File name:

1 (149)

Full analysis: https://app.any.run/tasks/1e191a59-b8f3-4120-bcd9-965aed4bf98a
Verdict: Malicious activity
Analysis date: March 24, 2025, 17:07:28
OS: Windows 10 Professional (build: 19044, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections
MD5:

3C8D2A9CE8E5EBF374431D66760E9270

SHA1:

B6A2D3DC683667996CAFB7BE09BB0703F47545D0

SHA256:

642346584FE445FBED0B5395B141E72D63C7BA2D688923A8F8CAF22F374B5709

SSDEEP:

6144:jdNziqILnD2jA5lJN9Y2Zmfx5tBqkvJGBa/P0e5UTk/8SwjwpyASEhG1BjRLs7pa:jzOR+jA5fNmZBBhaaX0e5UQx4DxmDsR

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Starts itself from another location

      • 1 (149).exe (PID: 2136)
      • Unicorn-34016.exe (PID: 3956)
      • Unicorn-32536.exe (PID: 1164)
      • Unicorn-44234.exe (PID: 2108)
      • Unicorn-160.exe (PID: 6004)
      • Unicorn-57420.exe (PID: 3008)
      • Unicorn-14996.exe (PID: 6540)
      • Unicorn-15448.exe (PID: 5376)
      • Unicorn-60243.exe (PID: 3268)
      • Unicorn-16793.exe (PID: 6228)
      • Unicorn-43413.exe (PID: 1116)
      • Unicorn-63279.exe (PID: 4620)
      • Unicorn-9283.exe (PID: 7400)
      • Unicorn-22090.exe (PID: 7356)
      • Unicorn-1992.exe (PID: 7340)
      • Unicorn-15204.exe (PID: 7460)
      • Unicorn-41930.exe (PID: 7520)
      • Unicorn-17020.exe (PID: 7492)
      • Unicorn-897.exe (PID: 7512)
      • Unicorn-39599.exe (PID: 7792)
      • Unicorn-36824.exe (PID: 7708)
      • Unicorn-44623.exe (PID: 7552)
      • Unicorn-56559.exe (PID: 7772)
      • Unicorn-42745.exe (PID: 7896)
      • Unicorn-24655.exe (PID: 7780)
      • Unicorn-43491.exe (PID: 7912)
      • Unicorn-2371.exe (PID: 8096)
      • Unicorn-48557.exe (PID: 8108)
      • Unicorn-37928.exe (PID: 8144)
      • Unicorn-13507.exe (PID: 1020)
      • Unicorn-36388.exe (PID: 8180)
      • Unicorn-28582.exe (PID: 7036)
      • Unicorn-63414.exe (PID: 7236)
      • Unicorn-55329.exe (PID: 7324)
      • Unicorn-5230.exe (PID: 7604)
      • Unicorn-9636.exe (PID: 5504)
      • Unicorn-45900.exe (PID: 7224)
      • Unicorn-7368.exe (PID: 7596)
      • Unicorn-48593.exe (PID: 7432)
      • Unicorn-48448.exe (PID: 7208)
      • Unicorn-64073.exe (PID: 7744)
      • Unicorn-24925.exe (PID: 4040)
      • Unicorn-39014.exe (PID: 8068)
      • Unicorn-11795.exe (PID: 7928)
      • Unicorn-64073.exe (PID: 7820)
      • Unicorn-18594.exe (PID: 8176)
      • Unicorn-37644.exe (PID: 4152)
      • Unicorn-16840.exe (PID: 6488)
      • Unicorn-6725.exe (PID: 7000)
      • Unicorn-41126.exe (PID: 5216)
      • Unicorn-41126.exe (PID: 4812)
      • Unicorn-18568.exe (PID: 7300)
      • Unicorn-51432.exe (PID: 7640)
      • Unicorn-61655.exe (PID: 7960)
      • Unicorn-51432.exe (PID: 7464)
      • Unicorn-51432.exe (PID: 7408)
      • Unicorn-45101.exe (PID: 7620)
      • Unicorn-22028.exe (PID: 7656)
      • Unicorn-56092.exe (PID: 7972)
      • Unicorn-61087.exe (PID: 7280)
      • Unicorn-15971.exe (PID: 7788)
      • Unicorn-6904.exe (PID: 1760)
      • Unicorn-58998.exe (PID: 7828)
      • Unicorn-40968.exe (PID: 7688)
      • Unicorn-15971.exe (PID: 4300)
      • Unicorn-18851.exe (PID: 7624)
      • Unicorn-40667.exe (PID: 7964)
      • Unicorn-18851.exe (PID: 7592)
      • Unicorn-59634.exe (PID: 7540)
      • Unicorn-27512.exe (PID: 7712)
      • Unicorn-42203.exe (PID: 7852)
      • Unicorn-16412.exe (PID: 7904)
      • Unicorn-21482.exe (PID: 6048)
      • Unicorn-28555.exe (PID: 7884)
      • Unicorn-44699.exe (PID: 5364)
      • Unicorn-54045.exe (PID: 7528)
      • Unicorn-25758.exe (PID: 7860)
      • Unicorn-44123.exe (PID: 5116)
      • Unicorn-39930.exe (PID: 5800)
      • Unicorn-17263.exe (PID: 7156)
      • Unicorn-13178.exe (PID: 6388)
      • Unicorn-13178.exe (PID: 5232)
      • Unicorn-542.exe (PID: 2416)
      • Unicorn-22847.exe (PID: 8052)
      • Unicorn-21394.exe (PID: 6208)
      • Unicorn-43158.exe (PID: 3176)
      • Unicorn-43651.exe (PID: 6036)
      • Unicorn-59110.exe (PID: 6404)
      • Unicorn-7854.exe (PID: 7892)
      • Unicorn-31975.exe (PID: 7648)
      • Unicorn-6655.exe (PID: 1628)
      • Unicorn-45379.exe (PID: 7144)
      • Unicorn-31674.exe (PID: 8148)
      • Unicorn-51793.exe (PID: 7184)
      • Unicorn-44673.exe (PID: 7544)
      • Unicorn-28742.exe (PID: 744)
      • Unicorn-22629.exe (PID: 7932)
      • Unicorn-8814.exe (PID: 5204)
      • Unicorn-61523.exe (PID: 7232)
      • Unicorn-39733.exe (PID: 8440)
      • Unicorn-56453.exe (PID: 8228)
      • Unicorn-24850.exe (PID: 8288)
      • Unicorn-3168.exe (PID: 8244)
      • Unicorn-44886.exe (PID: 8424)
      • Unicorn-21896.exe (PID: 8484)
      • Unicorn-3168.exe (PID: 8212)
      • Unicorn-20443.exe (PID: 8372)
      • Unicorn-59421.exe (PID: 8760)
      • Unicorn-62820.exe (PID: 8636)
      • Unicorn-29318.exe (PID: 8568)
      • Unicorn-63251.exe (PID: 8596)
      • Unicorn-15181.exe (PID: 8700)
      • Unicorn-44455.exe (PID: 8468)
      • Unicorn-62820.exe (PID: 8644)
      • Unicorn-59250.exe (PID: 8692)
      • Unicorn-48477.exe (PID: 8856)
      • Unicorn-13386.exe (PID: 8952)
      • Unicorn-3272.exe (PID: 9172)
      • Unicorn-5218.exe (PID: 8940)
      • Unicorn-59250.exe (PID: 8680)
      • Unicorn-63251.exe (PID: 8604)
      • Unicorn-60106.exe (PID: 8528)
      • Unicorn-62820.exe (PID: 8628)
      • Unicorn-6458.exe (PID: 8720)
      • Unicorn-3438.exe (PID: 7632)
      • Unicorn-63822.exe (PID: 7404)
      • Unicorn-19692.exe (PID: 8360)
      • Unicorn-49131.exe (PID: 8756)
      • Unicorn-16267.exe (PID: 2340)
      • Unicorn-52831.exe (PID: 8616)
      • Unicorn-61575.exe (PID: 8384)
      • Unicorn-61959.exe (PID: 1452)
      • Unicorn-9214.exe (PID: 6700)
      • Unicorn-49131.exe (PID: 6512)
      • Unicorn-52037.exe (PID: 9012)
      • Unicorn-4590.exe (PID: 680)
      • Unicorn-5130.exe (PID: 8128)
      • Unicorn-1238.exe (PID: 7496)
      • Unicorn-41202.exe (PID: 8112)
      • Unicorn-41202.exe (PID: 7564)
      • Unicorn-59375.exe (PID: 8712)
      • Unicorn-51399.exe (PID: 7628)
      • Unicorn-34487.exe (PID: 8968)
      • Unicorn-51399.exe (PID: 8560)
      • Unicorn-28601.exe (PID: 4756)
      • Unicorn-2582.exe (PID: 8352)
      • Unicorn-51399.exe (PID: 7488)
      • Unicorn-28601.exe (PID: 4220)
      • Unicorn-31363.exe (PID: 9208)
      • Unicorn-16179.exe (PID: 7264)
      • Unicorn-28601.exe (PID: 7976)
      • Unicorn-20839.exe (PID: 7012)
      • Unicorn-41451.exe (PID: 8900)
      • Unicorn-973.exe (PID: 2088)
      • Unicorn-41451.exe (PID: 9056)
      • Unicorn-54663.exe (PID: 7216)
      • Unicorn-31939.exe (PID: 7380)
      • Unicorn-54663.exe (PID: 9148)
      • Unicorn-12369.exe (PID: 5624)
      • Unicorn-47263.exe (PID: 8120)
      • Unicorn-40958.exe (PID: 8240)
      • Unicorn-38903.exe (PID: 6112)
      • Unicorn-58939.exe (PID: 3332)
      • Unicorn-584.exe (PID: 9096)
      • Unicorn-39671.exe (PID: 9016)
      • Unicorn-55623.exe (PID: 5680)
      • Unicorn-34710.exe (PID: 6988)
      • Unicorn-30782.exe (PID: 8328)
      • Unicorn-40896.exe (PID: 4868)
      • Unicorn-39671.exe (PID: 6872)
      • Unicorn-63215.exe (PID: 6184)
      • Unicorn-30782.exe (PID: 9120)
      • Unicorn-57014.exe (PID: 9132)
      • Unicorn-60138.exe (PID: 2040)
      • Unicorn-221.exe (PID: 9112)
      • Unicorn-26947.exe (PID: 4448)
      • Unicorn-58192.exe (PID: 7204)
      • Unicorn-56692.exe (PID: 7328)
      • Unicorn-50190.exe (PID: 8504)
      • Unicorn-44134.exe (PID: 2420)
      • Unicorn-39749.exe (PID: 8632)
      • Unicorn-58031.exe (PID: 8600)
      • Unicorn-50190.exe (PID: 1196)
      • Unicorn-31742.exe (PID: 8488)
      • Unicorn-50190.exe (PID: 8748)
      • Unicorn-38426.exe (PID: 8768)
      • Unicorn-16475.exe (PID: 6228)
      • Unicorn-27710.exe (PID: 7548)
      • Unicorn-55530.exe (PID: 4188)
      • Unicorn-57751.exe (PID: 9044)
      • Unicorn-18665.exe (PID: 7552)
      • Unicorn-2328.exe (PID: 8380)
      • Unicorn-6412.exe (PID: 7680)
      • Unicorn-53283.exe (PID: 9192)
      • Unicorn-52982.exe (PID: 7912)
      • Unicorn-52982.exe (PID: 456)
      • Unicorn-9017.exe (PID: 7792)
      • Unicorn-958.exe (PID: 7636)
      • Unicorn-14170.exe (PID: 4452)
      • Unicorn-51311.exe (PID: 4112)
      • Unicorn-21955.exe (PID: 2780)
      • Unicorn-35743.exe (PID: 3020)
      • Unicorn-46843.exe (PID: 8308)
      • Unicorn-51311.exe (PID: 672)
      • Unicorn-14170.exe (PID: 2800)
      • Unicorn-19215.exe (PID: 8608)
      • Unicorn-61041.exe (PID: 8524)
      • Unicorn-25738.exe (PID: 8544)
      • Unicorn-38928.exe (PID: 7692)
      • Unicorn-31083.exe (PID: 5772)
      • Unicorn-48981.exe (PID: 7456)
      • Unicorn-34399.exe (PID: 8996)
      • Unicorn-30227.exe (PID: 7840)
      • Unicorn-6682.exe (PID: 1512)
      • Unicorn-54430.exe (PID: 4212)
      • Unicorn-6682.exe (PID: 8220)
      • Unicorn-10190.exe (PID: 2552)
      • Unicorn-64051.exe (PID: 5640)
      • Unicorn-16605.exe (PID: 8364)
      • Unicorn-27295.exe (PID: 7736)
      • Unicorn-27487.exe (PID: 8904)
      • Unicorn-55499.exe (PID: 5728)
      • Unicorn-7642.exe (PID: 8108)
      • Unicorn-11041.exe (PID: 8180)
      • Unicorn-60133.exe (PID: 7460)
      • Unicorn-61695.exe (PID: 8320)
      • Unicorn-61695.exe (PID: 7256)
      • Unicorn-2764.exe (PID: 7500)
      • Unicorn-35930.exe (PID: 3888)
      • Unicorn-27186.exe (PID: 5044)
      • Unicorn-2764.exe (PID: 9108)
      • Unicorn-3496.exe (PID: 736)
      • Unicorn-24939.exe (PID: 8164)
      • Unicorn-52458.exe (PID: 7652)
      • Unicorn-24939.exe (PID: 4736)
      • Unicorn-54103.exe (PID: 684)
      • Unicorn-3112.exe (PID: 5048)
      • Unicorn-3257.exe (PID: 4892)
      • Unicorn-22931.exe (PID: 7644)
      • Unicorn-7341.exe (PID: 9100)
      • Unicorn-55961.exe (PID: 7356)
      • Unicorn-65390.exe (PID: 7936)
      • Unicorn-12790.exe (PID: 1136)
      • Unicorn-42531.exe (PID: 2288)
      • Unicorn-27155.exe (PID: 8764)
      • Unicorn-46423.exe (PID: 7432)
      • Unicorn-9757.exe (PID: 9076)
      • Unicorn-2951.exe (PID: 4464)
      • Unicorn-27080.exe (PID: 9088)
      • Unicorn-21618.exe (PID: 9052)
      • Unicorn-27822.exe (PID: 7796)

    • Executable content was dropped or overwritten

      • Unicorn-34016.exe (PID: 3956)
      • 1 (149).exe (PID: 2136)
      • Unicorn-32536.exe (PID: 1164)
      • Unicorn-44234.exe (PID: 2108)
      • Unicorn-160.exe (PID: 6004)
      • Unicorn-14996.exe (PID: 6540)
      • Unicorn-57420.exe (PID: 3008)
      • Unicorn-60243.exe (PID: 3268)
      • Unicorn-15448.exe (PID: 5376)
      • Unicorn-16793.exe (PID: 6228)
      • Unicorn-43413.exe (PID: 1116)
      • Unicorn-63279.exe (PID: 4620)
      • Unicorn-22090.exe (PID: 7356)
      • Unicorn-1992.exe (PID: 7340)
      • Unicorn-9283.exe (PID: 7400)
      • Unicorn-15204.exe (PID: 7460)
      • Unicorn-41930.exe (PID: 7520)
      • Unicorn-17020.exe (PID: 7492)
      • Unicorn-897.exe (PID: 7512)
      • Unicorn-36824.exe (PID: 7708)
      • Unicorn-44623.exe (PID: 7552)
      • Unicorn-56559.exe (PID: 7772)
      • Unicorn-39599.exe (PID: 7792)
      • Unicorn-24655.exe (PID: 7780)
      • Unicorn-42745.exe (PID: 7896)
      • Unicorn-40668.exe (PID: 7840)
      • Unicorn-48557.exe (PID: 8108)
      • Unicorn-2371.exe (PID: 8096)
      • Unicorn-37928.exe (PID: 8144)
      • Unicorn-48448.exe (PID: 7208)
      • Unicorn-13507.exe (PID: 1020)
      • Unicorn-36388.exe (PID: 8180)
      • Unicorn-28582.exe (PID: 7036)
      • Unicorn-63414.exe (PID: 7236)
      • Unicorn-5230.exe (PID: 7604)
      • Unicorn-9636.exe (PID: 5504)
      • Unicorn-45900.exe (PID: 7224)
      • Unicorn-64073.exe (PID: 7820)
      • Unicorn-24925.exe (PID: 4040)
      • Unicorn-64073.exe (PID: 7744)
      • Unicorn-11795.exe (PID: 7928)
      • Unicorn-6725.exe (PID: 7000)
      • Unicorn-18594.exe (PID: 8176)
      • Unicorn-37644.exe (PID: 4152)
      • Unicorn-16840.exe (PID: 6488)
      • Unicorn-61655.exe (PID: 7960)
      • Unicorn-41126.exe (PID: 5216)
      • Unicorn-51432.exe (PID: 7640)
      • Unicorn-18568.exe (PID: 7300)
      • Unicorn-51432.exe (PID: 7464)
      • Unicorn-51432.exe (PID: 7408)
      • Unicorn-45101.exe (PID: 7620)
      • Unicorn-22028.exe (PID: 7656)
      • Unicorn-15971.exe (PID: 4300)
      • Unicorn-15971.exe (PID: 7788)
      • Unicorn-61087.exe (PID: 7280)
      • Unicorn-58998.exe (PID: 7828)
      • Unicorn-56092.exe (PID: 7972)
      • Unicorn-6904.exe (PID: 1760)
      • Unicorn-59634.exe (PID: 7540)
      • Unicorn-18851.exe (PID: 7624)
      • Unicorn-18851.exe (PID: 7592)
      • Unicorn-40667.exe (PID: 7964)
      • Unicorn-27512.exe (PID: 7712)
      • Unicorn-42203.exe (PID: 7852)
      • Unicorn-16412.exe (PID: 7904)
      • Unicorn-21482.exe (PID: 6048)
      • Unicorn-28555.exe (PID: 7884)
      • Unicorn-44699.exe (PID: 5364)
      • Unicorn-54045.exe (PID: 7528)
      • Unicorn-25758.exe (PID: 7860)
      • Unicorn-44123.exe (PID: 5116)
      • Unicorn-39930.exe (PID: 5800)
      • Unicorn-17263.exe (PID: 7156)
      • Unicorn-32447.exe (PID: 7720)
      • Unicorn-13178.exe (PID: 5232)
      • Unicorn-542.exe (PID: 2416)
      • Unicorn-22847.exe (PID: 8052)
      • Unicorn-21394.exe (PID: 6208)
      • Unicorn-59110.exe (PID: 6404)
      • Unicorn-7854.exe (PID: 7892)
      • Unicorn-6655.exe (PID: 1628)
      • Unicorn-43158.exe (PID: 3176)
      • Unicorn-45379.exe (PID: 7144)
      • Unicorn-31674.exe (PID: 8148)
      • Unicorn-51793.exe (PID: 7184)
      • Unicorn-8814.exe (PID: 5204)
      • Unicorn-44673.exe (PID: 7544)
      • Unicorn-22629.exe (PID: 7932)
      • Unicorn-28742.exe (PID: 744)
      • Unicorn-61523.exe (PID: 7232)
      • Unicorn-56453.exe (PID: 8228)
      • Unicorn-24850.exe (PID: 8288)
      • Unicorn-3168.exe (PID: 8244)
      • Unicorn-44886.exe (PID: 8424)
      • Unicorn-21896.exe (PID: 8484)
      • Unicorn-3168.exe (PID: 8212)
      • Unicorn-59421.exe (PID: 8760)
      • Unicorn-29318.exe (PID: 8568)
      • Unicorn-6458.exe (PID: 8720)
      • Unicorn-44455.exe (PID: 8468)
      • Unicorn-59250.exe (PID: 8680)
      • Unicorn-63251.exe (PID: 8604)
      • Unicorn-59250.exe (PID: 8692)
      • Unicorn-48477.exe (PID: 8856)
      • Unicorn-13386.exe (PID: 8952)
      • Unicorn-3272.exe (PID: 9172)
      • Unicorn-5218.exe (PID: 8940)
      • Unicorn-3438.exe (PID: 7632)
      • Unicorn-63822.exe (PID: 7404)
      • Unicorn-49131.exe (PID: 8756)
      • Unicorn-49131.exe (PID: 6512)
      • Unicorn-61575.exe (PID: 8384)
      • Unicorn-61959.exe (PID: 1452)
      • Unicorn-52831.exe (PID: 8616)
      • Unicorn-9214.exe (PID: 6700)
      • Unicorn-4590.exe (PID: 680)
      • Unicorn-1238.exe (PID: 7496)
      • Unicorn-41202.exe (PID: 8112)
      • Unicorn-41202.exe (PID: 7564)
      • Unicorn-52037.exe (PID: 9012)
      • Unicorn-51399.exe (PID: 7628)
      • Unicorn-34487.exe (PID: 8968)
      • Unicorn-51399.exe (PID: 8560)
      • Unicorn-59375.exe (PID: 8712)
      • Unicorn-31363.exe (PID: 9208)
      • Unicorn-28601.exe (PID: 4756)
      • Unicorn-51399.exe (PID: 7488)
      • Unicorn-16179.exe (PID: 7264)
      • Unicorn-28601.exe (PID: 7976)
      • Unicorn-20839.exe (PID: 7012)
      • Unicorn-28601.exe (PID: 4220)
      • Unicorn-31939.exe (PID: 7380)
      • Unicorn-973.exe (PID: 2088)
      • Unicorn-54663.exe (PID: 7216)
      • Unicorn-54663.exe (PID: 9148)
      • Unicorn-12369.exe (PID: 5624)
      • Unicorn-47263.exe (PID: 8120)
      • Unicorn-38903.exe (PID: 6112)
      • Unicorn-40958.exe (PID: 8240)
      • Unicorn-584.exe (PID: 9096)
      • Unicorn-58145.exe (PID: 7268)
      • Unicorn-58939.exe (PID: 3332)
      • Unicorn-39671.exe (PID: 9016)
      • Unicorn-63215.exe (PID: 6184)
      • Unicorn-30782.exe (PID: 8328)
      • Unicorn-40896.exe (PID: 4868)
      • Unicorn-56692.exe (PID: 7328)
      • Unicorn-39671.exe (PID: 6872)
      • Unicorn-55623.exe (PID: 5680)
      • Unicorn-30782.exe (PID: 9120)
      • Unicorn-16475.exe (PID: 6228)
      • Unicorn-221.exe (PID: 9112)
      • Unicorn-58192.exe (PID: 7204)
      • Unicorn-50190.exe (PID: 1196)
      • Unicorn-31742.exe (PID: 8488)
      • Unicorn-39749.exe (PID: 8632)
      • Unicorn-50190.exe (PID: 8504)
      • Unicorn-44134.exe (PID: 2420)
      • Unicorn-58031.exe (PID: 8600)
      • Unicorn-50190.exe (PID: 8748)
      • Unicorn-27710.exe (PID: 7548)
      • Unicorn-55530.exe (PID: 4188)
      • Unicorn-58711.exe (PID: 8196)
      • Unicorn-38426.exe (PID: 8768)
      • Unicorn-18665.exe (PID: 7552)
      • Unicorn-57751.exe (PID: 9044)
      • Unicorn-6412.exe (PID: 7680)
      • Unicorn-2328.exe (PID: 8380)
      • Unicorn-53283.exe (PID: 9192)
      • Unicorn-52982.exe (PID: 7912)
      • Unicorn-51311.exe (PID: 4112)
      • Unicorn-9017.exe (PID: 7792)
      • Unicorn-32645.exe (PID: 8732)
      • Unicorn-958.exe (PID: 7636)
      • Unicorn-21955.exe (PID: 2780)
      • Unicorn-52982.exe (PID: 456)
      • Unicorn-9126.exe (PID: 8156)
      • Unicorn-46843.exe (PID: 8308)
      • Unicorn-34399.exe (PID: 8996)
      • Unicorn-35743.exe (PID: 3020)
      • Unicorn-61041.exe (PID: 8524)
      • Unicorn-25738.exe (PID: 8544)
      • Unicorn-48981.exe (PID: 7456)
      • Unicorn-38928.exe (PID: 7692)
      • Unicorn-31083.exe (PID: 5772)
      • Unicorn-6682.exe (PID: 1512)
      • Unicorn-64051.exe (PID: 5640)
      • Unicorn-54430.exe (PID: 4212)
      • Unicorn-55499.exe (PID: 5728)
      • Unicorn-6682.exe (PID: 8220)
      • Unicorn-10190.exe (PID: 2552)
      • Unicorn-30227.exe (PID: 7840)
      • Unicorn-16605.exe (PID: 8364)
      • Unicorn-27295.exe (PID: 7736)
      • Unicorn-35930.exe (PID: 3888)
      • Unicorn-27487.exe (PID: 8904)
      • Unicorn-27186.exe (PID: 5044)
      • Unicorn-7642.exe (PID: 8108)
      • Unicorn-61695.exe (PID: 8320)
      • Unicorn-11041.exe (PID: 8180)
      • Unicorn-60133.exe (PID: 7460)
      • Unicorn-61695.exe (PID: 7256)
      • Unicorn-2764.exe (PID: 7500)
      • Unicorn-2764.exe (PID: 9108)
      • Unicorn-3496.exe (PID: 736)
      • Unicorn-24939.exe (PID: 8164)
      • Unicorn-22931.exe (PID: 7644)
      • Unicorn-7341.exe (PID: 9100)
      • Unicorn-3112.exe (PID: 5048)
      • Unicorn-3257.exe (PID: 4892)
      • Unicorn-52458.exe (PID: 7652)
      • Unicorn-24939.exe (PID: 4736)
      • Unicorn-55961.exe (PID: 7356)
      • Unicorn-65390.exe (PID: 7936)
      • Unicorn-2951.exe (PID: 4464)
      • Unicorn-37788.exe (PID: 1324)
      • Unicorn-27155.exe (PID: 8764)
      • Unicorn-9757.exe (PID: 9076)
      • Unicorn-46423.exe (PID: 7432)
      • Unicorn-42531.exe (PID: 2288)
      • Unicorn-27822.exe (PID: 7796)
      • Unicorn-24999.exe (PID: 9000)
      • Unicorn-27080.exe (PID: 9088)
      • Unicorn-34297.exe (PID: 2596)
      • Unicorn-21618.exe (PID: 9052)

    • Executes application which crashes

      • 1 (149).exe (PID: 2136)
      • Unicorn-34016.exe (PID: 3956)
      • Unicorn-32536.exe (PID: 1164)
      • Unicorn-44234.exe (PID: 2108)
      • Unicorn-160.exe (PID: 6004)
      • Unicorn-14996.exe (PID: 6540)
      • Unicorn-57420.exe (PID: 3008)
      • Unicorn-15448.exe (PID: 5376)
      • Unicorn-16793.exe (PID: 6228)
      • Unicorn-22090.exe (PID: 7356)
      • Unicorn-63279.exe (PID: 4620)
      • Unicorn-17020.exe (PID: 7492)
      • Unicorn-43413.exe (PID: 1116)
      • Unicorn-40668.exe (PID: 7840)
      • Unicorn-2371.exe (PID: 8096)
      • Unicorn-48557.exe (PID: 8108)
      • Unicorn-37928.exe (PID: 8144)
      • Unicorn-63414.exe (PID: 7236)
      • Unicorn-5230.exe (PID: 7604)
      • Unicorn-61655.exe (PID: 7960)
      • Unicorn-41126.exe (PID: 5216)
      • Unicorn-41126.exe (PID: 4812)
      • Unicorn-18568.exe (PID: 7300)
      • Unicorn-58998.exe (PID: 7828)
      • Unicorn-25758.exe (PID: 7860)
      • Unicorn-44699.exe (PID: 5364)
      • Unicorn-15971.exe (PID: 7788)
      • Unicorn-54045.exe (PID: 7528)
      • Unicorn-43651.exe (PID: 6036)
      • Unicorn-7854.exe (PID: 7892)
      • Unicorn-18851.exe (PID: 7592)
      • Unicorn-28555.exe (PID: 7884)
      • Unicorn-44673.exe (PID: 7544)
      • Unicorn-28742.exe (PID: 744)
      • Unicorn-22629.exe (PID: 7932)
      • Unicorn-24850.exe (PID: 8288)
      • Unicorn-3272.exe (PID: 9172)
      • Unicorn-3438.exe (PID: 7632)
      • Unicorn-5218.exe (PID: 8940)
      • Unicorn-19692.exe (PID: 8360)
      • Unicorn-52831.exe (PID: 8616)
      • Unicorn-61575.exe (PID: 8384)
      • Unicorn-61959.exe (PID: 1452)
      • Unicorn-9214.exe (PID: 6700)
      • Unicorn-29173.exe (PID: 8888)
      • Unicorn-40958.exe (PID: 8240)
      • Unicorn-38903.exe (PID: 6112)
      • Unicorn-39671.exe (PID: 6872)
      • Unicorn-39671.exe (PID: 9016)
      • Unicorn-27710.exe (PID: 7548)
      • Unicorn-52982.exe (PID: 7912)
      • Unicorn-58711.exe (PID: 8196)
      • Unicorn-16475.exe (PID: 6228)
      • Unicorn-39168.exe (PID: 8620)
      • Unicorn-2328.exe (PID: 8380)
      • Unicorn-6412.exe (PID: 7680)
      • Unicorn-57751.exe (PID: 9044)
      • Unicorn-9126.exe (PID: 8156)
      • Unicorn-53283.exe (PID: 9192)
      • Unicorn-958.exe (PID: 7636)
      • Unicorn-38928.exe (PID: 7692)
      • Unicorn-6682.exe (PID: 8220)
      • Unicorn-48981.exe (PID: 7456)
      • Unicorn-10190.exe (PID: 2552)
      • Unicorn-30227.exe (PID: 7840)
      • Unicorn-64051.exe (PID: 5640)
      • Unicorn-27295.exe (PID: 7736)
      • Unicorn-35930.exe (PID: 3888)
      • Unicorn-2764.exe (PID: 9108)
      • Unicorn-27487.exe (PID: 8904)
      • Unicorn-7642.exe (PID: 8108)
      • Unicorn-27186.exe (PID: 5044)

  • INFO

    • Checks supported languages

      • 1 (149).exe (PID: 2136)
      • Unicorn-32536.exe (PID: 1164)
      • Unicorn-34016.exe (PID: 3956)
      • Unicorn-160.exe (PID: 6004)
      • Unicorn-44234.exe (PID: 2108)
      • Unicorn-57420.exe (PID: 3008)
      • Unicorn-14996.exe (PID: 6540)
      • Unicorn-15448.exe (PID: 5376)
      • Unicorn-60243.exe (PID: 3268)
      • Unicorn-16793.exe (PID: 6228)
      • Unicorn-43413.exe (PID: 1116)
      • Unicorn-63279.exe (PID: 4620)
      • Unicorn-1992.exe (PID: 7340)
      • Unicorn-22090.exe (PID: 7356)
      • Unicorn-9283.exe (PID: 7400)
      • Unicorn-15204.exe (PID: 7460)
      • Unicorn-17020.exe (PID: 7492)
      • Unicorn-897.exe (PID: 7512)
      • Unicorn-41930.exe (PID: 7520)
      • Unicorn-44623.exe (PID: 7552)
      • Unicorn-36824.exe (PID: 7708)
      • Unicorn-40668.exe (PID: 7840)
      • Unicorn-56559.exe (PID: 7772)
      • Unicorn-39599.exe (PID: 7792)
      • Unicorn-42745.exe (PID: 7896)
      • Unicorn-43491.exe (PID: 7912)
      • Unicorn-48557.exe (PID: 8108)
      • Unicorn-2371.exe (PID: 8096)
      • Unicorn-37928.exe (PID: 8144)
      • Unicorn-36388.exe (PID: 8180)
      • Unicorn-13507.exe (PID: 1020)
      • Unicorn-48448.exe (PID: 7208)
      • Unicorn-28582.exe (PID: 7036)
      • Unicorn-63414.exe (PID: 7236)
      • Unicorn-45900.exe (PID: 7224)
      • Unicorn-64073.exe (PID: 7744)
      • Unicorn-64073.exe (PID: 7820)
      • Unicorn-48593.exe (PID: 7432)
      • Unicorn-39014.exe (PID: 8068)
      • Unicorn-11795.exe (PID: 7928)
      • Unicorn-18594.exe (PID: 8176)
      • Unicorn-61655.exe (PID: 7960)
      • Unicorn-6725.exe (PID: 7000)
      • Unicorn-51432.exe (PID: 7464)
      • Unicorn-58998.exe (PID: 7828)
      • Unicorn-56092.exe (PID: 7972)
      • Unicorn-40667.exe (PID: 7964)
      • Unicorn-42203.exe (PID: 7852)
      • Unicorn-18851.exe (PID: 7624)
      • Unicorn-16412.exe (PID: 7904)
      • Unicorn-21482.exe (PID: 6048)
      • Unicorn-44699.exe (PID: 5364)
      • Unicorn-13178.exe (PID: 6388)
      • Unicorn-43158.exe (PID: 3176)
      • Unicorn-31975.exe (PID: 7648)
      • Unicorn-20443.exe (PID: 8372)
      • Unicorn-60106.exe (PID: 8528)
      • Unicorn-29318.exe (PID: 8568)
      • Unicorn-44886.exe (PID: 8424)
      • Unicorn-62820.exe (PID: 8644)
      • Unicorn-59250.exe (PID: 8692)
      • Unicorn-62820.exe (PID: 8628)
      • Unicorn-5218.exe (PID: 8940)
      • Unicorn-16267.exe (PID: 2340)
      • Unicorn-52037.exe (PID: 9012)
      • Unicorn-31939.exe (PID: 7380)
      • Unicorn-34710.exe (PID: 6988)
      • Unicorn-57014.exe (PID: 9132)
      • Unicorn-44134.exe (PID: 2420)
      • Unicorn-52982.exe (PID: 456)
      • Unicorn-14170.exe (PID: 2800)
      • Unicorn-958.exe (PID: 7636)
      • Unicorn-51311.exe (PID: 672)
      • Unicorn-27295.exe (PID: 7736)
      • Unicorn-64051.exe (PID: 5640)
      • Unicorn-52458.exe (PID: 7652)
      • Unicorn-3257.exe (PID: 4892)
      • Unicorn-65390.exe (PID: 7936)

    • Reads the computer name

      • 1 (149).exe (PID: 2136)
      • Unicorn-34016.exe (PID: 3956)
      • Unicorn-32536.exe (PID: 1164)
      • Unicorn-44234.exe (PID: 2108)
      • Unicorn-160.exe (PID: 6004)
      • Unicorn-57420.exe (PID: 3008)
      • Unicorn-14996.exe (PID: 6540)
      • Unicorn-15448.exe (PID: 5376)
      • Unicorn-60243.exe (PID: 3268)
      • Unicorn-16793.exe (PID: 6228)
      • Unicorn-43413.exe (PID: 1116)
      • Unicorn-63279.exe (PID: 4620)
      • Unicorn-22090.exe (PID: 7356)
      • Unicorn-1992.exe (PID: 7340)
      • Unicorn-9283.exe (PID: 7400)
      • Unicorn-15204.exe (PID: 7460)
      • Unicorn-17020.exe (PID: 7492)
      • Unicorn-44623.exe (PID: 7552)
      • Unicorn-897.exe (PID: 7512)
      • Unicorn-39599.exe (PID: 7792)
      • Unicorn-43491.exe (PID: 7912)
      • Unicorn-40668.exe (PID: 7840)
      • Unicorn-48448.exe (PID: 7208)
      • Unicorn-57794.exe (PID: 8136)
      • Unicorn-36388.exe (PID: 8180)
      • Unicorn-7368.exe (PID: 7596)
      • Unicorn-11795.exe (PID: 7928)
      • Unicorn-39014.exe (PID: 8068)
      • Unicorn-37644.exe (PID: 4152)
      • Unicorn-61655.exe (PID: 7960)
      • Unicorn-41126.exe (PID: 5216)
      • Unicorn-45101.exe (PID: 7620)
      • Unicorn-15971.exe (PID: 4300)
      • Unicorn-6904.exe (PID: 1760)
      • Unicorn-58998.exe (PID: 7828)
      • Unicorn-42203.exe (PID: 7852)
      • Unicorn-16412.exe (PID: 7904)
      • Unicorn-43158.exe (PID: 3176)
      • Unicorn-59110.exe (PID: 6404)
      • Unicorn-7854.exe (PID: 7892)
      • Unicorn-45379.exe (PID: 7144)
      • Unicorn-22629.exe (PID: 7932)
      • Unicorn-44673.exe (PID: 7544)
      • Unicorn-60106.exe (PID: 8528)
      • Unicorn-48477.exe (PID: 8856)
      • Unicorn-51399.exe (PID: 8560)
      • Unicorn-28601.exe (PID: 7976)
      • Unicorn-20839.exe (PID: 7012)
      • Unicorn-12369.exe (PID: 5624)
      • Unicorn-55623.exe (PID: 5680)
      • Unicorn-32645.exe (PID: 8732)
      • Unicorn-51311.exe (PID: 672)
      • Unicorn-61695.exe (PID: 8320)
      • Unicorn-61695.exe (PID: 7256)
      • Unicorn-3112.exe (PID: 5048)

    • Create files in a temporary directory

      • 1 (149).exe (PID: 2136)
      • Unicorn-34016.exe (PID: 3956)
      • Unicorn-32536.exe (PID: 1164)
      • Unicorn-44234.exe (PID: 2108)
      • Unicorn-160.exe (PID: 6004)
      • Unicorn-57420.exe (PID: 3008)
      • Unicorn-14996.exe (PID: 6540)
      • Unicorn-43413.exe (PID: 1116)
      • Unicorn-22090.exe (PID: 7356)
      • Unicorn-1992.exe (PID: 7340)
      • Unicorn-15204.exe (PID: 7460)
      • Unicorn-15448.exe (PID: 5376)
      • Unicorn-60243.exe (PID: 3268)
      • Unicorn-16793.exe (PID: 6228)
      • Unicorn-41930.exe (PID: 7520)
      • Unicorn-17020.exe (PID: 7492)
      • Unicorn-63279.exe (PID: 4620)
      • Unicorn-897.exe (PID: 7512)
      • Unicorn-44623.exe (PID: 7552)
      • Unicorn-56559.exe (PID: 7772)
      • Unicorn-39599.exe (PID: 7792)
      • Unicorn-24655.exe (PID: 7780)
      • Unicorn-42745.exe (PID: 7896)
      • Unicorn-9283.exe (PID: 7400)
      • Unicorn-40668.exe (PID: 7840)
      • Unicorn-2371.exe (PID: 8096)
      • Unicorn-48557.exe (PID: 8108)
      • Unicorn-37928.exe (PID: 8144)
      • Unicorn-48448.exe (PID: 7208)
      • Unicorn-13507.exe (PID: 1020)
      • Unicorn-28582.exe (PID: 7036)
      • Unicorn-36388.exe (PID: 8180)
      • Unicorn-63414.exe (PID: 7236)
      • Unicorn-5230.exe (PID: 7604)
      • Unicorn-9636.exe (PID: 5504)
      • Unicorn-45900.exe (PID: 7224)
      • Unicorn-64073.exe (PID: 7820)
      • Unicorn-11795.exe (PID: 7928)
      • Unicorn-64073.exe (PID: 7744)
      • Unicorn-24925.exe (PID: 4040)
      • Unicorn-6725.exe (PID: 7000)
      • Unicorn-18594.exe (PID: 8176)
      • Unicorn-37644.exe (PID: 4152)
      • Unicorn-16840.exe (PID: 6488)
      • Unicorn-36824.exe (PID: 7708)
      • Unicorn-41126.exe (PID: 5216)
      • Unicorn-18568.exe (PID: 7300)
      • Unicorn-51432.exe (PID: 7640)
      • Unicorn-61655.exe (PID: 7960)
      • Unicorn-51432.exe (PID: 7408)
      • Unicorn-45101.exe (PID: 7620)
      • Unicorn-22028.exe (PID: 7656)
      • Unicorn-15971.exe (PID: 4300)
      • Unicorn-56092.exe (PID: 7972)
      • Unicorn-51432.exe (PID: 7464)
      • Unicorn-61087.exe (PID: 7280)
      • Unicorn-6904.exe (PID: 1760)
      • Unicorn-58998.exe (PID: 7828)
      • Unicorn-40667.exe (PID: 7964)
      • Unicorn-18851.exe (PID: 7624)
      • Unicorn-18851.exe (PID: 7592)
      • Unicorn-42203.exe (PID: 7852)
      • Unicorn-16412.exe (PID: 7904)
      • Unicorn-27512.exe (PID: 7712)
      • Unicorn-25758.exe (PID: 7860)
      • Unicorn-15971.exe (PID: 7788)
      • Unicorn-44123.exe (PID: 5116)
      • Unicorn-39930.exe (PID: 5800)
      • Unicorn-17263.exe (PID: 7156)
      • Unicorn-44699.exe (PID: 5364)
      • Unicorn-54045.exe (PID: 7528)
      • Unicorn-13178.exe (PID: 5232)
      • Unicorn-22847.exe (PID: 8052)
      • Unicorn-542.exe (PID: 2416)
      • Unicorn-59634.exe (PID: 7540)
      • Unicorn-21394.exe (PID: 6208)
      • Unicorn-32447.exe (PID: 7720)
      • Unicorn-59110.exe (PID: 6404)
      • Unicorn-7854.exe (PID: 7892)
      • Unicorn-6655.exe (PID: 1628)
      • Unicorn-43158.exe (PID: 3176)
      • Unicorn-21482.exe (PID: 6048)
      • Unicorn-45379.exe (PID: 7144)
      • Unicorn-28555.exe (PID: 7884)
      • Unicorn-31674.exe (PID: 8148)
      • Unicorn-51793.exe (PID: 7184)
      • Unicorn-8814.exe (PID: 5204)
      • Unicorn-44673.exe (PID: 7544)
      • Unicorn-22629.exe (PID: 7932)
      • Unicorn-28742.exe (PID: 744)
      • Unicorn-56453.exe (PID: 8228)
      • Unicorn-61523.exe (PID: 7232)
      • Unicorn-24850.exe (PID: 8288)
      • Unicorn-3168.exe (PID: 8212)
      • Unicorn-21896.exe (PID: 8484)
      • Unicorn-44886.exe (PID: 8424)
      • Unicorn-3168.exe (PID: 8244)
      • Unicorn-29318.exe (PID: 8568)
      • Unicorn-6458.exe (PID: 8720)
      • Unicorn-44455.exe (PID: 8468)
      • Unicorn-59250.exe (PID: 8680)
      • Unicorn-59421.exe (PID: 8760)
      • Unicorn-59250.exe (PID: 8692)
      • Unicorn-48477.exe (PID: 8856)
      • Unicorn-13386.exe (PID: 8952)
      • Unicorn-3272.exe (PID: 9172)
      • Unicorn-5218.exe (PID: 8940)
      • Unicorn-3438.exe (PID: 7632)
      • Unicorn-19692.exe (PID: 8360)
      • Unicorn-49131.exe (PID: 8756)
      • Unicorn-63251.exe (PID: 8604)
      • Unicorn-61575.exe (PID: 8384)
      • Unicorn-61959.exe (PID: 1452)
      • Unicorn-52831.exe (PID: 8616)
      • Unicorn-9214.exe (PID: 6700)
      • Unicorn-49131.exe (PID: 6512)
      • Unicorn-52037.exe (PID: 9012)
      • Unicorn-4590.exe (PID: 680)
      • Unicorn-1238.exe (PID: 7496)
      • Unicorn-41202.exe (PID: 8112)
      • Unicorn-51399.exe (PID: 7488)
      • Unicorn-41202.exe (PID: 7564)
      • Unicorn-34487.exe (PID: 8968)
      • Unicorn-51399.exe (PID: 8560)
      • Unicorn-59375.exe (PID: 8712)
      • Unicorn-28601.exe (PID: 4756)
      • Unicorn-51399.exe (PID: 7628)
      • Unicorn-31363.exe (PID: 9208)
      • Unicorn-28601.exe (PID: 7976)
      • Unicorn-28601.exe (PID: 4220)
      • Unicorn-20839.exe (PID: 7012)
      • Unicorn-16179.exe (PID: 7264)
      • Unicorn-31939.exe (PID: 7380)
      • Unicorn-973.exe (PID: 2088)
      • Unicorn-54663.exe (PID: 7216)
      • Unicorn-12369.exe (PID: 5624)
      • Unicorn-47263.exe (PID: 8120)
      • Unicorn-38903.exe (PID: 6112)
      • Unicorn-40958.exe (PID: 8240)
      • Unicorn-54663.exe (PID: 9148)
      • Unicorn-63215.exe (PID: 6184)
      • Unicorn-58145.exe (PID: 7268)
      • Unicorn-584.exe (PID: 9096)
      • Unicorn-58939.exe (PID: 3332)
      • Unicorn-39671.exe (PID: 6872)
      • Unicorn-39671.exe (PID: 9016)
      • Unicorn-40896.exe (PID: 4868)
      • Unicorn-55623.exe (PID: 5680)
      • Unicorn-34710.exe (PID: 6988)
      • Unicorn-56692.exe (PID: 7328)
      • Unicorn-30782.exe (PID: 9120)
      • Unicorn-221.exe (PID: 9112)
      • Unicorn-50190.exe (PID: 1196)
      • Unicorn-31742.exe (PID: 8488)
      • Unicorn-50190.exe (PID: 8504)
      • Unicorn-44134.exe (PID: 2420)
      • Unicorn-39749.exe (PID: 8632)
      • Unicorn-58031.exe (PID: 8600)
      • Unicorn-27710.exe (PID: 7548)
      • Unicorn-55530.exe (PID: 4188)
      • Unicorn-16475.exe (PID: 6228)
      • Unicorn-6412.exe (PID: 7680)
      • Unicorn-53283.exe (PID: 9192)
      • Unicorn-57751.exe (PID: 9044)
      • Unicorn-21955.exe (PID: 2780)
      • Unicorn-52982.exe (PID: 456)
      • Unicorn-34399.exe (PID: 8996)
      • Unicorn-46843.exe (PID: 8308)
      • Unicorn-61041.exe (PID: 8524)
      • Unicorn-35743.exe (PID: 3020)
      • Unicorn-32645.exe (PID: 8732)
      • Unicorn-48981.exe (PID: 7456)
      • Unicorn-6682.exe (PID: 8220)
      • Unicorn-55499.exe (PID: 5728)

    • The sample compiled with chinese language support

      • 1 (149).exe (PID: 2136)

    • Creates files or folders in the user directory

      • WerFault.exe (PID: 2600)
      • WerFault.exe (PID: 6108)
      • WerFault.exe (PID: 7224)
      • WerFault.exe (PID: 7284)
      • WerFault.exe (PID: 7632)
      • WerFault.exe (PID: 7864)
      • WerFault.exe (PID: 7844)
      • WerFault.exe (PID: 8064)
      • WerFault.exe (PID: 2600)
      • WerFault.exe (PID: 8024)
      • WerFault.exe (PID: 8060)
      • WerFault.exe (PID: 6744)
      • WerFault.exe (PID: 7680)
      • WerFault.exe (PID: 7848)
      • WerFault.exe (PID: 7468)
      • WerFault.exe (PID: 680)
      • WerFault.exe (PID: 6944)
      • WerFault.exe (PID: 968)
      • WerFault.exe (PID: 7368)
      • WerFault.exe (PID: 7948)
      • WerFault.exe (PID: 7504)
      • WerFault.exe (PID: 3364)
      • WerFault.exe (PID: 7372)
      • WerFault.exe (PID: 8404)
      • WerFault.exe (PID: 9024)
      • WerFault.exe (PID: 9092)
      • WerFault.exe (PID: 9032)
      • WerFault.exe (PID: 9068)
      • WerFault.exe (PID: 5956)
      • WerFault.exe (PID: 8892)
      • WerFault.exe (PID: 8928)
      • WerFault.exe (PID: 3096)
      • WerFault.exe (PID: 9032)
      • WerFault.exe (PID: 8992)
      • WerFault.exe (PID: 456)
      • WerFault.exe (PID: 8272)
      • WerFault.exe (PID: 7876)
      • WerFault.exe (PID: 3768)
      • WerFault.exe (PID: 6676)
      • WerFault.exe (PID: 1056)
      • WerFault.exe (PID: 8160)
      • WerFault.exe (PID: 5952)
      • WerFault.exe (PID: 3976)
      • WerFault.exe (PID: 8736)
      • WerFault.exe (PID: 8452)
      • WerFault.exe (PID: 8152)
      • WerFault.exe (PID: 9200)
      • WerFault.exe (PID: 9028)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable Microsoft Visual Basic 6 (90.6)
.exe | Win32 Executable (generic) (4.9)
.exe | Generic Win/DOS Executable (2.2)
.exe | DOS Executable Generic (2.2)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:01:19 13:34:56+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 299008
UninitializedDataSize: -
EntryPoint: 0x13d4
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
InternalName: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
737
Monitored processes
367
Malicious processes
43
Suspicious processes
123

Behavior graph

Click at the process to see the details
start 1 (149).exe unicorn-34016.exe sppextcomobj.exe no specs slui.exe unicorn-44234.exe unicorn-32536.exe werfault.exe no specs unicorn-160.exe unicorn-57420.exe unicorn-14996.exe werfault.exe no specs unicorn-15448.exe unicorn-60243.exe unicorn-16793.exe unicorn-43413.exe unicorn-63279.exe werfault.exe no specs werfault.exe no specs unicorn-1992.exe unicorn-22090.exe unicorn-9283.exe unicorn-15204.exe unicorn-17020.exe unicorn-897.exe unicorn-41930.exe unicorn-44623.exe werfault.exe no specs unicorn-36824.exe unicorn-56559.exe unicorn-24655.exe unicorn-39599.exe unicorn-40668.exe werfault.exe no specs werfault.exe no specs unicorn-42745.exe unicorn-43491.exe no specs werfault.exe no specs unicorn-2371.exe unicorn-48557.exe unicorn-57794.exe no specs unicorn-37928.exe unicorn-36388.exe unicorn-13507.exe unicorn-28582.exe unicorn-48448.exe werfault.exe no specs unicorn-63414.exe unicorn-45900.exe unicorn-48593.exe no specs unicorn-55329.exe no specs unicorn-9636.exe unicorn-5230.exe unicorn-7368.exe no specs unicorn-64073.exe unicorn-64073.exe werfault.exe no specs werfault.exe no specs unicorn-24925.exe werfault.exe no specs werfault.exe no specs unicorn-39014.exe no specs unicorn-11795.exe unicorn-6725.exe unicorn-37644.exe unicorn-18594.exe unicorn-16840.exe unicorn-61655.exe unicorn-41126.exe unicorn-41126.exe unicorn-18568.exe unicorn-51432.exe unicorn-51432.exe unicorn-51432.exe werfault.exe no specs unicorn-45101.exe unicorn-22028.exe unicorn-56092.exe unicorn-58998.exe werfault.exe no specs unicorn-15971.exe unicorn-15971.exe unicorn-61087.exe werfault.exe no specs unicorn-40968.exe no specs unicorn-6904.exe unicorn-59634.exe werfault.exe no specs unicorn-40667.exe werfault.exe no specs unicorn-27512.exe unicorn-42203.exe unicorn-18851.exe unicorn-18851.exe werfault.exe no specs unicorn-21482.exe unicorn-25758.exe unicorn-44123.exe unicorn-16412.exe unicorn-54045.exe unicorn-28555.exe unicorn-39930.exe unicorn-32447.exe unicorn-44699.exe unicorn-17263.exe unicorn-13178.exe unicorn-13178.exe no specs unicorn-542.exe unicorn-22847.exe werfault.exe no specs werfault.exe no specs unicorn-21394.exe werfault.exe no specs unicorn-43158.exe werfault.exe no specs unicorn-43651.exe unicorn-59110.exe unicorn-7854.exe unicorn-6655.exe unicorn-31975.exe no specs unicorn-45379.exe unicorn-8814.exe unicorn-51793.exe unicorn-31674.exe unicorn-44673.exe unicorn-61523.exe unicorn-22629.exe unicorn-28742.exe unicorn-3168.exe unicorn-56453.exe unicorn-3168.exe unicorn-24850.exe unicorn-20443.exe no specs werfault.exe no specs unicorn-44886.exe unicorn-39733.exe no specs unicorn-44455.exe unicorn-21896.exe unicorn-29702.exe no specs unicorn-60106.exe no specs unicorn-29318.exe unicorn-63251.exe no specs unicorn-63251.exe unicorn-62820.exe no specs unicorn-62820.exe no specs unicorn-62820.exe no specs unicorn-59250.exe unicorn-59250.exe unicorn-15181.exe no specs unicorn-6458.exe unicorn-59421.exe unicorn-48477.exe unicorn-5218.exe unicorn-13386.exe werfault.exe no specs werfault.exe no specs werfault.exe no specs werfault.exe no specs unicorn-3272.exe unicorn-19692.exe unicorn-3438.exe unicorn-63822.exe unicorn-49131.exe unicorn-49131.exe unicorn-16267.exe no specs unicorn-61575.exe unicorn-52831.exe werfault.exe no specs werfault.exe no specs werfault.exe no specs unicorn-52037.exe unicorn-61959.exe werfault.exe no specs unicorn-4590.exe unicorn-9214.exe unicorn-5130.exe no specs unicorn-41202.exe unicorn-41202.exe unicorn-1238.exe unicorn-51399.exe unicorn-51399.exe unicorn-51399.exe unicorn-34487.exe unicorn-59375.exe unicorn-2582.exe no specs unicorn-31363.exe werfault.exe no specs unicorn-16179.exe unicorn-31939.exe unicorn-28601.exe unicorn-28601.exe unicorn-28601.exe werfault.exe no specs unicorn-973.exe unicorn-20839.exe unicorn-41451.exe no specs unicorn-41451.exe no specs werfault.exe no specs werfault.exe no specs unicorn-12369.exe unicorn-54663.exe unicorn-54663.exe unicorn-40958.exe unicorn-38903.exe unicorn-47263.exe unicorn-58939.exe unicorn-63215.exe unicorn-584.exe unicorn-39671.exe unicorn-39671.exe unicorn-58145.exe unicorn-34710.exe no specs unicorn-55623.exe unicorn-56692.exe unicorn-29173.exe unicorn-40896.exe unicorn-30782.exe unicorn-30782.exe unicorn-16475.exe unicorn-60138.exe no specs unicorn-58192.exe unicorn-31742.exe slui.exe no specs werfault.exe no specs unicorn-57014.exe no specs werfault.exe no specs werfault.exe no specs unicorn-221.exe unicorn-26947.exe no specs unicorn-50190.exe unicorn-50190.exe unicorn-50190.exe werfault.exe no specs unicorn-44134.exe unicorn-58031.exe unicorn-39749.exe werfault.exe no specs werfault.exe no specs werfault.exe no specs werfault.exe no specs unicorn-38426.exe unicorn-55530.exe unicorn-57751.exe unicorn-53283.exe unicorn-6412.exe unicorn-39168.exe unicorn-27710.exe unicorn-18665.exe unicorn-2328.exe unicorn-58711.exe unicorn-52982.exe unicorn-52982.exe unicorn-958.exe unicorn-9126.exe unicorn-9017.exe unicorn-14170.exe no specs unicorn-14170.exe no specs unicorn-32645.exe werfault.exe no specs unicorn-51311.exe no specs unicorn-51311.exe unicorn-25738.exe unicorn-21955.exe unicorn-34399.exe unicorn-61041.exe unicorn-46843.exe unicorn-19215.exe no specs unicorn-35743.exe unicorn-31083.exe unicorn-38928.exe unicorn-48981.exe werfault.exe no specs werfault.exe no specs werfault.exe no specs werfault.exe no specs unicorn-30227.exe unicorn-64051.exe unicorn-6682.exe unicorn-6682.exe unicorn-10190.exe unicorn-27295.exe unicorn-54430.exe unicorn-16605.exe unicorn-55499.exe unicorn-27487.exe unicorn-11041.exe unicorn-35930.exe unicorn-7642.exe unicorn-27186.exe unicorn-2764.exe unicorn-2764.exe unicorn-60133.exe unicorn-54103.exe no specs unicorn-7341.exe unicorn-61695.exe unicorn-24939.exe unicorn-61695.exe unicorn-24939.exe unicorn-52458.exe werfault.exe no specs unicorn-3496.exe unicorn-3112.exe unicorn-22931.exe werfault.exe no specs werfault.exe no specs werfault.exe no specs unicorn-3257.exe werfault.exe no specs unicorn-37788.exe unicorn-12790.exe no specs unicorn-55961.exe unicorn-46423.exe unicorn-65390.exe werfault.exe no specs werfault.exe no specs unicorn-2951.exe unicorn-21618.exe unicorn-42531.exe werfault.exe no specs unicorn-27155.exe werfault.exe no specs werfault.exe no specs werfault.exe no specs werfault.exe no specs unicorn-27080.exe unicorn-9757.exe werfault.exe no specs werfault.exe no specs unicorn-34297.exe unicorn-27822.exe unicorn-24999.exe werfault.exe no specs werfault.exe no specs unicorn-13862.exe no specs unicorn-33707.exe no specs unicorn-50811.exe no specs unicorn-12409.exe no specs werfault.exe no specs unicorn-57225.exe no specs unicorn-51195.exe no specs unicorn-4900.exe no specs unicorn-35819.exe no specs unicorn-51278.exe no specs unicorn-46810.exe no specs unicorn-46810.exe no specs werfault.exe no specs unicorn-8766.exe no specs unicorn-50375.exe no specs werfault.exe no specs unicorn-5066.exe no specs werfault.exe no specs unicorn-13810.exe no specs werfault.exe no specs unicorn-15071.exe no specs unicorn-15071.exe no specs unicorn-48704.exe no specs unicorn-6794.exe no specs werfault.exe no specs unicorn-33629.exe no specs unicorn-8055.exe no specs unicorn-56488.exe no specs unicorn-47635.exe no specs unicorn-26193.exe no specs unicorn-5196.exe no specs unicorn-56535.exe no specs unicorn-35129.exe no specs werfault.exe no specs unicorn-65471.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
456C:\WINDOWS\SysWOW64\WerFault.exe -u -p 744 -s 704C:\Windows\SysWOW64\WerFault.exe—Unicorn-28742.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Problem Reporting
Exit code:
0
Version:
10.0.19041.3996 (WinBuild.160101.0800)
Modules
Images
c:\windows\syswow64\werfault.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\msvcrt.dll
c:\windows\syswow64\combase.dll
456C:\Users\admin\AppData\Local\Temp\Unicorn-52982.exeC:\Users\admin\AppData\Local\Temp\Unicorn-52982.exe
Unicorn-34710.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Exit code:
0
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-52982.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
516C:\Users\admin\AppData\Local\Temp\Unicorn-13810.exeC:\Users\admin\AppData\Local\Temp\Unicorn-13810.exe—Unicorn-55961.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
672C:\Users\admin\AppData\Local\Temp\Unicorn-51311.exeC:\Users\admin\AppData\Local\Temp\Unicorn-51311.exe—Unicorn-26947.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Exit code:
0
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-51311.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
680C:\WINDOWS\SysWOW64\WerFault.exe -u -p 8144 -s 680C:\Windows\SysWOW64\WerFault.exe—Unicorn-37928.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Problem Reporting
Exit code:
0
Version:
10.0.19041.3996 (WinBuild.160101.0800)
Modules
Images
c:\windows\syswow64\werfault.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\msvcrt.dll
c:\windows\syswow64\combase.dll
680C:\Users\admin\AppData\Local\Temp\Unicorn-4590.exeC:\Users\admin\AppData\Local\Temp\Unicorn-4590.exe
Unicorn-21896.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Exit code:
0
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-4590.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
684C:\Users\admin\AppData\Local\Temp\Unicorn-54103.exeC:\Users\admin\AppData\Local\Temp\Unicorn-54103.exe—Unicorn-25738.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-54103.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
736C:\Users\admin\AppData\Local\Temp\Unicorn-3496.exeC:\Users\admin\AppData\Local\Temp\Unicorn-3496.exe
Unicorn-38928.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-3496.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
744C:\Users\admin\AppData\Local\Temp\Unicorn-28742.exeC:\Users\admin\AppData\Local\Temp\Unicorn-28742.exe
Unicorn-17263.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Exit code:
0
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-28742.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
856C:\WINDOWS\SysWOW64\WerFault.exe -u -p 7692 -s 688C:\Windows\SysWOW64\WerFault.exe—Unicorn-38928.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Problem Reporting
Exit code:
0
Version:
10.0.19041.3996 (WinBuild.160101.0800)
Modules
Images
c:\windows\syswow64\werfault.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\msvcrt.dll
c:\windows\syswow64\combase.dll
Total events
110 123
Read events
110 123
Write events
0
Delete events
0

Modification events

No data
Executable files
259
Suspicious files
160
Text files
55
Unknown types
2

Dropped files

PID
Process
Filename
Type
2600WerFault.exeC:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_1 (149).exe_2336b8bf5c246827cc9417dfd5e56d141e8b536_665255f1_b9986a97-e327-43b3-8c0f-68aa0f2be619\Report.wer —
MD5:—
SHA256:—
6108WerFault.exeC:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Unicorn-34016.ex_1320e2123d915f9ab745067a61c9119c6623_c95b9571_01b59542-3f86-4f0a-bb98-d354a25d3cd6\Report.wer —
MD5:—
SHA256:—
6004Unicorn-160.exeC:\Users\admin\AppData\Local\Temp\Unicorn-15448.exeexecutable
MD5:ECB5B7005AB83C610EBC20FCE878C6CB
SHA256:E6EC54C1AF8945F8C5DCB8F8A58E3B86C545A43A2537C9E97492A568935CCF52
3956Unicorn-34016.exeC:\Users\admin\AppData\Local\Temp\Unicorn-14996.exeexecutable
MD5:C15E0C6B36897E8B1516E3231DEC798B
SHA256:AE28DA5A09F44A21C054A21AC8678540D59DC6A938DF10736A356E630A2BBF71
7224WerFault.exeC:\ProgramData\Microsoft\Windows\WER\Temp\WERBD4.tmp.dmpdmp
MD5:E01179C06C0E4EC54CA852A391C79ADF
SHA256:F5D42599BE4E254F0DDF3511B2A48DF7E3176B72164C834B683431B8474041FC
3956Unicorn-34016.exeC:\Users\admin\AppData\Local\Temp\Unicorn-44234.exeexecutable
MD5:85BF32AB754A7CC3FDB6E9090D5B45E5
SHA256:CDE87C3FCE5EAB229170183D19DEB36A0912F4C5E9CF960998D0443A0E994348
2600WerFault.exeC:\ProgramData\Microsoft\Windows\WER\Temp\WER500.tmp.xmlxml
MD5:09B6294B5B644CAA75F9DC28FA46127C
SHA256:EA6C7DEDE3E8E160DA34A0F227ECF53DBE4498BBDA2617DA49220C76A3078C6B
1164Unicorn-32536.exeC:\Users\admin\AppData\Local\Temp\Unicorn-60243.exeexecutable
MD5:9E9CBFC2D57A1BB7AA2F939171F258B0
SHA256:22302E3CCD7C95039F1A40365FDF6B2D466BF2B54876707693FEDAC4937D246C
3008Unicorn-57420.exeC:\Users\admin\AppData\Local\Temp\Unicorn-16793.exeexecutable
MD5:E34A25E22C1D85903969BBF26539E0EC
SHA256:9A930772E01AF17575CD297988203A05D0573BD1211C59E35DED4342A0B7F193
6108WerFault.exeC:\ProgramData\Microsoft\Windows\WER\Temp\WER51F.tmp.xmlxml
MD5:4509700AD7409686EB967DFF525B2C4F
SHA256:AF9E5252AD55602DBC3477C43841873764753FE04289DED8D3F1CC270FCB3E0A
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
7
TCP/UDP connections
30
DNS requests
17
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
2040
backgroundTaskHost.exe
GET
200
23.54.109.203:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
whitelisted
5496
MoUsoCoreWorker.exe
GET
200
23.48.23.150:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
7936
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
6544
svchost.exe
GET
200
23.54.109.203:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
6544
svchost.exe
GET
200
23.54.109.203:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
5280
backgroundTaskHost.exe
GET
200
23.54.109.203:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
whitelisted
7936
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
2104
svchost.exe
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
—
—
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
5496
MoUsoCoreWorker.exe
23.48.23.150:80
crl.microsoft.com
Akamai International B.V.
DE
whitelisted
3216
svchost.exe
40.113.103.199:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
40.126.32.74:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
23.54.109.203:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted
2040
backgroundTaskHost.exe
20.103.156.88:443
arc.msn.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
2040
backgroundTaskHost.exe
23.54.109.203:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted
2040
backgroundTaskHost.exe
20.31.169.57:443
fd.api.iris.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 40.127.240.158
  • 51.104.136.2
whitelisted
google.com
  • 142.250.184.206
whitelisted
crl.microsoft.com
  • 23.48.23.150
  • 23.48.23.159
  • 23.48.23.143
  • 23.48.23.156
  • 23.48.23.137
  • 23.48.23.140
  • 23.48.23.138
  • 23.48.23.146
  • 23.48.23.145
whitelisted
client.wns.windows.com
  • 40.113.103.199
  • 40.113.110.67
whitelisted
login.live.com
  • 40.126.32.74
  • 20.190.160.131
  • 40.126.32.136
  • 20.190.160.20
  • 20.190.160.65
  • 40.126.32.134
  • 20.190.160.130
  • 20.190.160.2
whitelisted
ocsp.digicert.com
  • 23.54.109.203
whitelisted
arc.msn.com
  • 20.103.156.88
whitelisted
fd.api.iris.microsoft.com
  • 20.31.169.57
whitelisted
slscr.update.microsoft.com
  • 20.109.210.53
whitelisted
www.microsoft.com
  • 184.30.21.171
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2026 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
1 (149)