File name:

1 (365)

Full analysis: https://app.any.run/tasks/945867bb-7192-40c2-a388-4919d2419bfa
Verdict: Malicious activity
Analysis date: March 24, 2025, 20:13:15
OS: Windows 10 Professional (build: 19044, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections
MD5:

7DCE053C568F24956FD360E16D4158C0

SHA1:

4F3458B37CF8F9C1CF2A1BB82D8613BE4C0D0426

SHA256:

88357DCCF2EE21ACEE0B9F7BD540A8DCD25599A3806B9BC2169A554A522F0313

SSDEEP:

12288:2aBaV6A5jxH9pfhaCOAeiRhJx4DxmDsR:2aEv53pfhUi

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Starts itself from another location

      • Unicorn-27705.exe (PID: 6028)
      • 1 (365).exe (PID: 2600)
      • Unicorn-8244.exe (PID: 6272)
      • Unicorn-19105.exe (PID: 4724)
      • Unicorn-43199.exe (PID: 5392)
      • Unicorn-56935.exe (PID: 1072)
      • Unicorn-1612.exe (PID: 4380)
      • Unicorn-44352.exe (PID: 4996)
      • Unicorn-16963.exe (PID: 4220)
      • Unicorn-64492.exe (PID: 516)
      • Unicorn-58627.exe (PID: 5376)
      • Unicorn-31353.exe (PID: 5164)
      • Unicorn-16963.exe (PID: 5960)
      • Unicorn-1181.exe (PID: 3888)
      • Unicorn-63287.exe (PID: 4488)
      • Unicorn-3880.exe (PID: 856)
      • Unicorn-59495.exe (PID: 664)
      • Unicorn-34991.exe (PID: 960)
      • Unicorn-32853.exe (PID: 5964)
      • Unicorn-32853.exe (PID: 5576)
      • Unicorn-32853.exe (PID: 2432)
      • Unicorn-735.exe (PID: 1096)
      • Unicorn-15447.exe (PID: 5728)
      • Unicorn-25239.exe (PID: 5256)
      • Unicorn-44840.exe (PID: 4120)
      • Unicorn-14470.exe (PID: 5260)
      • Unicorn-25239.exe (PID: 6700)
      • Unicorn-32251.exe (PID: 7560)
      • Unicorn-32251.exe (PID: 7556)
      • Unicorn-25706.exe (PID: 7604)
      • Unicorn-45307.exe (PID: 7596)
      • Unicorn-36174.exe (PID: 7052)
      • Unicorn-55878.exe (PID: 7720)
      • Unicorn-33019.exe (PID: 7740)
      • Unicorn-28935.exe (PID: 7760)
      • Unicorn-29489.exe (PID: 7856)
      • Unicorn-18306.exe (PID: 7820)
      • Unicorn-24851.exe (PID: 7800)
      • Unicorn-58592.exe (PID: 7880)
      • Unicorn-38172.exe (PID: 7816)
      • Unicorn-42810.exe (PID: 7872)
      • Unicorn-38726.exe (PID: 7888)
      • Unicorn-28935.exe (PID: 7764)
      • Unicorn-52370.exe (PID: 7940)
      • Unicorn-4985.exe (PID: 7792)
      • Unicorn-59776.exe (PID: 7972)
      • Unicorn-2904.exe (PID: 7984)
      • Unicorn-52370.exe (PID: 7932)
      • Unicorn-52370.exe (PID: 7916)
      • Unicorn-51393.exe (PID: 8032)
      • Unicorn-26797.exe (PID: 8012)
      • Unicorn-43240.exe (PID: 7992)
      • Unicorn-20666.exe (PID: 8000)
      • Unicorn-32504.exe (PID: 7924)
      • Unicorn-51393.exe (PID: 8024)
      • Unicorn-11721.exe (PID: 8108)
      • Unicorn-11721.exe (PID: 8116)
      • Unicorn-29681.exe (PID: 8140)
      • Unicorn-59753.exe (PID: 7232)
      • Unicorn-56953.exe (PID: 7240)
      • Unicorn-41379.exe (PID: 8160)
      • Unicorn-29681.exe (PID: 8144)
      • Unicorn-41379.exe (PID: 8156)
      • Unicorn-14113.exe (PID: 7392)
      • Unicorn-52837.exe (PID: 5864)
      • Unicorn-14497.exe (PID: 7476)
      • Unicorn-46999.exe (PID: 7652)
      • Unicorn-38015.exe (PID: 7012)
      • Unicorn-39385.exe (PID: 7480)
      • Unicorn-48945.exe (PID: 5640)
      • Unicorn-12764.exe (PID: 1164)
      • Unicorn-8580.exe (PID: 6512)
      • Unicorn-48452.exe (PID: 6108)
      • Unicorn-4404.exe (PID: 2644)
      • Unicorn-8488.exe (PID: 7436)
      • Unicorn-48452.exe (PID: 7400)
      • Unicorn-4404.exe (PID: 6300)
      • Unicorn-43299.exe (PID: 900)
      • Unicorn-57589.exe (PID: 8216)
      • Unicorn-48452.exe (PID: 6148)
      • Unicorn-57589.exe (PID: 8220)
      • Unicorn-43854.exe (PID: 8248)
      • Unicorn-43854.exe (PID: 8232)
      • Unicorn-43854.exe (PID: 8240)
      • Unicorn-10434.exe (PID: 8304)
      • Unicorn-21295.exe (PID: 8320)
      • Unicorn-31623.exe (PID: 8340)
      • Unicorn-58265.exe (PID: 8364)
      • Unicorn-47959.exe (PID: 8408)
      • Unicorn-52043.exe (PID: 8392)
      • Unicorn-4304.exe (PID: 8296)
      • Unicorn-58820.exe (PID: 8420)
      • Unicorn-7018.exe (PID: 8428)
      • Unicorn-50974.exe (PID: 8480)
      • Unicorn-35250.exe (PID: 8564)
      • Unicorn-56682.exe (PID: 8576)
      • Unicorn-13148.exe (PID: 8448)
      • Unicorn-50974.exe (PID: 8472)
      • Unicorn-56682.exe (PID: 8584)
      • Unicorn-13148.exe (PID: 8456)
      • Unicorn-34745.exe (PID: 8520)
      • Unicorn-29485.exe (PID: 8504)
      • Unicorn-50974.exe (PID: 8464)
      • Unicorn-14829.exe (PID: 8536)
      • Unicorn-28224.exe (PID: 8752)
      • Unicorn-29028.exe (PID: 8664)
      • Unicorn-65479.exe (PID: 8640)
      • Unicorn-18987.exe (PID: 8712)
      • Unicorn-7803.exe (PID: 8696)
      • Unicorn-9427.exe (PID: 8680)
      • Unicorn-10063.exe (PID: 8908)
      • Unicorn-23162.exe (PID: 8672)
      • Unicorn-28537.exe (PID: 8792)
      • Unicorn-58609.exe (PID: 8900)
      • Unicorn-20892.exe (PID: 8656)
      • Unicorn-36705.exe (PID: 8772)
      • Unicorn-22937.exe (PID: 8800)
      • Unicorn-4255.exe (PID: 8940)
      • Unicorn-44319.exe (PID: 8824)
      • Unicorn-48403.exe (PID: 8808)
      • Unicorn-25653.exe (PID: 9032)
      • Unicorn-29929.exe (PID: 8928)
      • Unicorn-48403.exe (PID: 8816)
      • Unicorn-29664.exe (PID: 8916)
      • Unicorn-65294.exe (PID: 8980)
      • Unicorn-3286.exe (PID: 8876)
      • Unicorn-1148.exe (PID: 9004)
      • Unicorn-42081.exe (PID: 9084)
      • Unicorn-21660.exe (PID: 9024)
      • Unicorn-56379.exe (PID: 9040)
      • Unicorn-28345.exe (PID: 9076)
      • Unicorn-19431.exe (PID: 9116)
      • Unicorn-38865.exe (PID: 7320)
      • Unicorn-56855.exe (PID: 7328)
      • Unicorn-38481.exe (PID: 7684)
      • Unicorn-56934.exe (PID: 7496)
      • Unicorn-41173.exe (PID: 9072)
      • Unicorn-7846.exe (PID: 7348)
      • Unicorn-40427.exe (PID: 9108)
      • Unicorn-20945.exe (PID: 7688)
      • Unicorn-22145.exe (PID: 7176)
      • Unicorn-41161.exe (PID: 8312)
      • Unicorn-20967.exe (PID: 9392)

    • Executable content was dropped or overwritten

      • 1 (365).exe (PID: 2600)
      • Unicorn-27705.exe (PID: 6028)
      • Unicorn-19105.exe (PID: 4724)
      • Unicorn-43199.exe (PID: 5392)
      • Unicorn-8244.exe (PID: 6272)
      • Unicorn-1612.exe (PID: 4380)
      • Unicorn-44352.exe (PID: 4996)
      • Unicorn-1181.exe (PID: 3888)
      • Unicorn-64492.exe (PID: 516)
      • Unicorn-58627.exe (PID: 5376)
      • Unicorn-16963.exe (PID: 4220)
      • Unicorn-3880.exe (PID: 856)
      • Unicorn-34991.exe (PID: 960)
      • Unicorn-59495.exe (PID: 664)
      • Unicorn-32853.exe (PID: 5576)
      • Unicorn-15447.exe (PID: 5728)
      • Unicorn-32853.exe (PID: 2432)
      • Unicorn-735.exe (PID: 1096)
      • Unicorn-31353.exe (PID: 5164)
      • Unicorn-16963.exe (PID: 5960)
      • Unicorn-25239.exe (PID: 6700)
      • Unicorn-36174.exe (PID: 7052)
      • Unicorn-32251.exe (PID: 7556)
      • Unicorn-25706.exe (PID: 7604)
      • Unicorn-55878.exe (PID: 7720)
      • Unicorn-33019.exe (PID: 7740)
      • Unicorn-28935.exe (PID: 7760)
      • Unicorn-24851.exe (PID: 7800)
      • Unicorn-58592.exe (PID: 7880)
      • Unicorn-29489.exe (PID: 7856)
      • Unicorn-38172.exe (PID: 7816)
      • Unicorn-42810.exe (PID: 7872)
      • Unicorn-52370.exe (PID: 7940)
      • Unicorn-4985.exe (PID: 7792)
      • Unicorn-59776.exe (PID: 7972)
      • Unicorn-52370.exe (PID: 7916)
      • Unicorn-52370.exe (PID: 7932)
      • Unicorn-2904.exe (PID: 7984)
      • Unicorn-44840.exe (PID: 4120)
      • Unicorn-43240.exe (PID: 7992)
      • Unicorn-32504.exe (PID: 7924)
      • Unicorn-51393.exe (PID: 8032)
      • Unicorn-14470.exe (PID: 5260)
      • Unicorn-56935.exe (PID: 1072)
      • Unicorn-11721.exe (PID: 8116)
      • Unicorn-56953.exe (PID: 7240)
      • Unicorn-11721.exe (PID: 8108)
      • Unicorn-29681.exe (PID: 8140)
      • Unicorn-32251.exe (PID: 7560)
      • Unicorn-41379.exe (PID: 8160)
      • Unicorn-63287.exe (PID: 4488)
      • Unicorn-41379.exe (PID: 8156)
      • Unicorn-45307.exe (PID: 7596)
      • Unicorn-29681.exe (PID: 8144)
      • Unicorn-14113.exe (PID: 7392)
      • Unicorn-14497.exe (PID: 7476)
      • Unicorn-52837.exe (PID: 5864)
      • Unicorn-46999.exe (PID: 7652)
      • Unicorn-39385.exe (PID: 7480)
      • Unicorn-38015.exe (PID: 7012)
      • Unicorn-12764.exe (PID: 1164)
      • Unicorn-48945.exe (PID: 5640)
      • Unicorn-8580.exe (PID: 6512)
      • Unicorn-4404.exe (PID: 2644)
      • Unicorn-18306.exe (PID: 7820)
      • Unicorn-48452.exe (PID: 6108)
      • Unicorn-38726.exe (PID: 7888)
      • Unicorn-8488.exe (PID: 7436)
      • Unicorn-48452.exe (PID: 7400)
      • Unicorn-4404.exe (PID: 6300)
      • Unicorn-28935.exe (PID: 7764)
      • Unicorn-57589.exe (PID: 8216)
      • Unicorn-48452.exe (PID: 6148)
      • Unicorn-57589.exe (PID: 8220)
      • Unicorn-43854.exe (PID: 8248)
      • Unicorn-43854.exe (PID: 8232)
      • Unicorn-43854.exe (PID: 8240)
      • Unicorn-10434.exe (PID: 8304)
      • Unicorn-21295.exe (PID: 8320)
      • Unicorn-32853.exe (PID: 5964)
      • Unicorn-31623.exe (PID: 8340)
      • Unicorn-58265.exe (PID: 8364)
      • Unicorn-52043.exe (PID: 8392)
      • Unicorn-4304.exe (PID: 8296)
      • Unicorn-47959.exe (PID: 8408)
      • Unicorn-41161.exe (PID: 8312)
      • Unicorn-58820.exe (PID: 8420)
      • Unicorn-50974.exe (PID: 8480)
      • Unicorn-7018.exe (PID: 8428)
      • Unicorn-56682.exe (PID: 8576)
      • Unicorn-13148.exe (PID: 8448)
      • Unicorn-35250.exe (PID: 8564)
      • Unicorn-50974.exe (PID: 8472)
      • Unicorn-20666.exe (PID: 8000)
      • Unicorn-56682.exe (PID: 8584)
      • Unicorn-25239.exe (PID: 5256)
      • Unicorn-34745.exe (PID: 8520)
      • Unicorn-13148.exe (PID: 8456)
      • Unicorn-28224.exe (PID: 8752)
      • Unicorn-14829.exe (PID: 8536)
      • Unicorn-29485.exe (PID: 8504)
      • Unicorn-50974.exe (PID: 8464)
      • Unicorn-29028.exe (PID: 8664)
      • Unicorn-26797.exe (PID: 8012)
      • Unicorn-7803.exe (PID: 8696)
      • Unicorn-18987.exe (PID: 8712)
      • Unicorn-51393.exe (PID: 8024)
      • Unicorn-9427.exe (PID: 8680)
      • Unicorn-10063.exe (PID: 8908)
      • Unicorn-23162.exe (PID: 8672)
      • Unicorn-36705.exe (PID: 8772)
      • Unicorn-58609.exe (PID: 8900)
      • Unicorn-22937.exe (PID: 8800)
      • Unicorn-28537.exe (PID: 8792)
      • Unicorn-25653.exe (PID: 9032)
      • Unicorn-29929.exe (PID: 8928)
      • Unicorn-48403.exe (PID: 8808)
      • Unicorn-48403.exe (PID: 8816)
      • Unicorn-29664.exe (PID: 8916)
      • Unicorn-3286.exe (PID: 8876)
      • Unicorn-65294.exe (PID: 8980)
      • Unicorn-59753.exe (PID: 7232)
      • Unicorn-42081.exe (PID: 9084)
      • Unicorn-1148.exe (PID: 9004)
      • Unicorn-21660.exe (PID: 9024)
      • Unicorn-56379.exe (PID: 9040)
      • Unicorn-28345.exe (PID: 9076)
      • Unicorn-19431.exe (PID: 9116)
      • Unicorn-38865.exe (PID: 7320)
      • Unicorn-56855.exe (PID: 7328)
      • Unicorn-38481.exe (PID: 7684)
      • Unicorn-56934.exe (PID: 7496)
      • Unicorn-40427.exe (PID: 9108)
      • Unicorn-22145.exe (PID: 7176)
      • Unicorn-7846.exe (PID: 7348)
      • Unicorn-41173.exe (PID: 9072)
      • Unicorn-20945.exe (PID: 7688)
      • Unicorn-20967.exe (PID: 9392)
      • Unicorn-50058.exe (PID: 9412)
      • Unicorn-58299.exe (PID: 9428)
      • Unicorn-58854.exe (PID: 9480)
      • Unicorn-20892.exe (PID: 8656)
      • Unicorn-930.exe (PID: 9460)
      • Unicorn-16451.exe (PID: 9504)
      • Unicorn-46431.exe (PID: 9540)
      • Unicorn-48377.exe (PID: 9564)
      • Unicorn-1890.exe (PID: 9624)
      • Unicorn-8667.exe (PID: 9596)
      • Unicorn-59814.exe (PID: 9640)
      • Unicorn-4255.exe (PID: 8940)
      • Unicorn-44319.exe (PID: 8824)
      • Unicorn-30022.exe (PID: 9804)
      • Unicorn-307.exe (PID: 9688)
      • Unicorn-59643.exe (PID: 9828)
      • Unicorn-8304.exe (PID: 9912)
      • Unicorn-63151.exe (PID: 9744)
      • Unicorn-24257.exe (PID: 9680)
      • Unicorn-49316.exe (PID: 9788)
      • Unicorn-61681.exe (PID: 9852)
      • Unicorn-24257.exe (PID: 9696)
      • Unicorn-16089.exe (PID: 9704)
      • Unicorn-8396.exe (PID: 9896)
      • Unicorn-22430.exe (PID: 9876)
      • Unicorn-51283.exe (PID: 9972)
      • Unicorn-51183.exe (PID: 10036)
      • Unicorn-39031.exe (PID: 9920)
      • Unicorn-45061.exe (PID: 10000)
      • Unicorn-29279.exe (PID: 10096)
      • Unicorn-42539.exe (PID: 9772)
      • Unicorn-59451.exe (PID: 9956)
      • Unicorn-22503.exe (PID: 10052)
      • Unicorn-18995.exe (PID: 10260)
      • Unicorn-63535.exe (PID: 10028)
      • Unicorn-49145.exe (PID: 10104)
      • Unicorn-31993.exe (PID: 10176)
      • Unicorn-41553.exe (PID: 10228)
      • Unicorn-25771.exe (PID: 10204)
      • Unicorn-59351.exe (PID: 10136)
      • Unicorn-61973.exe (PID: 4920)
      • Unicorn-42107.exe (PID: 1116)
      • Unicorn-29855.exe (PID: 10268)
      • Unicorn-56306.exe (PID: 10376)
      • Unicorn-43307.exe (PID: 10488)
      • Unicorn-19357.exe (PID: 10504)
      • Unicorn-51481.exe (PID: 10528)
      • Unicorn-17433.exe (PID: 10564)
      • Unicorn-23463.exe (PID: 10712)
      • Unicorn-12507.exe (PID: 10276)
      • Unicorn-7619.exe (PID: 10344)
      • Unicorn-420.exe (PID: 10384)
      • Unicorn-16857.exe (PID: 10360)
      • Unicorn-22887.exe (PID: 10456)
      • Unicorn-65479.exe (PID: 8640)
      • Unicorn-3597.exe (PID: 10700)
      • Unicorn-33769.exe (PID: 10648)
      • Unicorn-26706.exe (PID: 10428)
      • Unicorn-31722.exe (PID: 10604)
      • Unicorn-37853.exe (PID: 10616)
      • Unicorn-11210.exe (PID: 10584)
      • Unicorn-62357.exe (PID: 10680)
      • Unicorn-50105.exe (PID: 10736)
      • Unicorn-60219.exe (PID: 10796)
      • Unicorn-23038.exe (PID: 10900)
      • Unicorn-60219.exe (PID: 10804)
      • Unicorn-36845.exe (PID: 10908)
      • Unicorn-13056.exe (PID: 10840)
      • Unicorn-26539.exe (PID: 10944)
      • Unicorn-19763.exe (PID: 11052)
      • Unicorn-46576.exe (PID: 10760)
      • Unicorn-27739.exe (PID: 11212)
      • Unicorn-49727.exe (PID: 11012)
      • Unicorn-34760.exe (PID: 10860)
      • Unicorn-43299.exe (PID: 900)
      • Unicorn-17625.exe (PID: 11108)
      • Unicorn-19571.exe (PID: 4756)
      • Unicorn-40183.exe (PID: 11068)
      • Unicorn-26539.exe (PID: 10940)
      • Unicorn-27931.exe (PID: 11004)
      • Unicorn-31439.exe (PID: 10892)
      • Unicorn-17625.exe (PID: 11112)
      • Unicorn-38237.exe (PID: 10972)
      • Unicorn-29107.exe (PID: 11028)
      • Unicorn-64687.exe (PID: 11196)
      • Unicorn-7318.exe (PID: 11152)
      • Unicorn-4303.exe (PID: 11096)
      • Unicorn-31823.exe (PID: 1748)
      • Unicorn-25793.exe (PID: 11084)
      • Unicorn-28869.exe (PID: 11432)
      • Unicorn-17935.exe (PID: 7512)
      • Unicorn-37229.exe (PID: 10756)
      • Unicorn-7318.exe (PID: 11148)
      • Unicorn-3134.exe (PID: 4112)
      • Unicorn-50965.exe (PID: 924)
      • Unicorn-63680.exe (PID: 11424)
      • Unicorn-64687.exe (PID: 11204)
      • Unicorn-48906.exe (PID: 11164)
      • Unicorn-53011.exe (PID: 2084)
      • Unicorn-36291.exe (PID: 11600)
      • Unicorn-14287.exe (PID: 10980)
      • Unicorn-9840.exe (PID: 11336)
      • Unicorn-38521.exe (PID: 11312)
      • Unicorn-41751.exe (PID: 11544)
      • Unicorn-52587.exe (PID: 11392)
      • Unicorn-6311.exe (PID: 11400)
      • Unicorn-30261.exe (PID: 11416)
      • Unicorn-8257.exe (PID: 11500)
      • Unicorn-89.exe (PID: 11508)
      • Unicorn-3710.exe (PID: 11320)
      • Unicorn-9575.exe (PID: 11328)
      • Unicorn-14720.exe (PID: 11304)
      • Unicorn-42824.exe (PID: 11656)
      • Unicorn-60987.exe (PID: 11408)
      • Unicorn-38329.exe (PID: 11568)
      • Unicorn-60722.exe (PID: 11384)
      • Unicorn-19139.exe (PID: 11672)
      • Unicorn-32207.exe (PID: 11620)
      • Unicorn-32518.exe (PID: 11708)
      • Unicorn-6040.exe (PID: 11744)
      • Unicorn-5263.exe (PID: 11636)
      • Unicorn-23655.exe (PID: 11228)
      • Unicorn-63919.exe (PID: 10412)
      • Unicorn-23223.exe (PID: 11664)
      • Unicorn-16255.exe (PID: 11768)
      • Unicorn-62502.exe (PID: 11784)
      • Unicorn-6695.exe (PID: 11728)

  • INFO

    • Checks supported languages

      • 1 (365).exe (PID: 2600)
      • Unicorn-27705.exe (PID: 6028)
      • Unicorn-8244.exe (PID: 6272)
      • Unicorn-19105.exe (PID: 4724)
      • Unicorn-1612.exe (PID: 4380)
      • Unicorn-43199.exe (PID: 5392)
      • Unicorn-44352.exe (PID: 4996)
      • Unicorn-56935.exe (PID: 1072)
      • Unicorn-64492.exe (PID: 516)
      • Unicorn-16963.exe (PID: 4220)
      • Unicorn-1181.exe (PID: 3888)
      • Unicorn-31353.exe (PID: 5164)
      • Unicorn-58627.exe (PID: 5376)
      • Unicorn-16963.exe (PID: 5960)
      • Unicorn-63287.exe (PID: 4488)
      • Unicorn-3880.exe (PID: 856)
      • Unicorn-59495.exe (PID: 664)
      • Unicorn-34991.exe (PID: 960)
      • Unicorn-32853.exe (PID: 2432)
      • Unicorn-15447.exe (PID: 5728)
      • Unicorn-32853.exe (PID: 5964)
      • Unicorn-32853.exe (PID: 5576)
      • Unicorn-14470.exe (PID: 5260)
      • Unicorn-735.exe (PID: 1096)
      • Unicorn-25239.exe (PID: 5256)
      • Unicorn-36174.exe (PID: 7052)
      • Unicorn-44840.exe (PID: 4120)
      • Unicorn-25239.exe (PID: 6700)
      • Unicorn-32251.exe (PID: 7556)
      • Unicorn-32251.exe (PID: 7560)
      • Unicorn-45307.exe (PID: 7596)
      • Unicorn-25706.exe (PID: 7604)
      • Unicorn-33019.exe (PID: 7740)
      • Unicorn-28935.exe (PID: 7764)
      • Unicorn-55878.exe (PID: 7720)
      • Unicorn-28935.exe (PID: 7760)
      • Unicorn-4985.exe (PID: 7792)
      • Unicorn-24851.exe (PID: 7800)
      • Unicorn-18306.exe (PID: 7820)
      • Unicorn-38172.exe (PID: 7816)
      • Unicorn-29489.exe (PID: 7856)
      • Unicorn-42810.exe (PID: 7872)
      • Unicorn-58592.exe (PID: 7880)
      • Unicorn-38726.exe (PID: 7888)
      • Unicorn-32504.exe (PID: 7924)
      • Unicorn-52370.exe (PID: 7940)
      • Unicorn-26797.exe (PID: 8012)
      • Unicorn-52370.exe (PID: 7916)
      • Unicorn-52370.exe (PID: 7932)
      • Unicorn-59776.exe (PID: 7972)
      • Unicorn-20666.exe (PID: 8000)
      • Unicorn-51393.exe (PID: 8032)
      • Unicorn-2904.exe (PID: 7984)
      • Unicorn-29681.exe (PID: 8140)
      • Unicorn-11721.exe (PID: 8108)
      • Unicorn-11721.exe (PID: 8116)
      • Unicorn-29681.exe (PID: 8144)
      • Unicorn-41379.exe (PID: 8160)
      • Unicorn-41379.exe (PID: 8156)
      • Unicorn-51393.exe (PID: 8024)
      • Unicorn-43240.exe (PID: 7992)
      • Unicorn-14113.exe (PID: 7392)
      • Unicorn-59753.exe (PID: 7232)
      • Unicorn-56953.exe (PID: 7240)
      • Unicorn-14497.exe (PID: 7476)
      • Unicorn-52837.exe (PID: 5864)
      • Unicorn-39385.exe (PID: 7480)
      • Unicorn-48945.exe (PID: 5640)
      • Unicorn-46999.exe (PID: 7652)
      • Unicorn-12764.exe (PID: 1164)
      • Unicorn-8580.exe (PID: 6512)
      • Unicorn-4404.exe (PID: 2644)
      • Unicorn-4404.exe (PID: 6300)
      • Unicorn-38015.exe (PID: 7012)
      • Unicorn-48452.exe (PID: 6108)
      • Unicorn-48452.exe (PID: 7400)
      • Unicorn-48452.exe (PID: 6148)
      • Unicorn-43299.exe (PID: 900)
      • Unicorn-8488.exe (PID: 7436)
      • Unicorn-43854.exe (PID: 8240)
      • Unicorn-43854.exe (PID: 8248)
      • Unicorn-57589.exe (PID: 8220)
      • Unicorn-43854.exe (PID: 8232)
      • Unicorn-21295.exe (PID: 8320)
      • Unicorn-10434.exe (PID: 8304)
      • Unicorn-4304.exe (PID: 8296)
      • Unicorn-41161.exe (PID: 8312)
      • Unicorn-57589.exe (PID: 8216)
      • Unicorn-52043.exe (PID: 8392)
      • Unicorn-58820.exe (PID: 8420)
      • Unicorn-58265.exe (PID: 8364)
      • Unicorn-31623.exe (PID: 8340)
      • Unicorn-47959.exe (PID: 8408)
      • Unicorn-50974.exe (PID: 8480)
      • Unicorn-7018.exe (PID: 8428)
      • Unicorn-13148.exe (PID: 8448)
      • Unicorn-34745.exe (PID: 8520)
      • Unicorn-50974.exe (PID: 8464)
      • Unicorn-14829.exe (PID: 8536)
      • Unicorn-29485.exe (PID: 8504)
      • Unicorn-35250.exe (PID: 8564)
      • Unicorn-65479.exe (PID: 8640)
      • Unicorn-50974.exe (PID: 8472)
      • Unicorn-13148.exe (PID: 8456)
      • Unicorn-56682.exe (PID: 8576)
      • Unicorn-56682.exe (PID: 8584)
      • Unicorn-23162.exe (PID: 8672)
      • Unicorn-18987.exe (PID: 8712)
      • Unicorn-29028.exe (PID: 8664)
      • Unicorn-20892.exe (PID: 8656)
      • Unicorn-9427.exe (PID: 8680)
      • Unicorn-22937.exe (PID: 8800)
      • Unicorn-48403.exe (PID: 8808)
      • Unicorn-44319.exe (PID: 8824)
      • Unicorn-28224.exe (PID: 8752)
      • Unicorn-36705.exe (PID: 8772)
      • Unicorn-48403.exe (PID: 8816)
      • Unicorn-29664.exe (PID: 8916)
      • Unicorn-58609.exe (PID: 8900)
      • Unicorn-3286.exe (PID: 8876)
      • Unicorn-65294.exe (PID: 8980)
      • Unicorn-21660.exe (PID: 9024)
      • Unicorn-1148.exe (PID: 9004)
      • Unicorn-25653.exe (PID: 9032)
      • Unicorn-10063.exe (PID: 8908)
      • Unicorn-29929.exe (PID: 8928)
      • Unicorn-4255.exe (PID: 8940)
      • Unicorn-42081.exe (PID: 9084)
      • Unicorn-19431.exe (PID: 9116)
      • Unicorn-28345.exe (PID: 9076)
      • Unicorn-56934.exe (PID: 7496)
      • Unicorn-22145.exe (PID: 7176)
      • Unicorn-20945.exe (PID: 7688)
      • Unicorn-56855.exe (PID: 7328)
      • Unicorn-38481.exe (PID: 7684)
      • Unicorn-38865.exe (PID: 7320)
      • Unicorn-41173.exe (PID: 9072)
      • Unicorn-50058.exe (PID: 9412)
      • Unicorn-7846.exe (PID: 7348)
      • Unicorn-20967.exe (PID: 9392)
      • Unicorn-58299.exe (PID: 9428)
      • Unicorn-930.exe (PID: 9460)
      • Unicorn-58854.exe (PID: 9480)
      • Unicorn-16451.exe (PID: 9504)
      • Unicorn-46431.exe (PID: 9540)
      • Unicorn-48377.exe (PID: 9564)
      • Unicorn-8667.exe (PID: 9596)
      • Unicorn-59814.exe (PID: 9640)
      • Unicorn-16089.exe (PID: 9704)
      • Unicorn-24257.exe (PID: 9680)
      • Unicorn-307.exe (PID: 9688)
      • Unicorn-24257.exe (PID: 9696)
      • Unicorn-63151.exe (PID: 9744)
      • Unicorn-42539.exe (PID: 9772)
      • Unicorn-49316.exe (PID: 9788)
      • Unicorn-30022.exe (PID: 9804)
      • Unicorn-59643.exe (PID: 9828)
      • Unicorn-18589.exe (PID: 9780)
      • Unicorn-22430.exe (PID: 9876)
      • Unicorn-8396.exe (PID: 9896)
      • Unicorn-39031.exe (PID: 9920)
      • Unicorn-8304.exe (PID: 9912)
      • Unicorn-61681.exe (PID: 9852)
      • Unicorn-59451.exe (PID: 9956)
      • Unicorn-51283.exe (PID: 9972)
      • Unicorn-45061.exe (PID: 10000)
      • Unicorn-63535.exe (PID: 10028)
      • Unicorn-22503.exe (PID: 10052)
      • Unicorn-51183.exe (PID: 10036)
      • Unicorn-49145.exe (PID: 10104)
      • Unicorn-29279.exe (PID: 10096)
      • Unicorn-31993.exe (PID: 10176)
      • Unicorn-59351.exe (PID: 10136)
      • Unicorn-25771.exe (PID: 10204)
      • Unicorn-41553.exe (PID: 10228)
      • Unicorn-29855.exe (PID: 10268)
      • Unicorn-61973.exe (PID: 4920)
      • Unicorn-42107.exe (PID: 1116)
      • Unicorn-18995.exe (PID: 10260)
      • Unicorn-12507.exe (PID: 10276)
      • Unicorn-7619.exe (PID: 10344)
      • Unicorn-56306.exe (PID: 10376)
      • Unicorn-420.exe (PID: 10384)
      • Unicorn-63919.exe (PID: 10412)
      • Unicorn-16857.exe (PID: 10360)
      • Unicorn-43307.exe (PID: 10488)
      • Unicorn-19357.exe (PID: 10504)
      • Unicorn-51481.exe (PID: 10528)
      • Unicorn-26706.exe (PID: 10428)
      • Unicorn-22887.exe (PID: 10456)
      • Unicorn-11210.exe (PID: 10584)
      • Unicorn-17433.exe (PID: 10564)
      • Unicorn-37853.exe (PID: 10616)
      • Unicorn-33769.exe (PID: 10648)
      • Unicorn-31722.exe (PID: 10604)
      • Unicorn-3597.exe (PID: 10700)
      • Unicorn-62357.exe (PID: 10680)
      • Unicorn-50105.exe (PID: 10736)
      • Unicorn-46576.exe (PID: 10760)
      • Unicorn-60219.exe (PID: 10804)
      • Unicorn-13056.exe (PID: 10840)
      • Unicorn-60219.exe (PID: 10796)
      • Unicorn-34760.exe (PID: 10860)
      • Unicorn-23463.exe (PID: 10712)
      • Unicorn-23038.exe (PID: 10900)
      • Unicorn-31439.exe (PID: 10892)
      • Unicorn-36845.exe (PID: 10908)
      • Unicorn-26539.exe (PID: 10940)
      • Unicorn-26539.exe (PID: 10944)
      • Unicorn-38237.exe (PID: 10972)
      • Unicorn-29107.exe (PID: 11028)
      • Unicorn-19763.exe (PID: 11052)
      • Unicorn-40183.exe (PID: 11068)
      • Unicorn-14287.exe (PID: 10980)
      • Unicorn-49727.exe (PID: 11012)
      • Unicorn-17625.exe (PID: 11108)
      • Unicorn-25793.exe (PID: 11084)
      • Unicorn-4303.exe (PID: 11096)
      • Unicorn-17625.exe (PID: 11112)
      • Unicorn-7318.exe (PID: 11152)
      • Unicorn-7318.exe (PID: 11148)
      • Unicorn-48906.exe (PID: 11164)
      • Unicorn-23655.exe (PID: 11228)
      • Unicorn-19571.exe (PID: 4756)
      • Unicorn-3134.exe (PID: 4112)
      • Unicorn-31823.exe (PID: 1748)
      • Unicorn-27739.exe (PID: 11212)
      • Unicorn-64687.exe (PID: 11196)
      • Unicorn-64687.exe (PID: 11204)
      • Unicorn-53011.exe (PID: 2084)
      • Unicorn-37229.exe (PID: 10756)
      • Unicorn-3710.exe (PID: 11320)
      • Unicorn-38521.exe (PID: 11312)
      • Unicorn-14720.exe (PID: 11304)
      • Unicorn-9840.exe (PID: 11336)
      • Unicorn-17935.exe (PID: 7512)
      • Unicorn-28869.exe (PID: 11432)
      • Unicorn-6311.exe (PID: 11400)
      • Unicorn-60987.exe (PID: 11408)
      • Unicorn-52587.exe (PID: 11392)
      • Unicorn-63680.exe (PID: 11424)
      • Unicorn-60722.exe (PID: 11384)
      • Unicorn-30261.exe (PID: 11416)
      • Unicorn-8257.exe (PID: 11500)
      • Unicorn-9575.exe (PID: 11328)
      • Unicorn-89.exe (PID: 11508)
      • Unicorn-36291.exe (PID: 11600)
      • Unicorn-38329.exe (PID: 11568)
      • Unicorn-32207.exe (PID: 11620)
      • Unicorn-42824.exe (PID: 11656)
      • Unicorn-5263.exe (PID: 11636)
      • Unicorn-41751.exe (PID: 11544)
      • Unicorn-19139.exe (PID: 11672)
      • Unicorn-32518.exe (PID: 11708)
      • Unicorn-6695.exe (PID: 11728)
      • Unicorn-6040.exe (PID: 11744)
      • Unicorn-16255.exe (PID: 11768)
      • Unicorn-23223.exe (PID: 11664)
      • Unicorn-62502.exe (PID: 11784)
      • Unicorn-19600.exe (PID: 11916)
      • Unicorn-56192.exe (PID: 11924)
      • Unicorn-59207.exe (PID: 11956)
      • Unicorn-5865.exe (PID: 11904)
      • Unicorn-50327.exe (PID: 11932)
      • Unicorn-36591.exe (PID: 11940)
      • Unicorn-14033.exe (PID: 11888)
      • Unicorn-27768.exe (PID: 11880)
      • Unicorn-44973.exe (PID: 12132)
      • Unicorn-14246.exe (PID: 12124)
      • Unicorn-21023.exe (PID: 12156)
      • Unicorn-43027.exe (PID: 12092)
      • Unicorn-8216.exe (PID: 12100)
      • Unicorn-54325.exe (PID: 12216)
      • Unicorn-34475.exe (PID: 12268)
      • Unicorn-61309.exe (PID: 12184)
      • Unicorn-55087.exe (PID: 12232)
      • Unicorn-29575.exe (PID: 11524)
      • Unicorn-55563.exe (PID: 12332)
      • Unicorn-41173.exe (PID: 12348)
      • Unicorn-34950.exe (PID: 12412)
      • Unicorn-60494.exe (PID: 12664)
      • Unicorn-40265.exe (PID: 12496)
      • Unicorn-2662.exe (PID: 12620)
      • Unicorn-19461.exe (PID: 6724)
      • Unicorn-8600.exe (PID: 3968)
      • Unicorn-63639.exe (PID: 12380)
      • Unicorn-7401.exe (PID: 12580)
      • Unicorn-44734.exe (PID: 12788)
      • Unicorn-44734.exe (PID: 12772)
      • Unicorn-31826.exe (PID: 12740)
      • Unicorn-49752.exe (PID: 12980)
      • Unicorn-22175.exe (PID: 12840)
      • Unicorn-1563.exe (PID: 12864)
      • Unicorn-3046.exe (PID: 12900)
      • Unicorn-44542.exe (PID: 12944)
      • Unicorn-57423.exe (PID: 13008)
      • Unicorn-21739.exe (PID: 13036)
      • Unicorn-63592.exe (PID: 13052)
      • Unicorn-25028.exe (PID: 12704)
      • Unicorn-18091.exe (PID: 12748)
      • Unicorn-21735.exe (PID: 12880)
      • Unicorn-3046.exe (PID: 12892)
      • Unicorn-25988.exe (PID: 13216)
      • Unicorn-42160.exe (PID: 13160)
      • Unicorn-16337.exe (PID: 13180)
      • Unicorn-22559.exe (PID: 13152)
      • Unicorn-42979.exe (PID: 13228)
      • Unicorn-54577.exe (PID: 13304)
      • Unicorn-23850.exe (PID: 13296)
      • Unicorn-34619.exe (PID: 6264)
      • Unicorn-29880.exe (PID: 8092)
      • Unicorn-59508.exe (PID: 13060)
      • Unicorn-55424.exe (PID: 13084)
      • Unicorn-41033.exe (PID: 13128)
      • Unicorn-41033.exe (PID: 13120)
      • Unicorn-13379.exe (PID: 13268)
      • Unicorn-53115.exe (PID: 13408)
      • Unicorn-22996.exe (PID: 13356)
      • Unicorn-12061.exe (PID: 13348)
      • Unicorn-16145.exe (PID: 13320)
      • Unicorn-25796.exe (PID: 13364)

    • Reads the computer name

      • 1 (365).exe (PID: 2600)
      • Unicorn-19105.exe (PID: 4724)
      • Unicorn-27705.exe (PID: 6028)
      • Unicorn-8244.exe (PID: 6272)
      • Unicorn-1612.exe (PID: 4380)
      • Unicorn-43199.exe (PID: 5392)
      • Unicorn-56935.exe (PID: 1072)
      • Unicorn-44352.exe (PID: 4996)
      • Unicorn-1181.exe (PID: 3888)
      • Unicorn-31353.exe (PID: 5164)
      • Unicorn-64492.exe (PID: 516)
      • Unicorn-16963.exe (PID: 5960)
      • Unicorn-58627.exe (PID: 5376)
      • Unicorn-63287.exe (PID: 4488)
      • Unicorn-3880.exe (PID: 856)
      • Unicorn-16963.exe (PID: 4220)
      • Unicorn-34991.exe (PID: 960)
      • Unicorn-32853.exe (PID: 5964)
      • Unicorn-59495.exe (PID: 664)
      • Unicorn-32853.exe (PID: 5576)
      • Unicorn-15447.exe (PID: 5728)
      • Unicorn-32853.exe (PID: 2432)
      • Unicorn-735.exe (PID: 1096)
      • Unicorn-25239.exe (PID: 6700)
      • Unicorn-25239.exe (PID: 5256)
      • Unicorn-44840.exe (PID: 4120)
      • Unicorn-14470.exe (PID: 5260)
      • Unicorn-36174.exe (PID: 7052)
      • Unicorn-32251.exe (PID: 7560)
      • Unicorn-45307.exe (PID: 7596)
      • Unicorn-32251.exe (PID: 7556)
      • Unicorn-25706.exe (PID: 7604)
      • Unicorn-55878.exe (PID: 7720)
      • Unicorn-33019.exe (PID: 7740)
      • Unicorn-28935.exe (PID: 7760)
      • Unicorn-29489.exe (PID: 7856)
      • Unicorn-24851.exe (PID: 7800)
      • Unicorn-18306.exe (PID: 7820)
      • Unicorn-38726.exe (PID: 7888)
      • Unicorn-58592.exe (PID: 7880)
      • Unicorn-28935.exe (PID: 7764)
      • Unicorn-38172.exe (PID: 7816)
      • Unicorn-42810.exe (PID: 7872)
      • Unicorn-52370.exe (PID: 7940)
      • Unicorn-4985.exe (PID: 7792)
      • Unicorn-52370.exe (PID: 7916)
      • Unicorn-59776.exe (PID: 7972)
      • Unicorn-2904.exe (PID: 7984)
      • Unicorn-52370.exe (PID: 7932)
      • Unicorn-20666.exe (PID: 8000)
      • Unicorn-59753.exe (PID: 7232)
      • Unicorn-32504.exe (PID: 7924)
      • Unicorn-43240.exe (PID: 7992)
      • Unicorn-11721.exe (PID: 8108)
      • Unicorn-11721.exe (PID: 8116)
      • Unicorn-41379.exe (PID: 8156)
      • Unicorn-56953.exe (PID: 7240)
      • Unicorn-29681.exe (PID: 8140)
      • Unicorn-29681.exe (PID: 8144)
      • Unicorn-41379.exe (PID: 8160)
      • Unicorn-51393.exe (PID: 8032)
      • Unicorn-51393.exe (PID: 8024)
      • Unicorn-26797.exe (PID: 8012)
      • Unicorn-14113.exe (PID: 7392)
      • Unicorn-52837.exe (PID: 5864)
      • Unicorn-14497.exe (PID: 7476)
      • Unicorn-46999.exe (PID: 7652)
      • Unicorn-39385.exe (PID: 7480)
      • Unicorn-38015.exe (PID: 7012)
      • Unicorn-48945.exe (PID: 5640)
      • Unicorn-8580.exe (PID: 6512)
      • Unicorn-4404.exe (PID: 2644)
      • Unicorn-48452.exe (PID: 6108)
      • Unicorn-48452.exe (PID: 6148)
      • Unicorn-57589.exe (PID: 8216)
      • Unicorn-43854.exe (PID: 8232)
      • Unicorn-57589.exe (PID: 8220)
      • Unicorn-43854.exe (PID: 8240)
      • Unicorn-43854.exe (PID: 8248)
      • Unicorn-4404.exe (PID: 6300)
      • Unicorn-48452.exe (PID: 7400)
      • Unicorn-43299.exe (PID: 900)
      • Unicorn-31623.exe (PID: 8340)
      • Unicorn-58265.exe (PID: 8364)
      • Unicorn-47959.exe (PID: 8408)
      • Unicorn-10434.exe (PID: 8304)
      • Unicorn-21295.exe (PID: 8320)
      • Unicorn-41161.exe (PID: 8312)
      • Unicorn-58820.exe (PID: 8420)
      • Unicorn-7018.exe (PID: 8428)
      • Unicorn-50974.exe (PID: 8480)
      • Unicorn-56682.exe (PID: 8576)
      • Unicorn-35250.exe (PID: 8564)
      • Unicorn-52043.exe (PID: 8392)
      • Unicorn-4304.exe (PID: 8296)
      • Unicorn-56682.exe (PID: 8584)
      • Unicorn-50974.exe (PID: 8472)
      • Unicorn-13148.exe (PID: 8456)
      • Unicorn-14829.exe (PID: 8536)
      • Unicorn-34745.exe (PID: 8520)
      • Unicorn-29485.exe (PID: 8504)
      • Unicorn-28224.exe (PID: 8752)
      • Unicorn-65479.exe (PID: 8640)
      • Unicorn-9427.exe (PID: 8680)
      • Unicorn-28537.exe (PID: 8792)
      • Unicorn-10063.exe (PID: 8908)
      • Unicorn-23162.exe (PID: 8672)
      • Unicorn-20892.exe (PID: 8656)
      • Unicorn-58609.exe (PID: 8900)
      • Unicorn-4255.exe (PID: 8940)
      • Unicorn-48403.exe (PID: 8808)
      • Unicorn-25653.exe (PID: 9032)
      • Unicorn-29929.exe (PID: 8928)
      • Unicorn-48403.exe (PID: 8816)
      • Unicorn-29664.exe (PID: 8916)
      • Unicorn-22937.exe (PID: 8800)
      • Unicorn-44319.exe (PID: 8824)
      • Unicorn-3286.exe (PID: 8876)
      • Unicorn-42081.exe (PID: 9084)
      • Unicorn-1148.exe (PID: 9004)
      • Unicorn-21660.exe (PID: 9024)
      • Unicorn-28345.exe (PID: 9076)
      • Unicorn-56379.exe (PID: 9040)
      • Unicorn-38865.exe (PID: 7320)
      • Unicorn-56855.exe (PID: 7328)
      • Unicorn-56934.exe (PID: 7496)
      • Unicorn-38481.exe (PID: 7684)
      • Unicorn-40427.exe (PID: 9108)
      • Unicorn-41173.exe (PID: 9072)
      • Unicorn-20945.exe (PID: 7688)
      • Unicorn-7846.exe (PID: 7348)
      • Unicorn-20967.exe (PID: 9392)
      • Unicorn-50058.exe (PID: 9412)
      • Unicorn-58299.exe (PID: 9428)
      • Unicorn-58854.exe (PID: 9480)
      • Unicorn-930.exe (PID: 9460)

    • The sample compiled with chinese language support

      • 1 (365).exe (PID: 2600)
      • Unicorn-27705.exe (PID: 6028)
      • Unicorn-19105.exe (PID: 4724)
      • Unicorn-43199.exe (PID: 5392)
      • Unicorn-1612.exe (PID: 4380)
      • Unicorn-8244.exe (PID: 6272)
      • Unicorn-44352.exe (PID: 4996)
      • Unicorn-1181.exe (PID: 3888)
      • Unicorn-58627.exe (PID: 5376)
      • Unicorn-16963.exe (PID: 4220)
      • Unicorn-64492.exe (PID: 516)
      • Unicorn-3880.exe (PID: 856)
      • Unicorn-34991.exe (PID: 960)
      • Unicorn-59495.exe (PID: 664)
      • Unicorn-15447.exe (PID: 5728)
      • Unicorn-32853.exe (PID: 2432)
      • Unicorn-16963.exe (PID: 5960)
      • Unicorn-31353.exe (PID: 5164)
      • Unicorn-735.exe (PID: 1096)
      • Unicorn-25239.exe (PID: 6700)
      • Unicorn-36174.exe (PID: 7052)
      • Unicorn-32251.exe (PID: 7556)
      • Unicorn-25706.exe (PID: 7604)
      • Unicorn-55878.exe (PID: 7720)
      • Unicorn-33019.exe (PID: 7740)
      • Unicorn-28935.exe (PID: 7760)
      • Unicorn-32853.exe (PID: 5576)
      • Unicorn-24851.exe (PID: 7800)
      • Unicorn-29489.exe (PID: 7856)
      • Unicorn-38172.exe (PID: 7816)
      • Unicorn-42810.exe (PID: 7872)
      • Unicorn-58592.exe (PID: 7880)
      • Unicorn-59776.exe (PID: 7972)
      • Unicorn-52370.exe (PID: 7940)
      • Unicorn-4985.exe (PID: 7792)
      • Unicorn-2904.exe (PID: 7984)
      • Unicorn-52370.exe (PID: 7932)
      • Unicorn-44840.exe (PID: 4120)
      • Unicorn-52370.exe (PID: 7916)
      • Unicorn-32504.exe (PID: 7924)
      • Unicorn-51393.exe (PID: 8032)
      • Unicorn-43240.exe (PID: 7992)
      • Unicorn-56935.exe (PID: 1072)
      • Unicorn-14470.exe (PID: 5260)
      • Unicorn-11721.exe (PID: 8116)
      • Unicorn-56953.exe (PID: 7240)
      • Unicorn-11721.exe (PID: 8108)
      • Unicorn-29681.exe (PID: 8140)
      • Unicorn-41379.exe (PID: 8160)
      • Unicorn-32251.exe (PID: 7560)
      • Unicorn-29681.exe (PID: 8144)
      • Unicorn-41379.exe (PID: 8156)
      • Unicorn-63287.exe (PID: 4488)
      • Unicorn-45307.exe (PID: 7596)
      • Unicorn-52837.exe (PID: 5864)
      • Unicorn-14497.exe (PID: 7476)
      • Unicorn-14113.exe (PID: 7392)
      • Unicorn-46999.exe (PID: 7652)
      • Unicorn-39385.exe (PID: 7480)
      • Unicorn-38015.exe (PID: 7012)
      • Unicorn-12764.exe (PID: 1164)
      • Unicorn-48945.exe (PID: 5640)
      • Unicorn-8580.exe (PID: 6512)
      • Unicorn-48452.exe (PID: 6108)
      • Unicorn-18306.exe (PID: 7820)
      • Unicorn-4404.exe (PID: 2644)
      • Unicorn-38726.exe (PID: 7888)
      • Unicorn-8488.exe (PID: 7436)
      • Unicorn-48452.exe (PID: 7400)
      • Unicorn-4404.exe (PID: 6300)
      • Unicorn-28935.exe (PID: 7764)
      • Unicorn-48452.exe (PID: 6148)
      • Unicorn-57589.exe (PID: 8216)
      • Unicorn-57589.exe (PID: 8220)
      • Unicorn-43854.exe (PID: 8248)
      • Unicorn-43854.exe (PID: 8232)
      • Unicorn-10434.exe (PID: 8304)
      • Unicorn-32853.exe (PID: 5964)
      • Unicorn-43854.exe (PID: 8240)
      • Unicorn-58265.exe (PID: 8364)
      • Unicorn-21295.exe (PID: 8320)
      • Unicorn-31623.exe (PID: 8340)
      • Unicorn-52043.exe (PID: 8392)
      • Unicorn-47959.exe (PID: 8408)
      • Unicorn-41161.exe (PID: 8312)
      • Unicorn-4304.exe (PID: 8296)
      • Unicorn-58820.exe (PID: 8420)
      • Unicorn-7018.exe (PID: 8428)
      • Unicorn-50974.exe (PID: 8480)
      • Unicorn-56682.exe (PID: 8576)
      • Unicorn-13148.exe (PID: 8448)
      • Unicorn-35250.exe (PID: 8564)
      • Unicorn-20666.exe (PID: 8000)
      • Unicorn-56682.exe (PID: 8584)
      • Unicorn-50974.exe (PID: 8472)
      • Unicorn-25239.exe (PID: 5256)
      • Unicorn-34745.exe (PID: 8520)
      • Unicorn-13148.exe (PID: 8456)
      • Unicorn-29485.exe (PID: 8504)
      • Unicorn-50974.exe (PID: 8464)
      • Unicorn-14829.exe (PID: 8536)
      • Unicorn-26797.exe (PID: 8012)
      • Unicorn-29028.exe (PID: 8664)
      • Unicorn-28224.exe (PID: 8752)
      • Unicorn-51393.exe (PID: 8024)
      • Unicorn-7803.exe (PID: 8696)
      • Unicorn-18987.exe (PID: 8712)
      • Unicorn-10063.exe (PID: 8908)
      • Unicorn-23162.exe (PID: 8672)
      • Unicorn-9427.exe (PID: 8680)
      • Unicorn-36705.exe (PID: 8772)
      • Unicorn-58609.exe (PID: 8900)
      • Unicorn-22937.exe (PID: 8800)
      • Unicorn-28537.exe (PID: 8792)
      • Unicorn-48403.exe (PID: 8808)
      • Unicorn-25653.exe (PID: 9032)
      • Unicorn-29929.exe (PID: 8928)
      • Unicorn-48403.exe (PID: 8816)
      • Unicorn-29664.exe (PID: 8916)
      • Unicorn-3286.exe (PID: 8876)
      • Unicorn-65294.exe (PID: 8980)
      • Unicorn-1148.exe (PID: 9004)
      • Unicorn-42081.exe (PID: 9084)
      • Unicorn-59753.exe (PID: 7232)
      • Unicorn-56379.exe (PID: 9040)
      • Unicorn-28345.exe (PID: 9076)
      • Unicorn-21660.exe (PID: 9024)
      • Unicorn-19431.exe (PID: 9116)
      • Unicorn-38865.exe (PID: 7320)
      • Unicorn-56855.exe (PID: 7328)
      • Unicorn-56934.exe (PID: 7496)
      • Unicorn-40427.exe (PID: 9108)
      • Unicorn-38481.exe (PID: 7684)
      • Unicorn-7846.exe (PID: 7348)
      • Unicorn-22145.exe (PID: 7176)
      • Unicorn-41173.exe (PID: 9072)
      • Unicorn-20945.exe (PID: 7688)
      • Unicorn-20967.exe (PID: 9392)
      • Unicorn-50058.exe (PID: 9412)
      • Unicorn-58299.exe (PID: 9428)
      • Unicorn-58854.exe (PID: 9480)
      • Unicorn-20892.exe (PID: 8656)
      • Unicorn-930.exe (PID: 9460)
      • Unicorn-16451.exe (PID: 9504)
      • Unicorn-46431.exe (PID: 9540)
      • Unicorn-48377.exe (PID: 9564)
      • Unicorn-1890.exe (PID: 9624)
      • Unicorn-8667.exe (PID: 9596)
      • Unicorn-59814.exe (PID: 9640)
      • Unicorn-4255.exe (PID: 8940)
      • Unicorn-44319.exe (PID: 8824)
      • Unicorn-24257.exe (PID: 9696)
      • Unicorn-307.exe (PID: 9688)
      • Unicorn-16089.exe (PID: 9704)
      • Unicorn-59643.exe (PID: 9828)
      • Unicorn-8304.exe (PID: 9912)
      • Unicorn-24257.exe (PID: 9680)
      • Unicorn-63151.exe (PID: 9744)
      • Unicorn-49316.exe (PID: 9788)
      • Unicorn-30022.exe (PID: 9804)
      • Unicorn-8396.exe (PID: 9896)
      • Unicorn-22430.exe (PID: 9876)
      • Unicorn-51183.exe (PID: 10036)
      • Unicorn-51283.exe (PID: 9972)
      • Unicorn-39031.exe (PID: 9920)
      • Unicorn-45061.exe (PID: 10000)
      • Unicorn-29279.exe (PID: 10096)
      • Unicorn-61681.exe (PID: 9852)
      • Unicorn-42539.exe (PID: 9772)
      • Unicorn-59451.exe (PID: 9956)
      • Unicorn-18995.exe (PID: 10260)
      • Unicorn-63535.exe (PID: 10028)
      • Unicorn-49145.exe (PID: 10104)
      • Unicorn-31993.exe (PID: 10176)
      • Unicorn-41553.exe (PID: 10228)
      • Unicorn-59351.exe (PID: 10136)
      • Unicorn-22503.exe (PID: 10052)
      • Unicorn-12507.exe (PID: 10276)
      • Unicorn-29855.exe (PID: 10268)
      • Unicorn-56306.exe (PID: 10376)
      • Unicorn-25771.exe (PID: 10204)
      • Unicorn-61973.exe (PID: 4920)
      • Unicorn-42107.exe (PID: 1116)
      • Unicorn-65479.exe (PID: 8640)
      • Unicorn-51481.exe (PID: 10528)
      • Unicorn-19357.exe (PID: 10504)
      • Unicorn-17433.exe (PID: 10564)
      • Unicorn-7619.exe (PID: 10344)
      • Unicorn-16857.exe (PID: 10360)
      • Unicorn-420.exe (PID: 10384)
      • Unicorn-22887.exe (PID: 10456)
      • Unicorn-43307.exe (PID: 10488)
      • Unicorn-3597.exe (PID: 10700)
      • Unicorn-33769.exe (PID: 10648)
      • Unicorn-26706.exe (PID: 10428)
      • Unicorn-31722.exe (PID: 10604)
      • Unicorn-50105.exe (PID: 10736)
      • Unicorn-11210.exe (PID: 10584)
      • Unicorn-23463.exe (PID: 10712)
      • Unicorn-60219.exe (PID: 10796)
      • Unicorn-37853.exe (PID: 10616)
      • Unicorn-46576.exe (PID: 10760)
      • Unicorn-60219.exe (PID: 10804)
      • Unicorn-13056.exe (PID: 10840)
      • Unicorn-36845.exe (PID: 10908)
      • Unicorn-26539.exe (PID: 10944)
      • Unicorn-23038.exe (PID: 10900)
      • Unicorn-19763.exe (PID: 11052)
      • Unicorn-62357.exe (PID: 10680)
      • Unicorn-31439.exe (PID: 10892)
      • Unicorn-27739.exe (PID: 11212)
      • Unicorn-43299.exe (PID: 900)
      • Unicorn-49727.exe (PID: 11012)
      • Unicorn-34760.exe (PID: 10860)
      • Unicorn-17625.exe (PID: 11108)
      • Unicorn-19571.exe (PID: 4756)
      • Unicorn-26539.exe (PID: 10940)
      • Unicorn-27931.exe (PID: 11004)
      • Unicorn-17625.exe (PID: 11112)
      • Unicorn-29107.exe (PID: 11028)
      • Unicorn-25793.exe (PID: 11084)
      • Unicorn-7318.exe (PID: 11152)
      • Unicorn-64687.exe (PID: 11196)
      • Unicorn-38237.exe (PID: 10972)
      • Unicorn-4303.exe (PID: 11096)
      • Unicorn-31823.exe (PID: 1748)
      • Unicorn-40183.exe (PID: 11068)
      • Unicorn-53011.exe (PID: 2084)
      • Unicorn-17935.exe (PID: 7512)
      • Unicorn-37229.exe (PID: 10756)
      • Unicorn-7318.exe (PID: 11148)
      • Unicorn-28869.exe (PID: 11432)
      • Unicorn-3134.exe (PID: 4112)
      • Unicorn-50965.exe (PID: 924)
      • Unicorn-64687.exe (PID: 11204)
      • Unicorn-48906.exe (PID: 11164)
      • Unicorn-30261.exe (PID: 11416)
      • Unicorn-9840.exe (PID: 11336)
      • Unicorn-36291.exe (PID: 11600)
      • Unicorn-14287.exe (PID: 10980)
      • Unicorn-38521.exe (PID: 11312)
      • Unicorn-41751.exe (PID: 11544)
      • Unicorn-63680.exe (PID: 11424)
      • Unicorn-8257.exe (PID: 11500)
      • Unicorn-3710.exe (PID: 11320)
      • Unicorn-38329.exe (PID: 11568)
      • Unicorn-14720.exe (PID: 11304)
      • Unicorn-89.exe (PID: 11508)
      • Unicorn-9575.exe (PID: 11328)
      • Unicorn-23655.exe (PID: 11228)
      • Unicorn-6311.exe (PID: 11400)
      • Unicorn-52587.exe (PID: 11392)
      • Unicorn-60987.exe (PID: 11408)
      • Unicorn-63919.exe (PID: 10412)
      • Unicorn-19139.exe (PID: 11672)
      • Unicorn-23223.exe (PID: 11664)
      • Unicorn-32207.exe (PID: 11620)
      • Unicorn-32518.exe (PID: 11708)
      • Unicorn-6040.exe (PID: 11744)
      • Unicorn-42824.exe (PID: 11656)
      • Unicorn-5263.exe (PID: 11636)
      • Unicorn-60722.exe (PID: 11384)
      • Unicorn-16255.exe (PID: 11768)
      • Unicorn-62502.exe (PID: 11784)
      • Unicorn-6695.exe (PID: 11728)

    • Create files in a temporary directory

      • 1 (365).exe (PID: 2600)
      • Unicorn-8244.exe (PID: 6272)
      • Unicorn-1612.exe (PID: 4380)
      • Unicorn-43199.exe (PID: 5392)
      • Unicorn-19105.exe (PID: 4724)
      • Unicorn-44352.exe (PID: 4996)
      • Unicorn-58627.exe (PID: 5376)
      • Unicorn-27705.exe (PID: 6028)
      • Unicorn-3880.exe (PID: 856)
      • Unicorn-34991.exe (PID: 960)
      • Unicorn-59495.exe (PID: 664)
      • Unicorn-1181.exe (PID: 3888)
      • Unicorn-735.exe (PID: 1096)
      • Unicorn-16963.exe (PID: 4220)
      • Unicorn-25239.exe (PID: 6700)
      • Unicorn-36174.exe (PID: 7052)
      • Unicorn-31353.exe (PID: 5164)
      • Unicorn-25706.exe (PID: 7604)
      • Unicorn-32853.exe (PID: 5576)
      • Unicorn-28935.exe (PID: 7760)
      • Unicorn-24851.exe (PID: 7800)
      • Unicorn-16963.exe (PID: 5960)
      • Unicorn-58592.exe (PID: 7880)
      • Unicorn-15447.exe (PID: 5728)
      • Unicorn-4985.exe (PID: 7792)
      • Unicorn-32853.exe (PID: 2432)
      • Unicorn-51393.exe (PID: 8032)
      • Unicorn-2904.exe (PID: 7984)
      • Unicorn-44840.exe (PID: 4120)
      • Unicorn-43240.exe (PID: 7992)
      • Unicorn-64492.exe (PID: 516)
      • Unicorn-56935.exe (PID: 1072)
      • Unicorn-11721.exe (PID: 8116)
      • Unicorn-11721.exe (PID: 8108)
      • Unicorn-29681.exe (PID: 8140)
      • Unicorn-29681.exe (PID: 8144)
      • Unicorn-32251.exe (PID: 7556)
      • Unicorn-41379.exe (PID: 8160)
      • Unicorn-41379.exe (PID: 8156)
      • Unicorn-63287.exe (PID: 4488)
      • Unicorn-45307.exe (PID: 7596)
      • Unicorn-14113.exe (PID: 7392)
      • Unicorn-14497.exe (PID: 7476)
      • Unicorn-55878.exe (PID: 7720)
      • Unicorn-46999.exe (PID: 7652)
      • Unicorn-33019.exe (PID: 7740)
      • Unicorn-39385.exe (PID: 7480)
      • Unicorn-12764.exe (PID: 1164)
      • Unicorn-29489.exe (PID: 7856)
      • Unicorn-38015.exe (PID: 7012)
      • Unicorn-8580.exe (PID: 6512)
      • Unicorn-48452.exe (PID: 6108)
      • Unicorn-18306.exe (PID: 7820)
      • Unicorn-8488.exe (PID: 7436)
      • Unicorn-4404.exe (PID: 6300)
      • Unicorn-38726.exe (PID: 7888)
      • Unicorn-48452.exe (PID: 7400)
      • Unicorn-48452.exe (PID: 6148)
      • Unicorn-42810.exe (PID: 7872)
      • Unicorn-57589.exe (PID: 8216)
      • Unicorn-43854.exe (PID: 8232)
      • Unicorn-28935.exe (PID: 7764)
      • Unicorn-38172.exe (PID: 7816)
      • Unicorn-57589.exe (PID: 8220)
      • Unicorn-43854.exe (PID: 8240)
      • Unicorn-32853.exe (PID: 5964)
      • Unicorn-31623.exe (PID: 8340)
      • Unicorn-58265.exe (PID: 8364)
      • Unicorn-21295.exe (PID: 8320)
      • Unicorn-52043.exe (PID: 8392)
      • Unicorn-52370.exe (PID: 7940)
      • Unicorn-4304.exe (PID: 8296)
      • Unicorn-47959.exe (PID: 8408)
      • Unicorn-59776.exe (PID: 7972)
      • Unicorn-52370.exe (PID: 7916)
      • Unicorn-41161.exe (PID: 8312)
      • Unicorn-52370.exe (PID: 7932)
      • Unicorn-58820.exe (PID: 8420)
      • Unicorn-7018.exe (PID: 8428)
      • Unicorn-50974.exe (PID: 8480)
      • Unicorn-13148.exe (PID: 8448)
      • Unicorn-35250.exe (PID: 8564)
      • Unicorn-56682.exe (PID: 8576)
      • Unicorn-50974.exe (PID: 8472)
      • Unicorn-20666.exe (PID: 8000)
      • Unicorn-56682.exe (PID: 8584)
      • Unicorn-25239.exe (PID: 5256)
      • Unicorn-34745.exe (PID: 8520)
      • Unicorn-14829.exe (PID: 8536)
      • Unicorn-13148.exe (PID: 8456)
      • Unicorn-29485.exe (PID: 8504)
      • Unicorn-50974.exe (PID: 8464)
      • Unicorn-28224.exe (PID: 8752)
      • Unicorn-26797.exe (PID: 8012)
      • Unicorn-29028.exe (PID: 8664)
      • Unicorn-7803.exe (PID: 8696)
      • Unicorn-51393.exe (PID: 8024)
      • Unicorn-32504.exe (PID: 7924)
      • Unicorn-56953.exe (PID: 7240)
      • Unicorn-18987.exe (PID: 8712)
      • Unicorn-9427.exe (PID: 8680)
      • Unicorn-10063.exe (PID: 8908)
      • Unicorn-23162.exe (PID: 8672)
      • Unicorn-28537.exe (PID: 8792)
      • Unicorn-36705.exe (PID: 8772)
      • Unicorn-22937.exe (PID: 8800)
      • Unicorn-58609.exe (PID: 8900)
      • Unicorn-48403.exe (PID: 8808)
      • Unicorn-25653.exe (PID: 9032)
      • Unicorn-29929.exe (PID: 8928)
      • Unicorn-14470.exe (PID: 5260)
      • Unicorn-29664.exe (PID: 8916)
      • Unicorn-65294.exe (PID: 8980)
      • Unicorn-48403.exe (PID: 8816)
      • Unicorn-32251.exe (PID: 7560)
      • Unicorn-3286.exe (PID: 8876)
      • Unicorn-42081.exe (PID: 9084)
      • Unicorn-59753.exe (PID: 7232)
      • Unicorn-1148.exe (PID: 9004)
      • Unicorn-52837.exe (PID: 5864)
      • Unicorn-56379.exe (PID: 9040)
      • Unicorn-21660.exe (PID: 9024)
      • Unicorn-28345.exe (PID: 9076)
      • Unicorn-19431.exe (PID: 9116)
      • Unicorn-38865.exe (PID: 7320)
      • Unicorn-56855.exe (PID: 7328)
      • Unicorn-48945.exe (PID: 5640)
      • Unicorn-38481.exe (PID: 7684)
      • Unicorn-56934.exe (PID: 7496)
      • Unicorn-40427.exe (PID: 9108)
      • Unicorn-22145.exe (PID: 7176)
      • Unicorn-7846.exe (PID: 7348)
      • Unicorn-41173.exe (PID: 9072)
      • Unicorn-4404.exe (PID: 2644)
      • Unicorn-20945.exe (PID: 7688)
      • Unicorn-43854.exe (PID: 8248)
      • Unicorn-10434.exe (PID: 8304)
      • Unicorn-20967.exe (PID: 9392)

    • Reads security settings of Internet Explorer

      • BackgroundTransferHost.exe (PID: 680)
      • BackgroundTransferHost.exe (PID: 5260)
      • BackgroundTransferHost.exe (PID: 5204)
      • BackgroundTransferHost.exe (PID: 7176)
      • BackgroundTransferHost.exe (PID: 7436)

    • Checks proxy server information

      • BackgroundTransferHost.exe (PID: 5260)

    • Creates files or folders in the user directory

      • BackgroundTransferHost.exe (PID: 5260)

    • Reads the software policy settings

      • BackgroundTransferHost.exe (PID: 5260)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable Microsoft Visual Basic 6 (90.6)
.exe | Win32 Executable (generic) (4.9)
.exe | Generic Win/DOS Executable (2.2)
.exe | DOS Executable Generic (2.2)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:01:20 00:32:00+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 299008
UninitializedDataSize: -
EntryPoint: 0x13d4
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: 25600
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
InternalName: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
471
Monitored processes
339
Malicious processes
66
Suspicious processes
66

Behavior graph

Click at the process to see the details
start 1 (365).exe sppextcomobj.exe no specs slui.exe no specs unicorn-27705.exe unicorn-8244.exe unicorn-19105.exe unicorn-1612.exe unicorn-56935.exe unicorn-43199.exe unicorn-44352.exe unicorn-31353.exe unicorn-1181.exe unicorn-64492.exe unicorn-58627.exe unicorn-16963.exe unicorn-16963.exe backgroundtransferhost.exe no specs backgroundtransferhost.exe unicorn-3880.exe unicorn-63287.exe backgroundtransferhost.exe no specs unicorn-34991.exe unicorn-59495.exe unicorn-32853.exe unicorn-32853.exe unicorn-15447.exe unicorn-32853.exe unicorn-735.exe unicorn-14470.exe unicorn-36174.exe unicorn-25239.exe unicorn-25239.exe unicorn-44840.exe backgroundtransferhost.exe no specs backgroundtransferhost.exe no specs unicorn-32251.exe unicorn-32251.exe unicorn-45307.exe unicorn-25706.exe unicorn-55878.exe unicorn-33019.exe unicorn-28935.exe unicorn-28935.exe unicorn-4985.exe unicorn-24851.exe unicorn-38172.exe unicorn-18306.exe unicorn-29489.exe unicorn-42810.exe unicorn-58592.exe unicorn-38726.exe unicorn-52370.exe unicorn-32504.exe unicorn-52370.exe unicorn-52370.exe unicorn-59776.exe unicorn-2904.exe unicorn-43240.exe unicorn-20666.exe unicorn-26797.exe unicorn-51393.exe unicorn-51393.exe unicorn-11721.exe unicorn-11721.exe unicorn-29681.exe unicorn-29681.exe unicorn-41379.exe unicorn-41379.exe unicorn-59753.exe unicorn-56953.exe unicorn-14113.exe unicorn-52837.exe unicorn-14497.exe unicorn-46999.exe unicorn-39385.exe unicorn-48945.exe unicorn-38015.exe unicorn-12764.exe unicorn-8580.exe unicorn-4404.exe unicorn-4404.exe unicorn-48452.exe unicorn-48452.exe unicorn-48452.exe unicorn-43299.exe unicorn-8488.exe unicorn-57589.exe unicorn-57589.exe unicorn-43854.exe unicorn-43854.exe unicorn-43854.exe unicorn-4304.exe unicorn-10434.exe unicorn-41161.exe unicorn-21295.exe unicorn-31623.exe unicorn-58265.exe unicorn-52043.exe unicorn-47959.exe unicorn-58820.exe unicorn-7018.exe unicorn-13148.exe unicorn-13148.exe unicorn-50974.exe unicorn-50974.exe unicorn-50974.exe unicorn-29485.exe unicorn-34745.exe unicorn-14829.exe unicorn-35250.exe unicorn-56682.exe unicorn-56682.exe unicorn-65479.exe unicorn-20892.exe unicorn-29028.exe unicorn-23162.exe unicorn-9427.exe unicorn-7803.exe unicorn-18987.exe unicorn-28224.exe unicorn-36705.exe unicorn-28537.exe unicorn-22937.exe unicorn-48403.exe unicorn-48403.exe unicorn-44319.exe unicorn-3286.exe unicorn-58609.exe unicorn-10063.exe unicorn-29664.exe unicorn-29929.exe unicorn-4255.exe unicorn-65294.exe unicorn-1148.exe unicorn-21660.exe unicorn-25653.exe unicorn-56379.exe unicorn-28345.exe unicorn-42081.exe unicorn-19431.exe unicorn-56934.exe unicorn-22145.exe unicorn-38481.exe unicorn-20945.exe unicorn-41173.exe unicorn-40427.exe unicorn-56855.exe unicorn-38865.exe unicorn-7846.exe unicorn-20967.exe unicorn-50058.exe unicorn-58299.exe unicorn-930.exe unicorn-58854.exe unicorn-16451.exe unicorn-46431.exe unicorn-48377.exe unicorn-8667.exe unicorn-1890.exe unicorn-59814.exe unicorn-24257.exe unicorn-307.exe unicorn-24257.exe unicorn-16089.exe unicorn-63151.exe unicorn-42539.exe unicorn-18589.exe no specs unicorn-49316.exe unicorn-30022.exe unicorn-59643.exe unicorn-61681.exe unicorn-22430.exe unicorn-8396.exe unicorn-8304.exe unicorn-39031.exe unicorn-59451.exe unicorn-51283.exe unicorn-45061.exe unicorn-63535.exe unicorn-51183.exe unicorn-22503.exe unicorn-29279.exe unicorn-49145.exe unicorn-59351.exe unicorn-31993.exe unicorn-25771.exe unicorn-41553.exe unicorn-42107.exe unicorn-61973.exe unicorn-18995.exe unicorn-29855.exe unicorn-12507.exe unicorn-7619.exe unicorn-16857.exe unicorn-56306.exe unicorn-420.exe unicorn-63919.exe unicorn-26706.exe unicorn-22887.exe unicorn-43307.exe unicorn-19357.exe unicorn-51481.exe unicorn-17433.exe unicorn-11210.exe unicorn-31722.exe unicorn-37853.exe unicorn-33769.exe unicorn-62357.exe unicorn-3597.exe unicorn-23463.exe unicorn-50105.exe unicorn-46576.exe unicorn-60219.exe unicorn-60219.exe unicorn-13056.exe unicorn-34760.exe unicorn-31439.exe unicorn-23038.exe unicorn-36845.exe unicorn-26539.exe unicorn-26539.exe unicorn-38237.exe unicorn-14287.exe unicorn-27931.exe unicorn-49727.exe unicorn-29107.exe unicorn-19763.exe unicorn-40183.exe unicorn-25793.exe unicorn-4303.exe unicorn-17625.exe unicorn-17625.exe unicorn-7318.exe unicorn-7318.exe unicorn-48906.exe unicorn-64687.exe unicorn-64687.exe unicorn-27739.exe unicorn-23655.exe unicorn-19571.exe unicorn-3134.exe unicorn-31823.exe unicorn-37229.exe unicorn-50965.exe unicorn-53011.exe unicorn-17935.exe unicorn-14720.exe unicorn-38521.exe unicorn-3710.exe unicorn-9575.exe unicorn-9840.exe unicorn-60722.exe unicorn-52587.exe unicorn-6311.exe unicorn-60987.exe unicorn-30261.exe unicorn-63680.exe unicorn-28869.exe unicorn-8257.exe unicorn-89.exe unicorn-41751.exe unicorn-38329.exe unicorn-36291.exe unicorn-32207.exe unicorn-5263.exe unicorn-42824.exe unicorn-23223.exe unicorn-19139.exe unicorn-32518.exe unicorn-6695.exe unicorn-6040.exe unicorn-16255.exe unicorn-62502.exe unicorn-27768.exe no specs unicorn-14033.exe no specs unicorn-5865.exe no specs unicorn-19600.exe no specs unicorn-56192.exe no specs unicorn-50327.exe no specs unicorn-36591.exe no specs unicorn-59207.exe no specs unicorn-43027.exe no specs unicorn-8216.exe no specs unicorn-14246.exe no specs unicorn-44973.exe no specs unicorn-21023.exe no specs unicorn-61309.exe no specs unicorn-54325.exe no specs unicorn-55087.exe no specs unicorn-34475.exe no specs unicorn-8600.exe no specs unicorn-19461.exe no specs unicorn-29575.exe no specs unicorn-55563.exe no specs unicorn-41173.exe no specs unicorn-63639.exe no specs unicorn-34950.exe no specs unicorn-40265.exe no specs unicorn-7401.exe no specs unicorn-2662.exe no specs unicorn-60494.exe no specs unicorn-25028.exe no specs unicorn-31826.exe no specs unicorn-18091.exe no specs unicorn-44734.exe no specs unicorn-44734.exe no specs unicorn-22175.exe no specs unicorn-1563.exe no specs unicorn-21735.exe no specs unicorn-3046.exe no specs unicorn-3046.exe no specs unicorn-44542.exe no specs unicorn-49752.exe no specs unicorn-57423.exe no specs unicorn-21739.exe no specs unicorn-63592.exe no specs unicorn-59508.exe no specs unicorn-55424.exe no specs unicorn-41033.exe no specs unicorn-41033.exe no specs unicorn-22559.exe no specs unicorn-42160.exe no specs unicorn-16337.exe no specs unicorn-25988.exe no specs unicorn-42979.exe no specs unicorn-13379.exe no specs unicorn-23850.exe no specs unicorn-54577.exe no specs unicorn-34619.exe no specs unicorn-29880.exe no specs unicorn-16145.exe no specs unicorn-12061.exe no specs unicorn-22996.exe no specs unicorn-25796.exe no specs unicorn-53115.exe no specs unicorn-18859.exe no specs unicorn-45502.exe no specs unicorn-55153.exe no specs unicorn-61018.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
516C:\Users\admin\AppData\Local\Temp\Unicorn-64492.exeC:\Users\admin\AppData\Local\Temp\Unicorn-64492.exe
1 (365).exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-64492.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
664C:\Users\admin\AppData\Local\Temp\Unicorn-59495.exeC:\Users\admin\AppData\Local\Temp\Unicorn-59495.exe
Unicorn-58627.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-59495.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
680"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.1C:\Windows\System32\BackgroundTransferHost.exe—svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Download/Upload Host
Exit code:
1
Version:
10.0.19041.3636 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\backgroundtransferhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\kernel.appcore.dll
c:\windows\system32\bcryptprimitives.dll
856C:\Users\admin\AppData\Local\Temp\Unicorn-3880.exeC:\Users\admin\AppData\Local\Temp\Unicorn-3880.exe
Unicorn-44352.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-3880.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
900C:\Users\admin\AppData\Local\Temp\Unicorn-43299.exeC:\Users\admin\AppData\Local\Temp\Unicorn-43299.exe
Unicorn-38172.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-43299.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
924C:\Users\admin\AppData\Local\Temp\Unicorn-50965.exeC:\Users\admin\AppData\Local\Temp\Unicorn-50965.exe
Unicorn-25706.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-50965.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
960C:\Users\admin\AppData\Local\Temp\Unicorn-34991.exeC:\Users\admin\AppData\Local\Temp\Unicorn-34991.exe
Unicorn-1181.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-34991.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1072C:\Users\admin\AppData\Local\Temp\Unicorn-56935.exeC:\Users\admin\AppData\Local\Temp\Unicorn-56935.exe
1 (365).exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-56935.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1096C:\Users\admin\AppData\Local\Temp\Unicorn-735.exeC:\Users\admin\AppData\Local\Temp\Unicorn-735.exe
Unicorn-1612.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-735.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1116C:\Users\admin\AppData\Local\Temp\Unicorn-42107.exeC:\Users\admin\AppData\Local\Temp\Unicorn-42107.exe
Unicorn-52370.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-42107.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
Total events
8 694
Read events
8 679
Write events
15
Delete events
0

Modification events

(PID) Process:(680) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(680) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(680) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(5260) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(5260) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(5260) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(5204) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(5204) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(5204) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(7176) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
Executable files
1 218
Suspicious files
5
Text files
0
Unknown types
0

Dropped files

PID
Process
Filename
Type
5260BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\d014e62e-4e60-4af9-ac63-695efd7f2437.down_data —
MD5:—
SHA256:—
6272Unicorn-8244.exeC:\Users\admin\AppData\Local\Temp\Unicorn-1181.exeexecutable
MD5:F346C9E0B8A855276F8197F11D75CA4B
SHA256:0AFA70C6DF6D82363798497E67E4244E4C9B603B8C4EF37D17612F38ED77003C
4380Unicorn-1612.exeC:\Users\admin\AppData\Local\Temp\Unicorn-31353.exeexecutable
MD5:7C086A60A10D8BE08B58C2DD24EFFF00
SHA256:AB506327B68F0E47A54B02F30AD5B8AD790B038D736FF128E0F8DC117B7AF0EE
4724Unicorn-19105.exeC:\Users\admin\AppData\Local\Temp\Unicorn-44352.exeexecutable
MD5:F5D3FB042920821D374266DD6FB7D07F
SHA256:AE1A2213EDF542982B61A33C429A800BE28AD3FB48ED339BE6B5371DF64B18F5
4996Unicorn-44352.exeC:\Users\admin\AppData\Local\Temp\Unicorn-3880.exeexecutable
MD5:235A28C6D0CED8A65E207F5F4415E435
SHA256:51FD0F792B031214E451936184C74D3EA06388018E6B7BC0E5E6362C7FCED2D6
6028Unicorn-27705.exeC:\Users\admin\AppData\Local\Temp\Unicorn-58627.exeexecutable
MD5:CD1C6C9D06BC58AA8E484D004C508446
SHA256:4FBE71D3EA928614771C9222BCEDE4180938D65A95EF7501BC7E31E06270C8D8
5260BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10Dbinary
MD5:01EE2C703B7BAA0253A74278E7846B25
SHA256:F223BB595C4763BF8BCA2BB0C29F44A356308A18B86434879048182777E0F814
5260BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10Dbinary
MD5:4872BABAF39AA62B8D32695EBB7E9173
SHA256:2EE85DF86EE29BBEB3DCA81AA29B6DE204F605A2769B84C728A329178A2D0999
4724Unicorn-19105.exeC:\Users\admin\AppData\Local\Temp\Unicorn-63287.exeexecutable
MD5:230AEA066E3F76BD44FC30EB8C44A246
SHA256:D8FB0D6A256227802F9DE0084131E4ED6CE8C341BA71AC2288786AB3FFB81E34
5260BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\394e8760-addf-4ace-9fbc-2060bcf9cc1e.up_meta_securebinary
MD5:13656DC46706279534E329DF55F214CE
SHA256:CF81F1130A43C03597ACB407EAD7F68F20E2372AD5B645754C08159D4B533073
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
9
TCP/UDP connections
32
DNS requests
21
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
—
—
GET
200
23.48.23.164:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
—
—
GET
200
23.48.23.164:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
6544
svchost.exe
GET
200
23.54.109.203:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
7216
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
5260
BackgroundTransferHost.exe
GET
200
23.54.109.203:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
7216
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
1020
backgroundTaskHost.exe
GET
200
23.54.109.203:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
whitelisted
—
—
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
—
—
whitelisted
—
—
GET
200
23.48.23.181:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
—
—
51.124.78.146:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
—
—
23.48.23.164:80
crl.microsoft.com
Akamai International B.V.
DE
whitelisted
3216
svchost.exe
40.115.3.253:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
20.190.159.68:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
6544
svchost.exe
23.54.109.203:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted
2104
svchost.exe
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
1020
backgroundTaskHost.exe
20.223.36.55:443
arc.msn.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
1020
backgroundTaskHost.exe
23.54.109.203:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted

DNS requests

Domain
IP
Reputation
google.com
  • 142.250.184.238
whitelisted
settings-win.data.microsoft.com
  • 51.124.78.146
  • 40.127.240.158
whitelisted
crl.microsoft.com
  • 23.48.23.164
  • 23.48.23.169
  • 23.48.23.177
  • 23.48.23.173
  • 23.48.23.147
  • 23.48.23.159
  • 23.48.23.158
  • 23.48.23.150
  • 23.48.23.156
  • 23.48.23.181
  • 23.48.23.183
  • 23.48.23.161
  • 23.48.23.162
  • 23.48.23.180
  • 23.48.23.190
whitelisted
client.wns.windows.com
  • 40.115.3.253
whitelisted
login.live.com
  • 20.190.159.68
  • 20.190.159.75
  • 40.126.31.1
  • 20.190.159.64
  • 40.126.31.0
  • 20.190.159.130
  • 40.126.31.71
  • 40.126.31.131
whitelisted
ocsp.digicert.com
  • 23.54.109.203
whitelisted
arc.msn.com
  • 20.223.36.55
whitelisted
www.bing.com
  • 104.126.37.155
  • 104.126.37.152
  • 104.126.37.153
  • 104.126.37.160
  • 104.126.37.176
  • 104.126.37.177
  • 104.126.37.161
  • 104.126.37.147
  • 104.126.37.178
whitelisted
slscr.update.microsoft.com
  • 172.202.163.200
whitelisted
www.microsoft.com
  • 184.30.21.171
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2026 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
1 (365)