File name:

1 (342)

Full analysis: https://app.any.run/tasks/4e2eef27-5ed8-43ea-aff1-8bace087ee4f
Verdict: Malicious activity
Analysis date: March 24, 2025, 20:45:18
OS: Windows 10 Professional (build: 19044, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections
MD5:

7ADDCF7F4A1B39E6D34D460A6AA85EB0

SHA1:

DFD6EB30E36D260C4FC001D8F06A2203F1197B61

SHA256:

972402E3A315F65EA8984AB554323BF36B912E1FE170555F71374803CD5071DA

SSDEEP:

3072:hiS3qcE/pDW8V6pEDkSNW84266FuLEmsfpfu4hwoLcBuIR:hiS3qcExDOiYSs28ozfpfu4hwoLcBuI

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Starts itself from another location

      • Unicorn-56699.exe (PID: 7408)
      • Unicorn-2262.exe (PID: 6872)
      • 1 (342).exe (PID: 4620)
      • Unicorn-61338.exe (PID: 7428)
      • Unicorn-41323.exe (PID: 7468)
      • Unicorn-62490.exe (PID: 7488)
      • Unicorn-63781.exe (PID: 7524)
      • Unicorn-53300.exe (PID: 7688)
      • Unicorn-11712.exe (PID: 7716)
      • Unicorn-5582.exe (PID: 7708)
      • Unicorn-32133.exe (PID: 7660)
      • Unicorn-40855.exe (PID: 7764)
      • Unicorn-60721.exe (PID: 7772)
      • Unicorn-36553.exe (PID: 6592)
      • Unicorn-54281.exe (PID: 7628)
      • Unicorn-21508.exe (PID: 7652)
      • Unicorn-27639.exe (PID: 7680)
      • Unicorn-3134.exe (PID: 7872)
      • Unicorn-46113.exe (PID: 7924)
      • Unicorn-32277.exe (PID: 7956)
      • Unicorn-50097.exe (PID: 7596)
      • Unicorn-43213.exe (PID: 7940)
      • Unicorn-29730.exe (PID: 7780)
      • Unicorn-14810.exe (PID: 5260)
      • Unicorn-757.exe (PID: 7504)
      • Unicorn-59517.exe (PID: 6044)
      • Unicorn-57471.exe (PID: 7448)
      • Unicorn-10508.exe (PID: 7520)
      • Unicorn-37535.exe (PID: 7460)
      • Unicorn-64732.exe (PID: 8060)
      • Unicorn-51733.exe (PID: 8084)
      • Unicorn-51468.exe (PID: 8116)
      • Unicorn-7171.exe (PID: 8008)
      • Unicorn-39481.exe (PID: 8068)
      • Unicorn-41427.exe (PID: 7192)
      • Unicorn-10700.exe (PID: 2564)
      • Unicorn-60456.exe (PID: 7268)
      • Unicorn-48806.exe (PID: 7844)
      • Unicorn-12738.exe (PID: 5008)
      • Unicorn-59709.exe (PID: 7276)
      • Unicorn-24359.exe (PID: 7860)
      • Unicorn-9938.exe (PID: 7228)
      • Unicorn-15386.exe (PID: 7932)
      • Unicorn-59709.exe (PID: 6964)
      • Unicorn-32802.exe (PID: 1164)
      • Unicorn-13201.exe (PID: 5504)
      • Unicorn-59709.exe (PID: 7292)
      • Unicorn-7601.exe (PID: 4452)
      • Unicorn-13201.exe (PID: 3884)
      • Unicorn-55625.exe (PID: 7272)
      • Unicorn-59709.exe (PID: 4336)
      • Unicorn-43928.exe (PID: 3140)
      • Unicorn-23721.exe (PID: 1272)
      • Unicorn-7939.exe (PID: 5176)
      • Unicorn-38111.exe (PID: 4212)
      • Unicorn-11468.exe (PID: 5984)
      • Unicorn-15287.exe (PID: 5964)
      • Unicorn-42195.exe (PID: 632)
      • Unicorn-36065.exe (PID: 7348)
      • Unicorn-65137.exe (PID: 208)
      • Unicorn-11852.exe (PID: 668)
      • Unicorn-14545.exe (PID: 7548)
      • Unicorn-13990.exe (PID: 7824)
      • Unicorn-36911.exe (PID: 8176)
      • Unicorn-62813.exe (PID: 5508)
      • Unicorn-6106.exe (PID: 8228)
      • Unicorn-61437.exe (PID: 8160)
      • Unicorn-48178.exe (PID: 8268)
      • Unicorn-61224.exe (PID: 6080)
      • Unicorn-8728.exe (PID: 8284)
      • Unicorn-10700.exe (PID: 4688)
      • Unicorn-37871.exe (PID: 8348)
      • Unicorn-4452.exe (PID: 8400)
      • Unicorn-1115.exe (PID: 8332)
      • Unicorn-51707.exe (PID: 8316)
      • Unicorn-55691.exe (PID: 8368)
      • Unicorn-61821.exe (PID: 8376)
      • Unicorn-59709.exe (PID: 4200)
      • Unicorn-10674.exe (PID: 8428)
      • Unicorn-14758.exe (PID: 8452)
      • Unicorn-29703.exe (PID: 8468)
      • Unicorn-18843.exe (PID: 8536)
      • Unicorn-41136.exe (PID: 8420)
      • Unicorn-49569.exe (PID: 8480)
      • Unicorn-24873.exe (PID: 8664)
      • Unicorn-47986.exe (PID: 8628)
      • Unicorn-5007.exe (PID: 8604)
      • Unicorn-20896.exe (PID: 8572)
      • Unicorn-24873.exe (PID: 8548)
      • Unicorn-18843.exe (PID: 8500)
      • Unicorn-47986.exe (PID: 8620)
      • Unicorn-38998.exe (PID: 8716)
      • Unicorn-26936.exe (PID: 2140)
      • Unicorn-59451.exe (PID: 8612)
      • Unicorn-49569.exe (PID: 8476)
      • Unicorn-53653.exe (PID: 8516)
      • Unicorn-47986.exe (PID: 8636)
      • Unicorn-61721.exe (PID: 8736)
      • Unicorn-15386.exe (PID: 7976)
      • Unicorn-52091.exe (PID: 8860)
      • Unicorn-51991.exe (PID: 8876)
      • Unicorn-38255.exe (PID: 8884)
      • Unicorn-29341.exe (PID: 9048)
      • Unicorn-54037.exe (PID: 9012)
      • Unicorn-48007.exe (PID: 8832)
      • Unicorn-54037.exe (PID: 9008)
      • Unicorn-17643.exe (PID: 9108)
      • Unicorn-33516.exe (PID: 9120)
      • Unicorn-13559.exe (PID: 9072)
      • Unicorn-19035.exe (PID: 9212)
      • Unicorn-9042.exe (PID: 4180)
      • Unicorn-19035.exe (PID: 6972)
      • Unicorn-2265.exe (PID: 7252)
      • Unicorn-22777.exe (PID: 5304)
      • Unicorn-36811.exe (PID: 7256)
      • Unicorn-58243.exe (PID: 9232)
      • Unicorn-17210.exe (PID: 8840)
      • Unicorn-60189.exe (PID: 9348)
      • Unicorn-10525.exe (PID: 9260)
      • Unicorn-11944.exe (PID: 1128)
      • Unicorn-6249.exe (PID: 9384)
      • Unicorn-12571.exe (PID: 9244)
      • Unicorn-10241.exe (PID: 9368)
      • Unicorn-43155.exe (PID: 7340)
      • Unicorn-25186.exe (PID: 9484)
      • Unicorn-62135.exe (PID: 9392)
      • Unicorn-9280.exe (PID: 9436)
      • Unicorn-61388.exe (PID: 9428)
      • Unicorn-12379.exe (PID: 9400)
      • Unicorn-37487.exe (PID: 4880)
      • Unicorn-48871.exe (PID: 9500)
      • Unicorn-45869.exe (PID: 8960)
      • Unicorn-33425.exe (PID: 9080)
      • Unicorn-8103.exe (PID: 9468)
      • Unicorn-45052.exe (PID: 9492)
      • Unicorn-8679.exe (PID: 9532)
      • Unicorn-1930.exe (PID: 8204)
      • Unicorn-41160.exe (PID: 1452)
      • Unicorn-20666.exe (PID: 9576)
      • Unicorn-55791.exe (PID: 8248)
      • Unicorn-44045.exe (PID: 9548)
      • Unicorn-20666.exe (PID: 9572)
      • Unicorn-60210.exe (PID: 9652)
      • Unicorn-58740.exe (PID: 9672)
      • Unicorn-12812.exe (PID: 8300)
      • Unicorn-14758.exe (PID: 8460)
      • Unicorn-29868.exe (PID: 9724)
      • Unicorn-18843.exe (PID: 8492)
      • Unicorn-33952.exe (PID: 9740)
      • Unicorn-53653.exe (PID: 8508)
      • Unicorn-37431.exe (PID: 8564)
      • Unicorn-47986.exe (PID: 8644)
      • Unicorn-46759.exe (PID: 9988)
      • Unicorn-40074.exe (PID: 10020)
      • Unicorn-64898.exe (PID: 8984)
      • Unicorn-33160.exe (PID: 9064)
      • Unicorn-28578.exe (PID: 9100)
      • Unicorn-34336.exe (PID: 10084)
      • Unicorn-47143.exe (PID: 10132)
      • Unicorn-2265.exe (PID: 7324)
      • Unicorn-19946.exe (PID: 10160)
      • Unicorn-34912.exe (PID: 10176)
      • Unicorn-34912.exe (PID: 10184)
      • Unicorn-37604.exe (PID: 10212)
      • Unicorn-47719.exe (PID: 10228)
      • Unicorn-20522.exe (PID: 4436)
      • Unicorn-59416.exe (PID: 9328)
      • Unicorn-34811.exe (PID: 10236)
      • Unicorn-41496.exe (PID: 5936)
      • Unicorn-52929.exe (PID: 8928)
      • Unicorn-56681.exe (PID: 9636)
      • Unicorn-20906.exe (PID: 10316)
      • Unicorn-12545.exe (PID: 10368)

    • Executable content was dropped or overwritten

      • 1 (342).exe (PID: 4620)
      • Unicorn-2262.exe (PID: 6872)
      • Unicorn-61338.exe (PID: 7428)
      • Unicorn-56699.exe (PID: 7408)
      • Unicorn-62490.exe (PID: 7488)
      • Unicorn-41323.exe (PID: 7468)
      • Unicorn-63781.exe (PID: 7524)
      • Unicorn-53300.exe (PID: 7688)
      • Unicorn-11712.exe (PID: 7716)
      • Unicorn-5582.exe (PID: 7708)
      • Unicorn-32133.exe (PID: 7660)
      • Unicorn-14810.exe (PID: 5260)
      • Unicorn-60721.exe (PID: 7772)
      • Unicorn-40855.exe (PID: 7764)
      • Unicorn-36553.exe (PID: 6592)
      • Unicorn-54281.exe (PID: 7628)
      • Unicorn-21508.exe (PID: 7652)
      • Unicorn-27639.exe (PID: 7680)
      • Unicorn-3134.exe (PID: 7872)
      • Unicorn-24359.exe (PID: 7860)
      • Unicorn-46113.exe (PID: 7924)
      • Unicorn-15386.exe (PID: 7976)
      • Unicorn-59517.exe (PID: 6044)
      • Unicorn-757.exe (PID: 7504)
      • Unicorn-57471.exe (PID: 7448)
      • Unicorn-10508.exe (PID: 7520)
      • Unicorn-37535.exe (PID: 7460)
      • Unicorn-64732.exe (PID: 8060)
      • Unicorn-51733.exe (PID: 8084)
      • Unicorn-51468.exe (PID: 8116)
      • Unicorn-7171.exe (PID: 8008)
      • Unicorn-39481.exe (PID: 8068)
      • Unicorn-41427.exe (PID: 7192)
      • Unicorn-10700.exe (PID: 2564)
      • Unicorn-10700.exe (PID: 4688)
      • Unicorn-60456.exe (PID: 7268)
      • Unicorn-12738.exe (PID: 5008)
      • Unicorn-59709.exe (PID: 7276)
      • Unicorn-59709.exe (PID: 4200)
      • Unicorn-55625.exe (PID: 7272)
      • Unicorn-48806.exe (PID: 7844)
      • Unicorn-59709.exe (PID: 6964)
      • Unicorn-15386.exe (PID: 7932)
      • Unicorn-7601.exe (PID: 4452)
      • Unicorn-59709.exe (PID: 7292)
      • Unicorn-43928.exe (PID: 3140)
      • Unicorn-50097.exe (PID: 7596)
      • Unicorn-7939.exe (PID: 5176)
      • Unicorn-23721.exe (PID: 1272)
      • Unicorn-38111.exe (PID: 4212)
      • Unicorn-61224.exe (PID: 6080)
      • Unicorn-65137.exe (PID: 208)
      • Unicorn-42195.exe (PID: 632)
      • Unicorn-11468.exe (PID: 5984)
      • Unicorn-11944.exe (PID: 1128)
      • Unicorn-11852.exe (PID: 668)
      • Unicorn-36911.exe (PID: 8176)
      • Unicorn-43155.exe (PID: 7340)
      • Unicorn-37487.exe (PID: 4880)
      • Unicorn-61437.exe (PID: 8160)
      • Unicorn-1930.exe (PID: 8204)
      • Unicorn-6106.exe (PID: 8228)
      • Unicorn-55791.exe (PID: 8248)
      • Unicorn-62813.exe (PID: 5508)
      • Unicorn-48178.exe (PID: 8268)
      • Unicorn-37871.exe (PID: 8348)
      • Unicorn-12812.exe (PID: 8300)
      • Unicorn-8728.exe (PID: 8284)
      • Unicorn-4452.exe (PID: 8400)
      • Unicorn-1115.exe (PID: 8332)
      • Unicorn-55691.exe (PID: 8368)
      • Unicorn-61821.exe (PID: 8376)
      • Unicorn-14758.exe (PID: 8452)
      • Unicorn-41136.exe (PID: 8420)
      • Unicorn-10674.exe (PID: 8428)
      • Unicorn-29703.exe (PID: 8468)
      • Unicorn-9938.exe (PID: 7228)
      • Unicorn-18843.exe (PID: 8536)
      • Unicorn-49569.exe (PID: 8480)
      • Unicorn-24873.exe (PID: 8664)
      • Unicorn-32802.exe (PID: 1164)
      • Unicorn-47986.exe (PID: 8628)
      • Unicorn-5007.exe (PID: 8604)
      • Unicorn-14758.exe (PID: 8460)
      • Unicorn-59709.exe (PID: 4336)
      • Unicorn-18843.exe (PID: 8492)
      • Unicorn-53653.exe (PID: 8508)
      • Unicorn-32277.exe (PID: 7956)
      • Unicorn-37431.exe (PID: 8564)
      • Unicorn-59451.exe (PID: 8612)
      • Unicorn-61721.exe (PID: 8736)
      • Unicorn-38998.exe (PID: 8716)
      • Unicorn-26936.exe (PID: 2140)
      • Unicorn-18843.exe (PID: 8500)
      • Unicorn-47986.exe (PID: 8636)
      • Unicorn-49569.exe (PID: 8476)
      • Unicorn-13201.exe (PID: 5504)
      • Unicorn-13201.exe (PID: 3884)
      • Unicorn-43213.exe (PID: 7940)
      • Unicorn-51991.exe (PID: 8876)
      • Unicorn-52091.exe (PID: 8860)
      • Unicorn-48007.exe (PID: 8832)
      • Unicorn-29730.exe (PID: 7780)
      • Unicorn-38255.exe (PID: 8884)
      • Unicorn-29341.exe (PID: 9048)
      • Unicorn-28578.exe (PID: 9100)
      • Unicorn-33516.exe (PID: 9120)
      • Unicorn-13559.exe (PID: 9072)
      • Unicorn-54037.exe (PID: 9008)
      • Unicorn-64898.exe (PID: 8984)
      • Unicorn-36065.exe (PID: 7348)
      • Unicorn-45869.exe (PID: 8960)
      • Unicorn-9042.exe (PID: 4180)
      • Unicorn-19035.exe (PID: 6972)
      • Unicorn-41160.exe (PID: 1452)
      • Unicorn-10525.exe (PID: 9260)
      • Unicorn-36811.exe (PID: 7256)
      • Unicorn-2265.exe (PID: 7324)
      • Unicorn-60189.exe (PID: 9348)
      • Unicorn-12571.exe (PID: 9244)
      • Unicorn-43106.exe (PID: 9320)
      • Unicorn-14545.exe (PID: 7548)
      • Unicorn-6249.exe (PID: 9384)
      • Unicorn-10241.exe (PID: 9368)
      • Unicorn-61388.exe (PID: 9428)
      • Unicorn-9280.exe (PID: 9436)
      • Unicorn-8103.exe (PID: 9468)
      • Unicorn-12379.exe (PID: 9400)
      • Unicorn-62135.exe (PID: 9392)
      • Unicorn-45052.exe (PID: 9492)
      • Unicorn-48871.exe (PID: 9500)
      • Unicorn-8679.exe (PID: 9532)
      • Unicorn-44045.exe (PID: 9548)
      • Unicorn-20666.exe (PID: 9576)
      • Unicorn-20666.exe (PID: 9572)
      • Unicorn-60210.exe (PID: 9652)
      • Unicorn-56681.exe (PID: 9636)
      • Unicorn-51707.exe (PID: 8316)
      • Unicorn-58740.exe (PID: 9672)
      • Unicorn-29868.exe (PID: 9724)
      • Unicorn-33952.exe (PID: 9740)
      • Unicorn-20896.exe (PID: 8572)
      • Unicorn-47986.exe (PID: 8620)
      • Unicorn-53653.exe (PID: 8516)
      • Unicorn-24873.exe (PID: 8548)
      • Unicorn-46759.exe (PID: 9988)
      • Unicorn-40074.exe (PID: 10020)
      • Unicorn-33160.exe (PID: 9064)
      • Unicorn-17643.exe (PID: 9108)
      • Unicorn-34336.exe (PID: 10084)
      • Unicorn-47143.exe (PID: 10132)
      • Unicorn-2265.exe (PID: 7252)
      • Unicorn-19946.exe (PID: 10160)
      • Unicorn-58243.exe (PID: 9232)
      • Unicorn-34912.exe (PID: 10176)
      • Unicorn-34912.exe (PID: 10184)
      • Unicorn-37604.exe (PID: 10212)
      • Unicorn-33425.exe (PID: 9080)
      • Unicorn-25186.exe (PID: 9484)
      • Unicorn-47719.exe (PID: 10228)
      • Unicorn-20522.exe (PID: 4436)
      • Unicorn-59416.exe (PID: 9328)
      • Unicorn-34811.exe (PID: 10236)
      • Unicorn-41496.exe (PID: 5936)
      • Unicorn-52929.exe (PID: 8928)
      • Unicorn-35850.exe (PID: 10344)
      • Unicorn-20906.exe (PID: 10316)
      • Unicorn-12545.exe (PID: 10368)
      • Unicorn-18960.exe (PID: 10280)
      • Unicorn-47356.exe (PID: 10452)
      • Unicorn-20714.exe (PID: 10460)
      • Unicorn-15287.exe (PID: 5964)
      • Unicorn-22777.exe (PID: 5304)
      • Unicorn-47986.exe (PID: 8644)
      • Unicorn-53578.exe (PID: 10396)
      • Unicorn-7070.exe (PID: 10424)
      • Unicorn-13990.exe (PID: 7824)
      • Unicorn-13121.exe (PID: 10548)
      • Unicorn-4953.exe (PID: 10484)
      • Unicorn-4191.exe (PID: 10532)
      • Unicorn-39764.exe (PID: 10520)
      • Unicorn-58793.exe (PID: 10540)
      • Unicorn-35680.exe (PID: 10504)
      • Unicorn-47932.exe (PID: 10664)
      • Unicorn-45886.exe (PID: 10696)
      • Unicorn-23327.exe (PID: 10708)
      • Unicorn-32150.exe (PID: 10688)
      • Unicorn-35580.exe (PID: 10600)
      • Unicorn-52016.exe (PID: 10760)
      • Unicorn-45794.exe (PID: 10628)
      • Unicorn-9592.exe (PID: 10716)
      • Unicorn-677.exe (PID: 10748)
      • Unicorn-52016.exe (PID: 10736)
      • Unicorn-52571.exe (PID: 10608)
      • Unicorn-15067.exe (PID: 10868)
      • Unicorn-46925.exe (PID: 11068)
      • Unicorn-4761.exe (PID: 10784)
      • Unicorn-10883.exe (PID: 10996)
      • Unicorn-52016.exe (PID: 10728)
      • Unicorn-21652.exe (PID: 10956)
      • Unicorn-47932.exe (PID: 10656)
      • Unicorn-44211.exe (PID: 10940)
      • Unicorn-23236.exe (PID: 10904)
      • Unicorn-57085.exe (PID: 11012)
      • Unicorn-988.exe (PID: 11088)
      • Unicorn-62685.exe (PID: 11004)
      • Unicorn-57860.exe (PID: 11080)
      • Unicorn-4761.exe (PID: 10776)
      • Unicorn-20282.exe (PID: 11136)
      • Unicorn-54037.exe (PID: 9012)
      • Unicorn-20282.exe (PID: 11132)
      • Unicorn-9513.exe (PID: 11184)
      • Unicorn-23135.exe (PID: 11060)
      • Unicorn-7283.exe (PID: 11220)
      • Unicorn-19035.exe (PID: 9212)
      • Unicorn-3754.exe (PID: 11304)
      • Unicorn-8845.exe (PID: 10812)
      • Unicorn-25977.exe (PID: 11044)
      • Unicorn-45721.exe (PID: 11364)
      • Unicorn-27704.exe (PID: 11320)
      • Unicorn-38486.exe (PID: 11388)
      • Unicorn-35488.exe (PID: 10796)
      • Unicorn-28280.exe (PID: 11444)
      • Unicorn-61699.exe (PID: 11416)
      • Unicorn-17210.exe (PID: 8840)
      • Unicorn-3583.exe (PID: 11476)
      • Unicorn-15067.exe (PID: 10864)
      • Unicorn-28280.exe (PID: 11436)

    • Executes application which crashes

      • Unicorn-290.exe (PID: 7504)

  • INFO

    • Reads the computer name

      • Unicorn-2262.exe (PID: 6872)
      • Unicorn-56699.exe (PID: 7408)
      • Unicorn-61338.exe (PID: 7428)
      • 1 (342).exe (PID: 4620)
      • Unicorn-63781.exe (PID: 7524)
      • Unicorn-41323.exe (PID: 7468)
      • Unicorn-62490.exe (PID: 7488)
      • Unicorn-290.exe (PID: 7504)
      • Unicorn-32133.exe (PID: 7660)
      • Unicorn-40855.exe (PID: 7764)
      • Unicorn-11712.exe (PID: 7716)
      • Unicorn-5582.exe (PID: 7708)
      • Unicorn-60721.exe (PID: 7772)
      • Unicorn-29730.exe (PID: 7780)
      • Unicorn-53300.exe (PID: 7688)
      • Unicorn-36553.exe (PID: 6592)
      • Unicorn-48806.exe (PID: 7844)
      • Unicorn-54281.exe (PID: 7628)
      • Unicorn-3134.exe (PID: 7872)
      • Unicorn-24359.exe (PID: 7860)
      • Unicorn-15386.exe (PID: 7932)
      • Unicorn-32277.exe (PID: 7956)
      • Unicorn-43213.exe (PID: 7940)
      • Unicorn-27639.exe (PID: 7680)
      • Unicorn-15386.exe (PID: 7976)
      • Unicorn-57471.exe (PID: 7448)
      • Unicorn-757.exe (PID: 7504)
      • Unicorn-59517.exe (PID: 6044)
      • Unicorn-37535.exe (PID: 7460)
      • Unicorn-39481.exe (PID: 8068)
      • Unicorn-10700.exe (PID: 4688)
      • Unicorn-51733.exe (PID: 8084)
      • Unicorn-7171.exe (PID: 8008)
      • Unicorn-51468.exe (PID: 8116)
      • Unicorn-59709.exe (PID: 7276)
      • Unicorn-60456.exe (PID: 7268)
      • Unicorn-10700.exe (PID: 2564)
      • Unicorn-12738.exe (PID: 5008)
      • Unicorn-9938.exe (PID: 7228)
      • Unicorn-59709.exe (PID: 4200)
      • Unicorn-59709.exe (PID: 6964)
      • Unicorn-55625.exe (PID: 7272)
      • Unicorn-7601.exe (PID: 4452)
      • Unicorn-13201.exe (PID: 5504)
      • Unicorn-59709.exe (PID: 4336)
      • Unicorn-59709.exe (PID: 7292)
      • Unicorn-43928.exe (PID: 3140)
      • Unicorn-23721.exe (PID: 1272)
      • Unicorn-7939.exe (PID: 5176)
      • Unicorn-38111.exe (PID: 4212)
      • Unicorn-36065.exe (PID: 7348)
      • Unicorn-42195.exe (PID: 632)
      • Unicorn-11468.exe (PID: 5984)
      • Unicorn-13990.exe (PID: 7824)
      • Unicorn-11944.exe (PID: 1128)
      • Unicorn-43155.exe (PID: 7340)
      • Unicorn-15287.exe (PID: 5964)
      • Unicorn-37487.exe (PID: 4880)
      • Unicorn-62813.exe (PID: 5508)
      • Unicorn-1930.exe (PID: 8204)
      • Unicorn-6106.exe (PID: 8228)
      • Unicorn-55791.exe (PID: 8248)
      • Unicorn-48178.exe (PID: 8268)
      • Unicorn-8728.exe (PID: 8284)
      • Unicorn-37871.exe (PID: 8348)
      • Unicorn-12812.exe (PID: 8300)
      • Unicorn-51707.exe (PID: 8316)
      • Unicorn-1115.exe (PID: 8332)
      • Unicorn-10674.exe (PID: 8428)
      • Unicorn-55691.exe (PID: 8368)
      • Unicorn-29703.exe (PID: 8468)
      • Unicorn-49569.exe (PID: 8480)
      • Unicorn-24873.exe (PID: 8664)
      • Unicorn-14758.exe (PID: 8460)
      • Unicorn-47986.exe (PID: 8628)
      • Unicorn-47986.exe (PID: 8644)
      • Unicorn-14758.exe (PID: 8452)
      • Unicorn-49569.exe (PID: 8476)
      • Unicorn-53653.exe (PID: 8516)
      • Unicorn-61721.exe (PID: 8736)
      • Unicorn-38998.exe (PID: 8716)
      • Unicorn-47986.exe (PID: 8636)
      • Unicorn-24873.exe (PID: 8548)
      • Unicorn-37431.exe (PID: 8564)
      • Unicorn-47986.exe (PID: 8620)
      • Unicorn-18843.exe (PID: 8500)
      • Unicorn-52091.exe (PID: 8860)
      • Unicorn-51991.exe (PID: 8876)
      • Unicorn-54037.exe (PID: 9008)
      • Unicorn-33516.exe (PID: 9120)
      • Unicorn-13559.exe (PID: 9072)
      • Unicorn-48007.exe (PID: 8832)
      • Unicorn-38255.exe (PID: 8884)
      • Unicorn-29341.exe (PID: 9048)
      • Unicorn-45869.exe (PID: 8960)
      • Unicorn-9042.exe (PID: 4180)
      • Unicorn-41160.exe (PID: 1452)
      • Unicorn-19035.exe (PID: 9212)
      • Unicorn-2265.exe (PID: 7252)
      • Unicorn-10525.exe (PID: 9260)
      • Unicorn-36811.exe (PID: 7256)
      • Unicorn-2265.exe (PID: 7324)
      • Unicorn-43106.exe (PID: 9320)
      • Unicorn-58243.exe (PID: 9232)
      • Unicorn-6249.exe (PID: 9384)
      • Unicorn-12379.exe (PID: 9400)
      • Unicorn-25186.exe (PID: 9484)
      • Unicorn-8103.exe (PID: 9468)
      • Unicorn-48871.exe (PID: 9500)
      • Unicorn-45052.exe (PID: 9492)
      • Unicorn-8679.exe (PID: 9532)
      • Unicorn-20666.exe (PID: 9576)
      • Unicorn-44045.exe (PID: 9548)
      • Unicorn-20666.exe (PID: 9572)
      • Unicorn-33425.exe (PID: 9080)
      • Unicorn-31277.exe (PID: 12608)
      • Unicorn-56681.exe (PID: 9636)
      • Unicorn-29868.exe (PID: 9724)
      • Unicorn-33952.exe (PID: 9740)
      • Unicorn-58740.exe (PID: 9672)
      • Unicorn-46759.exe (PID: 9988)
      • Unicorn-34336.exe (PID: 10084)
      • Unicorn-47143.exe (PID: 10132)
      • Unicorn-34912.exe (PID: 10176)
      • Unicorn-37604.exe (PID: 10212)
      • Unicorn-47719.exe (PID: 10228)
      • Unicorn-59416.exe (PID: 9328)
      • Unicorn-41496.exe (PID: 5936)
      • Unicorn-20906.exe (PID: 10316)
      • Unicorn-35850.exe (PID: 10344)
      • Unicorn-53578.exe (PID: 10396)

    • Checks supported languages

      • Unicorn-61338.exe (PID: 7428)
      • Unicorn-2262.exe (PID: 6872)
      • Unicorn-56699.exe (PID: 7408)
      • 1 (342).exe (PID: 4620)
      • Unicorn-290.exe (PID: 7504)
      • Unicorn-41323.exe (PID: 7468)
      • Unicorn-62490.exe (PID: 7488)
      • Unicorn-32133.exe (PID: 7660)
      • Unicorn-5582.exe (PID: 7708)
      • Unicorn-53300.exe (PID: 7688)
      • Unicorn-60721.exe (PID: 7772)
      • Unicorn-29730.exe (PID: 7780)
      • Unicorn-63781.exe (PID: 7524)
      • Unicorn-11712.exe (PID: 7716)
      • Unicorn-40855.exe (PID: 7764)
      • Unicorn-36553.exe (PID: 6592)
      • Unicorn-54281.exe (PID: 7628)
      • Unicorn-27639.exe (PID: 7680)
      • Unicorn-3134.exe (PID: 7872)
      • Unicorn-24359.exe (PID: 7860)
      • Unicorn-14810.exe (PID: 5260)
      • Unicorn-48806.exe (PID: 7844)
      • Unicorn-15386.exe (PID: 7976)
      • Unicorn-15386.exe (PID: 7932)
      • Unicorn-32277.exe (PID: 7956)
      • Unicorn-10508.exe (PID: 7520)
      • Unicorn-57471.exe (PID: 7448)
      • Unicorn-64732.exe (PID: 8060)
      • Unicorn-39481.exe (PID: 8068)
      • Unicorn-51468.exe (PID: 8116)
      • Unicorn-51733.exe (PID: 8084)
      • Unicorn-10700.exe (PID: 4688)
      • Unicorn-41427.exe (PID: 7192)
      • Unicorn-10700.exe (PID: 2564)
      • Unicorn-60456.exe (PID: 7268)
      • Unicorn-9938.exe (PID: 7228)
      • Unicorn-55625.exe (PID: 7272)
      • Unicorn-59709.exe (PID: 7276)
      • Unicorn-59709.exe (PID: 6964)
      • Unicorn-26936.exe (PID: 2140)
      • Unicorn-43928.exe (PID: 3140)
      • Unicorn-32802.exe (PID: 1164)
      • Unicorn-13201.exe (PID: 5504)
      • Unicorn-59709.exe (PID: 4336)
      • Unicorn-59709.exe (PID: 4200)
      • Unicorn-13201.exe (PID: 3884)
      • Unicorn-38111.exe (PID: 4212)
      • Unicorn-7939.exe (PID: 5176)
      • Unicorn-23721.exe (PID: 1272)
      • Unicorn-42195.exe (PID: 632)
      • Unicorn-11468.exe (PID: 5984)
      • Unicorn-15287.exe (PID: 5964)
      • Unicorn-61224.exe (PID: 6080)
      • Unicorn-13990.exe (PID: 7824)
      • Unicorn-11944.exe (PID: 1128)
      • Unicorn-65137.exe (PID: 208)
      • Unicorn-11852.exe (PID: 668)
      • Unicorn-37487.exe (PID: 4880)
      • Unicorn-61437.exe (PID: 8160)
      • Unicorn-36911.exe (PID: 8176)
      • Unicorn-43155.exe (PID: 7340)
      • Unicorn-6106.exe (PID: 8228)
      • Unicorn-55791.exe (PID: 8248)
      • Unicorn-12812.exe (PID: 8300)
      • Unicorn-1930.exe (PID: 8204)
      • Unicorn-37871.exe (PID: 8348)
      • Unicorn-55691.exe (PID: 8368)
      • Unicorn-4452.exe (PID: 8400)
      • Unicorn-10674.exe (PID: 8428)
      • Unicorn-51707.exe (PID: 8316)
      • Unicorn-41136.exe (PID: 8420)
      • Unicorn-29703.exe (PID: 8468)
      • Unicorn-49569.exe (PID: 8480)
      • Unicorn-24873.exe (PID: 8548)
      • Unicorn-20896.exe (PID: 8572)
      • Unicorn-53653.exe (PID: 8508)
      • Unicorn-18843.exe (PID: 8500)
      • Unicorn-49569.exe (PID: 8476)
      • Unicorn-53653.exe (PID: 8516)
      • Unicorn-47986.exe (PID: 8620)
      • Unicorn-59451.exe (PID: 8612)
      • Unicorn-5007.exe (PID: 8604)
      • Unicorn-18843.exe (PID: 8536)
      • Unicorn-47986.exe (PID: 8628)
      • Unicorn-14758.exe (PID: 8460)
      • Unicorn-18843.exe (PID: 8492)
      • Unicorn-47986.exe (PID: 8636)
      • Unicorn-37431.exe (PID: 8564)
      • Unicorn-61721.exe (PID: 8736)
      • Unicorn-52091.exe (PID: 8860)
      • Unicorn-51991.exe (PID: 8876)
      • Unicorn-38255.exe (PID: 8884)
      • Unicorn-45869.exe (PID: 8960)
      • Unicorn-38998.exe (PID: 8716)
      • Unicorn-64898.exe (PID: 8984)
      • Unicorn-54037.exe (PID: 9012)
      • Unicorn-29341.exe (PID: 9048)
      • Unicorn-33425.exe (PID: 9080)
      • Unicorn-33516.exe (PID: 9120)
      • Unicorn-13559.exe (PID: 9072)
      • Unicorn-33160.exe (PID: 9064)
      • Unicorn-19035.exe (PID: 6972)
      • Unicorn-19035.exe (PID: 9212)
      • Unicorn-9042.exe (PID: 4180)
      • Unicorn-2265.exe (PID: 7252)
      • Unicorn-22777.exe (PID: 5304)
      • Unicorn-60189.exe (PID: 9348)
      • Unicorn-41160.exe (PID: 1452)
      • Unicorn-12571.exe (PID: 9244)
      • Unicorn-10525.exe (PID: 9260)
      • Unicorn-43106.exe (PID: 9320)
      • Unicorn-2265.exe (PID: 7324)
      • Unicorn-17210.exe (PID: 8840)
      • Unicorn-36811.exe (PID: 7256)
      • Unicorn-58243.exe (PID: 9232)
      • Unicorn-9280.exe (PID: 9436)
      • Unicorn-62135.exe (PID: 9392)
      • Unicorn-61388.exe (PID: 9428)
      • Unicorn-48871.exe (PID: 9500)
      • Unicorn-8103.exe (PID: 9468)
      • Unicorn-6249.exe (PID: 9384)
      • Unicorn-12379.exe (PID: 9400)
      • Unicorn-44045.exe (PID: 9548)
      • Unicorn-20666.exe (PID: 9572)
      • Unicorn-20666.exe (PID: 9576)
      • Unicorn-56681.exe (PID: 9636)
      • Unicorn-60210.exe (PID: 9652)
      • Unicorn-58740.exe (PID: 9672)
      • Unicorn-8679.exe (PID: 9532)
      • Unicorn-29868.exe (PID: 9724)
      • Unicorn-33952.exe (PID: 9740)
      • Unicorn-46759.exe (PID: 9988)
      • Unicorn-40074.exe (PID: 10020)
      • Unicorn-47143.exe (PID: 10132)
      • Unicorn-19946.exe (PID: 10160)
      • Unicorn-34336.exe (PID: 10084)
      • Unicorn-47719.exe (PID: 10228)
      • Unicorn-34811.exe (PID: 10236)
      • Unicorn-20522.exe (PID: 4436)
      • Unicorn-59416.exe (PID: 9328)
      • Unicorn-41496.exe (PID: 5936)
      • Unicorn-34912.exe (PID: 10176)
      • Unicorn-34912.exe (PID: 10184)
      • Unicorn-37604.exe (PID: 10212)
      • Unicorn-18960.exe (PID: 10280)
      • Unicorn-35850.exe (PID: 10344)
      • Unicorn-7070.exe (PID: 10424)
      • Unicorn-12545.exe (PID: 10368)
      • Unicorn-53578.exe (PID: 10396)
      • Unicorn-4953.exe (PID: 10484)
      • Unicorn-35680.exe (PID: 10504)
      • Unicorn-13121.exe (PID: 10548)
      • Unicorn-58793.exe (PID: 10540)
      • Unicorn-4191.exe (PID: 10532)
      • Unicorn-47356.exe (PID: 10452)
      • Unicorn-20714.exe (PID: 10460)
      • Unicorn-39764.exe (PID: 10520)
      • Unicorn-47932.exe (PID: 10656)
      • Unicorn-52571.exe (PID: 10608)
      • Unicorn-45794.exe (PID: 10628)
      • Unicorn-47932.exe (PID: 10664)
      • Unicorn-35580.exe (PID: 10600)
      • Unicorn-32150.exe (PID: 10688)
      • Unicorn-45886.exe (PID: 10696)
      • Unicorn-23327.exe (PID: 10708)
      • Unicorn-9592.exe (PID: 10716)
      • Unicorn-15067.exe (PID: 10864)
      • Unicorn-8845.exe (PID: 10812)
      • Unicorn-4761.exe (PID: 10784)
      • Unicorn-52016.exe (PID: 10736)
      • Unicorn-35488.exe (PID: 10796)
      • Unicorn-677.exe (PID: 10748)
      • Unicorn-52016.exe (PID: 10728)
      • Unicorn-44211.exe (PID: 10940)
      • Unicorn-10883.exe (PID: 10996)
      • Unicorn-62685.exe (PID: 11004)
      • Unicorn-57085.exe (PID: 11012)
      • Unicorn-4761.exe (PID: 10776)
      • Unicorn-52016.exe (PID: 10760)
      • Unicorn-23236.exe (PID: 10904)
      • Unicorn-988.exe (PID: 11088)
      • Unicorn-46925.exe (PID: 11068)
      • Unicorn-20282.exe (PID: 11136)
      • Unicorn-9513.exe (PID: 11184)
      • Unicorn-20282.exe (PID: 11132)
      • Unicorn-23135.exe (PID: 11060)
      • Unicorn-25977.exe (PID: 11044)
      • Unicorn-57860.exe (PID: 11080)
      • Unicorn-27704.exe (PID: 11320)
      • Unicorn-3754.exe (PID: 11304)
      • Unicorn-64460.exe (PID: 11332)
      • Unicorn-45721.exe (PID: 11364)
      • Unicorn-38486.exe (PID: 11388)
      • Unicorn-61699.exe (PID: 11416)
      • Unicorn-42478.exe (PID: 11492)
      • Unicorn-3583.exe (PID: 11476)
      • Unicorn-26142.exe (PID: 11548)
      • Unicorn-28280.exe (PID: 11436)
      • Unicorn-28280.exe (PID: 11444)
      • Unicorn-42378.exe (PID: 11764)
      • Unicorn-32172.exe (PID: 11608)
      • Unicorn-36256.exe (PID: 11628)
      • Unicorn-4138.exe (PID: 11684)
      • Unicorn-44979.exe (PID: 11708)
      • Unicorn-46105.exe (PID: 11740)
      • Unicorn-42378.exe (PID: 11756)
      • Unicorn-19819.exe (PID: 11788)
      • Unicorn-21103.exe (PID: 11804)
      • Unicorn-52784.exe (PID: 11540)
      • Unicorn-26142.exe (PID: 11556)
      • Unicorn-55306.exe (PID: 11908)
      • Unicorn-28664.exe (PID: 11948)
      • Unicorn-28664.exe (PID: 11940)
      • Unicorn-28664.exe (PID: 11956)
      • Unicorn-47693.exe (PID: 11840)
      • Unicorn-47693.exe (PID: 11844)
      • Unicorn-5913.exe (PID: 12036)
      • Unicorn-5913.exe (PID: 12032)
      • Unicorn-49084.exe (PID: 12012)
      • Unicorn-36640.exe (PID: 12056)
      • Unicorn-5913.exe (PID: 12048)
      • Unicorn-12135.exe (PID: 11988)
      • Unicorn-16220.exe (PID: 12116)
      • Unicorn-54928.exe (PID: 12232)
      • Unicorn-63182.exe (PID: 12152)
      • Unicorn-43993.exe (PID: 12224)
      • Unicorn-63593.exe (PID: 12208)
      • Unicorn-51030.exe (PID: 12104)
      • Unicorn-23045.exe (PID: 12188)
      • Unicorn-21242.exe (PID: 2064)
      • Unicorn-41108.exe (PID: 872)
      • Unicorn-25326.exe (PID: 2968)
      • Unicorn-25326.exe (PID: 12292)
      • Unicorn-49368.exe (PID: 12336)
      • Unicorn-63666.exe (PID: 12376)
      • Unicorn-4251.exe (PID: 3024)
      • Unicorn-12327.exe (PID: 12416)
      • Unicorn-26718.exe (PID: 12432)
      • Unicorn-33516.exe (PID: 12448)
      • Unicorn-41684.exe (PID: 12464)
      • Unicorn-4159.exe (PID: 12400)
      • Unicorn-29986.exe (PID: 12560)
      • Unicorn-16914.exe (PID: 12524)
      • Unicorn-51990.exe (PID: 12492)
      • Unicorn-35462.exe (PID: 12544)
      • Unicorn-7428.exe (PID: 12576)
      • Unicorn-48269.exe (PID: 12592)
      • Unicorn-21626.exe (PID: 12616)
      • Unicorn-45768.exe (PID: 12484)
      • Unicorn-15404.exe (PID: 12688)
      • Unicorn-58383.exe (PID: 12728)
      • Unicorn-26870.exe (PID: 12692)
      • Unicorn-37221.exe (PID: 12772)
      • Unicorn-20064.exe (PID: 12796)
      • Unicorn-31277.exe (PID: 12608)
      • Unicorn-21626.exe (PID: 12624)
      • Unicorn-10857.exe (PID: 12656)
      • Unicorn-60926.exe (PID: 12864)
      • Unicorn-48597.exe (PID: 12936)
      • Unicorn-23877.exe (PID: 12912)
      • Unicorn-21931.exe (PID: 12888)
      • Unicorn-52380.exe (PID: 12964)
      • Unicorn-35108.exe (PID: 13020)
      • Unicorn-50599.exe (PID: 12820)
      • Unicorn-47387.exe (PID: 13304)
      • Unicorn-61201.exe (PID: 13116)
      • Unicorn-45130.exe (PID: 13144)
      • Unicorn-7366.exe (PID: 13184)
      • Unicorn-15534.exe (PID: 13204)
      • Unicorn-14979.exe (PID: 13236)
      • Unicorn-35519.exe (PID: 5064)
      • Unicorn-8928.exe (PID: 13048)
      • Unicorn-21948.exe (PID: 13364)
      • Unicorn-63915.exe (PID: 13420)
      • Unicorn-21948.exe (PID: 13368)
      • Unicorn-23239.exe (PID: 13404)
      • Unicorn-64180.exe (PID: 13436)
      • Unicorn-42944.exe (PID: 13480)
      • Unicorn-16931.exe (PID: 13528)
      • Unicorn-54542.exe (PID: 13560)
      • Unicorn-52867.exe (PID: 6112)
      • Unicorn-28170.exe (PID: 13340)
      • Unicorn-42944.exe (PID: 13472)
      • Unicorn-59010.exe (PID: 13752)
      • Unicorn-22253.exe (PID: 13724)
      • Unicorn-4434.exe (PID: 13680)
      • Unicorn-2296.exe (PID: 13772)
      • Unicorn-2296.exe (PID: 13780)
      • Unicorn-22716.exe (PID: 13856)
      • Unicorn-6380.exe (PID: 13732)
      • Unicorn-22716.exe (PID: 13848)
      • Unicorn-18056.exe (PID: 13624)
      • Unicorn-13536.exe (PID: 14052)
      • Unicorn-13801.exe (PID: 14068)
      • Unicorn-7671.exe (PID: 14060)
      • Unicorn-46666.exe (PID: 13904)
      • Unicorn-26800.exe (PID: 13896)
      • Unicorn-44620.exe (PID: 13936)
      • Unicorn-25284.exe (PID: 13944)
      • Unicorn-30884.exe (PID: 13928)
      • Unicorn-28503.exe (PID: 14172)
      • Unicorn-18553.exe (PID: 14152)
      • Unicorn-32830.exe (PID: 14108)
      • Unicorn-12986.exe (PID: 14188)
      • Unicorn-24419.exe (PID: 14144)
      • Unicorn-51881.exe (PID: 14228)
      • Unicorn-12986.exe (PID: 14196)
      • Unicorn-22637.exe (PID: 14160)
      • Unicorn-31460.exe (PID: 14296)
      • Unicorn-51881.exe (PID: 14208)
      • Unicorn-28746.exe (PID: 14092)
      • Unicorn-63121.exe (PID: 14464)
      • Unicorn-34889.exe (PID: 14424)
      • Unicorn-59394.exe (PID: 14388)
      • Unicorn-51881.exe (PID: 14248)
      • Unicorn-14932.exe (PID: 14380)
      • Unicorn-54986.exe (PID: 14472)
      • Unicorn-16415.exe (PID: 14440)
      • Unicorn-24492.exe (PID: 14456)
      • Unicorn-58846.exe (PID: 14512)
      • Unicorn-30613.exe (PID: 14564)
      • Unicorn-27813.exe (PID: 14572)
      • Unicorn-35544.exe (PID: 6248)
      • Unicorn-51881.exe (PID: 14212)
      • Unicorn-54019.exe (PID: 14256)
      • Unicorn-49088.exe (PID: 14664)
      • Unicorn-59778.exe (PID: 14812)
      • Unicorn-26173.exe (PID: 14680)
      • Unicorn-3879.exe (PID: 14732)
      • Unicorn-29130.exe (PID: 14756)
      • Unicorn-46043.exe (PID: 14820)
      • Unicorn-50127.exe (PID: 14832)
      • Unicorn-40642.exe (PID: 14872)
      • Unicorn-11278.exe (PID: 14584)
      • Unicorn-28311.exe (PID: 14520)
      • Unicorn-49088.exe (PID: 14656)
      • Unicorn-19208.exe (PID: 15004)
      • Unicorn-64325.exe (PID: 15048)
      • Unicorn-44481.exe (PID: 15080)
      • Unicorn-17838.exe (PID: 15120)
      • Unicorn-28144.exe (PID: 15144)
      • Unicorn-56078.exe (PID: 15188)
      • Unicorn-51253.exe (PID: 14940)
      • Unicorn-20691.exe (PID: 14968)
      • Unicorn-44481.exe (PID: 15064)
      • Unicorn-21267.exe (PID: 15164)
      • Unicorn-33519.exe (PID: 15212)
      • Unicorn-10299.exe (PID: 15252)
      • Unicorn-61976.exe (PID: 15228)
      • Unicorn-49691.exe (PID: 15268)
      • Unicorn-49691.exe (PID: 15272)
      • Unicorn-24995.exe (PID: 15324)
      • Unicorn-37604.exe (PID: 15356)
      • Unicorn-755.exe (PID: 15204)
      • Unicorn-60625.exe (PID: 15432)
      • Unicorn-32612.exe (PID: 15584)
      • Unicorn-33982.exe (PID: 15496)
      • Unicorn-55171.exe (PID: 15548)
      • Unicorn-28528.exe (PID: 15564)
      • Unicorn-12000.exe (PID: 15628)
      • Unicorn-12000.exe (PID: 15620)
      • Unicorn-25379.exe (PID: 15664)
      • Unicorn-19038.exe (PID: 15476)
      • Unicorn-60625.exe (PID: 15452)
      • Unicorn-39458.exe (PID: 15416)
      • Unicorn-60625.exe (PID: 15440)
      • Unicorn-37080.exe (PID: 15912)
      • Unicorn-17786.exe (PID: 15884)
      • Unicorn-35850.exe (PID: 15744)
      • Unicorn-48202.exe (PID: 15704)
      • Unicorn-16514.exe (PID: 15760)
      • Unicorn-35850.exe (PID: 15752)
      • Unicorn-33049.exe (PID: 15776)
      • Unicorn-22035.exe (PID: 15944)
      • Unicorn-51279.exe (PID: 16000)
      • Unicorn-1258.exe (PID: 15984)
      • Unicorn-1258.exe (PID: 15976)
      • Unicorn-26774.exe (PID: 16056)
      • Unicorn-37440.exe (PID: 15688)
      • Unicorn-60354.exe (PID: 15728)
      • Unicorn-33049.exe (PID: 15768)
      • Unicorn-26028.exe (PID: 16152)
      • Unicorn-19043.exe (PID: 16220)
      • Unicorn-8108.exe (PID: 16228)
      • Unicorn-36142.exe (PID: 16272)
      • Unicorn-20360.exe (PID: 16280)
      • Unicorn-20473.exe (PID: 16304)
      • Unicorn-8108.exe (PID: 16240)
      • Unicorn-12305.exe (PID: 16376)
      • Unicorn-4137.exe (PID: 16360)
      • Unicorn-14330.exe (PID: 16176)
      • Unicorn-51108.exe (PID: 16508)
      • Unicorn-55747.exe (PID: 16552)
      • Unicorn-44786.exe (PID: 16608)
      • Unicorn-39240.exe (PID: 16684)
      • Unicorn-12597.exe (PID: 16712)
      • Unicorn-10871.exe (PID: 16440)
      • Unicorn-50916.exe (PID: 16616)
      • Unicorn-15125.exe (PID: 17056)
      • Unicorn-46401.exe (PID: 16836)
      • Unicorn-2675.exe (PID: 16880)
      • Unicorn-4729.exe (PID: 16960)
      • Unicorn-26410.exe (PID: 16920)
      • Unicorn-41497.exe (PID: 17020)
      • Unicorn-1616.exe (PID: 17240)
      • Unicorn-38067.exe (PID: 17272)
      • Unicorn-50128.exe (PID: 17380)
      • Unicorn-4984.exe (PID: 16752)
      • Unicorn-47771.exe (PID: 16812)
      • Unicorn-464.exe (PID: 16844)
      • Unicorn-63042.exe (PID: 6384)
      • Unicorn-55249.exe (PID: 1812)
      • Unicorn-57552.exe (PID: 17416)
      • Unicorn-10132.exe (PID: 17520)
      • Unicorn-28771.exe (PID: 17596)
      • Unicorn-42108.exe (PID: 17648)
      • Unicorn-32691.exe (PID: 17488)
      • Unicorn-43162.exe (PID: 17452)
      • Unicorn-60153.exe (PID: 17536)

    • The sample compiled with chinese language support

      • 1 (342).exe (PID: 4620)
      • Unicorn-41136.exe (PID: 8420)
      • Unicorn-11468.exe (PID: 5984)
      • Unicorn-41323.exe (PID: 7468)
      • Unicorn-19946.exe (PID: 10160)
      • Unicorn-47143.exe (PID: 10132)
      • Unicorn-43106.exe (PID: 9320)
      • Unicorn-47356.exe (PID: 10452)
      • Unicorn-2262.exe (PID: 6872)
      • Unicorn-12571.exe (PID: 9244)
      • Unicorn-34912.exe (PID: 10176)
      • Unicorn-15386.exe (PID: 7976)
      • Unicorn-54281.exe (PID: 7628)
      • Unicorn-14545.exe (PID: 7548)
      • Unicorn-48871.exe (PID: 9500)
      • Unicorn-37604.exe (PID: 10212)
      • Unicorn-64732.exe (PID: 8060)
      • Unicorn-13990.exe (PID: 7824)
      • Unicorn-1930.exe (PID: 8204)
      • Unicorn-27639.exe (PID: 7680)
      • Unicorn-62135.exe (PID: 9392)
      • Unicorn-34912.exe (PID: 10184)
      • Unicorn-62813.exe (PID: 5508)
      • Unicorn-11712.exe (PID: 7716)
      • Unicorn-13121.exe (PID: 10548)
      • Unicorn-8679.exe (PID: 9532)
      • Unicorn-56699.exe (PID: 7408)
      • Unicorn-34811.exe (PID: 10236)
      • Unicorn-41160.exe (PID: 1452)
      • Unicorn-53300.exe (PID: 7688)
      • Unicorn-10241.exe (PID: 9368)
      • Unicorn-47719.exe (PID: 10228)
      • Unicorn-44045.exe (PID: 9548)
      • Unicorn-20666.exe (PID: 9576)
      • Unicorn-39764.exe (PID: 10520)
      • Unicorn-20666.exe (PID: 9572)
      • Unicorn-2265.exe (PID: 7252)
      • Unicorn-20522.exe (PID: 4436)
      • Unicorn-59416.exe (PID: 9328)
      • Unicorn-55791.exe (PID: 8248)
      • Unicorn-41427.exe (PID: 7192)
      • Unicorn-36911.exe (PID: 8176)
      • Unicorn-52929.exe (PID: 8928)
      • Unicorn-40855.exe (PID: 7764)
      • Unicorn-58793.exe (PID: 10540)
      • Unicorn-35680.exe (PID: 10504)
      • Unicorn-60721.exe (PID: 7772)
      • Unicorn-48178.exe (PID: 8268)
      • Unicorn-41496.exe (PID: 5936)
      • Unicorn-61224.exe (PID: 6080)
      • Unicorn-3134.exe (PID: 7872)
      • Unicorn-56681.exe (PID: 9636)
      • Unicorn-60210.exe (PID: 9652)
      • Unicorn-37871.exe (PID: 8348)
      • Unicorn-47932.exe (PID: 10664)
      • Unicorn-48806.exe (PID: 7844)
      • Unicorn-10700.exe (PID: 4688)
      • Unicorn-4452.exe (PID: 8400)
      • Unicorn-35580.exe (PID: 10600)
      • Unicorn-23327.exe (PID: 10708)
      • Unicorn-45886.exe (PID: 10696)
      • Unicorn-18960.exe (PID: 10280)
      • Unicorn-51468.exe (PID: 8116)
      • Unicorn-12812.exe (PID: 8300)
      • Unicorn-51707.exe (PID: 8316)
      • Unicorn-10700.exe (PID: 2564)
      • Unicorn-32150.exe (PID: 10688)
      • Unicorn-24359.exe (PID: 7860)
      • Unicorn-58740.exe (PID: 9672)
      • Unicorn-60456.exe (PID: 7268)
      • Unicorn-59709.exe (PID: 7276)
      • Unicorn-61821.exe (PID: 8376)
      • Unicorn-5582.exe (PID: 7708)
      • Unicorn-9592.exe (PID: 10716)
      • Unicorn-45794.exe (PID: 10628)
      • Unicorn-12738.exe (PID: 5008)
      • Unicorn-677.exe (PID: 10748)
      • Unicorn-52016.exe (PID: 10760)
      • Unicorn-10674.exe (PID: 8428)
      • Unicorn-52571.exe (PID: 10608)
      • Unicorn-35850.exe (PID: 10344)
      • Unicorn-9938.exe (PID: 7228)
      • Unicorn-24873.exe (PID: 8664)
      • Unicorn-12545.exe (PID: 10368)
      • Unicorn-14758.exe (PID: 8460)
      • Unicorn-5007.exe (PID: 8604)
      • Unicorn-15067.exe (PID: 10868)
      • Unicorn-32802.exe (PID: 1164)
      • Unicorn-14758.exe (PID: 8452)
      • Unicorn-62490.exe (PID: 7488)
      • Unicorn-46925.exe (PID: 11068)
      • Unicorn-4761.exe (PID: 10784)
      • Unicorn-10883.exe (PID: 10996)
      • Unicorn-59709.exe (PID: 4336)
      • Unicorn-33952.exe (PID: 9740)
      • Unicorn-47986.exe (PID: 8620)
      • Unicorn-15386.exe (PID: 7932)
      • Unicorn-55625.exe (PID: 7272)
      • Unicorn-52016.exe (PID: 10736)
      • Unicorn-29868.exe (PID: 9724)
      • Unicorn-20896.exe (PID: 8572)
      • Unicorn-63781.exe (PID: 7524)
      • Unicorn-13201.exe (PID: 5504)
      • Unicorn-47986.exe (PID: 8644)
      • Unicorn-26936.exe (PID: 2140)
      • Unicorn-53653.exe (PID: 8508)
      • Unicorn-18843.exe (PID: 8500)
      • Unicorn-32277.exe (PID: 7956)
      • Unicorn-21652.exe (PID: 10956)
      • Unicorn-53653.exe (PID: 8516)
      • Unicorn-47986.exe (PID: 8636)
      • Unicorn-47932.exe (PID: 10656)
      • Unicorn-59709.exe (PID: 6964)
      • Unicorn-44211.exe (PID: 10940)
      • Unicorn-29730.exe (PID: 7780)
      • Unicorn-43213.exe (PID: 7940)
      • Unicorn-52016.exe (PID: 10728)
      • Unicorn-40074.exe (PID: 10020)
      • Unicorn-4761.exe (PID: 10776)
      • Unicorn-23236.exe (PID: 10904)
      • Unicorn-57085.exe (PID: 11012)
      • Unicorn-53578.exe (PID: 10396)
      • Unicorn-46759.exe (PID: 9988)
      • Unicorn-46113.exe (PID: 7924)
      • Unicorn-7070.exe (PID: 10424)
      • Unicorn-62685.exe (PID: 11004)
      • Unicorn-43928.exe (PID: 3140)
      • Unicorn-52091.exe (PID: 8860)
      • Unicorn-61338.exe (PID: 7428)
      • Unicorn-988.exe (PID: 11088)
      • Unicorn-14810.exe (PID: 5260)
      • Unicorn-38255.exe (PID: 8884)
      • Unicorn-7939.exe (PID: 5176)
      • Unicorn-20282.exe (PID: 11136)
      • Unicorn-20282.exe (PID: 11132)
      • Unicorn-54037.exe (PID: 9008)
      • Unicorn-23721.exe (PID: 1272)
      • Unicorn-54037.exe (PID: 9012)
      • Unicorn-29341.exe (PID: 9048)
      • Unicorn-9513.exe (PID: 11184)
      • Unicorn-57860.exe (PID: 11080)
      • Unicorn-10508.exe (PID: 7520)
      • Unicorn-64898.exe (PID: 8984)
      • Unicorn-34336.exe (PID: 10084)
      • Unicorn-42195.exe (PID: 632)
      • Unicorn-9042.exe (PID: 4180)
      • Unicorn-59517.exe (PID: 6044)
      • Unicorn-757.exe (PID: 7504)
      • Unicorn-36553.exe (PID: 6592)
      • Unicorn-32133.exe (PID: 7660)
      • Unicorn-38111.exe (PID: 4212)
      • Unicorn-19035.exe (PID: 6972)
      • Unicorn-18843.exe (PID: 8536)
      • Unicorn-36811.exe (PID: 7256)
      • Unicorn-58243.exe (PID: 9232)
      • Unicorn-49569.exe (PID: 8476)
      • Unicorn-23135.exe (PID: 11060)
      • Unicorn-17643.exe (PID: 9108)
      • Unicorn-33160.exe (PID: 9064)
      • Unicorn-48007.exe (PID: 8832)
      • Unicorn-20714.exe (PID: 10460)
      • Unicorn-37535.exe (PID: 7460)
      • Unicorn-61437.exe (PID: 8160)
      • Unicorn-51991.exe (PID: 8876)
      • Unicorn-51733.exe (PID: 8084)
      • Unicorn-8103.exe (PID: 9468)
      • Unicorn-12379.exe (PID: 9400)
      • Unicorn-25186.exe (PID: 9484)
      • Unicorn-37487.exe (PID: 4880)
      • Unicorn-7171.exe (PID: 8008)
      • Unicorn-7283.exe (PID: 11220)
      • Unicorn-33425.exe (PID: 9080)
      • Unicorn-4953.exe (PID: 10484)
      • Unicorn-19035.exe (PID: 9212)
      • Unicorn-15287.exe (PID: 5964)
      • Unicorn-60189.exe (PID: 9348)
      • Unicorn-11852.exe (PID: 668)
      • Unicorn-21508.exe (PID: 7652)
      • Unicorn-59709.exe (PID: 4200)
      • Unicorn-55691.exe (PID: 8368)
      • Unicorn-1115.exe (PID: 8332)
      • Unicorn-3754.exe (PID: 11304)
      • Unicorn-20906.exe (PID: 10316)
      • Unicorn-8845.exe (PID: 10812)
      • Unicorn-49569.exe (PID: 8480)
      • Unicorn-36065.exe (PID: 7348)
      • Unicorn-25977.exe (PID: 11044)
      • Unicorn-45721.exe (PID: 11364)
      • Unicorn-4191.exe (PID: 10532)
      • Unicorn-8728.exe (PID: 8284)
      • Unicorn-27704.exe (PID: 11320)
      • Unicorn-29703.exe (PID: 8468)
      • Unicorn-65137.exe (PID: 208)
      • Unicorn-39481.exe (PID: 8068)
      • Unicorn-61388.exe (PID: 9428)
      • Unicorn-45052.exe (PID: 9492)
      • Unicorn-9280.exe (PID: 9436)
      • Unicorn-6106.exe (PID: 8228)
      • Unicorn-38486.exe (PID: 11388)
      • Unicorn-59709.exe (PID: 7292)
      • Unicorn-35488.exe (PID: 10796)
      • Unicorn-24873.exe (PID: 8548)
      • Unicorn-38998.exe (PID: 8716)
      • Unicorn-22777.exe (PID: 5304)
      • Unicorn-57471.exe (PID: 7448)
      • Unicorn-50097.exe (PID: 7596)
      • Unicorn-17210.exe (PID: 8840)
      • Unicorn-28280.exe (PID: 11436)
      • Unicorn-28280.exe (PID: 11444)
      • Unicorn-61699.exe (PID: 11416)
      • Unicorn-2265.exe (PID: 7324)
      • Unicorn-43155.exe (PID: 7340)
      • Unicorn-45869.exe (PID: 8960)
      • Unicorn-10525.exe (PID: 9260)
      • Unicorn-15067.exe (PID: 10864)
      • Unicorn-13201.exe (PID: 3884)
      • Unicorn-7601.exe (PID: 4452)
      • Unicorn-33516.exe (PID: 9120)
      • Unicorn-13559.exe (PID: 9072)
      • Unicorn-3583.exe (PID: 11476)

    • Create files in a temporary directory

      • Unicorn-56699.exe (PID: 7408)
      • Unicorn-2262.exe (PID: 6872)
      • 1 (342).exe (PID: 4620)
      • Unicorn-61338.exe (PID: 7428)
      • Unicorn-62490.exe (PID: 7488)
      • Unicorn-63781.exe (PID: 7524)
      • Unicorn-5582.exe (PID: 7708)
      • Unicorn-60721.exe (PID: 7772)
      • Unicorn-41323.exe (PID: 7468)
      • Unicorn-36553.exe (PID: 6592)
      • Unicorn-21508.exe (PID: 7652)
      • Unicorn-3134.exe (PID: 7872)
      • Unicorn-11712.exe (PID: 7716)
      • Unicorn-15386.exe (PID: 7976)
      • Unicorn-40855.exe (PID: 7764)
      • Unicorn-14810.exe (PID: 5260)
      • Unicorn-757.exe (PID: 7504)
      • Unicorn-59517.exe (PID: 6044)
      • Unicorn-37535.exe (PID: 7460)
      • Unicorn-51733.exe (PID: 8084)
      • Unicorn-51468.exe (PID: 8116)
      • Unicorn-27639.exe (PID: 7680)
      • Unicorn-60456.exe (PID: 7268)
      • Unicorn-24359.exe (PID: 7860)
      • Unicorn-48806.exe (PID: 7844)
      • Unicorn-12738.exe (PID: 5008)
      • Unicorn-59709.exe (PID: 4200)
      • Unicorn-59709.exe (PID: 7276)
      • Unicorn-55625.exe (PID: 7272)
      • Unicorn-15386.exe (PID: 7932)
      • Unicorn-7601.exe (PID: 4452)
      • Unicorn-59709.exe (PID: 7292)
      • Unicorn-50097.exe (PID: 7596)
      • Unicorn-43928.exe (PID: 3140)
      • Unicorn-23721.exe (PID: 1272)
      • Unicorn-7939.exe (PID: 5176)
      • Unicorn-38111.exe (PID: 4212)
      • Unicorn-57471.exe (PID: 7448)
      • Unicorn-65137.exe (PID: 208)
      • Unicorn-32133.exe (PID: 7660)
      • Unicorn-54281.exe (PID: 7628)
      • Unicorn-11944.exe (PID: 1128)
      • Unicorn-11852.exe (PID: 668)
      • Unicorn-64732.exe (PID: 8060)
      • Unicorn-36911.exe (PID: 8176)
      • Unicorn-43155.exe (PID: 7340)
      • Unicorn-61437.exe (PID: 8160)
      • Unicorn-37487.exe (PID: 4880)
      • Unicorn-62813.exe (PID: 5508)
      • Unicorn-1930.exe (PID: 8204)
      • Unicorn-6106.exe (PID: 8228)
      • Unicorn-48178.exe (PID: 8268)
      • Unicorn-55791.exe (PID: 8248)
      • Unicorn-41427.exe (PID: 7192)
      • Unicorn-10700.exe (PID: 4688)
      • Unicorn-10700.exe (PID: 2564)
      • Unicorn-12812.exe (PID: 8300)
      • Unicorn-55691.exe (PID: 8368)
      • Unicorn-61821.exe (PID: 8376)
      • Unicorn-14758.exe (PID: 8452)
      • Unicorn-18843.exe (PID: 8536)
      • Unicorn-29703.exe (PID: 8468)
      • Unicorn-24873.exe (PID: 8664)
      • Unicorn-32802.exe (PID: 1164)
      • Unicorn-47986.exe (PID: 8628)
      • Unicorn-18843.exe (PID: 8492)
      • Unicorn-53653.exe (PID: 8508)
      • Unicorn-37431.exe (PID: 8564)
      • Unicorn-32277.exe (PID: 7956)
      • Unicorn-59451.exe (PID: 8612)
      • Unicorn-47986.exe (PID: 8636)
      • Unicorn-46113.exe (PID: 7924)
      • Unicorn-13201.exe (PID: 5504)
      • Unicorn-29730.exe (PID: 7780)
      • Unicorn-59709.exe (PID: 6964)
      • Unicorn-43213.exe (PID: 7940)
      • Unicorn-52091.exe (PID: 8860)
      • Unicorn-48007.exe (PID: 8832)
      • Unicorn-29341.exe (PID: 9048)
      • Unicorn-54037.exe (PID: 9008)
      • Unicorn-13559.exe (PID: 9072)
      • Unicorn-33516.exe (PID: 9120)
      • Unicorn-45869.exe (PID: 8960)
      • Unicorn-42195.exe (PID: 632)
      • Unicorn-11468.exe (PID: 5984)
      • Unicorn-9042.exe (PID: 4180)
      • Unicorn-12571.exe (PID: 9244)
      • Unicorn-60189.exe (PID: 9348)
      • Unicorn-36811.exe (PID: 7256)
      • Unicorn-53300.exe (PID: 7688)
      • Unicorn-6249.exe (PID: 9384)
      • Unicorn-51991.exe (PID: 8876)
      • Unicorn-10241.exe (PID: 9368)
      • Unicorn-61388.exe (PID: 9428)
      • Unicorn-39481.exe (PID: 8068)
      • Unicorn-62135.exe (PID: 9392)
      • Unicorn-9280.exe (PID: 9436)
      • Unicorn-12379.exe (PID: 9400)
      • Unicorn-8103.exe (PID: 9468)
      • Unicorn-41160.exe (PID: 1452)
      • Unicorn-8679.exe (PID: 9532)
      • Unicorn-44045.exe (PID: 9548)
      • Unicorn-7171.exe (PID: 8008)
      • Unicorn-20666.exe (PID: 9576)
      • Unicorn-20666.exe (PID: 9572)
      • Unicorn-61224.exe (PID: 6080)
      • Unicorn-8728.exe (PID: 8284)
      • Unicorn-37871.exe (PID: 8348)
      • Unicorn-56681.exe (PID: 9636)
      • Unicorn-58740.exe (PID: 9672)
      • Unicorn-51707.exe (PID: 8316)
      • Unicorn-41136.exe (PID: 8420)
      • Unicorn-49569.exe (PID: 8480)
      • Unicorn-29868.exe (PID: 9724)
      • Unicorn-10674.exe (PID: 8428)
      • Unicorn-9938.exe (PID: 7228)
      • Unicorn-59709.exe (PID: 4336)
      • Unicorn-33952.exe (PID: 9740)
      • Unicorn-20896.exe (PID: 8572)
      • Unicorn-26936.exe (PID: 2140)
      • Unicorn-38998.exe (PID: 8716)
      • Unicorn-49569.exe (PID: 8476)
      • Unicorn-24873.exe (PID: 8548)
      • Unicorn-47986.exe (PID: 8620)
      • Unicorn-13201.exe (PID: 3884)
      • Unicorn-46759.exe (PID: 9988)
      • Unicorn-40074.exe (PID: 10020)
      • Unicorn-38255.exe (PID: 8884)
      • Unicorn-10508.exe (PID: 7520)
      • Unicorn-64898.exe (PID: 8984)
      • Unicorn-33160.exe (PID: 9064)
      • Unicorn-28578.exe (PID: 9100)
      • Unicorn-36065.exe (PID: 7348)
      • Unicorn-47143.exe (PID: 10132)
      • Unicorn-19035.exe (PID: 6972)
      • Unicorn-2265.exe (PID: 7252)
      • Unicorn-2265.exe (PID: 7324)
      • Unicorn-34912.exe (PID: 10176)
      • Unicorn-10525.exe (PID: 9260)
      • Unicorn-45052.exe (PID: 9492)
      • Unicorn-48871.exe (PID: 9500)
      • Unicorn-33425.exe (PID: 9080)
      • Unicorn-47719.exe (PID: 10228)
      • Unicorn-20522.exe (PID: 4436)
      • Unicorn-34811.exe (PID: 10236)
      • Unicorn-41496.exe (PID: 5936)
      • Unicorn-4452.exe (PID: 8400)

    • Reads security settings of Internet Explorer

      • BackgroundTransferHost.exe (PID: 7568)
      • BackgroundTransferHost.exe (PID: 8024)
      • BackgroundTransferHost.exe (PID: 7176)
      • BackgroundTransferHost.exe (PID: 4652)
      • BackgroundTransferHost.exe (PID: 2136)

    • Creates files or folders in the user directory

      • WerFault.exe (PID: 7888)
      • BackgroundTransferHost.exe (PID: 8024)

    • Checks proxy server information

      • BackgroundTransferHost.exe (PID: 8024)

    • Reads the software policy settings

      • BackgroundTransferHost.exe (PID: 8024)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable (generic) (52.9)
.exe | Generic Win/DOS Executable (23.5)
.exe | DOS Executable Generic (23.5)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:04:26 10:28:09+00:00
ImageFileCharacteristics: Executable, No line numbers, No symbols, [6], Bytes reversed lo, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 8192
UninitializedDataSize: -
EntryPoint: 0x13b0
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x0000
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: aaaa
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
InternalName: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
687
Monitored processes
552
Malicious processes
78
Suspicious processes
69

Behavior graph

Click at the process to see the details
start 1 (342).exe sppextcomobj.exe no specs slui.exe no specs unicorn-2262.exe unicorn-56699.exe unicorn-61338.exe unicorn-41323.exe unicorn-62490.exe unicorn-290.exe unicorn-63781.exe backgroundtransferhost.exe no specs unicorn-32133.exe unicorn-53300.exe unicorn-5582.exe unicorn-11712.exe unicorn-40855.exe unicorn-60721.exe unicorn-29730.exe werfault.exe no specs backgroundtransferhost.exe backgroundtransferhost.exe no specs backgroundtransferhost.exe no specs backgroundtransferhost.exe no specs unicorn-14810.exe unicorn-36553.exe unicorn-54281.exe unicorn-21508.exe unicorn-27639.exe unicorn-48806.exe unicorn-3134.exe unicorn-24359.exe unicorn-46113.exe unicorn-15386.exe unicorn-43213.exe unicorn-32277.exe unicorn-15386.exe unicorn-50097.exe unicorn-10508.exe unicorn-757.exe unicorn-59517.exe unicorn-57471.exe unicorn-37535.exe unicorn-64732.exe unicorn-39481.exe unicorn-51733.exe unicorn-51468.exe unicorn-7171.exe unicorn-41427.exe unicorn-10700.exe unicorn-10700.exe unicorn-60456.exe unicorn-12738.exe unicorn-9938.exe unicorn-55625.exe unicorn-59709.exe unicorn-59709.exe unicorn-59709.exe unicorn-59709.exe unicorn-59709.exe unicorn-32802.exe unicorn-13201.exe unicorn-13201.exe unicorn-7601.exe unicorn-26936.exe unicorn-43928.exe unicorn-23721.exe unicorn-7939.exe unicorn-38111.exe unicorn-36065.exe unicorn-42195.exe unicorn-11468.exe unicorn-15287.exe unicorn-61224.exe unicorn-65137.exe unicorn-14545.exe unicorn-13990.exe unicorn-11944.exe unicorn-11852.exe unicorn-36911.exe unicorn-43155.exe unicorn-37487.exe unicorn-61437.exe unicorn-62813.exe unicorn-1930.exe unicorn-6106.exe unicorn-55791.exe unicorn-48178.exe unicorn-8728.exe unicorn-12812.exe unicorn-51707.exe unicorn-1115.exe unicorn-37871.exe unicorn-55691.exe unicorn-61821.exe unicorn-4452.exe unicorn-41136.exe unicorn-10674.exe unicorn-14758.exe unicorn-14758.exe unicorn-29703.exe unicorn-49569.exe unicorn-49569.exe unicorn-18843.exe unicorn-18843.exe unicorn-53653.exe unicorn-53653.exe unicorn-18843.exe unicorn-24873.exe unicorn-37431.exe unicorn-20896.exe unicorn-5007.exe unicorn-59451.exe unicorn-47986.exe unicorn-47986.exe unicorn-47986.exe unicorn-47986.exe unicorn-24873.exe unicorn-38998.exe unicorn-61721.exe unicorn-48007.exe unicorn-52091.exe unicorn-51991.exe unicorn-38255.exe unicorn-45869.exe unicorn-64898.exe unicorn-54037.exe unicorn-54037.exe unicorn-29341.exe unicorn-33160.exe unicorn-13559.exe unicorn-33425.exe unicorn-28578.exe unicorn-17643.exe unicorn-33516.exe unicorn-19035.exe unicorn-19035.exe unicorn-9042.exe unicorn-22777.exe unicorn-2265.exe unicorn-2265.exe unicorn-17210.exe unicorn-36811.exe unicorn-41160.exe unicorn-58243.exe unicorn-12571.exe unicorn-10525.exe unicorn-43106.exe unicorn-60189.exe unicorn-10241.exe unicorn-6249.exe unicorn-62135.exe unicorn-12379.exe unicorn-61388.exe unicorn-9280.exe unicorn-8103.exe unicorn-25186.exe unicorn-45052.exe unicorn-48871.exe unicorn-8679.exe unicorn-44045.exe unicorn-20666.exe unicorn-20666.exe unicorn-56681.exe unicorn-60210.exe unicorn-58740.exe unicorn-29868.exe unicorn-33952.exe unicorn-46759.exe unicorn-40074.exe unicorn-34336.exe unicorn-47143.exe unicorn-19946.exe unicorn-34912.exe unicorn-34912.exe unicorn-37604.exe unicorn-47719.exe unicorn-34811.exe unicorn-20522.exe unicorn-59416.exe unicorn-52929.exe unicorn-41496.exe unicorn-18960.exe unicorn-20906.exe unicorn-35850.exe unicorn-12545.exe unicorn-53578.exe unicorn-7070.exe unicorn-47356.exe unicorn-20714.exe unicorn-4953.exe unicorn-35680.exe unicorn-39764.exe unicorn-4191.exe unicorn-58793.exe unicorn-13121.exe unicorn-35580.exe unicorn-52571.exe unicorn-45794.exe unicorn-47932.exe unicorn-47932.exe unicorn-32150.exe unicorn-45886.exe unicorn-23327.exe unicorn-9592.exe unicorn-52016.exe unicorn-52016.exe unicorn-677.exe unicorn-52016.exe unicorn-4761.exe unicorn-4761.exe unicorn-35488.exe unicorn-8845.exe unicorn-15067.exe unicorn-15067.exe unicorn-23236.exe unicorn-44211.exe unicorn-21652.exe unicorn-33118.exe no specs unicorn-10883.exe unicorn-62685.exe unicorn-57085.exe unicorn-25977.exe unicorn-23135.exe unicorn-46925.exe unicorn-57860.exe unicorn-988.exe unicorn-20282.exe unicorn-20282.exe unicorn-9513.exe unicorn-7283.exe unicorn-60568.exe no specs unicorn-3754.exe unicorn-27704.exe unicorn-64460.exe no specs unicorn-45721.exe unicorn-38486.exe unicorn-61699.exe unicorn-28280.exe unicorn-28280.exe unicorn-3583.exe unicorn-42478.exe no specs unicorn-52784.exe no specs unicorn-26142.exe no specs unicorn-26142.exe no specs unicorn-32172.exe no specs unicorn-36256.exe no specs unicorn-38948.exe no specs unicorn-4138.exe no specs unicorn-44979.exe no specs unicorn-12736.exe no specs unicorn-46105.exe no specs unicorn-42378.exe no specs unicorn-42378.exe no specs unicorn-19819.exe no specs unicorn-21103.exe no specs unicorn-47693.exe no specs unicorn-47693.exe no specs unicorn-55306.exe no specs unicorn-63474.exe no specs unicorn-28664.exe no specs unicorn-28664.exe no specs unicorn-28664.exe no specs unicorn-12135.exe no specs unicorn-49084.exe no specs unicorn-5913.exe no specs unicorn-5913.exe no specs unicorn-5913.exe no specs unicorn-36640.exe no specs unicorn-51030.exe no specs unicorn-16220.exe no specs unicorn-63182.exe no specs unicorn-23045.exe no specs unicorn-63593.exe no specs unicorn-43993.exe no specs unicorn-43993.exe no specs unicorn-54928.exe no specs unicorn-28783.exe no specs unicorn-45939.exe no specs unicorn-50023.exe no specs unicorn-4251.exe no specs unicorn-21242.exe no specs unicorn-41108.exe no specs unicorn-25326.exe no specs unicorn-25326.exe no specs unicorn-62275.exe no specs unicorn-49368.exe no specs unicorn-49368.exe no specs unicorn-63666.exe no specs unicorn-4159.exe no specs unicorn-12327.exe no specs unicorn-26718.exe no specs unicorn-33516.exe no specs unicorn-41684.exe no specs unicorn-45768.exe no specs unicorn-51990.exe no specs unicorn-16914.exe no specs unicorn-35462.exe no specs unicorn-29986.exe no specs unicorn-7428.exe no specs unicorn-48269.exe no specs unicorn-31277.exe no specs unicorn-21626.exe no specs unicorn-21626.exe no specs unicorn-10857.exe no specs unicorn-15404.exe no specs unicorn-26870.exe no specs unicorn-58383.exe no specs unicorn-7257.exe no specs unicorn-37221.exe no specs unicorn-20064.exe no specs unicorn-50599.exe no specs unicorn-4927.exe no specs unicorn-60926.exe no specs unicorn-23978.exe no specs unicorn-21931.exe no specs unicorn-23877.exe no specs unicorn-48597.exe no specs unicorn-52380.exe no specs unicorn-35108.exe no specs unicorn-8928.exe no specs unicorn-61201.exe no specs unicorn-45130.exe no specs unicorn-7366.exe no specs unicorn-15534.exe no specs unicorn-14979.exe no specs unicorn-2627.exe no specs unicorn-47387.exe no specs unicorn-35519.exe no specs unicorn-52867.exe no specs unicorn-7095.exe no specs unicorn-28170.exe no specs unicorn-21948.exe no specs unicorn-21948.exe no specs unicorn-23239.exe no specs unicorn-63915.exe no specs unicorn-58050.exe no specs unicorn-64180.exe no specs unicorn-42944.exe no specs unicorn-42944.exe no specs unicorn-16931.exe no specs unicorn-54542.exe no specs unicorn-18056.exe no specs unicorn-4434.exe no specs unicorn-22253.exe no specs unicorn-6380.exe no specs unicorn-61803.exe no specs unicorn-59010.exe no specs unicorn-2296.exe no specs unicorn-2296.exe no specs unicorn-22716.exe no specs unicorn-22716.exe no specs unicorn-26800.exe no specs unicorn-46666.exe no specs unicorn-30884.exe no specs unicorn-44620.exe no specs unicorn-25284.exe no specs unicorn-13536.exe no specs unicorn-7671.exe no specs unicorn-13801.exe no specs unicorn-28746.exe no specs unicorn-32830.exe no specs unicorn-32830.exe no specs unicorn-24419.exe no specs unicorn-18553.exe no specs unicorn-22637.exe no specs unicorn-28503.exe no specs unicorn-12986.exe no specs unicorn-12986.exe no specs unicorn-51881.exe no specs unicorn-51881.exe no specs unicorn-51881.exe no specs unicorn-51881.exe no specs unicorn-54019.exe no specs unicorn-31460.exe no specs unicorn-62187.exe no specs unicorn-35544.exe no specs unicorn-14932.exe no specs unicorn-59394.exe no specs unicorn-34889.exe no specs unicorn-16415.exe no specs unicorn-24492.exe no specs unicorn-63121.exe no specs unicorn-54986.exe no specs unicorn-58846.exe no specs unicorn-28311.exe no specs unicorn-30613.exe no specs unicorn-27813.exe no specs unicorn-11278.exe no specs unicorn-49088.exe no specs unicorn-49088.exe no specs unicorn-26173.exe no specs unicorn-3879.exe no specs unicorn-29130.exe no specs unicorn-59778.exe no specs unicorn-46043.exe no specs unicorn-50127.exe no specs unicorn-40642.exe no specs unicorn-51253.exe no specs unicorn-20691.exe no specs unicorn-19208.exe no specs unicorn-19208.exe no specs unicorn-21346.exe no specs unicorn-64325.exe no specs unicorn-44481.exe no specs unicorn-44481.exe no specs unicorn-44481.exe no specs unicorn-17838.exe no specs unicorn-28144.exe no specs unicorn-21267.exe no specs unicorn-56078.exe no specs unicorn-755.exe no specs unicorn-33519.exe no specs unicorn-61976.exe no specs unicorn-10299.exe no specs unicorn-49691.exe no specs unicorn-49691.exe no specs unicorn-65331.exe no specs unicorn-24995.exe no specs unicorn-37604.exe no specs unicorn-37604.exe no specs unicorn-38066.exe no specs unicorn-19592.exe no specs unicorn-39458.exe no specs unicorn-60625.exe no specs unicorn-60625.exe no specs unicorn-60625.exe no specs unicorn-19038.exe no specs unicorn-33982.exe no specs unicorn-33982.exe no specs unicorn-55171.exe no specs unicorn-55171.exe no specs unicorn-28528.exe no specs unicorn-32612.exe no specs unicorn-12000.exe no specs unicorn-12000.exe no specs unicorn-25379.exe no specs unicorn-37440.exe no specs unicorn-48202.exe no specs unicorn-60354.exe no specs unicorn-35850.exe no specs unicorn-35850.exe no specs unicorn-16514.exe no specs unicorn-33049.exe no specs unicorn-33049.exe no specs unicorn-13291.exe no specs unicorn-17786.exe no specs unicorn-50816.exe no specs unicorn-37080.exe no specs unicorn-22035.exe no specs unicorn-22035.exe no specs unicorn-1258.exe no specs unicorn-1258.exe no specs unicorn-51279.exe no specs unicorn-26774.exe no specs unicorn-40972.exe no specs unicorn-26028.exe no specs unicorn-14330.exe no specs unicorn-24636.exe no specs unicorn-2078.exe no specs unicorn-19043.exe no specs unicorn-8108.exe no specs unicorn-8108.exe no specs unicorn-36142.exe no specs unicorn-20360.exe no specs unicorn-20473.exe no specs unicorn-59368.exe no specs unicorn-4137.exe no specs unicorn-12305.exe no specs unicorn-22419.exe no specs unicorn-45690.exe no specs unicorn-34671.exe no specs unicorn-10871.exe no specs unicorn-55092.exe no specs unicorn-51108.exe no specs unicorn-55747.exe no specs unicorn-11060.exe no specs unicorn-44786.exe no specs unicorn-50916.exe no specs unicorn-39240.exe no specs unicorn-12597.exe no specs unicorn-10551.exe no specs unicorn-4984.exe no specs unicorn-47771.exe no specs unicorn-46401.exe no specs unicorn-464.exe no specs unicorn-2675.exe no specs unicorn-43443.exe no specs unicorn-26410.exe no specs unicorn-4729.exe no specs unicorn-5197.exe no specs unicorn-41497.exe no specs unicorn-15211.exe no specs unicorn-15125.exe no specs unicorn-22472.exe no specs unicorn-17733.exe no specs unicorn-17733.exe no specs unicorn-44839.exe no specs unicorn-1616.exe no specs unicorn-38067.exe no specs unicorn-50128.exe no specs unicorn-63042.exe no specs unicorn-55249.exe no specs unicorn-57552.exe no specs unicorn-43162.exe no specs unicorn-43162.exe no specs unicorn-32691.exe no specs unicorn-10132.exe no specs unicorn-1467.exe no specs unicorn-60153.exe no specs unicorn-55322.exe no specs unicorn-28771.exe no specs unicorn-28771.exe no specs unicorn-42108.exe no specs unicorn-44751.exe no specs unicorn-53660.exe no specs unicorn-26926.exe no specs unicorn-6505.exe no specs unicorn-8954.exe no specs unicorn-3089.exe no specs unicorn-47849.exe no specs unicorn-41984.exe no specs unicorn-3089.exe no specs unicorn-13203.exe no specs unicorn-13203.exe no specs unicorn-48014.exe no specs unicorn-13303.exe no specs unicorn-21371.exe no specs unicorn-23185.exe no specs unicorn-21371.exe no specs unicorn-11720.exe no specs unicorn-31321.exe no specs unicorn-12349.exe no specs unicorn-21014.exe no specs unicorn-1414.exe no specs unicorn-60266.exe no specs unicorn-60266.exe no specs unicorn-4678.exe no specs unicorn-60266.exe no specs unicorn-13011.exe no specs unicorn-13011.exe no specs unicorn-13011.exe no specs unicorn-18876.exe no specs unicorn-10211.exe no specs unicorn-13011.exe no specs unicorn-13011.exe no specs unicorn-10211.exe no specs unicorn-25263.exe no specs unicorn-25263.exe no specs unicorn-25263.exe no specs unicorn-25263.exe no specs unicorn-27401.exe no specs unicorn-4843.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
208C:\Users\admin\AppData\Local\Temp\Unicorn-65137.exeC:\Users\admin\AppData\Local\Temp\Unicorn-65137.exe
Unicorn-37535.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-65137.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
536C:\Users\admin\AppData\Local\Temp\Unicorn-50023.exeC:\Users\admin\AppData\Local\Temp\Unicorn-50023.exe—Unicorn-14545.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-50023.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
632C:\Users\admin\AppData\Local\Temp\Unicorn-42195.exeC:\Users\admin\AppData\Local\Temp\Unicorn-42195.exe
Unicorn-59517.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-42195.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
668C:\Users\admin\AppData\Local\Temp\Unicorn-11852.exeC:\Users\admin\AppData\Local\Temp\Unicorn-11852.exe
Unicorn-39481.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-11852.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
728C:\WINDOWS\system32\SppExtComObj.exe -EmbeddingC:\Windows\System32\SppExtComObj.Exe—svchost.exe
User:
NETWORK SERVICE
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
KMS Connection Broker
Version:
10.0.19041.3996 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\sppextcomobj.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\oleaut32.dll
872C:\Users\admin\AppData\Local\Temp\Unicorn-41108.exeC:\Users\admin\AppData\Local\Temp\Unicorn-41108.exe—Unicorn-6249.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-41108.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1128C:\Users\admin\AppData\Local\Temp\Unicorn-11944.exeC:\Users\admin\AppData\Local\Temp\Unicorn-11944.exe
Unicorn-53300.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-11944.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1164C:\Users\admin\AppData\Local\Temp\Unicorn-32802.exeC:\Users\admin\AppData\Local\Temp\Unicorn-32802.exe
Unicorn-61338.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-32802.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1272C:\Users\admin\AppData\Local\Temp\Unicorn-23721.exeC:\Users\admin\AppData\Local\Temp\Unicorn-23721.exe
Unicorn-10508.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-23721.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1452C:\Users\admin\AppData\Local\Temp\Unicorn-41160.exeC:\Users\admin\AppData\Local\Temp\Unicorn-41160.exe
Unicorn-11852.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-41160.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
Total events
13 942
Read events
13 927
Write events
15
Delete events
0

Modification events

(PID) Process:(7568) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(7568) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(7568) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(8024) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(8024) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(8024) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(7176) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(7176) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(7176) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(2136) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
Executable files
1 116
Suspicious files
8
Text files
1
Unknown types
0

Dropped files

PID
Process
Filename
Type
7888WerFault.exeC:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Unicorn-290.exe_89e57babe87fe07df480a5707fd5b9d7a72fe367_f3cbdcd7_d4c3413c-4512-4248-b488-b527aa63041e\Report.wer —
MD5:—
SHA256:—
46201 (342).exeC:\Users\admin\AppData\Local\Temp\Unicorn-63781.exeexecutable
MD5:76D9237E76AD4563B4A140FAB5C9C91F
SHA256:146B04A179AD978A7B169077B3DBF64A2D2F6A1DF2295AF8BCAC801E530932D8
8024BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\20900b88-7163-4a64-bc87-55d9fd8e4b53.down_data —
MD5:—
SHA256:—
6872Unicorn-2262.exeC:\Users\admin\AppData\Local\Temp\Unicorn-56699.exeexecutable
MD5:B741CBCB4EC4DB348F9D902AA1938297
SHA256:1F1BF9BAE800DAF955BD6D02CA5A00BD81443B1484DAF7063C8AA3AE90852D20
7428Unicorn-61338.exeC:\Users\admin\AppData\Local\Temp\Unicorn-290.exeexecutable
MD5:3BB0F1FE07DA958E1505CA41EA78D7E1
SHA256:5DA3B8C43BDBDED4169EECDA70F3D49A8CD7E66AA2A094A3170874E176655AE9
6872Unicorn-2262.exeC:\Users\admin\AppData\Local\Temp\Unicorn-5582.exeexecutable
MD5:670171E25B7F89ED8C4EDB3807D29840
SHA256:9DECF87718480583B744FCADBF0CD84D24FBA3621176783AB0E598875A7A2920
46201 (342).exeC:\Users\admin\AppData\Local\Temp\Unicorn-61338.exeexecutable
MD5:BDDB7FF7A35518C56C86E295E616FE90
SHA256:A8F8BC2325A75DE2631EEAFDBC187A2F923F7274F5C3368014AA5C3C37F742E2
7408Unicorn-56699.exeC:\Users\admin\AppData\Local\Temp\Unicorn-53300.exeexecutable
MD5:DC15CD5E7BAC558CF694B0ECD6CBBCB5
SHA256:75FC25D3C10D9410147D4580F287E268D4D5558EC0D94253B4DE33C4A4E5C16B
7468Unicorn-41323.exeC:\Users\admin\AppData\Local\Temp\Unicorn-32133.exeexecutable
MD5:05892050855ABDC478D777DCBD8383BC
SHA256:85FDA28024868B04FF808C628120791044C3656C04BB9D0C61921E5A5816E73F
7488Unicorn-62490.exeC:\Users\admin\AppData\Local\Temp\Unicorn-11712.exeexecutable
MD5:B77571BDC7E503DF9BC3F373A5AB23F4
SHA256:E47B9D3C3FD1B726569F4E3FAFFBE3F143E7FDD41C77048D51B4A589ED3A7726
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
25
DNS requests
19
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
6048
backgroundTaskHost.exe
GET
200
23.63.118.230:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
whitelisted
6544
svchost.exe
GET
200
23.63.118.230:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
8024
BackgroundTransferHost.exe
GET
200
23.63.118.230:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
8804
SIHClient.exe
GET
200
2.23.246.101:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
—
—
GET
200
184.24.77.35:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
8804
SIHClient.exe
GET
200
2.23.246.101:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
—
—
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
—
—
184.24.77.35:80
crl.microsoft.com
Akamai International B.V.
DE
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
6544
svchost.exe
20.190.160.67:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
23.63.118.230:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted
5496
MoUsoCoreWorker.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
3216
svchost.exe
40.113.110.67:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
40.126.31.73:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
2104
svchost.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
6048
backgroundTaskHost.exe
20.223.35.26:443
arc.msn.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 4.231.128.59
whitelisted
crl.microsoft.com
  • 184.24.77.35
  • 184.24.77.6
  • 184.24.77.37
whitelisted
google.com
  • 172.217.16.142
whitelisted
login.live.com
  • 20.190.160.67
  • 20.190.160.128
  • 40.126.32.74
  • 20.190.160.14
  • 20.190.160.5
  • 20.190.160.2
  • 40.126.32.133
  • 40.126.32.136
  • 40.126.31.73
  • 40.126.31.71
  • 20.190.159.23
  • 20.190.159.128
  • 20.190.159.2
  • 20.190.159.0
  • 40.126.31.131
  • 40.126.31.129
whitelisted
ocsp.digicert.com
  • 23.63.118.230
whitelisted
client.wns.windows.com
  • 40.113.110.67
  • 40.113.103.199
whitelisted
arc.msn.com
  • 20.223.35.26
whitelisted
www.bing.com
  • 23.212.110.209
  • 23.212.110.187
  • 23.212.110.201
  • 23.212.110.200
  • 23.212.110.208
  • 23.212.110.186
  • 23.212.110.202
  • 23.212.110.185
  • 23.212.110.203
whitelisted
slscr.update.microsoft.com
  • 20.109.210.53
whitelisted
www.microsoft.com
  • 2.23.246.101
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
1 (342)