412)
- Unicorn-7827.exe (PID: 11396)
- Unicorn-59258.exe (PID: 5020)
- Unicorn-20272.exe (PID: 11316)
- Unicorn-32524.exe (PID: 11284)
- Unicorn-65196.exe (PID: 11376)
- Unicorn-5689.exe (PID: 11492)
Create files in a temporary directory
- Unicorn-9020.exe (PID: 7392)
- 1 (323).exe (PID: 4892)
- Unicorn-56488.exe (PID: 7440)
- Unicorn-32538.exe (PID: 7456)
- Unicorn-56580.exe (PID: 7488)
- Unicorn-23562.exe (PID: 8104)
- Unicorn-11117.exe (PID: 5968)
- Unicorn-35714.exe (PID: 4784)
- Unicorn-1257.exe (PID: 7468)
- Unicorn-15201.exe (PID: 8184)
- Unicorn-36368.exe (PID: 7000)
- Unicorn-55969.exe (PID: 6644)
- Unicorn-32970.exe (PID: 7372)
- Unicorn-3229.exe (PID: 5332)
- Unicorn-4101.exe (PID: 6668)
- Unicorn-61370.exe (PID: 4180)
- Unicorn-37520.exe (PID: 2516)
- Unicorn-40858.exe (PID: 5048)
- Unicorn-38973.exe (PID: 5384)
- Unicorn-54755.exe (PID: 7428)
- Unicorn-8569.exe (PID: 2268)
- Unicorn-45928.exe (PID: 1244)
- Unicorn-64869.exe (PID: 6676)
- Unicorn-27598.exe (PID: 1568)
- Unicorn-16415.exe (PID: 7612)
- Unicorn-36281.exe (PID: 6576)
- Unicorn-19644.exe (PID: 7700)
- Unicorn-42756.exe (PID: 208)
- Unicorn-50178.exe (PID: 7548)
- Unicorn-19543.exe (PID: 7540)
- Unicorn-9145.exe (PID: 7520)
- Unicorn-35788.exe (PID: 7796)
- Unicorn-42590.exe (PID: 8144)
- Unicorn-45279.exe (PID: 7836)
- Unicorn-48616.exe (PID: 7748)
- Unicorn-60960.exe (PID: 7916)
- Unicorn-4075.exe (PID: 7944)
- Unicorn-2684.exe (PID: 7960)
- Unicorn-31080.exe (PID: 8000)
- Unicorn-29182.exe (PID: 1388)
- Unicorn-57168.exe (PID: 8016)
- Unicorn-64604.exe (PID: 2240)
- Unicorn-34610.exe (PID: 7904)
- Unicorn-52322.exe (PID: 7884)
- Unicorn-16690.exe (PID: 8040)
- Unicorn-48808.exe (PID: 7864)
- Unicorn-48808.exe (PID: 7856)
- Unicorn-30150.exe (PID: 6752)
- Unicorn-12653.exe (PID: 7604)
- Unicorn-54765.exe (PID: 7232)
- Unicorn-7006.exe (PID: 672)
- Unicorn-48808.exe (PID: 8096)
- Unicorn-55030.exe (PID: 5728)
- Unicorn-59114.exe (PID: 8160)
- Unicorn-48900.exe (PID: 5864)
- Unicorn-35164.exe (PID: 7252)
- Unicorn-12606.exe (PID: 5256)
- Unicorn-26341.exe (PID: 4620)
- Unicorn-12435.exe (PID: 8056)
- Unicorn-45855.exe (PID: 7256)
- Unicorn-63582.exe (PID: 7344)
- Unicorn-14473.exe (PID: 744)
- Unicorn-4578.exe (PID: 5548)
- Unicorn-19788.exe (PID: 7236)
- Unicorn-43738.exe (PID: 4000)
- Unicorn-13888.exe (PID: 4692)
- Unicorn-41408.exe (PID: 1280)
- Unicorn-17048.exe (PID: 7824)
- Unicorn-15922.exe (PID: 7508)
- Unicorn-5206.exe (PID: 7284)
- Unicorn-58051.exe (PID: 4244)
- Unicorn-41408.exe (PID: 6960)
- Unicorn-13888.exe (PID: 7332)
- Unicorn-50152.exe (PID: 8204)
- Unicorn-47116.exe (PID: 6516)
- Unicorn-18941.exe (PID: 7280)
- Unicorn-23702.exe (PID: 5084)
- Unicorn-40592.exe (PID: 8224)
- Unicorn-29156.exe (PID: 7324)
- Unicorn-62496.exe (PID: 8252)
- Unicorn-64634.exe (PID: 1300)
- Unicorn-22166.exe (PID: 7820)
- Unicorn-35762.exe (PID: 8276)
- Unicorn-31605.exe (PID: 7156)
- Unicorn-63390.exe (PID: 7980)
- Unicorn-5511.exe (PID: 8384)
- Unicorn-5611.exe (PID: 8332)
- Unicorn-42538.exe (PID: 8288)
- Unicorn-25024.exe (PID: 8436)
- Unicorn-15533.exe (PID: 8420)
- Unicorn-29156.exe (PID: 7292)
- Unicorn-38668.exe (PID: 8452)
- Unicorn-45445.exe (PID: 8484)
- Unicorn-57142.exe (PID: 8472)
- Unicorn-23316.exe (PID: 8512)
- Unicorn-32986.exe (PID: 8576)
- Unicorn-12565.exe (PID: 8628)
- Unicorn-3665.exe (PID: 8560)
- Unicorn-28710.exe (PID: 8760)
- Unicorn-64267.exe (PID: 8732)
- Unicorn-27350.exe (PID: 1096)
- Unicorn-1342.exe (PID: 8920)
- Unicorn-58045.exe (PID: 8784)
- Unicorn-25180.exe (PID: 8804)
- Unicorn-812.exe (PID: 8912)
- Unicorn-10235.exe (PID: 8820)
- Unicorn-64651.exe (PID: 9020)
- Unicorn-17034.exe (PID: 8888)
- Unicorn-29286.exe (PID: 8844)
- Unicorn-64096.exe (PID: 8836)
- Unicorn-32200.exe (PID: 9100)
- Unicorn-29840.exe (PID: 8996)
- Unicorn-38008.exe (PID: 9004)
- Unicorn-26691.exe (PID: 9116)
- Unicorn-20825.exe (PID: 9124)
- Unicorn-9612.exe (PID: 9168)
- Unicorn-62342.exe (PID: 9148)
- Unicorn-59498.exe (PID: 6132)
- Unicorn-30054.exe (PID: 1168)
- Unicorn-11003.exe (PID: 9192)
- Unicorn-61772.exe (PID: 9220)
- Unicorn-64672.exe (PID: 8552)
- Unicorn-60588.exe (PID: 8556)
- Unicorn-52420.exe (PID: 9088)
- Unicorn-35316.exe (PID: 8940)
- Unicorn-61335.exe (PID: 8536)
- Unicorn-18740.exe (PID: 9240)
- Unicorn-38606.exe (PID: 9248)
- Unicorn-46774.exe (PID: 9296)
- Unicorn-54983.exe (PID: 4608)
- Unicorn-48647.exe (PID: 9256)
- Unicorn-22632.exe (PID: 9320)
- Unicorn-16523.exe (PID: 9412)
Checks supported languages
- 1 (323).exe (PID: 4892)
- Unicorn-3229.exe (PID: 5332)
- Unicorn-9020.exe (PID: 7392)
- Unicorn-32970.exe (PID: 7372)
- Unicorn-32538.exe (PID: 7456)
- Unicorn-1257.exe (PID: 7468)
- Unicorn-56580.exe (PID: 7488)
- Unicorn-23562.exe (PID: 8104)
- Unicorn-42590.exe (PID: 8144)
- Unicorn-45928.exe (PID: 1244)
- Unicorn-35714.exe (PID: 4784)
- Unicorn-36368.exe (PID: 7000)
- Unicorn-11117.exe (PID: 5968)
- Unicorn-55969.exe (PID: 6644)
- Unicorn-15201.exe (PID: 8184)
- Unicorn-61370.exe (PID: 4180)
- Unicorn-4101.exe (PID: 6668)
- Unicorn-37520.exe (PID: 2516)
- Unicorn-40858.exe (PID: 5048)
- Unicorn-54755.exe (PID: 7428)
- Unicorn-38973.exe (PID: 5384)
- Unicorn-29182.exe (PID: 1388)
- Unicorn-64604.exe (PID: 2240)
- Unicorn-8569.exe (PID: 2268)
- Unicorn-64869.exe (PID: 6676)
- Unicorn-56488.exe (PID: 7440)
- Unicorn-12653.exe (PID: 7604)
- Unicorn-27598.exe (PID: 1568)
- Unicorn-16415.exe (PID: 7612)
- Unicorn-36281.exe (PID: 6576)
- Unicorn-27350.exe (PID: 1096)
- Unicorn-19644.exe (PID: 7700)
- Unicorn-19543.exe (PID: 7540)
- Unicorn-50178.exe (PID: 7548)
- Unicorn-9145.exe (PID: 7520)
- Unicorn-45279.exe (PID: 7836)
- Unicorn-60960.exe (PID: 7916)
- Unicorn-48616.exe (PID: 7748)
- Unicorn-4075.exe (PID: 7944)
- Unicorn-35788.exe (PID: 7796)
- Unicorn-17048.exe (PID: 7824)
- Unicorn-2684.exe (PID: 7960)
- Unicorn-57168.exe (PID: 8016)
- Unicorn-34610.exe (PID: 7904)
- Unicorn-63390.exe (PID: 7980)
- Unicorn-16690.exe (PID: 8040)
- Unicorn-48808.exe (PID: 7856)
- Unicorn-48808.exe (PID: 8096)
- Unicorn-59114.exe (PID: 8160)
- Unicorn-52322.exe (PID: 7884)
- Unicorn-55030.exe (PID: 5728)
- Unicorn-59114.exe (PID: 8176)
- Unicorn-45855.exe (PID: 7256)
- Unicorn-7006.exe (PID: 672)
- Unicorn-12606.exe (PID: 5256)
- Unicorn-26341.exe (PID: 4620)
- Unicorn-12435.exe (PID: 8056)
- Unicorn-59498.exe (PID: 6132)
- Unicorn-48900.exe (PID: 5864)
- Unicorn-54765.exe (PID: 7232)
- Unicorn-14473.exe (PID: 744)
