| File name: | 1 (574) |
| Full analysis: | https://app.any.run/tasks/18124826-37fe-4ef7-8d5f-29e07430a93f |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 23:37:05 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 44C5A1A0B0CCA02AF80AA9CF8C48E110 |
| SHA1: | 7EBAD1F610D55E3A06ED9751C021DCB623959F47 |
| SHA256: | 739B8A7D3469A60E5D435AA298D81B0A32A344F65B4A1DA1B34FC17FEC0D539C |
| SSDEEP: | 3072:UjD+0QA//DbCVqN8ikWNW54TEzdplFbZfpfuPh+oLcwuIX:UjD+0QAXD/mZW5T+79fpfuPh+oLcwuI |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- Unicorn-677.exe (PID: 6540)
- 1 (574).exe (PID: 1672)
- Unicorn-31067.exe (PID: 4976)
- Unicorn-24627.exe (PID: 5124)
- Unicorn-3184.exe (PID: 5048)
- Unicorn-61300.exe (PID: 4112)
- Unicorn-36141.exe (PID: 4892)
- Unicorn-15629.exe (PID: 4180)
- Unicorn-57429.exe (PID: 6112)
- Unicorn-61513.exe (PID: 4448)
- Unicorn-38690.exe (PID: 2240)
- Unicorn-6837.exe (PID: 2772)
- Unicorn-33479.exe (PID: 2852)
- Unicorn-26703.exe (PID: 1128)
- Unicorn-20572.exe (PID: 6512)
- Unicorn-61513.exe (PID: 5384)
- Unicorn-53027.exe (PID: 7712)
- Unicorn-46905.exe (PID: 7720)
- Unicorn-22379.exe (PID: 7676)
- Unicorn-26485.exe (PID: 7768)
- Unicorn-53127.exe (PID: 7820)
- Unicorn-59249.exe (PID: 7868)
- Unicorn-53127.exe (PID: 7860)
- Unicorn-65114.exe (PID: 7844)
- Unicorn-53127.exe (PID: 7852)
- Unicorn-57211.exe (PID: 7800)
- Unicorn-45514.exe (PID: 7916)
- Unicorn-14787.exe (PID: 7828)
- Unicorn-56449.exe (PID: 7932)
- Unicorn-45514.exe (PID: 7884)
- Unicorn-29583.exe (PID: 6816)
- Unicorn-17885.exe (PID: 1764)
- Unicorn-54279.exe (PID: 4620)
- Unicorn-52551.exe (PID: 7648)
- Unicorn-17139.exe (PID: 7364)
- Unicorn-51684.exe (PID: 7404)
- Unicorn-44336.exe (PID: 7392)
- Unicorn-13438.exe (PID: 7476)
- Unicorn-25691.exe (PID: 7576)
- Unicorn-3132.exe (PID: 7624)
- Unicorn-3132.exe (PID: 7608)
- Unicorn-21607.exe (PID: 7592)
- Unicorn-25691.exe (PID: 7552)
- Unicorn-21607.exe (PID: 7600)
- Unicorn-25691.exe (PID: 7560)
- Unicorn-25691.exe (PID: 7568)
- Unicorn-31812.exe (PID: 8052)
- Unicorn-18077.exe (PID: 8060)
- Unicorn-35897.exe (PID: 8012)
- Unicorn-22161.exe (PID: 7764)
- Unicorn-12477.exe (PID: 8024)
- Unicorn-64585.exe (PID: 7708)
- Unicorn-41762.exe (PID: 6228)
- Unicorn-9909.exe (PID: 7684)
- Unicorn-63599.exe (PID: 7816)
- Unicorn-21175.exe (PID: 7184)
- Unicorn-26459.exe (PID: 7776)
- Unicorn-16899.exe (PID: 7300)
- Unicorn-59323.exe (PID: 7284)
- Unicorn-63307.exe (PID: 5416)
- Unicorn-40849.exe (PID: 856)
- Unicorn-40663.exe (PID: 7224)
- Unicorn-18601.exe (PID: 6752)
- Unicorn-64538.exe (PID: 2236)
- Unicorn-39889.exe (PID: 6656)
- Unicorn-53677.exe (PID: 2552)
- Unicorn-14782.exe (PID: 7228)
- Unicorn-20904.exe (PID: 7212)
- Unicorn-29727.exe (PID: 7236)
- Unicorn-53677.exe (PID: 1040)
- Unicorn-37725.exe (PID: 7424)
- Unicorn-52670.exe (PID: 1164)
- Unicorn-22161.exe (PID: 7484)
- Unicorn-60631.exe (PID: 8276)
- Unicorn-53127.exe (PID: 7876)
- Unicorn-33989.exe (PID: 8256)
- Unicorn-50133.exe (PID: 8292)
- Unicorn-11238.exe (PID: 8316)
- Unicorn-38435.exe (PID: 8324)
- Unicorn-50880.exe (PID: 8420)
- Unicorn-54964.exe (PID: 8396)
- Unicorn-64523.exe (PID: 8488)
- Unicorn-54964.exe (PID: 8388)
- Unicorn-38435.exe (PID: 8332)
- Unicorn-58301.exe (PID: 8340)
- Unicorn-11238.exe (PID: 8308)
- Unicorn-36489.exe (PID: 8468)
- Unicorn-50880.exe (PID: 8436)
- Unicorn-11814.exe (PID: 8532)
- Unicorn-11814.exe (PID: 8540)
- Unicorn-19983.exe (PID: 8604)
- Unicorn-24067.exe (PID: 8696)
- Unicorn-24067.exe (PID: 8552)
- Unicorn-20074.exe (PID: 8748)
- Unicorn-24067.exe (PID: 8568)
- Unicorn-31912.exe (PID: 8884)
- Unicorn-25940.exe (PID: 8756)
- Unicorn-3132.exe (PID: 7616)
- Unicorn-24067.exe (PID: 8612)
- Unicorn-45648.exe (PID: 8972)
- Unicorn-117.exe (PID: 8628)
- Unicorn-19983.exe (PID: 8596)
- Unicorn-42848.exe (PID: 8932)
- Unicorn-6339.exe (PID: 8736)
- Unicorn-54885.exe (PID: 8860)
- Unicorn-24067.exe (PID: 8580)
- Unicorn-27009.exe (PID: 8648)
- Unicorn-19983.exe (PID: 8720)
- Unicorn-11906.exe (PID: 8676)
- Unicorn-1508.exe (PID: 8588)
- Unicorn-29012.exe (PID: 8044)
- Unicorn-43378.exe (PID: 8852)
- Unicorn-45648.exe (PID: 8876)
- Unicorn-22161.exe (PID: 8080)
- Unicorn-51513.exe (PID: 8924)
- Unicorn-19983.exe (PID: 8636)
- Unicorn-45648.exe (PID: 8868)
- Unicorn-64585.exe (PID: 7544)
- Unicorn-55177.exe (PID: 9060)
- Unicorn-24067.exe (PID: 8620)
- Unicorn-20367.exe (PID: 9068)
- Unicorn-22161.exe (PID: 8072)
- Unicorn-38.exe (PID: 9108)
- Unicorn-7657.exe (PID: 5936)
- Unicorn-57315.exe (PID: 9172)
- Unicorn-6168.exe (PID: 9116)
- Unicorn-12006.exe (PID: 9244)
- Unicorn-22505.exe (PID: 9180)
- Unicorn-36603.exe (PID: 3268)
- Unicorn-37449.exe (PID: 9156)
- Unicorn-51840.exe (PID: 9100)
- Unicorn-57315.exe (PID: 9164)
- Unicorn-16091.exe (PID: 9224)
- Unicorn-5711.exe (PID: 9404)
- Unicorn-309.exe (PID: 9276)
- Unicorn-32427.exe (PID: 9332)
- Unicorn-33094.exe (PID: 9580)
- Unicorn-32427.exe (PID: 9380)
- Unicorn-1700.exe (PID: 9304)
- Unicorn-57023.exe (PID: 9348)
- Unicorn-51648.exe (PID: 9432)
- Unicorn-51648.exe (PID: 9424)
- Unicorn-51648.exe (PID: 9440)
- Unicorn-63153.exe (PID: 9356)
- Unicorn-65383.exe (PID: 9416)
- Unicorn-58307.exe (PID: 9292)
- Unicorn-23443.exe (PID: 9564)
- Unicorn-12006.exe (PID: 9248)
- Unicorn-2877.exe (PID: 9372)
- Unicorn-24259.exe (PID: 9260)
- Unicorn-30481.exe (PID: 9548)
- Unicorn-43309.exe (PID: 9572)
- Unicorn-37087.exe (PID: 9648)
- Unicorn-33557.exe (PID: 9664)
- Unicorn-37663.exe (PID: 9708)
- Unicorn-37371.exe (PID: 9740)
- Unicorn-52416.exe (PID: 9792)
- Unicorn-41555.exe (PID: 9784)
- Unicorn-3646.exe (PID: 8504)
- Unicorn-26312.exe (PID: 8840)
- Unicorn-31812.exe (PID: 6344)
- Unicorn-64689.exe (PID: 10128)
- Unicorn-46407.exe (PID: 10148)
- Unicorn-41533.exe (PID: 5304)
- Unicorn-56613.exe (PID: 10168)
- Unicorn-1700.exe (PID: 9288)
- Unicorn-50967.exe (PID: 10184)
- Unicorn-32593.exe (PID: 10236)
- Unicorn-32593.exe (PID: 10228)
- Unicorn-40569.exe (PID: 1348)
- Unicorn-65073.exe (PID: 3956)
- Unicorn-37039.exe (PID: 7416)
- Unicorn-18757.exe (PID: 9052)
- Unicorn-50875.exe (PID: 9088)
- Unicorn-26925.exe (PID: 9036)
- Unicorn-40661.exe (PID: 10248)
- Unicorn-44745.exe (PID: 9628)
- Unicorn-13521.exe (PID: 9688)
- Unicorn-12456.exe (PID: 10344)
- Unicorn-6889.exe (PID: 10364)
- Unicorn-43838.exe (PID: 10416)
- Unicorn-36463.exe (PID: 9824)
- Unicorn-59619.exe (PID: 10400)
- Unicorn-5208.exe (PID: 8428)
- Unicorn-16348.exe (PID: 10436)
Executable content was dropped or overwritten
- 1 (574).exe (PID: 1672)
- Unicorn-31067.exe (PID: 4976)
- Unicorn-24627.exe (PID: 5124)
- Unicorn-677.exe (PID: 6540)
- Unicorn-3184.exe (PID: 5048)
- Unicorn-61300.exe (PID: 4112)
- Unicorn-36141.exe (PID: 4892)
- Unicorn-33479.exe (PID: 2852)
- Unicorn-61513.exe (PID: 4448)
- Unicorn-38690.exe (PID: 2240)
- Unicorn-6837.exe (PID: 2772)
- Unicorn-15629.exe (PID: 4180)
- Unicorn-22379.exe (PID: 7676)
- Unicorn-52551.exe (PID: 7648)
- Unicorn-57429.exe (PID: 6112)
- Unicorn-53027.exe (PID: 7712)
- Unicorn-46905.exe (PID: 7720)
- Unicorn-26485.exe (PID: 7768)
- Unicorn-59249.exe (PID: 7868)
- Unicorn-53127.exe (PID: 7852)
- Unicorn-45514.exe (PID: 7916)
- Unicorn-53127.exe (PID: 7876)
- Unicorn-26703.exe (PID: 1128)
- Unicorn-20572.exe (PID: 6512)
- Unicorn-29583.exe (PID: 6816)
- Unicorn-17885.exe (PID: 1764)
- Unicorn-54279.exe (PID: 4620)
- Unicorn-39889.exe (PID: 6656)
- Unicorn-17139.exe (PID: 7364)
- Unicorn-44336.exe (PID: 7392)
- Unicorn-13438.exe (PID: 7476)
- Unicorn-25691.exe (PID: 7576)
- Unicorn-3132.exe (PID: 7624)
- Unicorn-3132.exe (PID: 7608)
- Unicorn-25691.exe (PID: 7552)
- Unicorn-14787.exe (PID: 7828)
- Unicorn-53127.exe (PID: 7820)
- Unicorn-25691.exe (PID: 7560)
- Unicorn-21607.exe (PID: 7592)
- Unicorn-31812.exe (PID: 8052)
- Unicorn-12477.exe (PID: 8024)
- Unicorn-25691.exe (PID: 7568)
- Unicorn-9909.exe (PID: 7684)
- Unicorn-65114.exe (PID: 7844)
- Unicorn-64585.exe (PID: 7708)
- Unicorn-22161.exe (PID: 7484)
- Unicorn-56449.exe (PID: 7932)
- Unicorn-63599.exe (PID: 7816)
- Unicorn-21175.exe (PID: 7184)
- Unicorn-16899.exe (PID: 7300)
- Unicorn-63307.exe (PID: 5416)
- Unicorn-26459.exe (PID: 7776)
- Unicorn-40849.exe (PID: 856)
- Unicorn-64538.exe (PID: 2236)
- Unicorn-40663.exe (PID: 7224)
- Unicorn-20904.exe (PID: 7212)
- Unicorn-29727.exe (PID: 7236)
- Unicorn-14782.exe (PID: 7228)
- Unicorn-37725.exe (PID: 7424)
- Unicorn-52670.exe (PID: 1164)
- Unicorn-33989.exe (PID: 8256)
- Unicorn-60631.exe (PID: 8276)
- Unicorn-50133.exe (PID: 8292)
- Unicorn-38435.exe (PID: 8324)
- Unicorn-53127.exe (PID: 7860)
- Unicorn-11238.exe (PID: 8316)
- Unicorn-38435.exe (PID: 8332)
- Unicorn-50880.exe (PID: 8420)
- Unicorn-64523.exe (PID: 8488)
- Unicorn-21607.exe (PID: 7600)
- Unicorn-54964.exe (PID: 8388)
- Unicorn-54964.exe (PID: 8396)
- Unicorn-11238.exe (PID: 8308)
- Unicorn-57211.exe (PID: 7800)
- Unicorn-5208.exe (PID: 8428)
- Unicorn-36489.exe (PID: 8468)
- Unicorn-50880.exe (PID: 8436)
- Unicorn-3646.exe (PID: 8504)
- Unicorn-11814.exe (PID: 8540)
- Unicorn-11814.exe (PID: 8532)
- Unicorn-18077.exe (PID: 8060)
- Unicorn-24067.exe (PID: 8552)
- Unicorn-19983.exe (PID: 8604)
- Unicorn-24067.exe (PID: 8696)
- Unicorn-20074.exe (PID: 8748)
- Unicorn-24067.exe (PID: 8568)
- Unicorn-41762.exe (PID: 6228)
- Unicorn-31912.exe (PID: 8884)
- Unicorn-117.exe (PID: 8628)
- Unicorn-3132.exe (PID: 7616)
- Unicorn-24067.exe (PID: 8612)
- Unicorn-45648.exe (PID: 8972)
- Unicorn-19983.exe (PID: 8596)
- Unicorn-42848.exe (PID: 8932)
- Unicorn-26312.exe (PID: 8840)
- Unicorn-54885.exe (PID: 8860)
- Unicorn-24067.exe (PID: 8580)
- Unicorn-19983.exe (PID: 8720)
- Unicorn-11906.exe (PID: 8676)
- Unicorn-1508.exe (PID: 8588)
- Unicorn-27009.exe (PID: 8648)
- Unicorn-45648.exe (PID: 8876)
- Unicorn-43378.exe (PID: 8852)
- Unicorn-22161.exe (PID: 8080)
- Unicorn-45514.exe (PID: 7884)
- Unicorn-31812.exe (PID: 6344)
- Unicorn-29012.exe (PID: 8044)
- Unicorn-35897.exe (PID: 8012)
- Unicorn-51513.exe (PID: 8924)
- Unicorn-19983.exe (PID: 8636)
- Unicorn-45648.exe (PID: 8868)
- Unicorn-55177.exe (PID: 9060)
- Unicorn-24067.exe (PID: 8620)
- Unicorn-20367.exe (PID: 9068)
- Unicorn-64585.exe (PID: 7544)
- Unicorn-61513.exe (PID: 5384)
- Unicorn-22161.exe (PID: 8072)
- Unicorn-6168.exe (PID: 9116)
- Unicorn-22161.exe (PID: 7764)
- Unicorn-38.exe (PID: 9108)
- Unicorn-41533.exe (PID: 5304)
- Unicorn-7657.exe (PID: 5936)
- Unicorn-57315.exe (PID: 9172)
- Unicorn-37449.exe (PID: 9156)
- Unicorn-12006.exe (PID: 9244)
- Unicorn-51840.exe (PID: 9100)
- Unicorn-22505.exe (PID: 9180)
- Unicorn-57315.exe (PID: 9164)
- Unicorn-59323.exe (PID: 7284)
- Unicorn-16091.exe (PID: 9224)
- Unicorn-1700.exe (PID: 9288)
- Unicorn-5711.exe (PID: 9404)
- Unicorn-309.exe (PID: 9276)
- Unicorn-1700.exe (PID: 9304)
- Unicorn-32427.exe (PID: 9380)
- Unicorn-51648.exe (PID: 9432)
- Unicorn-51648.exe (PID: 9424)
- Unicorn-12006.exe (PID: 9248)
- Unicorn-23443.exe (PID: 9564)
- Unicorn-58307.exe (PID: 9292)
- Unicorn-24259.exe (PID: 9260)
- Unicorn-2877.exe (PID: 9372)
- Unicorn-30481.exe (PID: 9548)
- Unicorn-53677.exe (PID: 2552)
- Unicorn-43309.exe (PID: 9572)
- Unicorn-53677.exe (PID: 1040)
- Unicorn-18601.exe (PID: 6752)
- Unicorn-51684.exe (PID: 7404)
- Unicorn-37087.exe (PID: 9648)
- Unicorn-33557.exe (PID: 9664)
- Unicorn-13521.exe (PID: 9688)
- Unicorn-37663.exe (PID: 9708)
- Unicorn-52416.exe (PID: 9792)
- Unicorn-41555.exe (PID: 9784)
- Unicorn-36463.exe (PID: 9824)
- Unicorn-37371.exe (PID: 9740)
- Unicorn-6339.exe (PID: 8736)
- Unicorn-64689.exe (PID: 10128)
- Unicorn-46407.exe (PID: 10148)
- Unicorn-56613.exe (PID: 10168)
- Unicorn-36603.exe (PID: 3268)
- Unicorn-51648.exe (PID: 9440)
- Unicorn-50967.exe (PID: 10184)
- Unicorn-44653.exe (PID: 4208)
- Unicorn-32593.exe (PID: 10236)
- Unicorn-32593.exe (PID: 10228)
- Unicorn-40569.exe (PID: 1348)
- Unicorn-51067.exe (PID: 10208)
- Unicorn-37039.exe (PID: 7416)
- Unicorn-32427.exe (PID: 9332)
- Unicorn-18757.exe (PID: 9052)
- Unicorn-50875.exe (PID: 9088)
- Unicorn-40661.exe (PID: 10248)
- Unicorn-26925.exe (PID: 9036)
- Unicorn-44745.exe (PID: 9628)
- Unicorn-12456.exe (PID: 10344)
- Unicorn-6889.exe (PID: 10364)
- Unicorn-4196.exe (PID: 10380)
- Unicorn-59619.exe (PID: 10400)
- Unicorn-58301.exe (PID: 8340)
- Unicorn-43838.exe (PID: 10416)
- Unicorn-65073.exe (PID: 3956)
- Unicorn-53297.exe (PID: 10488)
- Unicorn-22479.exe (PID: 10444)
- Unicorn-63153.exe (PID: 9356)
- Unicorn-16348.exe (PID: 10436)
- Unicorn-23439.exe (PID: 10620)
- Unicorn-27523.exe (PID: 10600)
- Unicorn-25940.exe (PID: 8756)
- Unicorn-15270.exe (PID: 10580)
- Unicorn-25939.exe (PID: 10656)
- Unicorn-33094.exe (PID: 9580)
- Unicorn-56666.exe (PID: 10668)
- Unicorn-34107.exe (PID: 10700)
- Unicorn-25385.exe (PID: 10804)
- Unicorn-36075.exe (PID: 10876)
- Unicorn-44435.exe (PID: 10952)
- Unicorn-21301.exe (PID: 10784)
- Unicorn-43859.exe (PID: 10760)
- Unicorn-36075.exe (PID: 10896)
- Unicorn-57023.exe (PID: 9348)
Executes application which crashes
- Unicorn-33758.exe (PID: 5332)
- Unicorn-309.exe (PID: 9276)
- Unicorn-37663.exe (PID: 9708)
INFO
Reads the computer name
- 1 (574).exe (PID: 1672)
- Unicorn-31067.exe (PID: 4976)
- Unicorn-24627.exe (PID: 5124)
- Unicorn-677.exe (PID: 6540)
- Unicorn-36141.exe (PID: 4892)
- Unicorn-3184.exe (PID: 5048)
- Unicorn-61300.exe (PID: 4112)
- Unicorn-15629.exe (PID: 4180)
- Unicorn-61513.exe (PID: 5384)
- Unicorn-33479.exe (PID: 2852)
- Unicorn-61513.exe (PID: 4448)
- Unicorn-38690.exe (PID: 2240)
- Unicorn-26703.exe (PID: 1128)
- Unicorn-6837.exe (PID: 2772)
- Unicorn-20572.exe (PID: 6512)
- Unicorn-57429.exe (PID: 6112)
- Unicorn-52551.exe (PID: 7648)
- Unicorn-22379.exe (PID: 7676)
- Unicorn-53027.exe (PID: 7712)
- Unicorn-46905.exe (PID: 7720)
- Unicorn-59249.exe (PID: 7868)
- Unicorn-26485.exe (PID: 7768)
- Unicorn-65114.exe (PID: 7844)
- Unicorn-53127.exe (PID: 7820)
- Unicorn-57211.exe (PID: 7800)
- Unicorn-45514.exe (PID: 7916)
- Unicorn-53127.exe (PID: 7860)
- Unicorn-53127.exe (PID: 7852)
- Unicorn-45514.exe (PID: 7884)
- Unicorn-53127.exe (PID: 7876)
- Unicorn-56449.exe (PID: 7932)
- Unicorn-14787.exe (PID: 7828)
- Unicorn-17885.exe (PID: 1764)
- Unicorn-33758.exe (PID: 5332)
- Unicorn-54279.exe (PID: 4620)
- Unicorn-39889.exe (PID: 6656)
- Unicorn-51684.exe (PID: 7404)
- Unicorn-29583.exe (PID: 6816)
- Unicorn-17139.exe (PID: 7364)
- Unicorn-44336.exe (PID: 7392)
- Unicorn-13438.exe (PID: 7476)
- Unicorn-25691.exe (PID: 7576)
- Unicorn-25691.exe (PID: 7560)
- Unicorn-3132.exe (PID: 7608)
- Unicorn-21607.exe (PID: 7592)
- Unicorn-25691.exe (PID: 7552)
- Unicorn-21607.exe (PID: 7600)
- Unicorn-3132.exe (PID: 7624)
- Unicorn-25691.exe (PID: 7568)
- Unicorn-31812.exe (PID: 8052)
- Unicorn-31812.exe (PID: 6344)
- Unicorn-12477.exe (PID: 8024)
- Unicorn-22161.exe (PID: 8072)
- Unicorn-64585.exe (PID: 7708)
- Unicorn-35897.exe (PID: 8012)
- Unicorn-41762.exe (PID: 6228)
- Unicorn-29012.exe (PID: 8044)
- Unicorn-3132.exe (PID: 7616)
- Unicorn-9909.exe (PID: 7684)
- Unicorn-22161.exe (PID: 7484)
- Unicorn-64585.exe (PID: 7544)
- Unicorn-22161.exe (PID: 7764)
- Unicorn-63599.exe (PID: 7816)
- Unicorn-18077.exe (PID: 8060)
- Unicorn-22161.exe (PID: 8080)
- Unicorn-26459.exe (PID: 7776)
- Unicorn-16899.exe (PID: 7300)
- Unicorn-63307.exe (PID: 5416)
- Unicorn-59323.exe (PID: 7284)
- Unicorn-18601.exe (PID: 6752)
- Unicorn-40849.exe (PID: 856)
- Unicorn-64538.exe (PID: 2236)
- Unicorn-53677.exe (PID: 2552)
- Unicorn-40663.exe (PID: 7224)
- Unicorn-21175.exe (PID: 7184)
- Unicorn-52670.exe (PID: 1164)
- Unicorn-14782.exe (PID: 7228)
- Unicorn-53677.exe (PID: 1040)
- Unicorn-20904.exe (PID: 7212)
- Unicorn-29727.exe (PID: 7236)
- Unicorn-37725.exe (PID: 7424)
- Unicorn-33989.exe (PID: 8256)
- Unicorn-60631.exe (PID: 8276)
- Unicorn-50133.exe (PID: 8292)
- Unicorn-38435.exe (PID: 8324)
- Unicorn-50880.exe (PID: 8420)
- Unicorn-11238.exe (PID: 8316)
- Unicorn-58301.exe (PID: 8340)
- Unicorn-54964.exe (PID: 8396)
- Unicorn-64523.exe (PID: 8488)
- Unicorn-54964.exe (PID: 8388)
- Unicorn-11238.exe (PID: 8308)
- Unicorn-50880.exe (PID: 8436)
- Unicorn-5208.exe (PID: 8428)
- Unicorn-36489.exe (PID: 8468)
- Unicorn-38435.exe (PID: 8332)
- Unicorn-3646.exe (PID: 8504)
- Unicorn-11814.exe (PID: 8540)
- Unicorn-11814.exe (PID: 8532)
- Unicorn-24067.exe (PID: 8552)
- Unicorn-19983.exe (PID: 8604)
- Unicorn-24067.exe (PID: 8696)
- Unicorn-20074.exe (PID: 8748)
- Unicorn-25940.exe (PID: 8756)
- Unicorn-24067.exe (PID: 8568)
- Unicorn-117.exe (PID: 8628)
- Unicorn-31912.exe (PID: 8884)
- Unicorn-45648.exe (PID: 8972)
- Unicorn-24067.exe (PID: 8580)
- Unicorn-24067.exe (PID: 8612)
- Unicorn-26312.exe (PID: 8840)
- Unicorn-19983.exe (PID: 8720)
- Unicorn-1508.exe (PID: 8588)
- Unicorn-27009.exe (PID: 8648)
- Unicorn-45648.exe (PID: 8868)
- Unicorn-43378.exe (PID: 8852)
- Unicorn-45648.exe (PID: 8876)
- Unicorn-51513.exe (PID: 8924)
- Unicorn-24067.exe (PID: 8620)
- Unicorn-19983.exe (PID: 8636)
- Unicorn-55177.exe (PID: 9060)
- Unicorn-20367.exe (PID: 9068)
- Unicorn-19983.exe (PID: 8596)
- Unicorn-42848.exe (PID: 8932)
- Unicorn-6339.exe (PID: 8736)
- Unicorn-54885.exe (PID: 8860)
- Unicorn-11906.exe (PID: 8676)
- Unicorn-6168.exe (PID: 9116)
- Unicorn-38.exe (PID: 9108)
- Unicorn-41533.exe (PID: 5304)
- Unicorn-7657.exe (PID: 5936)
- Unicorn-22505.exe (PID: 9180)
- Unicorn-51840.exe (PID: 9100)
- Unicorn-36603.exe (PID: 3268)
- Unicorn-57315.exe (PID: 9172)
- Unicorn-37449.exe (PID: 9156)
- Unicorn-12006.exe (PID: 9244)
- Unicorn-57315.exe (PID: 9164)
- Unicorn-16091.exe (PID: 9224)
- Unicorn-309.exe (PID: 9276)
- Unicorn-51648.exe (PID: 9432)
- Unicorn-32427.exe (PID: 9332)
- Unicorn-1700.exe (PID: 9304)
- Unicorn-33094.exe (PID: 9580)
- Unicorn-32427.exe (PID: 9380)
- Unicorn-63153.exe (PID: 9356)
- Unicorn-65383.exe (PID: 9416)
- Unicorn-57023.exe (PID: 9348)
- Unicorn-51648.exe (PID: 9440)
- Unicorn-58307.exe (PID: 9292)
- Unicorn-1700.exe (PID: 9288)
- Unicorn-5711.exe (PID: 9404)
- Unicorn-51648.exe (PID: 9424)
- Unicorn-12006.exe (PID: 9248)
- Unicorn-24259.exe (PID: 9260)
- Unicorn-2877.exe (PID: 9372)
- Unicorn-43309.exe (PID: 9572)
- Unicorn-30481.exe (PID: 9548)
- Unicorn-23443.exe (PID: 9564)
- Unicorn-37087.exe (PID: 9648)
- Unicorn-33557.exe (PID: 9664)
- Unicorn-13521.exe (PID: 9688)
- Unicorn-37663.exe (PID: 9708)
- Unicorn-37371.exe (PID: 9740)
- Unicorn-41555.exe (PID: 9784)
- Unicorn-36463.exe (PID: 9824)
- Unicorn-52416.exe (PID: 9792)
- Unicorn-56613.exe (PID: 10168)
- Unicorn-64689.exe (PID: 10128)
- Unicorn-46407.exe (PID: 10148)
- Unicorn-50967.exe (PID: 10184)
- Unicorn-44653.exe (PID: 4208)
- Unicorn-51067.exe (PID: 10208)
- Unicorn-32593.exe (PID: 10236)
- Unicorn-32593.exe (PID: 10228)
- Unicorn-65073.exe (PID: 3956)
- Unicorn-40569.exe (PID: 1348)
- Unicorn-37039.exe (PID: 7416)
- Unicorn-18757.exe (PID: 9052)
- Unicorn-50875.exe (PID: 9088)
- Unicorn-26925.exe (PID: 9036)
- Unicorn-44745.exe (PID: 9628)
- Unicorn-40661.exe (PID: 10248)
- Unicorn-12456.exe (PID: 10344)
- Unicorn-6889.exe (PID: 10364)
- Unicorn-4196.exe (PID: 10380)
- Unicorn-59619.exe (PID: 10400)
- Unicorn-43838.exe (PID: 10416)
- Unicorn-22479.exe (PID: 10444)
- Unicorn-16348.exe (PID: 10436)
- Unicorn-53297.exe (PID: 10488)
The sample compiled with chinese language support
- 1 (574).exe (PID: 1672)
Checks supported languages
- Unicorn-31067.exe (PID: 4976)
- 1 (574).exe (PID: 1672)
- Unicorn-24627.exe (PID: 5124)
- Unicorn-677.exe (PID: 6540)
- Unicorn-61300.exe (PID: 4112)
- Unicorn-15629.exe (PID: 4180)
- Unicorn-3184.exe (PID: 5048)
- Unicorn-57429.exe (PID: 6112)
- Unicorn-33479.exe (PID: 2852)
- Unicorn-20572.exe (PID: 6512)
- Unicorn-61513.exe (PID: 4448)
- Unicorn-61513.exe (PID: 5384)
- Unicorn-36141.exe (PID: 4892)
- Unicorn-6837.exe (PID: 2772)
- Unicorn-26703.exe (PID: 1128)
- Unicorn-38690.exe (PID: 2240)
- Unicorn-52551.exe (PID: 7648)
- Unicorn-46905.exe (PID: 7720)
- Unicorn-53027.exe (PID: 7712)
- Unicorn-57211.exe (PID: 7800)
- Unicorn-26485.exe (PID: 7768)
- Unicorn-22379.exe (PID: 7676)
- Unicorn-53127.exe (PID: 7860)
- Unicorn-65114.exe (PID: 7844)
- Unicorn-59249.exe (PID: 7868)
- Unicorn-45514.exe (PID: 7884)
- Unicorn-53127.exe (PID: 7820)
- Unicorn-45514.exe (PID: 7916)
- Unicorn-53127.exe (PID: 7852)
- Unicorn-56449.exe (PID: 7932)
- Unicorn-53127.exe (PID: 7876)
- Unicorn-14787.exe (PID: 7828)
- Unicorn-29583.exe (PID: 6816)
- Unicorn-17885.exe (PID: 1764)
- Unicorn-54279.exe (PID: 4620)
- Unicorn-51684.exe (PID: 7404)
- Unicorn-39889.exe (PID: 6656)
- Unicorn-33758.exe (PID: 5332)
- Unicorn-17139.exe (PID: 7364)
- Unicorn-44336.exe (PID: 7392)
- Unicorn-13438.exe (PID: 7476)
- Unicorn-25691.exe (PID: 7576)
- Unicorn-3132.exe (PID: 7624)
- Unicorn-25691.exe (PID: 7552)
- Unicorn-25691.exe (PID: 7568)
- Unicorn-3132.exe (PID: 7608)
- Unicorn-25691.exe (PID: 7560)
- Unicorn-21607.exe (PID: 7592)
- Unicorn-21607.exe (PID: 7600)
- Unicorn-3132.exe (PID: 7616)
- Unicorn-9909.exe (PID: 7684)
- Unicorn-22161.exe (PID: 7764)
- Unicorn-64585.exe (PID: 7708)
- Unicorn-31812.exe (PID: 8052)
- Unicorn-12477.exe (PID: 8024)
- Unicorn-64585.exe (PID: 7544)
- Unicorn-29012.exe (PID: 8044)
- Unicorn-31812.exe (PID: 6344)
- Unicorn-41762.exe (PID: 6228)
- Unicorn-18077.exe (PID: 8060)
- Unicorn-22161.exe (PID: 7484)
- Unicorn-22161.exe (PID: 8080)
- Unicorn-22161.exe (PID: 8072)
- Unicorn-63599.exe (PID: 7816)
- Unicorn-35897.exe (PID: 8012)
- Unicorn-63307.exe (PID: 5416)
- Unicorn-59323.exe (PID: 7284)
- Unicorn-16899.exe (PID: 7300)
- Unicorn-21175.exe (PID: 7184)
- Unicorn-26459.exe (PID: 7776)
- Unicorn-29727.exe (PID: 7236)
- Unicorn-40849.exe (PID: 856)
- Unicorn-64538.exe (PID: 2236)
- Unicorn-18601.exe (PID: 6752)
- Unicorn-53677.exe (PID: 1040)
- Unicorn-20904.exe (PID: 7212)
- Unicorn-14782.exe (PID: 7228)
- Unicorn-53677.exe (PID: 2552)
- Unicorn-40663.exe (PID: 7224)
- Unicorn-37725.exe (PID: 7424)
- Unicorn-52670.exe (PID: 1164)
- Unicorn-33989.exe (PID: 8256)
- Unicorn-60631.exe (PID: 8276)
- Unicorn-50133.exe (PID: 8292)
- Unicorn-58301.exe (PID: 8340)
- Unicorn-38435.exe (PID: 8332)
- Unicorn-11238.exe (PID: 8316)
- Unicorn-38435.exe (PID: 8324)
- Unicorn-11238.exe (PID: 8308)
- Unicorn-54964.exe (PID: 8396)
- Unicorn-54964.exe (PID: 8388)
- Unicorn-5208.exe (PID: 8428)
- Unicorn-50880.exe (PID: 8420)
- Unicorn-50880.exe (PID: 8436)
- Unicorn-36489.exe (PID: 8468)
- Unicorn-64523.exe (PID: 8488)
- Unicorn-3646.exe (PID: 8504)
- Unicorn-11814.exe (PID: 8532)
- Unicorn-19983.exe (PID: 8604)
- Unicorn-19983.exe (PID: 8596)
- Unicorn-19983.exe (PID: 8636)
- Unicorn-24067.exe (PID: 8612)
- Unicorn-24067.exe (PID: 8568)
- Unicorn-1508.exe (PID: 8588)
- Unicorn-24067.exe (PID: 8580)
- Unicorn-19983.exe (PID: 8720)
- Unicorn-11906.exe (PID: 8676)
- Unicorn-6339.exe (PID: 8736)
- Unicorn-117.exe (PID: 8628)
- Unicorn-24067.exe (PID: 8552)
- Unicorn-11814.exe (PID: 8540)
- Unicorn-24067.exe (PID: 8620)
- Unicorn-45648.exe (PID: 8868)
- Unicorn-26312.exe (PID: 8840)
- Unicorn-54885.exe (PID: 8860)
- Unicorn-31912.exe (PID: 8884)
- Unicorn-51513.exe (PID: 8924)
- Unicorn-45648.exe (PID: 8876)
- Unicorn-42848.exe (PID: 8932)
- Unicorn-45648.exe (PID: 8972)
- Unicorn-20074.exe (PID: 8748)
- Unicorn-27009.exe (PID: 8648)
- Unicorn-25940.exe (PID: 8756)
- Unicorn-24067.exe (PID: 8696)
- Unicorn-43378.exe (PID: 8852)
- Unicorn-51840.exe (PID: 9100)
- Unicorn-6168.exe (PID: 9116)
- Unicorn-38.exe (PID: 9108)
- Unicorn-37449.exe (PID: 9156)
- Unicorn-57315.exe (PID: 9172)
- Unicorn-55177.exe (PID: 9060)
- Unicorn-20367.exe (PID: 9068)
- Unicorn-36603.exe (PID: 3268)
- Unicorn-7657.exe (PID: 5936)
- Unicorn-16091.exe (PID: 9224)
- Unicorn-57315.exe (PID: 9164)
- Unicorn-22505.exe (PID: 9180)
- Unicorn-41533.exe (PID: 5304)
- Unicorn-12006.exe (PID: 9244)
- Unicorn-58307.exe (PID: 9292)
- Unicorn-1700.exe (PID: 9304)
- Unicorn-32427.exe (PID: 9332)
- Unicorn-57023.exe (PID: 9348)
- Unicorn-63153.exe (PID: 9356)
- Unicorn-32427.exe (PID: 9380)
- Unicorn-12006.exe (PID: 9248)
- Unicorn-2877.exe (PID: 9372)
- Unicorn-309.exe (PID: 9276)
- Unicorn-24259.exe (PID: 9260)
- Unicorn-65383.exe (PID: 9416)
- Unicorn-51648.exe (PID: 9432)
- Unicorn-5711.exe (PID: 9404)
- Unicorn-51648.exe (PID: 9424)
- Unicorn-51648.exe (PID: 9440)
- Unicorn-30481.exe (PID: 9548)
- Unicorn-43309.exe (PID: 9572)
- Unicorn-1700.exe (PID: 9288)
- Unicorn-37087.exe (PID: 9648)
- Unicorn-33557.exe (PID: 9664)
- Unicorn-13521.exe (PID: 9688)
- Unicorn-37663.exe (PID: 9708)
- Unicorn-37371.exe (PID: 9740)
- Unicorn-33094.exe (PID: 9580)
- Unicorn-23443.exe (PID: 9564)
- Unicorn-41555.exe (PID: 9784)
- Unicorn-52416.exe (PID: 9792)
- Unicorn-36463.exe (PID: 9824)
- Unicorn-64689.exe (PID: 10128)
- Unicorn-46407.exe (PID: 10148)
- Unicorn-56613.exe (PID: 10168)
- Unicorn-50967.exe (PID: 10184)
- Unicorn-51067.exe (PID: 10208)
- Unicorn-44653.exe (PID: 4208)
- Unicorn-32593.exe (PID: 10236)
- Unicorn-32593.exe (PID: 10228)
- Unicorn-40569.exe (PID: 1348)
- Unicorn-37039.exe (PID: 7416)
- Unicorn-18757.exe (PID: 9052)
- Unicorn-44745.exe (PID: 9628)
- Unicorn-26925.exe (PID: 9036)
- Unicorn-50875.exe (PID: 9088)
- Unicorn-6889.exe (PID: 10364)
- Unicorn-4196.exe (PID: 10380)
- Unicorn-65073.exe (PID: 3956)
- Unicorn-40661.exe (PID: 10248)
- Unicorn-12456.exe (PID: 10344)
- Unicorn-59619.exe (PID: 10400)
- Unicorn-43838.exe (PID: 10416)
- Unicorn-16348.exe (PID: 10436)
- Unicorn-22479.exe (PID: 10444)
- Unicorn-53297.exe (PID: 10488)
- Unicorn-15270.exe (PID: 10580)
- Unicorn-27523.exe (PID: 10600)
- Unicorn-23439.exe (PID: 10620)
- Unicorn-25939.exe (PID: 10656)
- Unicorn-56666.exe (PID: 10668)
- Unicorn-34107.exe (PID: 10700)
- Unicorn-43859.exe (PID: 10760)
- Unicorn-21301.exe (PID: 10784)
- Unicorn-25385.exe (PID: 10804)
- Unicorn-36075.exe (PID: 10876)
- Unicorn-44435.exe (PID: 10952)
- Unicorn-36075.exe (PID: 10896)
- Unicorn-14263.exe (PID: 11100)
- Unicorn-25961.exe (PID: 11024)
- Unicorn-10179.exe (PID: 11008)
- Unicorn-56687.exe (PID: 11048)
- Unicorn-64855.exe (PID: 11128)
- Unicorn-40905.exe (PID: 11016)
- Unicorn-38213.exe (PID: 11056)
- Unicorn-7294.exe (PID: 11152)
- Unicorn-62525.exe (PID: 11196)
- Unicorn-19547.exe (PID: 11176)
- Unicorn-23631.exe (PID: 11212)
- Unicorn-23631.exe (PID: 11220)
- Unicorn-31799.exe (PID: 5056)
- Unicorn-44243.exe (PID: 6192)
- Unicorn-34741.exe (PID: 11272)
- Unicorn-21685.exe (PID: 4172)
- Unicorn-51649.exe (PID: 11304)
- Unicorn-35006.exe (PID: 11280)
- Unicorn-35883.exe (PID: 11236)
- Unicorn-33937.exe (PID: 11336)
- Unicorn-14071.exe (PID: 11328)
- Unicorn-11954.exe (PID: 11360)
- Unicorn-18076.exe (PID: 11388)
- Unicorn-47320.exe (PID: 11412)
- Unicorn-1648.exe (PID: 11420)
- Unicorn-65139.exe (PID: 11396)
- Unicorn-5467.exe (PID: 11404)
- Unicorn-55680.exe (PID: 11468)
- Unicorn-11632.exe (PID: 11428)
- Unicorn-22261.exe (PID: 11520)
- Unicorn-58248.exe (PID: 11528)
- Unicorn-38597.exe (PID: 11588)
- Unicorn-32466.exe (PID: 11580)
- Unicorn-38332.exe (PID: 11604)
- Unicorn-30197.exe (PID: 11596)
- Unicorn-22623.exe (PID: 11680)
- Unicorn-37642.exe (PID: 11644)
- Unicorn-64974.exe (PID: 11636)
- Unicorn-11762.exe (PID: 11672)
- Unicorn-14647.exe (PID: 11624)
- Unicorn-20726.exe (PID: 11748)
- Unicorn-27834.exe (PID: 11796)
- Unicorn-50657.exe (PID: 11756)
- Unicorn-35696.exe (PID: 11876)
- Unicorn-45182.exe (PID: 11944)
- Unicorn-2203.exe (PID: 11912)
- Unicorn-14455.exe (PID: 11932)
- Unicorn-62909.exe (PID: 11784)
- Unicorn-31918.exe (PID: 11856)
- Unicorn-43065.exe (PID: 11992)
- Unicorn-51233.exe (PID: 12008)
- Unicorn-16423.exe (PID: 12016)
- Unicorn-36843.exe (PID: 12048)
- Unicorn-41119.exe (PID: 12064)
- Unicorn-45182.exe (PID: 11940)
- Unicorn-18561.exe (PID: 12088)
- Unicorn-18561.exe (PID: 12096)
- Unicorn-53371.exe (PID: 12080)
- Unicorn-19115.exe (PID: 12128)
- Unicorn-86.exe (PID: 12164)
- Unicorn-63293.exe (PID: 12228)
- Unicorn-7300.exe (PID: 12212)
- Unicorn-51596.exe (PID: 12248)
- Unicorn-21061.exe (PID: 12296)
- Unicorn-36651.exe (PID: 12268)
- Unicorn-22187.exe (PID: 12312)
- Unicorn-34897.exe (PID: 12148)
- Unicorn-65358.exe (PID: 12156)
- Unicorn-40827.exe (PID: 12172)
- Unicorn-49095.exe (PID: 12328)
- Unicorn-30621.exe (PID: 12344)
- Unicorn-61347.exe (PID: 12352)
- Unicorn-61347.exe (PID: 12360)
- Unicorn-26537.exe (PID: 12376)
- Unicorn-3978.exe (PID: 12436)
- Unicorn-65431.exe (PID: 12460)
- Unicorn-26537.exe (PID: 12368)
- Unicorn-51133.exe (PID: 12400)
- Unicorn-45566.exe (PID: 12488)
- Unicorn-65431.exe (PID: 12452)
- Unicorn-57263.exe (PID: 12412)
- Unicorn-3978.exe (PID: 12444)
- Unicorn-43449.exe (PID: 12564)
- Unicorn-12722.exe (PID: 12528)
- Unicorn-3978.exe (PID: 12480)
- Unicorn-12722.exe (PID: 12520)
- Unicorn-20891.exe (PID: 12588)
- Unicorn-24975.exe (PID: 12632)
- Unicorn-10776.exe (PID: 12696)
- Unicorn-25721.exe (PID: 12680)
- Unicorn-14860.exe (PID: 12672)
- Unicorn-3163.exe (PID: 12728)
- Unicorn-63961.exe (PID: 12760)
- Unicorn-61161.exe (PID: 12752)
- Unicorn-205.exe (PID: 12772)
- Unicorn-46142.exe (PID: 12784)
- Unicorn-19499.exe (PID: 12744)
- Unicorn-6500.exe (PID: 12640)
- Unicorn-49379.exe (PID: 12884)
- Unicorn-25959.exe (PID: 12912)
- Unicorn-20433.exe (PID: 12992)
- Unicorn-35643.exe (PID: 12896)
- Unicorn-2971.exe (PID: 12936)
- Unicorn-62286.exe (PID: 12944)
- Unicorn-45295.exe (PID: 12952)
- Unicorn-6268.exe (PID: 12928)
- Unicorn-35643.exe (PID: 12920)
- Unicorn-8154.exe (PID: 12284)
- Unicorn-46142.exe (PID: 12800)
- Unicorn-45295.exe (PID: 12968)
- Unicorn-5094.exe (PID: 13132)
- Unicorn-56256.exe (PID: 13060)
- Unicorn-29613.exe (PID: 12976)
- Unicorn-45295.exe (PID: 12960)
- Unicorn-20433.exe (PID: 12904)
- Unicorn-38897.exe (PID: 13292)
- Unicorn-44684.exe (PID: 2340)
- Unicorn-32697.exe (PID: 4268)
- Unicorn-14314.exe (PID: 13332)
- Unicorn-55255.exe (PID: 13364)
- Unicorn-11316.exe (PID: 13152)
- Unicorn-195.exe (PID: 13180)
- Unicorn-48741.exe (PID: 13208)
- Unicorn-28128.exe (PID: 13244)
- Unicorn-24337.exe (PID: 13408)
- Unicorn-792.exe (PID: 13476)
- Unicorn-14414.exe (PID: 13424)
- Unicorn-12468.exe (PID: 13444)
- Unicorn-16068.exe (PID: 13388)
- Unicorn-579.exe (PID: 13324)
- Unicorn-61596.exe (PID: 13544)
- Unicorn-31881.exe (PID: 13568)
- Unicorn-50277.exe (PID: 13820)
- Unicorn-26235.exe (PID: 13596)
- Unicorn-26235.exe (PID: 13604)
- Unicorn-26235.exe (PID: 13588)
- Unicorn-59100.exe (PID: 13700)
- Unicorn-22151.exe (PID: 13612)
- Unicorn-15466.exe (PID: 13724)
- Unicorn-47974.exe (PID: 13764)
- Unicorn-28373.exe (PID: 13772)
- Unicorn-60226.exe (PID: 13796)
- Unicorn-21304.exe (PID: 13900)
- Unicorn-19001.exe (PID: 13864)
- Unicorn-46464.exe (PID: 13468)
- Unicorn-9515.exe (PID: 13500)
- Unicorn-37092.exe (PID: 13520)
- Unicorn-64667.exe (PID: 13676)
- Unicorn-40355.exe (PID: 13996)
- Unicorn-60610.exe (PID: 14084)
- Unicorn-38871.exe (PID: 14032)
- Unicorn-58472.exe (PID: 14040)
- Unicorn-39063.exe (PID: 4380)
- Unicorn-61622.exe (PID: 14332)
- Unicorn-8337.exe (PID: 6960)
- Unicorn-6312.exe (PID: 14388)
- Unicorn-6312.exe (PID: 14380)
- Unicorn-45207.exe (PID: 14416)
- Unicorn-33609.exe (PID: 14464)
- Unicorn-33609.exe (PID: 14460)
- Unicorn-37693.exe (PID: 14552)
- Unicorn-50740.exe (PID: 13916)
- Unicorn-5623.exe (PID: 13968)
- Unicorn-17081.exe (PID: 14600)
- Unicorn-29254.exe (PID: 14856)
- Unicorn-60060.exe (PID: 14644)
- Unicorn-17081.exe (PID: 14608)
- Unicorn-10859.exe (PID: 14748)
- Unicorn-24594.exe (PID: 14756)
- Unicorn-37501.exe (PID: 14792)
- Unicorn-58498.exe (PID: 14880)
- Unicorn-24594.exe (PID: 14764)
- Unicorn-13573.exe (PID: 15000)
- Unicorn-31855.exe (PID: 14908)
- Unicorn-44108.exe (PID: 14916)
- Unicorn-40023.exe (PID: 14940)
- Unicorn-17657.exe (PID: 14980)
- Unicorn-37501.exe (PID: 14796)
- Unicorn-21741.exe (PID: 15052)
- Unicorn-25825.exe (PID: 15016)
- Unicorn-56360.exe (PID: 15236)
- Unicorn-64720.exe (PID: 15072)
- Unicorn-1751.exe (PID: 15116)
- Unicorn-64720.exe (PID: 15060)
- Unicorn-29062.exe (PID: 15144)
- Unicorn-10118.exe (PID: 15080)
- Unicorn-46054.exe (PID: 15152)
- Unicorn-54222.exe (PID: 15176)
- Unicorn-32982.exe (PID: 15212)
- Unicorn-36568.exe (PID: 15220)
- Unicorn-41969.exe (PID: 15348)
- Unicorn-4558.exe (PID: 15252)
- Unicorn-17657.exe (PID: 14984)
- Unicorn-12726.exe (PID: 15304)
- Unicorn-35285.exe (PID: 15272)
- Unicorn-18090.exe (PID: 14508)
- Unicorn-41891.exe (PID: 14888)
- Unicorn-28155.exe (PID: 3156)
- Unicorn-25007.exe (PID: 15424)
- Unicorn-35006.exe (PID: 7540)
- Unicorn-18471.exe (PID: 14544)
- Unicorn-39091.exe (PID: 14504)
- Unicorn-45975.exe (PID: 15392)
- Unicorn-36323.exe (PID: 15368)
- Unicorn-5597.exe (PID: 15432)
- Unicorn-53435.exe (PID: 15340)
- Unicorn-10423.exe (PID: 15244)
- Unicorn-47756.exe (PID: 456)
- Unicorn-2334.exe (PID: 15488)
- Unicorn-59504.exe (PID: 15528)
- Unicorn-5597.exe (PID: 15440)
- Unicorn-25554.exe (PID: 15540)
- Unicorn-54606.exe (PID: 15600)
- Unicorn-37615.exe (PID: 15576)
- Unicorn-37615.exe (PID: 15592)
- Unicorn-37615.exe (PID: 15580)
- Unicorn-25271.exe (PID: 15640)
- Unicorn-17849.exe (PID: 15648)
- Unicorn-17849.exe (PID: 15656)
- Unicorn-63787.exe (PID: 15452)
- Unicorn-11264.exe (PID: 15496)
- Unicorn-64912.exe (PID: 15720)
- Unicorn-21933.exe (PID: 15696)
- Unicorn-36707.exe (PID: 15836)
- Unicorn-24455.exe (PID: 15820)
- Unicorn-7543.exe (PID: 15768)
- Unicorn-60749.exe (PID: 15800)
- Unicorn-7543.exe (PID: 15752)
- Unicorn-19241.exe (PID: 15728)
- Unicorn-7543.exe (PID: 15760)
- Unicorn-47643.exe (PID: 15844)
- Unicorn-56308.exe (PID: 15828)
- Unicorn-18425.exe (PID: 15908)
- Unicorn-35191.exe (PID: 15892)
- Unicorn-5518.exe (PID: 15928)
- Unicorn-42110.exe (PID: 15936)
- Unicorn-22509.exe (PID: 15944)
- Unicorn-28347.exe (PID: 16028)
- Unicorn-24263.exe (PID: 16104)
- Unicorn-24263.exe (PID: 16084)
- Unicorn-3188.exe (PID: 16116)
- Unicorn-25938.exe (PID: 15964)
- Unicorn-32431.exe (PID: 16224)
- Unicorn-24263.exe (PID: 16076)
- Unicorn-54990.exe (PID: 16124)
- Unicorn-9873.exe (PID: 16256)
- Unicorn-54990.exe (PID: 16160)
- Unicorn-64227.exe (PID: 16020)
- Unicorn-31114.exe (PID: 16004)
- Unicorn-24263.exe (PID: 16092)
- Unicorn-26401.exe (PID: 16308)
- Unicorn-13494.exe (PID: 16348)
- Unicorn-32431.exe (PID: 16180)
- Unicorn-44684.exe (PID: 16232)
- Unicorn-42737.exe (PID: 16380)
- Unicorn-52389.exe (PID: 13992)
- Unicorn-19239.exe (PID: 16444)
- Unicorn-65296.exe (PID: 16356)
- Unicorn-35774.exe (PID: 16412)
- Unicorn-38575.exe (PID: 16428)
- Unicorn-43864.exe (PID: 16068)
- Unicorn-26401.exe (PID: 16312)
- Unicorn-15540.exe (PID: 16324)
- Unicorn-22238.exe (PID: 16688)
- Unicorn-22238.exe (PID: 16696)
- Unicorn-34591.exe (PID: 16628)
- Unicorn-32188.exe (PID: 16660)
- Unicorn-54779.exe (PID: 16668)
- Unicorn-33248.exe (PID: 16676)
- Unicorn-28104.exe (PID: 16720)
- Unicorn-44797.exe (PID: 16704)
- Unicorn-31498.exe (PID: 16744)
- Unicorn-41997.exe (PID: 16652)
- Unicorn-28104.exe (PID: 16728)
- Unicorn-44440.exe (PID: 16436)
- Unicorn-46743.exe (PID: 16492)
- Unicorn-38575.exe (PID: 16420)
- Unicorn-28104.exe (PID: 16712)
- Unicorn-56765.exe (PID: 16856)
- Unicorn-26322.exe (PID: 16792)
- Unicorn-42567.exe (PID: 16904)
- Unicorn-3572.exe (PID: 16848)
- Unicorn-7756.exe (PID: 16888)
- Unicorn-55203.exe (PID: 17156)
- Unicorn-61233.exe (PID: 17104)
- Unicorn-61233.exe (PID: 17112)
- Unicorn-23661.exe (PID: 17180)
- Unicorn-29036.exe (PID: 17252)
- Unicorn-2394.exe (PID: 17240)
- Unicorn-29036.exe (PID: 17248)
- Unicorn-37667.exe (PID: 17208)
- Unicorn-17269.exe (PID: 17360)
- Unicorn-29256.exe (PID: 17392)
- Unicorn-49749.exe (PID: 16928)
- Unicorn-51979.exe (PID: 17304)
- Unicorn-18949.exe (PID: 17320)
- Unicorn-53568.exe (PID: 6384)
- Unicorn-59955.exe (PID: 8476)
- Unicorn-65515.exe (PID: 17460)
- Unicorn-4824.exe (PID: 17488)
- Unicorn-7325.exe (PID: 17428)
- Unicorn-27191.exe (PID: 17452)
- Unicorn-9448.exe (PID: 17588)
- Unicorn-46205.exe (PID: 17548)
- Unicorn-11129.exe (PID: 17540)
- Unicorn-50381.exe (PID: 17520)
- Unicorn-52790.exe (PID: 17620)
- Unicorn-13340.exe (PID: 17644)
- Unicorn-39983.exe (PID: 17660)
- Unicorn-59588.exe (PID: 17684)
- Unicorn-18363.exe (PID: 17704)
- Unicorn-14008.exe (PID: 17936)
- Unicorn-28590.exe (PID: 17792)
- Unicorn-3994.exe (PID: 17784)
- Unicorn-41497.exe (PID: 17756)
- Unicorn-33958.exe (PID: 17820)
- Unicorn-62739.exe (PID: 17836)
- Unicorn-50957.exe (PID: 17896)
- Unicorn-1756.exe (PID: 17928)
- Unicorn-14008.exe (PID: 17944)
- Unicorn-14008.exe (PID: 17952)
- Unicorn-55233.exe (PID: 17748)
- Unicorn-13843.exe (PID: 18028)
- Unicorn-42789.exe (PID: 18072)
- Unicorn-36667.exe (PID: 18012)
Create files in a temporary directory
- Unicorn-677.exe (PID: 6540)
- Unicorn-24627.exe (PID: 5124)
- Unicorn-31067.exe (PID: 4976)
- 1 (574).exe (PID: 1672)
- Unicorn-36141.exe (PID: 4892)
- Unicorn-61300.exe (PID: 4112)
- Unicorn-3184.exe (PID: 5048)
- Unicorn-57429.exe (PID: 6112)
- Unicorn-33479.exe (PID: 2852)
- Unicorn-61513.exe (PID: 4448)
- Unicorn-15629.exe (PID: 4180)
- Unicorn-38690.exe (PID: 2240)
- Unicorn-6837.exe (PID: 2772)
- Unicorn-52551.exe (PID: 7648)
- Unicorn-22379.exe (PID: 7676)
- Unicorn-46905.exe (PID: 7720)
- Unicorn-26485.exe (PID: 7768)
- Unicorn-59249.exe (PID: 7868)
- Unicorn-45514.exe (PID: 7916)
- Unicorn-53127.exe (PID: 7852)
- Unicorn-53127.exe (PID: 7876)
- Unicorn-20572.exe (PID: 6512)
- Unicorn-26703.exe (PID: 1128)
- Unicorn-29583.exe (PID: 6816)
- Unicorn-17885.exe (PID: 1764)
- Unicorn-54279.exe (PID: 4620)
- Unicorn-17139.exe (PID: 7364)
- Unicorn-53027.exe (PID: 7712)
- Unicorn-44336.exe (PID: 7392)
- Unicorn-39889.exe (PID: 6656)
- Unicorn-13438.exe (PID: 7476)
- Unicorn-25691.exe (PID: 7576)
- Unicorn-3132.exe (PID: 7624)
- Unicorn-3132.exe (PID: 7608)
- Unicorn-25691.exe (PID: 7552)
- Unicorn-14787.exe (PID: 7828)
- Unicorn-25691.exe (PID: 7560)
- Unicorn-53127.exe (PID: 7820)
- Unicorn-21607.exe (PID: 7592)
- Unicorn-25691.exe (PID: 7568)
- Unicorn-31812.exe (PID: 8052)
- Unicorn-12477.exe (PID: 8024)
- Unicorn-9909.exe (PID: 7684)
- Unicorn-65114.exe (PID: 7844)
- Unicorn-64585.exe (PID: 7708)
- Unicorn-22161.exe (PID: 7484)
- Unicorn-56449.exe (PID: 7932)
- Unicorn-63599.exe (PID: 7816)
- Unicorn-21175.exe (PID: 7184)
- Unicorn-26459.exe (PID: 7776)
- Unicorn-16899.exe (PID: 7300)
- Unicorn-63307.exe (PID: 5416)
- Unicorn-40849.exe (PID: 856)
- Unicorn-64538.exe (PID: 2236)
- Unicorn-40663.exe (PID: 7224)
- Unicorn-20904.exe (PID: 7212)
- Unicorn-29727.exe (PID: 7236)
- Unicorn-14782.exe (PID: 7228)
- Unicorn-52670.exe (PID: 1164)
- Unicorn-37725.exe (PID: 7424)
- Unicorn-60631.exe (PID: 8276)
- Unicorn-33989.exe (PID: 8256)
- Unicorn-50133.exe (PID: 8292)
- Unicorn-38435.exe (PID: 8324)
- Unicorn-53127.exe (PID: 7860)
- Unicorn-11238.exe (PID: 8316)
- Unicorn-38435.exe (PID: 8332)
- Unicorn-50880.exe (PID: 8420)
- Unicorn-64523.exe (PID: 8488)
- Unicorn-54964.exe (PID: 8388)
- Unicorn-21607.exe (PID: 7600)
- Unicorn-54964.exe (PID: 8396)
- Unicorn-57211.exe (PID: 7800)
- Unicorn-11238.exe (PID: 8308)
- Unicorn-5208.exe (PID: 8428)
- Unicorn-36489.exe (PID: 8468)
- Unicorn-50880.exe (PID: 8436)
- Unicorn-11814.exe (PID: 8540)
- Unicorn-11814.exe (PID: 8532)
- Unicorn-3646.exe (PID: 8504)
- Unicorn-18077.exe (PID: 8060)
- Unicorn-24067.exe (PID: 8552)
- Unicorn-19983.exe (PID: 8604)
- Unicorn-24067.exe (PID: 8696)
- Unicorn-20074.exe (PID: 8748)
- Unicorn-31912.exe (PID: 8884)
- Unicorn-24067.exe (PID: 8568)
- Unicorn-45648.exe (PID: 8972)
- Unicorn-41762.exe (PID: 6228)
- Unicorn-117.exe (PID: 8628)
- Unicorn-3132.exe (PID: 7616)
- Unicorn-24067.exe (PID: 8612)
- Unicorn-19983.exe (PID: 8596)
- Unicorn-54885.exe (PID: 8860)
- Unicorn-26312.exe (PID: 8840)
- Unicorn-24067.exe (PID: 8580)
- Unicorn-42848.exe (PID: 8932)
- Unicorn-27009.exe (PID: 8648)
- Unicorn-11906.exe (PID: 8676)
- Unicorn-1508.exe (PID: 8588)
- Unicorn-19983.exe (PID: 8720)
- Unicorn-29012.exe (PID: 8044)
- Unicorn-43378.exe (PID: 8852)
- Unicorn-45648.exe (PID: 8876)
- Unicorn-45514.exe (PID: 7884)
- Unicorn-22161.exe (PID: 8080)
- Unicorn-45648.exe (PID: 8868)
- Unicorn-35897.exe (PID: 8012)
- Unicorn-51513.exe (PID: 8924)
- Unicorn-19983.exe (PID: 8636)
- Unicorn-31812.exe (PID: 6344)
- Unicorn-64585.exe (PID: 7544)
- Unicorn-24067.exe (PID: 8620)
- Unicorn-20367.exe (PID: 9068)
- Unicorn-55177.exe (PID: 9060)
- Unicorn-22161.exe (PID: 7764)
- Unicorn-22161.exe (PID: 8072)
- Unicorn-6168.exe (PID: 9116)
- Unicorn-61513.exe (PID: 5384)
- Unicorn-41533.exe (PID: 5304)
- Unicorn-7657.exe (PID: 5936)
- Unicorn-57315.exe (PID: 9172)
- Unicorn-38.exe (PID: 9108)
- Unicorn-37449.exe (PID: 9156)
- Unicorn-12006.exe (PID: 9244)
- Unicorn-51840.exe (PID: 9100)
- Unicorn-22505.exe (PID: 9180)
- Unicorn-57315.exe (PID: 9164)
- Unicorn-16091.exe (PID: 9224)
- Unicorn-59323.exe (PID: 7284)
- Unicorn-1700.exe (PID: 9288)
- Unicorn-5711.exe (PID: 9404)
- Unicorn-309.exe (PID: 9276)
- Unicorn-1700.exe (PID: 9304)
- Unicorn-32427.exe (PID: 9380)
- Unicorn-51648.exe (PID: 9432)
- Unicorn-51648.exe (PID: 9424)
- Unicorn-58307.exe (PID: 9292)
- Unicorn-23443.exe (PID: 9564)
- Unicorn-12006.exe (PID: 9248)
- Unicorn-24259.exe (PID: 9260)
- Unicorn-2877.exe (PID: 9372)
- Unicorn-43309.exe (PID: 9572)
- Unicorn-53677.exe (PID: 2552)
- Unicorn-51684.exe (PID: 7404)
- Unicorn-30481.exe (PID: 9548)
- Unicorn-53677.exe (PID: 1040)
- Unicorn-18601.exe (PID: 6752)
- Unicorn-37087.exe (PID: 9648)
- Unicorn-33557.exe (PID: 9664)
- Unicorn-13521.exe (PID: 9688)
- Unicorn-37663.exe (PID: 9708)
- Unicorn-52416.exe (PID: 9792)
- Unicorn-41555.exe (PID: 9784)
- Unicorn-36463.exe (PID: 9824)
- Unicorn-37371.exe (PID: 9740)
- Unicorn-6339.exe (PID: 8736)
- Unicorn-64689.exe (PID: 10128)
- Unicorn-46407.exe (PID: 10148)
- Unicorn-56613.exe (PID: 10168)
- Unicorn-36603.exe (PID: 3268)
- Unicorn-51648.exe (PID: 9440)
- Unicorn-32427.exe (PID: 9332)
- Unicorn-50967.exe (PID: 10184)
- Unicorn-44653.exe (PID: 4208)
- Unicorn-32593.exe (PID: 10236)
- Unicorn-32593.exe (PID: 10228)
- Unicorn-51067.exe (PID: 10208)
- Unicorn-37039.exe (PID: 7416)
- Unicorn-40569.exe (PID: 1348)
- Unicorn-18757.exe (PID: 9052)
- Unicorn-50875.exe (PID: 9088)
- Unicorn-26925.exe (PID: 9036)
- Unicorn-44745.exe (PID: 9628)
- Unicorn-40661.exe (PID: 10248)
- Unicorn-12456.exe (PID: 10344)
- Unicorn-6889.exe (PID: 10364)
- Unicorn-59619.exe (PID: 10400)
- Unicorn-58301.exe (PID: 8340)
Reads security settings of Internet Explorer
- BackgroundTransferHost.exe (PID: 2552)
- BackgroundTransferHost.exe (PID: 7324)
- BackgroundTransferHost.exe (PID: 7496)
- BackgroundTransferHost.exe (PID: 7792)
- BackgroundTransferHost.exe (PID: 7212)
Reads the software policy settings
- BackgroundTransferHost.exe (PID: 7324)
Creates files or folders in the user directory
- BackgroundTransferHost.exe (PID: 7324)
- WerFault.exe (PID: 1164)
- WerFault.exe (PID: 14564)
- WerFault.exe (PID: 16956)
Checks proxy server information
- BackgroundTransferHost.exe (PID: 7324)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable (generic) (52.9) |
|---|---|---|
| .exe | | | Generic Win/DOS Executable (23.5) |
| .exe | | | DOS Executable Generic (23.5) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:04:26 10:28:09+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 8192 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13b0 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x0000 |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| ComanyName: | aaaa |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
689
Monitored processes
551
Malicious processes
84
Suspicious processes
71
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 456 | C:\Users\admin\AppData\Local\Temp\Unicorn-47756.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-47756.exe | — | Unicorn-56449.exe | |||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 812 | C:\WINDOWS\system32\SppExtComObj.exe -Embedding | C:\Windows\System32\SppExtComObj.Exe | — | svchost.exe | |||||||||||
User: NETWORK SERVICE Company: Microsoft Corporation Integrity Level: SYSTEM Description: KMS Connection Broker Version: 10.0.19041.3996 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 856 | C:\Users\admin\AppData\Local\Temp\Unicorn-40849.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-40849.exe | Unicorn-39889.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1040 | C:\Users\admin\AppData\Local\Temp\Unicorn-53677.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53677.exe | Unicorn-51684.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1128 | C:\Users\admin\AppData\Local\Temp\Unicorn-26703.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-26703.exe | Unicorn-36141.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1164 | C:\WINDOWS\SysWOW64\WerFault.exe -u -p 5332 -s 680 | C:\Windows\SysWOW64\WerFault.exe | — | Unicorn-33758.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Problem Reporting Exit code: 0 Version: 10.0.19041.3996 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 1164 | C:\Users\admin\AppData\Local\Temp\Unicorn-52670.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-52670.exe | Unicorn-26485.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1348 | C:\Users\admin\AppData\Local\Temp\Unicorn-40569.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-40569.exe | Unicorn-64523.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1672 | "C:\Users\admin\AppData\Local\Temp\1 (574).exe" | C:\Users\admin\AppData\Local\Temp\1 (574).exe | explorer.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1764 | C:\Users\admin\AppData\Local\Temp\Unicorn-17885.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-17885.exe | Unicorn-57429.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
17 754
Read events
17 739
Write events
15
Delete events
0
Modification events
| (PID) Process: | (2552) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (2552) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (2552) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7324) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7324) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7324) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7496) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7496) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7496) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7792) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
Executable files
1 034
Suspicious files
8
Text files
1
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7324 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\df10a9e5-65a8-4dcc-9c3a-ec03f54cd08b.down_data | — | |
MD5:— | SHA256:— | |||
| 5124 | Unicorn-24627.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-3184.exe | executable | |
MD5:07FAD4BB6A787CCF7D30D6D255D7376D | SHA256:55DEE8E608970FEBFCA922ECD939E769E0BDF3292DE68A75F2D16DC3A63C3D4D | |||
| 4976 | Unicorn-31067.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-24627.exe | executable | |
MD5:676D0868110FA32BD8596DE75738A6C3 | SHA256:6ECD419DE7CBB8CBBC1CCCC32A18C0EF20811A599D2504F0901786BEB0B9CC89 | |||
| 1672 | 1 (574).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-677.exe | executable | |
MD5:EEC1EAD662B487C02E25610466593FC7 | SHA256:1BD60C0789D2C8FAC1B28E8DE548C1C1DC8AE881833D2FDC0ED49BC68D5C4EBD | |||
| 1672 | 1 (574).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-36141.exe | executable | |
MD5:745A403C80643188C435E26303896E87 | SHA256:1829F7DE83B62A133371C65D976B3F72DDE4E4038D873806A36D6434C546A5B6 | |||
| 1672 | 1 (574).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-31067.exe | executable | |
MD5:2A07D3EB753D93186F19D5A3A65F50C2 | SHA256:A844D3E014EF428740DE926F4F7EE8FFA40471E30A61E34045A58F8C4610D06C | |||
| 4976 | Unicorn-31067.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-61300.exe | executable | |
MD5:3DCE5A2F1505D5AE7D1533138876B43C | SHA256:7773476561EE49B656A2657588F0DECD511ECB4664ECE78071C17BB0E3496958 | |||
| 6540 | Unicorn-677.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-15629.exe | executable | |
MD5:ACC7A314D95BB841F00936C64CBF5DA8 | SHA256:403BD2AD247E98AAC621492F3316636D37E3D6D05CB4B5959C3194F38421643D | |||
| 7324 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\7133398a-03e6-4974-92ad-f3ab6887196a.up_meta_secure | binary | |
MD5:791A847C81BF67CDDB8004B60C18F591 | SHA256:EAF227D2006D7E8290493B2A06BAA28FBAE14037B9615FC91A0C4F8D47206036 | |||
| 6540 | Unicorn-677.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-6837.exe | executable | |
MD5:EE129B0A2D9ACCCC5A2BEE957860E807 | SHA256:F319D97DAA80747BB554B3E138168CF5444A9895F392F8F40EFEAC8FAE95320A | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
25
DNS requests
15
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
6544 | svchost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
— | — | GET | 200 | 95.101.54.128:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
4988 | backgroundTaskHost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
7324 | BackgroundTransferHost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | whitelisted |
9036 | SIHClient.exe | GET | 200 | 23.219.150.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
9036 | SIHClient.exe | GET | 200 | 23.219.150.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
— | — | 95.101.54.128:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
2104 | svchost.exe | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
2112 | svchost.exe | 51.124.78.146:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
3216 | svchost.exe | 40.113.110.67:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 40.126.31.67:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 2.23.77.188:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
4988 | backgroundTaskHost.exe | 20.223.35.26:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4988 | backgroundTaskHost.exe | 2.23.77.188:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
www.bing.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |