| File name: | 1 (1254) |
| Full analysis: | https://app.any.run/tasks/76932f10-a28c-4c2b-947f-210c89f544c2 |
| Verdict: | Malicious activity |
| Analysis date: | March 24, 2025, 10:21:19 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | AF738DF36DE2AD3C9F09585D170A6090 |
| SHA1: | 1251C96C9F7530ABD3C21C763AF8AA750B6C5EB7 |
| SHA256: | 7DB5CF310895678C203F7FFB72CEAACE6FC2D1CC6C63368BDD34D212086F4C97 |
| SSDEEP: | 6144:97w8nD9PnDceA5LjpgeEi5jx5wPqfp8GBf/Wy1OZ5k/8SwjwpyAvEhtOLBIMsYRa:9sOpoeA5/pbCPi+afOy1OZax4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- 1 (1254).exe (PID: 4652)
- Unicorn-566.exe (PID: 5332)
- Unicorn-50966.exe (PID: 4776)
- Unicorn-17779.exe (PID: 6388)
- Unicorn-4946.exe (PID: 6132)
- Unicorn-34089.exe (PID: 6032)
- Unicorn-41231.exe (PID: 1240)
- Unicorn-13197.exe (PID: 6644)
- Unicorn-53955.exe (PID: 1660)
- Unicorn-24703.exe (PID: 6268)
- Unicorn-47825.exe (PID: 4244)
- Unicorn-5963.exe (PID: 5936)
- Unicorn-98.exe (PID: 208)
- Unicorn-24703.exe (PID: 616)
- Unicorn-51900.exe (PID: 672)
- Unicorn-47427.exe (PID: 1676)
- Unicorn-7141.exe (PID: 1388)
- Unicorn-6394.exe (PID: 5984)
- Unicorn-35952.exe (PID: 5360)
- Unicorn-32051.exe (PID: 780)
- Unicorn-40219.exe (PID: 1012)
- Unicorn-40773.exe (PID: 4408)
- Unicorn-3270.exe (PID: 6676)
- Unicorn-52279.exe (PID: 3768)
- Unicorn-47873.exe (PID: 6592)
- Unicorn-25728.exe (PID: 6872)
- Unicorn-11993.exe (PID: 5508)
- Unicorn-8698.exe (PID: 7252)
- Unicorn-13337.exe (PID: 7272)
- Unicorn-24843.exe (PID: 7292)
- Unicorn-59745.exe (PID: 7312)
- Unicorn-28927.exe (PID: 7328)
- Unicorn-6368.exe (PID: 7364)
- Unicorn-2009.exe (PID: 7420)
- Unicorn-2414.exe (PID: 7456)
- Unicorn-35833.exe (PID: 7476)
- Unicorn-14474.exe (PID: 7520)
- Unicorn-31003.exe (PID: 7500)
- Unicorn-36933.exe (PID: 7560)
- Unicorn-2030.exe (PID: 7580)
- Unicorn-49377.exe (PID: 7540)
- Unicorn-22128.exe (PID: 7600)
- Unicorn-34703.exe (PID: 7628)
- Unicorn-34703.exe (PID: 7620)
- Unicorn-42871.exe (PID: 7668)
- Unicorn-52279.exe (PID: 5728)
- Unicorn-46955.exe (PID: 7684)
- Unicorn-42871.exe (PID: 7660)
- Unicorn-46955.exe (PID: 7676)
- Unicorn-44909.exe (PID: 7784)
- Unicorn-51594.exe (PID: 7744)
- Unicorn-42871.exe (PID: 7652)
- Unicorn-31594.exe (PID: 1020)
- Unicorn-39265.exe (PID: 4724)
- Unicorn-25573.exe (PID: 7804)
- Unicorn-31173.exe (PID: 7776)
- Unicorn-31387.exe (PID: 7848)
- Unicorn-60530.exe (PID: 7864)
- Unicorn-42109.exe (PID: 7768)
- Unicorn-6228.exe (PID: 4920)
- Unicorn-16203.exe (PID: 7884)
- Unicorn-41261.exe (PID: 7944)
- Unicorn-11926.exe (PID: 7920)
- Unicorn-57920.exe (PID: 7964)
- Unicorn-34576.exe (PID: 7900)
- Unicorn-12289.exe (PID: 8040)
- Unicorn-32082.exe (PID: 7988)
- Unicorn-44407.exe (PID: 8020)
- Unicorn-15627.exe (PID: 8056)
- Unicorn-3929.exe (PID: 8128)
- Unicorn-48299.exe (PID: 8100)
- Unicorn-6103.exe (PID: 7348)
- Unicorn-44962.exe (PID: 8084)
- Unicorn-48299.exe (PID: 8108)
- Unicorn-58697.exe (PID: 8092)
- Unicorn-61895.exe (PID: 5204)
- Unicorn-13441.exe (PID: 6824)
- Unicorn-42295.exe (PID: 7400)
- Unicorn-32923.exe (PID: 8212)
- Unicorn-9186.exe (PID: 8308)
- Unicorn-17547.exe (PID: 8268)
- Unicorn-59326.exe (PID: 8240)
- Unicorn-41594.exe (PID: 8328)
- Unicorn-41667.exe (PID: 8360)
- Unicorn-35013.exe (PID: 8508)
- Unicorn-34651.exe (PID: 8448)
- Unicorn-56223.exe (PID: 8564)
- Unicorn-60307.exe (PID: 8568)
- Unicorn-54879.exe (PID: 8492)
- Unicorn-52040.exe (PID: 7356)
- Unicorn-26845.exe (PID: 8464)
- Unicorn-34542.exe (PID: 8616)
- Unicorn-2938.exe (PID: 8596)
- Unicorn-43264.exe (PID: 8636)
- Unicorn-47671.exe (PID: 8692)
- Unicorn-57000.exe (PID: 8644)
- Unicorn-55647.exe (PID: 8816)
- Unicorn-7193.exe (PID: 8784)
- Unicorn-31505.exe (PID: 8840)
- Unicorn-51371.exe (PID: 8864)
- Unicorn-19445.exe (PID: 8768)
- Unicorn-31143.exe (PID: 8800)
- Unicorn-48195.exe (PID: 5384)
- Unicorn-1336.exe (PID: 9024)
- Unicorn-7193.exe (PID: 8792)
- Unicorn-54813.exe (PID: 8924)
- Unicorn-59874.exe (PID: 8940)
- Unicorn-51594.exe (PID: 7736)
- Unicorn-25941.exe (PID: 9032)
- Unicorn-59874.exe (PID: 8948)
- Unicorn-62613.exe (PID: 9104)
- Unicorn-43461.exe (PID: 9080)
- Unicorn-50774.exe (PID: 7796)
- Unicorn-20295.exe (PID: 7152)
- Unicorn-9941.exe (PID: 9220)
- Unicorn-44097.exe (PID: 9244)
- Unicorn-9002.exe (PID: 9280)
- Unicorn-31670.exe (PID: 6156)
- Unicorn-4534.exe (PID: 9352)
- Unicorn-42635.exe (PID: 9416)
- Unicorn-54814.exe (PID: 9384)
- Unicorn-48949.exe (PID: 9376)
- Unicorn-25832.exe (PID: 8136)
- Unicorn-58779.exe (PID: 9564)
- Unicorn-3309.exe (PID: 9620)
- Unicorn-21055.exe (PID: 8188)
- Unicorn-14814.exe (PID: 9684)
- Unicorn-25998.exe (PID: 9656)
- Unicorn-17944.exe (PID: 9728)
- Unicorn-59547.exe (PID: 9744)
- Unicorn-24497.exe (PID: 9808)
- Unicorn-1384.exe (PID: 9796)
- Unicorn-8492.exe (PID: 9712)
- Unicorn-64783.exe (PID: 9824)
- Unicorn-10073.exe (PID: 8388)
- Unicorn-52531.exe (PID: 9852)
- Unicorn-52147.exe (PID: 10020)
- Unicorn-52531.exe (PID: 9872)
- Unicorn-52531.exe (PID: 9860)
- Unicorn-32473.exe (PID: 9924)
- Unicorn-17428.exe (PID: 9968)
- Unicorn-15390.exe (PID: 9960)
- Unicorn-56786.exe (PID: 9992)
- Unicorn-26681.exe (PID: 10012)
- Unicorn-55966.exe (PID: 10032)
- Unicorn-41047.exe (PID: 10132)
- Unicorn-19283.exe (PID: 10072)
- Unicorn-19283.exe (PID: 10080)
- Unicorn-20361.exe (PID: 10148)
- Unicorn-35013.exe (PID: 8496)
- Unicorn-44939.exe (PID: 10188)
- Unicorn-4653.exe (PID: 10224)
- Unicorn-28965.exe (PID: 9452)
- Unicorn-36579.exe (PID: 8756)
- Unicorn-28411.exe (PID: 8748)
- Unicorn-62022.exe (PID: 10196)
- Unicorn-1476.exe (PID: 9512)
- Unicorn-43991.exe (PID: 9092)
- Unicorn-28079.exe (PID: 8956)
- Unicorn-53138.exe (PID: 9016)
- Unicorn-50677.exe (PID: 9612)
- Unicorn-49791.exe (PID: 9916)
- Unicorn-49791.exe (PID: 3956)
- Unicorn-1197.exe (PID: 9320)
- Unicorn-41431.exe (PID: 10252)
- Unicorn-64866.exe (PID: 10272)
- Unicorn-64866.exe (PID: 10276)
- Unicorn-39017.exe (PID: 10340)
- Unicorn-58426.exe (PID: 10396)
- Unicorn-4836.exe (PID: 10388)
- Unicorn-37508.exe (PID: 10432)
- Unicorn-11285.exe (PID: 9648)
- Unicorn-30353.exe (PID: 8292)
- Unicorn-39017.exe (PID: 10348)
- Unicorn-52753.exe (PID: 10332)
- Unicorn-26957.exe (PID: 10600)
- Unicorn-50603.exe (PID: 8532)
- Unicorn-59459.exe (PID: 10544)
- Unicorn-51253.exe (PID: 10168)
- Unicorn-24881.exe (PID: 9192)
- Unicorn-51371.exe (PID: 8848)
- Unicorn-19195.exe (PID: 10684)
- Unicorn-2474.exe (PID: 10780)
- Unicorn-2474.exe (PID: 10776)
- Unicorn-59583.exe (PID: 9508)
- Unicorn-46522.exe (PID: 10752)
- Unicorn-46522.exe (PID: 10760)
- Unicorn-24431.exe (PID: 10824)
- Unicorn-55897.exe (PID: 8076)
- Unicorn-32599.exe (PID: 10840)
- Unicorn-41321.exe (PID: 10856)
- Unicorn-12894.exe (PID: 9312)
- Unicorn-38337.exe (PID: 11024)
- Unicorn-12349.exe (PID: 10944)
- Unicorn-30168.exe (PID: 10960)
- Unicorn-3626.exe (PID: 10892)
- Unicorn-30360.exe (PID: 10872)
- Unicorn-97.exe (PID: 10992)
- Unicorn-19963.exe (PID: 11000)
- Unicorn-19640.exe (PID: 10924)
- Unicorn-40575.exe (PID: 10912)
- Unicorn-40191.exe (PID: 11076)
- Unicorn-29200.exe (PID: 10968)
- Unicorn-23529.exe (PID: 8776)
- Unicorn-24601.exe (PID: 11032)
- Unicorn-20325.exe (PID: 11060)
- Unicorn-20325.exe (PID: 11068)
- Unicorn-10900.exe (PID: 11116)
- Unicorn-16765.exe (PID: 11124)
- Unicorn-45982.exe (PID: 11160)
- Unicorn-24623.exe (PID: 11204)
- Unicorn-4010.exe (PID: 9868)
- Unicorn-45043.exe (PID: 9548)
- Unicorn-2064.exe (PID: 11232)
- Unicorn-2064.exe (PID: 11212)
- Unicorn-12370.exe (PID: 11244)
- Unicorn-30051.exe (PID: 4944)
- Unicorn-33486.exe (PID: 11548)
- Unicorn-2064.exe (PID: 11220)
- Unicorn-44341.exe (PID: 6712)
- Unicorn-54555.exe (PID: 11288)
- Unicorn-46387.exe (PID: 4212)
- Unicorn-33751.exe (PID: 11556)
- Unicorn-46750.exe (PID: 11412)
- Unicorn-16455.exe (PID: 11252)
- Unicorn-63885.exe (PID: 8916)
- Unicorn-44341.exe (PID: 2616)
- Unicorn-34689.exe (PID: 11272)
- Unicorn-55110.exe (PID: 11320)
- Unicorn-11476.exe (PID: 11376)
- Unicorn-1078.exe (PID: 11420)
- Unicorn-1078.exe (PID: 11428)
- Unicorn-13522.exe (PID: 11352)
- Unicorn-54555.exe (PID: 11312)
- Unicorn-13522.exe (PID: 11356)
- Unicorn-12568.exe (PID: 11592)
- Unicorn-1078.exe (PID: 11448)
- Unicorn-1078.exe (PID: 11440)
- Unicorn-34689.exe (PID: 6068)
- Unicorn-1441.exe (PID: 11664)
- Unicorn-25391.exe (PID: 11616)
- Unicorn-4513.exe (PID: 11692)
- Unicorn-17415.exe (PID: 11584)
- Unicorn-51007.exe (PID: 11776)
- Unicorn-46193.exe (PID: 11792)
- Unicorn-48744.exe (PID: 11640)
- Unicorn-46261.exe (PID: 9072)
- Unicorn-35981.exe (PID: 11460)
- Unicorn-25945.exe (PID: 11716)
Starts itself from another location
- Unicorn-566.exe (PID: 5332)
- 1 (1254).exe (PID: 4652)
- Unicorn-17779.exe (PID: 6388)
- Unicorn-50966.exe (PID: 4776)
- Unicorn-47825.exe (PID: 4244)
- Unicorn-34089.exe (PID: 6032)
- Unicorn-4946.exe (PID: 6132)
- Unicorn-41231.exe (PID: 1240)
- Unicorn-24703.exe (PID: 616)
- Unicorn-24703.exe (PID: 6268)
- Unicorn-5963.exe (PID: 5936)
- Unicorn-6228.exe (PID: 4920)
- Unicorn-53955.exe (PID: 1660)
- Unicorn-98.exe (PID: 208)
- Unicorn-47427.exe (PID: 1676)
- Unicorn-7141.exe (PID: 1388)
- Unicorn-6394.exe (PID: 5984)
- Unicorn-13197.exe (PID: 6644)
- Unicorn-32051.exe (PID: 780)
- Unicorn-40219.exe (PID: 1012)
- Unicorn-40773.exe (PID: 4408)
- Unicorn-3270.exe (PID: 6676)
- Unicorn-52279.exe (PID: 3768)
- Unicorn-52279.exe (PID: 5728)
- Unicorn-47873.exe (PID: 6592)
- Unicorn-11993.exe (PID: 5508)
- Unicorn-39265.exe (PID: 4724)
- Unicorn-31594.exe (PID: 1020)
- Unicorn-48195.exe (PID: 5384)
- Unicorn-25728.exe (PID: 6872)
- Unicorn-8698.exe (PID: 7252)
- Unicorn-13337.exe (PID: 7272)
- Unicorn-24843.exe (PID: 7292)
- Unicorn-2009.exe (PID: 7420)
- Unicorn-6103.exe (PID: 7348)
- Unicorn-35952.exe (PID: 5360)
- Unicorn-42295.exe (PID: 7400)
- Unicorn-59745.exe (PID: 7312)
- Unicorn-28927.exe (PID: 7328)
- Unicorn-35833.exe (PID: 7476)
- Unicorn-2414.exe (PID: 7456)
- Unicorn-14474.exe (PID: 7520)
- Unicorn-31003.exe (PID: 7500)
- Unicorn-2030.exe (PID: 7580)
- Unicorn-49377.exe (PID: 7540)
- Unicorn-36933.exe (PID: 7560)
- Unicorn-52040.exe (PID: 7356)
- Unicorn-22128.exe (PID: 7600)
- Unicorn-34703.exe (PID: 7620)
- Unicorn-42871.exe (PID: 7668)
- Unicorn-46955.exe (PID: 7684)
- Unicorn-34703.exe (PID: 7628)
- Unicorn-42871.exe (PID: 7660)
- Unicorn-46955.exe (PID: 7676)
- Unicorn-44909.exe (PID: 7784)
- Unicorn-51594.exe (PID: 7744)
- Unicorn-51900.exe (PID: 672)
- Unicorn-50774.exe (PID: 7796)
- Unicorn-31173.exe (PID: 7776)
- Unicorn-25573.exe (PID: 7804)
- Unicorn-42871.exe (PID: 7652)
- Unicorn-42109.exe (PID: 7768)
- Unicorn-31387.exe (PID: 7848)
- Unicorn-16203.exe (PID: 7884)
- Unicorn-41261.exe (PID: 7944)
- Unicorn-60530.exe (PID: 7864)
- Unicorn-11926.exe (PID: 7920)
- Unicorn-57920.exe (PID: 7964)
- Unicorn-34576.exe (PID: 7900)
- Unicorn-44407.exe (PID: 8020)
- Unicorn-12289.exe (PID: 8040)
- Unicorn-32082.exe (PID: 7988)
- Unicorn-3929.exe (PID: 8128)
- Unicorn-48299.exe (PID: 8100)
- Unicorn-25832.exe (PID: 8136)
- Unicorn-55897.exe (PID: 8076)
- Unicorn-15627.exe (PID: 8056)
- Unicorn-58697.exe (PID: 8092)
- Unicorn-44962.exe (PID: 8084)
- Unicorn-48299.exe (PID: 8108)
- Unicorn-21055.exe (PID: 8188)
- Unicorn-61895.exe (PID: 5204)
- Unicorn-13441.exe (PID: 6824)
- Unicorn-32923.exe (PID: 8212)
- Unicorn-59326.exe (PID: 8240)
- Unicorn-9186.exe (PID: 8308)
- Unicorn-30353.exe (PID: 8292)
- Unicorn-17547.exe (PID: 8268)
- Unicorn-41667.exe (PID: 8360)
- Unicorn-41594.exe (PID: 8328)
- Unicorn-10073.exe (PID: 8388)
- Unicorn-34651.exe (PID: 8448)
- Unicorn-35013.exe (PID: 8508)
- Unicorn-50603.exe (PID: 8532)
- Unicorn-35013.exe (PID: 8496)
- Unicorn-60307.exe (PID: 8568)
- Unicorn-26845.exe (PID: 8464)
- Unicorn-34542.exe (PID: 8616)
- Unicorn-2938.exe (PID: 8596)
- Unicorn-6368.exe (PID: 7364)
- Unicorn-43264.exe (PID: 8636)
- Unicorn-57000.exe (PID: 8644)
- Unicorn-47671.exe (PID: 8692)
- Unicorn-55647.exe (PID: 8816)
- Unicorn-7193.exe (PID: 8784)
- Unicorn-23529.exe (PID: 8776)
- Unicorn-31505.exe (PID: 8840)
- Unicorn-51371.exe (PID: 8864)