- Unicorn-4578.exe (PID: 5548)
- Unicorn-43738.exe (PID: 4000)
- Unicorn-19788.exe (PID: 7236)
- Unicorn-63582.exe (PID: 7344)
- Unicorn-13888.exe (PID: 7332)
- Unicorn-18941.exe (PID: 7280)
- Unicorn-47116.exe (PID: 6516)
- Unicorn-41408.exe (PID: 1280)
- Unicorn-5206.exe (PID: 7284)
- Unicorn-42756.exe (PID: 208)
- Unicorn-13888.exe (PID: 4692)
- Unicorn-41408.exe (PID: 6960)
- Unicorn-29156.exe (PID: 7324)
- Unicorn-54983.exe (PID: 4608)
- Unicorn-29156.exe (PID: 7292)
- Unicorn-3836.exe (PID: 1452)
- Unicorn-23702.exe (PID: 5084)
- Unicorn-31605.exe (PID: 7156)
- Unicorn-64634.exe (PID: 1300)
- Unicorn-52290.exe (PID: 2908)
- Unicorn-50152.exe (PID: 8204)
- Unicorn-40592.exe (PID: 8224)
- Unicorn-56374.exe (PID: 8232)
- Unicorn-35762.exe (PID: 8276)
- Unicorn-42538.exe (PID: 8288)
- Unicorn-62496.exe (PID: 8252)
- Unicorn-25024.exe (PID: 8436)
- Unicorn-38668.exe (PID: 8452)
- Unicorn-5611.exe (PID: 8332)
- Unicorn-15533.exe (PID: 8420)
- Unicorn-23316.exe (PID: 8512)
- Unicorn-3665.exe (PID: 8560)
- Unicorn-32986.exe (PID: 8576)
- Unicorn-45445.exe (PID: 8484)
- Unicorn-57142.exe (PID: 8472)
- Unicorn-28710.exe (PID: 8760)
- Unicorn-58045.exe (PID: 8784)
- Unicorn-14603.exe (PID: 8644)
- Unicorn-12565.exe (PID: 8628)
- Unicorn-64267.exe (PID: 8732)
- Unicorn-45046.exe (PID: 8812)
- Unicorn-25180.exe (PID: 8804)
- Unicorn-29286.exe (PID: 8844)
- Unicorn-64096.exe (PID: 8836)
- Unicorn-812.exe (PID: 8912)
- Unicorn-1342.exe (PID: 8920)
- Unicorn-17034.exe (PID: 8888)
- Unicorn-29286.exe (PID: 8852)
- Unicorn-14895.exe (PID: 8964)
- Unicorn-35316.exe (PID: 8940)
- Unicorn-38008.exe (PID: 9004)
- Unicorn-9612.exe (PID: 9168)
- Unicorn-20825.exe (PID: 9124)
- Unicorn-29840.exe (PID: 8996)
- Unicorn-32200.exe (PID: 9100)
- Unicorn-26691.exe (PID: 9116)
- Unicorn-62342.exe (PID: 9148)
- Unicorn-11003.exe (PID: 9192)
- Unicorn-10811.exe (PID: 8988)
- Unicorn-57609.exe (PID: 9012)
- Unicorn-30054.exe (PID: 1168)
- Unicorn-15755.exe (PID: 5776)
- Unicorn-61335.exe (PID: 8536)
- Unicorn-60588.exe (PID: 8556)
- Unicorn-52420.exe (PID: 9088)
- Unicorn-48647.exe (PID: 9256)
- Unicorn-18740.exe (PID: 9240)
- Unicorn-38606.exe (PID: 9248)
- Unicorn-46774.exe (PID: 9296)
- Unicorn-61772.exe (PID: 9220)
- Unicorn-22632.exe (PID: 9320)
- Unicorn-4563.exe (PID: 9468)
- Unicorn-16523.exe (PID: 9412)
- Unicorn-47542.exe (PID: 9500)
- Unicorn-50043.exe (PID: 9556)
- Unicorn-57848.exe (PID: 9484)
- Unicorn-59602.exe (PID: 9708)
- Unicorn-57656.exe (PID: 9588)
- Unicorn-6317.exe (PID: 9660)
- Unicorn-57656.exe (PID: 9608)
- Unicorn-28876.exe (PID: 9620)
- Unicorn-31568.exe (PID: 9668)
- Unicorn-26930.exe (PID: 9580)
- Unicorn-21838.exe (PID: 9840)
- Unicorn-4947.exe (PID: 9748)
- Unicorn-10977.exe (PID: 9796)
- Unicorn-16238.exe (PID: 9808)
- Unicorn-35574.exe (PID: 9848)
- Unicorn-16030.exe (PID: 9904)
- Unicorn-2295.exe (PID: 9896)
- Unicorn-15253.exe (PID: 9764)
- Unicorn-41704.exe (PID: 9856)
- Unicorn-31952.exe (PID: 10004)
- Unicorn-28995.exe (PID: 9972)
- Unicorn-29260.exe (PID: 9980)
- Unicorn-10877.exe (PID: 10012)
- Unicorn-41604.exe (PID: 10040)
- Unicorn-59986.exe (PID: 10048)
- Unicorn-13478.exe (PID: 9948)
- Unicorn-9415.exe (PID: 10096)
- Unicorn-9415.exe (PID: 10112)
- Unicorn-9415.exe (PID: 10104)
- Unicorn-1802.exe (PID: 10172)
- Unicorn-35601.exe (PID: 10180)
- Unicorn-65201.exe (PID: 10228)
- Unicorn-1247.exe (PID: 10076)
- Unicorn-54267.exe (PID: 10144)
- Unicorn-64546.exe (PID: 10204)
- Unicorn-10599.exe (PID: 10220)
- Unicorn-30966.exe (PID: 5200)
- Unicorn-24089.exe (PID: 5204)
- Unicorn-30220.exe (PID: 10244)
- Unicorn-64454.exe (PID: 8320)
- Unicorn-17392.exe (PID: 9292)
- Unicorn-28658.exe (PID: 10392)
- Unicorn-13691.exe (PID: 10340)
- Unicorn-1994.exe (PID: 10360)
- Unicorn-38388.exe (PID: 10272)
- Unicorn-42015.exe (PID: 10316)
- Unicorn-59747.exe (PID: 10472)
- Unicorn-49270.exe (PID: 10560)
- Unicorn-7422.exe (PID: 10608)
- Unicorn-17174.exe (PID: 10584)
- Unicorn-41464.exe (PID: 10416)
- Unicorn-65314.exe (PID: 10440)
- Unicorn-41486.exe (PID: 10632)
- Unicorn-23103.exe (PID: 10656)
- Unicorn-11828.exe (PID: 10648)
- Unicorn-60515.exe (PID: 10696)
- Unicorn-13241.exe (PID: 10744)
- Unicorn-29810.exe (PID: 10760)
- Unicorn-13836.exe (PID: 10836)
- Unicorn-515.exe (PID: 10816)
- Unicorn-42446.exe (PID: 10928)
- Unicorn-35383.exe (PID: 10884)
- Unicorn-62958.exe (PID: 10904)
- Unicorn-22580.exe (PID: 10936)
- Unicorn-42446.exe (PID: 10920)
- Unicorn-56836.exe (PID: 11004)
- Unicorn-58682.exe (PID: 11044)
- Unicorn-1413.exe (PID: 11020)
- Unicorn-14220.exe (PID: 11060)
- Unicorn-22388.exe (PID: 11084)
- Unicorn-22388.exe (PID: 11068)
- Unicorn-6052.exe (PID: 11112)
- Unicorn-22388.exe (PID: 11076)
- Unicorn-21834.exe (PID: 11100)
- Unicorn-54790.exe (PID: 10984)
- Unicorn-7998.exe (PID: 11196)
- Unicorn-61283.exe (PID: 11188)
- Unicorn-59258.exe (PID: 5868)
- Unicorn-56458.exe (PID: 2340)
- Unicorn-55683.exe (PID: 11172)
- Unicorn-14796.exe (PID: 11260)
- Unicorn-51217.exe (PID: 11180)
- Unicorn-12103.exe (PID: 7084)
- Unicorn-58590.exe (PID: 11204)
- Unicorn-28531.exe (PID: 11244)
- Unicorn-32524.exe (PID: 11284)
- Unicorn-20272.exe (PID: 11316)
- Unicorn-59258.exe (PID: 5020)
- Unicorn-5881.exe (PID: 8612)
- Unicorn-32259.exe (PID: 11272)
- Unicorn-34470.exe (PID: 11356)
- Unicorn-44776.exe (PID: 11292)
- Unicorn-3743.exe (PID: 11348)
- Unicorn-7827.exe (PID: 11396)
- Unicorn-7827.exe (PID: 11428)
- Unicorn-61112.exe (PID: 11452)
- Unicorn-5689.exe (PID: 11492)
- Unicorn-61112.exe (PID: 11476)
- Unicorn-64931.exe (PID: 11412)
- Unicorn-56266.exe (PID: 11368)
- Unicorn-65196.exe (PID: 11376)
- Unicorn-28248.exe (PID: 11540)
- Unicorn-57568.exe (PID: 11560)
- Unicorn-35102.exe (PID: 11576)
- Unicorn-6421.exe (PID: 11596)
- Unicorn-30940.exe (PID: 11524)
- Unicorn-28788.exe (PID: 11628)
- Unicorn-20162.exe (PID: 11720)
- Unicorn-41594.exe (PID: 11688)
- Unicorn-37510.exe (PID: 11668)
- Unicorn-16344.exe (PID: 11752)
- Unicorn-21095.exe (PID: 11764)
- Unicorn-56883.exe (PID: 11908)
- Unicorn-11444.exe (PID: 11792)
- Unicorn-41616.exe (PID: 11828)
- Unicorn-21750.exe (PID: 11820)
- Unicorn-44117.exe (PID: 11900)
- Unicorn-1568.exe (PID: 11944)
- Unicorn-35756.exe (PID: 11988)
- Unicorn-46692.exe (PID: 11980)
- Unicorn-56945.exe (PID: 12068)
- Unicorn-7552.exe (PID: 12116)
- Unicorn-7552.exe (PID: 12120)
- Unicorn-29099.exe (PID: 12172)
- Unicorn-4859.exe (PID: 12188)
- Unicorn-4859.exe (PID: 12180)
- Unicorn-61744.exe (PID: 12008)
- Unicorn-9227.exe (PID: 12084)
- Unicorn-32078.exe (PID: 12220)
- Unicorn-3297.exe (PID: 12248)
- Unicorn-52498.exe (PID: 12276)
- Unicorn-23718.exe (PID: 12292)
- Unicorn-65305.exe (PID: 12320)
- Unicorn-16025.exe (PID: 12452)
- Unicorn-37100.exe (PID: 12436)
- Unicorn-2290.exe (PID: 12444)
- Unicorn-14079.exe (PID: 12420)
- Unicorn-36524.exe (PID: 12352)
- Unicorn-8512.exe (PID: 12384)
- Unicorn-13411.exe (PID: 12376)
- Unicorn-11941.exe (PID: 12544)
- Unicorn-20764.exe (PID: 12496)
- Unicorn-51491.exe (PID: 12512)
- Unicorn-12404.exe (PID: 12568)
- Unicorn-26794.exe (PID: 12604)
- Unicorn-20764.exe (PID: 12500)
- Unicorn-30878.exe (PID: 12584)
- Unicorn-44522.exe (PID: 12620)
- Unicorn-32038.exe (PID: 12640)
- Unicorn-20572.exe (PID: 12632)
- Unicorn-13530.exe (PID: 12672)
- Unicorn-59488.exe (PID: 12680)
- Unicorn-7665.exe (PID: 12716)
- Unicorn-36167.exe (PID: 12860)
- Unicorn-59388.exe (PID: 12840)
- Unicorn-25232.exe (PID: 12852)
- Unicorn-40438.exe (PID: 12648)
- Unicorn-59467.exe (PID: 12664)
- Unicorn-20328.exe (PID: 12760)
- Unicorn-14106.exe (PID: 12932)
- Unicorn-19010.exe (PID: 13048)
- Unicorn-24221.exe (PID: 12980)
- Unicorn-8241.exe (PID: 12940)
- Unicorn-12788.exe (PID: 13008)
- Unicorn-19010.exe (PID: 13044)
- Unicorn-19010.exe (PID: 13040)
- Unicorn-53266.exe (PID: 12896)
- Unicorn-4620.exe (PID: 12972)
- Unicorn-51439.exe (PID: 13224)
- Unicorn-57826.exe (PID: 13188)
- Unicorn-55026.exe (PID: 13180)
- Unicorn-22154.exe (PID: 13252)
- Unicorn-41490.exe (PID: 13248)
- Unicorn-56343.exe (PID: 13280)
- Unicorn-56396.exe (PID: 13144)
- Unicorn-53458.exe (PID: 13324)
- Unicorn-40941.exe (PID: 5452)
- Unicorn-21340.exe (PID: 4284)
- Unicorn-52067.exe (PID: 1764)
- Unicorn-32851.exe (PID: 13388)
- Unicorn-64511.exe (PID: 13300)
- Unicorn-10571.exe (PID: 5988)
Reads the computer name
- Unicorn-3229.exe (PID: 5332)
- 1 (323).exe (PID: 4892)
- Unicorn-32970.exe (PID: 7372)
- Unicorn-56580.exe (PID: 7488)
- Unicorn-32538.exe (PID: 7456)
- Unicorn-56488.exe (PID: 7440)
- Unicorn-1257.exe (PID: 7468)
- Unicorn-23562.exe (PID: 8104)
- Unicorn-42590.exe (PID: 8144)
- Unicorn-35714.exe (PID: 4784)
- Unicorn-15201.exe (PID: 8184)
- Unicorn-45928.exe (PID: 1244)
- Unicorn-11117.exe (PID: 5968)
- Unicorn-36368.exe (PID: 7000)
- Unicorn-55969.exe (PID: 6644)
- Unicorn-4101.exe (PID: 6668)
- Unicorn-40858.exe (PID: 5048)
- Unicorn-37520.exe (PID: 2516)
- Unicorn-61370.exe (PID: 4180)
- Unicorn-54755.exe (PID: 7428)
- Unicorn-38973.exe (PID: 5384)
- Unicorn-9020.exe (PID: 7392)
- Unicorn-29182.exe (PID: 1388)
- Unicorn-8569.exe (PID: 2268)
- Unicorn-64604.exe (PID: 2240)
- Unicorn-64869.exe (PID: 6676)
- Unicorn-12653.exe (PID: 7604)
- Unicorn-27598.exe (PID: 1568)
- Unicorn-30150.exe (PID: 6752)
- Unicorn-36281.exe (PID: 6576)
- Unicorn-27350.exe (PID: 1096)
- Unicorn-16415.exe (PID: 7612)
- Unicorn-19644.exe (PID: 7700)
- Unicorn-42756.exe (PID: 208)
- Unicorn-50178.exe (PID: 7548)
- Unicorn-45279.exe (PID: 7836)
- Unicorn-9145.exe (PID: 7520)
- Unicorn-17048.exe (PID: 7824)
- Unicorn-22166.exe (PID: 7820)
- Unicorn-35788.exe (PID: 7796)
- Unicorn-48616.exe (PID: 7748)
- Unicorn-60960.exe (PID: 7916)
- Unicorn-4075.exe (PID: 7944)
- Unicorn-2684.exe (PID: 7960)
- Unicorn-63390.exe (PID: 7980)
- Unicorn-57168.exe (PID: 8016)
- Unicorn-31080.exe (PID: 8000)
- Unicorn-52322.exe (PID: 7884)
- Unicorn-16690.exe (PID: 8040)
- Unicorn-48808.exe (PID: 7864)
- Unicorn-48808.exe (PID: 7856)
- Unicorn-7006.exe (PID: 672)
- Unicorn-54765.exe (PID: 7232)
- Unicorn-59114.exe (PID: 8160)
- Unicorn-26341.exe (PID: 4620)
- Unicorn-35164.exe (PID: 7252)
- Unicorn-12435.exe (PID: 8056)
- Unicorn-48900.exe (PID: 5864)
- Unicorn-55030.exe (PID: 5728)
- Unicorn-45855.exe (PID: 7256)
- Unicorn-59498.exe (PID: 6132)
- Unicorn-4578.exe (PID: 5548)
- Unicorn-63582.exe (PID: 7344)
- Unicorn-43738.exe (PID: 4000)
- Unicorn-19788.exe (PID: 7236)
- Unicorn-41408.exe (PID: 1280)
- Unicorn-52290.exe (PID: 2908)
- Unicorn-5206.exe (PID: 7284)
- Unicorn-13888.exe (PID: 7332)
- Unicorn-50152.exe (PID: 8204)
- Unicorn-47116.exe (PID: 6516)
- Unicorn-23702.exe (PID: 5084)
- Unicorn-18941.exe (PID: 7280)
- Unicorn-58051.exe (PID: 4244)
- Unicorn-29156.exe (PID: 7292)
- Unicorn-62496.exe (PID: 8252)
- Unicorn-64634.exe (PID: 1300)
- Unicorn-29156.exe (PID: 7324)
- Unicorn-3836.exe (PID: 1452)
- Unicorn-31605.exe (PID: 7156)
- Unicorn-42538.exe (PID: 8288)
- Unicorn-35762.exe (PID: 8276)
- Unicorn-56374.exe (PID: 8232)
- Unicorn-40592.exe (PID: 8224)
- Unicorn-54983.exe (PID: 4608)
- Unicorn-5511.exe (PID: 8384)
- Unicorn-5611.exe (PID: 8332)
- Unicorn-25024.exe (PID: 8436)
- Unicorn-15533.exe (PID: 8420)
- Unicorn-45445.exe (PID: 8484)
- Unicorn-38668.exe (PID: 8452)
- Unicorn-57142.exe (PID: 8472)
- Unicorn-23316.exe (PID: 8512)
- Unicorn-32986.exe (PID: 8576)
- Unicorn-3665.exe (PID: 8560)
- Unicorn-28710.exe (PID: 8760)
- Unicorn-64267.exe (PID: 8732)
- Unicorn-58045.exe (PID: 8784)
- Unicorn-25180.exe (PID: 8804)
- Unicorn-1342.exe (PID: 8920)
- Unicorn-812.exe (PID: 8912)
- Unicorn-12565.exe (PID: 8628)
- Unicorn-10235.exe (PID: 8820)
- Unicorn-64651.exe (PID: 9020)
- Unicorn-10811.exe (PID: 8988)
- Unicorn-35316.exe (PID: 8940)
- Unicorn-17034.exe (PID: 8888)
- Unicorn-29286.exe (PID: 8844)
- Unicorn-45046.exe (PID: 8812)
- Unicorn-64096.exe (PID: 8836)
- Unicorn-14895.exe (PID: 8964)
- Unicorn-29286.exe (PID: 8852)
- Unicorn-20825.exe (PID: 9124)
- Unicorn-9612.exe (PID: 9168)
- Unicorn-62342.exe (PID: 9148)
- Unicorn-38008.exe (PID: 9004)
- Unicorn-30054.exe (PID: 1168)
- Unicorn-52420.exe (PID: 9088)
- Unicorn-15755.exe (PID: 5776)
- Unicorn-61772.exe (PID: 9220)
- Unicorn-61335.exe (PID: 8536)
- Unicorn-64672.exe (PID: 8552)
- Unicorn-18740.exe (PID: 9240)
- Unicorn-38606.exe (PID: 9248)
- Unicorn-46774.exe (PID: 9296)
- Unicorn-22632.exe (PID: 9320)
- Unicorn-48647.exe (PID: 9256)
- Unicorn-16523.exe (PID: 9412)
- Unicorn-57848.exe (PID: 9484)
- Unicorn-4563.exe (PID: 9468)
- Unicorn-47542.exe (PID: 9500)
Reads security settings of Internet Explorer
- BackgroundTransferHost.exe (PID: 7756)
- BackgroundTransferHost.exe (PID: 7524)
- BackgroundTransferHost.exe (PID: 7868)
- BackgroundTransferHost.exe (PID: 8064)
- BackgroundTransferHost.exe (PID: 5344)
Reads the software policy settings
- BackgroundTransferHost.exe (PID: 7756)
Creates files or folders in the user directory
- BackgroundTransferHost.exe (PID: 7756)
Checks proxy server information
- BackgroundTransferHost.exe (PID: 7756)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable (generic) (52.9) |
|---|---|---|
| .exe | | | Generic Win/DOS Executable (23.5) |
| .exe | | | DOS Executable Generic (23.5) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
475
Monitored processes
343
Malicious processes
53
Suspicious processes
58
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 208 | C:\Users\admin\AppData\Local\Temp\Unicorn-42756.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-42756.exe | Unicorn-23562.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 672 | C:\Users\admin\AppData\Local\Temp\Unicorn-7006.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-7006.exe | 1 (323).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 744 | C:\Users\admin\AppData\Local\Temp\Unicorn-14473.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-14473.exe | Unicorn-23562.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1096 | C:\Users\admin\AppData\Local\Temp\Unicorn-27350.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-27350.exe | 1 (323).exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1168 | C:\Users\admin\AppData\Local\Temp\Unicorn-30054.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-30054.exe | Unicorn-59498.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1244 | C:\Users\admin\AppData\Local\Temp\Unicorn-45928.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-45928.exe | Unicorn-1257.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1280 | C:\Users\admin\AppData\Local\Temp\Unicorn-41408.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-41408.exe | Unicorn-35788.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1300 | C:\Users\admin\AppData\Local\Temp\Unicorn-64634.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-64634.exe | Unicorn-15201.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1388 | C:\Users\admin\AppData\Local\Temp\Unicorn-29182.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-29182.exe | Unicorn-35714.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1452 | C:\Users\admin\AppData\Local\Temp\Unicorn-3836.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-3836.exe | Unicorn-38973.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
8 772
Read events
8 757
Write events
15
Delete events
0
Modification events
| (PID) Process: | (7524) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7524) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7524) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7756) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7756) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7756) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7868) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7868) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7868) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (8064) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
Executable files
1 177
Suspicious files
5
Text files
0
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7756 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\d6383961-cb97-4fdc-afef-7ed707e7d324.down_data | — | |
MD5:— | SHA256:— | |||
| 4892 | 1 (323).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-3229.exe | executable | |
MD5:A3467855CFA0ECA676084D462B2C18F3 | SHA256:2B48443BC9FDCBF465CC8E8E1F2AFC6271F65F8F95B622BDB1F42A71AAD3B58A | |||
| 7372 | Unicorn-32970.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-56488.exe | executable | |
MD5:6FF3A74BF29098679872321CFE652124 | SHA256:15213B2F87A47CCF5E2A8153619CFCEB653AD34AD3A27F9476422B09FF733911 | |||
| 7756 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\513ec75f-ad82-48f5-b152-fcef47759e76.7ce87e8b-da31-434e-a514-901652986116.down_meta | binary | |
MD5:D3FBA1F827C41DB36C1FEFCF43A1CC53 | SHA256:5B7373B91EDBEDCF7D8DD4D4BD168D72159F596084D260C1513EAE75140CEE0A | |||
| 4892 | 1 (323).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-56580.exe | executable | |
MD5:7BE9B20653125D805E14B0521D608F20 | SHA256:5C3D1F29D1269D7DFF0B993D6335B6868B01B1A1486277C6847726447DCF3A6B | |||
| 7392 | Unicorn-9020.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-1257.exe | executable | |
MD5:47FE3E33B07B86646F12328F5F4EFC6C | SHA256:299F147D8C560A470E45A58EA9096128194DD801FDD3C0276AF12CEDD090DD54 | |||
| 5332 | Unicorn-3229.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-32538.exe | executable | |
MD5:3671D2FD4BF6CB127F8F35EA33A01D59 | SHA256:A44897ED8DBCF369DCFA5F784AE7DFD9181EF1FEC2F7D155F60953DB71B20F9B | |||
| 7756 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\d6383961-cb97-4fdc-afef-7ed707e7d324.7ce87e8b-da31-434e-a514-901652986116.down_meta | binary | |
MD5:D3FBA1F827C41DB36C1FEFCF43A1CC53 | SHA256:5B7373B91EDBEDCF7D8DD4D4BD168D72159F596084D260C1513EAE75140CEE0A | |||
| 5332 | Unicorn-3229.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-32970.exe | executable | |
MD5:4E903C06F8B9A063A96C8FB2703A8D84 | SHA256:1617DF8E1902D7DFAF5D5770F9451224B1F8921FE778BBD589D506EB624F5C73 | |||
| 4892 | 1 (323).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-9020.exe | executable | |
MD5:5A4EBD1372D291A886000B2999594752 | SHA256:3403BF1B1883A5983E740B3617824623A31CA42660AEFDC7C712394C054D604C | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
24
DNS requests
16
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
— | — | GET | 200 | 23.48.23.143:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
7756 | BackgroundTransferHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | whitelisted |
3304 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
8528 | SIHClient.exe | GET | 200 | 2.23.246.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
8528 | SIHClient.exe | GET | 200 | 2.23.246.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 23.48.23.143:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
3216 | svchost.exe | 40.113.103.199:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.159.73:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
2104 | svchost.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
3304 | backgroundTaskHost.exe | 20.223.36.55:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
3304 | backgroundTaskHost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
www.bing.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |