File name:

1 (526)

Full analysis: https://app.any.run/tasks/35572901-a91d-44ef-a516-38fb8835f66c
Verdict: Malicious activity
Analysis date: March 25, 2025, 00:30:11
OS: Windows 10 Professional (build: 19045, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections
MD5:

27CAB2038C92B260E2ED9174E5BDBAA0

SHA1:

C4EA801C02B96031B7F1714CA78859DC8F9A7936

SHA256:

3D887CE8A3160BEB8B9DB33577BB59C0B2292D494630AE89D54EB9595982A61D

SSDEEP:

6144:77NgAKIzMD2HAkRXTYeMvIdCiKBGlvJGBCIW2erdak/8SwjwpyivEhER5m03sWfa:7hZxNHAkBTTIBghaCz2erdtx4DxmDsR

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • 1 (526).exe (PID: 5960)
      • Unicorn-31507.exe (PID: 2236)
      • Unicorn-55287.exe (PID: 6540)
      • Unicorn-6021.exe (PID: 1228)
      • Unicorn-47461.exe (PID: 2516)
      • Unicorn-44617.exe (PID: 6036)
      • Unicorn-64482.exe (PID: 5936)
      • Unicorn-54481.exe (PID: 6148)
      • Unicorn-34839.exe (PID: 5608)
      • Unicorn-60294.exe (PID: 1532)
      • Unicorn-5997.exe (PID: 2420)
      • Unicorn-59365.exe (PID: 5384)
      • Unicorn-16090.exe (PID: 1128)
      • Unicorn-18664.exe (PID: 1020)
      • Unicorn-35956.exe (PID: 5112)
      • Unicorn-60151.exe (PID: 3896)
      • Unicorn-50940.exe (PID: 3332)
      • Unicorn-50643.exe (PID: 6156)
      • Unicorn-15828.exe (PID: 5084)
      • Unicorn-26597.exe (PID: 4628)
      • Unicorn-12808.exe (PID: 4464)
      • Unicorn-65128.exe (PID: 644)
      • Unicorn-37889.exe (PID: 4608)
      • Unicorn-58998.exe (PID: 4200)
      • Unicorn-17381.exe (PID: 668)
      • Unicorn-27473.exe (PID: 7212)
      • Unicorn-65404.exe (PID: 2268)
      • Unicorn-38409.exe (PID: 7196)
      • Unicorn-47074.exe (PID: 7204)
      • Unicorn-10989.exe (PID: 7312)
      • Unicorn-11217.exe (PID: 7332)
      • Unicorn-7393.exe (PID: 7356)
      • Unicorn-41855.exe (PID: 7392)
      • Unicorn-41960.exe (PID: 7372)
      • Unicorn-49500.exe (PID: 7412)
      • Unicorn-12882.exe (PID: 7456)
      • Unicorn-5006.exe (PID: 7428)
      • Unicorn-7723.exe (PID: 7480)
      • Unicorn-31770.exe (PID: 7520)
      • Unicorn-51636.exe (PID: 7536)
      • Unicorn-13037.exe (PID: 7572)
      • Unicorn-51636.exe (PID: 7544)
      • Unicorn-58480.exe (PID: 5132)
      • Unicorn-17977.exe (PID: 7596)
      • Unicorn-28139.exe (PID: 7720)
      • Unicorn-4516.exe (PID: 7696)
      • Unicorn-41766.exe (PID: 7500)
      • Unicorn-50453.exe (PID: 7776)
      • Unicorn-64188.exe (PID: 7704)
      • Unicorn-50270.exe (PID: 7664)
      • Unicorn-13037.exe (PID: 7580)
      • Unicorn-64049.exe (PID: 7712)
      • Unicorn-31712.exe (PID: 7612)
      • Unicorn-11604.exe (PID: 7800)
      • Unicorn-4781.exe (PID: 7772)
      • Unicorn-45263.exe (PID: 2384)
      • Unicorn-50453.exe (PID: 7784)
      • Unicorn-64049.exe (PID: 7728)
      • Unicorn-65128.exe (PID: 5964)
      • Unicorn-56400.exe (PID: 7680)
      • Unicorn-10401.exe (PID: 7688)
      • Unicorn-59346.exe (PID: 7976)
      • Unicorn-19980.exe (PID: 8000)
      • Unicorn-8417.exe (PID: 7960)
      • Unicorn-38728.exe (PID: 8028)
      • Unicorn-30696.exe (PID: 8008)
      • Unicorn-35967.exe (PID: 8016)
      • Unicorn-33292.exe (PID: 7632)
      • Unicorn-719.exe (PID: 6476)
      • Unicorn-20606.exe (PID: 8068)
      • Unicorn-33518.exe (PID: 8176)
      • Unicorn-23508.exe (PID: 5048)
      • Unicorn-45221.exe (PID: 4976)
      • Unicorn-10352.exe (PID: 616)
      • Unicorn-15085.exe (PID: 3768)
      • Unicorn-62329.exe (PID: 7012)
      • Unicorn-18694.exe (PID: 5352)
      • Unicorn-18960.exe (PID: 6228)
      • Unicorn-45555.exe (PID: 8204)
      • Unicorn-26210.exe (PID: 8232)
      • Unicorn-57164.exe (PID: 8264)
      • Unicorn-19983.exe (PID: 8304)
      • Unicorn-36001.exe (PID: 8280)
      • Unicorn-37642.exe (PID: 8248)
      • Unicorn-10849.exe (PID: 8420)
      • Unicorn-18411.exe (PID: 8476)
      • Unicorn-5488.exe (PID: 8380)
      • Unicorn-2380.exe (PID: 8412)
      • Unicorn-37871.exe (PID: 8492)
      • Unicorn-11373.exe (PID: 8388)
      • Unicorn-61550.exe (PID: 8448)
      • Unicorn-1617.exe (PID: 8404)
      • Unicorn-59752.exe (PID: 8560)
      • Unicorn-5488.exe (PID: 8364)
      • Unicorn-5229.exe (PID: 8548)
      • Unicorn-64636.exe (PID: 8428)
      • Unicorn-36534.exe (PID: 7672)
      • Unicorn-60169.exe (PID: 8332)
      • Unicorn-29170.exe (PID: 8640)
      • Unicorn-45416.exe (PID: 8372)
      • Unicorn-31223.exe (PID: 8340)
      • Unicorn-12631.exe (PID: 8588)
      • Unicorn-1776.exe (PID: 8700)
      • Unicorn-56415.exe (PID: 8760)
      • Unicorn-53608.exe (PID: 8680)
      • Unicorn-9809.exe (PID: 8848)
      • Unicorn-24014.exe (PID: 8964)
      • Unicorn-10468.exe (PID: 8580)
      • Unicorn-38626.exe (PID: 8768)
      • Unicorn-26284.exe (PID: 8876)
      • Unicorn-9809.exe (PID: 8840)
      • Unicorn-38097.exe (PID: 8628)
      • Unicorn-32834.exe (PID: 8900)
      • Unicorn-49036.exe (PID: 8648)
      • Unicorn-32760.exe (PID: 8780)
      • Unicorn-44491.exe (PID: 8996)
      • Unicorn-12549.exe (PID: 8956)
      • Unicorn-32150.exe (PID: 8912)
      • Unicorn-37641.exe (PID: 9028)
      • Unicorn-12238.exe (PID: 9012)
      • Unicorn-25579.exe (PID: 9132)
      • Unicorn-59919.exe (PID: 9072)
      • Unicorn-20946.exe (PID: 9092)
      • Unicorn-28189.exe (PID: 9044)
      • Unicorn-16751.exe (PID: 9208)
      • Unicorn-6027.exe (PID: 9104)
      • Unicorn-52958.exe (PID: 9180)
      • Unicorn-21864.exe (PID: 9228)
      • Unicorn-2309.exe (PID: 7864)
      • Unicorn-2671.exe (PID: 9196)
      • Unicorn-33492.exe (PID: 7936)
      • Unicorn-46607.exe (PID: 9260)
      • Unicorn-21266.exe (PID: 3884)
      • Unicorn-27372.exe (PID: 9308)
      • Unicorn-43270.exe (PID: 9280)
      • Unicorn-25717.exe (PID: 9368)
      • Unicorn-13512.exe (PID: 9428)
      • Unicorn-42511.exe (PID: 9352)
      • Unicorn-28401.exe (PID: 9332)
      • Unicorn-58089.exe (PID: 9480)
      • Unicorn-39439.exe (PID: 9388)
      • Unicorn-49136.exe (PID: 9528)
      • Unicorn-34795.exe (PID: 9496)
      • Unicorn-11283.exe (PID: 9568)
      • Unicorn-8036.exe (PID: 9552)
      • Unicorn-12680.exe (PID: 9512)
      • Unicorn-3839.exe (PID: 9604)
      • Unicorn-57045.exe (PID: 8356)
      • Unicorn-28940.exe (PID: 8484)
      • Unicorn-5844.exe (PID: 8660)
      • Unicorn-47448.exe (PID: 8692)
      • Unicorn-24034.exe (PID: 9676)
      • Unicorn-51855.exe (PID: 9792)
      • Unicorn-20111.exe (PID: 9684)
      • Unicorn-43415.exe (PID: 9692)
      • Unicorn-23535.exe (PID: 9700)
      • Unicorn-63984.exe (PID: 9884)
      • Unicorn-53254.exe (PID: 9932)
      • Unicorn-14795.exe (PID: 10028)
      • Unicorn-26752.exe (PID: 10044)
      • Unicorn-34661.exe (PID: 10036)
      • Unicorn-5512.exe (PID: 10128)
      • Unicorn-20576.exe (PID: 10096)
      • Unicorn-53133.exe (PID: 10168)
      • Unicorn-49807.exe (PID: 6872)
      • Unicorn-31840.exe (PID: 10192)
      • Unicorn-60191.exe (PID: 872)
      • Unicorn-34536.exe (PID: 9964)
      • Unicorn-4363.exe (PID: 6652)
      • Unicorn-38097.exe (PID: 8596)
      • Unicorn-22031.exe (PID: 8744)
      • Unicorn-23544.exe (PID: 8832)
      • Unicorn-41442.exe (PID: 2084)
      • Unicorn-36936.exe (PID: 10232)
      • Unicorn-41442.exe (PID: 8100)
      • Unicorn-53477.exe (PID: 9156)
      • Unicorn-21523.exe (PID: 10276)
      • Unicorn-47088.exe (PID: 10324)
      • Unicorn-54234.exe (PID: 10344)
      • Unicorn-15368.exe (PID: 10880)
      • Unicorn-19902.exe (PID: 10536)
      • Unicorn-32239.exe (PID: 10304)
      • Unicorn-38370.exe (PID: 10312)
      • Unicorn-9143.exe (PID: 10636)
      • Unicorn-60040.exe (PID: 10444)
      • Unicorn-34368.exe (PID: 10352)
      • Unicorn-22878.exe (PID: 10668)
      • Unicorn-31375.exe (PID: 10332)
      • Unicorn-30249.exe (PID: 10784)
      • Unicorn-43766.exe (PID: 10744)
      • Unicorn-103.exe (PID: 10452)
      • Unicorn-22386.exe (PID: 10512)
      • Unicorn-18504.exe (PID: 10288)
      • Unicorn-28303.exe (PID: 10724)
      • Unicorn-25231.exe (PID: 10460)
      • Unicorn-5863.exe (PID: 10260)
      • Unicorn-54234.exe (PID: 10484)
      • Unicorn-48104.exe (PID: 10492)
      • Unicorn-6149.exe (PID: 10620)
      • Unicorn-15365.exe (PID: 10560)
      • Unicorn-32239.exe (PID: 10296)
      • Unicorn-34799.exe (PID: 10580)
      • Unicorn-59534.exe (PID: 10948)
      • Unicorn-65399.exe (PID: 10940)
      • Unicorn-29157.exe (PID: 11036)
      • Unicorn-8437.exe (PID: 10544)
      • Unicorn-14057.exe (PID: 10360)
      • Unicorn-9143.exe (PID: 10644)
      • Unicorn-43766.exe (PID: 10660)
      • Unicorn-9288.exe (PID: 10628)
      • Unicorn-15503.exe (PID: 11152)
      • Unicorn-52971.exe (PID: 11120)
      • Unicorn-23889.exe (PID: 11448)
      • Unicorn-33052.exe (PID: 11104)
      • Unicorn-30252.exe (PID: 11096)
      • Unicorn-52971.exe (PID: 11136)
      • Unicorn-15059.exe (PID: 10908)
      • Unicorn-52706.exe (PID: 11072)
      • Unicorn-30030.exe (PID: 10676)
      • Unicorn-53900.exe (PID: 11312)
      • Unicorn-24934.exe (PID: 10716)
      • Unicorn-14201.exe (PID: 11548)
      • Unicorn-15059.exe (PID: 10912)
      • Unicorn-31586.exe (PID: 11248)
      • Unicorn-52971.exe (PID: 11128)
      • Unicorn-23942.exe (PID: 11268)
      • Unicorn-33128.exe (PID: 8436)
      • Unicorn-31586.exe (PID: 11240)
      • Unicorn-46841.exe (PID: 11080)
      • Unicorn-29443.exe (PID: 11536)
      • Unicorn-13931.exe (PID: 11488)
      • Unicorn-42255.exe (PID: 11212)
      • Unicorn-36111.exe (PID: 11348)
      • Unicorn-36111.exe (PID: 11344)
      • Unicorn-32515.exe (PID: 11404)
      • Unicorn-55400.exe (PID: 11420)
      • Unicorn-22383.exe (PID: 11460)
      • Unicorn-2437.exe (PID: 11572)
      • Unicorn-59603.exe (PID: 11476)
      • Unicorn-2172.exe (PID: 11560)
      • Unicorn-51821.exe (PID: 10652)
      • Unicorn-55400.exe (PID: 11428)
      • Unicorn-43755.exe (PID: 11440)
      • Unicorn-44041.exe (PID: 11680)
      • Unicorn-58031.exe (PID: 11608)
      • Unicorn-8437.exe (PID: 10552)
      • Unicorn-34150.exe (PID: 10420)
      • Unicorn-45037.exe (PID: 11696)
      • Unicorn-30249.exe (PID: 10780)
      • Unicorn-33658.exe (PID: 10368)
      • Unicorn-64902.exe (PID: 11704)
      • Unicorn-37911.exe (PID: 11656)
      • Unicorn-24175.exe (PID: 11648)
      • Unicorn-46467.exe (PID: 11784)
      • Unicorn-19179.exe (PID: 11748)
      • Unicorn-26866.exe (PID: 11792)
      • Unicorn-7938.exe (PID: 11732)
      • Unicorn-14581.exe (PID: 10396)
      • Unicorn-24442.exe (PID: 10796)
      • Unicorn-45803.exe (PID: 11848)
      • Unicorn-21359.exe (PID: 11816)
      • Unicorn-1532.exe (PID: 11828)
      • Unicorn-51062.exe (PID: 11768)
      • Unicorn-34671.exe (PID: 11144)
      • Unicorn-6271.exe (PID: 11884)
      • Unicorn-7788.exe (PID: 10268)
      • Unicorn-58377.exe (PID: 11864)

    • Starts itself from another location

      • Unicorn-31507.exe (PID: 2236)
      • Unicorn-55287.exe (PID: 6540)
      • 1 (526).exe (PID: 5960)
      • Unicorn-6021.exe (PID: 1228)
      • Unicorn-44617.exe (PID: 6036)
      • Unicorn-47461.exe (PID: 2516)
      • Unicorn-34839.exe (PID: 5608)
      • Unicorn-54481.exe (PID: 6148)
      • Unicorn-59365.exe (PID: 5384)
      • Unicorn-5997.exe (PID: 2420)
      • Unicorn-60294.exe (PID: 1532)
      • Unicorn-18664.exe (PID: 1020)
      • Unicorn-16090.exe (PID: 1128)
      • Unicorn-35956.exe (PID: 5112)
      • Unicorn-65404.exe (PID: 2268)
      • Unicorn-64482.exe (PID: 5936)
      • Unicorn-60151.exe (PID: 3896)
      • Unicorn-50643.exe (PID: 6156)
      • Unicorn-15828.exe (PID: 5084)
      • Unicorn-37889.exe (PID: 4608)
      • Unicorn-26597.exe (PID: 4628)
      • Unicorn-12808.exe (PID: 4464)
      • Unicorn-58480.exe (PID: 5132)
      • Unicorn-65128.exe (PID: 644)
      • Unicorn-45263.exe (PID: 2384)
      • Unicorn-58998.exe (PID: 4200)
      • Unicorn-27473.exe (PID: 7212)
      • Unicorn-17381.exe (PID: 668)
      • Unicorn-47074.exe (PID: 7204)
      • Unicorn-65128.exe (PID: 5964)
      • Unicorn-10989.exe (PID: 7312)
      • Unicorn-7393.exe (PID: 7356)
      • Unicorn-50940.exe (PID: 3332)
      • Unicorn-11217.exe (PID: 7332)
      • Unicorn-41855.exe (PID: 7392)
      • Unicorn-41960.exe (PID: 7372)
      • Unicorn-49500.exe (PID: 7412)
      • Unicorn-12882.exe (PID: 7456)
      • Unicorn-5006.exe (PID: 7428)
      • Unicorn-7723.exe (PID: 7480)
      • Unicorn-31770.exe (PID: 7520)
      • Unicorn-13037.exe (PID: 7572)
      • Unicorn-51636.exe (PID: 7544)
      • Unicorn-41766.exe (PID: 7500)
      • Unicorn-17977.exe (PID: 7596)
      • Unicorn-28139.exe (PID: 7720)
      • Unicorn-51636.exe (PID: 7536)
      • Unicorn-64049.exe (PID: 7712)
      • Unicorn-50453.exe (PID: 7776)
      • Unicorn-50270.exe (PID: 7664)
      • Unicorn-64188.exe (PID: 7704)
      • Unicorn-4516.exe (PID: 7696)
      • Unicorn-13037.exe (PID: 7580)
      • Unicorn-4781.exe (PID: 7772)
      • Unicorn-36534.exe (PID: 7672)
      • Unicorn-50453.exe (PID: 7784)
      • Unicorn-31712.exe (PID: 7612)
      • Unicorn-11604.exe (PID: 7800)
      • Unicorn-56400.exe (PID: 7680)
      • Unicorn-64049.exe (PID: 7728)
      • Unicorn-10401.exe (PID: 7688)
      • Unicorn-8417.exe (PID: 7960)
      • Unicorn-59346.exe (PID: 7976)
      • Unicorn-38409.exe (PID: 7196)
      • Unicorn-38728.exe (PID: 8028)
      • Unicorn-30696.exe (PID: 8008)
      • Unicorn-35967.exe (PID: 8016)
      • Unicorn-19980.exe (PID: 8000)
      • Unicorn-20606.exe (PID: 8068)
      • Unicorn-33292.exe (PID: 7632)
      • Unicorn-23508.exe (PID: 5048)
      • Unicorn-33518.exe (PID: 8176)
      • Unicorn-719.exe (PID: 6476)
      • Unicorn-15085.exe (PID: 3768)
      • Unicorn-45221.exe (PID: 4976)
      • Unicorn-62329.exe (PID: 7012)
      • Unicorn-18694.exe (PID: 5352)
      • Unicorn-10352.exe (PID: 616)
      • Unicorn-45555.exe (PID: 8204)
      • Unicorn-18960.exe (PID: 6228)
      • Unicorn-57164.exe (PID: 8264)
      • Unicorn-26210.exe (PID: 8232)
      • Unicorn-36001.exe (PID: 8280)
      • Unicorn-37642.exe (PID: 8248)
      • Unicorn-19983.exe (PID: 8304)
      • Unicorn-10849.exe (PID: 8420)
      • Unicorn-18411.exe (PID: 8476)
      • Unicorn-2380.exe (PID: 8412)
      • Unicorn-5488.exe (PID: 8380)
      • Unicorn-61550.exe (PID: 8448)
      • Unicorn-37871.exe (PID: 8492)
      • Unicorn-11373.exe (PID: 8388)
      • Unicorn-33128.exe (PID: 8436)
      • Unicorn-1617.exe (PID: 8404)
      • Unicorn-59752.exe (PID: 8560)
      • Unicorn-5488.exe (PID: 8364)
      • Unicorn-5229.exe (PID: 8548)
      • Unicorn-57045.exe (PID: 8356)
      • Unicorn-60169.exe (PID: 8332)
      • Unicorn-45416.exe (PID: 8372)
      • Unicorn-29170.exe (PID: 8640)
      • Unicorn-22031.exe (PID: 8744)
      • Unicorn-31223.exe (PID: 8340)
      • Unicorn-53608.exe (PID: 8680)
      • Unicorn-56415.exe (PID: 8760)
      • Unicorn-38097.exe (PID: 8596)
      • Unicorn-28940.exe (PID: 8484)
      • Unicorn-1776.exe (PID: 8700)
      • Unicorn-24014.exe (PID: 8964)
      • Unicorn-10468.exe (PID: 8580)
      • Unicorn-9809.exe (PID: 8848)
      • Unicorn-38626.exe (PID: 8768)
      • Unicorn-23544.exe (PID: 8832)
      • Unicorn-38097.exe (PID: 8628)
      • Unicorn-5844.exe (PID: 8660)
      • Unicorn-26284.exe (PID: 8876)
      • Unicorn-49036.exe (PID: 8648)
      • Unicorn-47448.exe (PID: 8692)
      • Unicorn-32834.exe (PID: 8900)
      • Unicorn-9809.exe (PID: 8840)
      • Unicorn-32760.exe (PID: 8780)
      • Unicorn-44491.exe (PID: 8996)
      • Unicorn-32150.exe (PID: 8912)
      • Unicorn-12549.exe (PID: 8956)
      • Unicorn-37641.exe (PID: 9028)
      • Unicorn-12238.exe (PID: 9012)
      • Unicorn-28189.exe (PID: 9044)
      • Unicorn-25579.exe (PID: 9132)
      • Unicorn-59919.exe (PID: 9072)
      • Unicorn-16751.exe (PID: 9208)
      • Unicorn-20946.exe (PID: 9092)
      • Unicorn-6027.exe (PID: 9104)
      • Unicorn-53477.exe (PID: 9156)
      • Unicorn-21864.exe (PID: 9228)
      • Unicorn-2309.exe (PID: 7864)
      • Unicorn-2671.exe (PID: 9196)
      • Unicorn-33492.exe (PID: 7936)
      • Unicorn-46607.exe (PID: 9260)
      • Unicorn-21266.exe (PID: 3884)
      • Unicorn-27372.exe (PID: 9308)
      • Unicorn-43270.exe (PID: 9280)
      • Unicorn-25717.exe (PID: 9368)
      • Unicorn-13512.exe (PID: 9428)
      • Unicorn-28401.exe (PID: 9332)
      • Unicorn-58089.exe (PID: 9480)
      • Unicorn-39439.exe (PID: 9388)
      • Unicorn-42511.exe (PID: 9352)
      • Unicorn-49136.exe (PID: 9528)
      • Unicorn-34795.exe (PID: 9496)
      • Unicorn-12680.exe (PID: 9512)
      • Unicorn-11283.exe (PID: 9568)
      • Unicorn-3839.exe (PID: 9604)
      • Unicorn-8036.exe (PID: 9552)
      • Unicorn-64636.exe (PID: 8428)
      • Unicorn-12631.exe (PID: 8588)

  • INFO

    • The sample compiled with chinese language support

      • 1 (526).exe (PID: 5960)
      • Unicorn-55287.exe (PID: 6540)
      • Unicorn-31507.exe (PID: 2236)
      • Unicorn-6021.exe (PID: 1228)
      • Unicorn-44617.exe (PID: 6036)
      • Unicorn-64482.exe (PID: 5936)
      • Unicorn-54481.exe (PID: 6148)
      • Unicorn-47461.exe (PID: 2516)
      • Unicorn-34839.exe (PID: 5608)
      • Unicorn-59365.exe (PID: 5384)
      • Unicorn-5997.exe (PID: 2420)
      • Unicorn-16090.exe (PID: 1128)
      • Unicorn-60294.exe (PID: 1532)
      • Unicorn-18664.exe (PID: 1020)
      • Unicorn-35956.exe (PID: 5112)
      • Unicorn-60151.exe (PID: 3896)
      • Unicorn-50643.exe (PID: 6156)
      • Unicorn-15828.exe (PID: 5084)
      • Unicorn-50940.exe (PID: 3332)
      • Unicorn-37889.exe (PID: 4608)
      • Unicorn-12808.exe (PID: 4464)
      • Unicorn-26597.exe (PID: 4628)
      • Unicorn-65128.exe (PID: 644)
      • Unicorn-58998.exe (PID: 4200)
      • Unicorn-17381.exe (PID: 668)
      • Unicorn-27473.exe (PID: 7212)
      • Unicorn-38409.exe (PID: 7196)
      • Unicorn-47074.exe (PID: 7204)
      • Unicorn-65404.exe (PID: 2268)
      • Unicorn-10989.exe (PID: 7312)
      • Unicorn-11217.exe (PID: 7332)
      • Unicorn-7393.exe (PID: 7356)
      • Unicorn-41855.exe (PID: 7392)
      • Unicorn-41960.exe (PID: 7372)
      • Unicorn-49500.exe (PID: 7412)
      • Unicorn-12882.exe (PID: 7456)
      • Unicorn-5006.exe (PID: 7428)
      • Unicorn-31770.exe (PID: 7520)
      • Unicorn-7723.exe (PID: 7480)
      • Unicorn-51636.exe (PID: 7544)
      • Unicorn-51636.exe (PID: 7536)
      • Unicorn-13037.exe (PID: 7572)
      • Unicorn-41766.exe (PID: 7500)
      • Unicorn-17977.exe (PID: 7596)
      • Unicorn-28139.exe (PID: 7720)
      • Unicorn-4516.exe (PID: 7696)
      • Unicorn-58480.exe (PID: 5132)
      • Unicorn-13037.exe (PID: 7580)
      • Unicorn-64049.exe (PID: 7712)
      • Unicorn-50453.exe (PID: 7776)
      • Unicorn-50270.exe (PID: 7664)
      • Unicorn-64188.exe (PID: 7704)
      • Unicorn-4781.exe (PID: 7772)
      • Unicorn-45263.exe (PID: 2384)
      • Unicorn-50453.exe (PID: 7784)
      • Unicorn-31712.exe (PID: 7612)
      • Unicorn-11604.exe (PID: 7800)
      • Unicorn-64049.exe (PID: 7728)
      • Unicorn-56400.exe (PID: 7680)
      • Unicorn-65128.exe (PID: 5964)
      • Unicorn-10401.exe (PID: 7688)
      • Unicorn-8417.exe (PID: 7960)
      • Unicorn-59346.exe (PID: 7976)
      • Unicorn-38728.exe (PID: 8028)
      • Unicorn-30696.exe (PID: 8008)
      • Unicorn-35967.exe (PID: 8016)
      • Unicorn-19980.exe (PID: 8000)
      • Unicorn-20606.exe (PID: 8068)
      • Unicorn-33292.exe (PID: 7632)
      • Unicorn-719.exe (PID: 6476)
      • Unicorn-33518.exe (PID: 8176)
      • Unicorn-23508.exe (PID: 5048)
      • Unicorn-45221.exe (PID: 4976)
      • Unicorn-15085.exe (PID: 3768)
      • Unicorn-62329.exe (PID: 7012)
      • Unicorn-18694.exe (PID: 5352)
      • Unicorn-10352.exe (PID: 616)
      • Unicorn-18960.exe (PID: 6228)
      • Unicorn-45555.exe (PID: 8204)
      • Unicorn-26210.exe (PID: 8232)
      • Unicorn-57164.exe (PID: 8264)
      • Unicorn-36001.exe (PID: 8280)
      • Unicorn-37642.exe (PID: 8248)
      • Unicorn-19983.exe (PID: 8304)
      • Unicorn-10849.exe (PID: 8420)
      • Unicorn-18411.exe (PID: 8476)
      • Unicorn-5488.exe (PID: 8380)
      • Unicorn-2380.exe (PID: 8412)
      • Unicorn-37871.exe (PID: 8492)
      • Unicorn-11373.exe (PID: 8388)
      • Unicorn-61550.exe (PID: 8448)
      • Unicorn-1617.exe (PID: 8404)
      • Unicorn-5488.exe (PID: 8364)
      • Unicorn-59752.exe (PID: 8560)
      • Unicorn-5229.exe (PID: 8548)
      • Unicorn-64636.exe (PID: 8428)
      • Unicorn-36534.exe (PID: 7672)
      • Unicorn-60169.exe (PID: 8332)
      • Unicorn-29170.exe (PID: 8640)
      • Unicorn-45416.exe (PID: 8372)
      • Unicorn-31223.exe (PID: 8340)
      • Unicorn-12631.exe (PID: 8588)
      • Unicorn-53608.exe (PID: 8680)
      • Unicorn-1776.exe (PID: 8700)
      • Unicorn-56415.exe (PID: 8760)
      • Unicorn-24014.exe (PID: 8964)
      • Unicorn-10468.exe (PID: 8580)
      • Unicorn-38626.exe (PID: 8768)
      • Unicorn-26284.exe (PID: 8876)
      • Unicorn-9809.exe (PID: 8848)
      • Unicorn-38097.exe (PID: 8628)
      • Unicorn-9809.exe (PID: 8840)
      • Unicorn-32834.exe (PID: 8900)
      • Unicorn-49036.exe (PID: 8648)
      • Unicorn-32760.exe (PID: 8780)
      • Unicorn-44491.exe (PID: 8996)
      • Unicorn-12549.exe (PID: 8956)
      • Unicorn-32150.exe (PID: 8912)
      • Unicorn-37641.exe (PID: 9028)
      • Unicorn-12238.exe (PID: 9012)
      • Unicorn-59919.exe (PID: 9072)
      • Unicorn-28189.exe (PID: 9044)
      • Unicorn-25579.exe (PID: 9132)
      • Unicorn-6027.exe (PID: 9104)
      • Unicorn-16751.exe (PID: 9208)
      • Unicorn-20946.exe (PID: 9092)
      • Unicorn-52958.exe (PID: 9180)
      • Unicorn-21864.exe (PID: 9228)
      • Unicorn-2309.exe (PID: 7864)
      • Unicorn-33492.exe (PID: 7936)
      • Unicorn-2671.exe (PID: 9196)
      • Unicorn-21266.exe (PID: 3884)
      • Unicorn-46607.exe (PID: 9260)
      • Unicorn-43270.exe (PID: 9280)
      • Unicorn-27372.exe (PID: 9308)
      • Unicorn-25717.exe (PID: 9368)
      • Unicorn-13512.exe (PID: 9428)
      • Unicorn-42511.exe (PID: 9352)
      • Unicorn-28401.exe (PID: 9332)
      • Unicorn-39439.exe (PID: 9388)
      • Unicorn-58089.exe (PID: 9480)
      • Unicorn-49136.exe (PID: 9528)
      • Unicorn-34795.exe (PID: 9496)
      • Unicorn-12680.exe (PID: 9512)
      • Unicorn-11283.exe (PID: 9568)
      • Unicorn-8036.exe (PID: 9552)
      • Unicorn-3839.exe (PID: 9604)
      • Unicorn-57045.exe (PID: 8356)
      • Unicorn-28940.exe (PID: 8484)
      • Unicorn-5844.exe (PID: 8660)
      • Unicorn-47448.exe (PID: 8692)
      • Unicorn-24034.exe (PID: 9676)
      • Unicorn-51855.exe (PID: 9792)
      • Unicorn-20111.exe (PID: 9684)
      • Unicorn-43415.exe (PID: 9692)
      • Unicorn-23535.exe (PID: 9700)
      • Unicorn-63984.exe (PID: 9884)
      • Unicorn-53254.exe (PID: 9932)
      • Unicorn-14795.exe (PID: 10028)
      • Unicorn-26752.exe (PID: 10044)
      • Unicorn-5512.exe (PID: 10128)
      • Unicorn-20576.exe (PID: 10096)
      • Unicorn-34661.exe (PID: 10036)
      • Unicorn-53133.exe (PID: 10168)
      • Unicorn-49807.exe (PID: 6872)
      • Unicorn-34536.exe (PID: 9964)
      • Unicorn-22031.exe (PID: 8744)
      • Unicorn-38097.exe (PID: 8596)
      • Unicorn-41442.exe (PID: 2084)
      • Unicorn-41442.exe (PID: 8100)
      • Unicorn-53477.exe (PID: 9156)
      • Unicorn-60191.exe (PID: 872)
      • Unicorn-31840.exe (PID: 10192)
      • Unicorn-4363.exe (PID: 6652)
      • Unicorn-23544.exe (PID: 8832)
      • Unicorn-36936.exe (PID: 10232)
      • Unicorn-9143.exe (PID: 10636)
      • Unicorn-54234.exe (PID: 10344)
      • Unicorn-60040.exe (PID: 10444)
      • Unicorn-19902.exe (PID: 10536)
      • Unicorn-15368.exe (PID: 10880)
      • Unicorn-32239.exe (PID: 10304)
      • Unicorn-21523.exe (PID: 10276)
      • Unicorn-47088.exe (PID: 10324)
      • Unicorn-22386.exe (PID: 10512)
      • Unicorn-34368.exe (PID: 10352)
      • Unicorn-18504.exe (PID: 10288)
      • Unicorn-22878.exe (PID: 10668)
      • Unicorn-31375.exe (PID: 10332)
      • Unicorn-30249.exe (PID: 10784)
      • Unicorn-43766.exe (PID: 10744)
      • Unicorn-103.exe (PID: 10452)
      • Unicorn-38370.exe (PID: 10312)
      • Unicorn-32239.exe (PID: 10296)
      • Unicorn-28303.exe (PID: 10724)
      • Unicorn-25231.exe (PID: 10460)
      • Unicorn-54234.exe (PID: 10484)
      • Unicorn-5863.exe (PID: 10260)
      • Unicorn-6149.exe (PID: 10620)
      • Unicorn-48104.exe (PID: 10492)
      • Unicorn-15365.exe (PID: 10560)
      • Unicorn-9288.exe (PID: 10628)
      • Unicorn-34799.exe (PID: 10580)
      • Unicorn-59534.exe (PID: 10948)
      • Unicorn-65399.exe (PID: 10940)
      • Unicorn-29157.exe (PID: 11036)
      • Unicorn-14057.exe (PID: 10360)
      • Unicorn-8437.exe (PID: 10544)
      • Unicorn-9143.exe (PID: 10644)
      • Unicorn-43766.exe (PID: 10660)
      • Unicorn-15503.exe (PID: 11152)
      • Unicorn-52971.exe (PID: 11120)
      • Unicorn-30252.exe (PID: 11096)
      • Unicorn-33052.exe (PID: 11104)
      • Unicorn-52971.exe (PID: 11136)
      • Unicorn-30030.exe (PID: 10676)
      • Unicorn-23889.exe (PID: 11448)
      • Unicorn-53900.exe (PID: 11312)
      • Unicorn-23942.exe (PID: 11268)
      • Unicorn-33128.exe (PID: 8436)
      • Unicorn-24934.exe (PID: 10716)
      • Unicorn-15059.exe (PID: 10912)
      • Unicorn-31586.exe (PID: 11248)
      • Unicorn-15059.exe (PID: 10908)
      • Unicorn-52971.exe (PID: 11128)
      • Unicorn-52706.exe (PID: 11072)
      • Unicorn-31586.exe (PID: 11240)
      • Unicorn-46841.exe (PID: 11080)
      • Unicorn-29443.exe (PID: 11536)
      • Unicorn-55400.exe (PID: 11420)
      • Unicorn-13931.exe (PID: 11488)
      • Unicorn-14201.exe (PID: 11548)
      • Unicorn-36111.exe (PID: 11344)
      • Unicorn-32515.exe (PID: 11404)
      • Unicorn-43755.exe (PID: 11440)
      • Unicorn-22383.exe (PID: 11460)
      • Unicorn-59603.exe (PID: 11476)
      • Unicorn-44041.exe (PID: 11680)
      • Unicorn-2437.exe (PID: 11572)
      • Unicorn-2172.exe (PID: 11560)
      • Unicorn-51821.exe (PID: 10652)
      • Unicorn-42255.exe (PID: 11212)
      • Unicorn-36111.exe (PID: 11348)
      • Unicorn-37911.exe (PID: 11656)
      • Unicorn-58031.exe (PID: 11608)
      • Unicorn-8437.exe (PID: 10552)
      • Unicorn-34150.exe (PID: 10420)
      • Unicorn-45037.exe (PID: 11696)
      • Unicorn-55400.exe (PID: 11428)
      • Unicorn-33658.exe (PID: 10368)
      • Unicorn-64902.exe (PID: 11704)
      • Unicorn-24175.exe (PID: 11648)
      • Unicorn-45803.exe (PID: 11848)
      • Unicorn-46467.exe (PID: 11784)
      • Unicorn-19179.exe (PID: 11748)
      • Unicorn-26866.exe (PID: 11792)
      • Unicorn-30249.exe (PID: 10780)
      • Unicorn-24442.exe (PID: 10796)
      • Unicorn-14581.exe (PID: 10396)
      • Unicorn-58377.exe (PID: 11864)
      • Unicorn-21359.exe (PID: 11816)
      • Unicorn-1532.exe (PID: 11828)
      • Unicorn-6271.exe (PID: 11884)
      • Unicorn-34671.exe (PID: 11144)
      • Unicorn-7938.exe (PID: 11732)
      • Unicorn-7788.exe (PID: 10268)
      • Unicorn-51062.exe (PID: 11768)

    • Checks supported languages

      • 1 (526).exe (PID: 5960)
      • Unicorn-6021.exe (PID: 1228)
      • Unicorn-31507.exe (PID: 2236)
      • Unicorn-47461.exe (PID: 2516)
      • Unicorn-44617.exe (PID: 6036)
      • Unicorn-64482.exe (PID: 5936)
      • Unicorn-54481.exe (PID: 6148)
      • Unicorn-60294.exe (PID: 1532)
      • Unicorn-34839.exe (PID: 5608)
      • Unicorn-65404.exe (PID: 2268)
      • Unicorn-59365.exe (PID: 5384)
      • Unicorn-5997.exe (PID: 2420)
      • Unicorn-16090.exe (PID: 1128)
      • Unicorn-35956.exe (PID: 5112)
      • Unicorn-18664.exe (PID: 1020)
      • Unicorn-50940.exe (PID: 3332)
      • Unicorn-50643.exe (PID: 6156)
      • Unicorn-15828.exe (PID: 5084)
      • Unicorn-26597.exe (PID: 4628)
      • Unicorn-37889.exe (PID: 4608)
      • Unicorn-60151.exe (PID: 3896)
      • Unicorn-12808.exe (PID: 4464)
      • Unicorn-58480.exe (PID: 5132)
      • Unicorn-58998.exe (PID: 4200)
      • Unicorn-17381.exe (PID: 668)
      • Unicorn-65128.exe (PID: 5964)
      • Unicorn-45263.exe (PID: 2384)
      • Unicorn-65128.exe (PID: 644)
      • Unicorn-27473.exe (PID: 7212)
      • Unicorn-38409.exe (PID: 7196)
      • Unicorn-47074.exe (PID: 7204)
      • Unicorn-10989.exe (PID: 7312)
      • Unicorn-11217.exe (PID: 7332)
      • Unicorn-41960.exe (PID: 7372)
      • Unicorn-49500.exe (PID: 7412)
      • Unicorn-41855.exe (PID: 7392)
      • Unicorn-12882.exe (PID: 7456)
      • Unicorn-5006.exe (PID: 7428)
      • Unicorn-7393.exe (PID: 7356)
      • Unicorn-7723.exe (PID: 7480)
      • Unicorn-41766.exe (PID: 7500)
      • Unicorn-31770.exe (PID: 7520)
      • Unicorn-51636.exe (PID: 7544)
      • Unicorn-51636.exe (PID: 7536)
      • Unicorn-13037.exe (PID: 7572)
      • Unicorn-17977.exe (PID: 7596)
      • Unicorn-13037.exe (PID: 7580)
      • Unicorn-33292.exe (PID: 7632)
      • Unicorn-31712.exe (PID: 7612)
      • Unicorn-4516.exe (PID: 7696)
      • Unicorn-28139.exe (PID: 7720)
      • Unicorn-50270.exe (PID: 7664)
      • Unicorn-56400.exe (PID: 7680)
      • Unicorn-10401.exe (PID: 7688)
      • Unicorn-64049.exe (PID: 7728)
      • Unicorn-64188.exe (PID: 7704)
      • Unicorn-64049.exe (PID: 7712)
      • Unicorn-36534.exe (PID: 7672)
      • Unicorn-50453.exe (PID: 7784)
      • Unicorn-4781.exe (PID: 7772)
      • Unicorn-50453.exe (PID: 7776)
      • Unicorn-8417.exe (PID: 7960)
      • Unicorn-59346.exe (PID: 7976)
      • Unicorn-11604.exe (PID: 7800)
      • Unicorn-35967.exe (PID: 8016)
      • Unicorn-30696.exe (PID: 8008)
      • Unicorn-19980.exe (PID: 8000)
      • Unicorn-38728.exe (PID: 8028)
      • Unicorn-20606.exe (PID: 8068)
      • Unicorn-719.exe (PID: 6476)
      • Unicorn-33518.exe (PID: 8176)
      • Unicorn-23508.exe (PID: 5048)
      • Unicorn-62329.exe (PID: 7012)
      • Unicorn-45221.exe (PID: 4976)
      • Unicorn-10352.exe (PID: 616)
      • Unicorn-15085.exe (PID: 3768)
      • Unicorn-18694.exe (PID: 5352)
      • Unicorn-45555.exe (PID: 8204)
      • Unicorn-26210.exe (PID: 8232)
      • Unicorn-37642.exe (PID: 8248)
      • Unicorn-36001.exe (PID: 8280)
      • Unicorn-18960.exe (PID: 6228)
      • Unicorn-57164.exe (PID: 8264)
      • Unicorn-19983.exe (PID: 8304)
      • Unicorn-5488.exe (PID: 8380)
      • Unicorn-45416.exe (PID: 8372)
      • Unicorn-11373.exe (PID: 8388)
      • Unicorn-57045.exe (PID: 8356)
      • Unicorn-5488.exe (PID: 8364)
      • Unicorn-1617.exe (PID: 8404)
      • Unicorn-10849.exe (PID: 8420)
      • Unicorn-18411.exe (PID: 8476)
      • Unicorn-64636.exe (PID: 8428)
      • Unicorn-37871.exe (PID: 8492)
      • Unicorn-60169.exe (PID: 8332)
      • Unicorn-28940.exe (PID: 8484)
      • Unicorn-5229.exe (PID: 8548)
      • Unicorn-33128.exe (PID: 8436)
      • Unicorn-61550.exe (PID: 8448)
      • Unicorn-38097.exe (PID: 8628)
      • Unicorn-49036.exe (PID: 8648)
      • Unicorn-10468.exe (PID: 8580)
      • Unicorn-12631.exe (PID: 8588)
      • Unicorn-29170.exe (PID: 8640)
      • Unicorn-59752.exe (PID: 8560)
      • Unicorn-2380.exe (PID: 8412)
      • Unicorn-5844.exe (PID: 8660)
      • Unicorn-53608.exe (PID: 8680)
      • Unicorn-31223.exe (PID: 8340)
      • Unicorn-1776.exe (PID: 8700)
      • Unicorn-47448.exe (PID: 8692)
      • Unicorn-9809.exe (PID: 8848)
      • Unicorn-32760.exe (PID: 8780)
      • Unicorn-38626.exe (PID: 8768)
      • Unicorn-38097.exe (PID: 8596)
      • Unicorn-26284.exe (PID: 8876)
      • Unicorn-56415.exe (PID: 8760)
      • Unicorn-32834.exe (PID: 8900)
      • Unicorn-23544.exe (PID: 8832)
      • Unicorn-32150.exe (PID: 8912)
      • Unicorn-22031.exe (PID: 8744)
      • Unicorn-12549.exe (PID: 8956)
      • Unicorn-44491.exe (PID: 8996)
      • Unicorn-12238.exe (PID: 9012)
      • Unicorn-37641.exe (PID: 9028)
      • Unicorn-28189.exe (PID: 9044)
      • Unicorn-9809.exe (PID: 8840)
      • Unicorn-24014.exe (PID: 8964)
      • Unicorn-6027.exe (PID: 9104)
      • Unicorn-20946.exe (PID: 9092)
      • Unicorn-25579.exe (PID: 9132)
      • Unicorn-59919.exe (PID: 9072)
      • Unicorn-53477.exe (PID: 9156)
      • Unicorn-2671.exe (PID: 9196)
      • Unicorn-52958.exe (PID: 9180)
      • Unicorn-16751.exe (PID: 9208)
      • Unicorn-33492.exe (PID: 7936)
      • Unicorn-2309.exe (PID: 7864)
      • Unicorn-21266.exe (PID: 3884)
      • Unicorn-46607.exe (PID: 9260)
      • Unicorn-43270.exe (PID: 9280)
      • Unicorn-27372.exe (PID: 9308)
      • Unicorn-28401.exe (PID: 9332)
      • Unicorn-21864.exe (PID: 9228)
      • Unicorn-42511.exe (PID: 9352)
      • Unicorn-39439.exe (PID: 9388)
      • Unicorn-13512.exe (PID: 9428)
      • Unicorn-58089.exe (PID: 9480)
      • Unicorn-25717.exe (PID: 9368)
      • Unicorn-12680.exe (PID: 9512)
      • Unicorn-49136.exe (PID: 9528)
      • Unicorn-11283.exe (PID: 9568)
      • Unicorn-8036.exe (PID: 9552)
      • Unicorn-3839.exe (PID: 9604)
      • Unicorn-34795.exe (PID: 9496)
      • Unicorn-24034.exe (PID: 9676)
      • Unicorn-43415.exe (PID: 9692)
      • Unicorn-20111.exe (PID: 9684)
      • Unicorn-23535.exe (PID: 9700)
      • Unicorn-51855.exe (PID: 9792)
      • Unicorn-63984.exe (PID: 9884)
      • Unicorn-53254.exe (PID: 9932)
      • Unicorn-34536.exe (PID: 9964)
      • Unicorn-26752.exe (PID: 10044)
      • Unicorn-20576.exe (PID: 10096)
      • Unicorn-14795.exe (PID: 10028)
      • Unicorn-34661.exe (PID: 10036)
      • Unicorn-53133.exe (PID: 10168)
      • Unicorn-31840.exe (PID: 10192)
      • Unicorn-5512.exe (PID: 10128)
      • Unicorn-49807.exe (PID: 6872)
      • Unicorn-4363.exe (PID: 6652)
      • Unicorn-36936.exe (PID: 10232)
      • Unicorn-41442.exe (PID: 8100)
      • Unicorn-41442.exe (PID: 2084)
      • Unicorn-60191.exe (PID: 872)
      • Unicorn-5863.exe (PID: 10260)
      • Unicorn-21523.exe (PID: 10276)
      • Unicorn-47088.exe (PID: 10324)
      • Unicorn-18504.exe (PID: 10288)
      • Unicorn-54234.exe (PID: 10344)
      • Unicorn-38370.exe (PID: 10312)
      • Unicorn-33658.exe (PID: 10368)
      • Unicorn-31375.exe (PID: 10332)
      • Unicorn-14581.exe (PID: 10396)
      • Unicorn-34150.exe (PID: 10420)
      • Unicorn-32239.exe (PID: 10304)
      • Unicorn-14057.exe (PID: 10360)
      • Unicorn-7788.exe (PID: 10268)
      • Unicorn-32239.exe (PID: 10296)
      • Unicorn-103.exe (PID: 10452)
      • Unicorn-36995.exe (PID: 10436)
      • Unicorn-22386.exe (PID: 10512)
      • Unicorn-60040.exe (PID: 10444)
      • Unicorn-25231.exe (PID: 10460)
      • Unicorn-19902.exe (PID: 10536)
      • Unicorn-8437.exe (PID: 10544)
      • Unicorn-22878.exe (PID: 10668)
      • Unicorn-15365.exe (PID: 10560)
      • Unicorn-48104.exe (PID: 10492)
      • Unicorn-34368.exe (PID: 10352)
      • Unicorn-51821.exe (PID: 10652)
      • Unicorn-24934.exe (PID: 10716)
      • Unicorn-8437.exe (PID: 10552)
      • Unicorn-34799.exe (PID: 10580)
      • Unicorn-43766.exe (PID: 10660)
      • Unicorn-24442.exe (PID: 10796)
      • Unicorn-9288.exe (PID: 10628)
      • Unicorn-30249.exe (PID: 10780)
      • Unicorn-30030.exe (PID: 10676)
      • Unicorn-6149.exe (PID: 10620)
      • Unicorn-43766.exe (PID: 10744)
      • Unicorn-29009.exe (PID: 10764)
      • Unicorn-9143.exe (PID: 10636)
      • Unicorn-15059.exe (PID: 10908)
      • Unicorn-54234.exe (PID: 10484)
      • Unicorn-15059.exe (PID: 10912)
      • Unicorn-59534.exe (PID: 10948)
      • Unicorn-65399.exe (PID: 10940)
      • Unicorn-28303.exe (PID: 10724)
      • Unicorn-15368.exe (PID: 10880)
      • Unicorn-29157.exe (PID: 11036)
      • Unicorn-30249.exe (PID: 10784)
      • Unicorn-9143.exe (PID: 10644)
      • Unicorn-52706.exe (PID: 11072)
      • Unicorn-33052.exe (PID: 11104)
      • Unicorn-52971.exe (PID: 11120)
      • Unicorn-46841.exe (PID: 11080)
      • Unicorn-30252.exe (PID: 11096)
      • Unicorn-31586.exe (PID: 11248)
      • Unicorn-52971.exe (PID: 11136)
      • Unicorn-42255.exe (PID: 11212)
      • Unicorn-15503.exe (PID: 11152)
      • Unicorn-34671.exe (PID: 11144)
      • Unicorn-10871.exe (PID: 11112)
      • Unicorn-53900.exe (PID: 11312)
      • Unicorn-23942.exe (PID: 11268)
      • Unicorn-36111.exe (PID: 11344)
      • Unicorn-52971.exe (PID: 11128)
      • Unicorn-31586.exe (PID: 11240)
      • Unicorn-36111.exe (PID: 11348)
      • Unicorn-32515.exe (PID: 11404)
      • Unicorn-55400.exe (PID: 11420)
      • Unicorn-23889.exe (PID: 11448)
      • Unicorn-22383.exe (PID: 11460)
      • Unicorn-59603.exe (PID: 11476)
      • Unicorn-13931.exe (PID: 11488)
      • Unicorn-29443.exe (PID: 11536)
      • Unicorn-14201.exe (PID: 11548)
      • Unicorn-2172.exe (PID: 11560)
      • Unicorn-43755.exe (PID: 11440)
      • Unicorn-55400.exe (PID: 11428)
      • Unicorn-2437.exe (PID: 11572)
      • Unicorn-58031.exe (PID: 11608)
      • Unicorn-37911.exe (PID: 11656)
      • Unicorn-24175.exe (PID: 11648)
      • Unicorn-44041.exe (PID: 11680)
      • Unicorn-45037.exe (PID: 11696)
      • Unicorn-64902.exe (PID: 11704)
      • Unicorn-7938.exe (PID: 11732)
      • Unicorn-51062.exe (PID: 11768)
      • Unicorn-19179.exe (PID: 11748)
      • Unicorn-26866.exe (PID: 11792)
      • Unicorn-46467.exe (PID: 11784)
      • Unicorn-45803.exe (PID: 11848)
      • Unicorn-1532.exe (PID: 11828)
      • Unicorn-58377.exe (PID: 11864)
      • Unicorn-9071.exe (PID: 11892)
      • Unicorn-6271.exe (PID: 11884)
      • Unicorn-15201.exe (PID: 11900)
      • Unicorn-21359.exe (PID: 11816)
      • Unicorn-24989.exe (PID: 11968)
      • Unicorn-20079.exe (PID: 11996)
      • Unicorn-13582.exe (PID: 11976)
      • Unicorn-31724.exe (PID: 12024)
      • Unicorn-3961.exe (PID: 11948)
      • Unicorn-3961.exe (PID: 11944)
      • Unicorn-3842.exe (PID: 12040)
      • Unicorn-44517.exe (PID: 12060)
      • Unicorn-63759.exe (PID: 12080)
      • Unicorn-54610.exe (PID: 12104)
      • Unicorn-31149.exe (PID: 12088)
      • Unicorn-35315.exe (PID: 12132)
      • Unicorn-13554.exe (PID: 12152)
      • Unicorn-58224.exe (PID: 12264)
      • Unicorn-59782.exe (PID: 12188)
      • Unicorn-37768.exe (PID: 4008)
      • Unicorn-25199.exe (PID: 12240)
      • Unicorn-38344.exe (PID: 11164)
      • Unicorn-43342.exe (PID: 12168)
      • Unicorn-39778.exe (PID: 3176)
      • Unicorn-58496.exe (PID: 12344)
      • Unicorn-11887.exe (PID: 12360)
      • Unicorn-45960.exe (PID: 12368)
      • Unicorn-16459.exe (PID: 12392)
      • Unicorn-47705.exe (PID: 12416)
      • Unicorn-18471.exe (PID: 4284)
      • Unicorn-50919.exe (PID: 1164)
      • Unicorn-43279.exe (PID: 12440)
      • Unicorn-34421.exe (PID: 12480)
      • Unicorn-30991.exe (PID: 12504)
      • Unicorn-41222.exe (PID: 12456)
      • Unicorn-23394.exe (PID: 12540)
      • Unicorn-46479.exe (PID: 12612)
      • Unicorn-58493.exe (PID: 12752)
      • Unicorn-39151.exe (PID: 12780)
      • Unicorn-63226.exe (PID: 13000)
      • Unicorn-57341.exe (PID: 13028)
      • Unicorn-23524.exe (PID: 13084)
      • Unicorn-9477.exe (PID: 13116)
      • Unicorn-55149.exe (PID: 13104)
      • Unicorn-58752.exe (PID: 12788)
      • Unicorn-39151.exe (PID: 12772)
      • Unicorn-21392.exe (PID: 12808)
      • Unicorn-32483.exe (PID: 12884)
      • Unicorn-53796.exe (PID: 13248)
      • Unicorn-57469.exe (PID: 13212)
      • Unicorn-42860.exe (PID: 13264)
      • Unicorn-56596.exe (PID: 13256)
      • Unicorn-19481.exe (PID: 2568)
      • Unicorn-7905.exe (PID: 2968)
      • Unicorn-65139.exe (PID: 13348)
      • Unicorn-26762.exe (PID: 13428)
      • Unicorn-10479.exe (PID: 13404)
      • Unicorn-10638.exe (PID: 13564)
      • Unicorn-18296.exe (PID: 13472)
      • Unicorn-21582.exe (PID: 13496)
      • Unicorn-24291.exe (PID: 13556)
      • Unicorn-12034.exe (PID: 13696)
      • Unicorn-47457.exe (PID: 13576)
      • Unicorn-25738.exe (PID: 13728)
      • Unicorn-27363.exe (PID: 13592)
      • Unicorn-27363.exe (PID: 13608)
      • Unicorn-40949.exe (PID: 13680)
      • Unicorn-58082.exe (PID: 13368)
      • Unicorn-22751.exe (PID: 13752)
      • Unicorn-16885.exe (PID: 13768)
      • Unicorn-17046.exe (PID: 13856)
      • Unicorn-51827.exe (PID: 13864)
      • Unicorn-65180.exe (PID: 13828)
      • Unicorn-2443.exe (PID: 13808)
      • Unicorn-16885.exe (PID: 13760)
      • Unicorn-3150.exe (PID: 13744)
      • Unicorn-22912.exe (PID: 13876)
      • Unicorn-54245.exe (PID: 13916)
      • Unicorn-20332.exe (PID: 13924)
      • Unicorn-9672.exe (PID: 13952)
      • Unicorn-58739.exe (PID: 13964)
      • Unicorn-28810.exe (PID: 13896)
      • Unicorn-34067.exe (PID: 13908)
      • Unicorn-50604.exe (PID: 14012)
      • Unicorn-14773.exe (PID: 14024)
      • Unicorn-54245.exe (PID: 13932)
      • Unicorn-39138.exe (PID: 14068)
      • Unicorn-55549.exe (PID: 14040)
      • Unicorn-14188.exe (PID: 14148)
      • Unicorn-27923.exe (PID: 14156)
      • Unicorn-27923.exe (PID: 14164)
      • Unicorn-36861.exe (PID: 14292)
      • Unicorn-30995.exe (PID: 14244)
      • Unicorn-17260.exe (PID: 14236)
      • Unicorn-30995.exe (PID: 14252)
      • Unicorn-8044.exe (PID: 14388)
      • Unicorn-36861.exe (PID: 14288)
      • Unicorn-30995.exe (PID: 14304)
      • Unicorn-39538.exe (PID: 14320)
      • Unicorn-2444.exe (PID: 14376)
      • Unicorn-30995.exe (PID: 14260)
      • Unicorn-30995.exe (PID: 14280)
      • Unicorn-53274.exe (PID: 14328)
      • Unicorn-30995.exe (PID: 14272)
      • Unicorn-61687.exe (PID: 14396)
      • Unicorn-36486.exe (PID: 14504)
      • Unicorn-42610.exe (PID: 14544)
      • Unicorn-27308.exe (PID: 14560)
      • Unicorn-133.exe (PID: 14704)
      • Unicorn-47183.exe (PID: 14624)
      • Unicorn-46070.exe (PID: 14744)
      • Unicorn-39460.exe (PID: 14652)
      • Unicorn-22924.exe (PID: 14660)
      • Unicorn-30669.exe (PID: 14696)
      • Unicorn-14575.exe (PID: 14712)
      • Unicorn-46070.exe (PID: 14736)
      • Unicorn-48125.exe (PID: 14784)
      • Unicorn-46070.exe (PID: 14728)
      • Unicorn-17014.exe (PID: 14720)
      • Unicorn-46690.exe (PID: 14552)
      • Unicorn-18979.exe (PID: 14520)
      • Unicorn-42610.exe (PID: 14528)
      • Unicorn-42610.exe (PID: 14536)
      • Unicorn-55406.exe (PID: 14876)
      • Unicorn-48125.exe (PID: 14776)
      • Unicorn-56947.exe (PID: 14840)
      • Unicorn-23666.exe (PID: 14892)
      • Unicorn-39925.exe (PID: 14924)
      • Unicorn-18815.exe (PID: 14928)
      • Unicorn-63304.exe (PID: 14900)
      • Unicorn-35592.exe (PID: 14884)
      • Unicorn-39925.exe (PID: 14916)
      • Unicorn-63304.exe (PID: 14908)
      • Unicorn-21856.exe (PID: 14944)
      • Unicorn-9931.exe (PID: 14952)
      • Unicorn-21856.exe (PID: 14992)
      • Unicorn-61156.exe (PID: 15040)
      • Unicorn-47077.exe (PID: 14868)
      • Unicorn-27637.exe (PID: 15052)
      • Unicorn-37887.exe (PID: 15080)
      • Unicorn-26952.exe (PID: 15092)
      • Unicorn-26899.exe (PID: 15108)

    • Reads the computer name

      • Unicorn-55287.exe (PID: 6540)
      • 1 (526).exe (PID: 5960)
      • Unicorn-31507.exe (PID: 2236)
      • Unicorn-6021.exe (PID: 1228)
      • Unicorn-64482.exe (PID: 5936)
      • Unicorn-47461.exe (PID: 2516)
      • Unicorn-44617.exe (PID: 6036)
      • Unicorn-54481.exe (PID: 6148)
      • Unicorn-59365.exe (PID: 5384)
      • Unicorn-60294.exe (PID: 1532)
      • Unicorn-65404.exe (PID: 2268)
      • Unicorn-16090.exe (PID: 1128)
      • Unicorn-5997.exe (PID: 2420)
      • Unicorn-35956.exe (PID: 5112)
      • Unicorn-18664.exe (PID: 1020)
      • Unicorn-34839.exe (PID: 5608)
      • Unicorn-60151.exe (PID: 3896)
      • Unicorn-50940.exe (PID: 3332)
      • Unicorn-50643.exe (PID: 6156)
      • Unicorn-37889.exe (PID: 4608)
      • Unicorn-15828.exe (PID: 5084)
      • Unicorn-26597.exe (PID: 4628)
      • Unicorn-58480.exe (PID: 5132)
      • Unicorn-12808.exe (PID: 4464)
      • Unicorn-45263.exe (PID: 2384)
      • Unicorn-27473.exe (PID: 7212)
      • Unicorn-58998.exe (PID: 4200)
      • Unicorn-17381.exe (PID: 668)
      • Unicorn-65128.exe (PID: 5964)
      • Unicorn-38409.exe (PID: 7196)
      • Unicorn-11217.exe (PID: 7332)
      • Unicorn-10989.exe (PID: 7312)
      • Unicorn-65128.exe (PID: 644)
      • Unicorn-7393.exe (PID: 7356)
      • Unicorn-47074.exe (PID: 7204)
      • Unicorn-49500.exe (PID: 7412)
      • Unicorn-12882.exe (PID: 7456)
      • Unicorn-5006.exe (PID: 7428)
      • Unicorn-41855.exe (PID: 7392)
      • Unicorn-41960.exe (PID: 7372)
      • Unicorn-31770.exe (PID: 7520)
      • Unicorn-7723.exe (PID: 7480)
      • Unicorn-51636.exe (PID: 7544)
      • Unicorn-13037.exe (PID: 7572)
      • Unicorn-41766.exe (PID: 7500)
      • Unicorn-51636.exe (PID: 7536)
      • Unicorn-17977.exe (PID: 7596)
      • Unicorn-28139.exe (PID: 7720)
      • Unicorn-4516.exe (PID: 7696)
      • Unicorn-13037.exe (PID: 7580)
      • Unicorn-33292.exe (PID: 7632)
      • Unicorn-64188.exe (PID: 7704)
      • Unicorn-50270.exe (PID: 7664)
      • Unicorn-4781.exe (PID: 7772)
      • Unicorn-11604.exe (PID: 7800)
      • Unicorn-56400.exe (PID: 7680)
      • Unicorn-50453.exe (PID: 7784)
      • Unicorn-10401.exe (PID: 7688)
      • Unicorn-64049.exe (PID: 7712)
      • Unicorn-50453.exe (PID: 7776)
      • Unicorn-64049.exe (PID: 7728)
      • Unicorn-31712.exe (PID: 7612)
      • Unicorn-36534.exe (PID: 7672)
      • Unicorn-8417.exe (PID: 7960)
      • Unicorn-59346.exe (PID: 7976)
      • Unicorn-19980.exe (PID: 8000)
      • Unicorn-38728.exe (PID: 8028)
      • Unicorn-20606.exe (PID: 8068)
      • Unicorn-35967.exe (PID: 8016)
      • Unicorn-30696.exe (PID: 8008)
      • Unicorn-719.exe (PID: 6476)
      • Unicorn-33518.exe (PID: 8176)
      • Unicorn-23508.exe (PID: 5048)
      • Unicorn-15085.exe (PID: 3768)
      • Unicorn-45221.exe (PID: 4976)
      • Unicorn-10352.exe (PID: 616)
      • Unicorn-62329.exe (PID: 7012)
      • Unicorn-18694.exe (PID: 5352)
      • Unicorn-18960.exe (PID: 6228)
      • Unicorn-45555.exe (PID: 8204)
      • Unicorn-57164.exe (PID: 8264)
      • Unicorn-26210.exe (PID: 8232)
      • Unicorn-36001.exe (PID: 8280)
      • Unicorn-37642.exe (PID: 8248)
      • Unicorn-10849.exe (PID: 8420)
      • Unicorn-18411.exe (PID: 8476)
      • Unicorn-19983.exe (PID: 8304)
      • Unicorn-5488.exe (PID: 8380)
      • Unicorn-37871.exe (PID: 8492)
      • Unicorn-11373.exe (PID: 8388)
      • Unicorn-1617.exe (PID: 8404)
      • Unicorn-5488.exe (PID: 8364)
      • Unicorn-2380.exe (PID: 8412)
      • Unicorn-61550.exe (PID: 8448)
      • Unicorn-33128.exe (PID: 8436)
      • Unicorn-12631.exe (PID: 8588)
      • Unicorn-59752.exe (PID: 8560)
      • Unicorn-5229.exe (PID: 8548)
      • Unicorn-60169.exe (PID: 8332)
      • Unicorn-29170.exe (PID: 8640)
      • Unicorn-64636.exe (PID: 8428)
      • Unicorn-45416.exe (PID: 8372)
      • Unicorn-22031.exe (PID: 8744)
      • Unicorn-57045.exe (PID: 8356)
      • Unicorn-1776.exe (PID: 8700)
      • Unicorn-53608.exe (PID: 8680)
      • Unicorn-28940.exe (PID: 8484)
      • Unicorn-38097.exe (PID: 8596)
      • Unicorn-56415.exe (PID: 8760)
      • Unicorn-24014.exe (PID: 8964)
      • Unicorn-31223.exe (PID: 8340)
      • Unicorn-23544.exe (PID: 8832)
      • Unicorn-9809.exe (PID: 8848)
      • Unicorn-38626.exe (PID: 8768)
      • Unicorn-26284.exe (PID: 8876)
      • Unicorn-5844.exe (PID: 8660)
      • Unicorn-38097.exe (PID: 8628)
      • Unicorn-9809.exe (PID: 8840)
      • Unicorn-32834.exe (PID: 8900)
      • Unicorn-32760.exe (PID: 8780)
      • Unicorn-47448.exe (PID: 8692)
      • Unicorn-49036.exe (PID: 8648)
      • Unicorn-12549.exe (PID: 8956)
      • Unicorn-10468.exe (PID: 8580)
      • Unicorn-32150.exe (PID: 8912)
      • Unicorn-37641.exe (PID: 9028)
      • Unicorn-12238.exe (PID: 9012)
      • Unicorn-44491.exe (PID: 8996)
      • Unicorn-28189.exe (PID: 9044)
      • Unicorn-59919.exe (PID: 9072)
      • Unicorn-20946.exe (PID: 9092)
      • Unicorn-25579.exe (PID: 9132)
      • Unicorn-16751.exe (PID: 9208)
      • Unicorn-6027.exe (PID: 9104)
      • Unicorn-52958.exe (PID: 9180)
      • Unicorn-53477.exe (PID: 9156)
      • Unicorn-21864.exe (PID: 9228)
      • Unicorn-2309.exe (PID: 7864)
      • Unicorn-33492.exe (PID: 7936)
      • Unicorn-2671.exe (PID: 9196)
      • Unicorn-46607.exe (PID: 9260)
      • Unicorn-21266.exe (PID: 3884)
      • Unicorn-43270.exe (PID: 9280)
      • Unicorn-27372.exe (PID: 9308)
      • Unicorn-28401.exe (PID: 9332)
      • Unicorn-25717.exe (PID: 9368)
      • Unicorn-13512.exe (PID: 9428)
      • Unicorn-42511.exe (PID: 9352)
      • Unicorn-39439.exe (PID: 9388)
      • Unicorn-58089.exe (PID: 9480)
      • Unicorn-49136.exe (PID: 9528)
      • Unicorn-34795.exe (PID: 9496)
      • Unicorn-12680.exe (PID: 9512)
      • Unicorn-11283.exe (PID: 9568)
      • Unicorn-8036.exe (PID: 9552)
      • Unicorn-3839.exe (PID: 9604)

    • Create files in a temporary directory

      • Unicorn-55287.exe (PID: 6540)
      • Unicorn-31507.exe (PID: 2236)
      • Unicorn-6021.exe (PID: 1228)
      • Unicorn-47461.exe (PID: 2516)
      • 1 (526).exe (PID: 5960)
      • Unicorn-44617.exe (PID: 6036)
      • Unicorn-54481.exe (PID: 6148)
      • Unicorn-59365.exe (PID: 5384)
      • Unicorn-5997.exe (PID: 2420)
      • Unicorn-16090.exe (PID: 1128)
      • Unicorn-64482.exe (PID: 5936)
      • Unicorn-18664.exe (PID: 1020)
      • Unicorn-60151.exe (PID: 3896)
      • Unicorn-15828.exe (PID: 5084)
      • Unicorn-37889.exe (PID: 4608)
      • Unicorn-26597.exe (PID: 4628)
      • Unicorn-60294.exe (PID: 1532)
      • Unicorn-65128.exe (PID: 644)
      • Unicorn-17381.exe (PID: 668)
      • Unicorn-38409.exe (PID: 7196)
      • Unicorn-27473.exe (PID: 7212)
      • Unicorn-65404.exe (PID: 2268)
      • Unicorn-47074.exe (PID: 7204)
      • Unicorn-10989.exe (PID: 7312)
      • Unicorn-7393.exe (PID: 7356)
      • Unicorn-50940.exe (PID: 3332)
      • Unicorn-41855.exe (PID: 7392)
      • Unicorn-49500.exe (PID: 7412)
      • Unicorn-12882.exe (PID: 7456)
      • Unicorn-50643.exe (PID: 6156)
      • Unicorn-7723.exe (PID: 7480)
      • Unicorn-31770.exe (PID: 7520)
      • Unicorn-13037.exe (PID: 7572)
      • Unicorn-41766.exe (PID: 7500)
      • Unicorn-51636.exe (PID: 7536)
      • Unicorn-12808.exe (PID: 4464)
      • Unicorn-58480.exe (PID: 5132)
      • Unicorn-17977.exe (PID: 7596)
      • Unicorn-28139.exe (PID: 7720)
      • Unicorn-4516.exe (PID: 7696)
      • Unicorn-64049.exe (PID: 7712)
      • Unicorn-50453.exe (PID: 7776)
      • Unicorn-4781.exe (PID: 7772)
      • Unicorn-31712.exe (PID: 7612)
      • Unicorn-11604.exe (PID: 7800)
      • Unicorn-50453.exe (PID: 7784)
      • Unicorn-45263.exe (PID: 2384)
      • Unicorn-58998.exe (PID: 4200)
      • Unicorn-65128.exe (PID: 5964)
      • Unicorn-10401.exe (PID: 7688)
      • Unicorn-64049.exe (PID: 7728)
      • Unicorn-35956.exe (PID: 5112)
      • Unicorn-8417.exe (PID: 7960)
      • Unicorn-59346.exe (PID: 7976)
      • Unicorn-38728.exe (PID: 8028)
      • Unicorn-35967.exe (PID: 8016)
      • Unicorn-34839.exe (PID: 5608)
      • Unicorn-33292.exe (PID: 7632)
      • Unicorn-719.exe (PID: 6476)
      • Unicorn-20606.exe (PID: 8068)
      • Unicorn-11217.exe (PID: 7332)
      • Unicorn-33518.exe (PID: 8176)
      • Unicorn-23508.exe (PID: 5048)
      • Unicorn-15085.exe (PID: 3768)
      • Unicorn-41960.exe (PID: 7372)
      • Unicorn-45221.exe (PID: 4976)
      • Unicorn-10352.exe (PID: 616)
      • Unicorn-62329.exe (PID: 7012)
      • Unicorn-18694.exe (PID: 5352)
      • Unicorn-45555.exe (PID: 8204)
      • Unicorn-18960.exe (PID: 6228)
      • Unicorn-5006.exe (PID: 7428)
      • Unicorn-26210.exe (PID: 8232)
      • Unicorn-57164.exe (PID: 8264)
      • Unicorn-19983.exe (PID: 8304)
      • Unicorn-37642.exe (PID: 8248)
      • Unicorn-51636.exe (PID: 7544)
      • Unicorn-5488.exe (PID: 8380)
      • Unicorn-2380.exe (PID: 8412)
      • Unicorn-18411.exe (PID: 8476)
      • Unicorn-37871.exe (PID: 8492)
      • Unicorn-64188.exe (PID: 7704)
      • Unicorn-11373.exe (PID: 8388)
      • Unicorn-59752.exe (PID: 8560)
      • Unicorn-50270.exe (PID: 7664)
      • Unicorn-1617.exe (PID: 8404)
      • Unicorn-5488.exe (PID: 8364)
      • Unicorn-13037.exe (PID: 7580)
      • Unicorn-5229.exe (PID: 8548)
      • Unicorn-56400.exe (PID: 7680)
      • Unicorn-36534.exe (PID: 7672)
      • Unicorn-12631.exe (PID: 8588)
      • Unicorn-60169.exe (PID: 8332)
      • Unicorn-64636.exe (PID: 8428)
      • Unicorn-29170.exe (PID: 8640)
      • Unicorn-45416.exe (PID: 8372)
      • Unicorn-31223.exe (PID: 8340)
      • Unicorn-53608.exe (PID: 8680)
      • Unicorn-1776.exe (PID: 8700)
      • Unicorn-56415.exe (PID: 8760)
      • Unicorn-24014.exe (PID: 8964)
      • Unicorn-10468.exe (PID: 8580)
      • Unicorn-9809.exe (PID: 8848)
      • Unicorn-26284.exe (PID: 8876)
      • Unicorn-38626.exe (PID: 8768)
      • Unicorn-38097.exe (PID: 8628)
      • Unicorn-9809.exe (PID: 8840)
      • Unicorn-32834.exe (PID: 8900)
      • Unicorn-49036.exe (PID: 8648)
      • Unicorn-32760.exe (PID: 8780)
      • Unicorn-32150.exe (PID: 8912)
      • Unicorn-12549.exe (PID: 8956)
      • Unicorn-19980.exe (PID: 8000)
      • Unicorn-44491.exe (PID: 8996)
      • Unicorn-12238.exe (PID: 9012)
      • Unicorn-30696.exe (PID: 8008)
      • Unicorn-37641.exe (PID: 9028)
      • Unicorn-59919.exe (PID: 9072)
      • Unicorn-25579.exe (PID: 9132)
      • Unicorn-20946.exe (PID: 9092)
      • Unicorn-28189.exe (PID: 9044)
      • Unicorn-6027.exe (PID: 9104)
      • Unicorn-16751.exe (PID: 9208)
      • Unicorn-2309.exe (PID: 7864)
      • Unicorn-33492.exe (PID: 7936)
      • Unicorn-52958.exe (PID: 9180)
      • Unicorn-21864.exe (PID: 9228)
      • Unicorn-2671.exe (PID: 9196)
      • Unicorn-21266.exe (PID: 3884)
      • Unicorn-46607.exe (PID: 9260)
      • Unicorn-43270.exe (PID: 9280)
      • Unicorn-27372.exe (PID: 9308)
      • Unicorn-28401.exe (PID: 9332)
      • Unicorn-13512.exe (PID: 9428)
      • Unicorn-42511.exe (PID: 9352)
      • Unicorn-25717.exe (PID: 9368)
      • Unicorn-39439.exe (PID: 9388)
      • Unicorn-58089.exe (PID: 9480)
      • Unicorn-49136.exe (PID: 9528)
      • Unicorn-34795.exe (PID: 9496)
      • Unicorn-36001.exe (PID: 8280)
      • Unicorn-11283.exe (PID: 9568)
      • Unicorn-8036.exe (PID: 9552)
      • Unicorn-12680.exe (PID: 9512)
      • Unicorn-61550.exe (PID: 8448)
      • Unicorn-10849.exe (PID: 8420)
      • Unicorn-3839.exe (PID: 9604)
      • Unicorn-57045.exe (PID: 8356)
      • Unicorn-28940.exe (PID: 8484)
      • Unicorn-5844.exe (PID: 8660)
      • Unicorn-47448.exe (PID: 8692)

    • Reads security settings of Internet Explorer

      • BackgroundTransferHost.exe (PID: 904)
      • BackgroundTransferHost.exe (PID: 1040)
      • BackgroundTransferHost.exe (PID: 3240)
      • BackgroundTransferHost.exe (PID: 5404)
      • BackgroundTransferHost.exe (PID: 300)

    • Checks proxy server information

      • BackgroundTransferHost.exe (PID: 1040)

    • Reads the software policy settings

      • BackgroundTransferHost.exe (PID: 1040)

    • Creates files or folders in the user directory

      • BackgroundTransferHost.exe (PID: 1040)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable (generic) (52.9)
.exe | Generic Win/DOS Executable (23.5)
.exe | DOS Executable Generic (23.5)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:01:20 00:32:00+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 299008
UninitializedDataSize: -
EntryPoint: 0x13d4
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
InternalName: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
553
Monitored processes
421
Malicious processes
67
Suspicious processes
64

Behavior graph

Click at the process to see the details
start 1 (526).exe sppextcomobj.exe no specs slui.exe no specs unicorn-55287.exe unicorn-31507.exe unicorn-6021.exe unicorn-47461.exe unicorn-44617.exe unicorn-64482.exe unicorn-54481.exe backgroundtransferhost.exe no specs backgroundtransferhost.exe unicorn-60294.exe unicorn-34839.exe unicorn-59365.exe unicorn-65404.exe unicorn-5997.exe unicorn-16090.exe unicorn-35956.exe unicorn-18664.exe backgroundtransferhost.exe no specs backgroundtransferhost.exe no specs backgroundtransferhost.exe no specs unicorn-60151.exe unicorn-50940.exe unicorn-50643.exe unicorn-15828.exe unicorn-26597.exe unicorn-37889.exe unicorn-58480.exe unicorn-12808.exe unicorn-17381.exe unicorn-58998.exe unicorn-45263.exe unicorn-65128.exe unicorn-65128.exe unicorn-38409.exe unicorn-47074.exe unicorn-27473.exe unicorn-10989.exe unicorn-11217.exe unicorn-7393.exe unicorn-41960.exe unicorn-41855.exe unicorn-49500.exe unicorn-5006.exe unicorn-12882.exe unicorn-7723.exe unicorn-41766.exe unicorn-31770.exe unicorn-51636.exe unicorn-51636.exe unicorn-13037.exe unicorn-13037.exe unicorn-17977.exe unicorn-31712.exe unicorn-33292.exe unicorn-50270.exe unicorn-36534.exe unicorn-56400.exe unicorn-10401.exe unicorn-4516.exe unicorn-64188.exe unicorn-64049.exe unicorn-28139.exe unicorn-64049.exe unicorn-4781.exe unicorn-50453.exe unicorn-50453.exe unicorn-11604.exe unicorn-8417.exe unicorn-59346.exe unicorn-19980.exe unicorn-30696.exe unicorn-35967.exe unicorn-38728.exe unicorn-20606.exe unicorn-33518.exe unicorn-719.exe unicorn-23508.exe unicorn-62329.exe unicorn-10352.exe unicorn-45221.exe unicorn-15085.exe unicorn-18694.exe unicorn-18960.exe unicorn-45555.exe unicorn-26210.exe unicorn-37642.exe unicorn-57164.exe unicorn-36001.exe unicorn-19983.exe unicorn-60169.exe unicorn-31223.exe unicorn-57045.exe unicorn-5488.exe unicorn-45416.exe unicorn-5488.exe unicorn-11373.exe unicorn-1617.exe unicorn-2380.exe unicorn-10849.exe unicorn-64636.exe unicorn-33128.exe unicorn-61550.exe unicorn-18411.exe unicorn-28940.exe unicorn-37871.exe unicorn-5229.exe unicorn-59752.exe unicorn-10468.exe unicorn-12631.exe unicorn-38097.exe unicorn-38097.exe unicorn-29170.exe unicorn-49036.exe unicorn-5844.exe unicorn-53608.exe unicorn-47448.exe unicorn-1776.exe unicorn-22031.exe unicorn-56415.exe unicorn-38626.exe unicorn-32760.exe unicorn-23544.exe unicorn-9809.exe unicorn-9809.exe unicorn-26284.exe unicorn-32834.exe unicorn-32150.exe unicorn-12549.exe unicorn-24014.exe unicorn-44491.exe unicorn-12238.exe unicorn-37641.exe unicorn-28189.exe unicorn-59919.exe unicorn-20946.exe unicorn-6027.exe unicorn-25579.exe unicorn-53477.exe unicorn-52958.exe unicorn-2671.exe unicorn-16751.exe unicorn-2309.exe unicorn-33492.exe unicorn-21266.exe unicorn-21864.exe unicorn-46607.exe unicorn-43270.exe unicorn-27372.exe unicorn-28401.exe unicorn-42511.exe unicorn-25717.exe unicorn-39439.exe unicorn-13512.exe unicorn-58089.exe unicorn-34795.exe unicorn-12680.exe unicorn-49136.exe unicorn-8036.exe unicorn-11283.exe unicorn-3839.exe unicorn-24034.exe unicorn-20111.exe unicorn-43415.exe unicorn-23535.exe unicorn-51855.exe unicorn-63984.exe unicorn-53254.exe unicorn-34536.exe unicorn-14795.exe unicorn-34661.exe unicorn-26752.exe unicorn-20576.exe unicorn-5512.exe unicorn-53133.exe unicorn-31840.exe unicorn-36936.exe unicorn-49807.exe unicorn-4363.exe unicorn-60191.exe unicorn-41442.exe unicorn-41442.exe unicorn-5863.exe unicorn-7788.exe unicorn-21523.exe unicorn-18504.exe unicorn-32239.exe unicorn-32239.exe unicorn-38370.exe unicorn-47088.exe unicorn-31375.exe unicorn-54234.exe unicorn-34368.exe unicorn-14057.exe unicorn-33658.exe unicorn-14581.exe unicorn-34150.exe unicorn-36995.exe no specs unicorn-60040.exe unicorn-103.exe unicorn-25231.exe unicorn-54234.exe unicorn-48104.exe unicorn-22386.exe unicorn-19902.exe unicorn-8437.exe unicorn-8437.exe unicorn-15365.exe unicorn-34799.exe unicorn-6149.exe unicorn-9288.exe unicorn-9143.exe unicorn-9143.exe unicorn-51821.exe unicorn-43766.exe unicorn-22878.exe unicorn-30030.exe unicorn-24934.exe unicorn-28303.exe unicorn-43766.exe unicorn-29009.exe no specs unicorn-30249.exe unicorn-30249.exe unicorn-24442.exe unicorn-15368.exe unicorn-15059.exe unicorn-15059.exe unicorn-65399.exe unicorn-59534.exe unicorn-29157.exe unicorn-52706.exe unicorn-46841.exe unicorn-56972.exe no specs unicorn-30252.exe unicorn-33052.exe unicorn-10871.exe no specs unicorn-52971.exe unicorn-52971.exe unicorn-52971.exe unicorn-34671.exe unicorn-15503.exe unicorn-42255.exe unicorn-31586.exe unicorn-31586.exe unicorn-23942.exe unicorn-53900.exe unicorn-36111.exe unicorn-36111.exe unicorn-32515.exe unicorn-55400.exe unicorn-55400.exe unicorn-43755.exe unicorn-23889.exe unicorn-22383.exe unicorn-59603.exe unicorn-13931.exe unicorn-29443.exe unicorn-14201.exe unicorn-2172.exe unicorn-2437.exe unicorn-58031.exe unicorn-24175.exe unicorn-37911.exe unicorn-44041.exe unicorn-45037.exe unicorn-64902.exe unicorn-7938.exe unicorn-19179.exe unicorn-51062.exe unicorn-46467.exe unicorn-26866.exe unicorn-21359.exe unicorn-1532.exe unicorn-45803.exe unicorn-58377.exe unicorn-6271.exe unicorn-9071.exe no specs unicorn-15201.exe no specs unicorn-3961.exe no specs unicorn-3961.exe no specs unicorn-24989.exe no specs unicorn-13582.exe no specs unicorn-20079.exe no specs unicorn-31724.exe no specs unicorn-3842.exe no specs unicorn-44517.exe no specs unicorn-63759.exe no specs unicorn-31149.exe no specs unicorn-54610.exe no specs unicorn-35315.exe no specs unicorn-13554.exe no specs unicorn-43342.exe no specs unicorn-59782.exe no specs unicorn-25199.exe no specs unicorn-58224.exe no specs unicorn-38344.exe no specs unicorn-37768.exe no specs unicorn-18471.exe no specs unicorn-50919.exe no specs unicorn-39778.exe no specs unicorn-58496.exe no specs unicorn-11887.exe no specs unicorn-45960.exe no specs unicorn-16459.exe no specs unicorn-47705.exe no specs unicorn-43279.exe no specs unicorn-41222.exe no specs unicorn-34421.exe no specs unicorn-30991.exe no specs unicorn-23394.exe no specs unicorn-46479.exe no specs unicorn-58493.exe no specs unicorn-39151.exe no specs unicorn-39151.exe no specs unicorn-58752.exe no specs unicorn-21392.exe no specs unicorn-32483.exe no specs unicorn-63226.exe no specs unicorn-57341.exe no specs unicorn-23524.exe no specs unicorn-55149.exe no specs unicorn-9477.exe no specs unicorn-57469.exe no specs unicorn-53796.exe no specs unicorn-56596.exe no specs unicorn-42860.exe no specs unicorn-7905.exe no specs unicorn-19481.exe no specs unicorn-65139.exe no specs unicorn-58082.exe no specs unicorn-10479.exe no specs unicorn-26762.exe no specs unicorn-18296.exe no specs unicorn-21582.exe no specs unicorn-24291.exe no specs unicorn-10638.exe no specs unicorn-47457.exe no specs unicorn-27363.exe no specs unicorn-27363.exe no specs unicorn-40949.exe no specs unicorn-12034.exe no specs unicorn-25738.exe no specs unicorn-3150.exe no specs unicorn-22751.exe no specs unicorn-16885.exe no specs unicorn-16885.exe no specs unicorn-2443.exe no specs unicorn-65180.exe no specs unicorn-17046.exe no specs unicorn-51827.exe no specs unicorn-22912.exe no specs unicorn-28810.exe no specs unicorn-34067.exe no specs unicorn-54245.exe no specs unicorn-20332.exe no specs unicorn-54245.exe no specs unicorn-9672.exe no specs unicorn-58739.exe no specs unicorn-50604.exe no specs unicorn-14773.exe no specs unicorn-55549.exe no specs unicorn-39138.exe no specs unicorn-14188.exe no specs unicorn-27923.exe no specs unicorn-27923.exe no specs unicorn-17260.exe no specs unicorn-30995.exe no specs unicorn-30995.exe no specs unicorn-30995.exe no specs unicorn-30995.exe no specs unicorn-30995.exe no specs unicorn-36861.exe no specs unicorn-36861.exe no specs unicorn-30995.exe no specs unicorn-39538.exe no specs unicorn-53274.exe no specs unicorn-2444.exe no specs unicorn-8044.exe no specs unicorn-61687.exe no specs unicorn-36486.exe no specs unicorn-18979.exe no specs unicorn-42610.exe no specs unicorn-42610.exe no specs unicorn-42610.exe no specs unicorn-46690.exe no specs unicorn-27308.exe no specs unicorn-47183.exe no specs unicorn-39460.exe no specs unicorn-22924.exe no specs unicorn-30669.exe no specs unicorn-133.exe no specs unicorn-14575.exe no specs unicorn-17014.exe no specs unicorn-46070.exe no specs unicorn-46070.exe no specs unicorn-46070.exe no specs unicorn-48125.exe no specs unicorn-48125.exe no specs unicorn-56947.exe no specs unicorn-47077.exe no specs unicorn-55406.exe no specs unicorn-35592.exe no specs unicorn-23666.exe no specs unicorn-63304.exe no specs unicorn-63304.exe no specs unicorn-39925.exe no specs unicorn-39925.exe no specs unicorn-18815.exe no specs unicorn-21856.exe no specs unicorn-9931.exe no specs unicorn-21856.exe no specs unicorn-61156.exe no specs unicorn-27637.exe no specs unicorn-37887.exe no specs unicorn-26952.exe no specs unicorn-26899.exe no specs unicorn-9599.exe no specs unicorn-3734.exe no specs unicorn-32209.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
300"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.1C:\Windows\System32\BackgroundTransferHost.exe—svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Download/Upload Host
Exit code:
1
Version:
10.0.19041.3636 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\backgroundtransferhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\kernel.appcore.dll
c:\windows\system32\bcryptprimitives.dll
616C:\Users\admin\AppData\Local\Temp\Unicorn-10352.exeC:\Users\admin\AppData\Local\Temp\Unicorn-10352.exe
Unicorn-49500.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-10352.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
644C:\Users\admin\AppData\Local\Temp\Unicorn-65128.exeC:\Users\admin\AppData\Local\Temp\Unicorn-65128.exe
Unicorn-65404.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-65128.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
668C:\Users\admin\AppData\Local\Temp\Unicorn-17381.exeC:\Users\admin\AppData\Local\Temp\Unicorn-17381.exe
Unicorn-18664.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-17381.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
872C:\Users\admin\AppData\Local\Temp\Unicorn-60191.exeC:\Users\admin\AppData\Local\Temp\Unicorn-60191.exe
Unicorn-2380.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-60191.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
904"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.1C:\Windows\System32\BackgroundTransferHost.exe—svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Download/Upload Host
Exit code:
1
Version:
10.0.19041.3636 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\backgroundtransferhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\kernel.appcore.dll
c:\windows\system32\bcryptprimitives.dll
1020C:\Users\admin\AppData\Local\Temp\Unicorn-18664.exeC:\Users\admin\AppData\Local\Temp\Unicorn-18664.exe
1 (526).exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-18664.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1040"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.1C:\Windows\System32\BackgroundTransferHost.exe
svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Download/Upload Host
Exit code:
1
Version:
10.0.19041.3636 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\backgroundtransferhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\kernel.appcore.dll
c:\windows\system32\bcryptprimitives.dll
1128C:\Users\admin\AppData\Local\Temp\Unicorn-16090.exeC:\Users\admin\AppData\Local\Temp\Unicorn-16090.exe
Unicorn-6021.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-16090.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1164C:\Users\admin\AppData\Local\Temp\Unicorn-50919.exeC:\Users\admin\AppData\Local\Temp\Unicorn-50919.exe—Unicorn-10352.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-50919.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
Total events
10 246
Read events
10 231
Write events
15
Delete events
0

Modification events

(PID) Process:(904) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(904) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(904) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(1040) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(1040) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(1040) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(3240) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(3240) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(3240) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(5404) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
Executable files
1 059
Suspicious files
5
Text files
0
Unknown types
0

Dropped files

PID
Process
Filename
Type
1040BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\6cf232dd-298e-4fe9-bebe-595f2b961d57.down_data —
MD5:—
SHA256:—
59601 (526).exeC:\Users\admin\AppData\Local\Temp\Unicorn-55287.exeexecutable
MD5:F18C380A330FC11072F43100CF0493F9
SHA256:DDDB392E3E4FAE1A503CD23ABE33C9DF0CA33202D444FA3377E7490BC10A9B07
6540Unicorn-55287.exeC:\Users\admin\AppData\Local\Temp\Unicorn-31507.exeexecutable
MD5:259503544C7985417C6CD7DC09FADF31
SHA256:671D5E6D336002A8077B0E6A0ACEB9392DE70A392CEB661DFBEFFEDC8E8B8263
1228Unicorn-6021.exeC:\Users\admin\AppData\Local\Temp\Unicorn-64482.exeexecutable
MD5:0AABED21BC6BFE9B431AFD39F13EEC12
SHA256:448747B3C75D697506DFAC39CD019EB7B5FA88D66CD9EE572BA00CFA1F304D16
59601 (526).exeC:\Users\admin\AppData\Local\Temp\Unicorn-6021.exeexecutable
MD5:F4FD7921DAB493FF8D7DCE1EA3DD1916
SHA256:A04A6DC580FFC8E5CD41F0E8F446363479077B5102F104F3BA1C8D9A3BA31E9C
2236Unicorn-31507.exeC:\Users\admin\AppData\Local\Temp\Unicorn-34839.exeexecutable
MD5:AEC315C9D6E3162814820CC4D27313C4
SHA256:BF42BEAB51BA7716F7EA6AC6F0CDF6A387AD0F6EB822EC3ECBA03649CD1F2F0A
1040BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\134a0cbe-29b8-4a71-baa1-43e49a068a5d.90200133-48bc-4332-8cac-eb7090b48bba.down_metabinary
MD5:E78F7B9DB9392DE452A22FE881308517
SHA256:3E3FC2FC7DD1D81EC8C74B63FD57F8D23B27048FC29DA4E2644D5FB4750FF422
6036Unicorn-44617.exeC:\Users\admin\AppData\Local\Temp\Unicorn-59365.exeexecutable
MD5:6A6A02974BF8F419802285DF6FA0F15A
SHA256:5AA4E743F137BD1D3FE9DEA81072F17A8833769B34E02DE437CB5CDF2ED87287
1040BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\134a0cbe-29b8-4a71-baa1-43e49a068a5d.up_meta_securebinary
MD5:5D097955FE9BDE5AEBF3F13D2A45359B
SHA256:6B31AB73CE86C2C6FADE01740DDDA219E859EC67C7C79D97542798792FEA0669
2236Unicorn-31507.exeC:\Users\admin\AppData\Local\Temp\Unicorn-47461.exeexecutable
MD5:9E22DE3F9535CEA5C30E17C8D1648C78
SHA256:1B80B3A420C7C21DC84F3467884CB6CEE98D959F1700C136CE0148BCB7C5EE88
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
27
DNS requests
18
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
—
—
GET
200
2.23.77.188:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
unknown
300
backgroundTaskHost.exe
GET
200
2.23.77.188:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
unknown
5496
MoUsoCoreWorker.exe
GET
200
88.221.110.122:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
unknown
1040
BackgroundTransferHost.exe
GET
200
2.23.77.188:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
unknown
7932
SIHClient.exe
GET
200
23.222.10.99:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
unknown
7932
SIHClient.exe
GET
200
23.222.10.99:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
unknown
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
2104
svchost.exe
51.124.78.146:443
—
MICROSOFT-CORP-MSN-AS-BLOCK
NL
unknown
4
System
192.168.100.255:137
—
—
—
unknown
—
—
51.124.78.146:443
—
MICROSOFT-CORP-MSN-AS-BLOCK
NL
unknown
5496
MoUsoCoreWorker.exe
88.221.110.122:80
crl.microsoft.com
Akamai International B.V.
DE
unknown
4
System
192.168.100.255:138
—
—
—
unknown
3216
svchost.exe
40.113.103.199:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
unknown
—
—
20.190.159.75:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
—
—
2.23.77.188:80
ocsp.digicert.com
AKAMAI-AS
DE
unknown
6544
svchost.exe
20.190.159.75:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
2104
svchost.exe
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
unknown

DNS requests

Domain
IP
Reputation
google.com
  • 216.58.212.174
unknown
crl.microsoft.com
  • 88.221.110.122
  • 88.221.110.114
unknown
client.wns.windows.com
  • 40.113.103.199
unknown
login.live.com
  • 20.190.159.75
  • 20.190.159.129
  • 40.126.31.1
  • 20.190.159.23
  • 20.190.159.128
  • 40.126.31.2
  • 20.190.159.68
  • 20.190.159.71
unknown
ocsp.digicert.com
  • 2.23.77.188
unknown
settings-win.data.microsoft.com
  • 20.73.194.208
  • 51.104.136.2
unknown
arc.msn.com
  • 20.223.35.26
unknown
www.bing.com
  • 2.23.227.208
  • 2.23.227.215
unknown
slscr.update.microsoft.com
  • 4.245.163.56
unknown
www.microsoft.com
  • 23.222.10.99
unknown

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
1 (526)