File name:

1 (123)

Full analysis: https://app.any.run/tasks/854042fa-4a73-40c5-afcb-695ed2002477
Verdict: Malicious activity
Analysis date: March 24, 2025, 10:47:51
OS: Windows 10 Professional (build: 19045, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections
MD5:

2F1BE42373290B3D2EB3D5D29AB0BB60

SHA1:

41885CB23FCFC5CE33ECA74A82FFFE00556E0018

SHA256:

95B65161400615EB837CDB40C6D4F92B34FBC2BC6ADF74EE0894E2FC5EFEDEAD

SSDEEP:

6144:N7e8CUmdQDWTBiUj0e2RbSx+tPrlp8+BL/xUeOaykb8ScjwpyAvEhgGOYQ9sToxM:Na31FTBdj3ePh+SLJUeOa1x4DxmDsR

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Starts itself from another location

      • 1 (123).exe (PID: 4812)
      • Unicorn-27021.exe (PID: 6424)
      • Unicorn-8520.exe (PID: 7340)
      • Unicorn-50108.exe (PID: 7360)
      • Unicorn-10632.exe (PID: 7812)
      • Unicorn-34814.exe (PID: 7832)
      • Unicorn-45343.exe (PID: 7864)
      • Unicorn-47389.exe (PID: 7844)
      • Unicorn-61909.exe (PID: 7916)
      • Unicorn-2547.exe (PID: 7936)
      • Unicorn-65199.exe (PID: 7952)
      • Unicorn-46725.exe (PID: 7960)
      • Unicorn-9511.exe (PID: 8032)
      • Unicorn-10523.exe (PID: 7980)
      • Unicorn-12006.exe (PID: 7968)
      • Unicorn-53305.exe (PID: 8080)
      • Unicorn-4659.exe (PID: 8104)
      • Unicorn-12080.exe (PID: 8116)
      • Unicorn-26305.exe (PID: 7992)
      • Unicorn-38623.exe (PID: 8140)
      • Unicorn-4680.exe (PID: 8184)
      • Unicorn-57965.exe (PID: 6872)
      • Unicorn-29377.exe (PID: 8176)
      • Unicorn-331.exe (PID: 7264)
      • Unicorn-29739.exe (PID: 6436)
      • Unicorn-596.exe (PID: 6028)
      • Unicorn-46268.exe (PID: 5408)
      • Unicorn-16170.exe (PID: 904)
      • Unicorn-37353.exe (PID: 4652)
      • Unicorn-5235.exe (PID: 5528)
      • Unicorn-18970.exe (PID: 1764)
      • Unicorn-21622.exe (PID: 2600)
      • Unicorn-61172.exe (PID: 920)
      • Unicorn-31431.exe (PID: 2136)
      • Unicorn-2096.exe (PID: 5416)
      • Unicorn-27753.exe (PID: 6324)
      • Unicorn-54997.exe (PID: 5772)
      • Unicorn-35921.exe (PID: 1324)
      • Unicorn-19319.exe (PID: 960)
      • Unicorn-19755.exe (PID: 4880)
      • Unicorn-103.exe (PID: 7300)
      • Unicorn-44665.exe (PID: 672)
      • Unicorn-32029.exe (PID: 7480)
      • Unicorn-37457.exe (PID: 6048)
      • Unicorn-53004.exe (PID: 664)
      • Unicorn-42095.exe (PID: 7596)
      • Unicorn-41711.exe (PID: 5384)
      • Unicorn-4400.exe (PID: 7520)
      • Unicorn-12760.exe (PID: 7336)
      • Unicorn-12660.exe (PID: 7288)
      • Unicorn-4400.exe (PID: 7676)
      • Unicorn-12760.exe (PID: 7268)
      • Unicorn-4400.exe (PID: 7176)
      • Unicorn-30057.exe (PID: 5260)
      • Unicorn-4400.exe (PID: 7668)
      • Unicorn-49880.exe (PID: 6512)
      • Unicorn-4400.exe (PID: 7576)
      • Unicorn-23859.exe (PID: 6676)
      • Unicorn-61312.exe (PID: 5968)
      • Unicorn-52647.exe (PID: 7708)
      • Unicorn-42309.exe (PID: 1012)
      • Unicorn-45433.exe (PID: 7684)
      • Unicorn-38779.exe (PID: 7764)
      • Unicorn-55447.exe (PID: 1128)
      • Unicorn-48431.exe (PID: 1240)
      • Unicorn-30633.exe (PID: 5328)
      • Unicorn-18189.exe (PID: 7892)
      • Unicorn-42885.exe (PID: 1280)
      • Unicorn-63305.exe (PID: 5084)
      • Unicorn-44923.exe (PID: 1348)
      • Unicorn-50788.exe (PID: 5304)
      • Unicorn-18381.exe (PID: 4608)
      • Unicorn-24118.exe (PID: 7724)
      • Unicorn-31187.exe (PID: 5072)
      • Unicorn-62351.exe (PID: 2644)
      • Unicorn-42693.exe (PID: 7444)
      • Unicorn-46777.exe (PID: 7376)
      • Unicorn-64265.exe (PID: 8216)
      • Unicorn-59989.exe (PID: 8232)
      • Unicorn-51364.exe (PID: 8252)
      • Unicorn-51416.exe (PID: 4228)
      • Unicorn-55713.exe (PID: 8272)
      • Unicorn-24711.exe (PID: 8368)
      • Unicorn-190.exe (PID: 8324)
      • Unicorn-33093.exe (PID: 8464)
      • Unicorn-60721.exe (PID: 8388)
      • Unicorn-17450.exe (PID: 8416)
      • Unicorn-59251.exe (PID: 8576)
      • Unicorn-37945.exe (PID: 8656)
      • Unicorn-31622.exe (PID: 8664)
      • Unicorn-4867.exe (PID: 8496)
      • Unicorn-10892.exe (PID: 8804)
      • Unicorn-62641.exe (PID: 8768)
      • Unicorn-27783.exe (PID: 8832)
      • Unicorn-63601.exe (PID: 8880)
      • Unicorn-56180.exe (PID: 8860)
      • Unicorn-38905.exe (PID: 8944)
      • Unicorn-30737.exe (PID: 8920)
      • Unicorn-22569.exe (PID: 8900)
      • Unicorn-62707.exe (PID: 8972)
      • Unicorn-48417.exe (PID: 9004)
      • Unicorn-3108.exe (PID: 9052)
      • Unicorn-32635.exe (PID: 8988)
      • Unicorn-23529.exe (PID: 9088)
      • Unicorn-36335.exe (PID: 9116)
      • Unicorn-64369.exe (PID: 9132)
      • Unicorn-52236.exe (PID: 8996)
      • Unicorn-64561.exe (PID: 9064)
      • Unicorn-40227.exe (PID: 9176)
      • Unicorn-7000.exe (PID: 9160)
      • Unicorn-31697.exe (PID: 9100)
      • Unicorn-4068.exe (PID: 8208)
      • Unicorn-14466.exe (PID: 3676)
      • Unicorn-8344.exe (PID: 4008)
      • Unicorn-23719.exe (PID: 8312)
      • Unicorn-28381.exe (PID: 8412)
      • Unicorn-11474.exe (PID: 2852)
      • Unicorn-3836.exe (PID: 3332)
      • Unicorn-17067.exe (PID: 4944)
      • Unicorn-61053.exe (PID: 8632)
      • Unicorn-57716.exe (PID: 8332)
      • Unicorn-3227.exe (PID: 8456)
      • Unicorn-14082.exe (PID: 7392)
      • Unicorn-36092.exe (PID: 8492)
      • Unicorn-12599.exe (PID: 8336)
      • Unicorn-57545.exe (PID: 9348)
      • Unicorn-33595.exe (PID: 9384)
      • Unicorn-4452.exe (PID: 9308)
      • Unicorn-20789.exe (PID: 9336)
      • Unicorn-41544.exe (PID: 9400)
      • Unicorn-4260.exe (PID: 9356)
      • Unicorn-12955.exe (PID: 9428)
      • Unicorn-28957.exe (PID: 9328)
      • Unicorn-25762.exe (PID: 9508)

    • Executable content was dropped or overwritten

      • 1 (123).exe (PID: 4812)
      • Unicorn-27021.exe (PID: 6424)
      • Unicorn-50108.exe (PID: 7360)
      • Unicorn-8520.exe (PID: 7340)
      • Unicorn-10632.exe (PID: 7812)
      • Unicorn-34814.exe (PID: 7832)
      • Unicorn-47389.exe (PID: 7844)
      • Unicorn-45343.exe (PID: 7864)
      • Unicorn-2547.exe (PID: 7936)
      • Unicorn-12006.exe (PID: 7968)
      • Unicorn-61909.exe (PID: 7916)
      • Unicorn-46725.exe (PID: 7960)
      • Unicorn-65199.exe (PID: 7952)
      • Unicorn-26305.exe (PID: 7992)
      • Unicorn-9511.exe (PID: 8032)
      • Unicorn-53305.exe (PID: 8080)
      • Unicorn-4659.exe (PID: 8104)
      • Unicorn-12080.exe (PID: 8116)
      • Unicorn-29377.exe (PID: 8176)
      • Unicorn-38623.exe (PID: 8140)
      • Unicorn-4680.exe (PID: 8184)
      • Unicorn-57965.exe (PID: 6872)
      • Unicorn-596.exe (PID: 6028)
      • Unicorn-331.exe (PID: 7264)
      • Unicorn-18970.exe (PID: 1764)
      • Unicorn-31431.exe (PID: 2136)
      • Unicorn-2096.exe (PID: 5416)
      • Unicorn-10523.exe (PID: 7980)
      • Unicorn-21622.exe (PID: 2600)
      • Unicorn-61172.exe (PID: 920)
      • Unicorn-54997.exe (PID: 5772)
      • Unicorn-27753.exe (PID: 6324)
      • Unicorn-35921.exe (PID: 1324)
      • Unicorn-19319.exe (PID: 960)
      • Unicorn-19755.exe (PID: 4880)
      • Unicorn-103.exe (PID: 7300)
      • Unicorn-44665.exe (PID: 672)
      • Unicorn-32029.exe (PID: 7480)
      • Unicorn-53004.exe (PID: 664)
      • Unicorn-37457.exe (PID: 6048)
      • Unicorn-4400.exe (PID: 7520)
      • Unicorn-42095.exe (PID: 7596)
      • Unicorn-12760.exe (PID: 7336)
      • Unicorn-5235.exe (PID: 5528)
      • Unicorn-29739.exe (PID: 6436)
      • Unicorn-41711.exe (PID: 5384)
      • Unicorn-12660.exe (PID: 7288)
      • Unicorn-4400.exe (PID: 7676)
      • Unicorn-12760.exe (PID: 7268)
      • Unicorn-16170.exe (PID: 904)
      • Unicorn-4400.exe (PID: 7176)
      • Unicorn-4400.exe (PID: 7576)
      • Unicorn-30057.exe (PID: 5260)
      • Unicorn-49880.exe (PID: 6512)
      • Unicorn-46268.exe (PID: 5408)
      • Unicorn-52647.exe (PID: 7708)
      • Unicorn-4400.exe (PID: 7668)
      • Unicorn-23859.exe (PID: 6676)
      • Unicorn-61312.exe (PID: 5968)
      • Unicorn-37353.exe (PID: 4652)
      • Unicorn-45433.exe (PID: 7684)
      • Unicorn-38779.exe (PID: 7764)
      • Unicorn-42309.exe (PID: 1012)
      • Unicorn-63305.exe (PID: 5084)
      • Unicorn-48431.exe (PID: 1240)
      • Unicorn-55447.exe (PID: 1128)
      • Unicorn-30633.exe (PID: 5328)
      • Unicorn-18189.exe (PID: 7892)
      • Unicorn-42885.exe (PID: 1280)
      • Unicorn-44923.exe (PID: 1348)
      • Unicorn-50788.exe (PID: 5304)
      • Unicorn-62351.exe (PID: 2644)
      • Unicorn-18381.exe (PID: 4608)
      • Unicorn-24118.exe (PID: 7724)
      • Unicorn-31187.exe (PID: 5072)
      • Unicorn-46777.exe (PID: 7376)
      • Unicorn-42693.exe (PID: 7444)
      • Unicorn-51416.exe (PID: 4228)
      • Unicorn-59989.exe (PID: 8232)
      • Unicorn-51364.exe (PID: 8252)
      • Unicorn-190.exe (PID: 8324)
      • Unicorn-64265.exe (PID: 8216)
      • Unicorn-55713.exe (PID: 8272)
      • Unicorn-60721.exe (PID: 8388)
      • Unicorn-24711.exe (PID: 8368)
      • Unicorn-17450.exe (PID: 8416)
      • Unicorn-33093.exe (PID: 8464)
      • Unicorn-37945.exe (PID: 8656)
      • Unicorn-31622.exe (PID: 8664)
      • Unicorn-4867.exe (PID: 8496)
      • Unicorn-59251.exe (PID: 8576)
      • Unicorn-62641.exe (PID: 8768)
      • Unicorn-10892.exe (PID: 8804)
      • Unicorn-27783.exe (PID: 8832)
      • Unicorn-56180.exe (PID: 8860)
      • Unicorn-63601.exe (PID: 8880)
      • Unicorn-30737.exe (PID: 8920)
      • Unicorn-22569.exe (PID: 8900)
      • Unicorn-38905.exe (PID: 8944)
      • Unicorn-62707.exe (PID: 8972)
      • Unicorn-48417.exe (PID: 9004)
      • Unicorn-32635.exe (PID: 8988)
      • Unicorn-40611.exe (PID: 9040)
      • Unicorn-36335.exe (PID: 9116)
      • Unicorn-3108.exe (PID: 9052)
      • Unicorn-52236.exe (PID: 8996)
      • Unicorn-64561.exe (PID: 9064)
      • Unicorn-31697.exe (PID: 9100)
      • Unicorn-40227.exe (PID: 9176)
      • Unicorn-7000.exe (PID: 9160)
      • Unicorn-40227.exe (PID: 9184)
      • Unicorn-4068.exe (PID: 8208)
      • Unicorn-14466.exe (PID: 3676)
      • Unicorn-23719.exe (PID: 8312)
      • Unicorn-8344.exe (PID: 4008)
      • Unicorn-28381.exe (PID: 8412)
      • Unicorn-17067.exe (PID: 4944)
      • Unicorn-11474.exe (PID: 2852)
      • Unicorn-3836.exe (PID: 3332)
      • Unicorn-61053.exe (PID: 8632)
      • Unicorn-36092.exe (PID: 8492)
      • Unicorn-12599.exe (PID: 8336)
      • Unicorn-57716.exe (PID: 8332)
      • Unicorn-3227.exe (PID: 8456)
      • Unicorn-14082.exe (PID: 7392)
      • Unicorn-20789.exe (PID: 9336)
      • Unicorn-57545.exe (PID: 9348)
      • Unicorn-33595.exe (PID: 9384)
      • Unicorn-4452.exe (PID: 9308)
      • Unicorn-41544.exe (PID: 9400)
      • Unicorn-4260.exe (PID: 9356)
      • Unicorn-12955.exe (PID: 9428)
      • Unicorn-28957.exe (PID: 9328)
      • Unicorn-25762.exe (PID: 9508)
      • Unicorn-38014.exe (PID: 9452)
      • Unicorn-65399.exe (PID: 9624)
      • Unicorn-18794.exe (PID: 9568)
      • Unicorn-21486.exe (PID: 9472)
      • Unicorn-15701.exe (PID: 9676)
      • Unicorn-41352.exe (PID: 9484)
      • Unicorn-36884.exe (PID: 9636)
      • Unicorn-61964.exe (PID: 9440)
      • Unicorn-64703.exe (PID: 9668)
      • Unicorn-17616.exe (PID: 9744)
      • Unicorn-1087.exe (PID: 9768)
      • Unicorn-34506.exe (PID: 9776)
      • Unicorn-15168.exe (PID: 9168)
      • Unicorn-50843.exe (PID: 9752)
      • Unicorn-59416.exe (PID: 9904)
      • Unicorn-17542.exe (PID: 9712)
      • Unicorn-7401.exe (PID: 9736)
      • Unicorn-51056.exe (PID: 9936)
      • Unicorn-22084.exe (PID: 10008)
      • Unicorn-39166.exe (PID: 9968)
      • Unicorn-45826.exe (PID: 10028)
      • Unicorn-19706.exe (PID: 10052)
      • Unicorn-46780.exe (PID: 9976)
      • Unicorn-18886.exe (PID: 10076)
      • Unicorn-32364.exe (PID: 10120)
      • Unicorn-60110.exe (PID: 9884)
      • Unicorn-1258.exe (PID: 9420)
      • Unicorn-61699.exe (PID: 10140)
      • Unicorn-35104.exe (PID: 10096)
      • Unicorn-23529.exe (PID: 9088)
      • Unicorn-64369.exe (PID: 9132)
      • Unicorn-29741.exe (PID: 10168)
      • Unicorn-24772.exe (PID: 10228)
      • Unicorn-55088.exe (PID: 9944)
      • Unicorn-57615.exe (PID: 6584)
      • Unicorn-843.exe (PID: 9704)
      • Unicorn-23109.exe (PID: 9256)
      • Unicorn-53936.exe (PID: 9608)
      • Unicorn-48679.exe (PID: 10188)
      • Unicorn-12519.exe (PID: 10212)
      • Unicorn-61071.exe (PID: 9224)
      • Unicorn-54823.exe (PID: 10016)
      • Unicorn-1227.exe (PID: 1748)
      • Unicorn-55555.exe (PID: 924)
      • Unicorn-319.exe (PID: 9524)
      • Unicorn-18310.exe (PID: 7408)

    • Executes application which crashes

      • Unicorn-29377.exe (PID: 8176)
      • Unicorn-49185.exe (PID: 8304)
      • Unicorn-44665.exe (PID: 672)
      • Unicorn-64265.exe (PID: 8216)

  • INFO

    • Checks supported languages

      • 1 (123).exe (PID: 4812)
      • Unicorn-8520.exe (PID: 7340)
      • Unicorn-27021.exe (PID: 6424)
      • Unicorn-10632.exe (PID: 7812)
      • Unicorn-34814.exe (PID: 7832)
      • Unicorn-61909.exe (PID: 7916)
      • Unicorn-2547.exe (PID: 7936)
      • Unicorn-50108.exe (PID: 7360)
      • Unicorn-46725.exe (PID: 7960)
      • Unicorn-12006.exe (PID: 7968)
      • Unicorn-9511.exe (PID: 8032)
      • Unicorn-10523.exe (PID: 7980)
      • Unicorn-26305.exe (PID: 7992)
      • Unicorn-12080.exe (PID: 8116)
      • Unicorn-53305.exe (PID: 8080)
      • Unicorn-4659.exe (PID: 8104)
      • Unicorn-29377.exe (PID: 8176)
      • Unicorn-4680.exe (PID: 8184)
      • Unicorn-57965.exe (PID: 6872)
      • Unicorn-18970.exe (PID: 1764)
      • Unicorn-5235.exe (PID: 5528)
      • Unicorn-46268.exe (PID: 5408)
      • Unicorn-29739.exe (PID: 6436)
      • Unicorn-37353.exe (PID: 4652)
      • Unicorn-2096.exe (PID: 5416)
      • Unicorn-31431.exe (PID: 2136)
      • Unicorn-54997.exe (PID: 5772)
      • Unicorn-61172.exe (PID: 920)
      • Unicorn-35921.exe (PID: 1324)
      • Unicorn-19319.exe (PID: 960)
      • Unicorn-21622.exe (PID: 2600)
      • Unicorn-103.exe (PID: 7300)
      • Unicorn-32029.exe (PID: 7480)
      • Unicorn-53004.exe (PID: 664)
      • Unicorn-44665.exe (PID: 672)
      • Unicorn-12760.exe (PID: 7336)
      • Unicorn-42095.exe (PID: 7596)
      • Unicorn-4400.exe (PID: 7520)
      • Unicorn-45433.exe (PID: 7684)
      • Unicorn-12660.exe (PID: 7288)
      • Unicorn-4400.exe (PID: 7676)
      • Unicorn-52647.exe (PID: 7708)
      • Unicorn-4400.exe (PID: 7576)
      • Unicorn-41711.exe (PID: 5384)
      • Unicorn-61312.exe (PID: 5968)
      • Unicorn-55447.exe (PID: 1128)
      • Unicorn-49880.exe (PID: 6512)
      • Unicorn-42309.exe (PID: 1012)
      • Unicorn-48431.exe (PID: 1240)
      • Unicorn-38779.exe (PID: 7764)
      • Unicorn-18381.exe (PID: 4608)
      • Unicorn-63305.exe (PID: 5084)
      • Unicorn-42885.exe (PID: 1280)
      • Unicorn-30633.exe (PID: 5328)
      • Unicorn-31187.exe (PID: 5072)
      • Unicorn-44923.exe (PID: 1348)
      • Unicorn-50788.exe (PID: 5304)
      • Unicorn-18189.exe (PID: 7892)
      • Unicorn-62351.exe (PID: 2644)
      • Unicorn-51416.exe (PID: 4228)
      • Unicorn-46777.exe (PID: 7376)
      • Unicorn-64265.exe (PID: 8216)
      • Unicorn-24711.exe (PID: 8368)
      • Unicorn-59989.exe (PID: 8232)
      • Unicorn-51364.exe (PID: 8252)
      • Unicorn-55713.exe (PID: 8272)
      • Unicorn-190.exe (PID: 8324)
      • Unicorn-33093.exe (PID: 8464)
      • Unicorn-4867.exe (PID: 8496)
      • Unicorn-59251.exe (PID: 8576)
      • Unicorn-60721.exe (PID: 8388)
      • Unicorn-17450.exe (PID: 8416)
      • Unicorn-37945.exe (PID: 8656)
      • Unicorn-10892.exe (PID: 8804)
      • Unicorn-56180.exe (PID: 8860)
      • Unicorn-27783.exe (PID: 8832)
      • Unicorn-22569.exe (PID: 8900)
      • Unicorn-30737.exe (PID: 8920)
      • Unicorn-38905.exe (PID: 8944)
      • Unicorn-62707.exe (PID: 8972)
      • Unicorn-48417.exe (PID: 9004)
      • Unicorn-32635.exe (PID: 8988)
      • Unicorn-40611.exe (PID: 9040)
      • Unicorn-3108.exe (PID: 9052)
      • Unicorn-64561.exe (PID: 9064)
      • Unicorn-23529.exe (PID: 9088)
      • Unicorn-7000.exe (PID: 9160)
      • Unicorn-15168.exe (PID: 9168)
      • Unicorn-36335.exe (PID: 9116)
      • Unicorn-64369.exe (PID: 9132)
      • Unicorn-17067.exe (PID: 4944)
      • Unicorn-4068.exe (PID: 8208)
      • Unicorn-14466.exe (PID: 3676)
      • Unicorn-23719.exe (PID: 8312)
      • Unicorn-49185.exe (PID: 8304)
      • Unicorn-28381.exe (PID: 8412)
      • Unicorn-12599.exe (PID: 8336)
      • Unicorn-57716.exe (PID: 8332)
      • Unicorn-61053.exe (PID: 8632)
      • Unicorn-3227.exe (PID: 8456)
      • Unicorn-3836.exe (PID: 3332)
      • Unicorn-4452.exe (PID: 9308)
      • Unicorn-57545.exe (PID: 9348)
      • Unicorn-33595.exe (PID: 9384)
      • Unicorn-41544.exe (PID: 9400)
      • Unicorn-41352.exe (PID: 9484)
      • Unicorn-38014.exe (PID: 9452)
      • Unicorn-12955.exe (PID: 9428)
      • Unicorn-61964.exe (PID: 9440)
      • Unicorn-25762.exe (PID: 9508)
      • Unicorn-1258.exe (PID: 9420)
      • Unicorn-18794.exe (PID: 9568)
      • Unicorn-64703.exe (PID: 9668)
      • Unicorn-65399.exe (PID: 9624)
      • Unicorn-15701.exe (PID: 9676)
      • Unicorn-17542.exe (PID: 9712)
      • Unicorn-21486.exe (PID: 9472)
      • Unicorn-319.exe (PID: 9524)
      • Unicorn-7401.exe (PID: 9736)
      • Unicorn-50843.exe (PID: 9752)
      • Unicorn-34506.exe (PID: 9776)
      • Unicorn-60110.exe (PID: 9884)
      • Unicorn-46780.exe (PID: 9976)
      • Unicorn-22084.exe (PID: 10008)
      • Unicorn-19706.exe (PID: 10052)
      • Unicorn-18886.exe (PID: 10076)
      • Unicorn-35104.exe (PID: 10096)
      • Unicorn-39166.exe (PID: 9968)
      • Unicorn-61699.exe (PID: 10140)
      • Unicorn-48679.exe (PID: 10188)
      • Unicorn-29741.exe (PID: 10168)
      • Unicorn-12519.exe (PID: 10212)
      • Unicorn-24772.exe (PID: 10228)
      • Unicorn-61071.exe (PID: 9224)
      • Unicorn-57615.exe (PID: 6584)
      • Unicorn-54823.exe (PID: 10016)
      • Unicorn-53936.exe (PID: 9608)
      • Unicorn-23109.exe (PID: 9256)
      • Unicorn-55088.exe (PID: 9944)
      • Unicorn-18310.exe (PID: 7408)
      • Unicorn-55555.exe (PID: 924)
      • Unicorn-20194.exe (PID: 10304)
      • Unicorn-56951.exe (PID: 10336)
      • Unicorn-25238.exe (PID: 10508)
      • Unicorn-59394.exe (PID: 10464)
      • Unicorn-1227.exe (PID: 1748)
      • Unicorn-158.exe (PID: 10684)
      • Unicorn-46566.exe (PID: 10740)
      • Unicorn-13754.exe (PID: 10760)
      • Unicorn-54787.exe (PID: 10804)
      • Unicorn-39742.exe (PID: 10848)
      • Unicorn-5394.exe (PID: 10868)
      • Unicorn-57911.exe (PID: 10556)
      • Unicorn-32011.exe (PID: 10660)
      • Unicorn-13754.exe (PID: 10768)
      • Unicorn-63862.exe (PID: 10984)
      • Unicorn-45488.exe (PID: 11032)
      • Unicorn-17262.exe (PID: 11044)
      • Unicorn-8307.exe (PID: 11068)
      • Unicorn-29898.exe (PID: 10912)
      • Unicorn-39550.exe (PID: 10944)
      • Unicorn-31701.exe (PID: 11152)
      • Unicorn-56846.exe (PID: 11196)
      • Unicorn-56846.exe (PID: 11188)
      • Unicorn-4845.exe (PID: 3968)
      • Unicorn-21752.exe (PID: 2108)
      • Unicorn-35326.exe (PID: 11400)
      • Unicorn-18990.exe (PID: 11328)
      • Unicorn-18990.exe (PID: 11336)
      • Unicorn-38856.exe (PID: 11344)
      • Unicorn-12305.exe (PID: 11356)
      • Unicorn-19182.exe (PID: 11284)
      • Unicorn-16197.exe (PID: 11436)
      • Unicorn-32533.exe (PID: 11444)
      • Unicorn-38664.exe (PID: 11452)
      • Unicorn-52954.exe (PID: 11460)
      • Unicorn-27756.exe (PID: 11480)
      • Unicorn-59831.exe (PID: 11472)
      • Unicorn-27756.exe (PID: 11488)
      • Unicorn-23480.exe (PID: 11572)
      • Unicorn-11782.exe (PID: 11564)
      • Unicorn-27158.exe (PID: 11532)
      • Unicorn-65389.exe (PID: 11636)
      • Unicorn-43668.exe (PID: 11620)
      • Unicorn-19204.exe (PID: 11676)
      • Unicorn-49062.exe (PID: 11416)
      • Unicorn-19396.exe (PID: 11588)
      • Unicorn-26602.exe (PID: 11616)
      • Unicorn-61175.exe (PID: 11508)
      • Unicorn-39624.exe (PID: 11660)
      • Unicorn-28524.exe (PID: 11844)
      • Unicorn-19012.exe (PID: 11816)
      • Unicorn-15888.exe (PID: 12048)
      • Unicorn-27875.exe (PID: 12024)
      • Unicorn-61367.exe (PID: 12076)
      • Unicorn-44284.exe (PID: 12100)
      • Unicorn-31818.exe (PID: 11784)
      • Unicorn-43251.exe (PID: 11804)
      • Unicorn-22393.exe (PID: 11824)
      • Unicorn-61736.exe (PID: 12232)
      • Unicorn-33894.exe (PID: 12128)
      • Unicorn-52607.exe (PID: 6808)
      • Unicorn-28680.exe (PID: 11740)
      • Unicorn-15533.exe (PID: 11136)
      • Unicorn-62312.exe (PID: 12308)
      • Unicorn-12535.exe (PID: 2800)
      • Unicorn-41892.exe (PID: 12332)
      • Unicorn-25364.exe (PID: 12352)
      • Unicorn-17698.exe (PID: 12468)
      • Unicorn-31346.exe (PID: 12452)
      • Unicorn-49550.exe (PID: 12608)
      • Unicorn-4294.exe (PID: 12640)
      • Unicorn-36774.exe (PID: 12692)
      • Unicorn-23511.exe (PID: 12712)
      • Unicorn-61034.exe (PID: 12476)
      • Unicorn-22432.exe (PID: 12460)
      • Unicorn-45082.exe (PID: 12436)
      • Unicorn-63470.exe (PID: 12576)
      • Unicorn-47194.exe (PID: 12816)
      • Unicorn-11337.exe (PID: 12908)
      • Unicorn-65450.exe (PID: 13056)
      • Unicorn-18213.exe (PID: 13008)
      • Unicorn-59639.exe (PID: 11168)

    • Reads the computer name

      • 1 (123).exe (PID: 4812)
      • Unicorn-27021.exe (PID: 6424)
      • Unicorn-50108.exe (PID: 7360)
      • Unicorn-8520.exe (PID: 7340)
      • Unicorn-10632.exe (PID: 7812)
      • Unicorn-47389.exe (PID: 7844)
      • Unicorn-61909.exe (PID: 7916)
      • Unicorn-34814.exe (PID: 7832)
      • Unicorn-45343.exe (PID: 7864)
      • Unicorn-2547.exe (PID: 7936)
      • Unicorn-12006.exe (PID: 7968)
      • Unicorn-46725.exe (PID: 7960)
      • Unicorn-53305.exe (PID: 8080)
      • Unicorn-12080.exe (PID: 8116)
      • Unicorn-4659.exe (PID: 8104)
      • Unicorn-38623.exe (PID: 8140)
      • Unicorn-10523.exe (PID: 7980)
      • Unicorn-26305.exe (PID: 7992)
      • Unicorn-9511.exe (PID: 8032)
      • Unicorn-29377.exe (PID: 8176)
      • Unicorn-331.exe (PID: 7264)
      • Unicorn-5235.exe (PID: 5528)
      • Unicorn-37353.exe (PID: 4652)
      • Unicorn-18970.exe (PID: 1764)
      • Unicorn-16170.exe (PID: 904)
      • Unicorn-61172.exe (PID: 920)
      • Unicorn-21622.exe (PID: 2600)
      • Unicorn-27753.exe (PID: 6324)
      • Unicorn-2096.exe (PID: 5416)
      • Unicorn-35921.exe (PID: 1324)
      • Unicorn-19755.exe (PID: 4880)
      • Unicorn-19319.exe (PID: 960)
      • Unicorn-44665.exe (PID: 672)
      • Unicorn-42095.exe (PID: 7596)
      • Unicorn-12760.exe (PID: 7336)
      • Unicorn-41711.exe (PID: 5384)
      • Unicorn-4400.exe (PID: 7676)
      • Unicorn-4400.exe (PID: 7520)
      • Unicorn-12660.exe (PID: 7288)
      • Unicorn-4400.exe (PID: 7668)
      • Unicorn-52647.exe (PID: 7708)
      • Unicorn-48431.exe (PID: 1240)
      • Unicorn-23859.exe (PID: 6676)
      • Unicorn-45433.exe (PID: 7684)
      • Unicorn-38779.exe (PID: 7764)
      • Unicorn-55447.exe (PID: 1128)
      • Unicorn-12760.exe (PID: 7268)
      • Unicorn-4400.exe (PID: 7176)
      • Unicorn-49880.exe (PID: 6512)
      • Unicorn-63305.exe (PID: 5084)
      • Unicorn-30633.exe (PID: 5328)
      • Unicorn-42885.exe (PID: 1280)
      • Unicorn-50788.exe (PID: 5304)
      • Unicorn-62351.exe (PID: 2644)
      • Unicorn-31187.exe (PID: 5072)
      • Unicorn-42693.exe (PID: 7444)
      • Unicorn-64265.exe (PID: 8216)
      • Unicorn-59989.exe (PID: 8232)
      • Unicorn-190.exe (PID: 8324)
      • Unicorn-55713.exe (PID: 8272)
      • Unicorn-60721.exe (PID: 8388)
      • Unicorn-4867.exe (PID: 8496)
      • Unicorn-37945.exe (PID: 8656)
      • Unicorn-38905.exe (PID: 8944)
      • Unicorn-56180.exe (PID: 8860)
      • Unicorn-48417.exe (PID: 9004)
      • Unicorn-62707.exe (PID: 8972)
      • Unicorn-32635.exe (PID: 8988)
      • Unicorn-64369.exe (PID: 9132)
      • Unicorn-31697.exe (PID: 9100)
      • Unicorn-14466.exe (PID: 3676)
      • Unicorn-28381.exe (PID: 8412)
      • Unicorn-11474.exe (PID: 2852)
      • Unicorn-3836.exe (PID: 3332)
      • Unicorn-36092.exe (PID: 8492)
      • Unicorn-33595.exe (PID: 9384)
      • Unicorn-4452.exe (PID: 9308)
      • Unicorn-41544.exe (PID: 9400)
      • Unicorn-61964.exe (PID: 9440)
      • Unicorn-65399.exe (PID: 9624)
      • Unicorn-38014.exe (PID: 9452)
      • Unicorn-25762.exe (PID: 9508)
      • Unicorn-21486.exe (PID: 9472)
      • Unicorn-15701.exe (PID: 9676)
      • Unicorn-319.exe (PID: 9524)

    • Create files in a temporary directory

      • 1 (123).exe (PID: 4812)
      • Unicorn-8520.exe (PID: 7340)
      • Unicorn-27021.exe (PID: 6424)
      • Unicorn-47389.exe (PID: 7844)
      • Unicorn-50108.exe (PID: 7360)
      • Unicorn-10632.exe (PID: 7812)
      • Unicorn-61909.exe (PID: 7916)
      • Unicorn-46725.exe (PID: 7960)
      • Unicorn-34814.exe (PID: 7832)
      • Unicorn-4659.exe (PID: 8104)
      • Unicorn-12080.exe (PID: 8116)
      • Unicorn-26305.exe (PID: 7992)
      • Unicorn-29377.exe (PID: 8176)
      • Unicorn-38623.exe (PID: 8140)
      • Unicorn-4680.exe (PID: 8184)
      • Unicorn-57965.exe (PID: 6872)
      • Unicorn-65199.exe (PID: 7952)
      • Unicorn-331.exe (PID: 7264)
      • Unicorn-596.exe (PID: 6028)
      • Unicorn-18970.exe (PID: 1764)
      • Unicorn-2096.exe (PID: 5416)
      • Unicorn-10523.exe (PID: 7980)
      • Unicorn-31431.exe (PID: 2136)
      • Unicorn-61172.exe (PID: 920)
      • Unicorn-53305.exe (PID: 8080)
      • Unicorn-27753.exe (PID: 6324)
      • Unicorn-54997.exe (PID: 5772)
      • Unicorn-35921.exe (PID: 1324)
      • Unicorn-19319.exe (PID: 960)
      • Unicorn-19755.exe (PID: 4880)
      • Unicorn-44665.exe (PID: 672)
      • Unicorn-103.exe (PID: 7300)
      • Unicorn-32029.exe (PID: 7480)
      • Unicorn-45343.exe (PID: 7864)
      • Unicorn-12006.exe (PID: 7968)
      • Unicorn-53004.exe (PID: 664)
      • Unicorn-37457.exe (PID: 6048)
      • Unicorn-4400.exe (PID: 7520)
      • Unicorn-42095.exe (PID: 7596)
      • Unicorn-41711.exe (PID: 5384)
      • Unicorn-12660.exe (PID: 7288)
      • Unicorn-12760.exe (PID: 7336)
      • Unicorn-4400.exe (PID: 7676)
      • Unicorn-12760.exe (PID: 7268)
      • Unicorn-16170.exe (PID: 904)
      • Unicorn-4400.exe (PID: 7176)
      • Unicorn-30057.exe (PID: 5260)
      • Unicorn-4400.exe (PID: 7576)
      • Unicorn-4400.exe (PID: 7668)
      • Unicorn-23859.exe (PID: 6676)
      • Unicorn-37353.exe (PID: 4652)
      • Unicorn-38779.exe (PID: 7764)
      • Unicorn-42309.exe (PID: 1012)
      • Unicorn-45433.exe (PID: 7684)
      • Unicorn-48431.exe (PID: 1240)
      • Unicorn-18189.exe (PID: 7892)
      • Unicorn-42885.exe (PID: 1280)
      • Unicorn-18381.exe (PID: 4608)
      • Unicorn-44923.exe (PID: 1348)
      • Unicorn-21622.exe (PID: 2600)
      • Unicorn-50788.exe (PID: 5304)
      • Unicorn-62351.exe (PID: 2644)
      • Unicorn-31187.exe (PID: 5072)
      • Unicorn-2547.exe (PID: 7936)
      • Unicorn-51416.exe (PID: 4228)
      • Unicorn-59989.exe (PID: 8232)
      • Unicorn-190.exe (PID: 8324)
      • Unicorn-24711.exe (PID: 8368)
      • Unicorn-60721.exe (PID: 8388)
      • Unicorn-55713.exe (PID: 8272)
      • Unicorn-17450.exe (PID: 8416)
      • Unicorn-33093.exe (PID: 8464)
      • Unicorn-4867.exe (PID: 8496)
      • Unicorn-59251.exe (PID: 8576)
      • Unicorn-37945.exe (PID: 8656)
      • Unicorn-62641.exe (PID: 8768)
      • Unicorn-5235.exe (PID: 5528)
      • Unicorn-29739.exe (PID: 6436)
      • Unicorn-46268.exe (PID: 5408)
      • Unicorn-49880.exe (PID: 6512)
      • Unicorn-52647.exe (PID: 7708)
      • Unicorn-61312.exe (PID: 5968)
      • Unicorn-9511.exe (PID: 8032)
      • Unicorn-56180.exe (PID: 8860)
      • Unicorn-38905.exe (PID: 8944)
      • Unicorn-30737.exe (PID: 8920)
      • Unicorn-55447.exe (PID: 1128)
      • Unicorn-24118.exe (PID: 7724)
      • Unicorn-63305.exe (PID: 5084)
      • Unicorn-30633.exe (PID: 5328)
      • Unicorn-62707.exe (PID: 8972)
      • Unicorn-46777.exe (PID: 7376)
      • Unicorn-42693.exe (PID: 7444)
      • Unicorn-40611.exe (PID: 9040)
      • Unicorn-64561.exe (PID: 9064)
      • Unicorn-51364.exe (PID: 8252)
      • Unicorn-28381.exe (PID: 8412)
      • Unicorn-17067.exe (PID: 4944)
      • Unicorn-3836.exe (PID: 3332)
      • Unicorn-12599.exe (PID: 8336)
      • Unicorn-20789.exe (PID: 9336)
      • Unicorn-4452.exe (PID: 9308)

    • The sample compiled with chinese language support

      • Unicorn-10632.exe (PID: 7812)
      • Unicorn-8520.exe (PID: 7340)
      • Unicorn-34814.exe (PID: 7832)
      • Unicorn-47389.exe (PID: 7844)
      • 1 (123).exe (PID: 4812)
      • Unicorn-27021.exe (PID: 6424)
      • Unicorn-50108.exe (PID: 7360)
      • Unicorn-45343.exe (PID: 7864)
      • Unicorn-61909.exe (PID: 7916)
      • Unicorn-12006.exe (PID: 7968)
      • Unicorn-2547.exe (PID: 7936)
      • Unicorn-65199.exe (PID: 7952)
      • Unicorn-9511.exe (PID: 8032)
      • Unicorn-46725.exe (PID: 7960)
      • Unicorn-26305.exe (PID: 7992)
      • Unicorn-53305.exe (PID: 8080)
      • Unicorn-4659.exe (PID: 8104)
      • Unicorn-12080.exe (PID: 8116)
      • Unicorn-38623.exe (PID: 8140)
      • Unicorn-57965.exe (PID: 6872)
      • Unicorn-4680.exe (PID: 8184)
      • Unicorn-29377.exe (PID: 8176)
      • Unicorn-331.exe (PID: 7264)
      • Unicorn-596.exe (PID: 6028)
      • Unicorn-18970.exe (PID: 1764)
      • Unicorn-31431.exe (PID: 2136)
      • Unicorn-2096.exe (PID: 5416)
      • Unicorn-10523.exe (PID: 7980)
      • Unicorn-21622.exe (PID: 2600)
      • Unicorn-61172.exe (PID: 920)
      • Unicorn-27753.exe (PID: 6324)
      • Unicorn-54997.exe (PID: 5772)
      • Unicorn-35921.exe (PID: 1324)
      • Unicorn-19319.exe (PID: 960)
      • Unicorn-19755.exe (PID: 4880)
      • Unicorn-103.exe (PID: 7300)
      • Unicorn-44665.exe (PID: 672)
      • Unicorn-53004.exe (PID: 664)
      • Unicorn-32029.exe (PID: 7480)
      • Unicorn-37457.exe (PID: 6048)
      • Unicorn-42095.exe (PID: 7596)
      • Unicorn-4400.exe (PID: 7520)
      • Unicorn-12760.exe (PID: 7336)
      • Unicorn-5235.exe (PID: 5528)
      • Unicorn-29739.exe (PID: 6436)
      • Unicorn-41711.exe (PID: 5384)
      • Unicorn-12760.exe (PID: 7268)
      • Unicorn-16170.exe (PID: 904)
      • Unicorn-12660.exe (PID: 7288)
      • Unicorn-4400.exe (PID: 7676)
      • Unicorn-30057.exe (PID: 5260)
      • Unicorn-4400.exe (PID: 7576)
      • Unicorn-4400.exe (PID: 7176)
      • Unicorn-46268.exe (PID: 5408)
      • Unicorn-4400.exe (PID: 7668)
      • Unicorn-49880.exe (PID: 6512)
      • Unicorn-61312.exe (PID: 5968)
      • Unicorn-37353.exe (PID: 4652)
      • Unicorn-52647.exe (PID: 7708)
      • Unicorn-23859.exe (PID: 6676)
      • Unicorn-45433.exe (PID: 7684)
      • Unicorn-38779.exe (PID: 7764)
      • Unicorn-42309.exe (PID: 1012)
      • Unicorn-48431.exe (PID: 1240)
      • Unicorn-55447.exe (PID: 1128)
      • Unicorn-18189.exe (PID: 7892)
      • Unicorn-42885.exe (PID: 1280)
      • Unicorn-63305.exe (PID: 5084)
      • Unicorn-30633.exe (PID: 5328)
      • Unicorn-44923.exe (PID: 1348)
      • Unicorn-50788.exe (PID: 5304)
      • Unicorn-18381.exe (PID: 4608)
      • Unicorn-24118.exe (PID: 7724)
      • Unicorn-46777.exe (PID: 7376)
      • Unicorn-31187.exe (PID: 5072)
      • Unicorn-62351.exe (PID: 2644)
      • Unicorn-42693.exe (PID: 7444)
      • Unicorn-51416.exe (PID: 4228)
      • Unicorn-64265.exe (PID: 8216)
      • Unicorn-59989.exe (PID: 8232)
      • Unicorn-51364.exe (PID: 8252)
      • Unicorn-190.exe (PID: 8324)
      • Unicorn-55713.exe (PID: 8272)
      • Unicorn-24711.exe (PID: 8368)
      • Unicorn-60721.exe (PID: 8388)
      • Unicorn-33093.exe (PID: 8464)
      • Unicorn-17450.exe (PID: 8416)
      • Unicorn-59251.exe (PID: 8576)
      • Unicorn-37945.exe (PID: 8656)
      • Unicorn-31622.exe (PID: 8664)
      • Unicorn-4867.exe (PID: 8496)
      • Unicorn-62641.exe (PID: 8768)
      • Unicorn-10892.exe (PID: 8804)
      • Unicorn-27783.exe (PID: 8832)
      • Unicorn-56180.exe (PID: 8860)
      • Unicorn-63601.exe (PID: 8880)
      • Unicorn-30737.exe (PID: 8920)
      • Unicorn-22569.exe (PID: 8900)
      • Unicorn-38905.exe (PID: 8944)
      • Unicorn-62707.exe (PID: 8972)
      • Unicorn-48417.exe (PID: 9004)
      • Unicorn-3108.exe (PID: 9052)
      • Unicorn-32635.exe (PID: 8988)
      • Unicorn-52236.exe (PID: 8996)
      • Unicorn-64561.exe (PID: 9064)
      • Unicorn-31697.exe (PID: 9100)
      • Unicorn-36335.exe (PID: 9116)
      • Unicorn-40611.exe (PID: 9040)
      • Unicorn-40227.exe (PID: 9176)
      • Unicorn-7000.exe (PID: 9160)
      • Unicorn-40227.exe (PID: 9184)
      • Unicorn-4068.exe (PID: 8208)
      • Unicorn-8344.exe (PID: 4008)
      • Unicorn-23719.exe (PID: 8312)
      • Unicorn-28381.exe (PID: 8412)
      • Unicorn-17067.exe (PID: 4944)
      • Unicorn-14466.exe (PID: 3676)
      • Unicorn-11474.exe (PID: 2852)
      • Unicorn-3836.exe (PID: 3332)
      • Unicorn-61053.exe (PID: 8632)
      • Unicorn-36092.exe (PID: 8492)
      • Unicorn-12599.exe (PID: 8336)
      • Unicorn-57716.exe (PID: 8332)
      • Unicorn-3227.exe (PID: 8456)
      • Unicorn-14082.exe (PID: 7392)
      • Unicorn-20789.exe (PID: 9336)
      • Unicorn-57545.exe (PID: 9348)
      • Unicorn-33595.exe (PID: 9384)
      • Unicorn-4452.exe (PID: 9308)
      • Unicorn-4260.exe (PID: 9356)
      • Unicorn-12955.exe (PID: 9428)
      • Unicorn-28957.exe (PID: 9328)
      • Unicorn-25762.exe (PID: 9508)
      • Unicorn-41544.exe (PID: 9400)
      • Unicorn-65399.exe (PID: 9624)
      • Unicorn-61964.exe (PID: 9440)
      • Unicorn-38014.exe (PID: 9452)
      • Unicorn-21486.exe (PID: 9472)
      • Unicorn-18794.exe (PID: 9568)
      • Unicorn-15701.exe (PID: 9676)
      • Unicorn-41352.exe (PID: 9484)
      • Unicorn-36884.exe (PID: 9636)
      • Unicorn-64703.exe (PID: 9668)
      • Unicorn-7401.exe (PID: 9736)
      • Unicorn-17616.exe (PID: 9744)
      • Unicorn-1087.exe (PID: 9768)
      • Unicorn-34506.exe (PID: 9776)
      • Unicorn-50843.exe (PID: 9752)
      • Unicorn-15168.exe (PID: 9168)
      • Unicorn-17542.exe (PID: 9712)
      • Unicorn-19706.exe (PID: 10052)
      • Unicorn-51056.exe (PID: 9936)
      • Unicorn-22084.exe (PID: 10008)
      • Unicorn-45826.exe (PID: 10028)
      • Unicorn-18886.exe (PID: 10076)
      • Unicorn-46780.exe (PID: 9976)
      • Unicorn-59416.exe (PID: 9904)
      • Unicorn-60110.exe (PID: 9884)
      • Unicorn-39166.exe (PID: 9968)
      • Unicorn-1258.exe (PID: 9420)
      • Unicorn-61699.exe (PID: 10140)
      • Unicorn-35104.exe (PID: 10096)
      • Unicorn-64369.exe (PID: 9132)
      • Unicorn-29741.exe (PID: 10168)
      • Unicorn-24772.exe (PID: 10228)
      • Unicorn-32364.exe (PID: 10120)
      • Unicorn-23529.exe (PID: 9088)
      • Unicorn-843.exe (PID: 9704)
      • Unicorn-57615.exe (PID: 6584)
      • Unicorn-53936.exe (PID: 9608)
      • Unicorn-23109.exe (PID: 9256)
      • Unicorn-55088.exe (PID: 9944)
      • Unicorn-48679.exe (PID: 10188)
      • Unicorn-12519.exe (PID: 10212)
      • Unicorn-61071.exe (PID: 9224)
      • Unicorn-319.exe (PID: 9524)
      • Unicorn-1227.exe (PID: 1748)
      • Unicorn-18310.exe (PID: 7408)
      • Unicorn-55555.exe (PID: 924)
      • Unicorn-54823.exe (PID: 10016)

    • Creates files or folders in the user directory

      • WerFault.exe (PID: 7508)
      • WerFault.exe (PID: 8332)
      • WerFault.exe (PID: 9256)
      • WerFault.exe (PID: 8440)
      • WerFault.exe (PID: 9848)
      • WerFault.exe (PID: 12240)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable (generic) (52.9)
.exe | Generic Win/DOS Executable (23.5)
.exe | DOS Executable Generic (23.5)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:01:19 13:34:56+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 299008
UninitializedDataSize: -
EntryPoint: 0x13d4
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
InternalName: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
470
Monitored processes
329
Malicious processes
45
Suspicious processes
46

Behavior graph

Click at the process to see the details
start 1 (123).exe unicorn-27021.exe sppextcomobj.exe no specs slui.exe no specs unicorn-8520.exe unicorn-50108.exe unicorn-10632.exe unicorn-34814.exe unicorn-47389.exe unicorn-45343.exe unicorn-61909.exe unicorn-2547.exe unicorn-65199.exe unicorn-46725.exe unicorn-12006.exe unicorn-10523.exe unicorn-26305.exe unicorn-9511.exe unicorn-53305.exe unicorn-4659.exe unicorn-12080.exe unicorn-38623.exe unicorn-29377.exe unicorn-4680.exe unicorn-57965.exe unicorn-331.exe unicorn-46268.exe unicorn-37353.exe unicorn-29739.exe unicorn-596.exe unicorn-16170.exe unicorn-18970.exe unicorn-5235.exe unicorn-2096.exe unicorn-31431.exe unicorn-54997.exe unicorn-21622.exe unicorn-27753.exe unicorn-35921.exe unicorn-61172.exe unicorn-19319.exe unicorn-19755.exe unicorn-44665.exe unicorn-103.exe unicorn-32029.exe unicorn-53004.exe unicorn-37457.exe unicorn-42095.exe unicorn-12760.exe unicorn-12760.exe unicorn-4400.exe unicorn-4400.exe unicorn-4400.exe unicorn-4400.exe unicorn-4400.exe unicorn-45433.exe unicorn-12660.exe unicorn-52647.exe unicorn-61312.exe unicorn-41711.exe unicorn-55447.exe unicorn-49880.exe unicorn-23859.exe unicorn-30057.exe unicorn-42309.exe unicorn-38779.exe unicorn-48431.exe werfault.exe no specs unicorn-30633.exe unicorn-42885.exe unicorn-18381.exe unicorn-63305.exe unicorn-31187.exe unicorn-44923.exe unicorn-50788.exe unicorn-42693.exe unicorn-63860.exe no specs unicorn-18189.exe unicorn-51416.exe unicorn-62351.exe unicorn-46777.exe unicorn-24118.exe unicorn-64265.exe unicorn-59989.exe unicorn-51364.exe unicorn-55713.exe unicorn-190.exe werfault.exe no specs unicorn-24711.exe unicorn-60721.exe unicorn-17450.exe unicorn-33093.exe unicorn-4867.exe unicorn-59251.exe unicorn-37945.exe unicorn-31622.exe unicorn-62641.exe unicorn-10892.exe unicorn-27783.exe unicorn-56180.exe unicorn-63601.exe unicorn-22569.exe unicorn-30737.exe unicorn-38905.exe unicorn-62707.exe unicorn-32635.exe unicorn-52236.exe unicorn-48417.exe unicorn-40611.exe unicorn-3108.exe unicorn-64561.exe unicorn-23529.exe unicorn-31697.exe unicorn-36335.exe unicorn-64369.exe unicorn-7000.exe unicorn-15168.exe unicorn-40227.exe unicorn-40227.exe unicorn-17067.exe unicorn-8344.exe unicorn-14466.exe unicorn-4068.exe unicorn-23719.exe unicorn-49185.exe unicorn-3836.exe unicorn-11474.exe unicorn-28381.exe unicorn-12599.exe unicorn-57716.exe unicorn-61053.exe unicorn-14082.exe unicorn-36092.exe werfault.exe no specs unicorn-3227.exe werfault.exe no specs unicorn-4452.exe unicorn-28957.exe unicorn-20789.exe unicorn-57545.exe unicorn-4260.exe unicorn-33595.exe unicorn-41544.exe unicorn-1258.exe unicorn-12955.exe unicorn-61964.exe unicorn-38014.exe unicorn-21486.exe unicorn-41352.exe unicorn-25762.exe unicorn-319.exe unicorn-18794.exe unicorn-65399.exe unicorn-36884.exe unicorn-64703.exe unicorn-15701.exe unicorn-17542.exe unicorn-7401.exe unicorn-17616.exe unicorn-50843.exe unicorn-1087.exe unicorn-34506.exe werfault.exe no specs unicorn-60110.exe unicorn-59416.exe unicorn-51056.exe unicorn-39166.exe unicorn-46780.exe unicorn-22084.exe unicorn-45826.exe unicorn-19706.exe unicorn-18886.exe unicorn-35104.exe unicorn-32364.exe unicorn-61699.exe unicorn-29741.exe unicorn-48679.exe unicorn-12519.exe unicorn-24772.exe unicorn-61071.exe unicorn-57615.exe unicorn-843.exe unicorn-53936.exe unicorn-23109.exe unicorn-54823.exe unicorn-55088.exe unicorn-18310.exe unicorn-1227.exe unicorn-55555.exe unicorn-20194.exe no specs unicorn-31700.exe no specs unicorn-56951.exe no specs unicorn-9041.exe no specs unicorn-12431.exe no specs unicorn-59394.exe no specs unicorn-25238.exe no specs unicorn-542.exe no specs unicorn-57911.exe no specs unicorn-4434.exe no specs unicorn-32011.exe no specs unicorn-158.exe no specs unicorn-13893.exe no specs unicorn-11093.exe no specs unicorn-46566.exe no specs unicorn-13754.exe no specs unicorn-13754.exe no specs unicorn-25452.exe no specs unicorn-54787.exe no specs unicorn-50511.exe no specs unicorn-39742.exe no specs unicorn-5394.exe no specs unicorn-29898.exe no specs unicorn-25814.exe no specs unicorn-39550.exe no specs unicorn-18937.exe no specs unicorn-63862.exe no specs unicorn-41958.exe no specs unicorn-41139.exe no specs unicorn-45488.exe no specs unicorn-17262.exe no specs unicorn-37128.exe no specs unicorn-8307.exe no specs werfault.exe no specs unicorn-31701.exe no specs unicorn-27998.exe no specs unicorn-59639.exe no specs unicorn-34388.exe no specs unicorn-56846.exe no specs unicorn-56846.exe no specs unicorn-46375.exe no specs unicorn-26774.exe no specs unicorn-4845.exe no specs unicorn-54923.exe no specs unicorn-21752.exe no specs unicorn-29728.exe no specs unicorn-19182.exe no specs unicorn-35518.exe no specs unicorn-27350.exe no specs unicorn-18990.exe no specs unicorn-18990.exe no specs unicorn-38856.exe no specs unicorn-12305.exe no specs unicorn-47579.exe no specs unicorn-35326.exe no specs unicorn-49062.exe no specs unicorn-16197.exe no specs unicorn-32533.exe no specs unicorn-38664.exe no specs unicorn-52954.exe no specs unicorn-59831.exe no specs unicorn-27756.exe no specs unicorn-27756.exe no specs unicorn-61175.exe no specs unicorn-61175.exe no specs unicorn-27158.exe no specs unicorn-30885.exe no specs unicorn-31648.exe no specs unicorn-11782.exe no specs unicorn-23480.exe no specs unicorn-19396.exe no specs unicorn-19396.exe no specs unicorn-26602.exe no specs unicorn-43668.exe no specs unicorn-65389.exe no specs unicorn-39624.exe no specs unicorn-19204.exe no specs unicorn-47030.exe no specs unicorn-31818.exe no specs unicorn-43251.exe no specs unicorn-19012.exe no specs unicorn-22393.exe no specs unicorn-22393.exe no specs unicorn-28524.exe no specs unicorn-27875.exe no specs unicorn-15888.exe no specs unicorn-15888.exe no specs unicorn-61367.exe no specs unicorn-44284.exe no specs unicorn-33894.exe no specs unicorn-33340.exe no specs unicorn-58399.exe no specs unicorn-63966.exe no specs unicorn-61736.exe no specs werfault.exe no specs unicorn-21450.exe no specs unicorn-41316.exe no specs unicorn-37232.exe no specs unicorn-12535.exe no specs unicorn-52607.exe no specs unicorn-28680.exe no specs unicorn-4175.exe no specs unicorn-15533.exe no specs unicorn-37237.exe no specs unicorn-62312.exe no specs unicorn-41892.exe no specs unicorn-25364.exe no specs unicorn-21280.exe no specs unicorn-6842.exe no specs unicorn-45082.exe no specs unicorn-55296.exe no specs unicorn-31346.exe no specs unicorn-22432.exe no specs unicorn-17698.exe no specs unicorn-61034.exe no specs unicorn-47299.exe no specs unicorn-14434.exe no specs unicorn-63470.exe no specs unicorn-49550.exe no specs unicorn-4294.exe no specs unicorn-36774.exe no specs unicorn-23511.exe no specs unicorn-40474.exe no specs unicorn-51410.exe no specs unicorn-47194.exe no specs unicorn-53324.exe no specs unicorn-62047.exe no specs unicorn-11337.exe no specs unicorn-999.exe no specs unicorn-25504.exe no specs unicorn-18213.exe no specs unicorn-49816.exe no specs unicorn-65450.exe no specs unicorn-18296.exe no specs unicorn-35186.exe no specs unicorn-24225.exe no specs unicorn-22188.exe no specs unicorn-58679.exe no specs unicorn-17912.exe no specs unicorn-38332.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
456C:\Users\admin\AppData\Local\Temp\Unicorn-4175.exeC:\Users\admin\AppData\Local\Temp\Unicorn-4175.exe—Unicorn-3836.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-4175.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
664C:\Users\admin\AppData\Local\Temp\Unicorn-53004.exeC:\Users\admin\AppData\Local\Temp\Unicorn-53004.exe
Unicorn-46725.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-53004.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
672C:\Users\admin\AppData\Local\Temp\Unicorn-44665.exeC:\Users\admin\AppData\Local\Temp\Unicorn-44665.exe
Unicorn-29377.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Exit code:
3221225477
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-44665.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
904C:\Users\admin\AppData\Local\Temp\Unicorn-16170.exeC:\Users\admin\AppData\Local\Temp\Unicorn-16170.exe
1 (123).exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-16170.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
920C:\Users\admin\AppData\Local\Temp\Unicorn-61172.exeC:\Users\admin\AppData\Local\Temp\Unicorn-61172.exe
Unicorn-2547.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-61172.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
924C:\Users\admin\AppData\Local\Temp\Unicorn-55555.exeC:\Users\admin\AppData\Local\Temp\Unicorn-55555.exe
Unicorn-65199.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-55555.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
960C:\Users\admin\AppData\Local\Temp\Unicorn-19319.exeC:\Users\admin\AppData\Local\Temp\Unicorn-19319.exe
Unicorn-8520.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-19319.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1012C:\Users\admin\AppData\Local\Temp\Unicorn-42309.exeC:\Users\admin\AppData\Local\Temp\Unicorn-42309.exe
Unicorn-2096.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-42309.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1128C:\Users\admin\AppData\Local\Temp\Unicorn-55447.exeC:\Users\admin\AppData\Local\Temp\Unicorn-55447.exe
Unicorn-47389.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-55447.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1240C:\Users\admin\AppData\Local\Temp\Unicorn-48431.exeC:\Users\admin\AppData\Local\Temp\Unicorn-48431.exe
Unicorn-61909.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-48431.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
Total events
18 272
Read events
18 272
Write events
0
Delete events
0

Modification events

No data
Executable files
962
Suspicious files
12
Text files
12
Unknown types
0

Dropped files

PID
Process
Filename
Type
6424Unicorn-27021.exeC:\Users\admin\AppData\Local\Temp\Unicorn-8520.exeexecutable
MD5:DC54108880379848171AF17B33066012
SHA256:8F8A836DA36DC2FFC1490C82D80C69D871419E49F4E97A8047A376AF3CADE2A8
48121 (123).exeC:\Users\admin\AppData\Local\Temp\Unicorn-27021.exeexecutable
MD5:7D66E8DFD45C6F151354AAE160ACBC0B
SHA256:DB297398C19A233A165E038FF090F418FB420C9C40CE80B54CA5D0CED0E0ED4F
7812Unicorn-10632.exeC:\Users\admin\AppData\Local\Temp\Unicorn-61909.exeexecutable
MD5:3C004F4EDD70F990870C332730A13EC1
SHA256:1E32D2284AAAE3D427F24229D2B4101DF5304AC4D5544E90AC7F48932E110B5C
7832Unicorn-34814.exeC:\Users\admin\AppData\Local\Temp\Unicorn-65199.exeexecutable
MD5:ECE514A759EED047F138BE64D6DB26A5
SHA256:0FC8641360E7065417EE7AC9304FB2BCAFAD2EFBE8FE5260F549713470FCF8D0
7360Unicorn-50108.exeC:\Users\admin\AppData\Local\Temp\Unicorn-47389.exeexecutable
MD5:4FABE493888DB4558386774E692AF8E2
SHA256:BAFC02B66785345D42BCB311F2C12490FF27D546491078617D2F99F10797329F
7340Unicorn-8520.exeC:\Users\admin\AppData\Local\Temp\Unicorn-2547.exeexecutable
MD5:2BF1B5F4CCFD71ECFDFD7540299A4734
SHA256:A7B55D493E20BBD3D52E197596B6A502A0B59AC6AD41AD21C60627350D570B04
6424Unicorn-27021.exeC:\Users\admin\AppData\Local\Temp\Unicorn-12006.exeexecutable
MD5:2E233007EBD56FFE928D429CFB318915
SHA256:A52B4B165D26AAA16B228A676E1EFF401164C04E4E20CD0274AF68FEC1087441
7844Unicorn-47389.exeC:\Users\admin\AppData\Local\Temp\Unicorn-46725.exeexecutable
MD5:AEAE34D1A45A5DCBEA2D4F246286D1D4
SHA256:7A2B9139AB97ADF1FAF2D6CC7B2AFFD9B88CB5E851A30A10E1C753F9717DDFC3
7340Unicorn-8520.exeC:\Users\admin\AppData\Local\Temp\Unicorn-10632.exeexecutable
MD5:35BBEDA3608EE498934D4C750CFA5FF8
SHA256:E936C629D8EB01AEBE9BDE5BAEF1E65CF65EE7F8F11B5E4FA4DC6E288F4A21AA
6424Unicorn-27021.exeC:\Users\admin\AppData\Local\Temp\Unicorn-34814.exeexecutable
MD5:694330C5642D861840635BA92250C914
SHA256:CE55547C36D7FE932E62EE29043AFA17842149BF81D304E23FFF163B8932177B
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
23
DNS requests
18
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
—
—
GET
200
23.48.23.156:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
6544
svchost.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
8436
SIHClient.exe
GET
200
23.219.150.101:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
8436
SIHClient.exe
GET
200
23.219.150.101:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
4424
backgroundTaskHost.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:138
—
—
—
whitelisted
—
—
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
—
—
23.48.23.156:80
crl.microsoft.com
Akamai International B.V.
DE
whitelisted
5496
MoUsoCoreWorker.exe
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
6544
svchost.exe
20.190.159.23:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
6544
svchost.exe
184.30.131.245:80
ocsp.digicert.com
AKAMAI-AS
US
whitelisted
2104
svchost.exe
51.104.136.2:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
3216
svchost.exe
40.115.3.253:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
5496
MoUsoCoreWorker.exe
51.104.136.2:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4424
backgroundTaskHost.exe
20.223.36.55:443
arc.msn.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted

DNS requests

Domain
IP
Reputation
google.com
  • 142.250.186.174
whitelisted
settings-win.data.microsoft.com
  • 40.127.240.158
  • 51.104.136.2
  • 51.124.78.146
whitelisted
crl.microsoft.com
  • 23.48.23.156
  • 23.48.23.143
whitelisted
login.live.com
  • 20.190.159.23
  • 20.190.159.73
  • 40.126.31.69
  • 40.126.31.67
  • 20.190.159.0
  • 40.126.31.0
  • 40.126.31.128
  • 20.190.159.131
whitelisted
ocsp.digicert.com
  • 184.30.131.245
whitelisted
client.wns.windows.com
  • 40.115.3.253
  • 40.113.110.67
whitelisted
arc.msn.com
  • 20.223.36.55
whitelisted
slscr.update.microsoft.com
  • 4.245.163.56
whitelisted
www.microsoft.com
  • 23.219.150.101
whitelisted
fe3cr.delivery.mp.microsoft.com
  • 13.95.31.18
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2026 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
1 (123)