File name:

1 (149)

Full analysis: https://app.any.run/tasks/1e191a59-b8f3-4120-bcd9-965aed4bf98a
Verdict: Malicious activity
Analysis date: March 24, 2025, 17:07:28
OS: Windows 10 Professional (build: 19044, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections
MD5:

3C8D2A9CE8E5EBF374431D66760E9270

SHA1:

B6A2D3DC683667996CAFB7BE09BB0703F47545D0

SHA256:

642346584FE445FBED0B5395B141E72D63C7BA2D688923A8F8CAF22F374B5709

SSDEEP:

6144:jdNziqILnD2jA5lJN9Y2Zmfx5tBqkvJGBa/P0e5UTk/8SwjwpyASEhG1BjRLs7pa:jzOR+jA5fNmZBBhaaX0e5UQx4DxmDsR

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Starts itself from another location

      • 1 (149).exe (PID: 2136)
      • Unicorn-34016.exe (PID: 3956)
      • Unicorn-32536.exe (PID: 1164)
      • Unicorn-44234.exe (PID: 2108)
      • Unicorn-14996.exe (PID: 6540)
      • Unicorn-57420.exe (PID: 3008)
      • Unicorn-160.exe (PID: 6004)
      • Unicorn-15448.exe (PID: 5376)
      • Unicorn-60243.exe (PID: 3268)
      • Unicorn-43413.exe (PID: 1116)
      • Unicorn-63279.exe (PID: 4620)
      • Unicorn-16793.exe (PID: 6228)
      • Unicorn-1992.exe (PID: 7340)
      • Unicorn-9283.exe (PID: 7400)
      • Unicorn-22090.exe (PID: 7356)
      • Unicorn-15204.exe (PID: 7460)
      • Unicorn-41930.exe (PID: 7520)
      • Unicorn-17020.exe (PID: 7492)
      • Unicorn-897.exe (PID: 7512)
      • Unicorn-36824.exe (PID: 7708)
      • Unicorn-44623.exe (PID: 7552)
      • Unicorn-56559.exe (PID: 7772)
      • Unicorn-43491.exe (PID: 7912)
      • Unicorn-24655.exe (PID: 7780)
      • Unicorn-42745.exe (PID: 7896)
      • Unicorn-39599.exe (PID: 7792)
      • Unicorn-2371.exe (PID: 8096)
      • Unicorn-48557.exe (PID: 8108)
      • Unicorn-37928.exe (PID: 8144)
      • Unicorn-63414.exe (PID: 7236)
      • Unicorn-13507.exe (PID: 1020)
      • Unicorn-36388.exe (PID: 8180)
      • Unicorn-28582.exe (PID: 7036)
      • Unicorn-55329.exe (PID: 7324)
      • Unicorn-5230.exe (PID: 7604)
      • Unicorn-9636.exe (PID: 5504)
      • Unicorn-45900.exe (PID: 7224)
      • Unicorn-48593.exe (PID: 7432)
      • Unicorn-7368.exe (PID: 7596)
      • Unicorn-48448.exe (PID: 7208)
      • Unicorn-64073.exe (PID: 7820)
      • Unicorn-64073.exe (PID: 7744)
      • Unicorn-11795.exe (PID: 7928)
      • Unicorn-24925.exe (PID: 4040)
      • Unicorn-39014.exe (PID: 8068)
      • Unicorn-6725.exe (PID: 7000)
      • Unicorn-18594.exe (PID: 8176)
      • Unicorn-37644.exe (PID: 4152)
      • Unicorn-16840.exe (PID: 6488)
      • Unicorn-41126.exe (PID: 5216)
      • Unicorn-18568.exe (PID: 7300)
      • Unicorn-41126.exe (PID: 4812)
      • Unicorn-51432.exe (PID: 7640)
      • Unicorn-51432.exe (PID: 7464)
      • Unicorn-61655.exe (PID: 7960)
      • Unicorn-51432.exe (PID: 7408)
      • Unicorn-45101.exe (PID: 7620)
      • Unicorn-22028.exe (PID: 7656)
      • Unicorn-15971.exe (PID: 4300)
      • Unicorn-56092.exe (PID: 7972)
      • Unicorn-6904.exe (PID: 1760)
      • Unicorn-58998.exe (PID: 7828)
      • Unicorn-61087.exe (PID: 7280)
      • Unicorn-15971.exe (PID: 7788)
      • Unicorn-40968.exe (PID: 7688)
      • Unicorn-40667.exe (PID: 7964)
      • Unicorn-18851.exe (PID: 7624)
      • Unicorn-18851.exe (PID: 7592)
      • Unicorn-59634.exe (PID: 7540)
      • Unicorn-27512.exe (PID: 7712)
      • Unicorn-42203.exe (PID: 7852)
      • Unicorn-16412.exe (PID: 7904)
      • Unicorn-21482.exe (PID: 6048)
      • Unicorn-28555.exe (PID: 7884)
      • Unicorn-25758.exe (PID: 7860)
      • Unicorn-44699.exe (PID: 5364)
      • Unicorn-44123.exe (PID: 5116)
      • Unicorn-39930.exe (PID: 5800)
      • Unicorn-17263.exe (PID: 7156)
      • Unicorn-54045.exe (PID: 7528)
      • Unicorn-13178.exe (PID: 5232)
      • Unicorn-13178.exe (PID: 6388)
      • Unicorn-542.exe (PID: 2416)
      • Unicorn-22847.exe (PID: 8052)
      • Unicorn-43158.exe (PID: 3176)
      • Unicorn-31975.exe (PID: 7648)
      • Unicorn-59110.exe (PID: 6404)
      • Unicorn-43651.exe (PID: 6036)
      • Unicorn-7854.exe (PID: 7892)
      • Unicorn-21394.exe (PID: 6208)
      • Unicorn-45379.exe (PID: 7144)
      • Unicorn-31674.exe (PID: 8148)
      • Unicorn-51793.exe (PID: 7184)
      • Unicorn-6655.exe (PID: 1628)
      • Unicorn-8814.exe (PID: 5204)
      • Unicorn-44673.exe (PID: 7544)
      • Unicorn-22629.exe (PID: 7932)
      • Unicorn-28742.exe (PID: 744)
      • Unicorn-61523.exe (PID: 7232)
      • Unicorn-39733.exe (PID: 8440)
      • Unicorn-56453.exe (PID: 8228)
      • Unicorn-24850.exe (PID: 8288)
      • Unicorn-3168.exe (PID: 8212)
      • Unicorn-3168.exe (PID: 8244)
      • Unicorn-21896.exe (PID: 8484)
      • Unicorn-44886.exe (PID: 8424)
      • Unicorn-29318.exe (PID: 8568)
      • Unicorn-63251.exe (PID: 8596)
      • Unicorn-15181.exe (PID: 8700)
      • Unicorn-59250.exe (PID: 8680)
      • Unicorn-20443.exe (PID: 8372)
      • Unicorn-59421.exe (PID: 8760)
      • Unicorn-62820.exe (PID: 8636)
      • Unicorn-44455.exe (PID: 8468)
      • Unicorn-62820.exe (PID: 8644)
      • Unicorn-48477.exe (PID: 8856)
      • Unicorn-13386.exe (PID: 8952)
      • Unicorn-3272.exe (PID: 9172)
      • Unicorn-59250.exe (PID: 8692)
      • Unicorn-60106.exe (PID: 8528)
      • Unicorn-62820.exe (PID: 8628)
      • Unicorn-6458.exe (PID: 8720)
      • Unicorn-3438.exe (PID: 7632)
      • Unicorn-19692.exe (PID: 8360)
      • Unicorn-63822.exe (PID: 7404)
      • Unicorn-5218.exe (PID: 8940)
      • Unicorn-63251.exe (PID: 8604)
      • Unicorn-49131.exe (PID: 8756)
      • Unicorn-49131.exe (PID: 6512)
      • Unicorn-16267.exe (PID: 2340)
      • Unicorn-61575.exe (PID: 8384)
      • Unicorn-52831.exe (PID: 8616)
      • Unicorn-61959.exe (PID: 1452)
      • Unicorn-9214.exe (PID: 6700)
      • Unicorn-41202.exe (PID: 7564)
      • Unicorn-1238.exe (PID: 7496)
      • Unicorn-5130.exe (PID: 8128)
      • Unicorn-52037.exe (PID: 9012)
      • Unicorn-4590.exe (PID: 680)
      • Unicorn-41202.exe (PID: 8112)
      • Unicorn-51399.exe (PID: 7488)
      • Unicorn-51399.exe (PID: 7628)
      • Unicorn-34487.exe (PID: 8968)
      • Unicorn-51399.exe (PID: 8560)
      • Unicorn-59375.exe (PID: 8712)
      • Unicorn-2582.exe (PID: 8352)
      • Unicorn-16179.exe (PID: 7264)
      • Unicorn-28601.exe (PID: 4220)
      • Unicorn-28601.exe (PID: 4756)
      • Unicorn-31363.exe (PID: 9208)
      • Unicorn-28601.exe (PID: 7976)
      • Unicorn-20839.exe (PID: 7012)
      • Unicorn-31939.exe (PID: 7380)
      • Unicorn-41451.exe (PID: 8900)
      • Unicorn-973.exe (PID: 2088)
      • Unicorn-41451.exe (PID: 9056)
      • Unicorn-54663.exe (PID: 9148)
      • Unicorn-12369.exe (PID: 5624)
      • Unicorn-54663.exe (PID: 7216)
      • Unicorn-47263.exe (PID: 8120)
      • Unicorn-38903.exe (PID: 6112)
      • Unicorn-40958.exe (PID: 8240)
      • Unicorn-58939.exe (PID: 3332)
      • Unicorn-584.exe (PID: 9096)
      • Unicorn-34710.exe (PID: 6988)
      • Unicorn-39671.exe (PID: 6872)
      • Unicorn-63215.exe (PID: 6184)
      • Unicorn-30782.exe (PID: 8328)
      • Unicorn-39671.exe (PID: 9016)
      • Unicorn-55623.exe (PID: 5680)
      • Unicorn-56692.exe (PID: 7328)
      • Unicorn-30782.exe (PID: 9120)
      • Unicorn-57014.exe (PID: 9132)
      • Unicorn-60138.exe (PID: 2040)
      • Unicorn-40896.exe (PID: 4868)
      • Unicorn-58192.exe (PID: 7204)
      • Unicorn-50190.exe (PID: 1196)
      • Unicorn-26947.exe (PID: 4448)
      • Unicorn-31742.exe (PID: 8488)
      • Unicorn-50190.exe (PID: 8748)
      • Unicorn-221.exe (PID: 9112)
      • Unicorn-39749.exe (PID: 8632)
      • Unicorn-58031.exe (PID: 8600)
      • Unicorn-38426.exe (PID: 8768)
      • Unicorn-16475.exe (PID: 6228)
      • Unicorn-50190.exe (PID: 8504)
      • Unicorn-44134.exe (PID: 2420)
      • Unicorn-27710.exe (PID: 7548)
      • Unicorn-57751.exe (PID: 9044)
      • Unicorn-55530.exe (PID: 4188)
      • Unicorn-52982.exe (PID: 7912)
      • Unicorn-2328.exe (PID: 8380)
      • Unicorn-53283.exe (PID: 9192)
      • Unicorn-52982.exe (PID: 456)
      • Unicorn-9017.exe (PID: 7792)
      • Unicorn-18665.exe (PID: 7552)
      • Unicorn-6412.exe (PID: 7680)
      • Unicorn-21955.exe (PID: 2780)
      • Unicorn-51311.exe (PID: 4112)
      • Unicorn-14170.exe (PID: 4452)
      • Unicorn-25738.exe (PID: 8544)
      • Unicorn-46843.exe (PID: 8308)
      • Unicorn-958.exe (PID: 7636)
      • Unicorn-19215.exe (PID: 8608)
      • Unicorn-14170.exe (PID: 2800)
      • Unicorn-38928.exe (PID: 7692)
      • Unicorn-31083.exe (PID: 5772)
      • Unicorn-51311.exe (PID: 672)
      • Unicorn-35743.exe (PID: 3020)
      • Unicorn-61041.exe (PID: 8524)
      • Unicorn-48981.exe (PID: 7456)
      • Unicorn-34399.exe (PID: 8996)
      • Unicorn-6682.exe (PID: 8220)
      • Unicorn-10190.exe (PID: 2552)
      • Unicorn-30227.exe (PID: 7840)
      • Unicorn-6682.exe (PID: 1512)
      • Unicorn-64051.exe (PID: 5640)
      • Unicorn-54430.exe (PID: 4212)
      • Unicorn-16605.exe (PID: 8364)
      • Unicorn-27295.exe (PID: 7736)
      • Unicorn-55499.exe (PID: 5728)
      • Unicorn-35930.exe (PID: 3888)
      • Unicorn-27186.exe (PID: 5044)
      • Unicorn-2764.exe (PID: 9108)
      • Unicorn-7642.exe (PID: 8108)
      • Unicorn-11041.exe (PID: 8180)
      • Unicorn-27487.exe (PID: 8904)
      • Unicorn-61695.exe (PID: 7256)
      • Unicorn-2764.exe (PID: 7500)
      • Unicorn-3496.exe (PID: 736)
      • Unicorn-24939.exe (PID: 8164)
      • Unicorn-52458.exe (PID: 7652)
      • Unicorn-7341.exe (PID: 9100)
      • Unicorn-54103.exe (PID: 684)
      • Unicorn-60133.exe (PID: 7460)
      • Unicorn-61695.exe (PID: 8320)
      • Unicorn-24939.exe (PID: 4736)
      • Unicorn-3112.exe (PID: 5048)
      • Unicorn-55961.exe (PID: 7356)
      • Unicorn-3257.exe (PID: 4892)
      • Unicorn-22931.exe (PID: 7644)
      • Unicorn-12790.exe (PID: 1136)
      • Unicorn-65390.exe (PID: 7936)
      • Unicorn-2951.exe (PID: 4464)
      • Unicorn-27155.exe (PID: 8764)
      • Unicorn-42531.exe (PID: 2288)
      • Unicorn-46423.exe (PID: 7432)
      • Unicorn-21618.exe (PID: 9052)
      • Unicorn-9757.exe (PID: 9076)
      • Unicorn-27822.exe (PID: 7796)
      • Unicorn-27080.exe (PID: 9088)

    • Executable content was dropped or overwritten

      • Unicorn-34016.exe (PID: 3956)
      • 1 (149).exe (PID: 2136)
      • Unicorn-44234.exe (PID: 2108)
      • Unicorn-32536.exe (PID: 1164)
      • Unicorn-57420.exe (PID: 3008)
      • Unicorn-14996.exe (PID: 6540)
      • Unicorn-160.exe (PID: 6004)
      • Unicorn-15448.exe (PID: 5376)
      • Unicorn-60243.exe (PID: 3268)
      • Unicorn-16793.exe (PID: 6228)
      • Unicorn-43413.exe (PID: 1116)
      • Unicorn-63279.exe (PID: 4620)
      • Unicorn-22090.exe (PID: 7356)
      • Unicorn-9283.exe (PID: 7400)
      • Unicorn-1992.exe (PID: 7340)
      • Unicorn-15204.exe (PID: 7460)
      • Unicorn-41930.exe (PID: 7520)
      • Unicorn-17020.exe (PID: 7492)
      • Unicorn-897.exe (PID: 7512)
      • Unicorn-44623.exe (PID: 7552)
      • Unicorn-36824.exe (PID: 7708)
      • Unicorn-56559.exe (PID: 7772)
      • Unicorn-39599.exe (PID: 7792)
      • Unicorn-24655.exe (PID: 7780)
      • Unicorn-42745.exe (PID: 7896)
      • Unicorn-40668.exe (PID: 7840)
      • Unicorn-2371.exe (PID: 8096)
      • Unicorn-48557.exe (PID: 8108)
      • Unicorn-37928.exe (PID: 8144)
      • Unicorn-48448.exe (PID: 7208)
      • Unicorn-13507.exe (PID: 1020)
      • Unicorn-36388.exe (PID: 8180)
      • Unicorn-28582.exe (PID: 7036)
      • Unicorn-63414.exe (PID: 7236)
      • Unicorn-5230.exe (PID: 7604)
      • Unicorn-45900.exe (PID: 7224)
      • Unicorn-9636.exe (PID: 5504)
      • Unicorn-64073.exe (PID: 7820)
      • Unicorn-11795.exe (PID: 7928)
      • Unicorn-6725.exe (PID: 7000)
      • Unicorn-64073.exe (PID: 7744)
      • Unicorn-24925.exe (PID: 4040)
      • Unicorn-18594.exe (PID: 8176)
      • Unicorn-37644.exe (PID: 4152)
      • Unicorn-61655.exe (PID: 7960)
      • Unicorn-16840.exe (PID: 6488)
      • Unicorn-41126.exe (PID: 5216)
      • Unicorn-51432.exe (PID: 7640)
      • Unicorn-51432.exe (PID: 7464)
      • Unicorn-18568.exe (PID: 7300)
      • Unicorn-51432.exe (PID: 7408)
      • Unicorn-45101.exe (PID: 7620)
      • Unicorn-22028.exe (PID: 7656)
      • Unicorn-15971.exe (PID: 4300)
      • Unicorn-61087.exe (PID: 7280)
      • Unicorn-56092.exe (PID: 7972)
      • Unicorn-15971.exe (PID: 7788)
      • Unicorn-6904.exe (PID: 1760)
      • Unicorn-58998.exe (PID: 7828)
      • Unicorn-40667.exe (PID: 7964)
      • Unicorn-18851.exe (PID: 7624)
      • Unicorn-18851.exe (PID: 7592)
      • Unicorn-59634.exe (PID: 7540)
      • Unicorn-27512.exe (PID: 7712)
      • Unicorn-16412.exe (PID: 7904)
      • Unicorn-42203.exe (PID: 7852)
      • Unicorn-21482.exe (PID: 6048)
      • Unicorn-28555.exe (PID: 7884)
      • Unicorn-54045.exe (PID: 7528)
      • Unicorn-25758.exe (PID: 7860)
      • Unicorn-44123.exe (PID: 5116)
      • Unicorn-39930.exe (PID: 5800)
      • Unicorn-17263.exe (PID: 7156)
      • Unicorn-44699.exe (PID: 5364)
      • Unicorn-32447.exe (PID: 7720)
      • Unicorn-13178.exe (PID: 5232)
      • Unicorn-542.exe (PID: 2416)
      • Unicorn-22847.exe (PID: 8052)
      • Unicorn-59110.exe (PID: 6404)
      • Unicorn-7854.exe (PID: 7892)
      • Unicorn-6655.exe (PID: 1628)
      • Unicorn-21394.exe (PID: 6208)
      • Unicorn-43158.exe (PID: 3176)
      • Unicorn-45379.exe (PID: 7144)
      • Unicorn-31674.exe (PID: 8148)
      • Unicorn-51793.exe (PID: 7184)
      • Unicorn-28742.exe (PID: 744)
      • Unicorn-8814.exe (PID: 5204)
      • Unicorn-44673.exe (PID: 7544)
      • Unicorn-22629.exe (PID: 7932)
      • Unicorn-24850.exe (PID: 8288)
      • Unicorn-61523.exe (PID: 7232)
      • Unicorn-56453.exe (PID: 8228)
      • Unicorn-3168.exe (PID: 8212)
      • Unicorn-63251.exe (PID: 8604)
      • Unicorn-21896.exe (PID: 8484)
      • Unicorn-59421.exe (PID: 8760)
      • Unicorn-3168.exe (PID: 8244)
      • Unicorn-44886.exe (PID: 8424)
      • Unicorn-6458.exe (PID: 8720)
      • Unicorn-44455.exe (PID: 8468)
      • Unicorn-59250.exe (PID: 8680)
      • Unicorn-29318.exe (PID: 8568)
      • Unicorn-48477.exe (PID: 8856)
      • Unicorn-3272.exe (PID: 9172)
      • Unicorn-59250.exe (PID: 8692)
      • Unicorn-13386.exe (PID: 8952)
      • Unicorn-3438.exe (PID: 7632)
      • Unicorn-63822.exe (PID: 7404)
      • Unicorn-5218.exe (PID: 8940)
      • Unicorn-49131.exe (PID: 8756)
      • Unicorn-49131.exe (PID: 6512)
      • Unicorn-61959.exe (PID: 1452)
      • Unicorn-61575.exe (PID: 8384)
      • Unicorn-52831.exe (PID: 8616)
      • Unicorn-9214.exe (PID: 6700)
      • Unicorn-52037.exe (PID: 9012)
      • Unicorn-1238.exe (PID: 7496)
      • Unicorn-4590.exe (PID: 680)
      • Unicorn-41202.exe (PID: 8112)
      • Unicorn-41202.exe (PID: 7564)
      • Unicorn-34487.exe (PID: 8968)
      • Unicorn-51399.exe (PID: 8560)
      • Unicorn-59375.exe (PID: 8712)
      • Unicorn-28601.exe (PID: 4756)
      • Unicorn-51399.exe (PID: 7488)
      • Unicorn-51399.exe (PID: 7628)
      • Unicorn-16179.exe (PID: 7264)
      • Unicorn-28601.exe (PID: 4220)
      • Unicorn-28601.exe (PID: 7976)
      • Unicorn-31363.exe (PID: 9208)
      • Unicorn-20839.exe (PID: 7012)
      • Unicorn-973.exe (PID: 2088)
      • Unicorn-31939.exe (PID: 7380)
      • Unicorn-54663.exe (PID: 9148)
      • Unicorn-54663.exe (PID: 7216)
      • Unicorn-12369.exe (PID: 5624)
      • Unicorn-38903.exe (PID: 6112)
      • Unicorn-40958.exe (PID: 8240)
      • Unicorn-47263.exe (PID: 8120)
      • Unicorn-39671.exe (PID: 6872)
      • Unicorn-39671.exe (PID: 9016)
      • Unicorn-63215.exe (PID: 6184)
      • Unicorn-30782.exe (PID: 8328)
      • Unicorn-58145.exe (PID: 7268)
      • Unicorn-58939.exe (PID: 3332)
      • Unicorn-584.exe (PID: 9096)
      • Unicorn-55623.exe (PID: 5680)
      • Unicorn-40896.exe (PID: 4868)
      • Unicorn-56692.exe (PID: 7328)
      • Unicorn-30782.exe (PID: 9120)
      • Unicorn-16475.exe (PID: 6228)
      • Unicorn-221.exe (PID: 9112)
      • Unicorn-58192.exe (PID: 7204)
      • Unicorn-31742.exe (PID: 8488)
      • Unicorn-50190.exe (PID: 8748)
      • Unicorn-50190.exe (PID: 8504)
      • Unicorn-50190.exe (PID: 1196)
      • Unicorn-39749.exe (PID: 8632)
      • Unicorn-38426.exe (PID: 8768)
      • Unicorn-58031.exe (PID: 8600)
      • Unicorn-44134.exe (PID: 2420)
      • Unicorn-27710.exe (PID: 7548)
      • Unicorn-52982.exe (PID: 7912)
      • Unicorn-57751.exe (PID: 9044)
      • Unicorn-18665.exe (PID: 7552)
      • Unicorn-55530.exe (PID: 4188)
      • Unicorn-58711.exe (PID: 8196)
      • Unicorn-52982.exe (PID: 456)
      • Unicorn-6412.exe (PID: 7680)
      • Unicorn-53283.exe (PID: 9192)
      • Unicorn-9017.exe (PID: 7792)
      • Unicorn-9126.exe (PID: 8156)
      • Unicorn-2328.exe (PID: 8380)
      • Unicorn-51311.exe (PID: 4112)
      • Unicorn-21955.exe (PID: 2780)
      • Unicorn-25738.exe (PID: 8544)
      • Unicorn-34399.exe (PID: 8996)
      • Unicorn-46843.exe (PID: 8308)
      • Unicorn-32645.exe (PID: 8732)
      • Unicorn-958.exe (PID: 7636)
      • Unicorn-35743.exe (PID: 3020)
      • Unicorn-38928.exe (PID: 7692)
      • Unicorn-61041.exe (PID: 8524)
      • Unicorn-31083.exe (PID: 5772)
      • Unicorn-48981.exe (PID: 7456)
      • Unicorn-6682.exe (PID: 8220)
      • Unicorn-10190.exe (PID: 2552)
      • Unicorn-6682.exe (PID: 1512)
      • Unicorn-64051.exe (PID: 5640)
      • Unicorn-30227.exe (PID: 7840)
      • Unicorn-55499.exe (PID: 5728)
      • Unicorn-16605.exe (PID: 8364)
      • Unicorn-27295.exe (PID: 7736)
      • Unicorn-27487.exe (PID: 8904)
      • Unicorn-54430.exe (PID: 4212)
      • Unicorn-35930.exe (PID: 3888)
      • Unicorn-2764.exe (PID: 9108)
      • Unicorn-7642.exe (PID: 8108)
      • Unicorn-61695.exe (PID: 8320)
      • Unicorn-11041.exe (PID: 8180)
      • Unicorn-60133.exe (PID: 7460)
      • Unicorn-27186.exe (PID: 5044)
      • Unicorn-61695.exe (PID: 7256)
      • Unicorn-2764.exe (PID: 7500)
      • Unicorn-3496.exe (PID: 736)
      • Unicorn-24939.exe (PID: 8164)
      • Unicorn-52458.exe (PID: 7652)
      • Unicorn-7341.exe (PID: 9100)
      • Unicorn-24939.exe (PID: 4736)
      • Unicorn-3257.exe (PID: 4892)
      • Unicorn-22931.exe (PID: 7644)
      • Unicorn-55961.exe (PID: 7356)
      • Unicorn-65390.exe (PID: 7936)
      • Unicorn-2951.exe (PID: 4464)
      • Unicorn-37788.exe (PID: 1324)
      • Unicorn-3112.exe (PID: 5048)
      • Unicorn-42531.exe (PID: 2288)
      • Unicorn-9757.exe (PID: 9076)
      • Unicorn-21618.exe (PID: 9052)
      • Unicorn-27822.exe (PID: 7796)
      • Unicorn-27080.exe (PID: 9088)
      • Unicorn-24999.exe (PID: 9000)
      • Unicorn-34297.exe (PID: 2596)
      • Unicorn-27155.exe (PID: 8764)
      • Unicorn-46423.exe (PID: 7432)

    • Executes application which crashes

      • 1 (149).exe (PID: 2136)
      • Unicorn-34016.exe (PID: 3956)
      • Unicorn-32536.exe (PID: 1164)
      • Unicorn-44234.exe (PID: 2108)
      • Unicorn-160.exe (PID: 6004)
      • Unicorn-14996.exe (PID: 6540)
      • Unicorn-57420.exe (PID: 3008)
      • Unicorn-15448.exe (PID: 5376)
      • Unicorn-16793.exe (PID: 6228)
      • Unicorn-63279.exe (PID: 4620)
      • Unicorn-22090.exe (PID: 7356)
      • Unicorn-17020.exe (PID: 7492)
      • Unicorn-43413.exe (PID: 1116)
      • Unicorn-40668.exe (PID: 7840)
      • Unicorn-2371.exe (PID: 8096)
      • Unicorn-48557.exe (PID: 8108)
      • Unicorn-37928.exe (PID: 8144)
      • Unicorn-63414.exe (PID: 7236)
      • Unicorn-5230.exe (PID: 7604)
      • Unicorn-61655.exe (PID: 7960)
      • Unicorn-41126.exe (PID: 5216)
      • Unicorn-41126.exe (PID: 4812)
      • Unicorn-18568.exe (PID: 7300)
      • Unicorn-58998.exe (PID: 7828)
      • Unicorn-15971.exe (PID: 7788)
      • Unicorn-54045.exe (PID: 7528)
      • Unicorn-25758.exe (PID: 7860)
      • Unicorn-44699.exe (PID: 5364)
      • Unicorn-7854.exe (PID: 7892)
      • Unicorn-18851.exe (PID: 7592)
      • Unicorn-28555.exe (PID: 7884)
      • Unicorn-43651.exe (PID: 6036)
      • Unicorn-44673.exe (PID: 7544)
      • Unicorn-28742.exe (PID: 744)
      • Unicorn-22629.exe (PID: 7932)
      • Unicorn-24850.exe (PID: 8288)
      • Unicorn-3272.exe (PID: 9172)
      • Unicorn-19692.exe (PID: 8360)
      • Unicorn-3438.exe (PID: 7632)
      • Unicorn-5218.exe (PID: 8940)
      • Unicorn-52831.exe (PID: 8616)
      • Unicorn-61575.exe (PID: 8384)
      • Unicorn-9214.exe (PID: 6700)
      • Unicorn-61959.exe (PID: 1452)
      • Unicorn-29173.exe (PID: 8888)
      • Unicorn-40958.exe (PID: 8240)
      • Unicorn-38903.exe (PID: 6112)
      • Unicorn-39671.exe (PID: 6872)
      • Unicorn-39671.exe (PID: 9016)
      • Unicorn-16475.exe (PID: 6228)
      • Unicorn-27710.exe (PID: 7548)
      • Unicorn-52982.exe (PID: 7912)
      • Unicorn-58711.exe (PID: 8196)
      • Unicorn-39168.exe (PID: 8620)
      • Unicorn-9126.exe (PID: 8156)
      • Unicorn-57751.exe (PID: 9044)
      • Unicorn-53283.exe (PID: 9192)
      • Unicorn-958.exe (PID: 7636)
      • Unicorn-38928.exe (PID: 7692)
      • Unicorn-2328.exe (PID: 8380)
      • Unicorn-6412.exe (PID: 7680)
      • Unicorn-48981.exe (PID: 7456)
      • Unicorn-6682.exe (PID: 8220)
      • Unicorn-30227.exe (PID: 7840)
      • Unicorn-10190.exe (PID: 2552)
      • Unicorn-64051.exe (PID: 5640)
      • Unicorn-35930.exe (PID: 3888)
      • Unicorn-2764.exe (PID: 9108)
      • Unicorn-27487.exe (PID: 8904)
      • Unicorn-27295.exe (PID: 7736)
      • Unicorn-27186.exe (PID: 5044)
      • Unicorn-7642.exe (PID: 8108)

  • INFO

    • Reads the computer name

      • 1 (149).exe (PID: 2136)
      • Unicorn-34016.exe (PID: 3956)
      • Unicorn-160.exe (PID: 6004)
      • Unicorn-32536.exe (PID: 1164)
      • Unicorn-44234.exe (PID: 2108)
      • Unicorn-57420.exe (PID: 3008)
      • Unicorn-15448.exe (PID: 5376)
      • Unicorn-60243.exe (PID: 3268)
      • Unicorn-16793.exe (PID: 6228)
      • Unicorn-14996.exe (PID: 6540)
      • Unicorn-43413.exe (PID: 1116)
      • Unicorn-63279.exe (PID: 4620)
      • Unicorn-15204.exe (PID: 7460)
      • Unicorn-22090.exe (PID: 7356)
      • Unicorn-1992.exe (PID: 7340)
      • Unicorn-9283.exe (PID: 7400)
      • Unicorn-17020.exe (PID: 7492)
      • Unicorn-897.exe (PID: 7512)
      • Unicorn-44623.exe (PID: 7552)
      • Unicorn-39599.exe (PID: 7792)
      • Unicorn-43491.exe (PID: 7912)
      • Unicorn-40668.exe (PID: 7840)
      • Unicorn-48448.exe (PID: 7208)
      • Unicorn-57794.exe (PID: 8136)
      • Unicorn-36388.exe (PID: 8180)
      • Unicorn-7368.exe (PID: 7596)
      • Unicorn-39014.exe (PID: 8068)
      • Unicorn-11795.exe (PID: 7928)
      • Unicorn-37644.exe (PID: 4152)
      • Unicorn-61655.exe (PID: 7960)
      • Unicorn-41126.exe (PID: 5216)
      • Unicorn-15971.exe (PID: 4300)
      • Unicorn-45101.exe (PID: 7620)
      • Unicorn-6904.exe (PID: 1760)
      • Unicorn-58998.exe (PID: 7828)
      • Unicorn-42203.exe (PID: 7852)
      • Unicorn-16412.exe (PID: 7904)
      • Unicorn-7854.exe (PID: 7892)
      • Unicorn-59110.exe (PID: 6404)
      • Unicorn-43158.exe (PID: 3176)
      • Unicorn-45379.exe (PID: 7144)
      • Unicorn-22629.exe (PID: 7932)
      • Unicorn-44673.exe (PID: 7544)
      • Unicorn-60106.exe (PID: 8528)
      • Unicorn-48477.exe (PID: 8856)
      • Unicorn-51399.exe (PID: 8560)
      • Unicorn-28601.exe (PID: 7976)
      • Unicorn-20839.exe (PID: 7012)
      • Unicorn-12369.exe (PID: 5624)
      • Unicorn-55623.exe (PID: 5680)
      • Unicorn-51311.exe (PID: 672)
      • Unicorn-32645.exe (PID: 8732)
      • Unicorn-61695.exe (PID: 8320)
      • Unicorn-61695.exe (PID: 7256)
      • Unicorn-3112.exe (PID: 5048)

    • The sample compiled with chinese language support

      • 1 (149).exe (PID: 2136)

    • Checks supported languages

      • 1 (149).exe (PID: 2136)
      • Unicorn-34016.exe (PID: 3956)
      • Unicorn-32536.exe (PID: 1164)
      • Unicorn-57420.exe (PID: 3008)
      • Unicorn-160.exe (PID: 6004)
      • Unicorn-44234.exe (PID: 2108)
      • Unicorn-14996.exe (PID: 6540)
      • Unicorn-60243.exe (PID: 3268)
      • Unicorn-63279.exe (PID: 4620)
      • Unicorn-43413.exe (PID: 1116)
      • Unicorn-15448.exe (PID: 5376)
      • Unicorn-16793.exe (PID: 6228)
      • Unicorn-1992.exe (PID: 7340)
      • Unicorn-9283.exe (PID: 7400)
      • Unicorn-22090.exe (PID: 7356)
      • Unicorn-17020.exe (PID: 7492)
      • Unicorn-897.exe (PID: 7512)
      • Unicorn-41930.exe (PID: 7520)
      • Unicorn-44623.exe (PID: 7552)
      • Unicorn-15204.exe (PID: 7460)
      • Unicorn-36824.exe (PID: 7708)
      • Unicorn-56559.exe (PID: 7772)
      • Unicorn-39599.exe (PID: 7792)
      • Unicorn-40668.exe (PID: 7840)
      • Unicorn-42745.exe (PID: 7896)
      • Unicorn-43491.exe (PID: 7912)
      • Unicorn-2371.exe (PID: 8096)
      • Unicorn-48557.exe (PID: 8108)
      • Unicorn-37928.exe (PID: 8144)
      • Unicorn-13507.exe (PID: 1020)
      • Unicorn-36388.exe (PID: 8180)
      • Unicorn-28582.exe (PID: 7036)
      • Unicorn-48448.exe (PID: 7208)
      • Unicorn-63414.exe (PID: 7236)
      • Unicorn-45900.exe (PID: 7224)
      • Unicorn-64073.exe (PID: 7820)
      • Unicorn-48593.exe (PID: 7432)
      • Unicorn-64073.exe (PID: 7744)
      • Unicorn-39014.exe (PID: 8068)
      • Unicorn-11795.exe (PID: 7928)
      • Unicorn-18594.exe (PID: 8176)
      • Unicorn-61655.exe (PID: 7960)
      • Unicorn-6725.exe (PID: 7000)
      • Unicorn-51432.exe (PID: 7464)
      • Unicorn-58998.exe (PID: 7828)
      • Unicorn-56092.exe (PID: 7972)
      • Unicorn-40667.exe (PID: 7964)
      • Unicorn-42203.exe (PID: 7852)
      • Unicorn-18851.exe (PID: 7624)
      • Unicorn-21482.exe (PID: 6048)
      • Unicorn-16412.exe (PID: 7904)
      • Unicorn-44699.exe (PID: 5364)
      • Unicorn-13178.exe (PID: 6388)
      • Unicorn-43158.exe (PID: 3176)
      • Unicorn-31975.exe (PID: 7648)
      • Unicorn-20443.exe (PID: 8372)
      • Unicorn-44886.exe (PID: 8424)
      • Unicorn-60106.exe (PID: 8528)
      • Unicorn-29318.exe (PID: 8568)
      • Unicorn-62820.exe (PID: 8628)
      • Unicorn-62820.exe (PID: 8644)
      • Unicorn-5218.exe (PID: 8940)
      • Unicorn-59250.exe (PID: 8692)
      • Unicorn-16267.exe (PID: 2340)
      • Unicorn-52037.exe (PID: 9012)
      • Unicorn-31939.exe (PID: 7380)
      • Unicorn-34710.exe (PID: 6988)
      • Unicorn-57014.exe (PID: 9132)
      • Unicorn-44134.exe (PID: 2420)
      • Unicorn-958.exe (PID: 7636)
      • Unicorn-52982.exe (PID: 456)
      • Unicorn-51311.exe (PID: 672)
      • Unicorn-14170.exe (PID: 2800)
      • Unicorn-64051.exe (PID: 5640)
      • Unicorn-27295.exe (PID: 7736)
      • Unicorn-52458.exe (PID: 7652)
      • Unicorn-3257.exe (PID: 4892)
      • Unicorn-65390.exe (PID: 7936)

    • Create files in a temporary directory

      • 1 (149).exe (PID: 2136)
      • Unicorn-34016.exe (PID: 3956)
      • Unicorn-44234.exe (PID: 2108)
      • Unicorn-32536.exe (PID: 1164)
      • Unicorn-160.exe (PID: 6004)
      • Unicorn-43413.exe (PID: 1116)
      • Unicorn-14996.exe (PID: 6540)
      • Unicorn-22090.exe (PID: 7356)
      • Unicorn-57420.exe (PID: 3008)
      • Unicorn-1992.exe (PID: 7340)
      • Unicorn-15448.exe (PID: 5376)
      • Unicorn-60243.exe (PID: 3268)
      • Unicorn-15204.exe (PID: 7460)
      • Unicorn-16793.exe (PID: 6228)
      • Unicorn-41930.exe (PID: 7520)
      • Unicorn-17020.exe (PID: 7492)
      • Unicorn-897.exe (PID: 7512)
      • Unicorn-63279.exe (PID: 4620)
      • Unicorn-44623.exe (PID: 7552)
      • Unicorn-36824.exe (PID: 7708)
      • Unicorn-56559.exe (PID: 7772)
      • Unicorn-39599.exe (PID: 7792)
      • Unicorn-24655.exe (PID: 7780)
      • Unicorn-42745.exe (PID: 7896)
      • Unicorn-9283.exe (PID: 7400)
      • Unicorn-40668.exe (PID: 7840)
      • Unicorn-2371.exe (PID: 8096)
      • Unicorn-48557.exe (PID: 8108)
      • Unicorn-37928.exe (PID: 8144)
      • Unicorn-48448.exe (PID: 7208)
      • Unicorn-36388.exe (PID: 8180)
      • Unicorn-28582.exe (PID: 7036)
      • Unicorn-63414.exe (PID: 7236)
      • Unicorn-5230.exe (PID: 7604)
      • Unicorn-13507.exe (PID: 1020)
      • Unicorn-9636.exe (PID: 5504)
      • Unicorn-45900.exe (PID: 7224)
      • Unicorn-64073.exe (PID: 7820)
      • Unicorn-24925.exe (PID: 4040)
      • Unicorn-11795.exe (PID: 7928)
      • Unicorn-6725.exe (PID: 7000)
      • Unicorn-18594.exe (PID: 8176)
      • Unicorn-64073.exe (PID: 7744)
      • Unicorn-37644.exe (PID: 4152)
      • Unicorn-16840.exe (PID: 6488)
      • Unicorn-61655.exe (PID: 7960)
      • Unicorn-41126.exe (PID: 5216)
      • Unicorn-18568.exe (PID: 7300)
      • Unicorn-51432.exe (PID: 7640)
      • Unicorn-51432.exe (PID: 7464)
      • Unicorn-15971.exe (PID: 4300)
      • Unicorn-56092.exe (PID: 7972)
      • Unicorn-61087.exe (PID: 7280)
      • Unicorn-45101.exe (PID: 7620)
      • Unicorn-51432.exe (PID: 7408)
      • Unicorn-22028.exe (PID: 7656)
      • Unicorn-6904.exe (PID: 1760)
      • Unicorn-58998.exe (PID: 7828)
      • Unicorn-18851.exe (PID: 7624)
      • Unicorn-18851.exe (PID: 7592)
      • Unicorn-40667.exe (PID: 7964)
      • Unicorn-16412.exe (PID: 7904)
      • Unicorn-27512.exe (PID: 7712)
      • Unicorn-42203.exe (PID: 7852)
      • Unicorn-25758.exe (PID: 7860)
      • Unicorn-44123.exe (PID: 5116)
      • Unicorn-15971.exe (PID: 7788)
      • Unicorn-39930.exe (PID: 5800)
      • Unicorn-17263.exe (PID: 7156)
      • Unicorn-44699.exe (PID: 5364)
      • Unicorn-54045.exe (PID: 7528)
      • Unicorn-13178.exe (PID: 5232)
      • Unicorn-542.exe (PID: 2416)
      • Unicorn-59634.exe (PID: 7540)
      • Unicorn-22847.exe (PID: 8052)
      • Unicorn-21394.exe (PID: 6208)
      • Unicorn-32447.exe (PID: 7720)
      • Unicorn-43158.exe (PID: 3176)
      • Unicorn-59110.exe (PID: 6404)
      • Unicorn-6655.exe (PID: 1628)
      • Unicorn-7854.exe (PID: 7892)
      • Unicorn-21482.exe (PID: 6048)
      • Unicorn-45379.exe (PID: 7144)
      • Unicorn-28555.exe (PID: 7884)
      • Unicorn-51793.exe (PID: 7184)
      • Unicorn-31674.exe (PID: 8148)
      • Unicorn-8814.exe (PID: 5204)
      • Unicorn-44673.exe (PID: 7544)
      • Unicorn-22629.exe (PID: 7932)
      • Unicorn-28742.exe (PID: 744)
      • Unicorn-24850.exe (PID: 8288)
      • Unicorn-3168.exe (PID: 8212)
      • Unicorn-56453.exe (PID: 8228)
      • Unicorn-61523.exe (PID: 7232)
      • Unicorn-3168.exe (PID: 8244)
      • Unicorn-21896.exe (PID: 8484)
      • Unicorn-59421.exe (PID: 8760)
      • Unicorn-44886.exe (PID: 8424)
      • Unicorn-6458.exe (PID: 8720)
      • Unicorn-59250.exe (PID: 8680)
      • Unicorn-59250.exe (PID: 8692)
      • Unicorn-29318.exe (PID: 8568)
      • Unicorn-44455.exe (PID: 8468)
      • Unicorn-13386.exe (PID: 8952)
      • Unicorn-3272.exe (PID: 9172)
      • Unicorn-5218.exe (PID: 8940)
      • Unicorn-48477.exe (PID: 8856)
      • Unicorn-3438.exe (PID: 7632)
      • Unicorn-19692.exe (PID: 8360)
      • Unicorn-63251.exe (PID: 8604)
      • Unicorn-49131.exe (PID: 6512)
      • Unicorn-52831.exe (PID: 8616)
      • Unicorn-61575.exe (PID: 8384)
      • Unicorn-61959.exe (PID: 1452)
      • Unicorn-9214.exe (PID: 6700)
      • Unicorn-49131.exe (PID: 8756)
      • Unicorn-41202.exe (PID: 7564)
      • Unicorn-52037.exe (PID: 9012)
      • Unicorn-1238.exe (PID: 7496)
      • Unicorn-41202.exe (PID: 8112)
      • Unicorn-51399.exe (PID: 7488)
      • Unicorn-4590.exe (PID: 680)
      • Unicorn-51399.exe (PID: 7628)
      • Unicorn-34487.exe (PID: 8968)
      • Unicorn-59375.exe (PID: 8712)
      • Unicorn-28601.exe (PID: 4756)
      • Unicorn-51399.exe (PID: 8560)
      • Unicorn-16179.exe (PID: 7264)
      • Unicorn-28601.exe (PID: 7976)
      • Unicorn-28601.exe (PID: 4220)
      • Unicorn-31363.exe (PID: 9208)
      • Unicorn-31939.exe (PID: 7380)
      • Unicorn-20839.exe (PID: 7012)
      • Unicorn-973.exe (PID: 2088)
      • Unicorn-54663.exe (PID: 9148)
      • Unicorn-12369.exe (PID: 5624)
      • Unicorn-54663.exe (PID: 7216)
      • Unicorn-40958.exe (PID: 8240)
      • Unicorn-38903.exe (PID: 6112)
      • Unicorn-584.exe (PID: 9096)
      • Unicorn-58939.exe (PID: 3332)
      • Unicorn-39671.exe (PID: 9016)
      • Unicorn-63215.exe (PID: 6184)
      • Unicorn-58145.exe (PID: 7268)
      • Unicorn-47263.exe (PID: 8120)
      • Unicorn-39671.exe (PID: 6872)
      • Unicorn-55623.exe (PID: 5680)
      • Unicorn-34710.exe (PID: 6988)
      • Unicorn-40896.exe (PID: 4868)
      • Unicorn-30782.exe (PID: 9120)
      • Unicorn-221.exe (PID: 9112)
      • Unicorn-56692.exe (PID: 7328)
      • Unicorn-31742.exe (PID: 8488)
      • Unicorn-50190.exe (PID: 8504)
      • Unicorn-50190.exe (PID: 1196)
      • Unicorn-58031.exe (PID: 8600)
      • Unicorn-39749.exe (PID: 8632)
      • Unicorn-16475.exe (PID: 6228)
      • Unicorn-44134.exe (PID: 2420)
      • Unicorn-57751.exe (PID: 9044)
      • Unicorn-27710.exe (PID: 7548)
      • Unicorn-55530.exe (PID: 4188)
      • Unicorn-6412.exe (PID: 7680)
      • Unicorn-53283.exe (PID: 9192)
      • Unicorn-52982.exe (PID: 456)
      • Unicorn-32645.exe (PID: 8732)
      • Unicorn-21955.exe (PID: 2780)
      • Unicorn-34399.exe (PID: 8996)
      • Unicorn-46843.exe (PID: 8308)
      • Unicorn-35743.exe (PID: 3020)
      • Unicorn-48981.exe (PID: 7456)
      • Unicorn-61041.exe (PID: 8524)
      • Unicorn-6682.exe (PID: 8220)
      • Unicorn-55499.exe (PID: 5728)

    • Creates files or folders in the user directory

      • WerFault.exe (PID: 2600)
      • WerFault.exe (PID: 7224)
      • WerFault.exe (PID: 7284)
      • WerFault.exe (PID: 6108)
      • WerFault.exe (PID: 7632)
      • WerFault.exe (PID: 7864)
      • WerFault.exe (PID: 7844)
      • WerFault.exe (PID: 2600)
      • WerFault.exe (PID: 8064)
      • WerFault.exe (PID: 8024)
      • WerFault.exe (PID: 8060)
      • WerFault.exe (PID: 6744)
      • WerFault.exe (PID: 7680)
      • WerFault.exe (PID: 7848)
      • WerFault.exe (PID: 7468)
      • WerFault.exe (PID: 680)
      • WerFault.exe (PID: 6944)
      • WerFault.exe (PID: 7368)
      • WerFault.exe (PID: 968)
      • WerFault.exe (PID: 7948)
      • WerFault.exe (PID: 7504)
      • WerFault.exe (PID: 7372)
      • WerFault.exe (PID: 3364)
      • WerFault.exe (PID: 8404)
      • WerFault.exe (PID: 9068)
      • WerFault.exe (PID: 9024)
      • WerFault.exe (PID: 9032)
      • WerFault.exe (PID: 9092)
      • WerFault.exe (PID: 5956)
      • WerFault.exe (PID: 8892)
      • WerFault.exe (PID: 8928)
      • WerFault.exe (PID: 3096)
      • WerFault.exe (PID: 9032)
      • WerFault.exe (PID: 8992)
      • WerFault.exe (PID: 456)
      • WerFault.exe (PID: 8272)
      • WerFault.exe (PID: 7876)
      • WerFault.exe (PID: 1056)
      • WerFault.exe (PID: 6676)
      • WerFault.exe (PID: 3768)
      • WerFault.exe (PID: 8160)
      • WerFault.exe (PID: 5952)
      • WerFault.exe (PID: 3976)
      • WerFault.exe (PID: 8736)
      • WerFault.exe (PID: 8152)
      • WerFault.exe (PID: 8452)
      • WerFault.exe (PID: 9028)
      • WerFault.exe (PID: 9200)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable Microsoft Visual Basic 6 (90.6)
.exe | Win32 Executable (generic) (4.9)
.exe | Generic Win/DOS Executable (2.2)
.exe | DOS Executable Generic (2.2)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:01:19 13:34:56+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 299008
UninitializedDataSize: -
EntryPoint: 0x13d4
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
InternalName: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
737
Monitored processes
367
Malicious processes
43
Suspicious processes
123

Behavior graph

Click at the process to see the details
start 1 (149).exe unicorn-34016.exe sppextcomobj.exe no specs slui.exe unicorn-44234.exe unicorn-32536.exe werfault.exe no specs unicorn-160.exe unicorn-57420.exe unicorn-14996.exe werfault.exe no specs unicorn-15448.exe unicorn-60243.exe unicorn-16793.exe unicorn-43413.exe unicorn-63279.exe werfault.exe no specs werfault.exe no specs unicorn-1992.exe unicorn-22090.exe unicorn-9283.exe unicorn-15204.exe unicorn-17020.exe unicorn-897.exe unicorn-41930.exe unicorn-44623.exe werfault.exe no specs unicorn-36824.exe unicorn-56559.exe unicorn-24655.exe unicorn-39599.exe unicorn-40668.exe werfault.exe no specs werfault.exe no specs unicorn-42745.exe unicorn-43491.exe no specs werfault.exe no specs unicorn-2371.exe unicorn-48557.exe unicorn-57794.exe no specs unicorn-37928.exe unicorn-36388.exe unicorn-13507.exe unicorn-28582.exe unicorn-48448.exe werfault.exe no specs unicorn-63414.exe unicorn-45900.exe unicorn-48593.exe no specs unicorn-55329.exe no specs unicorn-9636.exe unicorn-5230.exe unicorn-7368.exe no specs unicorn-64073.exe unicorn-64073.exe werfault.exe no specs werfault.exe no specs unicorn-24925.exe werfault.exe no specs werfault.exe no specs unicorn-39014.exe no specs unicorn-11795.exe unicorn-6725.exe unicorn-37644.exe unicorn-18594.exe unicorn-16840.exe unicorn-61655.exe unicorn-41126.exe unicorn-41126.exe unicorn-18568.exe unicorn-51432.exe unicorn-51432.exe unicorn-51432.exe werfault.exe no specs unicorn-45101.exe unicorn-22028.exe unicorn-56092.exe unicorn-58998.exe werfault.exe no specs unicorn-15971.exe unicorn-15971.exe unicorn-61087.exe werfault.exe no specs unicorn-40968.exe no specs unicorn-6904.exe unicorn-59634.exe werfault.exe no specs unicorn-40667.exe werfault.exe no specs unicorn-27512.exe unicorn-42203.exe unicorn-18851.exe unicorn-18851.exe werfault.exe no specs unicorn-21482.exe unicorn-25758.exe unicorn-44123.exe unicorn-16412.exe unicorn-54045.exe unicorn-28555.exe unicorn-39930.exe unicorn-32447.exe unicorn-44699.exe unicorn-17263.exe unicorn-13178.exe unicorn-13178.exe no specs unicorn-542.exe unicorn-22847.exe werfault.exe no specs werfault.exe no specs unicorn-21394.exe werfault.exe no specs unicorn-43158.exe werfault.exe no specs unicorn-43651.exe unicorn-59110.exe unicorn-7854.exe unicorn-6655.exe unicorn-31975.exe no specs unicorn-45379.exe unicorn-8814.exe unicorn-51793.exe unicorn-31674.exe unicorn-44673.exe unicorn-61523.exe unicorn-22629.exe unicorn-28742.exe unicorn-3168.exe unicorn-56453.exe unicorn-3168.exe unicorn-24850.exe unicorn-20443.exe no specs werfault.exe no specs unicorn-44886.exe unicorn-39733.exe no specs unicorn-44455.exe unicorn-21896.exe unicorn-29702.exe no specs unicorn-60106.exe no specs unicorn-29318.exe unicorn-63251.exe no specs unicorn-63251.exe unicorn-62820.exe no specs unicorn-62820.exe no specs unicorn-62820.exe no specs unicorn-59250.exe unicorn-59250.exe unicorn-15181.exe no specs unicorn-6458.exe unicorn-59421.exe unicorn-48477.exe unicorn-5218.exe unicorn-13386.exe werfault.exe no specs werfault.exe no specs werfault.exe no specs werfault.exe no specs unicorn-3272.exe unicorn-19692.exe unicorn-3438.exe unicorn-63822.exe unicorn-49131.exe unicorn-49131.exe unicorn-16267.exe no specs unicorn-61575.exe unicorn-52831.exe werfault.exe no specs werfault.exe no specs werfault.exe no specs unicorn-52037.exe unicorn-61959.exe werfault.exe no specs unicorn-4590.exe unicorn-9214.exe unicorn-5130.exe no specs unicorn-41202.exe unicorn-41202.exe unicorn-1238.exe unicorn-51399.exe unicorn-51399.exe unicorn-51399.exe unicorn-34487.exe unicorn-59375.exe unicorn-2582.exe no specs unicorn-31363.exe werfault.exe no specs unicorn-16179.exe unicorn-31939.exe unicorn-28601.exe unicorn-28601.exe unicorn-28601.exe werfault.exe no specs unicorn-973.exe unicorn-20839.exe unicorn-41451.exe no specs unicorn-41451.exe no specs werfault.exe no specs werfault.exe no specs unicorn-12369.exe unicorn-54663.exe unicorn-54663.exe unicorn-40958.exe unicorn-38903.exe unicorn-47263.exe unicorn-58939.exe unicorn-63215.exe unicorn-584.exe unicorn-39671.exe unicorn-39671.exe unicorn-58145.exe unicorn-34710.exe no specs unicorn-55623.exe unicorn-56692.exe unicorn-29173.exe unicorn-40896.exe unicorn-30782.exe unicorn-30782.exe unicorn-16475.exe unicorn-60138.exe no specs unicorn-58192.exe unicorn-31742.exe slui.exe no specs werfault.exe no specs unicorn-57014.exe no specs werfault.exe no specs werfault.exe no specs unicorn-221.exe unicorn-26947.exe no specs unicorn-50190.exe unicorn-50190.exe unicorn-50190.exe werfault.exe no specs unicorn-44134.exe unicorn-58031.exe unicorn-39749.exe werfault.exe no specs werfault.exe no specs werfault.exe no specs werfault.exe no specs unicorn-38426.exe unicorn-55530.exe unicorn-57751.exe unicorn-53283.exe unicorn-6412.exe unicorn-39168.exe unicorn-27710.exe unicorn-18665.exe unicorn-2328.exe unicorn-58711.exe unicorn-52982.exe unicorn-52982.exe unicorn-958.exe unicorn-9126.exe unicorn-9017.exe unicorn-14170.exe no specs unicorn-14170.exe no specs unicorn-32645.exe werfault.exe no specs unicorn-51311.exe no specs unicorn-51311.exe unicorn-25738.exe unicorn-21955.exe unicorn-34399.exe unicorn-61041.exe unicorn-46843.exe unicorn-19215.exe no specs unicorn-35743.exe unicorn-31083.exe unicorn-38928.exe unicorn-48981.exe werfault.exe no specs werfault.exe no specs werfault.exe no specs werfault.exe no specs unicorn-30227.exe unicorn-64051.exe unicorn-6682.exe unicorn-6682.exe unicorn-10190.exe unicorn-27295.exe unicorn-54430.exe unicorn-16605.exe unicorn-55499.exe unicorn-27487.exe unicorn-11041.exe unicorn-35930.exe unicorn-7642.exe unicorn-27186.exe unicorn-2764.exe unicorn-2764.exe unicorn-60133.exe unicorn-54103.exe no specs unicorn-7341.exe unicorn-61695.exe unicorn-24939.exe unicorn-61695.exe unicorn-24939.exe unicorn-52458.exe werfault.exe no specs unicorn-3496.exe unicorn-3112.exe unicorn-22931.exe werfault.exe no specs werfault.exe no specs werfault.exe no specs unicorn-3257.exe werfault.exe no specs unicorn-37788.exe unicorn-12790.exe no specs unicorn-55961.exe unicorn-46423.exe unicorn-65390.exe werfault.exe no specs werfault.exe no specs unicorn-2951.exe unicorn-21618.exe unicorn-42531.exe werfault.exe no specs unicorn-27155.exe werfault.exe no specs werfault.exe no specs werfault.exe no specs werfault.exe no specs unicorn-27080.exe unicorn-9757.exe werfault.exe no specs werfault.exe no specs unicorn-34297.exe unicorn-27822.exe unicorn-24999.exe werfault.exe no specs werfault.exe no specs unicorn-13862.exe no specs unicorn-33707.exe no specs unicorn-50811.exe no specs unicorn-12409.exe no specs werfault.exe no specs unicorn-57225.exe no specs unicorn-51195.exe no specs unicorn-4900.exe no specs unicorn-35819.exe no specs unicorn-51278.exe no specs unicorn-46810.exe no specs unicorn-46810.exe no specs werfault.exe no specs unicorn-8766.exe no specs unicorn-50375.exe no specs werfault.exe no specs unicorn-5066.exe no specs werfault.exe no specs unicorn-13810.exe no specs werfault.exe no specs unicorn-15071.exe no specs unicorn-15071.exe no specs unicorn-48704.exe no specs unicorn-6794.exe no specs werfault.exe no specs unicorn-33629.exe no specs unicorn-8055.exe no specs unicorn-56488.exe no specs unicorn-47635.exe no specs unicorn-26193.exe no specs unicorn-5196.exe no specs unicorn-56535.exe no specs unicorn-35129.exe no specs werfault.exe no specs unicorn-65471.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
456C:\WINDOWS\SysWOW64\WerFault.exe -u -p 744 -s 704C:\Windows\SysWOW64\WerFault.exe—Unicorn-28742.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Problem Reporting
Exit code:
0
Version:
10.0.19041.3996 (WinBuild.160101.0800)
Modules
Images
c:\windows\syswow64\werfault.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\msvcrt.dll
c:\windows\syswow64\combase.dll
456C:\Users\admin\AppData\Local\Temp\Unicorn-52982.exeC:\Users\admin\AppData\Local\Temp\Unicorn-52982.exe
Unicorn-34710.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Exit code:
0
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-52982.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
516C:\Users\admin\AppData\Local\Temp\Unicorn-13810.exeC:\Users\admin\AppData\Local\Temp\Unicorn-13810.exe—Unicorn-55961.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
672C:\Users\admin\AppData\Local\Temp\Unicorn-51311.exeC:\Users\admin\AppData\Local\Temp\Unicorn-51311.exe—Unicorn-26947.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Exit code:
0
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-51311.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
680C:\WINDOWS\SysWOW64\WerFault.exe -u -p 8144 -s 680C:\Windows\SysWOW64\WerFault.exe—Unicorn-37928.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Problem Reporting
Exit code:
0
Version:
10.0.19041.3996 (WinBuild.160101.0800)
Modules
Images
c:\windows\syswow64\werfault.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\msvcrt.dll
c:\windows\syswow64\combase.dll
680C:\Users\admin\AppData\Local\Temp\Unicorn-4590.exeC:\Users\admin\AppData\Local\Temp\Unicorn-4590.exe
Unicorn-21896.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Exit code:
0
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-4590.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
684C:\Users\admin\AppData\Local\Temp\Unicorn-54103.exeC:\Users\admin\AppData\Local\Temp\Unicorn-54103.exe—Unicorn-25738.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-54103.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
736C:\Users\admin\AppData\Local\Temp\Unicorn-3496.exeC:\Users\admin\AppData\Local\Temp\Unicorn-3496.exe
Unicorn-38928.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-3496.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
744C:\Users\admin\AppData\Local\Temp\Unicorn-28742.exeC:\Users\admin\AppData\Local\Temp\Unicorn-28742.exe
Unicorn-17263.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Exit code:
0
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-28742.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
856C:\WINDOWS\SysWOW64\WerFault.exe -u -p 7692 -s 688C:\Windows\SysWOW64\WerFault.exe—Unicorn-38928.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Problem Reporting
Exit code:
0
Version:
10.0.19041.3996 (WinBuild.160101.0800)
Modules
Images
c:\windows\syswow64\werfault.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\msvcrt.dll
c:\windows\syswow64\combase.dll
Total events
110 123
Read events
110 123
Write events
0
Delete events
0

Modification events

No data
Executable files
259
Suspicious files
160
Text files
55
Unknown types
2

Dropped files

PID
Process
Filename
Type
2600WerFault.exeC:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_1 (149).exe_2336b8bf5c246827cc9417dfd5e56d141e8b536_665255f1_b9986a97-e327-43b3-8c0f-68aa0f2be619\Report.wer —
MD5:—
SHA256:—
6108WerFault.exeC:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Unicorn-34016.ex_1320e2123d915f9ab745067a61c9119c6623_c95b9571_01b59542-3f86-4f0a-bb98-d354a25d3cd6\Report.wer —
MD5:—
SHA256:—
1164Unicorn-32536.exeC:\Users\admin\AppData\Local\Temp\Unicorn-60243.exeexecutable
MD5:9E9CBFC2D57A1BB7AA2F939171F258B0
SHA256:22302E3CCD7C95039F1A40365FDF6B2D466BF2B54876707693FEDAC4937D246C
21361 (149).exeC:\Users\admin\AppData\Local\Temp\Unicorn-34016.exeexecutable
MD5:E75EE117C9ED38156B640FB138CD338A
SHA256:6064BB3BD5AE48D1703B9D7C5D0A07958142EF7E4D4DD70436D1C2F6BE386D4A
21361 (149).exeC:\Users\admin\AppData\Local\Temp\Unicorn-32536.exeexecutable
MD5:79F1E9AC7AEA01C0F94413145FC0C9E6
SHA256:1D3A09879260D1C2289FA6BBEACD26CA3137E710391738CED21DF470E66DBA8D
3956Unicorn-34016.exeC:\Users\admin\AppData\Local\Temp\Unicorn-14996.exeexecutable
MD5:C15E0C6B36897E8B1516E3231DEC798B
SHA256:AE28DA5A09F44A21C054A21AC8678540D59DC6A938DF10736A356E630A2BBF71
2108Unicorn-44234.exeC:\Users\admin\AppData\Local\Temp\Unicorn-57420.exeexecutable
MD5:AD33E7431A39C7353ADD745B2407C2E8
SHA256:2DB4600AD94B96137FC1054FAD8C7A38B6B0217110FA2F1F77D4D2BCB97E79C3
3956Unicorn-34016.exeC:\Users\admin\AppData\Local\Temp\Unicorn-44234.exeexecutable
MD5:85BF32AB754A7CC3FDB6E9090D5B45E5
SHA256:CDE87C3FCE5EAB229170183D19DEB36A0912F4C5E9CF960998D0443A0E994348
1164Unicorn-32536.exeC:\Users\admin\AppData\Local\Temp\Unicorn-160.exeexecutable
MD5:F9AC9AD07D4BCF6F706F108EFF266332
SHA256:B642117591A57348A85E8460531654E0DA9058E89220654C6708A5DF596A055B
2108Unicorn-44234.exeC:\Users\admin\AppData\Local\Temp\Unicorn-43413.exeexecutable
MD5:9A00A4C571C922842886F5241BAF2B2F
SHA256:436322FC8CF80D4FEFFDBD8B8844A6AE2B2A9371A548EDAA082CE4602063B57F
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
7
TCP/UDP connections
30
DNS requests
17
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
5496
MoUsoCoreWorker.exe
GET
200
23.48.23.150:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
6544
svchost.exe
GET
200
23.54.109.203:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
6544
svchost.exe
GET
200
23.54.109.203:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
5280
backgroundTaskHost.exe
GET
200
23.54.109.203:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
whitelisted
7936
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
7936
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
2040
backgroundTaskHost.exe
GET
200
23.54.109.203:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
2104
svchost.exe
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
—
—
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
5496
MoUsoCoreWorker.exe
23.48.23.150:80
crl.microsoft.com
Akamai International B.V.
DE
whitelisted
3216
svchost.exe
40.113.103.199:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
40.126.32.74:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
23.54.109.203:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted
2040
backgroundTaskHost.exe
20.103.156.88:443
arc.msn.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
2040
backgroundTaskHost.exe
23.54.109.203:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted
2040
backgroundTaskHost.exe
20.31.169.57:443
fd.api.iris.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 40.127.240.158
  • 51.104.136.2
whitelisted
google.com
  • 142.250.184.206
whitelisted
crl.microsoft.com
  • 23.48.23.150
  • 23.48.23.159
  • 23.48.23.143
  • 23.48.23.156
  • 23.48.23.137
  • 23.48.23.140
  • 23.48.23.138
  • 23.48.23.146
  • 23.48.23.145
whitelisted
client.wns.windows.com
  • 40.113.103.199
  • 40.113.110.67
whitelisted
login.live.com
  • 40.126.32.74
  • 20.190.160.131
  • 40.126.32.136
  • 20.190.160.20
  • 20.190.160.65
  • 40.126.32.134
  • 20.190.160.130
  • 20.190.160.2
whitelisted
ocsp.digicert.com
  • 23.54.109.203
whitelisted
arc.msn.com
  • 20.103.156.88
whitelisted
fd.api.iris.microsoft.com
  • 20.31.169.57
whitelisted
slscr.update.microsoft.com
  • 20.109.210.53
whitelisted
www.microsoft.com
  • 184.30.21.171
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
1 (149)