File name:

1 (713)

Full analysis: https://app.any.run/tasks/465cc529-26bf-4337-a0a7-7fd059ab2b77
Verdict: Malicious activity
Analysis date: March 25, 2025, 03:21:57
OS: Windows 10 Professional (build: 19045, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections
MD5:

85EF37E30ADA8C480D8153E770A98EA0

SHA1:

DDF4076F0D242298BBC807578089043FF051617F

SHA256:

2F081FF5029565AEF3C185F676430418A54B114BF75C640DD858E4D38F12DE02

SSDEEP:

6144:o7w8nh4PUDbeASLAOKeN3vjx5wPq5P8GBO/WymOMEk/8SwjwpyAvEh8hWdu6s1Wa:osOeOeAScOliP0EaOOymOM8x4DxmDsR

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.
  • MALICIOUS

    No malicious indicators.
  • SUSPICIOUS

    • Starts itself from another location

      • Unicorn-44652.exe (PID: 4756)
      • 1 (713).exe (PID: 300)
      • Unicorn-32844.exe (PID: 5216)
      • Unicorn-12978.exe (PID: 1164)
      • Unicorn-32175.exe (PID: 1280)
      • Unicorn-28453.exe (PID: 3300)
      • Unicorn-16524.exe (PID: 1324)
      • Unicorn-42189.exe (PID: 2616)
      • Unicorn-29138.exe (PID: 780)
      • Unicorn-41037.exe (PID: 2772)
      • Unicorn-65340.exe (PID: 5800)
      • Unicorn-31900.exe (PID: 4068)
      • Unicorn-59974.exe (PID: 5260)
      • Unicorn-47359.exe (PID: 1388)
      • Unicorn-30639.exe (PID: 5400)
      • Unicorn-58257.exe (PID: 5112)
      • Unicorn-14722.exe (PID: 1012)
      • Unicorn-45299.exe (PID: 2108)
      • Unicorn-51516.exe (PID: 536)
      • Unicorn-47567.exe (PID: 6576)
      • Unicorn-30255.exe (PID: 7084)
      • Unicorn-52476.exe (PID: 2096)
      • Unicorn-38662.exe (PID: 920)
      • Unicorn-52476.exe (PID: 5720)
      • Unicorn-47878.exe (PID: 6436)
      • Unicorn-3467.exe (PID: 6656)
      • Unicorn-47878.exe (PID: 864)
      • Unicorn-2222.exe (PID: 5332)
      • Unicorn-48771.exe (PID: 4812)
      • Unicorn-49046.exe (PID: 6228)
      • Unicorn-19135.exe (PID: 5328)
      • Unicorn-19135.exe (PID: 2384)
      • Unicorn-4645.exe (PID: 7204)
      • Unicorn-6555.exe (PID: 6712)
      • Unicorn-5294.exe (PID: 7180)
      • Unicorn-52227.exe (PID: 7172)
      • Unicorn-65002.exe (PID: 7224)
      • Unicorn-45386.exe (PID: 960)
      • Unicorn-56524.exe (PID: 7272)
      • Unicorn-49814.exe (PID: 7252)
      • Unicorn-14729.exe (PID: 7288)
      • Unicorn-62874.exe (PID: 6512)
      • Unicorn-9666.exe (PID: 7340)
      • Unicorn-28079.exe (PID: 7348)
      • Unicorn-5678.exe (PID: 7304)
      • Unicorn-28847.exe (PID: 7328)
      • Unicorn-46911.exe (PID: 7380)
      • Unicorn-59914.exe (PID: 7592)
      • Unicorn-58813.exe (PID: 3888)
      • Unicorn-6366.exe (PID: 7628)
      • Unicorn-39651.exe (PID: 7652)
      • Unicorn-46061.exe (PID: 1128)
      • Unicorn-27730.exe (PID: 7412)
      • Unicorn-23471.exe (PID: 7768)
      • Unicorn-8217.exe (PID: 7456)
      • Unicorn-26652.exe (PID: 7816)
      • Unicorn-57309.exe (PID: 7524)
      • Unicorn-29843.exe (PID: 7320)
      • Unicorn-29999.exe (PID: 7440)
      • Unicorn-4533.exe (PID: 7432)
      • Unicorn-23868.exe (PID: 7448)
      • Unicorn-12546.exe (PID: 7500)
      • Unicorn-55603.exe (PID: 7824)
      • Unicorn-33756.exe (PID: 7568)
      • Unicorn-60787.exe (PID: 7372)
      • Unicorn-15884.exe (PID: 7492)
      • Unicorn-28188.exe (PID: 7908)
      • Unicorn-5913.exe (PID: 7860)
      • Unicorn-26277.exe (PID: 7464)
      • Unicorn-32028.exe (PID: 7516)
      • Unicorn-15225.exe (PID: 7788)
      • Unicorn-41452.exe (PID: 7740)
      • Unicorn-3330.exe (PID: 7700)
      • Unicorn-30383.exe (PID: 7404)
      • Unicorn-56828.exe (PID: 7776)
      • Unicorn-26543.exe (PID: 7920)
      • Unicorn-693.exe (PID: 7944)
      • Unicorn-6293.exe (PID: 7936)
      • Unicorn-47923.exe (PID: 8056)
      • Unicorn-60013.exe (PID: 8080)
      • Unicorn-33855.exe (PID: 8064)
      • Unicorn-57715.exe (PID: 7884)
      • Unicorn-10891.exe (PID: 7928)
      • Unicorn-23973.exe (PID: 7900)
      • Unicorn-61052.exe (PID: 7892)
      • Unicorn-9657.exe (PID: 8072)
      • Unicorn-20124.exe (PID: 8120)
      • Unicorn-38463.exe (PID: 7692)
      • Unicorn-25827.exe (PID: 8752)
      • Unicorn-55427.exe (PID: 8760)
      • Unicorn-44540.exe (PID: 8352)
      • Unicorn-16293.exe (PID: 7952)
      • Unicorn-4389.exe (PID: 8792)
      • Unicorn-50803.exe (PID: 8176)
      • Unicorn-7835.exe (PID: 8688)
      • Unicorn-55706.exe (PID: 8324)
      • Unicorn-25804.exe (PID: 8004)
      • Unicorn-58950.exe (PID: 9112)
      • Unicorn-13870.exe (PID: 8536)
      • Unicorn-19961.exe (PID: 8744)
      • Unicorn-17260.exe (PID: 8920)
      • Unicorn-23330.exe (PID: 8256)
      • Unicorn-53699.exe (PID: 8680)
      • Unicorn-53756.exe (PID: 6972)
      • Unicorn-15515.exe (PID: 8520)
      • Unicorn-43839.exe (PID: 7876)
      • Unicorn-32454.exe (PID: 9072)
      • Unicorn-10907.exe (PID: 8240)
      • Unicorn-15147.exe (PID: 8840)
      • Unicorn-17481.exe (PID: 9856)
      • Unicorn-2213.exe (PID: 9872)
      • Unicorn-34073.exe (PID: 8300)
      • Unicorn-34502.exe (PID: 9912)
      • Unicorn-34623.exe (PID: 8044)
      • Unicorn-55884.exe (PID: 8884)
      • Unicorn-30834.exe (PID: 9052)
      • Unicorn-15090.exe (PID: 9476)
      • Unicorn-1026.exe (PID: 8092)
      • Unicorn-23487.exe (PID: 8668)
      • Unicorn-6242.exe (PID: 9264)
      • Unicorn-28825.exe (PID: 9460)
      • Unicorn-58764.exe (PID: 8736)
      • Unicorn-10917.exe (PID: 8508)
      • Unicorn-52044.exe (PID: 9132)
      • Unicorn-62236.exe (PID: 9400)
      • Unicorn-36594.exe (PID: 8700)
      • Unicorn-6299.exe (PID: 8648)
      • Unicorn-55308.exe (PID: 8876)
      • Unicorn-2843.exe (PID: 9160)
      • Unicorn-33388.exe (PID: 7980)
      • Unicorn-482.exe (PID: 9540)
      • Unicorn-52650.exe (PID: 9208)
      • Unicorn-9646.exe (PID: 8248)
      • Unicorn-41100.exe (PID: 8016)
      • Unicorn-21868.exe (PID: 8552)
      • Unicorn-48426.exe (PID: 9668)
      • Unicorn-42738.exe (PID: 8436)
      • Unicorn-59942.exe (PID: 8832)
      • Unicorn-7358.exe (PID: 7992)
      • Unicorn-20011.exe (PID: 9316)
      • Unicorn-15090.exe (PID: 9468)
      • Unicorn-63055.exe (PID: 7388)
      • Unicorn-1301.exe (PID: 8148)
      • Unicorn-46979.exe (PID: 9088)
      • Unicorn-44570.exe (PID: 9044)
      • Unicorn-55324.exe (PID: 9576)
      • Unicorn-59702.exe (PID: 11172)
      • Unicorn-42754.exe (PID: 9384)
      • Unicorn-24041.exe (PID: 11104)
      • Unicorn-40185.exe (PID: 11124)
      • Unicorn-48588.exe (PID: 8996)
      • Unicorn-9535.exe (PID: 10188)
      • Unicorn-12488.exe (PID: 10304)
      • Unicorn-46999.exe (PID: 10596)
      • Unicorn-9919.exe (PID: 9800)
      • Unicorn-41247.exe (PID: 10352)
      • Unicorn-9931.exe (PID: 7832)
      • Unicorn-1966.exe (PID: 9144)
      • Unicorn-63142.exe (PID: 10276)
      • Unicorn-48790.exe (PID: 8584)
      • Unicorn-7726.exe (PID: 8812)
      • Unicorn-6332.exe (PID: 9732)
      • Unicorn-32473.exe (PID: 9588)
      • Unicorn-11115.exe (PID: 7968)
      • Unicorn-4587.exe (PID: 9520)
      • Unicorn-11587.exe (PID: 6740)
      • Unicorn-55193.exe (PID: 12292)
      • Unicorn-7970.exe (PID: 9332)
      • Unicorn-57135.exe (PID: 8028)
      • Unicorn-46076.exe (PID: 8452)
      • Unicorn-36386.exe (PID: 9284)
      • Unicorn-35900.exe (PID: 9124)
      • Unicorn-16905.exe (PID: 9940)
      • Unicorn-27260.exe (PID: 1300)
      • Unicorn-17999.exe (PID: 10528)
      • Unicorn-22873.exe (PID: 10608)
      • Unicorn-44710.exe (PID: 1180)
      • Unicorn-24912.exe (PID: 732)
      • Unicorn-64524.exe (PID: 8500)
      • Unicorn-12853.exe (PID: 9096)
      • Unicorn-29977.exe (PID: 9772)
      • Unicorn-9992.exe (PID: 10180)
      • Unicorn-41675.exe (PID: 10496)
      • Unicorn-41084.exe (PID: 8900)
      • Unicorn-59686.exe (PID: 10204)
      • Unicorn-26422.exe (PID: 10036)
      • Unicorn-48982.exe (PID: 10168)
      • Unicorn-2072.exe (PID: 13548)
      • Unicorn-2264.exe (PID: 13468)
      • Unicorn-34937.exe (PID: 13452)
      • Unicorn-30009.exe (PID: 11912)
      • Unicorn-14217.exe (PID: 9548)
      • Unicorn-10230.exe (PID: 11332)
      • Unicorn-26345.exe (PID: 8212)
      • Unicorn-36802.exe (PID: 9700)
      • Unicorn-10952.exe (PID: 1228)
      • Unicorn-39946.exe (PID: 8460)
      • Unicorn-33641.exe (PID: 10880)
      • Unicorn-45162.exe (PID: 10160)
      • Unicorn-30201.exe (PID: 12132)
      • Unicorn-20601.exe (PID: 12236)
      • Unicorn-53788.exe (PID: 9504)
      • Unicorn-51780.exe (PID: 13144)
      • Unicorn-4424.exe (PID: 10544)
      • Unicorn-30895.exe (PID: 11452)
      • Unicorn-23603.exe (PID: 12020)
      • Unicorn-56508.exe (PID: 8476)
      • Unicorn-8486.exe (PID: 10852)
    • Executable content was dropped or overwritten

      • 1 (713).exe (PID: 300)
      • Unicorn-44652.exe (PID: 4756)
      • Unicorn-32844.exe (PID: 5216)
      • Unicorn-12978.exe (PID: 1164)
      • Unicorn-32175.exe (PID: 1280)
      • Unicorn-28453.exe (PID: 3300)
      • Unicorn-42189.exe (PID: 2616)
      • Unicorn-16524.exe (PID: 1324)
      • Unicorn-65340.exe (PID: 5800)
      • Unicorn-29138.exe (PID: 780)
      • Unicorn-41037.exe (PID: 2772)
      • Unicorn-59974.exe (PID: 5260)
      • Unicorn-31900.exe (PID: 4068)
      • Unicorn-14722.exe (PID: 1012)
      • Unicorn-58257.exe (PID: 5112)
      • Unicorn-47567.exe (PID: 6576)
      • Unicorn-45299.exe (PID: 2108)
      • Unicorn-45386.exe (PID: 960)
      • Unicorn-30255.exe (PID: 7084)
      • Unicorn-62874.exe (PID: 6512)
      • Unicorn-52476.exe (PID: 2096)
      • Unicorn-47359.exe (PID: 1388)
      • Unicorn-38662.exe (PID: 920)
      • Unicorn-58813.exe (PID: 3888)
      • Unicorn-47878.exe (PID: 6436)
      • Unicorn-30639.exe (PID: 5400)
      • Unicorn-3467.exe (PID: 6656)
      • Unicorn-47878.exe (PID: 864)
      • Unicorn-2222.exe (PID: 5332)
      • Unicorn-48771.exe (PID: 4812)
      • Unicorn-49046.exe (PID: 6228)
      • Unicorn-46061.exe (PID: 1128)
      • Unicorn-19135.exe (PID: 5328)
      • Unicorn-19135.exe (PID: 2384)
      • Unicorn-6555.exe (PID: 6712)
      • Unicorn-5294.exe (PID: 7180)
      • Unicorn-4645.exe (PID: 7204)
      • Unicorn-51516.exe (PID: 536)
      • Unicorn-65002.exe (PID: 7224)
      • Unicorn-56524.exe (PID: 7272)
      • Unicorn-49814.exe (PID: 7252)
      • Unicorn-52227.exe (PID: 7172)
      • Unicorn-5678.exe (PID: 7304)
      • Unicorn-9666.exe (PID: 7340)
      • Unicorn-28079.exe (PID: 7348)
      • Unicorn-29843.exe (PID: 7320)
      • Unicorn-14729.exe (PID: 7288)
      • Unicorn-46911.exe (PID: 7380)
      • Unicorn-52476.exe (PID: 5720)
      • Unicorn-59914.exe (PID: 7592)
      • Unicorn-6366.exe (PID: 7628)
      • Unicorn-39651.exe (PID: 7652)
      • Unicorn-4533.exe (PID: 7432)
      • Unicorn-8217.exe (PID: 7456)
      • Unicorn-32028.exe (PID: 7516)
      • Unicorn-23471.exe (PID: 7768)
      • Unicorn-57309.exe (PID: 7524)
      • Unicorn-29999.exe (PID: 7440)
      • Unicorn-26652.exe (PID: 7816)
      • Unicorn-23868.exe (PID: 7448)
      • Unicorn-63055.exe (PID: 7388)
      • Unicorn-12546.exe (PID: 7500)
      • Unicorn-15884.exe (PID: 7492)
      • Unicorn-60787.exe (PID: 7372)
      • Unicorn-55603.exe (PID: 7824)
      • Unicorn-33756.exe (PID: 7568)
      • Unicorn-5913.exe (PID: 7860)
      • Unicorn-26277.exe (PID: 7464)
      • Unicorn-28188.exe (PID: 7908)
      • Unicorn-41452.exe (PID: 7740)
      • Unicorn-3330.exe (PID: 7700)
      • Unicorn-30383.exe (PID: 7404)
      • Unicorn-15225.exe (PID: 7788)
      • Unicorn-56828.exe (PID: 7776)
      • Unicorn-26543.exe (PID: 7920)
      • Unicorn-6293.exe (PID: 7936)
      • Unicorn-47923.exe (PID: 8056)
      • Unicorn-60013.exe (PID: 8080)
      • Unicorn-33855.exe (PID: 8064)
      • Unicorn-693.exe (PID: 7944)
      • Unicorn-23973.exe (PID: 7900)
      • Unicorn-57715.exe (PID: 7884)
      • Unicorn-10891.exe (PID: 7928)
      • Unicorn-9931.exe (PID: 7832)
      • Unicorn-20124.exe (PID: 8120)
      • Unicorn-38463.exe (PID: 7692)
      • Unicorn-9657.exe (PID: 8072)
      • Unicorn-28847.exe (PID: 7328)
      • Unicorn-61052.exe (PID: 7892)
      • Unicorn-55427.exe (PID: 8760)
      • Unicorn-44540.exe (PID: 8352)
      • Unicorn-16293.exe (PID: 7952)
      • Unicorn-4389.exe (PID: 8792)
      • Unicorn-50803.exe (PID: 8176)
      • Unicorn-27730.exe (PID: 7412)
      • Unicorn-7835.exe (PID: 8688)
      • Unicorn-13870.exe (PID: 8536)
      • Unicorn-25804.exe (PID: 8004)
      • Unicorn-58950.exe (PID: 9112)
      • Unicorn-55706.exe (PID: 8324)
      • Unicorn-19961.exe (PID: 8744)
      • Unicorn-53756.exe (PID: 6972)
      • Unicorn-23330.exe (PID: 8256)
      • Unicorn-53699.exe (PID: 8680)
      • Unicorn-17260.exe (PID: 8920)
      • Unicorn-32454.exe (PID: 9072)
      • Unicorn-15515.exe (PID: 8520)
      • Unicorn-43839.exe (PID: 7876)
      • Unicorn-10907.exe (PID: 8240)
      • Unicorn-15147.exe (PID: 8840)
      • Unicorn-55884.exe (PID: 8884)
      • Unicorn-2213.exe (PID: 9872)
      • Unicorn-34502.exe (PID: 9912)
      • Unicorn-34073.exe (PID: 8300)
      • Unicorn-34623.exe (PID: 8044)
      • Unicorn-17481.exe (PID: 9856)
      • Unicorn-15090.exe (PID: 9476)
      • Unicorn-30834.exe (PID: 9052)
      • Unicorn-6242.exe (PID: 9264)
      • Unicorn-23487.exe (PID: 8668)
      • Unicorn-58764.exe (PID: 8736)
      • Unicorn-10917.exe (PID: 8508)
      • Unicorn-28825.exe (PID: 9460)
      • Unicorn-62236.exe (PID: 9400)
      • Unicorn-36594.exe (PID: 8700)
      • Unicorn-52044.exe (PID: 9132)
      • Unicorn-6299.exe (PID: 8648)
      • Unicorn-25827.exe (PID: 8752)
      • Unicorn-2843.exe (PID: 9160)
      • Unicorn-482.exe (PID: 9540)
      • Unicorn-55308.exe (PID: 8876)
      • Unicorn-33388.exe (PID: 7980)
      • Unicorn-21868.exe (PID: 8552)
      • Unicorn-41100.exe (PID: 8016)
      • Unicorn-9646.exe (PID: 8248)
      • Unicorn-52650.exe (PID: 9208)
      • Unicorn-59942.exe (PID: 8832)
      • Unicorn-48426.exe (PID: 9668)
      • Unicorn-46979.exe (PID: 9088)
      • Unicorn-44570.exe (PID: 9044)
      • Unicorn-15090.exe (PID: 9468)
      • Unicorn-20011.exe (PID: 9316)
      • Unicorn-1301.exe (PID: 8148)
      • Unicorn-56508.exe (PID: 8476)
      • Unicorn-55324.exe (PID: 9576)
      • Unicorn-24041.exe (PID: 11104)
      • Unicorn-40185.exe (PID: 11124)
      • Unicorn-59702.exe (PID: 11172)
      • Unicorn-42754.exe (PID: 9384)
      • Unicorn-63142.exe (PID: 10276)
      • Unicorn-9919.exe (PID: 9800)
      • Unicorn-8486.exe (PID: 10852)
      • Unicorn-9535.exe (PID: 10188)
      • Unicorn-1966.exe (PID: 9144)
      • Unicorn-12488.exe (PID: 10304)
      • Unicorn-41247.exe (PID: 10352)
      • Unicorn-46999.exe (PID: 10596)
      • Unicorn-48790.exe (PID: 8584)
      • Unicorn-7726.exe (PID: 8812)
      • Unicorn-6332.exe (PID: 9732)
      • Unicorn-32473.exe (PID: 9588)
      • Unicorn-11115.exe (PID: 7968)
      • Unicorn-7970.exe (PID: 9332)
      • Unicorn-4587.exe (PID: 9520)
      • Unicorn-36386.exe (PID: 9284)
      • Unicorn-57135.exe (PID: 8028)
      • Unicorn-46076.exe (PID: 8452)
      • Unicorn-35900.exe (PID: 9124)
      • Unicorn-17999.exe (PID: 10528)
      • Unicorn-16905.exe (PID: 9940)
      • Unicorn-27260.exe (PID: 1300)
      • Unicorn-24912.exe (PID: 732)
      • Unicorn-22873.exe (PID: 10608)
      • Unicorn-44710.exe (PID: 1180)
      • Unicorn-46921.exe (PID: 12096)
      • Unicorn-64524.exe (PID: 8500)
      • Unicorn-41675.exe (PID: 10496)
      • Unicorn-12853.exe (PID: 9096)
      • Unicorn-29977.exe (PID: 9772)
      • Unicorn-9992.exe (PID: 10180)
      • Unicorn-41084.exe (PID: 8900)
      • Unicorn-59686.exe (PID: 10204)
      • Unicorn-26422.exe (PID: 10036)
      • Unicorn-14217.exe (PID: 9548)
      • Unicorn-30009.exe (PID: 11912)
      • Unicorn-26492.exe (PID: 9252)
      • Unicorn-10230.exe (PID: 11332)
      • Unicorn-26345.exe (PID: 8212)
      • Unicorn-36802.exe (PID: 9700)
      • Unicorn-10952.exe (PID: 1228)
      • Unicorn-33641.exe (PID: 10880)
      • Unicorn-39946.exe (PID: 8460)
      • Unicorn-45162.exe (PID: 10160)
      • Unicorn-20601.exe (PID: 12236)
      • Unicorn-30201.exe (PID: 12132)
      • Unicorn-53788.exe (PID: 9504)
      • Unicorn-32121.exe (PID: 11380)
      • Unicorn-51780.exe (PID: 13144)
      • Unicorn-23603.exe (PID: 12020)
      • Unicorn-48588.exe (PID: 8996)
      • Unicorn-30895.exe (PID: 11452)
      • Unicorn-4424.exe (PID: 10544)
      • Unicorn-55193.exe (PID: 12292)
      • Unicorn-32639.exe (PID: 5740)
      • Unicorn-38400.exe (PID: 4108)
      • Unicorn-11587.exe (PID: 6740)
      • Unicorn-64829.exe (PID: 12040)
      • Unicorn-25407.exe (PID: 8720)
      • Unicorn-43421.exe (PID: 13260)
      • Unicorn-65120.exe (PID: 5452)
      • Unicorn-28009.exe (PID: 5036)
      • Unicorn-34937.exe (PID: 13452)
      • Unicorn-59785.exe (PID: 2064)
      • Unicorn-4175.exe (PID: 11092)
      • Unicorn-54233.exe (PID: 12376)
      • Unicorn-1679.exe (PID: 11436)
      • Unicorn-44631.exe (PID: 11444)
      • Unicorn-30604.exe (PID: 10920)
      • Unicorn-64643.exe (PID: 8484)
      • Unicorn-56367.exe (PID: 8024)
      • Unicorn-56192.exe (PID: 13176)
      • Unicorn-2860.exe (PID: 12988)
      • Unicorn-27094.exe (PID: 11468)
      • Unicorn-43891.exe (PID: 6640)
      • Unicorn-27571.exe (PID: 9324)
      • Unicorn-2264.exe (PID: 13468)
      • Unicorn-32639.exe (PID: 5364)
      • Unicorn-63831.exe (PID: 10548)
      • Unicorn-48982.exe (PID: 10168)
      • Unicorn-41540.exe (PID: 11496)
      • Unicorn-51198.exe (PID: 11400)
      • Unicorn-55001.exe (PID: 12312)
      • Unicorn-9032.exe (PID: 10224)
      • Unicorn-14232.exe (PID: 10732)
      • Unicorn-23996.exe (PID: 9692)
      • Unicorn-10534.exe (PID: 12924)
      • Unicorn-65120.exe (PID: 776)
      • Unicorn-43015.exe (PID: 12936)
      • Unicorn-52631.exe (PID: 13276)
      • Unicorn-13102.exe (PID: 8408)
      • Unicorn-62236.exe (PID: 9408)
      • Unicorn-19833.exe (PID: 3900)
      • Unicorn-60361.exe (PID: 10704)
      • Unicorn-60714.exe (PID: 9080)
      • Unicorn-11884.exe (PID: 9632)
      • Unicorn-30320.exe (PID: 12104)
      • Unicorn-2072.exe (PID: 13548)
      • Unicorn-20511.exe (PID: 11084)
      • Unicorn-29168.exe (PID: 11964)
      • Unicorn-3231.exe (PID: 12564)
      • Unicorn-42738.exe (PID: 8436)
      • Unicorn-14232.exe (PID: 10740)
      • Unicorn-35945.exe (PID: 10452)
      • Unicorn-11459.exe (PID: 9980)
      • Unicorn-38582.exe (PID: 12384)
      • Unicorn-54084.exe (PID: 13236)
      • Unicorn-53376.exe (PID: 11692)
      • Unicorn-30246.exe (PID: 14128)
      • Unicorn-30547.exe (PID: 14360)
      • Unicorn-47111.exe (PID: 10580)
      • Unicorn-31734.exe (PID: 10512)
      • Unicorn-54864.exe (PID: 14352)
      • Unicorn-25324.exe (PID: 8800)
      • Unicorn-13319.exe (PID: 14276)
      • Unicorn-42620.exe (PID: 8728)
  • INFO

    • Checks supported languages

      • 1 (713).exe (PID: 300)
      • Unicorn-44652.exe (PID: 4756)
      • Unicorn-32844.exe (PID: 5216)
      • Unicorn-12978.exe (PID: 1164)
      • Unicorn-32175.exe (PID: 1280)
      • Unicorn-16524.exe (PID: 1324)
      • Unicorn-29138.exe (PID: 780)
      • Unicorn-28453.exe (PID: 3300)
      • Unicorn-65340.exe (PID: 5800)
      • Unicorn-42189.exe (PID: 2616)
      • Unicorn-47359.exe (PID: 1388)
      • Unicorn-41037.exe (PID: 2772)
      • Unicorn-31900.exe (PID: 4068)
      • Unicorn-14722.exe (PID: 1012)
      • Unicorn-30639.exe (PID: 5400)
      • Unicorn-59974.exe (PID: 5260)
      • Unicorn-58257.exe (PID: 5112)
      • Unicorn-45299.exe (PID: 2108)
      • Unicorn-45386.exe (PID: 960)
      • Unicorn-51516.exe (PID: 536)
      • Unicorn-30255.exe (PID: 7084)
      • Unicorn-38662.exe (PID: 920)
      • Unicorn-47567.exe (PID: 6576)
      • Unicorn-52476.exe (PID: 5720)
      • Unicorn-3467.exe (PID: 6656)
      • Unicorn-52476.exe (PID: 2096)
      • Unicorn-58813.exe (PID: 3888)
      • Unicorn-62874.exe (PID: 6512)
      • Unicorn-47878.exe (PID: 6436)
      • Unicorn-47878.exe (PID: 864)
      • Unicorn-2222.exe (PID: 5332)
      • Unicorn-48771.exe (PID: 4812)
      • Unicorn-49046.exe (PID: 6228)
      • Unicorn-46061.exe (PID: 1128)
      • Unicorn-19135.exe (PID: 5328)
      • Unicorn-19135.exe (PID: 2384)
      • Unicorn-52227.exe (PID: 7172)
      • Unicorn-14729.exe (PID: 7288)
      • Unicorn-49814.exe (PID: 7252)
      • Unicorn-56524.exe (PID: 7272)
      • Unicorn-5294.exe (PID: 7180)
      • Unicorn-6555.exe (PID: 6712)
      • Unicorn-4645.exe (PID: 7204)
      • Unicorn-65002.exe (PID: 7224)
      • Unicorn-5678.exe (PID: 7304)
      • Unicorn-29843.exe (PID: 7320)
      • Unicorn-28847.exe (PID: 7328)
      • Unicorn-28079.exe (PID: 7348)
      • Unicorn-9666.exe (PID: 7340)
      • Unicorn-30383.exe (PID: 7404)
      • Unicorn-8217.exe (PID: 7456)
      • Unicorn-4533.exe (PID: 7432)
      • Unicorn-29999.exe (PID: 7440)
      • Unicorn-23868.exe (PID: 7448)
      • Unicorn-26277.exe (PID: 7464)
      • Unicorn-46911.exe (PID: 7380)
      • Unicorn-63055.exe (PID: 7388)
      • Unicorn-27730.exe (PID: 7412)
      • Unicorn-12546.exe (PID: 7500)
      • Unicorn-59914.exe (PID: 7592)
      • Unicorn-15884.exe (PID: 7492)
      • Unicorn-6366.exe (PID: 7628)
      • Unicorn-39651.exe (PID: 7652)
      • Unicorn-57309.exe (PID: 7524)
      • Unicorn-33756.exe (PID: 7568)
      • Unicorn-32028.exe (PID: 7516)
      • Unicorn-60787.exe (PID: 7372)
      • Unicorn-3330.exe (PID: 7700)
      • Unicorn-41452.exe (PID: 7740)
      • Unicorn-23471.exe (PID: 7768)
      • Unicorn-56828.exe (PID: 7776)
      • Unicorn-38463.exe (PID: 7692)
      • Unicorn-15225.exe (PID: 7788)
      • Unicorn-26652.exe (PID: 7816)
      • Unicorn-55603.exe (PID: 7824)
      • Unicorn-9931.exe (PID: 7832)
      • Unicorn-43839.exe (PID: 7876)
      • Unicorn-5913.exe (PID: 7860)
      • Unicorn-57715.exe (PID: 7884)
      • Unicorn-61052.exe (PID: 7892)
      • Unicorn-23973.exe (PID: 7900)
      • Unicorn-28188.exe (PID: 7908)
      • Unicorn-26543.exe (PID: 7920)
      • Unicorn-6293.exe (PID: 7936)
      • Unicorn-16293.exe (PID: 7952)
      • Unicorn-693.exe (PID: 7944)
      • Unicorn-10891.exe (PID: 7928)
      • Unicorn-47923.exe (PID: 8056)
      • Unicorn-33855.exe (PID: 8064)
      • Unicorn-33388.exe (PID: 7980)
      • Unicorn-50803.exe (PID: 8176)
      • Unicorn-53756.exe (PID: 6972)
      • Unicorn-43891.exe (PID: 6640)
      • Unicorn-20124.exe (PID: 8120)
      • Unicorn-1301.exe (PID: 8148)
      • Unicorn-34623.exe (PID: 8044)
      • Unicorn-55706.exe (PID: 8324)
      • Unicorn-60013.exe (PID: 8080)
      • Unicorn-9657.exe (PID: 8072)
      • Unicorn-25804.exe (PID: 8004)
      • Unicorn-34073.exe (PID: 8300)
      • Unicorn-1026.exe (PID: 8092)
      • Unicorn-44540.exe (PID: 8352)
      • Unicorn-55427.exe (PID: 8760)
      • Unicorn-25827.exe (PID: 8752)
      • Unicorn-9646.exe (PID: 8248)
      • Unicorn-23330.exe (PID: 8256)
      • Unicorn-10907.exe (PID: 8240)
      • Unicorn-13102.exe (PID: 8408)
      • Unicorn-56508.exe (PID: 8476)
      • Unicorn-53699.exe (PID: 8680)
      • Unicorn-23487.exe (PID: 8668)
      • Unicorn-7835.exe (PID: 8688)
      • Unicorn-36594.exe (PID: 8700)
      • Unicorn-42738.exe (PID: 8436)
      • Unicorn-64643.exe (PID: 8484)
      • Unicorn-48790.exe (PID: 8584)
      • Unicorn-15515.exe (PID: 8520)
      • Unicorn-21868.exe (PID: 8552)
      • Unicorn-13870.exe (PID: 8536)
      • Unicorn-64524.exe (PID: 8500)
      • Unicorn-19961.exe (PID: 8744)
      • Unicorn-6299.exe (PID: 8648)
      • Unicorn-46076.exe (PID: 8452)
      • Unicorn-58764.exe (PID: 8736)
      • Unicorn-10917.exe (PID: 8508)
      • Unicorn-4389.exe (PID: 8792)
      • Unicorn-59942.exe (PID: 8832)
      • Unicorn-44291.exe (PID: 8864)
      • Unicorn-39946.exe (PID: 8460)
      • Unicorn-41084.exe (PID: 8900)
      • Unicorn-17260.exe (PID: 8920)
      • Unicorn-55884.exe (PID: 8884)
      • Unicorn-32252.exe (PID: 9004)
      • Unicorn-30834.exe (PID: 9052)
      • Unicorn-42620.exe (PID: 8728)
      • Unicorn-48588.exe (PID: 8996)
      • Unicorn-60714.exe (PID: 9080)
      • Unicorn-46979.exe (PID: 9088)
      • Unicorn-58950.exe (PID: 9112)
      • Unicorn-35900.exe (PID: 9124)
      • Unicorn-18111.exe (PID: 9152)
      • Unicorn-32454.exe (PID: 9072)
      • Unicorn-52650.exe (PID: 9208)
      • Unicorn-55308.exe (PID: 8876)
      • Unicorn-57135.exe (PID: 8028)
      • Unicorn-25324.exe (PID: 8800)
      • Unicorn-52044.exe (PID: 9132)
      • Unicorn-7726.exe (PID: 8812)
      • Unicorn-15147.exe (PID: 8840)
      • Unicorn-56367.exe (PID: 8024)
      • Unicorn-7358.exe (PID: 7992)
      • Unicorn-11115.exe (PID: 7968)
      • Unicorn-27260.exe (PID: 1300)
      • Unicorn-51002.exe (PID: 8020)
      • Unicorn-44570.exe (PID: 9044)
      • Unicorn-6242.exe (PID: 9264)
      • Unicorn-24956.exe (PID: 3676)
      • Unicorn-41100.exe (PID: 8016)
      • Unicorn-26492.exe (PID: 9252)
      • Unicorn-36386.exe (PID: 9284)
      • Unicorn-27571.exe (PID: 9324)
      • Unicorn-7970.exe (PID: 9332)
      • Unicorn-62236.exe (PID: 9400)
      • Unicorn-44477.exe (PID: 9448)
      • Unicorn-42754.exe (PID: 9384)
      • Unicorn-62236.exe (PID: 9408)
      • Unicorn-2213.exe (PID: 9872)
      • Unicorn-2843.exe (PID: 9160)
      • Unicorn-34502.exe (PID: 9912)
      • Unicorn-482.exe (PID: 9540)
      • Unicorn-14217.exe (PID: 9548)
      • Unicorn-55324.exe (PID: 9576)
      • Unicorn-32473.exe (PID: 9588)
      • Unicorn-17481.exe (PID: 9856)
      • Unicorn-11884.exe (PID: 9632)
      • Unicorn-48426.exe (PID: 9668)
      • Unicorn-17970.exe (PID: 9676)
      • Unicorn-36802.exe (PID: 9700)
      • Unicorn-23996.exe (PID: 9692)
      • Unicorn-6332.exe (PID: 9732)
      • Unicorn-29977.exe (PID: 9772)
      • Unicorn-7126.exe (PID: 9784)
      • Unicorn-9919.exe (PID: 9800)
      • Unicorn-12853.exe (PID: 9096)
      • Unicorn-20011.exe (PID: 9316)
      • Unicorn-28825.exe (PID: 9460)
      • Unicorn-1966.exe (PID: 9144)
      • Unicorn-15090.exe (PID: 9476)
      • Unicorn-53788.exe (PID: 9504)
      • Unicorn-4587.exe (PID: 9520)
      • Unicorn-15090.exe (PID: 9468)
      • Unicorn-62576.exe (PID: 9932)
      • Unicorn-11459.exe (PID: 9980)
      • Unicorn-16905.exe (PID: 9940)
      • Unicorn-65529.exe (PID: 9992)
      • Unicorn-65146.exe (PID: 9616)
      • Unicorn-26422.exe (PID: 10036)
      • Unicorn-25407.exe (PID: 8720)
      • Unicorn-48982.exe (PID: 10168)
      • Unicorn-9992.exe (PID: 10180)
      • Unicorn-45162.exe (PID: 10160)
      • Unicorn-9535.exe (PID: 10188)
      • Unicorn-59686.exe (PID: 10204)
      • Unicorn-10952.exe (PID: 1228)
      • Unicorn-6847.exe (PID: 10252)
      • Unicorn-45545.exe (PID: 10288)
      • Unicorn-6847.exe (PID: 10260)
      • Unicorn-63142.exe (PID: 10276)
      • Unicorn-12488.exe (PID: 10304)
      • Unicorn-41247.exe (PID: 10344)
      • Unicorn-2902.exe (PID: 10216)
      • Unicorn-9032.exe (PID: 10224)
      • Unicorn-41247.exe (PID: 10352)
      • Unicorn-41247.exe (PID: 10328)
      • Unicorn-47429.exe (PID: 10372)
      • Unicorn-24041.exe (PID: 11104)
      • Unicorn-41247.exe (PID: 10336)
      • Unicorn-5192.exe (PID: 10488)
      • Unicorn-41675.exe (PID: 10496)
      • Unicorn-28934.exe (PID: 10504)
      • Unicorn-31734.exe (PID: 10512)
      • Unicorn-17999.exe (PID: 10520)
      • Unicorn-59702.exe (PID: 11172)
      • Unicorn-4424.exe (PID: 10544)
      • Unicorn-17999.exe (PID: 10528)
      • Unicorn-63831.exe (PID: 10548)
      • Unicorn-40185.exe (PID: 11124)
      • Unicorn-46999.exe (PID: 10596)
      • Unicorn-60361.exe (PID: 10704)
      • Unicorn-23449.exe (PID: 10588)
      • Unicorn-4808.exe (PID: 10560)
      • Unicorn-47111.exe (PID: 10580)
      • Unicorn-63241.exe (PID: 10716)
      • Unicorn-14232.exe (PID: 10732)
      • Unicorn-14232.exe (PID: 10740)
      • Unicorn-16070.exe (PID: 10816)
      • Unicorn-13080.exe (PID: 10788)
      • Unicorn-65078.exe (PID: 10828)
      • Unicorn-61252.exe (PID: 10868)
      • Unicorn-33641.exe (PID: 10880)
      • Unicorn-30604.exe (PID: 10920)
      • Unicorn-24912.exe (PID: 732)
      • Unicorn-45680.exe (PID: 10932)
      • Unicorn-1077.exe (PID: 10940)
      • Unicorn-8486.exe (PID: 10852)
      • Unicorn-32224.exe (PID: 10956)
      • Unicorn-16153.exe (PID: 10988)
      • Unicorn-61824.exe (PID: 10980)
      • Unicorn-38950.exe (PID: 11036)
      • Unicorn-20511.exe (PID: 11084)
      • Unicorn-57097.exe (PID: 11044)
      • Unicorn-60100.exe (PID: 10964)
      • Unicorn-9240.exe (PID: 11208)
      • Unicorn-22873.exe (PID: 10608)
      • Unicorn-44710.exe (PID: 1180)
      • Unicorn-59785.exe (PID: 2064)
      • Unicorn-25686.exe (PID: 5776)
      • Unicorn-46521.exe (PID: 10752)
      • Unicorn-4175.exe (PID: 11092)
      • Unicorn-35945.exe (PID: 10452)
      • Unicorn-4616.exe (PID: 10536)
      • Unicorn-42022.exe (PID: 6148)
      • Unicorn-26345.exe (PID: 8212)
      • Unicorn-62032.exe (PID: 11316)
      • Unicorn-32889.exe (PID: 11300)
      • Unicorn-10693.exe (PID: 11272)
      • Unicorn-56432.exe (PID: 11324)
      • Unicorn-11020.exe (PID: 11920)
      • Unicorn-45110.exe (PID: 11852)
      • Unicorn-21299.exe (PID: 11736)
      • Unicorn-56359.exe (PID: 11940)
      • Unicorn-30009.exe (PID: 11912)
      • Unicorn-7263.exe (PID: 11900)
      • Unicorn-62909.exe (PID: 11956)
      • Unicorn-23603.exe (PID: 12020)
      • Unicorn-63174.exe (PID: 11948)
      • Unicorn-29168.exe (PID: 11964)
      • Unicorn-45193.exe (PID: 11992)
      • Unicorn-62297.exe (PID: 11972)
      • Unicorn-58087.exe (PID: 12060)
      • Unicorn-25222.exe (PID: 12048)
      • Unicorn-46921.exe (PID: 12096)
      • Unicorn-44352.exe (PID: 12068)
      • Unicorn-11103.exe (PID: 12088)
      • Unicorn-30320.exe (PID: 12104)
      • Unicorn-20601.exe (PID: 12236)
      • Unicorn-30201.exe (PID: 12132)
      • Unicorn-32121.exe (PID: 11380)
      • Unicorn-53574.exe (PID: 3304)
      • Unicorn-64829.exe (PID: 12040)
      • Unicorn-32639.exe (PID: 5364)
      • Unicorn-32639.exe (PID: 4868)
      • Unicorn-65213.exe (PID: 11416)
      • Unicorn-1679.exe (PID: 11436)
      • Unicorn-55001.exe (PID: 12312)
      • Unicorn-65015.exe (PID: 12324)
      • Unicorn-38582.exe (PID: 12384)
      • Unicorn-32639.exe (PID: 5740)
      • Unicorn-65120.exe (PID: 776)
      • Unicorn-65120.exe (PID: 5452)
      • Unicorn-65120.exe (PID: 4652)
      • Unicorn-51198.exe (PID: 11400)
      • Unicorn-54233.exe (PID: 12376)
      • Unicorn-34937.exe (PID: 13452)
      • Unicorn-3231.exe (PID: 12564)
      • Unicorn-13967.exe (PID: 12548)
      • Unicorn-33302.exe (PID: 12540)
      • Unicorn-20147.exe (PID: 12668)
      • Unicorn-21871.exe (PID: 12644)
      • Unicorn-6412.exe (PID: 12676)
      • Unicorn-47719.exe (PID: 12432)
      • Unicorn-2264.exe (PID: 13468)
      • Unicorn-19567.exe (PID: 12556)
      • Unicorn-2072.exe (PID: 13548)
      • Unicorn-6412.exe (PID: 12684)
      • Unicorn-37439.exe (PID: 12744)
      • Unicorn-33107.exe (PID: 12736)
      • Unicorn-41389.exe (PID: 12752)
      • Unicorn-21788.exe (PID: 12760)
      • Unicorn-14780.exe (PID: 12784)
      • Unicorn-28812.exe (PID: 12848)
      • Unicorn-61764.exe (PID: 12868)
      • Unicorn-18310.exe (PID: 12880)
      • Unicorn-15814.exe (PID: 12840)
      • Unicorn-43015.exe (PID: 12936)
      • Unicorn-1589.exe (PID: 12892)
      • Unicorn-10534.exe (PID: 12924)
      • Unicorn-2860.exe (PID: 12988)
      • Unicorn-48797.exe (PID: 12996)
      • Unicorn-56576.exe (PID: 13132)
      • Unicorn-42150.exe (PID: 13116)
      • Unicorn-1318.exe (PID: 13224)
      • Unicorn-7640.exe (PID: 13168)
      • Unicorn-56192.exe (PID: 13176)
      • Unicorn-51780.exe (PID: 13144)
      • Unicorn-51780.exe (PID: 13152)
      • Unicorn-19833.exe (PID: 3900)
      • Unicorn-63856.exe (PID: 13208)
      • Unicorn-32060.exe (PID: 13184)
      • Unicorn-43421.exe (PID: 13260)
      • Unicorn-17542.exe (PID: 13244)
      • Unicorn-55808.exe (PID: 13252)
      • Unicorn-37556.exe (PID: 13268)
      • Unicorn-23785.exe (PID: 13192)
      • Unicorn-17654.exe (PID: 13200)
      • Unicorn-40313.exe (PID: 13160)
      • Unicorn-7183.exe (PID: 13216)
      • Unicorn-54084.exe (PID: 13236)
      • Unicorn-39580.exe (PID: 12164)
      • Unicorn-59830.exe (PID: 13288)
      • Unicorn-26089.exe (PID: 13300)
      • Unicorn-38127.exe (PID: 12196)
      • Unicorn-52631.exe (PID: 13276)
      • Unicorn-52932.exe (PID: 12208)
      • Unicorn-28009.exe (PID: 5036)
      • Unicorn-42534.exe (PID: 12224)
      • Unicorn-24287.exe (PID: 4572)
      • Unicorn-23303.exe (PID: 12180)
      • Unicorn-42233.exe (PID: 12216)
      • Unicorn-13509.exe (PID: 13404)
      • Unicorn-27241.exe (PID: 13344)
      • Unicorn-28777.exe (PID: 13420)
      • Unicorn-22054.exe (PID: 12424)
      • Unicorn-14943.exe (PID: 11580)
      • Unicorn-40614.exe (PID: 13848)
      • Unicorn-53001.exe (PID: 13620)
      • Unicorn-61081.exe (PID: 13956)
      • Unicorn-46103.exe (PID: 13680)
      • Unicorn-51885.exe (PID: 13708)
      • Unicorn-51885.exe (PID: 13716)
      • Unicorn-24367.exe (PID: 11824)
      • Unicorn-55606.exe (PID: 13696)
      • Unicorn-30547.exe (PID: 14360)
    • The sample compiled with chinese language support

      • 1 (713).exe (PID: 300)
      • Unicorn-19833.exe (PID: 3900)
      • Unicorn-60361.exe (PID: 10704)
      • Unicorn-7835.exe (PID: 8688)
      • Unicorn-33641.exe (PID: 10880)
      • Unicorn-27730.exe (PID: 7412)
      • Unicorn-65120.exe (PID: 776)
      • Unicorn-28188.exe (PID: 7908)
      • Unicorn-36594.exe (PID: 8700)
      • Unicorn-32028.exe (PID: 7516)
      • Unicorn-49046.exe (PID: 6228)
      • Unicorn-63831.exe (PID: 10548)
      • Unicorn-19135.exe (PID: 2384)
      • Unicorn-44540.exe (PID: 8352)
      • Unicorn-46911.exe (PID: 7380)
      • Unicorn-41084.exe (PID: 8900)
      • Unicorn-9032.exe (PID: 10224)
      • Unicorn-26492.exe (PID: 9252)
      • Unicorn-27094.exe (PID: 11468)
      • Unicorn-44652.exe (PID: 4756)
      • Unicorn-31734.exe (PID: 10512)
      • Unicorn-23603.exe (PID: 12020)
      • Unicorn-30547.exe (PID: 14360)
      • Unicorn-34937.exe (PID: 13452)
      • Unicorn-22873.exe (PID: 10608)
      • Unicorn-3330.exe (PID: 7700)
      • Unicorn-53376.exe (PID: 11692)
      • Unicorn-65120.exe (PID: 5452)
      • Unicorn-25827.exe (PID: 8752)
      • Unicorn-47111.exe (PID: 10580)
      • Unicorn-23868.exe (PID: 7448)
      • Unicorn-42754.exe (PID: 9384)
      • Unicorn-15884.exe (PID: 7492)
      • Unicorn-8217.exe (PID: 7456)
      • Unicorn-62236.exe (PID: 9400)
      • Unicorn-15515.exe (PID: 8520)
      • Unicorn-57135.exe (PID: 8028)
      • Unicorn-62874.exe (PID: 6512)
      • Unicorn-16293.exe (PID: 7952)
      • Unicorn-11587.exe (PID: 6740)
      • Unicorn-25804.exe (PID: 8004)
      • Unicorn-1966.exe (PID: 9144)
      • Unicorn-38400.exe (PID: 4108)
      • Unicorn-41247.exe (PID: 10352)
      • Unicorn-55884.exe (PID: 8884)
      • Unicorn-9992.exe (PID: 10180)
      • Unicorn-46076.exe (PID: 8452)
      • Unicorn-2072.exe (PID: 13548)
      • Unicorn-9666.exe (PID: 7340)
      • Unicorn-12546.exe (PID: 7500)
      • Unicorn-33756.exe (PID: 7568)
      • Unicorn-54233.exe (PID: 12376)
      • Unicorn-59785.exe (PID: 2064)
      • Unicorn-35900.exe (PID: 9124)
      • Unicorn-48588.exe (PID: 8996)
      • Unicorn-2843.exe (PID: 9160)
      • Unicorn-53756.exe (PID: 6972)
      • Unicorn-65002.exe (PID: 7224)
      • Unicorn-48982.exe (PID: 10168)
      • Unicorn-32639.exe (PID: 5364)
      • Unicorn-4533.exe (PID: 7432)
      • Unicorn-23471.exe (PID: 7768)
      • Unicorn-46061.exe (PID: 1128)
      • Unicorn-30009.exe (PID: 11912)
      • Unicorn-6293.exe (PID: 7936)
      • Unicorn-10952.exe (PID: 1228)
      • Unicorn-31900.exe (PID: 4068)
      • Unicorn-15147.exe (PID: 8840)
      • Unicorn-59686.exe (PID: 10204)
      • Unicorn-12978.exe (PID: 1164)
      • Unicorn-59702.exe (PID: 11172)
      • Unicorn-2213.exe (PID: 9872)
      • Unicorn-60714.exe (PID: 9080)
      • Unicorn-4389.exe (PID: 8792)
      • Unicorn-29843.exe (PID: 7320)
      • Unicorn-52631.exe (PID: 13276)
      • Unicorn-30604.exe (PID: 10920)
      • Unicorn-4587.exe (PID: 9520)
      • Unicorn-62236.exe (PID: 9408)
      • Unicorn-33388.exe (PID: 7980)
      • Unicorn-2222.exe (PID: 5332)
      • Unicorn-6242.exe (PID: 9264)
      • Unicorn-25324.exe (PID: 8800)
      • Unicorn-9919.exe (PID: 9800)
      • Unicorn-49814.exe (PID: 7252)
      • Unicorn-43839.exe (PID: 7876)
      • Unicorn-23973.exe (PID: 7900)
      • Unicorn-6366.exe (PID: 7628)
      • Unicorn-40185.exe (PID: 11124)
      • Unicorn-44570.exe (PID: 9044)
      • Unicorn-26277.exe (PID: 7464)
      • Unicorn-26345.exe (PID: 8212)
      • Unicorn-24912.exe (PID: 732)
      • Unicorn-45162.exe (PID: 10160)
      • Unicorn-38582.exe (PID: 12384)
      • Unicorn-52650.exe (PID: 9208)
      • Unicorn-28079.exe (PID: 7348)
      • Unicorn-58764.exe (PID: 8736)
      • Unicorn-65340.exe (PID: 5800)
      • Unicorn-5913.exe (PID: 7860)
      • Unicorn-19961.exe (PID: 8744)
      • Unicorn-48426.exe (PID: 9668)
      • Unicorn-55324.exe (PID: 9576)
      • Unicorn-48771.exe (PID: 4812)
      • Unicorn-57715.exe (PID: 7884)
      • Unicorn-29168.exe (PID: 11964)
      • Unicorn-20511.exe (PID: 11084)
      • Unicorn-12853.exe (PID: 9096)
      • Unicorn-30834.exe (PID: 9052)
      • Unicorn-47359.exe (PID: 1388)
      • Unicorn-61052.exe (PID: 7892)
      • Unicorn-30255.exe (PID: 7084)
      • Unicorn-15090.exe (PID: 9468)
      • Unicorn-43421.exe (PID: 13260)
      • Unicorn-29977.exe (PID: 9772)
      • Unicorn-56508.exe (PID: 8476)
      • Unicorn-63055.exe (PID: 7388)
      • Unicorn-1679.exe (PID: 11436)
      • Unicorn-17999.exe (PID: 10528)
      • Unicorn-55193.exe (PID: 12292)
      • Unicorn-33855.exe (PID: 8064)
      • Unicorn-6555.exe (PID: 6712)
      • Unicorn-13319.exe (PID: 14276)
      • Unicorn-10891.exe (PID: 7928)
      • Unicorn-2264.exe (PID: 13468)
      • Unicorn-41037.exe (PID: 2772)
      • Unicorn-45386.exe (PID: 960)
      • Unicorn-26652.exe (PID: 7816)
      • Unicorn-26543.exe (PID: 7920)
      • Unicorn-14722.exe (PID: 1012)
      • Unicorn-55427.exe (PID: 8760)
      • Unicorn-11884.exe (PID: 9632)
      • Unicorn-34502.exe (PID: 9912)
      • Unicorn-54084.exe (PID: 13236)
      • Unicorn-46979.exe (PID: 9088)
      • Unicorn-42620.exe (PID: 8728)
    • Reads the computer name

      • 1 (713).exe (PID: 300)
      • Unicorn-44652.exe (PID: 4756)
      • Unicorn-12978.exe (PID: 1164)
      • Unicorn-32844.exe (PID: 5216)
      • Unicorn-28453.exe (PID: 3300)
      • Unicorn-32175.exe (PID: 1280)
      • Unicorn-42189.exe (PID: 2616)
      • Unicorn-16524.exe (PID: 1324)
      • Unicorn-65340.exe (PID: 5800)
      • Unicorn-29138.exe (PID: 780)
      • Unicorn-41037.exe (PID: 2772)
      • Unicorn-59974.exe (PID: 5260)
      • Unicorn-31900.exe (PID: 4068)
      • Unicorn-14722.exe (PID: 1012)
      • Unicorn-30639.exe (PID: 5400)
      • Unicorn-47359.exe (PID: 1388)
      • Unicorn-58257.exe (PID: 5112)
      • Unicorn-51516.exe (PID: 536)
      • Unicorn-45386.exe (PID: 960)
      • Unicorn-45299.exe (PID: 2108)
      • Unicorn-47567.exe (PID: 6576)
      • Unicorn-30255.exe (PID: 7084)
      • Unicorn-52476.exe (PID: 2096)
      • Unicorn-38662.exe (PID: 920)
      • Unicorn-62874.exe (PID: 6512)
      • Unicorn-58813.exe (PID: 3888)
      • Unicorn-52476.exe (PID: 5720)
      • Unicorn-47878.exe (PID: 864)
      • Unicorn-47878.exe (PID: 6436)
      • Unicorn-3467.exe (PID: 6656)
      • Unicorn-2222.exe (PID: 5332)
      • Unicorn-48771.exe (PID: 4812)
      • Unicorn-49046.exe (PID: 6228)
      • Unicorn-46061.exe (PID: 1128)
      • Unicorn-19135.exe (PID: 2384)
      • Unicorn-4645.exe (PID: 7204)
      • Unicorn-6555.exe (PID: 6712)
      • Unicorn-19135.exe (PID: 5328)
      • Unicorn-5294.exe (PID: 7180)
      • Unicorn-52227.exe (PID: 7172)
      • Unicorn-49814.exe (PID: 7252)
      • Unicorn-5678.exe (PID: 7304)
      • Unicorn-14729.exe (PID: 7288)
      • Unicorn-65002.exe (PID: 7224)
      • Unicorn-56524.exe (PID: 7272)
      • Unicorn-9666.exe (PID: 7340)
      • Unicorn-28079.exe (PID: 7348)
      • Unicorn-29843.exe (PID: 7320)
      • Unicorn-28847.exe (PID: 7328)
      • Unicorn-46911.exe (PID: 7380)
      • Unicorn-59914.exe (PID: 7592)
      • Unicorn-6366.exe (PID: 7628)
      • Unicorn-39651.exe (PID: 7652)
      • Unicorn-8217.exe (PID: 7456)
      • Unicorn-27730.exe (PID: 7412)
      • Unicorn-32028.exe (PID: 7516)
      • Unicorn-4533.exe (PID: 7432)
      • Unicorn-23471.exe (PID: 7768)
      • Unicorn-26652.exe (PID: 7816)
      • Unicorn-57309.exe (PID: 7524)
      • Unicorn-23868.exe (PID: 7448)
      • Unicorn-29999.exe (PID: 7440)
      • Unicorn-15225.exe (PID: 7788)
      • Unicorn-63055.exe (PID: 7388)
      • Unicorn-3330.exe (PID: 7700)
      • Unicorn-12546.exe (PID: 7500)
      • Unicorn-30383.exe (PID: 7404)
      • Unicorn-41452.exe (PID: 7740)
      • Unicorn-60787.exe (PID: 7372)
      • Unicorn-55603.exe (PID: 7824)
      • Unicorn-26277.exe (PID: 7464)
      • Unicorn-33756.exe (PID: 7568)
      • Unicorn-15884.exe (PID: 7492)
      • Unicorn-5913.exe (PID: 7860)
      • Unicorn-28188.exe (PID: 7908)
      • Unicorn-56828.exe (PID: 7776)
      • Unicorn-26543.exe (PID: 7920)
      • Unicorn-47923.exe (PID: 8056)
      • Unicorn-693.exe (PID: 7944)
      • Unicorn-6293.exe (PID: 7936)
      • Unicorn-60013.exe (PID: 8080)
      • Unicorn-33855.exe (PID: 8064)
      • Unicorn-23973.exe (PID: 7900)
      • Unicorn-20124.exe (PID: 8120)
      • Unicorn-61052.exe (PID: 7892)
      • Unicorn-57715.exe (PID: 7884)
      • Unicorn-10891.exe (PID: 7928)
      • Unicorn-9931.exe (PID: 7832)
      • Unicorn-16293.exe (PID: 7952)
      • Unicorn-38463.exe (PID: 7692)
      • Unicorn-9657.exe (PID: 8072)
      • Unicorn-55427.exe (PID: 8760)
      • Unicorn-44540.exe (PID: 8352)
      • Unicorn-25827.exe (PID: 8752)
      • Unicorn-4389.exe (PID: 8792)
      • Unicorn-50803.exe (PID: 8176)
      • Unicorn-13870.exe (PID: 8536)
      • Unicorn-55706.exe (PID: 8324)
      • Unicorn-58764.exe (PID: 8736)
      • Unicorn-58950.exe (PID: 9112)
      • Unicorn-7835.exe (PID: 8688)
      • Unicorn-25804.exe (PID: 8004)
      • Unicorn-34623.exe (PID: 8044)
      • Unicorn-19961.exe (PID: 8744)
      • Unicorn-17260.exe (PID: 8920)
      • Unicorn-23330.exe (PID: 8256)
      • Unicorn-53699.exe (PID: 8680)
      • Unicorn-15515.exe (PID: 8520)
      • Unicorn-43839.exe (PID: 7876)
      • Unicorn-32454.exe (PID: 9072)
      • Unicorn-33388.exe (PID: 7980)
      • Unicorn-53756.exe (PID: 6972)
      • Unicorn-10907.exe (PID: 8240)
      • Unicorn-15147.exe (PID: 8840)
      • Unicorn-55884.exe (PID: 8884)
      • Unicorn-34073.exe (PID: 8300)
      • Unicorn-17481.exe (PID: 9856)
      • Unicorn-2213.exe (PID: 9872)
      • Unicorn-15090.exe (PID: 9476)
      • Unicorn-34502.exe (PID: 9912)
      • Unicorn-1026.exe (PID: 8092)
      • Unicorn-6242.exe (PID: 9264)
      • Unicorn-28825.exe (PID: 9460)
      • Unicorn-30834.exe (PID: 9052)
      • Unicorn-23487.exe (PID: 8668)
      • Unicorn-10917.exe (PID: 8508)
      • Unicorn-482.exe (PID: 9540)
      • Unicorn-52044.exe (PID: 9132)
      • Unicorn-62236.exe (PID: 9400)
      • Unicorn-36594.exe (PID: 8700)
      • Unicorn-2843.exe (PID: 9160)
      • Unicorn-6299.exe (PID: 8648)
      • Unicorn-55308.exe (PID: 8876)
      • Unicorn-21868.exe (PID: 8552)
      • Unicorn-9646.exe (PID: 8248)
      • Unicorn-52650.exe (PID: 9208)
      • Unicorn-41100.exe (PID: 8016)
      • Unicorn-59942.exe (PID: 8832)
      • Unicorn-48426.exe (PID: 9668)
      • Unicorn-46979.exe (PID: 9088)
      • Unicorn-42738.exe (PID: 8436)
      • Unicorn-44570.exe (PID: 9044)
      • Unicorn-7358.exe (PID: 7992)
      • Unicorn-20011.exe (PID: 9316)
      • Unicorn-56508.exe (PID: 8476)
      • Unicorn-15090.exe (PID: 9468)
      • Unicorn-1301.exe (PID: 8148)
      • Unicorn-55324.exe (PID: 9576)
      • Unicorn-24041.exe (PID: 11104)
      • Unicorn-9919.exe (PID: 9800)
      • Unicorn-59702.exe (PID: 11172)
      • Unicorn-48588.exe (PID: 8996)
      • Unicorn-36386.exe (PID: 9284)
      • Unicorn-42754.exe (PID: 9384)
      • Unicorn-46999.exe (PID: 10596)
      • Unicorn-8486.exe (PID: 10852)
      • Unicorn-9535.exe (PID: 10188)
      • Unicorn-40185.exe (PID: 11124)
      • Unicorn-10952.exe (PID: 1228)
      • Unicorn-1966.exe (PID: 9144)
      • Unicorn-48790.exe (PID: 8584)
      • Unicorn-63142.exe (PID: 10276)
      • Unicorn-41247.exe (PID: 10352)
      • Unicorn-12488.exe (PID: 10304)
      • Unicorn-7726.exe (PID: 8812)
      • Unicorn-64643.exe (PID: 8484)
      • Unicorn-7970.exe (PID: 9332)
      • Unicorn-4587.exe (PID: 9520)
      • Unicorn-26422.exe (PID: 10036)
      • Unicorn-48982.exe (PID: 10168)
      • Unicorn-16905.exe (PID: 9940)
      • Unicorn-17999.exe (PID: 10528)
      • Unicorn-57135.exe (PID: 8028)
      • Unicorn-46076.exe (PID: 8452)
      • Unicorn-22873.exe (PID: 10608)
      • Unicorn-24912.exe (PID: 732)
      • Unicorn-27571.exe (PID: 9324)
      • Unicorn-44710.exe (PID: 1180)
      • Unicorn-27260.exe (PID: 1300)
      • Unicorn-64524.exe (PID: 8500)
      • Unicorn-26492.exe (PID: 9252)
      • Unicorn-9992.exe (PID: 10180)
      • Unicorn-41675.exe (PID: 10496)
      • Unicorn-46921.exe (PID: 12096)
      • Unicorn-12853.exe (PID: 9096)
      • Unicorn-10230.exe (PID: 11332)
      • Unicorn-26345.exe (PID: 8212)
      • Unicorn-29977.exe (PID: 9772)
      • Unicorn-41084.exe (PID: 8900)
      • Unicorn-36802.exe (PID: 9700)
      • Unicorn-59686.exe (PID: 10204)
      • Unicorn-33641.exe (PID: 10880)
      • Unicorn-39946.exe (PID: 8460)
      • Unicorn-53788.exe (PID: 9504)
      • Unicorn-34937.exe (PID: 13452)
      • Unicorn-2264.exe (PID: 13468)
      • Unicorn-2072.exe (PID: 13548)
      • Unicorn-30009.exe (PID: 11912)
      • Unicorn-14217.exe (PID: 9548)
      • Unicorn-23603.exe (PID: 12020)
      • Unicorn-30201.exe (PID: 12132)
      • Unicorn-20601.exe (PID: 12236)
      • Unicorn-51780.exe (PID: 13144)
      • Unicorn-32121.exe (PID: 11380)
      • Unicorn-43421.exe (PID: 13260)
      • Unicorn-32639.exe (PID: 5364)
      • Unicorn-28009.exe (PID: 5036)
      • Unicorn-51198.exe (PID: 11400)
      • Unicorn-59785.exe (PID: 2064)
      • Unicorn-65120.exe (PID: 776)
      • Unicorn-32639.exe (PID: 5740)
      • Unicorn-1679.exe (PID: 11436)
      • Unicorn-55001.exe (PID: 12312)
      • Unicorn-64829.exe (PID: 12040)
      • Unicorn-60361.exe (PID: 10704)
      • Unicorn-25407.exe (PID: 8720)
      • Unicorn-62236.exe (PID: 9408)
      • Unicorn-54233.exe (PID: 12376)
    • Create files in a temporary directory

      • 1 (713).exe (PID: 300)
      • Unicorn-32844.exe (PID: 5216)
      • Unicorn-12978.exe (PID: 1164)
      • Unicorn-32175.exe (PID: 1280)
      • Unicorn-28453.exe (PID: 3300)
      • Unicorn-44652.exe (PID: 4756)
      • Unicorn-42189.exe (PID: 2616)
      • Unicorn-16524.exe (PID: 1324)
      • Unicorn-65340.exe (PID: 5800)
      • Unicorn-29138.exe (PID: 780)
      • Unicorn-41037.exe (PID: 2772)
      • Unicorn-59974.exe (PID: 5260)
      • Unicorn-14722.exe (PID: 1012)
      • Unicorn-31900.exe (PID: 4068)
      • Unicorn-58257.exe (PID: 5112)
      • Unicorn-45299.exe (PID: 2108)
      • Unicorn-45386.exe (PID: 960)
      • Unicorn-47567.exe (PID: 6576)
      • Unicorn-30255.exe (PID: 7084)
      • Unicorn-62874.exe (PID: 6512)
      • Unicorn-52476.exe (PID: 2096)
      • Unicorn-38662.exe (PID: 920)
      • Unicorn-58813.exe (PID: 3888)
      • Unicorn-47359.exe (PID: 1388)
      • Unicorn-30639.exe (PID: 5400)
      • Unicorn-3467.exe (PID: 6656)
      • Unicorn-47878.exe (PID: 6436)
      • Unicorn-47878.exe (PID: 864)
      • Unicorn-2222.exe (PID: 5332)
      • Unicorn-48771.exe (PID: 4812)
      • Unicorn-46061.exe (PID: 1128)
      • Unicorn-19135.exe (PID: 5328)
      • Unicorn-49046.exe (PID: 6228)
      • Unicorn-4645.exe (PID: 7204)
      • Unicorn-5294.exe (PID: 7180)
      • Unicorn-6555.exe (PID: 6712)
      • Unicorn-51516.exe (PID: 536)
      • Unicorn-52227.exe (PID: 7172)
      • Unicorn-19135.exe (PID: 2384)
      • Unicorn-65002.exe (PID: 7224)
      • Unicorn-56524.exe (PID: 7272)
      • Unicorn-49814.exe (PID: 7252)
      • Unicorn-14729.exe (PID: 7288)
      • Unicorn-5678.exe (PID: 7304)
      • Unicorn-9666.exe (PID: 7340)
      • Unicorn-28079.exe (PID: 7348)
      • Unicorn-29843.exe (PID: 7320)
      • Unicorn-46911.exe (PID: 7380)
      • Unicorn-52476.exe (PID: 5720)
      • Unicorn-59914.exe (PID: 7592)
      • Unicorn-6366.exe (PID: 7628)
      • Unicorn-39651.exe (PID: 7652)
      • Unicorn-32028.exe (PID: 7516)
      • Unicorn-4533.exe (PID: 7432)
      • Unicorn-8217.exe (PID: 7456)
      • Unicorn-23471.exe (PID: 7768)
      • Unicorn-26652.exe (PID: 7816)
      • Unicorn-57309.exe (PID: 7524)
      • Unicorn-29999.exe (PID: 7440)
      • Unicorn-23868.exe (PID: 7448)
      • Unicorn-63055.exe (PID: 7388)
      • Unicorn-12546.exe (PID: 7500)
      • Unicorn-15884.exe (PID: 7492)
      • Unicorn-60787.exe (PID: 7372)
      • Unicorn-55603.exe (PID: 7824)
      • Unicorn-33756.exe (PID: 7568)
      • Unicorn-3330.exe (PID: 7700)
      • Unicorn-41452.exe (PID: 7740)
      • Unicorn-5913.exe (PID: 7860)
      • Unicorn-26277.exe (PID: 7464)
      • Unicorn-28188.exe (PID: 7908)
      • Unicorn-15225.exe (PID: 7788)
      • Unicorn-30383.exe (PID: 7404)
      • Unicorn-56828.exe (PID: 7776)
      • Unicorn-26543.exe (PID: 7920)
      • Unicorn-693.exe (PID: 7944)
      • Unicorn-6293.exe (PID: 7936)
      • Unicorn-47923.exe (PID: 8056)
      • Unicorn-60013.exe (PID: 8080)
      • Unicorn-33855.exe (PID: 8064)
      • Unicorn-23973.exe (PID: 7900)
      • Unicorn-9931.exe (PID: 7832)
      • Unicorn-57715.exe (PID: 7884)
      • Unicorn-10891.exe (PID: 7928)
      • Unicorn-20124.exe (PID: 8120)
      • Unicorn-61052.exe (PID: 7892)
      • Unicorn-9657.exe (PID: 8072)
      • Unicorn-28847.exe (PID: 7328)
      • Unicorn-38463.exe (PID: 7692)
      • Unicorn-55427.exe (PID: 8760)
      • Unicorn-44540.exe (PID: 8352)
      • Unicorn-16293.exe (PID: 7952)
      • Unicorn-4389.exe (PID: 8792)
      • Unicorn-50803.exe (PID: 8176)
      • Unicorn-27730.exe (PID: 7412)
      • Unicorn-7835.exe (PID: 8688)
      • Unicorn-13870.exe (PID: 8536)
      • Unicorn-25804.exe (PID: 8004)
      • Unicorn-58950.exe (PID: 9112)
      • Unicorn-55706.exe (PID: 8324)
      • Unicorn-17260.exe (PID: 8920)
      • Unicorn-19961.exe (PID: 8744)
      • Unicorn-23330.exe (PID: 8256)
      • Unicorn-53699.exe (PID: 8680)
      • Unicorn-53756.exe (PID: 6972)
      • Unicorn-32454.exe (PID: 9072)
      • Unicorn-15515.exe (PID: 8520)
      • Unicorn-43839.exe (PID: 7876)
      • Unicorn-15147.exe (PID: 8840)
      • Unicorn-55884.exe (PID: 8884)
      • Unicorn-10907.exe (PID: 8240)
      • Unicorn-17481.exe (PID: 9856)
      • Unicorn-2213.exe (PID: 9872)
      • Unicorn-34073.exe (PID: 8300)
      • Unicorn-34502.exe (PID: 9912)
      • Unicorn-34623.exe (PID: 8044)
      • Unicorn-30834.exe (PID: 9052)
      • Unicorn-6242.exe (PID: 9264)
      • Unicorn-23487.exe (PID: 8668)
      • Unicorn-15090.exe (PID: 9476)
      • Unicorn-58764.exe (PID: 8736)
      • Unicorn-28825.exe (PID: 9460)
      • Unicorn-10917.exe (PID: 8508)
      • Unicorn-62236.exe (PID: 9400)
      • Unicorn-36594.exe (PID: 8700)
      • Unicorn-52044.exe (PID: 9132)
      • Unicorn-2843.exe (PID: 9160)
      • Unicorn-55308.exe (PID: 8876)
      • Unicorn-25827.exe (PID: 8752)
      • Unicorn-482.exe (PID: 9540)
      • Unicorn-6299.exe (PID: 8648)
      • Unicorn-33388.exe (PID: 7980)
      • Unicorn-41100.exe (PID: 8016)
      • Unicorn-52650.exe (PID: 9208)
      • Unicorn-9646.exe (PID: 8248)
      • Unicorn-59942.exe (PID: 8832)
      • Unicorn-21868.exe (PID: 8552)
      • Unicorn-48426.exe (PID: 9668)
      • Unicorn-46979.exe (PID: 9088)
      • Unicorn-44570.exe (PID: 9044)
      • Unicorn-20011.exe (PID: 9316)
      • Unicorn-15090.exe (PID: 9468)
      • Unicorn-1301.exe (PID: 8148)
      • Unicorn-55324.exe (PID: 9576)
      • Unicorn-56508.exe (PID: 8476)
      • Unicorn-40185.exe (PID: 11124)
      • Unicorn-59702.exe (PID: 11172)
      • Unicorn-42754.exe (PID: 9384)
      • Unicorn-24041.exe (PID: 11104)
      • Unicorn-7726.exe (PID: 8812)
      • Unicorn-8486.exe (PID: 10852)
      • Unicorn-32473.exe (PID: 9588)
      • Unicorn-6332.exe (PID: 9732)
      • Unicorn-11115.exe (PID: 7968)
      • Unicorn-38400.exe (PID: 4108)
      • Unicorn-55193.exe (PID: 12292)
      • Unicorn-48790.exe (PID: 8584)
      • Unicorn-7970.exe (PID: 9332)
      • Unicorn-4587.exe (PID: 9520)
      • Unicorn-36386.exe (PID: 9284)
      • Unicorn-11587.exe (PID: 6740)
      • Unicorn-57135.exe (PID: 8028)
      • Unicorn-46076.exe (PID: 8452)
      • Unicorn-35900.exe (PID: 9124)
      • Unicorn-27260.exe (PID: 1300)
      • Unicorn-24912.exe (PID: 732)
      • Unicorn-17999.exe (PID: 10528)
      • Unicorn-16905.exe (PID: 9940)
      • Unicorn-44710.exe (PID: 1180)
      • Unicorn-22873.exe (PID: 10608)
      • Unicorn-64524.exe (PID: 8500)
      • Unicorn-9992.exe (PID: 10180)
      • Unicorn-46921.exe (PID: 12096)
      • Unicorn-41675.exe (PID: 10496)
      • Unicorn-12853.exe (PID: 9096)
      • Unicorn-29977.exe (PID: 9772)
      • Unicorn-26422.exe (PID: 10036)
      • Unicorn-59686.exe (PID: 10204)
      • Unicorn-41084.exe (PID: 8900)
      • Unicorn-34937.exe (PID: 13452)
      • Unicorn-2072.exe (PID: 13548)
      • Unicorn-2264.exe (PID: 13468)
      • Unicorn-14217.exe (PID: 9548)
      • Unicorn-26492.exe (PID: 9252)
      • Unicorn-30009.exe (PID: 11912)
      • Unicorn-26345.exe (PID: 8212)
      • Unicorn-10230.exe (PID: 11332)
      • Unicorn-10952.exe (PID: 1228)
      • Unicorn-36802.exe (PID: 9700)
      • Unicorn-39946.exe (PID: 8460)
      • Unicorn-45162.exe (PID: 10160)
      • Unicorn-33641.exe (PID: 10880)
    • Reads security settings of Internet Explorer

      • BackgroundTransferHost.exe (PID: 6436)
      • BackgroundTransferHost.exe (PID: 4380)
      • BackgroundTransferHost.exe (PID: 4988)
      • BackgroundTransferHost.exe (PID: 5936)
      • BackgroundTransferHost.exe (PID: 6876)
    • Checks proxy server information

      • BackgroundTransferHost.exe (PID: 4380)
    • Reads the software policy settings

      • BackgroundTransferHost.exe (PID: 4380)
      • slui.exe (PID: 2100)
    • Creates files or folders in the user directory

      • BackgroundTransferHost.exe (PID: 4380)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable Microsoft Visual Basic 6 (90.6)
.exe | Win32 Executable (generic) (4.9)
.exe | Generic Win/DOS Executable (2.2)
.exe | DOS Executable Generic (2.2)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:01:19 13:34:56+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 299008
UninitializedDataSize: -
EntryPoint: 0x13d4
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
InternalName: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
616
Monitored processes
483
Malicious processes
79
Suspicious processes
65

Behavior graph

Click at the process to see the details
start 1 (713).exe sppextcomobj.exe no specs slui.exe unicorn-44652.exe unicorn-12978.exe unicorn-32844.exe unicorn-32175.exe unicorn-16524.exe unicorn-42189.exe unicorn-28453.exe backgroundtransferhost.exe no specs unicorn-65340.exe unicorn-29138.exe unicorn-47359.exe unicorn-41037.exe unicorn-31900.exe unicorn-30639.exe unicorn-59974.exe unicorn-14722.exe backgroundtransferhost.exe backgroundtransferhost.exe no specs backgroundtransferhost.exe no specs unicorn-58257.exe backgroundtransferhost.exe no specs unicorn-45299.exe unicorn-47567.exe unicorn-51516.exe unicorn-45386.exe unicorn-30255.exe unicorn-38662.exe unicorn-62874.exe unicorn-3467.exe unicorn-52476.exe unicorn-52476.exe unicorn-58813.exe unicorn-47878.exe unicorn-47878.exe unicorn-2222.exe unicorn-48771.exe unicorn-49046.exe unicorn-46061.exe unicorn-19135.exe unicorn-19135.exe unicorn-6555.exe unicorn-52227.exe unicorn-5294.exe unicorn-4645.exe unicorn-65002.exe unicorn-49814.exe unicorn-56524.exe unicorn-14729.exe unicorn-5678.exe unicorn-29843.exe unicorn-28847.exe unicorn-9666.exe unicorn-28079.exe unicorn-60787.exe unicorn-46911.exe unicorn-63055.exe unicorn-30383.exe unicorn-27730.exe unicorn-4533.exe unicorn-29999.exe unicorn-23868.exe unicorn-8217.exe unicorn-26277.exe unicorn-15884.exe unicorn-12546.exe unicorn-32028.exe unicorn-57309.exe unicorn-33756.exe unicorn-59914.exe unicorn-6366.exe unicorn-39651.exe unicorn-38463.exe unicorn-3330.exe unicorn-41452.exe unicorn-23471.exe unicorn-56828.exe unicorn-15225.exe unicorn-26652.exe unicorn-55603.exe unicorn-9931.exe unicorn-5913.exe unicorn-43839.exe unicorn-57715.exe unicorn-61052.exe unicorn-23973.exe unicorn-28188.exe unicorn-26543.exe unicorn-10891.exe unicorn-6293.exe unicorn-693.exe unicorn-16293.exe unicorn-33388.exe unicorn-25804.exe unicorn-34623.exe unicorn-47923.exe unicorn-33855.exe unicorn-9657.exe unicorn-60013.exe unicorn-1026.exe no specs unicorn-20124.exe unicorn-1301.exe unicorn-50803.exe unicorn-53756.exe unicorn-43891.exe unicorn-10907.exe unicorn-9646.exe unicorn-23330.exe unicorn-34073.exe unicorn-55706.exe unicorn-44540.exe unicorn-29631.exe no specs unicorn-13102.exe unicorn-42738.exe unicorn-46076.exe unicorn-39946.exe unicorn-56508.exe unicorn-64643.exe unicorn-64524.exe unicorn-10917.exe unicorn-15515.exe unicorn-13870.exe unicorn-21868.exe unicorn-48790.exe unicorn-6299.exe unicorn-23487.exe unicorn-53699.exe unicorn-7835.exe unicorn-36594.exe unicorn-25407.exe unicorn-42620.exe unicorn-58764.exe unicorn-19961.exe unicorn-25827.exe unicorn-55427.exe unicorn-4389.exe unicorn-25324.exe unicorn-7726.exe unicorn-59942.exe unicorn-15147.exe unicorn-44291.exe no specs unicorn-55308.exe unicorn-55884.exe unicorn-41084.exe unicorn-17260.exe unicorn-48588.exe unicorn-32252.exe no specs unicorn-44570.exe unicorn-30834.exe unicorn-32454.exe unicorn-60714.exe unicorn-46979.exe unicorn-12853.exe unicorn-58950.exe unicorn-35900.exe unicorn-52044.exe unicorn-1966.exe unicorn-18111.exe no specs unicorn-2843.exe unicorn-52650.exe unicorn-57135.exe unicorn-24956.exe no specs unicorn-41100.exe unicorn-7358.exe no specs unicorn-56367.exe unicorn-11115.exe unicorn-27260.exe unicorn-51002.exe no specs unicorn-26492.exe unicorn-6242.exe unicorn-36386.exe unicorn-20011.exe unicorn-27571.exe unicorn-7970.exe unicorn-42754.exe unicorn-62236.exe unicorn-62236.exe unicorn-44477.exe no specs unicorn-28825.exe unicorn-15090.exe unicorn-15090.exe unicorn-53788.exe unicorn-4587.exe unicorn-482.exe unicorn-14217.exe unicorn-55324.exe unicorn-32473.exe unicorn-65146.exe no specs unicorn-11884.exe unicorn-48426.exe unicorn-17970.exe no specs unicorn-23996.exe unicorn-36802.exe unicorn-6332.exe unicorn-29977.exe unicorn-7126.exe no specs unicorn-9919.exe unicorn-17481.exe unicorn-2213.exe unicorn-34502.exe unicorn-62576.exe no specs unicorn-16905.exe unicorn-11459.exe unicorn-65529.exe no specs unicorn-26422.exe unicorn-45162.exe unicorn-48982.exe unicorn-9992.exe unicorn-9535.exe unicorn-59686.exe unicorn-2902.exe no specs unicorn-9032.exe unicorn-24912.exe unicorn-10952.exe unicorn-6847.exe no specs unicorn-6847.exe no specs unicorn-63142.exe unicorn-45545.exe no specs unicorn-12488.exe unicorn-41247.exe no specs unicorn-41247.exe no specs unicorn-41247.exe no specs unicorn-41247.exe unicorn-47429.exe no specs unicorn-35945.exe unicorn-5192.exe no specs unicorn-41675.exe unicorn-28934.exe no specs unicorn-31734.exe unicorn-17999.exe no specs unicorn-17999.exe unicorn-4616.exe no specs unicorn-4424.exe unicorn-63831.exe unicorn-4808.exe no specs unicorn-47111.exe unicorn-23449.exe no specs unicorn-46999.exe unicorn-22873.exe unicorn-60361.exe unicorn-63241.exe no specs unicorn-14232.exe unicorn-14232.exe unicorn-46521.exe no specs unicorn-13080.exe no specs unicorn-16070.exe no specs unicorn-65078.exe no specs unicorn-8486.exe unicorn-61252.exe no specs unicorn-33641.exe unicorn-30604.exe unicorn-45680.exe no specs unicorn-1077.exe no specs unicorn-32224.exe no specs unicorn-60100.exe no specs unicorn-61824.exe no specs unicorn-16153.exe no specs unicorn-38950.exe no specs unicorn-57097.exe no specs unicorn-20511.exe unicorn-4175.exe unicorn-24041.exe unicorn-40185.exe unicorn-59702.exe unicorn-9240.exe no specs unicorn-42022.exe no specs unicorn-25686.exe no specs unicorn-44710.exe unicorn-59785.exe unicorn-26345.exe unicorn-10693.exe no specs unicorn-32889.exe no specs unicorn-62032.exe no specs unicorn-56432.exe no specs unicorn-10230.exe unicorn-32121.exe unicorn-51198.exe unicorn-65213.exe no specs unicorn-11871.exe no specs unicorn-1679.exe unicorn-44631.exe unicorn-30895.exe unicorn-27094.exe unicorn-41540.exe unicorn-35193.exe no specs unicorn-14943.exe no specs unicorn-33775.exe no specs unicorn-33775.exe no specs unicorn-47511.exe no specs unicorn-17439.exe no specs unicorn-44711.exe no specs unicorn-53376.exe unicorn-53376.exe no specs unicorn-50605.exe no specs unicorn-37798.exe no specs unicorn-21299.exe no specs unicorn-24367.exe no specs unicorn-45110.exe no specs unicorn-7263.exe no specs unicorn-30009.exe unicorn-11020.exe no specs unicorn-56359.exe no specs unicorn-63174.exe no specs unicorn-62909.exe no specs unicorn-29168.exe unicorn-62297.exe no specs unicorn-45193.exe no specs unicorn-23603.exe unicorn-64829.exe unicorn-25222.exe no specs unicorn-58087.exe no specs unicorn-44352.exe no specs unicorn-11103.exe no specs unicorn-46921.exe unicorn-30320.exe unicorn-30201.exe unicorn-20601.exe unicorn-53574.exe no specs unicorn-19833.exe unicorn-32639.exe unicorn-32639.exe no specs unicorn-32639.exe unicorn-65120.exe unicorn-65120.exe unicorn-65120.exe no specs unicorn-11587.exe unicorn-38400.exe unicorn-55193.exe unicorn-55001.exe unicorn-65015.exe no specs unicorn-54233.exe unicorn-38582.exe unicorn-22054.exe no specs unicorn-47719.exe no specs unicorn-33302.exe no specs unicorn-13967.exe no specs unicorn-19567.exe no specs unicorn-3231.exe unicorn-21871.exe no specs unicorn-20147.exe no specs unicorn-6412.exe no specs unicorn-6412.exe no specs unicorn-35908.exe no specs unicorn-33107.exe no specs unicorn-37439.exe no specs unicorn-41389.exe no specs unicorn-21788.exe no specs unicorn-14780.exe no specs unicorn-15814.exe no specs unicorn-28812.exe no specs unicorn-61764.exe no specs unicorn-18310.exe no specs unicorn-1589.exe no specs unicorn-10534.exe unicorn-43015.exe unicorn-2860.exe unicorn-48797.exe no specs unicorn-42150.exe no specs unicorn-56576.exe no specs unicorn-51780.exe unicorn-51780.exe no specs unicorn-40313.exe no specs unicorn-7640.exe no specs unicorn-56192.exe unicorn-32060.exe no specs unicorn-23785.exe no specs unicorn-17654.exe no specs unicorn-63856.exe no specs unicorn-7183.exe no specs unicorn-1318.exe no specs unicorn-54084.exe unicorn-17542.exe no specs unicorn-55808.exe no specs unicorn-43421.exe unicorn-37556.exe no specs unicorn-52631.exe unicorn-59830.exe no specs unicorn-26089.exe no specs unicorn-23303.exe no specs unicorn-42233.exe no specs unicorn-39580.exe no specs unicorn-38127.exe no specs unicorn-52932.exe no specs unicorn-42534.exe no specs unicorn-28009.exe unicorn-24287.exe no specs unicorn-27241.exe no specs unicorn-13509.exe no specs unicorn-28777.exe no specs unicorn-34937.exe unicorn-2264.exe unicorn-2072.exe unicorn-1724.exe no specs unicorn-53001.exe no specs unicorn-33820.exe no specs unicorn-32367.exe no specs unicorn-46103.exe no specs unicorn-55606.exe no specs unicorn-51885.exe no specs unicorn-51885.exe no specs unicorn-5948.exe no specs unicorn-83.exe no specs unicorn-54573.exe no specs unicorn-5445.exe no specs unicorn-56073.exe no specs unicorn-40614.exe no specs unicorn-56374.exe no specs unicorn-38393.exe no specs unicorn-55335.exe no specs unicorn-16995.exe no specs unicorn-61081.exe no specs unicorn-61081.exe no specs unicorn-27833.exe no specs unicorn-2175.exe no specs unicorn-40639.exe no specs unicorn-30246.exe unicorn-44672.exe no specs unicorn-13319.exe unicorn-55513.exe no specs unicorn-25582.exe no specs unicorn-13327.exe no specs unicorn-23334.exe no specs unicorn-25198.exe no specs unicorn-54864.exe unicorn-30547.exe unicorn-35263.exe no specs unicorn-35263.exe no specs unicorn-35263.exe no specs unicorn-33347.exe no specs unicorn-39213.exe no specs unicorn-22950.exe no specs unicorn-19612.exe no specs unicorn-35263.exe no specs unicorn-35263.exe no specs unicorn-7656.exe no specs unicorn-40137.exe no specs unicorn-24486.exe no specs unicorn-49767.exe no specs unicorn-9576.exe no specs unicorn-58009.exe no specs unicorn-43017.exe no specs unicorn-42855.exe no specs unicorn-49478.exe no specs unicorn-51398.exe no specs unicorn-50521.exe no specs unicorn-15004.exe no specs unicorn-15004.exe no specs unicorn-15004.exe no specs unicorn-51014.exe no specs unicorn-744.exe no specs unicorn-46416.exe no specs unicorn-19769.exe no specs unicorn-35913.exe no specs unicorn-18617.exe no specs unicorn-52166.exe no specs slui.exe no specs unicorn-61024.exe no specs unicorn-19695.exe no specs unicorn-30345.exe no specs unicorn-5187.exe no specs unicorn-19977.exe no specs unicorn-17324.exe no specs unicorn-2415.exe no specs unicorn-2415.exe no specs unicorn-2415.exe no specs unicorn-2415.exe no specs unicorn-21823.exe no specs unicorn-2415.exe no specs unicorn-2415.exe no specs unicorn-2415.exe no specs unicorn-2415.exe no specs unicorn-22015.exe no specs unicorn-2223.exe no specs unicorn-2415.exe no specs unicorn-13688.exe no specs unicorn-15958.exe no specs unicorn-35929.exe no specs unicorn-30126.exe no specs unicorn-30126.exe no specs unicorn-30126.exe no specs unicorn-5404.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
300"C:\Users\admin\AppData\Local\Temp\1 (713).exe" C:\Users\admin\AppData\Local\Temp\1 (713).exe
explorer.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\1 (713).exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
536C:\Users\admin\AppData\Local\Temp\Unicorn-51516.exeC:\Users\admin\AppData\Local\Temp\Unicorn-51516.exe
Unicorn-41037.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-51516.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
732C:\Users\admin\AppData\Local\Temp\Unicorn-24912.exeC:\Users\admin\AppData\Local\Temp\Unicorn-24912.exe
Unicorn-58257.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-24912.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
776C:\Users\admin\AppData\Local\Temp\Unicorn-65120.exeC:\Users\admin\AppData\Local\Temp\Unicorn-65120.exe
Unicorn-60013.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-65120.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
780C:\Users\admin\AppData\Local\Temp\Unicorn-29138.exeC:\Users\admin\AppData\Local\Temp\Unicorn-29138.exe
Unicorn-32844.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-29138.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
864C:\Users\admin\AppData\Local\Temp\Unicorn-47878.exeC:\Users\admin\AppData\Local\Temp\Unicorn-47878.exe
Unicorn-16524.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-47878.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
920C:\Users\admin\AppData\Local\Temp\Unicorn-38662.exeC:\Users\admin\AppData\Local\Temp\Unicorn-38662.exe
Unicorn-59974.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-38662.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
960C:\Users\admin\AppData\Local\Temp\Unicorn-45386.exeC:\Users\admin\AppData\Local\Temp\Unicorn-45386.exe
Unicorn-32844.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-45386.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1012C:\Users\admin\AppData\Local\Temp\Unicorn-14722.exeC:\Users\admin\AppData\Local\Temp\Unicorn-14722.exe
1 (713).exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-14722.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1128C:\Users\admin\AppData\Local\Temp\Unicorn-46061.exeC:\Users\admin\AppData\Local\Temp\Unicorn-46061.exe
Unicorn-42189.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-46061.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
Total events
10 456
Read events
10 441
Write events
15
Delete events
0

Modification events

(PID) Process:(6436) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(6436) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(6436) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(4380) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(4380) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(4380) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(4988) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(4988) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(4988) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(5936) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
Executable files
864
Suspicious files
5
Text files
0
Unknown types
0

Dropped files

PID
Process
Filename
Type
4380BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\303b81d0-e636-41ba-bfd4-f5553dee0bfe.down_data
MD5:
SHA256:
3001 (713).exeC:\Users\admin\AppData\Local\Temp\Unicorn-44652.exeexecutable
MD5:E261B2E5AF63D34604825E831EB650A2
SHA256:193D6CCA669BD9803700AA36493960FB633BAC6B2DFAA9A9CB3BD8F2BDD5369E
4756Unicorn-44652.exeC:\Users\admin\AppData\Local\Temp\Unicorn-32844.exeexecutable
MD5:A53E93348B36D07E06348EB27B02B5F8
SHA256:67297EF46433F716FA50ACBC00E06ABFDA59A99821EAB77ABFAEBE18A0C8FD83
5216Unicorn-32844.exeC:\Users\admin\AppData\Local\Temp\Unicorn-32175.exeexecutable
MD5:FF5D1AFEC73D005D28C29077C43F7728
SHA256:535F6DCCC372D2BDFC91C90C12D7F65E7C1CA53DAFAD36E2CA904F6052A98E5C
1324Unicorn-16524.exeC:\Users\admin\AppData\Local\Temp\Unicorn-31900.exeexecutable
MD5:995A613A745172C497A81E59B18DB5A7
SHA256:B37656B754975055461D974C72A00614AACC02C16D39AEF13E2E6C6DC2F6DB83
4756Unicorn-44652.exeC:\Users\admin\AppData\Local\Temp\Unicorn-41037.exeexecutable
MD5:811506B802402557302AD295CB9C54FB
SHA256:EA272AF7631961A231150B52CD9BB579902721181ABFABE147CA3FA5B80C299D
1280Unicorn-32175.exeC:\Users\admin\AppData\Local\Temp\Unicorn-65340.exeexecutable
MD5:3445B9B0EEB5EFD9A9CDCAB0CFF54DB0
SHA256:75A3FF531B177FEDD5F1B08AE1E21690B8D63A4197DE20AA821AACB454581420
3300Unicorn-28453.exeC:\Users\admin\AppData\Local\Temp\Unicorn-47359.exeexecutable
MD5:0F7F15A1BFF9D65A1ABA3264163EB4D1
SHA256:56E72816F4B44A4ACCB626CDA45150EBFAB0AB024C3B3E33E49CA3DD68231BB7
5216Unicorn-32844.exeC:\Users\admin\AppData\Local\Temp\Unicorn-29138.exeexecutable
MD5:45DB53062D7A4843B6FD8DB7025BCD1B
SHA256:797169BDCC501F5D1B17CE236A12855EAED58EC4C593CD7D44800EB692DAC9A7
3001 (713).exeC:\Users\admin\AppData\Local\Temp\Unicorn-12978.exeexecutable
MD5:2FB155DCA5DE96B0244DCDD1F2F58D52
SHA256:5F4CEB9550207761FB2625F1C70332E4090E95702E96122A866DA3DA86E454CF
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
7
TCP/UDP connections
25
DNS requests
17
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
5496
MoUsoCoreWorker.exe
GET
200
23.53.40.176:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
unknown
GET
200
23.53.40.176:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
unknown
4380
BackgroundTransferHost.exe
GET
200
2.23.77.188:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
unknown
5588
backgroundTaskHost.exe
GET
200
2.23.77.188:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
unknown
6544
svchost.exe
GET
200
2.23.77.188:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
unknown
6300
SIHClient.exe
GET
200
23.35.229.160:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
unknown
6300
SIHClient.exe
GET
200
23.35.229.160:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
unknown
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:137
unknown
51.104.136.2:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
5496
MoUsoCoreWorker.exe
23.53.40.176:80
crl.microsoft.com
Akamai International B.V.
DE
unknown
23.53.40.176:80
crl.microsoft.com
Akamai International B.V.
DE
unknown
5496
MoUsoCoreWorker.exe
51.104.136.2:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
4
System
192.168.100.255:138
unknown
3216
svchost.exe
40.113.110.67:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
unknown
6544
svchost.exe
40.126.31.73:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
6544
svchost.exe
2.23.77.188:80
ocsp.digicert.com
AKAMAI-AS
DE
unknown
2104
svchost.exe
51.124.78.146:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
unknown

DNS requests

Domain
IP
Reputation
google.com
  • 142.250.185.174
unknown
settings-win.data.microsoft.com
  • 51.104.136.2
  • 51.124.78.146
unknown
crl.microsoft.com
  • 23.53.40.176
  • 23.53.40.178
unknown
client.wns.windows.com
  • 40.113.110.67
unknown
login.live.com
  • 40.126.31.73
  • 40.126.31.130
  • 40.126.31.1
  • 20.190.159.64
  • 20.190.159.75
  • 20.190.159.131
  • 40.126.31.67
  • 40.126.31.71
unknown
ocsp.digicert.com
  • 2.23.77.188
unknown
arc.msn.com
  • 20.223.35.26
unknown
www.bing.com
  • 2.19.122.30
  • 2.19.122.26
  • 2.19.122.12
unknown
slscr.update.microsoft.com
  • 172.202.163.200
unknown
www.microsoft.com
  • 23.35.229.160
unknown

Threats

No threats detected
No debug info