- Unicorn-51371.exe (PID: 8848)
- Unicorn-54813.exe (PID: 8924)
- Unicorn-31143.exe (PID: 8800)
- Unicorn-1336.exe (PID: 9024)
- Unicorn-7193.exe (PID: 8792)
- Unicorn-19445.exe (PID: 8768)
- Unicorn-28079.exe (PID: 8956)
- Unicorn-59874.exe (PID: 8940)
- Unicorn-51594.exe (PID: 7736)
- Unicorn-25941.exe (PID: 9032)
- Unicorn-43991.exe (PID: 9092)
- Unicorn-53138.exe (PID: 9016)
- Unicorn-59874.exe (PID: 8948)
- Unicorn-62613.exe (PID: 9104)
- Unicorn-46261.exe (PID: 9072)
- Unicorn-63885.exe (PID: 8916)
- Unicorn-43461.exe (PID: 9080)
- Unicorn-20295.exe (PID: 7152)
- Unicorn-9941.exe (PID: 9220)
- Unicorn-44097.exe (PID: 9244)
- Unicorn-9002.exe (PID: 9280)
- Unicorn-1197.exe (PID: 9320)
- Unicorn-42635.exe (PID: 9416)
- Unicorn-54814.exe (PID: 9384)
- Unicorn-48949.exe (PID: 9376)
- Unicorn-58779.exe (PID: 9564)
- Unicorn-3309.exe (PID: 9620)
- Unicorn-12894.exe (PID: 9312)
- Unicorn-14814.exe (PID: 9684)
- Unicorn-11285.exe (PID: 9648)
- Unicorn-17944.exe (PID: 9728)
- Unicorn-64783.exe (PID: 9824)
- Unicorn-59547.exe (PID: 9744)
- Unicorn-24497.exe (PID: 9808)
- Unicorn-1384.exe (PID: 9796)
- Unicorn-8492.exe (PID: 9712)
- Unicorn-52531.exe (PID: 9872)
- Unicorn-52531.exe (PID: 9860)
- Unicorn-52531.exe (PID: 9852)
- Unicorn-52147.exe (PID: 10020)
- Unicorn-32473.exe (PID: 9924)
- Unicorn-17428.exe (PID: 9968)
- Unicorn-56786.exe (PID: 9992)
- Unicorn-15390.exe (PID: 9960)
- Unicorn-19283.exe (PID: 10080)
- Unicorn-55966.exe (PID: 10032)
- Unicorn-41047.exe (PID: 10132)
- Unicorn-19283.exe (PID: 10072)
- Unicorn-26681.exe (PID: 10012)
- Unicorn-20361.exe (PID: 10148)
- Unicorn-56223.exe (PID: 8564)
- Unicorn-44939.exe (PID: 10188)
- Unicorn-28965.exe (PID: 9452)
- Unicorn-4653.exe (PID: 10224)
- Unicorn-51253.exe (PID: 10168)
- Unicorn-62022.exe (PID: 10196)
- Unicorn-36579.exe (PID: 8756)
- Unicorn-24881.exe (PID: 9192)
- Unicorn-28411.exe (PID: 8748)
- Unicorn-1476.exe (PID: 9512)
- Unicorn-50677.exe (PID: 9612)
- Unicorn-31670.exe (PID: 6156)
- Unicorn-49791.exe (PID: 9916)
Executes application which crashes
- Unicorn-35153.exe (PID: 3140)
- Unicorn-29563.exe (PID: 8400)
INFO
Checks supported languages
- 1 (1254).exe (PID: 4652)
- Unicorn-566.exe (PID: 5332)
- Unicorn-50966.exe (PID: 4776)
- Unicorn-17779.exe (PID: 6388)
- Unicorn-4946.exe (PID: 6132)
- Unicorn-47825.exe (PID: 4244)
- Unicorn-53955.exe (PID: 1660)
- Unicorn-34089.exe (PID: 6032)
- Unicorn-41231.exe (PID: 1240)
- Unicorn-13197.exe (PID: 6644)
- Unicorn-7141.exe (PID: 1388)
- Unicorn-35952.exe (PID: 5360)
- Unicorn-24703.exe (PID: 6268)
- Unicorn-5963.exe (PID: 5936)
- Unicorn-6228.exe (PID: 4920)
- Unicorn-51900.exe (PID: 672)
- Unicorn-32051.exe (PID: 780)
- Unicorn-40219.exe (PID: 1012)
- Unicorn-3270.exe (PID: 6676)
- Unicorn-40773.exe (PID: 4408)
- Unicorn-52279.exe (PID: 3768)
- Unicorn-48195.exe (PID: 5384)
- Unicorn-11993.exe (PID: 5508)
- Unicorn-25728.exe (PID: 6872)
- Unicorn-31594.exe (PID: 1020)
- Unicorn-8698.exe (PID: 7252)
- Unicorn-13337.exe (PID: 7272)
- Unicorn-24843.exe (PID: 7292)
- Unicorn-59745.exe (PID: 7312)
- Unicorn-28927.exe (PID: 7328)
- Unicorn-52040.exe (PID: 7356)
- Unicorn-6368.exe (PID: 7364)
- Unicorn-6103.exe (PID: 7348)
- Unicorn-42295.exe (PID: 7400)
- Unicorn-2009.exe (PID: 7420)
- Unicorn-2414.exe (PID: 7456)
- Unicorn-35833.exe (PID: 7476)
- Unicorn-31003.exe (PID: 7500)
- Unicorn-14474.exe (PID: 7520)
- Unicorn-49377.exe (PID: 7540)
- Unicorn-2030.exe (PID: 7580)
- Unicorn-34703.exe (PID: 7628)
- Unicorn-22128.exe (PID: 7600)
- Unicorn-34703.exe (PID: 7620)
- Unicorn-51594.exe (PID: 7736)
- Unicorn-42871.exe (PID: 7668)
- Unicorn-42871.exe (PID: 7652)
- Unicorn-42871.exe (PID: 7660)
- Unicorn-46955.exe (PID: 7676)
- Unicorn-46955.exe (PID: 7684)
- Unicorn-51594.exe (PID: 7744)
- Unicorn-31387.exe (PID: 7848)
- Unicorn-16203.exe (PID: 7884)
- Unicorn-34576.exe (PID: 7900)
- Unicorn-11926.exe (PID: 7920)
- Unicorn-41261.exe (PID: 7944)
- Unicorn-42109.exe (PID: 7768)
- Unicorn-31173.exe (PID: 7776)
- Unicorn-25573.exe (PID: 7804)
- Unicorn-57920.exe (PID: 7964)
- Unicorn-32082.exe (PID: 7988)
- Unicorn-12289.exe (PID: 8040)
- Unicorn-15627.exe (PID: 8056)
- Unicorn-55897.exe (PID: 8076)
- Unicorn-58697.exe (PID: 8092)
- Unicorn-25832.exe (PID: 8136)
- Unicorn-21055.exe (PID: 8188)
- Unicorn-13441.exe (PID: 6824)
- Unicorn-3929.exe (PID: 8128)
- Unicorn-48299.exe (PID: 8108)
- Unicorn-48299.exe (PID: 8100)
- Unicorn-59326.exe (PID: 8240)
- Unicorn-17547.exe (PID: 8268)
- Unicorn-35153.exe (PID: 3140)
- Unicorn-32923.exe (PID: 8212)
- Unicorn-9186.exe (PID: 8308)
- Unicorn-41667.exe (PID: 8360)
- Unicorn-10073.exe (PID: 8388)
- Unicorn-34651.exe (PID: 8448)
- Unicorn-26845.exe (PID: 8464)
- Unicorn-30353.exe (PID: 8292)
- Unicorn-41594.exe (PID: 8328)
- Unicorn-35013.exe (PID: 8508)
- Unicorn-54879.exe (PID: 8492)
- Unicorn-50603.exe (PID: 8532)
- Unicorn-60307.exe (PID: 8568)
- Unicorn-2938.exe (PID: 8596)
- Unicorn-34542.exe (PID: 8616)
- Unicorn-56223.exe (PID: 8564)
- Unicorn-43264.exe (PID: 8636)
- Unicorn-57000.exe (PID: 8644)
- Unicorn-31143.exe (PID: 8800)
- Unicorn-7193.exe (PID: 8784)
- Unicorn-47671.exe (PID: 8692)
- Unicorn-59874.exe (PID: 8940)
- Unicorn-63885.exe (PID: 8916)
- Unicorn-7193.exe (PID: 8792)
- Unicorn-31505.exe (PID: 8840)
- Unicorn-55647.exe (PID: 8816)
- Unicorn-53138.exe (PID: 9016)
- Unicorn-28079.exe (PID: 8956)
- Unicorn-43461.exe (PID: 9080)
- Unicorn-46261.exe (PID: 9072)
- Unicorn-31670.exe (PID: 6156)
- Unicorn-59874.exe (PID: 8948)
- Unicorn-1336.exe (PID: 9024)
- Unicorn-25941.exe (PID: 9032)
- Unicorn-9002.exe (PID: 9280)
- Unicorn-12894.exe (PID: 9312)
- Unicorn-20295.exe (PID: 7152)
- Unicorn-9941.exe (PID: 9220)
- Unicorn-1197.exe (PID: 9320)
- Unicorn-4534.exe (PID: 9352)
- Unicorn-48949.exe (PID: 9376)
- Unicorn-54814.exe (PID: 9384)
- Unicorn-42635.exe (PID: 9416)
- Unicorn-58779.exe (PID: 9564)
- Unicorn-11285.exe (PID: 9648)
- Unicorn-25998.exe (PID: 9656)
- Unicorn-8492.exe (PID: 9712)
- Unicorn-17944.exe (PID: 9728)
- Unicorn-59547.exe (PID: 9744)
- Unicorn-3309.exe (PID: 9620)
- Unicorn-1384.exe (PID: 9796)
- Unicorn-24497.exe (PID: 9808)
- Unicorn-52531.exe (PID: 9852)
- Unicorn-52531.exe (PID: 9872)
- Unicorn-52531.exe (PID: 9860)
- Unicorn-64783.exe (PID: 9824)
- Unicorn-15390.exe (PID: 9960)
- Unicorn-56786.exe (PID: 9992)
- Unicorn-55966.exe (PID: 10032)
- Unicorn-26681.exe (PID: 10012)
- Unicorn-19283.exe (PID: 10080)
- Unicorn-32473.exe (PID: 9924)
- Unicorn-17428.exe (PID: 9968)
- Unicorn-20361.exe (PID: 10148)
- Unicorn-62022.exe (PID: 10196)
- Unicorn-41047.exe (PID: 10132)
- Unicorn-28411.exe (PID: 8748)
- Unicorn-1476.exe (PID: 9512)
- Unicorn-50677.exe (PID: 9612)
- Unicorn-49791.exe (PID: 9916)
- Unicorn-49791.exe (PID: 3956)
- Unicorn-36579.exe (PID: 8756)
- Unicorn-24881.exe (PID: 9192)
- Unicorn-28965.exe (PID: 9452)
- Unicorn-64866.exe (PID: 10272)
- Unicorn-64866.exe (PID: 10276)
- Unicorn-52753.exe (PID: 10332)
- Unicorn-39017.exe (PID: 10348)
- Unicorn-58426.exe (PID: 10396)
- Unicorn-59583.exe (PID: 9508)
- Unicorn-26957.exe (PID: 10600)
- Unicorn-59459.exe (PID: 10544)
- Unicorn-46522.exe (PID: 10752)
- Unicorn-2474.exe (PID: 10780)
- Unicorn-46522.exe (PID: 10760)
- Unicorn-24431.exe (PID: 10824)
- Unicorn-32599.exe (PID: 10840)
- Unicorn-41321.exe (PID: 10856)
- Unicorn-30360.exe (PID: 10872)
- Unicorn-40575.exe (PID: 10912)
- Unicorn-19640.exe (PID: 10924)
- Unicorn-12349.exe (PID: 10944)
- Unicorn-40191.exe (PID: 11076)
- Unicorn-20325.exe (PID: 11060)
- Unicorn-16765.exe (PID: 11124)
- Unicorn-10900.exe (PID: 11116)
- Unicorn-30168.exe (PID: 10960)
- Unicorn-29200.exe (PID: 10968)
- Unicorn-97.exe (PID: 10992)
- Unicorn-24601.exe (PID: 11032)
- Unicorn-38337.exe (PID: 11024)
- Unicorn-20325.exe (PID: 11068)
- Unicorn-24623.exe (PID: 11204)
- Unicorn-2064.exe (PID: 11220)
- Unicorn-45982.exe (PID: 11160)
- Unicorn-12370.exe (PID: 11244)
- Unicorn-45043.exe (PID: 9548)
- Unicorn-16455.exe (PID: 11252)
- Unicorn-34689.exe (PID: 6068)
- Unicorn-54555.exe (PID: 11288)
- Unicorn-54555.exe (PID: 11312)
- Unicorn-48425.exe (PID: 11296)
- Unicorn-46387.exe (PID: 4212)
- Unicorn-34689.exe (PID: 11272)
- Unicorn-13522.exe (PID: 11352)
- Unicorn-55110.exe (PID: 11320)
- Unicorn-13522.exe (PID: 11356)
- Unicorn-1078.exe (PID: 11440)
- Unicorn-11476.exe (PID: 11376)
- Unicorn-33751.exe (PID: 11556)
- Unicorn-17415.exe (PID: 11584)
- Unicorn-1078.exe (PID: 11448)
- Unicorn-46750.exe (PID: 11412)
- Unicorn-35981.exe (PID: 11460)
- Unicorn-4513.exe (PID: 11692)
- Unicorn-1441.exe (PID: 11664)
- Unicorn-33294.exe (PID: 11624)
- Unicorn-50450.exe (PID: 11684)
- Unicorn-50450.exe (PID: 11700)
- Unicorn-39681.exe (PID: 11708)
- Unicorn-51007.exe (PID: 11776)
- Unicorn-12568.exe (PID: 11592)
- Unicorn-25391.exe (PID: 11616)
- Unicorn-63107.exe (PID: 11856)
- Unicorn-6890.exe (PID: 11904)
- Unicorn-12820.exe (PID: 11980)
- Unicorn-59983.exe (PID: 11952)
- Unicorn-34830.exe (PID: 12024)
- Unicorn-46193.exe (PID: 11792)
- Unicorn-1846.exe (PID: 11832)
- Unicorn-47134.exe (PID: 11876)
- Unicorn-53486.exe (PID: 12056)
- Unicorn-11898.exe (PID: 12064)
- Unicorn-3901.exe (PID: 12192)
- Unicorn-38249.exe (PID: 12176)
- Unicorn-59761.exe (PID: 12240)
- Unicorn-7430.exe (PID: 12212)
- Unicorn-2889.exe (PID: 12248)
- Unicorn-49978.exe (PID: 11572)
- Unicorn-40849.exe (PID: 12148)
- Unicorn-28619.exe (PID: 6656)
- Unicorn-42909.exe (PID: 12292)
- Unicorn-28427.exe (PID: 12320)
- Unicorn-53678.exe (PID: 12336)
- Unicorn-1876.exe (PID: 12344)
- Unicorn-33065.exe (PID: 12356)
- Unicorn-16367.exe (PID: 812)
- Unicorn-58722.exe (PID: 12476)
- Unicorn-47761.exe (PID: 12500)
- Unicorn-42193.exe (PID: 12508)
- Unicorn-46278.exe (PID: 12556)
- Unicorn-46278.exe (PID: 12572)
- Unicorn-46278.exe (PID: 12564)
- Unicorn-57783.exe (PID: 12608)
- Unicorn-54010.exe (PID: 12388)
- Unicorn-30133.exe (PID: 12444)
- Unicorn-40745.exe (PID: 12720)
- Unicorn-2313.exe (PID: 12728)
- Unicorn-13248.exe (PID: 12736)
- Unicorn-39069.exe (PID: 12804)
- Unicorn-39069.exe (PID: 12796)
- Unicorn-30709.exe (PID: 12868)
- Unicorn-45729.exe (PID: 12904)
- Unicorn-59874.exe (PID: 12652)
- Unicorn-9694.exe (PID: 12712)
- Unicorn-34239.exe (PID: 12928)
- Unicorn-34793.exe (PID: 12896)
- Unicorn-23693.exe (PID: 13108)
- Unicorn-42407.exe (PID: 12956)
- Unicorn-42769.exe (PID: 13028)
- Unicorn-5193.exe (PID: 13004)
- Unicorn-56505.exe (PID: 13036)
- Unicorn-56505.exe (PID: 13020)
- Unicorn-49681.exe (PID: 13084)
- Unicorn-60642.exe (PID: 13076)
- Unicorn-24984.exe (PID: 13148)
- Unicorn-34793.exe (PID: 12888)
- Unicorn-42407.exe (PID: 12948)
- Unicorn-22070.exe (PID: 13096)
- Unicorn-14778.exe (PID: 13172)
- Unicorn-26574.exe (PID: 13240)
- Unicorn-22490.exe (PID: 13232)
- Unicorn-51343.exe (PID: 13280)
- Unicorn-43175.exe (PID: 456)
- Unicorn-8125.exe (PID: 13324)
- Unicorn-27991.exe (PID: 13332)
- Unicorn-8125.exe (PID: 13316)
- Unicorn-36713.exe (PID: 13404)
- Unicorn-57134.exe (PID: 13428)
- Unicorn-57134.exe (PID: 13436)
- Unicorn-23523.exe (PID: 13484)
- Unicorn-62317.exe (PID: 13552)
- Unicorn-2910.exe (PID: 13568)
- Unicorn-2645.exe (PID: 13560)
- Unicorn-44325.exe (PID: 13696)
- Unicorn-35583.exe (PID: 13632)
- Unicorn-56195.exe (PID: 13508)
- Unicorn-49179.exe (PID: 13736)
- Unicorn-48795.exe (PID: 13792)
- Unicorn-1493.exe (PID: 13904)
- Unicorn-36927.exe (PID: 13720)
- Unicorn-60855.exe (PID: 13868)
- Unicorn-18561.exe (PID: 14152)
- Unicorn-59210.exe (PID: 14188)
- Unicorn-63294.exe (PID: 14220)
- Unicorn-59210.exe (PID: 14192)
- Unicorn-63294.exe (PID: 14212)
- Unicorn-22261.exe (PID: 14264)
- Unicorn-17083.exe (PID: 14032)
- Unicorn-5925.exe (PID: 14280)
- Unicorn-38043.exe (PID: 14296)
- Unicorn-51255.exe (PID: 14504)
- Unicorn-59432.exe (PID: 14308)
- Unicorn-41670.exe (PID: 14332)
- Unicorn-53922.exe (PID: 7588)
- Unicorn-56278.exe (PID: 3156)
- Unicorn-37149.exe (PID: 14368)
- Unicorn-48110.exe (PID: 14344)
- Unicorn-22402.exe (PID: 14456)
- Unicorn-15245.exe (PID: 14420)
- Unicorn-28980.exe (PID: 14436)
- Unicorn-7077.exe (PID: 14400)
- Unicorn-16536.exe (PID: 14464)
- Unicorn-43641.exe (PID: 14572)
- Unicorn-53293.exe (PID: 14556)
- Unicorn-22475.exe (PID: 14548)
- Unicorn-26294.exe (PID: 14624)
- Unicorn-26559.exe (PID: 14632)
- Unicorn-26559.exe (PID: 14640)
- Unicorn-29880.exe (PID: 14672)
- Unicorn-43087.exe (PID: 14496)
- Unicorn-57377.exe (PID: 14564)
- Unicorn-15821.exe (PID: 14836)
- Unicorn-7653.exe (PID: 14816)
- Unicorn-7653.exe (PID: 14804)
- Unicorn-40325.exe (PID: 14896)
- Unicorn-23797.exe (PID: 14932)
- Unicorn-40133.exe (PID: 14964)
- Unicorn-37341.exe (PID: 15020)
- Unicorn-48131.exe (PID: 14748)
- Unicorn-43206.exe (PID: 15036)
- Unicorn-19521.exe (PID: 15128)
- Unicorn-15437.exe (PID: 15108)
- Unicorn-47555.exe (PID: 15060)
- Unicorn-35857.exe (PID: 15076)
- Unicorn-61898.exe (PID: 15172)
- Unicorn-60581.exe (PID: 15236)
- Unicorn-61898.exe (PID: 15168)
- Unicorn-53730.exe (PID: 15256)
- Unicorn-47290.exe (PID: 15044)
- Unicorn-49593.exe (PID: 15072)
- Unicorn-35038.exe (PID: 15116)
- Unicorn-61898.exe (PID: 15244)
- Unicorn-11181.exe (PID: 7932)
- Unicorn-21609.exe (PID: 15404)
- Unicorn-24757.exe (PID: 15380)
- Unicorn-43861.exe (PID: 15388)
- Unicorn-26240.exe (PID: 15420)
- Unicorn-16227.exe (PID: 15228)
- Unicorn-61898.exe (PID: 15164)
- Unicorn-10096.exe (PID: 15144)
The sample compiled with chinese language support
- 1 (1254).exe (PID: 4652)
- Unicorn-53138.exe (PID: 9016)
- Unicorn-37508.exe (PID: 10432)
- Unicorn-4534.exe (PID: 9352)
- Unicorn-28927.exe (PID: 7328)
- Unicorn-58697.exe (PID: 8092)
- Unicorn-2009.exe (PID: 7420)
- Unicorn-48299.exe (PID: 8108)
- Unicorn-14814.exe (PID: 9684)
- Unicorn-40773.exe (PID: 4408)
- Unicorn-35952.exe (PID: 5360)
- Unicorn-47873.exe (PID: 6592)
- Unicorn-49377.exe (PID: 7540)
- Unicorn-41594.exe (PID: 8328)
- Unicorn-43264.exe (PID: 8636)
- Unicorn-50603.exe (PID: 8532)
- Unicorn-26845.exe (PID: 8464)
- Unicorn-9186.exe (PID: 8308)
- Unicorn-52040.exe (PID: 7356)
- Unicorn-34542.exe (PID: 8616)
- Unicorn-34703.exe (PID: 7620)
- Unicorn-2938.exe (PID: 8596)
- Unicorn-22128.exe (PID: 7600)
- Unicorn-42871.exe (PID: 7660)
- Unicorn-6368.exe (PID: 7364)
- Unicorn-56786.exe (PID: 9992)
- Unicorn-34651.exe (PID: 8448)
- Unicorn-54879.exe (PID: 8492)
- Unicorn-36933.exe (PID: 7560)
- Unicorn-51253.exe (PID: 10168)
- Unicorn-47671.exe (PID: 8692)
- Unicorn-5963.exe (PID: 5936)
- Unicorn-24881.exe (PID: 9192)
- Unicorn-19195.exe (PID: 10684)
- Unicorn-55647.exe (PID: 8816)
- Unicorn-51371.exe (PID: 8864)
- Unicorn-31143.exe (PID: 8800)
- Unicorn-57000.exe (PID: 8644)
- Unicorn-3270.exe (PID: 6676)
- Unicorn-34703.exe (PID: 7628)
- Unicorn-43991.exe (PID: 9092)
- Unicorn-44909.exe (PID: 7784)
- Unicorn-53955.exe (PID: 1660)
- Unicorn-59874.exe (PID: 8940)
- Unicorn-50677.exe (PID: 9612)
- Unicorn-62613.exe (PID: 9104)
- Unicorn-51900.exe (PID: 672)
- Unicorn-6228.exe (PID: 4920)
- Unicorn-43461.exe (PID: 9080)
- Unicorn-11993.exe (PID: 5508)
- Unicorn-39265.exe (PID: 4724)
- Unicorn-1336.exe (PID: 9024)
- Unicorn-1476.exe (PID: 9512)
- Unicorn-52279.exe (PID: 3768)
- Unicorn-7193.exe (PID: 8792)
- Unicorn-25728.exe (PID: 6872)
- Unicorn-31387.exe (PID: 7848)
- Unicorn-2474.exe (PID: 10780)
- Unicorn-60530.exe (PID: 7864)
- Unicorn-9941.exe (PID: 9220)
- Unicorn-41431.exe (PID: 10252)
- Unicorn-2474.exe (PID: 10776)
- Unicorn-50774.exe (PID: 7796)
- Unicorn-17779.exe (PID: 6388)
- Unicorn-566.exe (PID: 5332)
- Unicorn-31670.exe (PID: 6156)
- Unicorn-59583.exe (PID: 9508)
- Unicorn-64866.exe (PID: 10276)
- Unicorn-9002.exe (PID: 9280)
- Unicorn-16203.exe (PID: 7884)
- Unicorn-39017.exe (PID: 10340)
- Unicorn-1197.exe (PID: 9320)
- Unicorn-41261.exe (PID: 7944)
- Unicorn-34576.exe (PID: 7900)
- Unicorn-39017.exe (PID: 10348)
- Unicorn-7141.exe (PID: 1388)
- Unicorn-44097.exe (PID: 9244)
- Unicorn-46522.exe (PID: 10752)
- Unicorn-8698.exe (PID: 7252)
- Unicorn-64866.exe (PID: 10272)
- Unicorn-47427.exe (PID: 1676)
- Unicorn-13337.exe (PID: 7272)
- Unicorn-57920.exe (PID: 7964)
- Unicorn-58426.exe (PID: 10396)
- Unicorn-59745.exe (PID: 7312)
- Unicorn-4946.exe (PID: 6132)
- Unicorn-54814.exe (PID: 9384)
- Unicorn-32082.exe (PID: 7988)
- Unicorn-44407.exe (PID: 8020)
- Unicorn-6394.exe (PID: 5984)
- Unicorn-11926.exe (PID: 7920)
- Unicorn-52753.exe (PID: 10332)
- Unicorn-48949.exe (PID: 9376)
- Unicorn-24843.exe (PID: 7292)
- Unicorn-42635.exe (PID: 9416)
- Unicorn-24431.exe (PID: 10824)
- Unicorn-55897.exe (PID: 8076)
- Unicorn-3309.exe (PID: 9620)
- Unicorn-6103.exe (PID: 7348)
- Unicorn-44962.exe (PID: 8084)
- Unicorn-50966.exe (PID: 4776)
- Unicorn-24703.exe (PID: 616)
- Unicorn-32051.exe (PID: 780)
- Unicorn-32599.exe (PID: 10840)
- Unicorn-41321.exe (PID: 10856)
- Unicorn-4836.exe (PID: 10388)
- Unicorn-3929.exe (PID: 8128)
- Unicorn-58779.exe (PID: 9564)
- Unicorn-48299.exe (PID: 8100)
- Unicorn-32923.exe (PID: 8212)
- Unicorn-59326.exe (PID: 8240)
- Unicorn-31003.exe (PID: 7500)
- Unicorn-40219.exe (PID: 1012)
- Unicorn-35833.exe (PID: 7476)
- Unicorn-17944.exe (PID: 9728)
- Unicorn-41231.exe (PID: 1240)
- Unicorn-17547.exe (PID: 8268)
- Unicorn-1384.exe (PID: 9796)
- Unicorn-52531.exe (PID: 9860)
- Unicorn-41667.exe (PID: 8360)
- Unicorn-13197.exe (PID: 6644)
- Unicorn-12894.exe (PID: 9312)
- Unicorn-61895.exe (PID: 5204)
- Unicorn-2414.exe (PID: 7456)
- Unicorn-14474.exe (PID: 7520)
- Unicorn-52531.exe (PID: 9852)
- Unicorn-52147.exe (PID: 10020)
- Unicorn-17428.exe (PID: 9968)
- Unicorn-38337.exe (PID: 11024)
- Unicorn-12349.exe (PID: 10944)
- Unicorn-59459.exe (PID: 10544)
- Unicorn-15390.exe (PID: 9960)
- Unicorn-30168.exe (PID: 10960)
- Unicorn-24703.exe (PID: 6268)
- Unicorn-47825.exe (PID: 4244)
- Unicorn-3626.exe (PID: 10892)
- Unicorn-34089.exe (PID: 6032)
- Unicorn-26681.exe (PID: 10012)
- Unicorn-30360.exe (PID: 10872)
- Unicorn-19283.exe (PID: 10080)
- Unicorn-97.exe (PID: 10992)
- Unicorn-55966.exe (PID: 10032)
- Unicorn-19640.exe (PID: 10924)
- Unicorn-19283.exe (PID: 10072)
- Unicorn-19963.exe (PID: 11000)
- Unicorn-40575.exe (PID: 10912)
- Unicorn-41047.exe (PID: 10132)
- Unicorn-2030.exe (PID: 7580)
- Unicorn-46955.exe (PID: 7676)
- Unicorn-52279.exe (PID: 5728)
- Unicorn-4653.exe (PID: 10224)
- Unicorn-62022.exe (PID: 10196)
- Unicorn-42871.exe (PID: 7668)
- Unicorn-28411.exe (PID: 8748)
- Unicorn-46955.exe (PID: 7684)
- Unicorn-40191.exe (PID: 11076)
- Unicorn-20361.exe (PID: 10148)
- Unicorn-35013.exe (PID: 8508)
- Unicorn-29200.exe (PID: 10968)
- Unicorn-30353.exe (PID: 8292)
- Unicorn-26957.exe (PID: 10600)
- Unicorn-56223.exe (PID: 8564)
- Unicorn-60307.exe (PID: 8568)
- Unicorn-44939.exe (PID: 10188)
- Unicorn-23529.exe (PID: 8776)
- Unicorn-31173.exe (PID: 7776)
- Unicorn-7193.exe (PID: 8784)
- Unicorn-59874.exe (PID: 8948)
- Unicorn-24601.exe (PID: 11032)
- Unicorn-42109.exe (PID: 7768)
- Unicorn-98.exe (PID: 208)
- Unicorn-20325.exe (PID: 11068)
- Unicorn-20295.exe (PID: 7152)
- Unicorn-49791.exe (PID: 9916)
- Unicorn-54813.exe (PID: 8924)
- Unicorn-42871.exe (PID: 7652)
- Unicorn-51371.exe (PID: 8848)
- Unicorn-31505.exe (PID: 8840)
- Unicorn-20325.exe (PID: 11060)
- Unicorn-46522.exe (PID: 10760)
- Unicorn-25832.exe (PID: 8136)
- Unicorn-16765.exe (PID: 11124)
- Unicorn-10900.exe (PID: 11116)
- Unicorn-12289.exe (PID: 8040)
- Unicorn-21055.exe (PID: 8188)
- Unicorn-45982.exe (PID: 11160)
- Unicorn-25998.exe (PID: 9656)
- Unicorn-42295.exe (PID: 7400)
- Unicorn-8492.exe (PID: 9712)
- Unicorn-13441.exe (PID: 6824)
- Unicorn-49791.exe (PID: 3956)
- Unicorn-24623.exe (PID: 11204)
- Unicorn-64783.exe (PID: 9824)
- Unicorn-4010.exe (PID: 9868)
- Unicorn-35013.exe (PID: 8496)
- Unicorn-2064.exe (PID: 11232)
- Unicorn-28965.exe (PID: 9452)
- Unicorn-36579.exe (PID: 8756)
- Unicorn-10073.exe (PID: 8388)
- Unicorn-2064.exe (PID: 11212)
- Unicorn-32473.exe (PID: 9924)
- Unicorn-12370.exe (PID: 11244)
- Unicorn-51594.exe (PID: 7744)
- Unicorn-48195.exe (PID: 5384)
- Unicorn-25573.exe (PID: 7804)
- Unicorn-30051.exe (PID: 4944)
- Unicorn-45043.exe (PID: 9548)
- Unicorn-2064.exe (PID: 11220)
- Unicorn-44341.exe (PID: 6712)
- Unicorn-54555.exe (PID: 11288)
- Unicorn-46387.exe (PID: 4212)
- Unicorn-33751.exe (PID: 11556)
- Unicorn-33486.exe (PID: 11548)
- Unicorn-16455.exe (PID: 11252)
- Unicorn-63885.exe (PID: 8916)
- Unicorn-15627.exe (PID: 8056)
- Unicorn-11285.exe (PID: 9648)
- Unicorn-44341.exe (PID: 2616)
- Unicorn-54555.exe (PID: 11312)
- Unicorn-55110.exe (PID: 11320)
- Unicorn-34689.exe (PID: 11272)
- Unicorn-1078.exe (PID: 11420)
- Unicorn-11476.exe (PID: 11376)
- Unicorn-46750.exe (PID: 11412)
- Unicorn-13522.exe (PID: 11352)
- Unicorn-59547.exe (PID: 9744)
- Unicorn-24497.exe (PID: 9808)
- Unicorn-34689.exe (PID: 6068)
- Unicorn-13522.exe (PID: 11356)
- Unicorn-12568.exe (PID: 11592)
- Unicorn-1441.exe (PID: 11664)
- Unicorn-1078.exe (PID: 11448)
- Unicorn-25941.exe (PID: 9032)
- Unicorn-31594.exe (PID: 1020)
- Unicorn-1078.exe (PID: 11428)
- Unicorn-1078.exe (PID: 11440)
- Unicorn-25391.exe (PID: 11616)
- Unicorn-17415.exe (PID: 11584)
- Unicorn-51007.exe (PID: 11776)
- Unicorn-4513.exe (PID: 11692)
- Unicorn-46193.exe (PID: 11792)
- Unicorn-50450.exe (PID: 11684)
- Unicorn-48744.exe (PID: 11640)
- Unicorn-46261.exe (PID: 9072)
- Unicorn-35981.exe (PID: 11460)
- Unicorn-25945.exe (PID: 11716)
Reads the computer name
- 1 (1254).exe (PID: 4652)
- Unicorn-566.exe (PID: 5332)
- Unicorn-50966.exe (PID: 4776)
- Unicorn-17779.exe (PID: 6388)
- Unicorn-4946.exe (PID: 6132)
- Unicorn-53955.exe (PID: 1660)
- Unicorn-47825.exe (PID: 4244)
- Unicorn-41231.exe (PID: 1240)
- Unicorn-34089.exe (PID: 6032)
- Unicorn-98.exe (PID: 208)
- Unicorn-6228.exe (PID: 4920)
- Unicorn-24703.exe (PID: 616)
- Unicorn-24703.exe (PID: 6268)
- Unicorn-51900.exe (PID: 672)
- Unicorn-7141.exe (PID: 1388)
- Unicorn-6394.exe (PID: 5984)
- Unicorn-35952.exe (PID: 5360)
- Unicorn-32051.exe (PID: 780)
- Unicorn-47873.exe (PID: 6592)
- Unicorn-40773.exe (PID: 4408)
- Unicorn-3270.exe (PID: 6676)
- Unicorn-52279.exe (PID: 5728)
- Unicorn-52279.exe (PID: 3768)
- Unicorn-11993.exe (PID: 5508)
- Unicorn-48195.exe (PID: 5384)
- Unicorn-31594.exe (PID: 1020)
- Unicorn-39265.exe (PID: 4724)
- Unicorn-25728.exe (PID: 6872)
- Unicorn-8698.exe (PID: 7252)
- Unicorn-59745.exe (PID: 7312)
- Unicorn-52040.exe (PID: 7356)
- Unicorn-28927.exe (PID: 7328)
- Unicorn-2009.exe (PID: 7420)
- Unicorn-6368.exe (PID: 7364)
- Unicorn-42295.exe (PID: 7400)
- Unicorn-35833.exe (PID: 7476)
- Unicorn-2414.exe (PID: 7456)
- Unicorn-31003.exe (PID: 7500)
- Unicorn-14474.exe (PID: 7520)
- Unicorn-49377.exe (PID: 7540)
- Unicorn-36933.exe (PID: 7560)
- Unicorn-2030.exe (PID: 7580)
- Unicorn-34703.exe (PID: 7628)
- Unicorn-42871.exe (PID: 7660)
- Unicorn-46955.exe (PID: 7676)
- Unicorn-42871.exe (PID: 7668)
- Unicorn-46955.exe (PID: 7684)
- Unicorn-22128.exe (PID: 7600)
- Unicorn-51594.exe (PID: 7744)
- Unicorn-44909.exe (PID: 7784)
- Unicorn-50774.exe (PID: 7796)
- Unicorn-51594.exe (PID: 7736)
- Unicorn-42871.exe (PID: 7652)
- Unicorn-31173.exe (PID: 7776)
- Unicorn-25573.exe (PID: 7804)
- Unicorn-60530.exe (PID: 7864)
- Unicorn-31387.exe (PID: 7848)
- Unicorn-41261.exe (PID: 7944)
- Unicorn-34576.exe (PID: 7900)
- Unicorn-57920.exe (PID: 7964)
- Unicorn-32082.exe (PID: 7988)
- Unicorn-44407.exe (PID: 8020)
- Unicorn-15627.exe (PID: 8056)
- Unicorn-48299.exe (PID: 8100)
- Unicorn-55897.exe (PID: 8076)
- Unicorn-25832.exe (PID: 8136)
- Unicorn-58697.exe (PID: 8092)
- Unicorn-44962.exe (PID: 8084)
- Unicorn-21055.exe (PID: 8188)
- Unicorn-13441.exe (PID: 6824)
- Unicorn-59326.exe (PID: 8240)
- Unicorn-30353.exe (PID: 8292)
- Unicorn-56223.exe (PID: 8564)
- Unicorn-35013.exe (PID: 8496)
- Unicorn-43264.exe (PID: 8636)
- Unicorn-47671.exe (PID: 8692)
- Unicorn-57000.exe (PID: 8644)
- Unicorn-51371.exe (PID: 8848)
- Unicorn-23529.exe (PID: 8776)
- Unicorn-19445.exe (PID: 8768)
- Unicorn-54813.exe (PID: 8924)
- Unicorn-31143.exe (PID: 8800)
- Unicorn-1336.exe (PID: 9024)
- Unicorn-28079.exe (PID: 8956)
- Unicorn-59874.exe (PID: 8940)
- Unicorn-46261.exe (PID: 9072)
- Unicorn-25941.exe (PID: 9032)
- Unicorn-63885.exe (PID: 8916)
- Unicorn-53138.exe (PID: 9016)
- Unicorn-62613.exe (PID: 9104)
- Unicorn-43461.exe (PID: 9080)
- Unicorn-59874.exe (PID: 8948)
- Unicorn-9941.exe (PID: 9220)
- Unicorn-44097.exe (PID: 9244)
- Unicorn-4534.exe (PID: 9352)
- Unicorn-12894.exe (PID: 9312)
- Unicorn-54814.exe (PID: 9384)
- Unicorn-58779.exe (PID: 9564)
- Unicorn-14814.exe (PID: 9684)
- Unicorn-17944.exe (PID: 9728)
- Unicorn-8492.exe (PID: 9712)
- Unicorn-64783.exe (PID: 9824)
- Unicorn-1384.exe (PID: 9796)
- Unicorn-52531.exe (PID: 9860)
- Unicorn-52531.exe (PID: 9872)
- Unicorn-32473.exe (PID: 9924)
- Unicorn-26681.exe (PID: 10012)
- Unicorn-17428.exe (PID: 9968)
- Unicorn-19283.exe (PID: 10080)
- Unicorn-20361.exe (PID: 10148)
- Unicorn-24881.exe (PID: 9192)
- Unicorn-28965.exe (PID: 9452)
- Unicorn-62022.exe (PID: 10196)
- Unicorn-36579.exe (PID: 8756)
- Unicorn-1476.exe (PID: 9512)
- Unicorn-50677.exe (PID: 9612)
- Unicorn-59583.exe (PID: 9508)
- Unicorn-49791.exe (PID: 3956)
- Unicorn-41431.exe (PID: 10252)
- Unicorn-64866.exe (PID: 10272)
Create files in a temporary directory
- Unicorn-566.exe (PID: 5332)
- 1 (1254).exe (PID: 4652)
- Unicorn-50966.exe (PID: 4776)
- Unicorn-34089.exe (PID: 6032)
- Unicorn-4946.exe (PID: 6132)
- Unicorn-24703.exe (PID: 616)
- Unicorn-24703.exe (PID: 6268)
- Unicorn-5963.exe (PID: 5936)
- Unicorn-98.exe (PID: 208)
- Unicorn-53955.exe (PID: 1660)
- Unicorn-17779.exe (PID: 6388)
- Unicorn-47427.exe (PID: 1676)
- Unicorn-41231.exe (PID: 1240)
- Unicorn-7141.exe (PID: 1388)
- Unicorn-6394.exe (PID: 5984)
- Unicorn-13197.exe (PID: 6644)
- Unicorn-32051.exe (PID: 780)
- Unicorn-40219.exe (PID: 1012)
- Unicorn-40773.exe (PID: 4408)
- Unicorn-47825.exe (PID: 4244)
- Unicorn-52279.exe (PID: 3768)
- Unicorn-51900.exe (PID: 672)
- Unicorn-24843.exe (PID: 7292)
- Unicorn-28927.exe (PID: 7328)
- Unicorn-2009.exe (PID: 7420)
- Unicorn-35833.exe (PID: 7476)
- Unicorn-14474.exe (PID: 7520)
- Unicorn-36933.exe (PID: 7560)
- Unicorn-2030.exe (PID: 7580)
- Unicorn-3270.exe (PID: 6676)
- Unicorn-49377.exe (PID: 7540)
- Unicorn-34703.exe (PID: 7620)
- Unicorn-34703.exe (PID: 7628)
- Unicorn-6368.exe (PID: 7364)
- Unicorn-22128.exe (PID: 7600)
- Unicorn-42871.exe (PID: 7668)
- Unicorn-52279.exe (PID: 5728)
- Unicorn-46955.exe (PID: 7684)
- Unicorn-39265.exe (PID: 4724)
- Unicorn-25728.exe (PID: 6872)
- Unicorn-44909.exe (PID: 7784)
- Unicorn-51594.exe (PID: 7744)
- Unicorn-31594.exe (PID: 1020)
- Unicorn-31173.exe (PID: 7776)
- Unicorn-42109.exe (PID: 7768)
- Unicorn-6228.exe (PID: 4920)
- Unicorn-25573.exe (PID: 7804)
- Unicorn-31387.exe (PID: 7848)
- Unicorn-60530.exe (PID: 7864)
- Unicorn-8698.exe (PID: 7252)
- Unicorn-16203.exe (PID: 7884)
- Unicorn-41261.exe (PID: 7944)
- Unicorn-13337.exe (PID: 7272)
- Unicorn-34576.exe (PID: 7900)
- Unicorn-11926.exe (PID: 7920)
- Unicorn-32082.exe (PID: 7988)
- Unicorn-44407.exe (PID: 8020)
- Unicorn-15627.exe (PID: 8056)
- Unicorn-59745.exe (PID: 7312)
- Unicorn-48299.exe (PID: 8100)
- Unicorn-6103.exe (PID: 7348)
- Unicorn-3929.exe (PID: 8128)
- Unicorn-44962.exe (PID: 8084)
- Unicorn-48299.exe (PID: 8108)
- Unicorn-58697.exe (PID: 8092)
- Unicorn-35952.exe (PID: 5360)
- Unicorn-61895.exe (PID: 5204)
- Unicorn-2414.exe (PID: 7456)
- Unicorn-42295.exe (PID: 7400)
- Unicorn-13441.exe (PID: 6824)
- Unicorn-31003.exe (PID: 7500)
- Unicorn-32923.exe (PID: 8212)
- Unicorn-59326.exe (PID: 8240)
- Unicorn-47873.exe (PID: 6592)
- Unicorn-17547.exe (PID: 8268)
- Unicorn-41594.exe (PID: 8328)
- Unicorn-34651.exe (PID: 8448)
- Unicorn-35013.exe (PID: 8508)
- Unicorn-56223.exe (PID: 8564)
- Unicorn-26845.exe (PID: 8464)
- Unicorn-52040.exe (PID: 7356)
- Unicorn-9186.exe (PID: 8308)
- Unicorn-2938.exe (PID: 8596)
- Unicorn-42871.exe (PID: 7660)
- Unicorn-46955.exe (PID: 7676)
- Unicorn-47671.exe (PID: 8692)
- Unicorn-51371.exe (PID: 8864)
- Unicorn-19445.exe (PID: 8768)
- Unicorn-54813.exe (PID: 8924)
- Unicorn-55647.exe (PID: 8816)
- Unicorn-31143.exe (PID: 8800)
- Unicorn-7193.exe (PID: 8792)
- Unicorn-1336.exe (PID: 9024)
- Unicorn-48195.exe (PID: 5384)
- Unicorn-51594.exe (PID: 7736)
- Unicorn-59874.exe (PID: 8940)
- Unicorn-25941.exe (PID: 9032)
- Unicorn-42871.exe (PID: 7652)
- Unicorn-62613.exe (PID: 9104)
- Unicorn-11993.exe (PID: 5508)
- Unicorn-50774.exe (PID: 7796)
- Unicorn-43461.exe (PID: 9080)
- Unicorn-20295.exe (PID: 7152)
- Unicorn-4534.exe (PID: 9352)
- Unicorn-48949.exe (PID: 9376)
- Unicorn-57920.exe (PID: 7964)
- Unicorn-9002.exe (PID: 9280)
- Unicorn-54814.exe (PID: 9384)
- Unicorn-12289.exe (PID: 8040)
- Unicorn-42635.exe (PID: 9416)
- Unicorn-25832.exe (PID: 8136)
- Unicorn-3309.exe (PID: 9620)
- Unicorn-17944.exe (PID: 9728)
- Unicorn-64783.exe (PID: 9824)
- Unicorn-59547.exe (PID: 9744)
- Unicorn-24497.exe (PID: 9808)
- Unicorn-52531.exe (PID: 9872)
- Unicorn-41667.exe (PID: 8360)
- Unicorn-10073.exe (PID: 8388)
- Unicorn-26681.exe (PID: 10012)
- Unicorn-17428.exe (PID: 9968)
- Unicorn-19283.exe (PID: 10072)
- Unicorn-54879.exe (PID: 8492)
- Unicorn-35013.exe (PID: 8496)
- Unicorn-60307.exe (PID: 8568)
- Unicorn-57000.exe (PID: 8644)
- Unicorn-28965.exe (PID: 9452)
- Unicorn-28411.exe (PID: 8748)
- Unicorn-62022.exe (PID: 10196)
- Unicorn-43991.exe (PID: 9092)
- Unicorn-50677.exe (PID: 9612)
- Unicorn-59874.exe (PID: 8948)
Reads security settings of Internet Explorer
- BackgroundTransferHost.exe (PID: 5548)
- BackgroundTransferHost.exe (PID: 2340)
- BackgroundTransferHost.exe (PID: 1056)
- BackgroundTransferHost.exe (PID: 5308)
- BackgroundTransferHost.exe (PID: 5384)
Checks proxy server information
- BackgroundTransferHost.exe (PID: 2340)
Creates files or folders in the user directory
- BackgroundTransferHost.exe (PID: 2340)
- WerFault.exe (PID: 9540)
- WerFault.exe (PID: 9552)
Reads the software policy settings
- BackgroundTransferHost.exe (PID: 2340)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
576
Monitored processes
440
Malicious processes
65
Suspicious processes
62
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 208 | C:\Users\admin\AppData\Local\Temp\Unicorn-98.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-98.exe | Unicorn-566.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 456 | C:\Users\admin\AppData\Local\Temp\Unicorn-43175.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-43175.exe | — | Unicorn-1384.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 616 | C:\Users\admin\AppData\Local\Temp\Unicorn-24703.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-24703.exe | Unicorn-34089.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 672 | C:\Users\admin\AppData\Local\Temp\Unicorn-51900.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-51900.exe | Unicorn-17779.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 780 | C:\Users\admin\AppData\Local\Temp\Unicorn-32051.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-32051.exe | Unicorn-24703.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 812 | C:\Users\admin\AppData\Local\Temp\Unicorn-16367.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-16367.exe | — | Unicorn-48949.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1012 | C:\Users\admin\AppData\Local\Temp\Unicorn-40219.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-40219.exe | Unicorn-24703.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1020 | C:\Users\admin\AppData\Local\Temp\Unicorn-31594.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-31594.exe | Unicorn-566.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1056 | "BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.1 | C:\Windows\System32\BackgroundTransferHost.exe | — | svchost.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Download/Upload Host Exit code: 1 Version: 10.0.19041.3636 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 1240 | C:\Users\admin\AppData\Local\Temp\Unicorn-41231.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-41231.exe | Unicorn-4946.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
13 907
Read events
13 892
Write events
15
Delete events
0
Modification events
| (PID) Process: | (5548) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (5548) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (5548) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (2340) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (2340) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (2340) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (1056) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (1056) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (1056) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (5308) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
Executable files
1 160
Suspicious files
11
Text files
2
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 2340 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\d5540533-4837-4071-85d1-0ccf18a067ac.down_data | — | |
MD5:— | SHA256:— | |||
| 6388 | Unicorn-17779.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53955.exe | executable | |
MD5:135DEB37060FB8B7F395F70B1FA56397 | SHA256:F45D87CF02F6541604138215AF3018BDC38DB23E6667C5816E5A5573912264E0 | |||
| 2340 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10D | binary | |
MD5:7D96BC1AD7513B25DA6D58622681346F | SHA256:0630FCF6FCAAD1CCBDEDF3BFCF1F8CEF41F55B217E1E0C04D2471AB3CF3BC5EC | |||
| 4652 | 1 (1254).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-17779.exe | executable | |
MD5:F9EA778FD1AC2036DB52C41629BF7CFF | SHA256:7936905F05E29EE16CEEF21027AECA4000FFE2EE605CDA3A64F79DE4C3C4D0FE | |||
| 4652 | 1 (1254).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-47825.exe | executable | |
MD5:5A5BCD9743C07EB40E11D7F2297C9224 | SHA256:76FC7D8363E4109805D760B1F3B127E1CDAF21432AD8BC61CDB9AFAEB19C13E9 | |||
| 5332 | Unicorn-566.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-34089.exe | executable | |
MD5:3A2D7B5097C65478A45859FF75593F99 | SHA256:43645D6F22779270C68023152BA904A45B57D5CB29C5E2AD34C7EC38109ADB30 | |||
| 4776 | Unicorn-50966.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-4946.exe | executable | |
MD5:259BB5F36E1F9C0642B99C718409B052 | SHA256:6311B98C7A3D5B2E99B5ED21CD18C4CEECDF8940D55E863DF27D9D483216988F | |||
| 2340 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\d5540533-4837-4071-85d1-0ccf18a067ac.cac6a25f-ffe2-4ca4-b5c9-9e036fec6044.down_meta | binary | |
MD5:15539347BFF304B0C471FDF0C8F47786 | SHA256:F5EC2F432EA84F52997B6BDB4C1DFF44E339C2DD885B998800BC0191313F1C89 | |||
| 4776 | Unicorn-50966.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13197.exe | executable | |
MD5:ACD449A066DBD5BFF6F8698C484E014E | SHA256:6FCCA475EE164F01181127ABC9CEE1A6F99A065231F432FE501AC029D6FA5365 | |||
| 6132 | Unicorn-4946.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-41231.exe | executable | |
MD5:AF6170D6F1087996D6CCF0A2BE93B7D5 | SHA256:01C1503D8DF8C86E51DB037C0932B7AD926A3B6840B691A8700D408CA06446E7 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
24
DNS requests
16
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
780 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
2340 | BackgroundTransferHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | whitelisted |
— | — | GET | 200 | 23.48.23.156:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
8732 | SIHClient.exe | GET | 200 | 2.23.181.156:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
8732 | SIHClient.exe | GET | 200 | 2.23.181.156:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
— | — | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 23.48.23.156:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
3216 | svchost.exe | 40.115.3.253:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 40.126.31.0:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
2104 | svchost.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
780 | backgroundTaskHost.exe | 20.31.169.57:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
780 | backgroundTaskHost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
www.bing.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |