| File name: | 1 (594) |
| Full analysis: | https://app.any.run/tasks/9c04efa7-1808-401c-98ff-e98f4fdf7d8d |
| Verdict: | Malicious activity |
| Analysis date: | March 25, 2025, 03:04:25 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 50BCDBF82F08F2B5BED0733C0BD318B0 |
| SHA1: | 689EF91DE5EB0310D08BA3D8490591D7CE254688 |
| SHA256: | 95E71B3509058F0E6299551C7AF68B9F5D27927440A7B91CC3747C32CB1F33FF |
| SSDEEP: | 6144:77wgV7+ZQDAHA5ZTZ7sXUJfx5pBEovJHB3/WpSaCZk/8SwjwpyAOEh8sWzuGLJIt:7UsyJHA5BZQWBbhh3OpSaCUx4DxDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Starts itself from another location
- 1 (594).exe (PID: 2284)
- Unicorn-45322.exe (PID: 6516)
- Unicorn-44554.exe (PID: 4040)
- Unicorn-37817.exe (PID: 5392)
- Unicorn-11897.exe (PID: 7392)
- Unicorn-8455.exe (PID: 7432)
- Unicorn-21689.exe (PID: 7412)
- Unicorn-28499.exe (PID: 7800)
- Unicorn-14585.exe (PID: 7440)
- Unicorn-63418.exe (PID: 7912)
- Unicorn-24615.exe (PID: 7936)
- Unicorn-43937.exe (PID: 7884)
- Unicorn-17290.exe (PID: 7956)
- Unicorn-17290.exe (PID: 7964)
- Unicorn-49505.exe (PID: 7984)
- Unicorn-29904.exe (PID: 7992)
- Unicorn-60538.exe (PID: 7192)
- Unicorn-56136.exe (PID: 4336)
- Unicorn-48979.exe (PID: 4188)
- Unicorn-24144.exe (PID: 4112)
- Unicorn-62458.exe (PID: 7332)
- Unicorn-18288.exe (PID: 856)
- Unicorn-45258.exe (PID: 2984)
- Unicorn-2409.exe (PID: 5360)
- Unicorn-21242.exe (PID: 7576)
- Unicorn-64120.exe (PID: 7592)
- Unicorn-61320.exe (PID: 7600)
- Unicorn-10992.exe (PID: 7864)
- Unicorn-63338.exe (PID: 7920)
- Unicorn-63722.exe (PID: 7724)
- Unicorn-16442.exe (PID: 8056)
- Unicorn-45585.exe (PID: 8080)
- Unicorn-62435.exe (PID: 8096)
- Unicorn-40872.exe (PID: 8032)
- Unicorn-28611.exe (PID: 7868)
- Unicorn-14832.exe (PID: 7876)
- Unicorn-15792.exe (PID: 8136)
- Unicorn-3250.exe (PID: 6876)
- Unicorn-44289.exe (PID: 7836)
- Unicorn-56426.exe (PID: 8160)
- Unicorn-35273.exe (PID: 7228)
- Unicorn-55274.exe (PID: 5544)
- Unicorn-10489.exe (PID: 4892)
- Unicorn-36425.exe (PID: 7336)
- Unicorn-7474.exe (PID: 6480)
- Unicorn-32807.exe (PID: 5892)
- Unicorn-7474.exe (PID: 7288)
- Unicorn-43354.exe (PID: 1132)
- Unicorn-36425.exe (PID: 2852)
- Unicorn-50385.exe (PID: 7608)
- Unicorn-59041.exe (PID: 7216)
- Unicorn-36425.exe (PID: 7300)
- Unicorn-7474.exe (PID: 7304)
- Unicorn-7474.exe (PID: 5176)
- Unicorn-18362.exe (PID: 7532)
- Unicorn-50161.exe (PID: 2088)
- Unicorn-53176.exe (PID: 1324)
- Unicorn-55969.exe (PID: 6872)
- Unicorn-56810.exe (PID: 5376)
- Unicorn-48211.exe (PID: 7584)
- Unicorn-33840.exe (PID: 5608)
- Unicorn-18362.exe (PID: 7568)
- Unicorn-889.exe (PID: 8188)
- Unicorn-32083.exe (PID: 7696)
- Unicorn-61256.exe (PID: 4696)
- Unicorn-62705.exe (PID: 8176)
- Unicorn-18186.exe (PID: 7496)
- Unicorn-52705.exe (PID: 7384)
- Unicorn-33680.exe (PID: 7752)
- Unicorn-53354.exe (PID: 2772)
- Unicorn-22410.exe (PID: 1388)
- Unicorn-31655.exe (PID: 8244)
- Unicorn-18627.exe (PID: 2644)
- Unicorn-17920.exe (PID: 8220)
- Unicorn-37978.exe (PID: 8212)
- Unicorn-18496.exe (PID: 1312)
- Unicorn-35155.exe (PID: 8200)
- Unicorn-41985.exe (PID: 8228)
- Unicorn-40800.exe (PID: 8280)
- Unicorn-44330.exe (PID: 8268)
- Unicorn-27226.exe (PID: 8324)
- Unicorn-50385.exe (PID: 7616)
- Unicorn-23312.exe (PID: 8340)
- Unicorn-3664.exe (PID: 8356)
- Unicorn-28186.exe (PID: 8380)
- Unicorn-20592.exe (PID: 8476)
- Unicorn-63546.exe (PID: 8396)
- Unicorn-23753.exe (PID: 8448)
- Unicorn-24137.exe (PID: 8416)
- Unicorn-27475.exe (PID: 8424)
- Unicorn-37226.exe (PID: 8576)
- Unicorn-53043.exe (PID: 8608)
- Unicorn-47594.exe (PID: 8524)
- Unicorn-19145.exe (PID: 8680)
- Unicorn-47994.exe (PID: 8840)
- Unicorn-44979.exe (PID: 8832)
- Unicorn-64522.exe (PID: 8864)
- Unicorn-13520.exe (PID: 8936)
- Unicorn-11730.exe (PID: 8884)
- Unicorn-62659.exe (PID: 9000)
- Unicorn-62721.exe (PID: 8952)
- Unicorn-49914.exe (PID: 8904)
- Unicorn-17050.exe (PID: 8968)
- Unicorn-14034.exe (PID: 8960)
- Unicorn-521.exe (PID: 8976)
- Unicorn-905.exe (PID: 8912)
- Unicorn-48954.exe (PID: 9064)
- Unicorn-27255.exe (PID: 8928)
- Unicorn-15898.exe (PID: 9116)
- Unicorn-28896.exe (PID: 9092)
- Unicorn-41921.exe (PID: 9144)
- Unicorn-796.exe (PID: 9176)
- Unicorn-48954.exe (PID: 9056)
- Unicorn-63297.exe (PID: 3884)
- Unicorn-43946.exe (PID: 9212)
- Unicorn-50298.exe (PID: 3956)
- Unicorn-41752.exe (PID: 9188)
- Unicorn-11495.exe (PID: 3300)
- Unicorn-36001.exe (PID: 7528)
- Unicorn-60090.exe (PID: 4428)
- Unicorn-10592.exe (PID: 5972)
- Unicorn-2944.exe (PID: 8816)
- Unicorn-3017.exe (PID: 8820)
- Unicorn-14482.exe (PID: 8732)
- Unicorn-22041.exe (PID: 7284)
- Unicorn-26474.exe (PID: 1452)
- Unicorn-58051.exe (PID: 1244)
- Unicorn-24183.exe (PID: 9220)
- Unicorn-36000.exe (PID: 8644)
- Unicorn-10578.exe (PID: 9236)
- Unicorn-45690.exe (PID: 9268)
- Unicorn-48008.exe (PID: 8560)
- Unicorn-45594.exe (PID: 9296)
- Unicorn-1712.exe (PID: 9344)
- Unicorn-32595.exe (PID: 9316)
- Unicorn-17987.exe (PID: 9364)
- Unicorn-63274.exe (PID: 9400)
- Unicorn-36762.exe (PID: 9424)
- Unicorn-10592.exe (PID: 9464)
- Unicorn-5241.exe (PID: 9488)
- Unicorn-48504.exe (PID: 9496)
- Unicorn-40602.exe (PID: 9528)
- Unicorn-36304.exe (PID: 9580)
- Unicorn-3077.exe (PID: 9620)
Executable content was dropped or overwritten
- 1 (594).exe (PID: 2284)
- Unicorn-37817.exe (PID: 5392)
- Unicorn-45322.exe (PID: 6516)
- Unicorn-44554.exe (PID: 4040)
- Unicorn-11897.exe (PID: 7392)
- Unicorn-21689.exe (PID: 7412)
- Unicorn-8455.exe (PID: 7432)
- Unicorn-28499.exe (PID: 7800)
- Unicorn-63418.exe (PID: 7912)
- Unicorn-17290.exe (PID: 7956)
- Unicorn-24615.exe (PID: 7936)
- Unicorn-43937.exe (PID: 7884)
- Unicorn-29904.exe (PID: 7992)
- Unicorn-49505.exe (PID: 7984)
- Unicorn-14585.exe (PID: 7440)
- Unicorn-24144.exe (PID: 4112)
- Unicorn-60538.exe (PID: 7192)
- Unicorn-56136.exe (PID: 4336)
- Unicorn-48979.exe (PID: 4188)
- Unicorn-62458.exe (PID: 7332)
- Unicorn-18288.exe (PID: 856)
- Unicorn-45258.exe (PID: 2984)
- Unicorn-2409.exe (PID: 5360)
- Unicorn-21242.exe (PID: 7576)
- Unicorn-64120.exe (PID: 7592)
- Unicorn-50385.exe (PID: 7616)
- Unicorn-61320.exe (PID: 7600)
- Unicorn-17290.exe (PID: 7964)
- Unicorn-63722.exe (PID: 7724)
- Unicorn-10992.exe (PID: 7864)
- Unicorn-63338.exe (PID: 7920)
- Unicorn-40872.exe (PID: 8032)
- Unicorn-16442.exe (PID: 8056)
- Unicorn-62435.exe (PID: 8096)
- Unicorn-45585.exe (PID: 8080)
- Unicorn-28611.exe (PID: 7868)
- Unicorn-14832.exe (PID: 7876)
- Unicorn-15792.exe (PID: 8136)
- Unicorn-56426.exe (PID: 8160)
- Unicorn-3250.exe (PID: 6876)
- Unicorn-44289.exe (PID: 7836)
- Unicorn-35273.exe (PID: 7228)
- Unicorn-55274.exe (PID: 5544)
- Unicorn-32807.exe (PID: 5892)
- Unicorn-10489.exe (PID: 4892)
- Unicorn-36425.exe (PID: 7336)
- Unicorn-7474.exe (PID: 6480)
- Unicorn-43354.exe (PID: 1132)
- Unicorn-59041.exe (PID: 7216)
- Unicorn-36425.exe (PID: 2852)
- Unicorn-50385.exe (PID: 7608)
- Unicorn-7474.exe (PID: 7304)
- Unicorn-7474.exe (PID: 5176)
- Unicorn-7474.exe (PID: 7288)
- Unicorn-53176.exe (PID: 1324)
- Unicorn-36425.exe (PID: 7300)
- Unicorn-18362.exe (PID: 7532)
- Unicorn-50161.exe (PID: 2088)
- Unicorn-56810.exe (PID: 5376)
- Unicorn-18362.exe (PID: 7568)
- Unicorn-48211.exe (PID: 7584)
- Unicorn-33840.exe (PID: 5608)
- Unicorn-889.exe (PID: 8188)
- Unicorn-62705.exe (PID: 8176)
- Unicorn-61256.exe (PID: 4696)
- Unicorn-32083.exe (PID: 7696)
- Unicorn-52705.exe (PID: 7384)
- Unicorn-33680.exe (PID: 7752)
- Unicorn-18186.exe (PID: 7496)
- Unicorn-53354.exe (PID: 2772)
- Unicorn-22410.exe (PID: 1388)
- Unicorn-31655.exe (PID: 8244)
- Unicorn-18627.exe (PID: 2644)
- Unicorn-17920.exe (PID: 8220)
- Unicorn-37978.exe (PID: 8212)
- Unicorn-18496.exe (PID: 1312)
- Unicorn-44330.exe (PID: 8268)
- Unicorn-35155.exe (PID: 8200)
- Unicorn-41985.exe (PID: 8228)
- Unicorn-40800.exe (PID: 8280)
- Unicorn-27226.exe (PID: 8324)
- Unicorn-3664.exe (PID: 8356)
- Unicorn-23312.exe (PID: 8340)
- Unicorn-63546.exe (PID: 8396)
- Unicorn-23753.exe (PID: 8448)
- Unicorn-20592.exe (PID: 8476)
- Unicorn-28186.exe (PID: 8380)
- Unicorn-24137.exe (PID: 8416)
- Unicorn-27475.exe (PID: 8424)
- Unicorn-37226.exe (PID: 8576)
- Unicorn-36000.exe (PID: 8644)
- Unicorn-53043.exe (PID: 8608)
- Unicorn-47594.exe (PID: 8524)
- Unicorn-19145.exe (PID: 8680)
- Unicorn-55969.exe (PID: 6872)
- Unicorn-47994.exe (PID: 8840)
- Unicorn-44979.exe (PID: 8832)
- Unicorn-11730.exe (PID: 8884)
- Unicorn-64522.exe (PID: 8864)
- Unicorn-13520.exe (PID: 8936)
- Unicorn-49914.exe (PID: 8904)
- Unicorn-62659.exe (PID: 9000)
- Unicorn-62721.exe (PID: 8952)
- Unicorn-17050.exe (PID: 8968)
- Unicorn-521.exe (PID: 8976)
- Unicorn-27255.exe (PID: 8928)
- Unicorn-14034.exe (PID: 8960)
- Unicorn-905.exe (PID: 8912)
- Unicorn-28896.exe (PID: 9092)
- Unicorn-15898.exe (PID: 9116)
- Unicorn-48954.exe (PID: 9056)
- Unicorn-41921.exe (PID: 9144)
- Unicorn-796.exe (PID: 9176)
- Unicorn-50298.exe (PID: 3956)
- Unicorn-60090.exe (PID: 4428)
- Unicorn-41752.exe (PID: 9188)
- Unicorn-11495.exe (PID: 3300)
- Unicorn-36001.exe (PID: 7528)
- Unicorn-2944.exe (PID: 8816)
- Unicorn-10592.exe (PID: 5972)
- Unicorn-3017.exe (PID: 8820)
- Unicorn-14482.exe (PID: 8732)
- Unicorn-22041.exe (PID: 7284)
- Unicorn-26474.exe (PID: 1452)
- Unicorn-58051.exe (PID: 1244)
- Unicorn-10578.exe (PID: 9236)
- Unicorn-24183.exe (PID: 9220)
- Unicorn-45690.exe (PID: 9268)
- Unicorn-45594.exe (PID: 9296)
- Unicorn-32595.exe (PID: 9316)
- Unicorn-63274.exe (PID: 9400)
- Unicorn-17987.exe (PID: 9364)
- Unicorn-36762.exe (PID: 9424)
- Unicorn-10592.exe (PID: 9464)
- Unicorn-5241.exe (PID: 9488)
- Unicorn-48954.exe (PID: 9064)
- Unicorn-48504.exe (PID: 9496)
- Unicorn-43946.exe (PID: 9212)
- Unicorn-40602.exe (PID: 9528)
- Unicorn-36304.exe (PID: 9580)
- Unicorn-3077.exe (PID: 9620)
- Unicorn-44899.exe (PID: 9656)
- Unicorn-63482.exe (PID: 9720)
- Unicorn-61235.exe (PID: 9648)
- Unicorn-64058.exe (PID: 9668)
- Unicorn-14473.exe (PID: 9728)
- Unicorn-31386.exe (PID: 9680)
- Unicorn-45537.exe (PID: 9824)
- Unicorn-49450.exe (PID: 9772)
- Unicorn-29642.exe (PID: 9808)
- Unicorn-5977.exe (PID: 9964)
- Unicorn-27411.exe (PID: 9752)
- Unicorn-42744.exe (PID: 9844)
- Unicorn-43128.exe (PID: 9788)
- Unicorn-48008.exe (PID: 8560)
- Unicorn-1712.exe (PID: 9344)
- Unicorn-12288.exe (PID: 9888)
- Unicorn-28432.exe (PID: 9896)
- Unicorn-44280.exe (PID: 9980)
- Unicorn-50218.exe (PID: 10004)
- Unicorn-29907.exe (PID: 9816)
- Unicorn-48298.exe (PID: 9904)
- Unicorn-44442.exe (PID: 9944)
- Unicorn-33306.exe (PID: 10060)
- Unicorn-29776.exe (PID: 10032)
- Unicorn-30320.exe (PID: 10080)
- Unicorn-22289.exe (PID: 10108)
- Unicorn-6850.exe (PID: 10160)
- Unicorn-34090.exe (PID: 9420)
- Unicorn-39907.exe (PID: 10152)
- Unicorn-27930.exe (PID: 10192)
- Unicorn-23632.exe (PID: 10232)
- Unicorn-63297.exe (PID: 3884)
- Unicorn-24147.exe (PID: 732)
- Unicorn-60026.exe (PID: 10212)
- Unicorn-59706.exe (PID: 4980)
- Unicorn-42817.exe (PID: 5244)
- Unicorn-42049.exe (PID: 3024)
- Unicorn-4489.exe (PID: 10264)
- Unicorn-31328.exe (PID: 872)
- Unicorn-17235.exe (PID: 10300)
INFO
Create files in a temporary directory
- 1 (594).exe (PID: 2284)
- Unicorn-44554.exe (PID: 4040)
- Unicorn-45322.exe (PID: 6516)
- Unicorn-37817.exe (PID: 5392)
- Unicorn-21689.exe (PID: 7412)
- Unicorn-8455.exe (PID: 7432)
- Unicorn-11897.exe (PID: 7392)
- Unicorn-28499.exe (PID: 7800)
- Unicorn-43937.exe (PID: 7884)
- Unicorn-63418.exe (PID: 7912)
- Unicorn-24615.exe (PID: 7936)
- Unicorn-17290.exe (PID: 7956)
- Unicorn-49505.exe (PID: 7984)
- Unicorn-29904.exe (PID: 7992)
- Unicorn-14585.exe (PID: 7440)
- Unicorn-24144.exe (PID: 4112)
- Unicorn-56136.exe (PID: 4336)
- Unicorn-48979.exe (PID: 4188)
- Unicorn-62458.exe (PID: 7332)
- Unicorn-18288.exe (PID: 856)
- Unicorn-45258.exe (PID: 2984)
- Unicorn-2409.exe (PID: 5360)
- Unicorn-21242.exe (PID: 7576)
- Unicorn-50385.exe (PID: 7616)
- Unicorn-64120.exe (PID: 7592)
- Unicorn-61320.exe (PID: 7600)
- Unicorn-17290.exe (PID: 7964)
- Unicorn-63722.exe (PID: 7724)
- Unicorn-10992.exe (PID: 7864)
- Unicorn-60538.exe (PID: 7192)
- Unicorn-63338.exe (PID: 7920)
- Unicorn-16442.exe (PID: 8056)
- Unicorn-45585.exe (PID: 8080)
- Unicorn-62435.exe (PID: 8096)
- Unicorn-15792.exe (PID: 8136)
- Unicorn-40872.exe (PID: 8032)
- Unicorn-28611.exe (PID: 7868)
- Unicorn-14832.exe (PID: 7876)
- Unicorn-56426.exe (PID: 8160)
- Unicorn-3250.exe (PID: 6876)
- Unicorn-44289.exe (PID: 7836)
- Unicorn-35273.exe (PID: 7228)
- Unicorn-55274.exe (PID: 5544)
- Unicorn-32807.exe (PID: 5892)
- Unicorn-10489.exe (PID: 4892)
- Unicorn-36425.exe (PID: 7336)
- Unicorn-7474.exe (PID: 6480)
- Unicorn-7474.exe (PID: 7288)
- Unicorn-43354.exe (PID: 1132)
- Unicorn-36425.exe (PID: 2852)
- Unicorn-50385.exe (PID: 7608)
- Unicorn-7474.exe (PID: 7304)
- Unicorn-59041.exe (PID: 7216)
- Unicorn-7474.exe (PID: 5176)
- Unicorn-36425.exe (PID: 7300)
- Unicorn-18362.exe (PID: 7532)
- Unicorn-50161.exe (PID: 2088)
- Unicorn-33840.exe (PID: 5608)
- Unicorn-53176.exe (PID: 1324)
- Unicorn-18362.exe (PID: 7568)
- Unicorn-48211.exe (PID: 7584)
- Unicorn-56810.exe (PID: 5376)
- Unicorn-889.exe (PID: 8188)
- Unicorn-62705.exe (PID: 8176)
- Unicorn-32083.exe (PID: 7696)
- Unicorn-61256.exe (PID: 4696)
- Unicorn-18186.exe (PID: 7496)
- Unicorn-52705.exe (PID: 7384)
- Unicorn-33680.exe (PID: 7752)
- Unicorn-22410.exe (PID: 1388)
- Unicorn-53354.exe (PID: 2772)
- Unicorn-18627.exe (PID: 2644)
- Unicorn-17920.exe (PID: 8220)
- Unicorn-37978.exe (PID: 8212)
- Unicorn-18496.exe (PID: 1312)
- Unicorn-31655.exe (PID: 8244)
- Unicorn-44330.exe (PID: 8268)
- Unicorn-35155.exe (PID: 8200)
- Unicorn-41985.exe (PID: 8228)
- Unicorn-40800.exe (PID: 8280)
- Unicorn-27226.exe (PID: 8324)
- Unicorn-3664.exe (PID: 8356)
- Unicorn-23312.exe (PID: 8340)
- Unicorn-23753.exe (PID: 8448)
- Unicorn-20592.exe (PID: 8476)
- Unicorn-28186.exe (PID: 8380)
- Unicorn-63546.exe (PID: 8396)
- Unicorn-27475.exe (PID: 8424)
- Unicorn-47594.exe (PID: 8524)
- Unicorn-24137.exe (PID: 8416)
- Unicorn-48008.exe (PID: 8560)
- Unicorn-53043.exe (PID: 8608)
- Unicorn-37226.exe (PID: 8576)
- Unicorn-19145.exe (PID: 8680)
- Unicorn-55969.exe (PID: 6872)
- Unicorn-44979.exe (PID: 8832)
- Unicorn-11730.exe (PID: 8884)
- Unicorn-47994.exe (PID: 8840)
- Unicorn-64522.exe (PID: 8864)
- Unicorn-13520.exe (PID: 8936)
- Unicorn-49914.exe (PID: 8904)
- Unicorn-17050.exe (PID: 8968)
- Unicorn-62659.exe (PID: 9000)
- Unicorn-905.exe (PID: 8912)
- Unicorn-62721.exe (PID: 8952)
- Unicorn-14034.exe (PID: 8960)
- Unicorn-521.exe (PID: 8976)
- Unicorn-28896.exe (PID: 9092)
- Unicorn-15898.exe (PID: 9116)
- Unicorn-48954.exe (PID: 9056)
- Unicorn-27255.exe (PID: 8928)
- Unicorn-41921.exe (PID: 9144)
- Unicorn-796.exe (PID: 9176)
- Unicorn-50298.exe (PID: 3956)
- Unicorn-41752.exe (PID: 9188)
- Unicorn-11495.exe (PID: 3300)
- Unicorn-36001.exe (PID: 7528)
- Unicorn-60090.exe (PID: 4428)
- Unicorn-2944.exe (PID: 8816)
- Unicorn-10592.exe (PID: 5972)
- Unicorn-14482.exe (PID: 8732)
- Unicorn-3017.exe (PID: 8820)
- Unicorn-26474.exe (PID: 1452)
- Unicorn-22041.exe (PID: 7284)
- Unicorn-58051.exe (PID: 1244)
- Unicorn-36000.exe (PID: 8644)
- Unicorn-10578.exe (PID: 9236)
- Unicorn-24183.exe (PID: 9220)
- Unicorn-45690.exe (PID: 9268)
- Unicorn-45594.exe (PID: 9296)
- Unicorn-32595.exe (PID: 9316)
- Unicorn-17987.exe (PID: 9364)
- Unicorn-63274.exe (PID: 9400)
- Unicorn-36762.exe (PID: 9424)
- Unicorn-10592.exe (PID: 9464)
- Unicorn-48954.exe (PID: 9064)
- Unicorn-5241.exe (PID: 9488)
- Unicorn-48504.exe (PID: 9496)
- Unicorn-43946.exe (PID: 9212)
- Unicorn-40602.exe (PID: 9528)
- Unicorn-36304.exe (PID: 9580)
- Unicorn-3077.exe (PID: 9620)
Reads the computer name
- Unicorn-45322.exe (PID: 6516)
- 1 (594).exe (PID: 2284)
- Unicorn-44554.exe (PID: 4040)
- Unicorn-37817.exe (PID: 5392)
- Unicorn-21689.exe (PID: 7412)
- Unicorn-8455.exe (PID: 7432)
- Unicorn-14585.exe (PID: 7440)
- Unicorn-11897.exe (PID: 7392)
- Unicorn-28499.exe (PID: 7800)
- Unicorn-43937.exe (PID: 7884)
- Unicorn-63418.exe (PID: 7912)
- Unicorn-24615.exe (PID: 7936)
- Unicorn-17290.exe (PID: 7956)
- Unicorn-29904.exe (PID: 7992)
- Unicorn-49505.exe (PID: 7984)
- Unicorn-17290.exe (PID: 7964)
- Unicorn-60538.exe (PID: 7192)
- Unicorn-24144.exe (PID: 4112)
- Unicorn-62458.exe (PID: 7332)
- Unicorn-56136.exe (PID: 4336)
- Unicorn-48979.exe (PID: 4188)
- Unicorn-18288.exe (PID: 856)
- Unicorn-45258.exe (PID: 2984)
- Unicorn-21242.exe (PID: 7576)
- Unicorn-2409.exe (PID: 5360)
- Unicorn-18362.exe (PID: 7568)
- Unicorn-18362.exe (PID: 7532)
- Unicorn-50385.exe (PID: 7616)
- Unicorn-50385.exe (PID: 7608)
- Unicorn-48211.exe (PID: 7584)
- Unicorn-61320.exe (PID: 7600)
- Unicorn-64120.exe (PID: 7592)
- Unicorn-63722.exe (PID: 7724)
- Unicorn-10992.exe (PID: 7864)
- Unicorn-40872.exe (PID: 8032)
- Unicorn-16442.exe (PID: 8056)
- Unicorn-45585.exe (PID: 8080)
- Unicorn-62435.exe (PID: 8096)
- Unicorn-63338.exe (PID: 7920)
- Unicorn-28611.exe (PID: 7868)
- Unicorn-15792.exe (PID: 8136)
- Unicorn-14832.exe (PID: 7876)
- Unicorn-56426.exe (PID: 8160)
- Unicorn-3250.exe (PID: 6876)
- Unicorn-35273.exe (PID: 7228)
- Unicorn-44289.exe (PID: 7836)
- Unicorn-55274.exe (PID: 5544)
- Unicorn-32807.exe (PID: 5892)
- Unicorn-36425.exe (PID: 2852)
- Unicorn-10489.exe (PID: 4892)
- Unicorn-36425.exe (PID: 7336)
- Unicorn-7474.exe (PID: 6480)
- Unicorn-7474.exe (PID: 7288)
- Unicorn-43354.exe (PID: 1132)
- Unicorn-59041.exe (PID: 7216)
- Unicorn-7474.exe (PID: 5176)
- Unicorn-36425.exe (PID: 7300)
- Unicorn-53176.exe (PID: 1324)
- Unicorn-50161.exe (PID: 2088)
- Unicorn-33840.exe (PID: 5608)
- Unicorn-7474.exe (PID: 7304)
- Unicorn-55969.exe (PID: 6872)
- Unicorn-56810.exe (PID: 5376)
- Unicorn-889.exe (PID: 8188)
- Unicorn-62705.exe (PID: 8176)
- Unicorn-32083.exe (PID: 7696)
- Unicorn-61256.exe (PID: 4696)
- Unicorn-18186.exe (PID: 7496)
- Unicorn-53354.exe (PID: 2772)
- Unicorn-22410.exe (PID: 1388)
- Unicorn-52705.exe (PID: 7384)
- Unicorn-33680.exe (PID: 7752)
- Unicorn-17920.exe (PID: 8220)
- Unicorn-37978.exe (PID: 8212)
- Unicorn-35155.exe (PID: 8200)
- Unicorn-44330.exe (PID: 8268)
- Unicorn-18496.exe (PID: 1312)
- Unicorn-31655.exe (PID: 8244)
- Unicorn-18627.exe (PID: 2644)
- Unicorn-40800.exe (PID: 8280)
- Unicorn-27226.exe (PID: 8324)
- Unicorn-41985.exe (PID: 8228)
- Unicorn-3664.exe (PID: 8356)
- Unicorn-28186.exe (PID: 8380)
- Unicorn-63546.exe (PID: 8396)
- Unicorn-23312.exe (PID: 8340)
- Unicorn-23753.exe (PID: 8448)
- Unicorn-24137.exe (PID: 8416)
- Unicorn-27475.exe (PID: 8424)
- Unicorn-20592.exe (PID: 8476)
- Unicorn-47594.exe (PID: 8524)
- Unicorn-37226.exe (PID: 8576)
- Unicorn-36000.exe (PID: 8644)
- Unicorn-48008.exe (PID: 8560)
- Unicorn-19145.exe (PID: 8680)
- Unicorn-53043.exe (PID: 8608)
- Unicorn-47994.exe (PID: 8840)
- Unicorn-11730.exe (PID: 8884)
- Unicorn-44979.exe (PID: 8832)
- Unicorn-13520.exe (PID: 8936)
- Unicorn-64522.exe (PID: 8864)
- Unicorn-17050.exe (PID: 8968)
- Unicorn-49914.exe (PID: 8904)
- Unicorn-62659.exe (PID: 9000)
- Unicorn-14034.exe (PID: 8960)
- Unicorn-905.exe (PID: 8912)
- Unicorn-62721.exe (PID: 8952)
- Unicorn-521.exe (PID: 8976)
- Unicorn-27255.exe (PID: 8928)
- Unicorn-48954.exe (PID: 9064)
- Unicorn-15898.exe (PID: 9116)
- Unicorn-28896.exe (PID: 9092)
- Unicorn-41921.exe (PID: 9144)
- Unicorn-796.exe (PID: 9176)
- Unicorn-48954.exe (PID: 9056)
- Unicorn-63297.exe (PID: 3884)
- Unicorn-50298.exe (PID: 3956)
- Unicorn-60090.exe (PID: 4428)
- Unicorn-41752.exe (PID: 9188)
- Unicorn-43946.exe (PID: 9212)
- Unicorn-2944.exe (PID: 8816)
- Unicorn-36001.exe (PID: 7528)
- Unicorn-10592.exe (PID: 5972)
- Unicorn-11495.exe (PID: 3300)
- Unicorn-14482.exe (PID: 8732)
- Unicorn-3017.exe (PID: 8820)
- Unicorn-22041.exe (PID: 7284)
- Unicorn-26474.exe (PID: 1452)
- Unicorn-58051.exe (PID: 1244)
- Unicorn-10578.exe (PID: 9236)
- Unicorn-24183.exe (PID: 9220)
- Unicorn-45594.exe (PID: 9296)
- Unicorn-45690.exe (PID: 9268)
- Unicorn-32595.exe (PID: 9316)
- Unicorn-1712.exe (PID: 9344)
- Unicorn-17987.exe (PID: 9364)
- Unicorn-63274.exe (PID: 9400)
- Unicorn-36762.exe (PID: 9424)
- Unicorn-10592.exe (PID: 9464)
- Unicorn-5241.exe (PID: 9488)
- Unicorn-40602.exe (PID: 9528)
- Unicorn-48504.exe (PID: 9496)
- Unicorn-36304.exe (PID: 9580)
- Unicorn-3077.exe (PID: 9620)
- Unicorn-44899.exe (PID: 9656)
Checks supported languages
- 1 (594).exe (PID: 2284)
- Unicorn-45322.exe (PID: 6516)
- Unicorn-44554.exe (PID: 4040)
- Unicorn-37817.exe (PID: 5392)
- Unicorn-8455.exe (PID: 7432)
- Unicorn-14585.exe (PID: 7440)
- Unicorn-11897.exe (PID: 7392)
- Unicorn-21689.exe (PID: 7412)
- Unicorn-63418.exe (PID: 7912)
- Unicorn-28499.exe (PID: 7800)
- Unicorn-24615.exe (PID: 7936)
- Unicorn-43937.exe (PID: 7884)
- Unicorn-17290.exe (PID: 7964)
- Unicorn-29904.exe (PID: 7992)
- Unicorn-49505.exe (PID: 7984)
- Unicorn-60538.exe (PID: 7192)
- Unicorn-24144.exe (PID: 4112)
- Unicorn-17290.exe (PID: 7956)
- Unicorn-62458.exe (PID: 7332)
- Unicorn-56136.exe (PID: 4336)
- Unicorn-48979.exe (PID: 4188)
- Unicorn-45258.exe (PID: 2984)
- Unicorn-2409.exe (PID: 5360)
- Unicorn-18288.exe (PID: 856)
- Unicorn-18362.exe (PID: 7532)
- Unicorn-48211.exe (PID: 7584)
- Unicorn-21242.exe (PID: 7576)
- Unicorn-18362.exe (PID: 7568)
- Unicorn-50385.exe (PID: 7608)
- Unicorn-64120.exe (PID: 7592)
- Unicorn-50385.exe (PID: 7616)
- Unicorn-61320.exe (PID: 7600)
- Unicorn-63722.exe (PID: 7724)
- Unicorn-10992.exe (PID: 7864)
- Unicorn-45585.exe (PID: 8080)
- Unicorn-62435.exe (PID: 8096)
- Unicorn-15792.exe (PID: 8136)
- Unicorn-28611.exe (PID: 7868)
- Unicorn-63338.exe (PID: 7920)
- Unicorn-40872.exe (PID: 8032)
- Unicorn-16442.exe (PID: 8056)
- Unicorn-14832.exe (PID: 7876)
- Unicorn-56426.exe (PID: 8160)
- Unicorn-44289.exe (PID: 7836)
- Unicorn-3250.exe (PID: 6876)
- Unicorn-32807.exe (PID: 5892)
- Unicorn-35273.exe (PID: 7228)
- Unicorn-55274.exe (PID: 5544)
- Unicorn-7474.exe (PID: 6480)
- Unicorn-56810.exe (PID: 5376)
- Unicorn-10489.exe (PID: 4892)
- Unicorn-53176.exe (PID: 1324)
- Unicorn-43354.exe (PID: 1132)
- Unicorn-55969.exe (PID: 6872)
- Unicorn-7474.exe (PID: 5176)
- Unicorn-36425.exe (PID: 2852)
- Unicorn-33840.exe (PID: 5608)
- Unicorn-50161.exe (PID: 2088)
- Unicorn-36425.exe (PID: 7300)
- Unicorn-7474.exe (PID: 7304)
- Unicorn-59041.exe (PID: 7216)
- Unicorn-7474.exe (PID: 7288)
- Unicorn-36425.exe (PID: 7336)
- Unicorn-62705.exe (PID: 8176)
- Unicorn-32083.exe (PID: 7696)
- Unicorn-61256.exe (PID: 4696)
- Unicorn-18186.exe (PID: 7496)
- Unicorn-33680.exe (PID: 7752)
- Unicorn-889.exe (PID: 8188)
- Unicorn-22410.exe (PID: 1388)
- Unicorn-18496.exe (PID: 1312)
- Unicorn-53354.exe (PID: 2772)
- Unicorn-52705.exe (PID: 7384)
- Unicorn-18627.exe (PID: 2644)
- Unicorn-37978.exe (PID: 8212)
- Unicorn-35155.exe (PID: 8200)
- Unicorn-41985.exe (PID: 8228)
- Unicorn-44330.exe (PID: 8268)
- Unicorn-17920.exe (PID: 8220)
- Unicorn-31655.exe (PID: 8244)
- Unicorn-40800.exe (PID: 8280)
- Unicorn-27226.exe (PID: 8324)
- Unicorn-23312.exe (PID: 8340)
- Unicorn-3664.exe (PID: 8356)
- Unicorn-63546.exe (PID: 8396)
- Unicorn-28186.exe (PID: 8380)
- Unicorn-24137.exe (PID: 8416)
- Unicorn-27475.exe (PID: 8424)
- Unicorn-23753.exe (PID: 8448)
- Unicorn-20592.exe (PID: 8476)
- Unicorn-47594.exe (PID: 8524)
- Unicorn-37226.exe (PID: 8576)
- Unicorn-48008.exe (PID: 8560)
- Unicorn-53043.exe (PID: 8608)
- Unicorn-36000.exe (PID: 8644)
- Unicorn-19145.exe (PID: 8680)
- Unicorn-44979.exe (PID: 8832)
- Unicorn-64522.exe (PID: 8864)
- Unicorn-47994.exe (PID: 8840)
- Unicorn-49914.exe (PID: 8904)
- Unicorn-11730.exe (PID: 8884)
- Unicorn-27255.exe (PID: 8928)
- Unicorn-62659.exe (PID: 9000)
- Unicorn-905.exe (PID: 8912)
- Unicorn-521.exe (PID: 8976)
- Unicorn-17050.exe (PID: 8968)
- Unicorn-14034.exe (PID: 8960)
- Unicorn-13520.exe (PID: 8936)
- Unicorn-48954.exe (PID: 9064)
- Unicorn-15898.exe (PID: 9116)
- Unicorn-28896.exe (PID: 9092)
- Unicorn-41921.exe (PID: 9144)
- Unicorn-62721.exe (PID: 8952)
- Unicorn-48954.exe (PID: 9056)
- Unicorn-41752.exe (PID: 9188)
- Unicorn-43946.exe (PID: 9212)
- Unicorn-50298.exe (PID: 3956)
- Unicorn-11495.exe (PID: 3300)
- Unicorn-60090.exe (PID: 4428)
- Unicorn-63297.exe (PID: 3884)
- Unicorn-36001.exe (PID: 7528)
- Unicorn-796.exe (PID: 9176)
- Unicorn-10592.exe (PID: 5972)
- Unicorn-14482.exe (PID: 8732)
- Unicorn-3017.exe (PID: 8820)
- Unicorn-26474.exe (PID: 1452)
- Unicorn-22041.exe (PID: 7284)
- Unicorn-10578.exe (PID: 9236)
- Unicorn-45690.exe (PID: 9268)
- Unicorn-58051.exe (PID: 1244)
- Unicorn-24183.exe (PID: 9220)
- Unicorn-1712.exe (PID: 9344)
- Unicorn-17987.exe (PID: 9364)
- Unicorn-63274.exe (PID: 9400)
- Unicorn-36762.exe (PID: 9424)
- Unicorn-45594.exe (PID: 9296)
- Unicorn-32595.exe (PID: 9316)
- Unicorn-10592.exe (PID: 9464)
- Unicorn-5241.exe (PID: 9488)
- Unicorn-48504.exe (PID: 9496)
- Unicorn-36304.exe (PID: 9580)
- Unicorn-40602.exe (PID: 9528)
- Unicorn-3077.exe (PID: 9620)
- Unicorn-44899.exe (PID: 9656)
- Unicorn-31386.exe (PID: 9680)
- Unicorn-61235.exe (PID: 9648)
- Unicorn-64058.exe (PID: 9668)
- Unicorn-14473.exe (PID: 9728)
- Unicorn-27411.exe (PID: 9752)
- Unicorn-43128.exe (PID: 9788)
- Unicorn-49450.exe (PID: 9772)
- Unicorn-29907.exe (PID: 9816)
- Unicorn-45537.exe (PID: 9824)
- Unicorn-28432.exe (PID: 9896)
- Unicorn-12288.exe (PID: 9888)
- Unicorn-5977.exe (PID: 9964)
- Unicorn-48298.exe (PID: 9904)
- Unicorn-44442.exe (PID: 9944)
- Unicorn-29642.exe (PID: 9808)
- Unicorn-42744.exe (PID: 9844)
- Unicorn-50218.exe (PID: 10004)
- Unicorn-29776.exe (PID: 10032)
- Unicorn-33306.exe (PID: 10060)
- Unicorn-30320.exe (PID: 10080)
- Unicorn-22289.exe (PID: 10108)
- Unicorn-44280.exe (PID: 9980)
- Unicorn-6850.exe (PID: 10160)
- Unicorn-39907.exe (PID: 10152)
- Unicorn-27930.exe (PID: 10192)
- Unicorn-60026.exe (PID: 10212)
- Unicorn-34090.exe (PID: 9420)
- Unicorn-24147.exe (PID: 732)
- Unicorn-23632.exe (PID: 10232)
- Unicorn-60218.exe (PID: 3768)
- Unicorn-42817.exe (PID: 5244)
- Unicorn-59706.exe (PID: 4980)
- Unicorn-31328.exe (PID: 872)
- Unicorn-42049.exe (PID: 3024)
- Unicorn-63482.exe (PID: 9720)
- Unicorn-17235.exe (PID: 10300)
- Unicorn-15817.exe (PID: 10368)
- Unicorn-5641.exe (PID: 10400)
- Unicorn-2242.exe (PID: 10408)
- Unicorn-50986.exe (PID: 10420)
- Unicorn-5641.exe (PID: 10392)
- Unicorn-4489.exe (PID: 10264)
- Unicorn-3612.exe (PID: 10484)
- Unicorn-54074.exe (PID: 10512)
- Unicorn-5095.exe (PID: 10528)
- Unicorn-1527.exe (PID: 10548)
- Unicorn-58298.exe (PID: 10608)
- Unicorn-28448.exe (PID: 10600)
- Unicorn-34016.exe (PID: 10464)
- Unicorn-48152.exe (PID: 10732)
- Unicorn-27872.exe (PID: 10664)
- Unicorn-47930.exe (PID: 10696)
- Unicorn-50945.exe (PID: 10704)
- Unicorn-54017.exe (PID: 10740)
- Unicorn-50561.exe (PID: 10784)
- Unicorn-14489.exe (PID: 10792)
- Unicorn-64296.exe (PID: 10776)
- Unicorn-31017.exe (PID: 10764)
- Unicorn-5013.exe (PID: 10616)
- Unicorn-63306.exe (PID: 10872)
- Unicorn-63306.exe (PID: 10864)
- Unicorn-60513.exe (PID: 10884)
- Unicorn-49466.exe (PID: 10920)
- Unicorn-65226.exe (PID: 10968)
- Unicorn-3145.exe (PID: 10944)
- Unicorn-48920.exe (PID: 10992)
- Unicorn-10041.exe (PID: 10984)
- Unicorn-51329.exe (PID: 11016)
- Unicorn-32064.exe (PID: 11028)
- Unicorn-37930.exe (PID: 11044)
- Unicorn-2407.exe (PID: 11056)
- Unicorn-50561.exe (PID: 10804)
- Unicorn-4946.exe (PID: 11120)
- Unicorn-15367.exe (PID: 11096)
- Unicorn-56705.exe (PID: 11140)
- Unicorn-31127.exe (PID: 11168)
- Unicorn-40058.exe (PID: 11176)
- Unicorn-23395.exe (PID: 11248)
- Unicorn-12431.exe (PID: 2084)
- Unicorn-25834.exe (PID: 11284)
- Unicorn-36232.exe (PID: 8748)
- Unicorn-63706.exe (PID: 11368)
- Unicorn-10976.exe (PID: 11336)
- Unicorn-60499.exe (PID: 11380)
- Unicorn-14697.exe (PID: 11320)
- Unicorn-63898.exe (PID: 11328)
- Unicorn-46659.exe (PID: 11428)
- Unicorn-857.exe (PID: 11408)
- Unicorn-17002.exe (PID: 11420)
- Unicorn-15741.exe (PID: 11464)
- Unicorn-40145.exe (PID: 11484)
- Unicorn-42553.exe (PID: 11508)
- Unicorn-48906.exe (PID: 11524)
- Unicorn-32051.exe (PID: 11556)
- Unicorn-52258.exe (PID: 11672)
- Unicorn-65517.exe (PID: 11680)
- Unicorn-47043.exe (PID: 11692)
- Unicorn-48906.exe (PID: 11532)
- Unicorn-65050.exe (PID: 11544)
- Unicorn-50945.exe (PID: 11628)
- Unicorn-2201.exe (PID: 11612)
- Unicorn-13721.exe (PID: 11704)
- Unicorn-45626.exe (PID: 11792)
- Unicorn-19306.exe (PID: 11784)
- Unicorn-19306.exe (PID: 11804)
- Unicorn-63105.exe (PID: 11864)
- Unicorn-19306.exe (PID: 11772)
- Unicorn-35258.exe (PID: 11852)
- Unicorn-29703.exe (PID: 11756)
- Unicorn-51816.exe (PID: 11932)
- Unicorn-25466.exe (PID: 11892)
- Unicorn-51786.exe (PID: 11904)
- Unicorn-54739.exe (PID: 11948)
- Unicorn-4640.exe (PID: 11972)
- Unicorn-18064.exe (PID: 12012)
- Unicorn-10473.exe (PID: 12028)
- Unicorn-25907.exe (PID: 12052)
- Unicorn-58065.exe (PID: 12072)
- Unicorn-58314.exe (PID: 12100)
- Unicorn-38329.exe (PID: 12116)
- Unicorn-27194.exe (PID: 11996)
- Unicorn-15696.exe (PID: 744)
- Unicorn-30458.exe (PID: 12164)
- Unicorn-23943.exe (PID: 12188)
- Unicorn-13929.exe (PID: 12196)
- Unicorn-15696.exe (PID: 4172)
- Unicorn-28825.exe (PID: 1600)
- Unicorn-64897.exe (PID: 4212)
- Unicorn-2288.exe (PID: 12140)
- Unicorn-2944.exe (PID: 8816)
- Unicorn-61114.exe (PID: 5232)
- Unicorn-14409.exe (PID: 12308)
- Unicorn-30361.exe (PID: 12344)
- Unicorn-24960.exe (PID: 12352)
- Unicorn-49962.exe (PID: 12332)
- Unicorn-17097.exe (PID: 12392)
- Unicorn-11232.exe (PID: 12400)
- Unicorn-12105.exe (PID: 1272)
- Unicorn-49032.exe (PID: 12480)
- Unicorn-13536.exe (PID: 12472)
- Unicorn-30042.exe (PID: 12520)
- Unicorn-64186.exe (PID: 12556)
- Unicorn-37793.exe (PID: 12536)
- Unicorn-1337.exe (PID: 12576)
- Unicorn-18087.exe (PID: 12584)
- Unicorn-63034.exe (PID: 12384)
- Unicorn-30064.exe (PID: 12444)
- Unicorn-16329.exe (PID: 12436)
- Unicorn-3522.exe (PID: 12660)
- Unicorn-6656.exe (PID: 12636)
- Unicorn-37207.exe (PID: 12692)
- Unicorn-7881.exe (PID: 12748)
- Unicorn-61057.exe (PID: 12888)
- Unicorn-31722.exe (PID: 12880)
- Unicorn-61336.exe (PID: 12916)
- Unicorn-27673.exe (PID: 12936)
- Unicorn-27747.exe (PID: 12760)
- Unicorn-56890.exe (PID: 12768)
- Unicorn-61441.exe (PID: 12856)
- Unicorn-39537.exe (PID: 13036)
- Unicorn-38769.exe (PID: 13132)
- Unicorn-32903.exe (PID: 13140)
- Unicorn-9295.exe (PID: 13112)
- Unicorn-44232.exe (PID: 12956)
- Unicorn-14544.exe (PID: 12948)
- Unicorn-5074.exe (PID: 13240)
- Unicorn-17392.exe (PID: 13300)
- Unicorn-2121.exe (PID: 13188)
- Unicorn-21987.exe (PID: 13196)
- Unicorn-50746.exe (PID: 13232)
- Unicorn-52282.exe (PID: 4284)
- Unicorn-17031.exe (PID: 6248)
- Unicorn-19225.exe (PID: 1184)
- Unicorn-3111.exe (PID: 6512)
- Unicorn-19225.exe (PID: 7020)
- Unicorn-5415.exe (PID: 13428)
- Unicorn-54586.exe (PID: 13376)
- Unicorn-11929.exe (PID: 13392)
- Unicorn-8192.exe (PID: 13476)
- Unicorn-17056.exe (PID: 13468)
- Unicorn-49418.exe (PID: 13520)
- Unicorn-1945.exe (PID: 13568)
- Unicorn-1945.exe (PID: 13584)
- Unicorn-26816.exe (PID: 13652)
- Unicorn-29831.exe (PID: 13664)
- Unicorn-16183.exe (PID: 13724)
- Unicorn-61409.exe (PID: 13828)
- Unicorn-37882.exe (PID: 13796)
- Unicorn-29831.exe (PID: 13668)
- Unicorn-31751.exe (PID: 13788)
- Unicorn-58609.exe (PID: 13852)
- Unicorn-64040.exe (PID: 13936)
- Unicorn-18531.exe (PID: 13812)
- Unicorn-1737.exe (PID: 13836)
- Unicorn-10912.exe (PID: 13972)
- Unicorn-1648.exe (PID: 14076)
- Unicorn-64040.exe (PID: 13940)
- Unicorn-5047.exe (PID: 14008)
- Unicorn-47473.exe (PID: 14100)
- Unicorn-48280.exe (PID: 13800)
- Unicorn-1737.exe (PID: 13844)
- Unicorn-64040.exe (PID: 13952)
- Unicorn-6583.exe (PID: 14156)
- Unicorn-12448.exe (PID: 14168)
- Unicorn-58442.exe (PID: 14188)
- Unicorn-4313.exe (PID: 14148)
- Unicorn-0.exe (PID: 14232)
- Unicorn-11464.exe (PID: 14384)
- Unicorn-2816.exe (PID: 14248)
- Unicorn-43777.exe (PID: 14328)
- Unicorn-49777.exe (PID: 14276)
- Unicorn-35161.exe (PID: 14320)
- Unicorn-60954.exe (PID: 14268)
- Unicorn-59153.exe (PID: 14408)
- Unicorn-46465.exe (PID: 14376)
- Unicorn-24944.exe (PID: 14240)
- Unicorn-39448.exe (PID: 14196)
- Unicorn-12064.exe (PID: 14256)
- Unicorn-10528.exe (PID: 14340)
- Unicorn-64632.exe (PID: 14472)
- Unicorn-1696.exe (PID: 14480)
- Unicorn-31161.exe (PID: 14528)
- Unicorn-32314.exe (PID: 14432)
- Unicorn-31161.exe (PID: 14548)
- Unicorn-18032.exe (PID: 14512)
- Unicorn-18032.exe (PID: 14504)
- Unicorn-59777.exe (PID: 14724)
- Unicorn-17321.exe (PID: 14604)
- Unicorn-50129.exe (PID: 14596)
- Unicorn-33984.exe (PID: 14588)
- Unicorn-17159.exe (PID: 14636)
- Unicorn-2656.exe (PID: 14708)
- Unicorn-31440.exe (PID: 14832)
- Unicorn-52049.exe (PID: 14668)
- Unicorn-52049.exe (PID: 14684)
- Unicorn-19184.exe (PID: 14740)
- Unicorn-52049.exe (PID: 14676)
- Unicorn-5993.exe (PID: 14764)
- Unicorn-9568.exe (PID: 14960)
- Unicorn-37571.exe (PID: 14840)
- Unicorn-20659.exe (PID: 14944)
- Unicorn-39168.exe (PID: 15000)
- Unicorn-39168.exe (PID: 14992)
- Unicorn-64113.exe (PID: 14868)
- Unicorn-50378.exe (PID: 14860)
- Unicorn-1177.exe (PID: 14888)
- Unicorn-40321.exe (PID: 14852)
- Unicorn-39114.exe (PID: 15204)
- Unicorn-64545.exe (PID: 15112)
- Unicorn-9095.exe (PID: 15156)
- Unicorn-28416.exe (PID: 15136)
- Unicorn-44945.exe (PID: 15120)
- Unicorn-58680.exe (PID: 15104)
- Unicorn-11312.exe (PID: 15196)
- Unicorn-27840.exe (PID: 15188)
- Unicorn-128.exe (PID: 15076)
- Unicorn-52904.exe (PID: 14984)
- Unicorn-39168.exe (PID: 15008)
- Unicorn-19241.exe (PID: 15024)
- Unicorn-62947.exe (PID: 15244)
- Unicorn-40120.exe (PID: 15300)
- Unicorn-42920.exe (PID: 15308)
- Unicorn-7232.exe (PID: 15272)
- Unicorn-13040.exe (PID: 15284)
- Unicorn-64099.exe (PID: 2596)
- Unicorn-18032.exe (PID: 15344)
- Unicorn-63777.exe (PID: 8876)
- Unicorn-60792.exe (PID: 2384)
- Unicorn-30720.exe (PID: 15376)
- Unicorn-50321.exe (PID: 15384)
The sample compiled with chinese language support
- 1 (594).exe (PID: 2284)
- Unicorn-905.exe (PID: 8912)
- Unicorn-521.exe (PID: 8976)
- Unicorn-63722.exe (PID: 7724)
- Unicorn-14034.exe (PID: 8960)
- Unicorn-27255.exe (PID: 8928)
- Unicorn-11495.exe (PID: 3300)
- Unicorn-33680.exe (PID: 7752)
- Unicorn-36001.exe (PID: 7528)
- Unicorn-60090.exe (PID: 4428)
- Unicorn-52705.exe (PID: 7384)
- Unicorn-2944.exe (PID: 8816)
- Unicorn-10592.exe (PID: 5972)
- Unicorn-53354.exe (PID: 2772)
- Unicorn-24144.exe (PID: 4112)
- Unicorn-22410.exe (PID: 1388)
- Unicorn-3017.exe (PID: 8820)
- Unicorn-37978.exe (PID: 8212)
- Unicorn-45585.exe (PID: 8080)
- Unicorn-41985.exe (PID: 8228)
- Unicorn-62458.exe (PID: 7332)
- Unicorn-43937.exe (PID: 7884)
- Unicorn-56136.exe (PID: 4336)
- Unicorn-27226.exe (PID: 8324)
- Unicorn-28611.exe (PID: 7868)
- Unicorn-44330.exe (PID: 8268)
- Unicorn-35155.exe (PID: 8200)
- Unicorn-50385.exe (PID: 7616)
- Unicorn-3664.exe (PID: 8356)
- Unicorn-23312.exe (PID: 8340)
- Unicorn-48979.exe (PID: 4188)
- Unicorn-15792.exe (PID: 8136)
- Unicorn-62435.exe (PID: 8096)
- Unicorn-44554.exe (PID: 4040)
- Unicorn-63418.exe (PID: 7912)
- Unicorn-22041.exe (PID: 7284)
- Unicorn-63546.exe (PID: 8396)
- Unicorn-26474.exe (PID: 1452)
- Unicorn-3250.exe (PID: 6876)
- Unicorn-58051.exe (PID: 1244)
- Unicorn-20592.exe (PID: 8476)
- Unicorn-56426.exe (PID: 8160)
- Unicorn-27475.exe (PID: 8424)
- Unicorn-24137.exe (PID: 8416)
- Unicorn-23753.exe (PID: 8448)
- Unicorn-18288.exe (PID: 856)
- Unicorn-44289.exe (PID: 7836)
- Unicorn-45258.exe (PID: 2984)
- Unicorn-45322.exe (PID: 6516)
- Unicorn-47594.exe (PID: 8524)
- Unicorn-10578.exe (PID: 9236)
- Unicorn-24615.exe (PID: 7936)
- Unicorn-35273.exe (PID: 7228)
- Unicorn-36000.exe (PID: 8644)
- Unicorn-53043.exe (PID: 8608)
- Unicorn-24183.exe (PID: 9220)
- Unicorn-37226.exe (PID: 8576)
- Unicorn-55274.exe (PID: 5544)
- Unicorn-19145.exe (PID: 8680)
- Unicorn-45690.exe (PID: 9268)
- Unicorn-32807.exe (PID: 5892)
- Unicorn-2409.exe (PID: 5360)
- Unicorn-21689.exe (PID: 7412)
- Unicorn-45594.exe (PID: 9296)
- Unicorn-32595.exe (PID: 9316)
- Unicorn-36425.exe (PID: 7336)
- Unicorn-10489.exe (PID: 4892)
- Unicorn-7474.exe (PID: 7288)
- Unicorn-43354.exe (PID: 1132)
- Unicorn-36425.exe (PID: 2852)
- Unicorn-17987.exe (PID: 9364)
- Unicorn-59041.exe (PID: 7216)
- Unicorn-64120.exe (PID: 7592)
- Unicorn-49505.exe (PID: 7984)
- Unicorn-63274.exe (PID: 9400)
- Unicorn-55969.exe (PID: 6872)
- Unicorn-50161.exe (PID: 2088)
- Unicorn-36425.exe (PID: 7300)
- Unicorn-18362.exe (PID: 7532)
- Unicorn-56810.exe (PID: 5376)
- Unicorn-17290.exe (PID: 7964)
- Unicorn-29904.exe (PID: 7992)
- Unicorn-47994.exe (PID: 8840)
- Unicorn-8455.exe (PID: 7432)
- Unicorn-18362.exe (PID: 7568)
- Unicorn-14585.exe (PID: 7440)
- Unicorn-61320.exe (PID: 7600)
- Unicorn-48211.exe (PID: 7584)
- Unicorn-11730.exe (PID: 8884)
- Unicorn-21242.exe (PID: 7576)
- Unicorn-64522.exe (PID: 8864)
- Unicorn-44979.exe (PID: 8832)
- Unicorn-10592.exe (PID: 9464)
- Unicorn-889.exe (PID: 8188)
- Unicorn-13520.exe (PID: 8936)
- Unicorn-62659.exe (PID: 9000)
- Unicorn-62705.exe (PID: 8176)
- Unicorn-48954.exe (PID: 9064)
- Unicorn-15898.exe (PID: 9116)
- Unicorn-60538.exe (PID: 7192)
- Unicorn-48954.exe (PID: 9056)
- Unicorn-5241.exe (PID: 9488)
- Unicorn-32083.exe (PID: 7696)
- Unicorn-48504.exe (PID: 9496)
- Unicorn-53176.exe (PID: 1324)
- Unicorn-61256.exe (PID: 4696)
- Unicorn-796.exe (PID: 9176)
- Unicorn-41921.exe (PID: 9144)
- Unicorn-10992.exe (PID: 7864)
- Unicorn-40602.exe (PID: 9528)
- Unicorn-43946.exe (PID: 9212)
- Unicorn-18186.exe (PID: 7496)
- Unicorn-50298.exe (PID: 3956)
- Unicorn-28499.exe (PID: 7800)
- Unicorn-63338.exe (PID: 7920)
- Unicorn-11897.exe (PID: 7392)
- Unicorn-36304.exe (PID: 9580)
- Unicorn-3077.exe (PID: 9620)
- Unicorn-14482.exe (PID: 8732)
- Unicorn-16442.exe (PID: 8056)
- Unicorn-44899.exe (PID: 9656)
- Unicorn-63482.exe (PID: 9720)
- Unicorn-61235.exe (PID: 9648)
- Unicorn-31655.exe (PID: 8244)
- Unicorn-17920.exe (PID: 8220)
- Unicorn-40800.exe (PID: 8280)
- Unicorn-14832.exe (PID: 7876)
- Unicorn-14473.exe (PID: 9728)
- Unicorn-28186.exe (PID: 8380)
- Unicorn-49450.exe (PID: 9772)
- Unicorn-48008.exe (PID: 8560)
- Unicorn-31386.exe (PID: 9680)
- Unicorn-29642.exe (PID: 9808)
- Unicorn-45537.exe (PID: 9824)
- Unicorn-27411.exe (PID: 9752)
- Unicorn-5977.exe (PID: 9964)
- Unicorn-64058.exe (PID: 9668)
- Unicorn-43128.exe (PID: 9788)
- Unicorn-1712.exe (PID: 9344)
- Unicorn-29907.exe (PID: 9816)
- Unicorn-37817.exe (PID: 5392)
- Unicorn-7474.exe (PID: 6480)
- Unicorn-12288.exe (PID: 9888)
- Unicorn-50385.exe (PID: 7608)
- Unicorn-44280.exe (PID: 9980)
- Unicorn-7474.exe (PID: 5176)
- Unicorn-17290.exe (PID: 7956)
- Unicorn-36762.exe (PID: 9424)
- Unicorn-33840.exe (PID: 5608)
- Unicorn-42744.exe (PID: 9844)
- Unicorn-28432.exe (PID: 9896)
- Unicorn-41752.exe (PID: 9188)
- Unicorn-17050.exe (PID: 8968)
- Unicorn-49914.exe (PID: 8904)
- Unicorn-48298.exe (PID: 9904)
- Unicorn-44442.exe (PID: 9944)
- Unicorn-33306.exe (PID: 10060)
- Unicorn-29776.exe (PID: 10032)
- Unicorn-30320.exe (PID: 10080)
- Unicorn-40872.exe (PID: 8032)
- Unicorn-18496.exe (PID: 1312)
- Unicorn-22289.exe (PID: 10108)
- Unicorn-50218.exe (PID: 10004)
- Unicorn-39907.exe (PID: 10152)
- Unicorn-7474.exe (PID: 7304)
- Unicorn-27930.exe (PID: 10192)
- Unicorn-28896.exe (PID: 9092)
- Unicorn-63297.exe (PID: 3884)
- Unicorn-24147.exe (PID: 732)
- Unicorn-60026.exe (PID: 10212)
- Unicorn-23632.exe (PID: 10232)
- Unicorn-59706.exe (PID: 4980)
- Unicorn-6850.exe (PID: 10160)
- Unicorn-34090.exe (PID: 9420)
- Unicorn-42817.exe (PID: 5244)
- Unicorn-42049.exe (PID: 3024)
- Unicorn-17235.exe (PID: 10300)
- Unicorn-4489.exe (PID: 10264)
- Unicorn-31328.exe (PID: 872)
- Unicorn-62721.exe (PID: 8952)
Reads security settings of Internet Explorer
- BackgroundTransferHost.exe (PID: 7512)
- BackgroundTransferHost.exe (PID: 7844)
- BackgroundTransferHost.exe (PID: 7724)
- BackgroundTransferHost.exe (PID: 8188)
- BackgroundTransferHost.exe (PID: 6676)
Creates files or folders in the user directory
- BackgroundTransferHost.exe (PID: 7724)
Checks proxy server information
- BackgroundTransferHost.exe (PID: 7724)
Reads the software policy settings
- BackgroundTransferHost.exe (PID: 7724)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProdctVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
574
Monitored processes
443
Malicious processes
69
Suspicious processes
57
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 732 | C:\Users\admin\AppData\Local\Temp\Unicorn-24147.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-24147.exe | Unicorn-24137.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 744 | C:\Users\admin\AppData\Local\Temp\Unicorn-15696.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-15696.exe | — | Unicorn-18496.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 856 | C:\Users\admin\AppData\Local\Temp\Unicorn-18288.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-18288.exe | Unicorn-45322.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 872 | C:\Users\admin\AppData\Local\Temp\Unicorn-31328.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-31328.exe | Unicorn-44289.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1132 | C:\Users\admin\AppData\Local\Temp\Unicorn-43354.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-43354.exe | Unicorn-61320.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1184 | C:\Users\admin\AppData\Local\Temp\Unicorn-19225.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-19225.exe | — | Unicorn-53043.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1244 | C:\Users\admin\AppData\Local\Temp\Unicorn-58051.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-58051.exe | Unicorn-62705.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1272 | C:\Users\admin\AppData\Local\Temp\Unicorn-12105.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-12105.exe | — | Unicorn-37978.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1312 | C:\Users\admin\AppData\Local\Temp\Unicorn-18496.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-18496.exe | Unicorn-62458.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1324 | C:\Users\admin\AppData\Local\Temp\Unicorn-53176.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53176.exe | Unicorn-8455.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
10 403
Read events
10 388
Write events
15
Delete events
0
Modification events
| (PID) Process: | (7512) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7512) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7512) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7724) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7724) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7724) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (7844) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (7844) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (7844) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (8188) BackgroundTransferHost.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
Executable files
833
Suspicious files
5
Text files
0
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 7724 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\889e5850-60a2-422e-95cb-1f635ddbade8.down_data | — | |
MD5:— | SHA256:— | |||
| 4040 | Unicorn-44554.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-11897.exe | executable | |
MD5:F9C50C889B05FE047B759EC8AF97BEC6 | SHA256:6FD658E4E76A2D659D56FCB78AA1AB3974A6329D8462B771DBFA04B5963A0D52 | |||
| 6516 | Unicorn-45322.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-44554.exe | executable | |
MD5:C82CE77C5393972349538C0C9303BABF | SHA256:ED513E73A8B679FA49C84865AECBF771D035AFCA9586BF85552B2B8C6798D98A | |||
| 2284 | 1 (594).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-45322.exe | executable | |
MD5:6CDC171043EA88C90C655C9D1DC0915F | SHA256:DD3D72CA249466F2CCA005FE8E3200C620CF9B685F59950D48EDCD5B3A2622AF | |||
| 7724 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10D | binary | |
MD5:4872BABAF39AA62B8D32695EBB7E9173 | SHA256:2EE85DF86EE29BBEB3DCA81AA29B6DE204F605A2769B84C728A329178A2D0999 | |||
| 2284 | 1 (594).exe | C:\Users\admin\AppData\Local\Temp\Unicorn-8455.exe | executable | |
MD5:DDEB067021C6271989E5D83D725E0D92 | SHA256:6B8339B90086C8585A88E781D499B53E5A6EABFE268AE66F1AE1328725868AFB | |||
| 7724 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10D | binary | |
MD5:2739310F09BE60E01AC154F978D48BCD | SHA256:88A41A7024484DAFDCA09B09011E9F15B57A015B0AD2F25884FF7DDC6B3F73F2 | |||
| 7724 | BackgroundTransferHost.exe | C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\889e5850-60a2-422e-95cb-1f635ddbade8.d61b935f-8716-4000-8f4e-8e96f27a2bf2.down_meta | binary | |
MD5:55F546AFC338B2C734B34985AC9B506A | SHA256:EF1D5F8421EC54907E860FBD16B00A7E37B7A3273A04AF75E4BD5FF79845F7FD | |||
| 6516 | Unicorn-45322.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-21689.exe | executable | |
MD5:40FDE4F7EA790D83D698EF041E7945E8 | SHA256:D2693C80C59C96E54FCD1E1531865B959115164672CEBC8147FE76BAAD21D12D | |||
| 5392 | Unicorn-37817.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-14585.exe | executable | |
MD5:A28728C59CBA213C93FED3ECDE9B3074 | SHA256:250635E5CF0E9672D9101FE06E531DCCB06F1AACEF46B9030FDB0E018C331A0D | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
24
DNS requests
16
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
— | — | GET | 200 | 23.53.40.178:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6244 | backgroundTaskHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D | unknown | — | — | whitelisted |
8688 | SIHClient.exe | GET | 200 | 95.101.149.131:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
8688 | SIHClient.exe | GET | 200 | 95.101.149.131:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
7724 | BackgroundTransferHost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
— | — | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
— | — | 23.53.40.178:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
5496 | MoUsoCoreWorker.exe | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
3216 | svchost.exe | 40.113.110.67:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 20.190.160.3:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
6244 | backgroundTaskHost.exe | 20.31.169.57:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
6244 | backgroundTaskHost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
7724 | BackgroundTransferHost.exe | 104.126.37.128:443 | www.bing.com | Akamai International B.V. | DE | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
google.com |
| whitelisted |
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
www.bing.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |