File name:

1 (342)

Full analysis: https://app.any.run/tasks/4e2eef27-5ed8-43ea-aff1-8bace087ee4f
Verdict: Malicious activity
Analysis date: March 24, 2025, 20:45:18
OS: Windows 10 Professional (build: 19044, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections
MD5:

7ADDCF7F4A1B39E6D34D460A6AA85EB0

SHA1:

DFD6EB30E36D260C4FC001D8F06A2203F1197B61

SHA256:

972402E3A315F65EA8984AB554323BF36B912E1FE170555F71374803CD5071DA

SSDEEP:

3072:hiS3qcE/pDW8V6pEDkSNW84266FuLEmsfpfu4hwoLcBuIR:hiS3qcExDOiYSs28ozfpfu4hwoLcBuI

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Starts itself from another location

      • Unicorn-2262.exe (PID: 6872)
      • 1 (342).exe (PID: 4620)
      • Unicorn-56699.exe (PID: 7408)
      • Unicorn-62490.exe (PID: 7488)
      • Unicorn-41323.exe (PID: 7468)
      • Unicorn-61338.exe (PID: 7428)
      • Unicorn-63781.exe (PID: 7524)
      • Unicorn-32133.exe (PID: 7660)
      • Unicorn-53300.exe (PID: 7688)
      • Unicorn-11712.exe (PID: 7716)
      • Unicorn-60721.exe (PID: 7772)
      • Unicorn-40855.exe (PID: 7764)
      • Unicorn-5582.exe (PID: 7708)
      • Unicorn-36553.exe (PID: 6592)
      • Unicorn-54281.exe (PID: 7628)
      • Unicorn-21508.exe (PID: 7652)
      • Unicorn-27639.exe (PID: 7680)
      • Unicorn-46113.exe (PID: 7924)
      • Unicorn-3134.exe (PID: 7872)
      • Unicorn-29730.exe (PID: 7780)
      • Unicorn-32277.exe (PID: 7956)
      • Unicorn-50097.exe (PID: 7596)
      • Unicorn-43213.exe (PID: 7940)
      • Unicorn-10508.exe (PID: 7520)
      • Unicorn-757.exe (PID: 7504)
      • Unicorn-59517.exe (PID: 6044)
      • Unicorn-57471.exe (PID: 7448)
      • Unicorn-14810.exe (PID: 5260)
      • Unicorn-37535.exe (PID: 7460)
      • Unicorn-64732.exe (PID: 8060)
      • Unicorn-39481.exe (PID: 8068)
      • Unicorn-51733.exe (PID: 8084)
      • Unicorn-51468.exe (PID: 8116)
      • Unicorn-7171.exe (PID: 8008)
      • Unicorn-41427.exe (PID: 7192)
      • Unicorn-10700.exe (PID: 2564)
      • Unicorn-24359.exe (PID: 7860)
      • Unicorn-48806.exe (PID: 7844)
      • Unicorn-60456.exe (PID: 7268)
      • Unicorn-59709.exe (PID: 7276)
      • Unicorn-9938.exe (PID: 7228)
      • Unicorn-55625.exe (PID: 7272)
      • Unicorn-12738.exe (PID: 5008)
      • Unicorn-32802.exe (PID: 1164)
      • Unicorn-59709.exe (PID: 6964)
      • Unicorn-13201.exe (PID: 5504)
      • Unicorn-7601.exe (PID: 4452)
      • Unicorn-59709.exe (PID: 7292)
      • Unicorn-13201.exe (PID: 3884)
      • Unicorn-15386.exe (PID: 7932)
      • Unicorn-43928.exe (PID: 3140)
      • Unicorn-59709.exe (PID: 4336)
      • Unicorn-23721.exe (PID: 1272)
      • Unicorn-7939.exe (PID: 5176)
      • Unicorn-38111.exe (PID: 4212)
      • Unicorn-36065.exe (PID: 7348)
      • Unicorn-42195.exe (PID: 632)
      • Unicorn-15287.exe (PID: 5964)
      • Unicorn-65137.exe (PID: 208)
      • Unicorn-14545.exe (PID: 7548)
      • Unicorn-11468.exe (PID: 5984)
      • Unicorn-13990.exe (PID: 7824)
      • Unicorn-11852.exe (PID: 668)
      • Unicorn-36911.exe (PID: 8176)
      • Unicorn-62813.exe (PID: 5508)
      • Unicorn-6106.exe (PID: 8228)
      • Unicorn-61437.exe (PID: 8160)
      • Unicorn-61224.exe (PID: 6080)
      • Unicorn-48178.exe (PID: 8268)
      • Unicorn-10700.exe (PID: 4688)
      • Unicorn-8728.exe (PID: 8284)
      • Unicorn-37871.exe (PID: 8348)
      • Unicorn-4452.exe (PID: 8400)
      • Unicorn-51707.exe (PID: 8316)
      • Unicorn-1115.exe (PID: 8332)
      • Unicorn-55691.exe (PID: 8368)
      • Unicorn-61821.exe (PID: 8376)
      • Unicorn-14758.exe (PID: 8452)
      • Unicorn-59709.exe (PID: 4200)
      • Unicorn-49569.exe (PID: 8480)
      • Unicorn-41136.exe (PID: 8420)
      • Unicorn-10674.exe (PID: 8428)
      • Unicorn-29703.exe (PID: 8468)
      • Unicorn-18843.exe (PID: 8536)
      • Unicorn-5007.exe (PID: 8604)
      • Unicorn-47986.exe (PID: 8628)
      • Unicorn-24873.exe (PID: 8664)
      • Unicorn-26936.exe (PID: 2140)
      • Unicorn-24873.exe (PID: 8548)
      • Unicorn-59451.exe (PID: 8612)
      • Unicorn-20896.exe (PID: 8572)
      • Unicorn-18843.exe (PID: 8500)
      • Unicorn-47986.exe (PID: 8620)
      • Unicorn-38998.exe (PID: 8716)
      • Unicorn-61721.exe (PID: 8736)
      • Unicorn-49569.exe (PID: 8476)
      • Unicorn-53653.exe (PID: 8516)
      • Unicorn-47986.exe (PID: 8636)
      • Unicorn-15386.exe (PID: 7976)
      • Unicorn-52091.exe (PID: 8860)
      • Unicorn-51991.exe (PID: 8876)
      • Unicorn-48007.exe (PID: 8832)
      • Unicorn-38255.exe (PID: 8884)
      • Unicorn-29341.exe (PID: 9048)
      • Unicorn-54037.exe (PID: 9012)
      • Unicorn-54037.exe (PID: 9008)
      • Unicorn-17643.exe (PID: 9108)
      • Unicorn-33516.exe (PID: 9120)
      • Unicorn-13559.exe (PID: 9072)
      • Unicorn-9042.exe (PID: 4180)
      • Unicorn-19035.exe (PID: 6972)
      • Unicorn-19035.exe (PID: 9212)
      • Unicorn-10525.exe (PID: 9260)
      • Unicorn-36811.exe (PID: 7256)
      • Unicorn-58243.exe (PID: 9232)
      • Unicorn-17210.exe (PID: 8840)
      • Unicorn-2265.exe (PID: 7252)
      • Unicorn-22777.exe (PID: 5304)
      • Unicorn-12571.exe (PID: 9244)
      • Unicorn-11944.exe (PID: 1128)
      • Unicorn-60189.exe (PID: 9348)
      • Unicorn-6249.exe (PID: 9384)
      • Unicorn-43155.exe (PID: 7340)
      • Unicorn-61388.exe (PID: 9428)
      • Unicorn-12379.exe (PID: 9400)
      • Unicorn-62135.exe (PID: 9392)
      • Unicorn-25186.exe (PID: 9484)
      • Unicorn-10241.exe (PID: 9368)
      • Unicorn-45052.exe (PID: 9492)
      • Unicorn-8103.exe (PID: 9468)
      • Unicorn-48871.exe (PID: 9500)
      • Unicorn-37487.exe (PID: 4880)
      • Unicorn-33425.exe (PID: 9080)
      • Unicorn-9280.exe (PID: 9436)
      • Unicorn-1930.exe (PID: 8204)
      • Unicorn-8679.exe (PID: 9532)
      • Unicorn-41160.exe (PID: 1452)
      • Unicorn-45869.exe (PID: 8960)
      • Unicorn-20666.exe (PID: 9576)
      • Unicorn-20666.exe (PID: 9572)
      • Unicorn-55791.exe (PID: 8248)
      • Unicorn-44045.exe (PID: 9548)
      • Unicorn-60210.exe (PID: 9652)
      • Unicorn-58740.exe (PID: 9672)
      • Unicorn-12812.exe (PID: 8300)
      • Unicorn-14758.exe (PID: 8460)
      • Unicorn-33952.exe (PID: 9740)
      • Unicorn-29868.exe (PID: 9724)
      • Unicorn-53653.exe (PID: 8508)
      • Unicorn-37431.exe (PID: 8564)
      • Unicorn-47986.exe (PID: 8644)
      • Unicorn-18843.exe (PID: 8492)
      • Unicorn-46759.exe (PID: 9988)
      • Unicorn-40074.exe (PID: 10020)
      • Unicorn-64898.exe (PID: 8984)
      • Unicorn-28578.exe (PID: 9100)
      • Unicorn-33160.exe (PID: 9064)
      • Unicorn-34336.exe (PID: 10084)
      • Unicorn-19946.exe (PID: 10160)
      • Unicorn-47143.exe (PID: 10132)
      • Unicorn-2265.exe (PID: 7324)
      • Unicorn-34912.exe (PID: 10176)
      • Unicorn-34912.exe (PID: 10184)
      • Unicorn-37604.exe (PID: 10212)
      • Unicorn-34811.exe (PID: 10236)
      • Unicorn-20522.exe (PID: 4436)
      • Unicorn-59416.exe (PID: 9328)
      • Unicorn-47719.exe (PID: 10228)
      • Unicorn-41496.exe (PID: 5936)
      • Unicorn-56681.exe (PID: 9636)
      • Unicorn-52929.exe (PID: 8928)
      • Unicorn-20906.exe (PID: 10316)
      • Unicorn-12545.exe (PID: 10368)

    • Executable content was dropped or overwritten

      • Unicorn-2262.exe (PID: 6872)
      • Unicorn-56699.exe (PID: 7408)
      • 1 (342).exe (PID: 4620)
      • Unicorn-62490.exe (PID: 7488)
      • Unicorn-61338.exe (PID: 7428)
      • Unicorn-41323.exe (PID: 7468)
      • Unicorn-63781.exe (PID: 7524)
      • Unicorn-32133.exe (PID: 7660)
      • Unicorn-53300.exe (PID: 7688)
      • Unicorn-11712.exe (PID: 7716)
      • Unicorn-5582.exe (PID: 7708)
      • Unicorn-40855.exe (PID: 7764)
      • Unicorn-60721.exe (PID: 7772)
      • Unicorn-14810.exe (PID: 5260)
      • Unicorn-36553.exe (PID: 6592)
      • Unicorn-21508.exe (PID: 7652)
      • Unicorn-54281.exe (PID: 7628)
      • Unicorn-24359.exe (PID: 7860)
      • Unicorn-46113.exe (PID: 7924)
      • Unicorn-15386.exe (PID: 7976)
      • Unicorn-27639.exe (PID: 7680)
      • Unicorn-3134.exe (PID: 7872)
      • Unicorn-10508.exe (PID: 7520)
      • Unicorn-757.exe (PID: 7504)
      • Unicorn-59517.exe (PID: 6044)
      • Unicorn-57471.exe (PID: 7448)
      • Unicorn-39481.exe (PID: 8068)
      • Unicorn-37535.exe (PID: 7460)
      • Unicorn-64732.exe (PID: 8060)
      • Unicorn-51733.exe (PID: 8084)
      • Unicorn-51468.exe (PID: 8116)
      • Unicorn-7171.exe (PID: 8008)
      • Unicorn-41427.exe (PID: 7192)
      • Unicorn-10700.exe (PID: 4688)
      • Unicorn-10700.exe (PID: 2564)
      • Unicorn-60456.exe (PID: 7268)
      • Unicorn-48806.exe (PID: 7844)
      • Unicorn-59709.exe (PID: 7276)
      • Unicorn-59709.exe (PID: 4200)
      • Unicorn-55625.exe (PID: 7272)
      • Unicorn-59709.exe (PID: 6964)
      • Unicorn-12738.exe (PID: 5008)
      • Unicorn-15386.exe (PID: 7932)
      • Unicorn-7601.exe (PID: 4452)
      • Unicorn-59709.exe (PID: 7292)
      • Unicorn-43928.exe (PID: 3140)
      • Unicorn-50097.exe (PID: 7596)
      • Unicorn-23721.exe (PID: 1272)
      • Unicorn-7939.exe (PID: 5176)
      • Unicorn-38111.exe (PID: 4212)
      • Unicorn-42195.exe (PID: 632)
      • Unicorn-65137.exe (PID: 208)
      • Unicorn-11468.exe (PID: 5984)
      • Unicorn-61224.exe (PID: 6080)
      • Unicorn-11944.exe (PID: 1128)
      • Unicorn-11852.exe (PID: 668)
      • Unicorn-36911.exe (PID: 8176)
      • Unicorn-61437.exe (PID: 8160)
      • Unicorn-43155.exe (PID: 7340)
      • Unicorn-37487.exe (PID: 4880)
      • Unicorn-1930.exe (PID: 8204)
      • Unicorn-6106.exe (PID: 8228)
      • Unicorn-55791.exe (PID: 8248)
      • Unicorn-62813.exe (PID: 5508)
      • Unicorn-48178.exe (PID: 8268)
      • Unicorn-12812.exe (PID: 8300)
      • Unicorn-8728.exe (PID: 8284)
      • Unicorn-37871.exe (PID: 8348)
      • Unicorn-4452.exe (PID: 8400)
      • Unicorn-1115.exe (PID: 8332)
      • Unicorn-55691.exe (PID: 8368)
      • Unicorn-61821.exe (PID: 8376)
      • Unicorn-14758.exe (PID: 8452)
      • Unicorn-41136.exe (PID: 8420)
      • Unicorn-49569.exe (PID: 8480)
      • Unicorn-10674.exe (PID: 8428)
      • Unicorn-9938.exe (PID: 7228)
      • Unicorn-29703.exe (PID: 8468)
      • Unicorn-18843.exe (PID: 8536)
      • Unicorn-14758.exe (PID: 8460)
      • Unicorn-5007.exe (PID: 8604)
      • Unicorn-24873.exe (PID: 8664)
      • Unicorn-47986.exe (PID: 8628)
      • Unicorn-32802.exe (PID: 1164)
      • Unicorn-59709.exe (PID: 4336)
      • Unicorn-18843.exe (PID: 8492)
      • Unicorn-53653.exe (PID: 8508)
      • Unicorn-37431.exe (PID: 8564)
      • Unicorn-26936.exe (PID: 2140)
      • Unicorn-32277.exe (PID: 7956)
      • Unicorn-59451.exe (PID: 8612)
      • Unicorn-38998.exe (PID: 8716)
      • Unicorn-61721.exe (PID: 8736)
      • Unicorn-49569.exe (PID: 8476)
      • Unicorn-18843.exe (PID: 8500)
      • Unicorn-13201.exe (PID: 3884)
      • Unicorn-13201.exe (PID: 5504)
      • Unicorn-47986.exe (PID: 8636)
      • Unicorn-29730.exe (PID: 7780)
      • Unicorn-43213.exe (PID: 7940)
      • Unicorn-48007.exe (PID: 8832)
      • Unicorn-38255.exe (PID: 8884)
      • Unicorn-52091.exe (PID: 8860)
      • Unicorn-51991.exe (PID: 8876)
      • Unicorn-28578.exe (PID: 9100)
      • Unicorn-54037.exe (PID: 9008)
      • Unicorn-29341.exe (PID: 9048)
      • Unicorn-64898.exe (PID: 8984)
      • Unicorn-45869.exe (PID: 8960)
      • Unicorn-36065.exe (PID: 7348)
      • Unicorn-33516.exe (PID: 9120)
      • Unicorn-13559.exe (PID: 9072)
      • Unicorn-19035.exe (PID: 6972)
      • Unicorn-9042.exe (PID: 4180)
      • Unicorn-10525.exe (PID: 9260)
      • Unicorn-36811.exe (PID: 7256)
      • Unicorn-43106.exe (PID: 9320)
      • Unicorn-41160.exe (PID: 1452)
      • Unicorn-12571.exe (PID: 9244)
      • Unicorn-14545.exe (PID: 7548)
      • Unicorn-2265.exe (PID: 7324)
      • Unicorn-60189.exe (PID: 9348)
      • Unicorn-6249.exe (PID: 9384)
      • Unicorn-10241.exe (PID: 9368)
      • Unicorn-61388.exe (PID: 9428)
      • Unicorn-12379.exe (PID: 9400)
      • Unicorn-62135.exe (PID: 9392)
      • Unicorn-9280.exe (PID: 9436)
      • Unicorn-8103.exe (PID: 9468)
      • Unicorn-45052.exe (PID: 9492)
      • Unicorn-48871.exe (PID: 9500)
      • Unicorn-8679.exe (PID: 9532)
      • Unicorn-20666.exe (PID: 9572)
      • Unicorn-20666.exe (PID: 9576)
      • Unicorn-44045.exe (PID: 9548)
      • Unicorn-60210.exe (PID: 9652)
      • Unicorn-56681.exe (PID: 9636)
      • Unicorn-51707.exe (PID: 8316)
      • Unicorn-58740.exe (PID: 9672)
      • Unicorn-29868.exe (PID: 9724)
      • Unicorn-33952.exe (PID: 9740)
      • Unicorn-24873.exe (PID: 8548)
      • Unicorn-47986.exe (PID: 8620)
      • Unicorn-20896.exe (PID: 8572)
      • Unicorn-46759.exe (PID: 9988)
      • Unicorn-53653.exe (PID: 8516)
      • Unicorn-40074.exe (PID: 10020)
      • Unicorn-17643.exe (PID: 9108)
      • Unicorn-34336.exe (PID: 10084)
      • Unicorn-33160.exe (PID: 9064)
      • Unicorn-47143.exe (PID: 10132)
      • Unicorn-2265.exe (PID: 7252)
      • Unicorn-19946.exe (PID: 10160)
      • Unicorn-34912.exe (PID: 10176)
      • Unicorn-58243.exe (PID: 9232)
      • Unicorn-34912.exe (PID: 10184)
      • Unicorn-25186.exe (PID: 9484)
      • Unicorn-34811.exe (PID: 10236)
      • Unicorn-37604.exe (PID: 10212)
      • Unicorn-33425.exe (PID: 9080)
      • Unicorn-20522.exe (PID: 4436)
      • Unicorn-59416.exe (PID: 9328)
      • Unicorn-52929.exe (PID: 8928)
      • Unicorn-47719.exe (PID: 10228)
      • Unicorn-41496.exe (PID: 5936)
      • Unicorn-18960.exe (PID: 10280)
      • Unicorn-35850.exe (PID: 10344)
      • Unicorn-20906.exe (PID: 10316)
      • Unicorn-12545.exe (PID: 10368)
      • Unicorn-47986.exe (PID: 8644)
      • Unicorn-53578.exe (PID: 10396)
      • Unicorn-47356.exe (PID: 10452)
      • Unicorn-22777.exe (PID: 5304)
      • Unicorn-13990.exe (PID: 7824)
      • Unicorn-7070.exe (PID: 10424)
      • Unicorn-20714.exe (PID: 10460)
      • Unicorn-15287.exe (PID: 5964)
      • Unicorn-13121.exe (PID: 10548)
      • Unicorn-4953.exe (PID: 10484)
      • Unicorn-39764.exe (PID: 10520)
      • Unicorn-4191.exe (PID: 10532)
      • Unicorn-35680.exe (PID: 10504)
      • Unicorn-58793.exe (PID: 10540)
      • Unicorn-35580.exe (PID: 10600)
      • Unicorn-45886.exe (PID: 10696)
      • Unicorn-47932.exe (PID: 10664)
      • Unicorn-23327.exe (PID: 10708)
      • Unicorn-32150.exe (PID: 10688)
      • Unicorn-52016.exe (PID: 10760)
      • Unicorn-45794.exe (PID: 10628)
      • Unicorn-9592.exe (PID: 10716)
      • Unicorn-677.exe (PID: 10748)
      • Unicorn-15067.exe (PID: 10868)
      • Unicorn-52016.exe (PID: 10736)
      • Unicorn-46925.exe (PID: 11068)
      • Unicorn-4761.exe (PID: 10784)
      • Unicorn-52571.exe (PID: 10608)
      • Unicorn-52016.exe (PID: 10728)
      • Unicorn-47932.exe (PID: 10656)
      • Unicorn-21652.exe (PID: 10956)
      • Unicorn-10883.exe (PID: 10996)
      • Unicorn-44211.exe (PID: 10940)
      • Unicorn-4761.exe (PID: 10776)
      • Unicorn-23236.exe (PID: 10904)
      • Unicorn-57085.exe (PID: 11012)
      • Unicorn-988.exe (PID: 11088)
      • Unicorn-57860.exe (PID: 11080)
      • Unicorn-54037.exe (PID: 9012)
      • Unicorn-20282.exe (PID: 11136)
      • Unicorn-20282.exe (PID: 11132)
      • Unicorn-62685.exe (PID: 11004)
      • Unicorn-9513.exe (PID: 11184)
      • Unicorn-23135.exe (PID: 11060)
      • Unicorn-7283.exe (PID: 11220)
      • Unicorn-19035.exe (PID: 9212)
      • Unicorn-27704.exe (PID: 11320)
      • Unicorn-3754.exe (PID: 11304)
      • Unicorn-8845.exe (PID: 10812)
      • Unicorn-45721.exe (PID: 11364)
      • Unicorn-38486.exe (PID: 11388)
      • Unicorn-35488.exe (PID: 10796)
      • Unicorn-25977.exe (PID: 11044)
      • Unicorn-28280.exe (PID: 11444)
      • Unicorn-15067.exe (PID: 10864)
      • Unicorn-28280.exe (PID: 11436)
      • Unicorn-61699.exe (PID: 11416)
      • Unicorn-17210.exe (PID: 8840)
      • Unicorn-3583.exe (PID: 11476)

    • Executes application which crashes

      • Unicorn-290.exe (PID: 7504)

  • INFO

    • The sample compiled with chinese language support

      • 1 (342).exe (PID: 4620)
      • Unicorn-41136.exe (PID: 8420)
      • Unicorn-47143.exe (PID: 10132)
      • Unicorn-19946.exe (PID: 10160)
      • Unicorn-43106.exe (PID: 9320)
      • Unicorn-15386.exe (PID: 7976)
      • Unicorn-47356.exe (PID: 10452)
      • Unicorn-12571.exe (PID: 9244)
      • Unicorn-2262.exe (PID: 6872)
      • Unicorn-34912.exe (PID: 10176)
      • Unicorn-54281.exe (PID: 7628)
      • Unicorn-53300.exe (PID: 7688)
      • Unicorn-14545.exe (PID: 7548)
      • Unicorn-11468.exe (PID: 5984)
      • Unicorn-41323.exe (PID: 7468)
      • Unicorn-64732.exe (PID: 8060)
      • Unicorn-10241.exe (PID: 9368)
      • Unicorn-62135.exe (PID: 9392)
      • Unicorn-34912.exe (PID: 10184)
      • Unicorn-37604.exe (PID: 10212)
      • Unicorn-48871.exe (PID: 9500)
      • Unicorn-62813.exe (PID: 5508)
      • Unicorn-56699.exe (PID: 7408)
      • Unicorn-13121.exe (PID: 10548)
      • Unicorn-1930.exe (PID: 8204)
      • Unicorn-8679.exe (PID: 9532)
      • Unicorn-34811.exe (PID: 10236)
      • Unicorn-41160.exe (PID: 1452)
      • Unicorn-11712.exe (PID: 7716)
      • Unicorn-47719.exe (PID: 10228)
      • Unicorn-2265.exe (PID: 7252)
      • Unicorn-13990.exe (PID: 7824)
      • Unicorn-27639.exe (PID: 7680)
      • Unicorn-20666.exe (PID: 9576)
      • Unicorn-59416.exe (PID: 9328)
      • Unicorn-55791.exe (PID: 8248)
      • Unicorn-39764.exe (PID: 10520)
      • Unicorn-20666.exe (PID: 9572)
      • Unicorn-20522.exe (PID: 4436)
      • Unicorn-44045.exe (PID: 9548)
      • Unicorn-3134.exe (PID: 7872)
      • Unicorn-61224.exe (PID: 6080)
      • Unicorn-41496.exe (PID: 5936)
      • Unicorn-35680.exe (PID: 10504)
      • Unicorn-36911.exe (PID: 8176)
      • Unicorn-60721.exe (PID: 7772)
      • Unicorn-58793.exe (PID: 10540)
      • Unicorn-40855.exe (PID: 7764)
      • Unicorn-52929.exe (PID: 8928)
      • Unicorn-41427.exe (PID: 7192)
      • Unicorn-48178.exe (PID: 8268)
      • Unicorn-35580.exe (PID: 10600)
      • Unicorn-23327.exe (PID: 10708)
      • Unicorn-10700.exe (PID: 2564)
      • Unicorn-51468.exe (PID: 8116)
      • Unicorn-45886.exe (PID: 10696)
      • Unicorn-12812.exe (PID: 8300)
      • Unicorn-4452.exe (PID: 8400)
      • Unicorn-56681.exe (PID: 9636)
      • Unicorn-60210.exe (PID: 9652)
      • Unicorn-37871.exe (PID: 8348)
      • Unicorn-47932.exe (PID: 10664)
      • Unicorn-10700.exe (PID: 4688)
      • Unicorn-48806.exe (PID: 7844)
      • Unicorn-32150.exe (PID: 10688)
      • Unicorn-60456.exe (PID: 7268)
      • Unicorn-18960.exe (PID: 10280)
      • Unicorn-5582.exe (PID: 7708)
      • Unicorn-61821.exe (PID: 8376)
      • Unicorn-52016.exe (PID: 10760)
      • Unicorn-9592.exe (PID: 10716)
      • Unicorn-45794.exe (PID: 10628)
      • Unicorn-12738.exe (PID: 5008)
      • Unicorn-677.exe (PID: 10748)
      • Unicorn-10674.exe (PID: 8428)
      • Unicorn-51707.exe (PID: 8316)
      • Unicorn-24359.exe (PID: 7860)
      • Unicorn-58740.exe (PID: 9672)
      • Unicorn-59709.exe (PID: 7276)
      • Unicorn-35850.exe (PID: 10344)
      • Unicorn-9938.exe (PID: 7228)
      • Unicorn-24873.exe (PID: 8664)
      • Unicorn-12545.exe (PID: 10368)
      • Unicorn-14758.exe (PID: 8460)
      • Unicorn-29868.exe (PID: 9724)
      • Unicorn-52016.exe (PID: 10736)
      • Unicorn-5007.exe (PID: 8604)
      • Unicorn-62490.exe (PID: 7488)
      • Unicorn-15067.exe (PID: 10868)
      • Unicorn-14758.exe (PID: 8452)
      • Unicorn-32802.exe (PID: 1164)
      • Unicorn-46925.exe (PID: 11068)
      • Unicorn-4761.exe (PID: 10784)
      • Unicorn-52571.exe (PID: 10608)
      • Unicorn-59709.exe (PID: 4336)
      • Unicorn-26936.exe (PID: 2140)
      • Unicorn-15386.exe (PID: 7932)
      • Unicorn-55625.exe (PID: 7272)
      • Unicorn-47986.exe (PID: 8620)
      • Unicorn-20896.exe (PID: 8572)
      • Unicorn-52016.exe (PID: 10728)
      • Unicorn-32277.exe (PID: 7956)
      • Unicorn-53653.exe (PID: 8508)
      • Unicorn-47986.exe (PID: 8644)
      • Unicorn-18843.exe (PID: 8500)
      • Unicorn-47986.exe (PID: 8636)
      • Unicorn-21652.exe (PID: 10956)
      • Unicorn-53653.exe (PID: 8516)
      • Unicorn-10883.exe (PID: 10996)
      • Unicorn-33952.exe (PID: 9740)
      • Unicorn-44211.exe (PID: 10940)
      • Unicorn-13201.exe (PID: 5504)
      • Unicorn-23236.exe (PID: 10904)
      • Unicorn-63781.exe (PID: 7524)
      • Unicorn-59709.exe (PID: 6964)
      • Unicorn-43213.exe (PID: 7940)
      • Unicorn-29730.exe (PID: 7780)
      • Unicorn-61338.exe (PID: 7428)
      • Unicorn-40074.exe (PID: 10020)
      • Unicorn-53578.exe (PID: 10396)
      • Unicorn-57085.exe (PID: 11012)
      • Unicorn-46759.exe (PID: 9988)
      • Unicorn-47932.exe (PID: 10656)
      • Unicorn-4761.exe (PID: 10776)
      • Unicorn-7070.exe (PID: 10424)
      • Unicorn-43928.exe (PID: 3140)
      • Unicorn-52091.exe (PID: 8860)
      • Unicorn-14810.exe (PID: 5260)
      • Unicorn-988.exe (PID: 11088)
      • Unicorn-57860.exe (PID: 11080)
      • Unicorn-38255.exe (PID: 8884)
      • Unicorn-7939.exe (PID: 5176)
      • Unicorn-20282.exe (PID: 11136)
      • Unicorn-10508.exe (PID: 7520)
      • Unicorn-20282.exe (PID: 11132)
      • Unicorn-23721.exe (PID: 1272)
      • Unicorn-46113.exe (PID: 7924)
      • Unicorn-62685.exe (PID: 11004)
      • Unicorn-54037.exe (PID: 9012)
      • Unicorn-54037.exe (PID: 9008)
      • Unicorn-59517.exe (PID: 6044)
      • Unicorn-9513.exe (PID: 11184)
      • Unicorn-23135.exe (PID: 11060)
      • Unicorn-17643.exe (PID: 9108)
      • Unicorn-64898.exe (PID: 8984)
      • Unicorn-48007.exe (PID: 8832)
      • Unicorn-20714.exe (PID: 10460)
      • Unicorn-42195.exe (PID: 632)
      • Unicorn-34336.exe (PID: 10084)
      • Unicorn-9042.exe (PID: 4180)
      • Unicorn-757.exe (PID: 7504)
      • Unicorn-36553.exe (PID: 6592)
      • Unicorn-32133.exe (PID: 7660)
      • Unicorn-38111.exe (PID: 4212)
      • Unicorn-29341.exe (PID: 9048)
      • Unicorn-33160.exe (PID: 9064)
      • Unicorn-49569.exe (PID: 8476)
      • Unicorn-36811.exe (PID: 7256)
      • Unicorn-58243.exe (PID: 9232)
      • Unicorn-37535.exe (PID: 7460)
      • Unicorn-60189.exe (PID: 9348)
      • Unicorn-11852.exe (PID: 668)
      • Unicorn-21508.exe (PID: 7652)
      • Unicorn-12379.exe (PID: 9400)
      • Unicorn-51733.exe (PID: 8084)
      • Unicorn-51991.exe (PID: 8876)
      • Unicorn-25186.exe (PID: 9484)
      • Unicorn-8103.exe (PID: 9468)
      • Unicorn-37487.exe (PID: 4880)
      • Unicorn-61437.exe (PID: 8160)
      • Unicorn-7171.exe (PID: 8008)
      • Unicorn-18843.exe (PID: 8536)
      • Unicorn-19035.exe (PID: 6972)
      • Unicorn-15287.exe (PID: 5964)
      • Unicorn-4953.exe (PID: 10484)
      • Unicorn-4191.exe (PID: 10532)
      • Unicorn-8728.exe (PID: 8284)
      • Unicorn-27704.exe (PID: 11320)
      • Unicorn-55691.exe (PID: 8368)
      • Unicorn-3754.exe (PID: 11304)
      • Unicorn-20906.exe (PID: 10316)
      • Unicorn-59709.exe (PID: 4200)
      • Unicorn-8845.exe (PID: 10812)
      • Unicorn-33425.exe (PID: 9080)
      • Unicorn-7283.exe (PID: 11220)
      • Unicorn-19035.exe (PID: 9212)
      • Unicorn-1115.exe (PID: 8332)
      • Unicorn-29703.exe (PID: 8468)
      • Unicorn-45721.exe (PID: 11364)
      • Unicorn-57471.exe (PID: 7448)
      • Unicorn-22777.exe (PID: 5304)
      • Unicorn-65137.exe (PID: 208)
      • Unicorn-39481.exe (PID: 8068)
      • Unicorn-61388.exe (PID: 9428)
      • Unicorn-45052.exe (PID: 9492)
      • Unicorn-9280.exe (PID: 9436)
      • Unicorn-6106.exe (PID: 8228)
      • Unicorn-38486.exe (PID: 11388)
      • Unicorn-49569.exe (PID: 8480)
      • Unicorn-25977.exe (PID: 11044)
      • Unicorn-36065.exe (PID: 7348)
      • Unicorn-38998.exe (PID: 8716)
      • Unicorn-59709.exe (PID: 7292)
      • Unicorn-7601.exe (PID: 4452)
      • Unicorn-15067.exe (PID: 10864)
      • Unicorn-28280.exe (PID: 11444)
      • Unicorn-33516.exe (PID: 9120)
      • Unicorn-13559.exe (PID: 9072)
      • Unicorn-61699.exe (PID: 11416)
      • Unicorn-17210.exe (PID: 8840)
      • Unicorn-2265.exe (PID: 7324)
      • Unicorn-50097.exe (PID: 7596)
      • Unicorn-35488.exe (PID: 10796)
      • Unicorn-24873.exe (PID: 8548)
      • Unicorn-13201.exe (PID: 3884)
      • Unicorn-28280.exe (PID: 11436)
      • Unicorn-10525.exe (PID: 9260)
      • Unicorn-3583.exe (PID: 11476)
      • Unicorn-43155.exe (PID: 7340)
      • Unicorn-45869.exe (PID: 8960)

    • Checks supported languages

      • 1 (342).exe (PID: 4620)
      • Unicorn-2262.exe (PID: 6872)
      • Unicorn-56699.exe (PID: 7408)
      • Unicorn-61338.exe (PID: 7428)
      • Unicorn-62490.exe (PID: 7488)
      • Unicorn-41323.exe (PID: 7468)
      • Unicorn-53300.exe (PID: 7688)
      • Unicorn-11712.exe (PID: 7716)
      • Unicorn-5582.exe (PID: 7708)
      • Unicorn-290.exe (PID: 7504)
      • Unicorn-63781.exe (PID: 7524)
      • Unicorn-32133.exe (PID: 7660)
      • Unicorn-40855.exe (PID: 7764)
      • Unicorn-60721.exe (PID: 7772)
      • Unicorn-29730.exe (PID: 7780)
      • Unicorn-14810.exe (PID: 5260)
      • Unicorn-36553.exe (PID: 6592)
      • Unicorn-54281.exe (PID: 7628)
      • Unicorn-27639.exe (PID: 7680)
      • Unicorn-48806.exe (PID: 7844)
      • Unicorn-24359.exe (PID: 7860)
      • Unicorn-15386.exe (PID: 7932)
      • Unicorn-32277.exe (PID: 7956)
      • Unicorn-15386.exe (PID: 7976)
      • Unicorn-3134.exe (PID: 7872)
      • Unicorn-10508.exe (PID: 7520)
      • Unicorn-39481.exe (PID: 8068)
      • Unicorn-64732.exe (PID: 8060)
      • Unicorn-57471.exe (PID: 7448)
      • Unicorn-10700.exe (PID: 2564)
      • Unicorn-10700.exe (PID: 4688)
      • Unicorn-60456.exe (PID: 7268)
      • Unicorn-9938.exe (PID: 7228)
      • Unicorn-51468.exe (PID: 8116)
      • Unicorn-51733.exe (PID: 8084)
      • Unicorn-41427.exe (PID: 7192)
      • Unicorn-59709.exe (PID: 7276)
      • Unicorn-32802.exe (PID: 1164)
      • Unicorn-59709.exe (PID: 6964)
      • Unicorn-59709.exe (PID: 4200)
      • Unicorn-13201.exe (PID: 3884)
      • Unicorn-59709.exe (PID: 4336)
      • Unicorn-13201.exe (PID: 5504)
      • Unicorn-26936.exe (PID: 2140)
      • Unicorn-43928.exe (PID: 3140)
      • Unicorn-55625.exe (PID: 7272)
      • Unicorn-7939.exe (PID: 5176)
      • Unicorn-42195.exe (PID: 632)
      • Unicorn-38111.exe (PID: 4212)
      • Unicorn-61224.exe (PID: 6080)
      • Unicorn-15287.exe (PID: 5964)
      • Unicorn-11468.exe (PID: 5984)
      • Unicorn-23721.exe (PID: 1272)
      • Unicorn-65137.exe (PID: 208)
      • Unicorn-11944.exe (PID: 1128)
      • Unicorn-13990.exe (PID: 7824)
      • Unicorn-11852.exe (PID: 668)
      • Unicorn-36911.exe (PID: 8176)
      • Unicorn-43155.exe (PID: 7340)
      • Unicorn-37487.exe (PID: 4880)
      • Unicorn-61437.exe (PID: 8160)
      • Unicorn-6106.exe (PID: 8228)
      • Unicorn-1930.exe (PID: 8204)
      • Unicorn-55791.exe (PID: 8248)
      • Unicorn-12812.exe (PID: 8300)
      • Unicorn-51707.exe (PID: 8316)
      • Unicorn-37871.exe (PID: 8348)
      • Unicorn-55691.exe (PID: 8368)
      • Unicorn-4452.exe (PID: 8400)
      • Unicorn-10674.exe (PID: 8428)
      • Unicorn-41136.exe (PID: 8420)
      • Unicorn-29703.exe (PID: 8468)
      • Unicorn-14758.exe (PID: 8460)
      • Unicorn-49569.exe (PID: 8480)
      • Unicorn-20896.exe (PID: 8572)
      • Unicorn-53653.exe (PID: 8508)
      • Unicorn-49569.exe (PID: 8476)
      • Unicorn-53653.exe (PID: 8516)
      • Unicorn-24873.exe (PID: 8548)
      • Unicorn-37431.exe (PID: 8564)
      • Unicorn-5007.exe (PID: 8604)
      • Unicorn-47986.exe (PID: 8620)
      • Unicorn-59451.exe (PID: 8612)
      • Unicorn-18843.exe (PID: 8536)
      • Unicorn-47986.exe (PID: 8628)
      • Unicorn-47986.exe (PID: 8636)
      • Unicorn-61721.exe (PID: 8736)
      • Unicorn-18843.exe (PID: 8492)
      • Unicorn-18843.exe (PID: 8500)
      • Unicorn-38255.exe (PID: 8884)
      • Unicorn-52091.exe (PID: 8860)
      • Unicorn-51991.exe (PID: 8876)
      • Unicorn-45869.exe (PID: 8960)
      • Unicorn-64898.exe (PID: 8984)
      • Unicorn-38998.exe (PID: 8716)
      • Unicorn-13559.exe (PID: 9072)
      • Unicorn-33425.exe (PID: 9080)
      • Unicorn-29341.exe (PID: 9048)
      • Unicorn-33160.exe (PID: 9064)
      • Unicorn-33516.exe (PID: 9120)
      • Unicorn-19035.exe (PID: 6972)
      • Unicorn-54037.exe (PID: 9012)
      • Unicorn-9042.exe (PID: 4180)
      • Unicorn-2265.exe (PID: 7252)
      • Unicorn-22777.exe (PID: 5304)
      • Unicorn-2265.exe (PID: 7324)
      • Unicorn-19035.exe (PID: 9212)
      • Unicorn-43106.exe (PID: 9320)
      • Unicorn-60189.exe (PID: 9348)
      • Unicorn-17210.exe (PID: 8840)
      • Unicorn-36811.exe (PID: 7256)
      • Unicorn-41160.exe (PID: 1452)
      • Unicorn-58243.exe (PID: 9232)
      • Unicorn-12571.exe (PID: 9244)
      • Unicorn-10525.exe (PID: 9260)
      • Unicorn-61388.exe (PID: 9428)
      • Unicorn-12379.exe (PID: 9400)
      • Unicorn-9280.exe (PID: 9436)
      • Unicorn-8103.exe (PID: 9468)
      • Unicorn-48871.exe (PID: 9500)
      • Unicorn-8679.exe (PID: 9532)
      • Unicorn-6249.exe (PID: 9384)
      • Unicorn-62135.exe (PID: 9392)
      • Unicorn-44045.exe (PID: 9548)
      • Unicorn-56681.exe (PID: 9636)
      • Unicorn-60210.exe (PID: 9652)
      • Unicorn-58740.exe (PID: 9672)
      • Unicorn-20666.exe (PID: 9572)
      • Unicorn-20666.exe (PID: 9576)
      • Unicorn-33952.exe (PID: 9740)
      • Unicorn-40074.exe (PID: 10020)
      • Unicorn-29868.exe (PID: 9724)
      • Unicorn-46759.exe (PID: 9988)
      • Unicorn-34336.exe (PID: 10084)
      • Unicorn-47143.exe (PID: 10132)
      • Unicorn-19946.exe (PID: 10160)
      • Unicorn-47719.exe (PID: 10228)
      • Unicorn-34811.exe (PID: 10236)
      • Unicorn-20522.exe (PID: 4436)
      • Unicorn-59416.exe (PID: 9328)
      • Unicorn-41496.exe (PID: 5936)
      • Unicorn-34912.exe (PID: 10176)
      • Unicorn-34912.exe (PID: 10184)
      • Unicorn-37604.exe (PID: 10212)
      • Unicorn-35850.exe (PID: 10344)
      • Unicorn-12545.exe (PID: 10368)
      • Unicorn-18960.exe (PID: 10280)
      • Unicorn-7070.exe (PID: 10424)
      • Unicorn-47356.exe (PID: 10452)
      • Unicorn-20714.exe (PID: 10460)
      • Unicorn-4953.exe (PID: 10484)
      • Unicorn-53578.exe (PID: 10396)
      • Unicorn-39764.exe (PID: 10520)
      • Unicorn-58793.exe (PID: 10540)
      • Unicorn-13121.exe (PID: 10548)
      • Unicorn-45794.exe (PID: 10628)
      • Unicorn-52571.exe (PID: 10608)
      • Unicorn-35580.exe (PID: 10600)
      • Unicorn-35680.exe (PID: 10504)
      • Unicorn-4191.exe (PID: 10532)
      • Unicorn-47932.exe (PID: 10656)
      • Unicorn-47932.exe (PID: 10664)
      • Unicorn-32150.exe (PID: 10688)
      • Unicorn-23327.exe (PID: 10708)
      • Unicorn-9592.exe (PID: 10716)
      • Unicorn-677.exe (PID: 10748)
      • Unicorn-52016.exe (PID: 10728)
      • Unicorn-8845.exe (PID: 10812)
      • Unicorn-45886.exe (PID: 10696)
      • Unicorn-52016.exe (PID: 10736)
      • Unicorn-35488.exe (PID: 10796)
      • Unicorn-4761.exe (PID: 10776)
      • Unicorn-52016.exe (PID: 10760)
      • Unicorn-23236.exe (PID: 10904)
      • Unicorn-44211.exe (PID: 10940)
      • Unicorn-62685.exe (PID: 11004)
      • Unicorn-4761.exe (PID: 10784)
      • Unicorn-15067.exe (PID: 10864)
      • Unicorn-23135.exe (PID: 11060)
      • Unicorn-988.exe (PID: 11088)
      • Unicorn-25977.exe (PID: 11044)
      • Unicorn-57860.exe (PID: 11080)
      • Unicorn-46925.exe (PID: 11068)
      • Unicorn-9513.exe (PID: 11184)
      • Unicorn-10883.exe (PID: 10996)
      • Unicorn-57085.exe (PID: 11012)
      • Unicorn-20282.exe (PID: 11136)
      • Unicorn-20282.exe (PID: 11132)
      • Unicorn-27704.exe (PID: 11320)
      • Unicorn-3754.exe (PID: 11304)
      • Unicorn-64460.exe (PID: 11332)
      • Unicorn-45721.exe (PID: 11364)
      • Unicorn-38486.exe (PID: 11388)
      • Unicorn-28280.exe (PID: 11436)
      • Unicorn-28280.exe (PID: 11444)
      • Unicorn-42478.exe (PID: 11492)
      • Unicorn-61699.exe (PID: 11416)
      • Unicorn-3583.exe (PID: 11476)
      • Unicorn-26142.exe (PID: 11556)
      • Unicorn-26142.exe (PID: 11548)
      • Unicorn-52784.exe (PID: 11540)
      • Unicorn-32172.exe (PID: 11608)
      • Unicorn-36256.exe (PID: 11628)
      • Unicorn-46105.exe (PID: 11740)
      • Unicorn-42378.exe (PID: 11764)
      • Unicorn-19819.exe (PID: 11788)
      • Unicorn-21103.exe (PID: 11804)
      • Unicorn-47693.exe (PID: 11840)
      • Unicorn-47693.exe (PID: 11844)
      • Unicorn-55306.exe (PID: 11908)
      • Unicorn-4138.exe (PID: 11684)
      • Unicorn-44979.exe (PID: 11708)
      • Unicorn-42378.exe (PID: 11756)
      • Unicorn-28664.exe (PID: 11956)
      • Unicorn-28664.exe (PID: 11948)
      • Unicorn-49084.exe (PID: 12012)
      • Unicorn-12135.exe (PID: 11988)
      • Unicorn-28664.exe (PID: 11940)
      • Unicorn-5913.exe (PID: 12048)
      • Unicorn-16220.exe (PID: 12116)
      • Unicorn-51030.exe (PID: 12104)
      • Unicorn-63182.exe (PID: 12152)
      • Unicorn-23045.exe (PID: 12188)
      • Unicorn-63593.exe (PID: 12208)
      • Unicorn-5913.exe (PID: 12036)
      • Unicorn-5913.exe (PID: 12032)
      • Unicorn-36640.exe (PID: 12056)
      • Unicorn-54928.exe (PID: 12232)
      • Unicorn-41108.exe (PID: 872)
      • Unicorn-4251.exe (PID: 3024)
      • Unicorn-21242.exe (PID: 2064)
      • Unicorn-25326.exe (PID: 2968)
      • Unicorn-25326.exe (PID: 12292)
      • Unicorn-43993.exe (PID: 12224)
      • Unicorn-12327.exe (PID: 12416)
      • Unicorn-26718.exe (PID: 12432)
      • Unicorn-49368.exe (PID: 12336)
      • Unicorn-63666.exe (PID: 12376)
      • Unicorn-4159.exe (PID: 12400)
      • Unicorn-45768.exe (PID: 12484)
      • Unicorn-35462.exe (PID: 12544)
      • Unicorn-16914.exe (PID: 12524)
      • Unicorn-7428.exe (PID: 12576)
      • Unicorn-29986.exe (PID: 12560)
      • Unicorn-48269.exe (PID: 12592)
      • Unicorn-33516.exe (PID: 12448)
      • Unicorn-41684.exe (PID: 12464)
      • Unicorn-51990.exe (PID: 12492)
      • Unicorn-21626.exe (PID: 12616)
      • Unicorn-21626.exe (PID: 12624)
      • Unicorn-31277.exe (PID: 12608)
      • Unicorn-10857.exe (PID: 12656)
      • Unicorn-15404.exe (PID: 12688)
      • Unicorn-26870.exe (PID: 12692)
      • Unicorn-58383.exe (PID: 12728)
      • Unicorn-20064.exe (PID: 12796)
      • Unicorn-37221.exe (PID: 12772)
      • Unicorn-50599.exe (PID: 12820)
      • Unicorn-60926.exe (PID: 12864)
      • Unicorn-23877.exe (PID: 12912)
      • Unicorn-21931.exe (PID: 12888)
      • Unicorn-48597.exe (PID: 12936)
      • Unicorn-52380.exe (PID: 12964)
      • Unicorn-8928.exe (PID: 13048)
      • Unicorn-45130.exe (PID: 13144)
      • Unicorn-15534.exe (PID: 13204)
      • Unicorn-7366.exe (PID: 13184)
      • Unicorn-14979.exe (PID: 13236)
      • Unicorn-47387.exe (PID: 13304)
      • Unicorn-35108.exe (PID: 13020)
      • Unicorn-61201.exe (PID: 13116)
      • Unicorn-28170.exe (PID: 13340)
      • Unicorn-21948.exe (PID: 13368)
      • Unicorn-23239.exe (PID: 13404)
      • Unicorn-63915.exe (PID: 13420)
      • Unicorn-64180.exe (PID: 13436)
      • Unicorn-35519.exe (PID: 5064)
      • Unicorn-52867.exe (PID: 6112)
      • Unicorn-21948.exe (PID: 13364)
      • Unicorn-18056.exe (PID: 13624)
      • Unicorn-59010.exe (PID: 13752)
      • Unicorn-4434.exe (PID: 13680)
      • Unicorn-2296.exe (PID: 13772)
      • Unicorn-42944.exe (PID: 13472)
      • Unicorn-42944.exe (PID: 13480)
      • Unicorn-16931.exe (PID: 13528)
      • Unicorn-54542.exe (PID: 13560)
      • Unicorn-22253.exe (PID: 13724)
      • Unicorn-2296.exe (PID: 13780)
      • Unicorn-22716.exe (PID: 13856)
      • Unicorn-44620.exe (PID: 13936)
      • Unicorn-26800.exe (PID: 13896)
      • Unicorn-30884.exe (PID: 13928)
      • Unicorn-25284.exe (PID: 13944)
      • Unicorn-13536.exe (PID: 14052)
      • Unicorn-6380.exe (PID: 13732)
      • Unicorn-22716.exe (PID: 13848)
      • Unicorn-46666.exe (PID: 13904)
      • Unicorn-7671.exe (PID: 14060)
      • Unicorn-24419.exe (PID: 14144)
      • Unicorn-18553.exe (PID: 14152)
      • Unicorn-28746.exe (PID: 14092)
      • Unicorn-32830.exe (PID: 14108)
      • Unicorn-51881.exe (PID: 14228)
      • Unicorn-13801.exe (PID: 14068)
      • Unicorn-31460.exe (PID: 14296)
      • Unicorn-14932.exe (PID: 14380)
      • Unicorn-35544.exe (PID: 6248)
      • Unicorn-51881.exe (PID: 14212)
      • Unicorn-54019.exe (PID: 14256)
      • Unicorn-51881.exe (PID: 14248)
      • Unicorn-16415.exe (PID: 14440)
      • Unicorn-59394.exe (PID: 14388)
      • Unicorn-34889.exe (PID: 14424)
      • Unicorn-28503.exe (PID: 14172)
      • Unicorn-12986.exe (PID: 14188)
      • Unicorn-12986.exe (PID: 14196)
      • Unicorn-22637.exe (PID: 14160)
      • Unicorn-51881.exe (PID: 14208)
      • Unicorn-54986.exe (PID: 14472)
      • Unicorn-63121.exe (PID: 14464)
      • Unicorn-58846.exe (PID: 14512)
      • Unicorn-30613.exe (PID: 14564)
      • Unicorn-49088.exe (PID: 14656)
      • Unicorn-27813.exe (PID: 14572)
      • Unicorn-11278.exe (PID: 14584)
      • Unicorn-28311.exe (PID: 14520)
      • Unicorn-49088.exe (PID: 14664)
      • Unicorn-26173.exe (PID: 14680)
      • Unicorn-3879.exe (PID: 14732)
      • Unicorn-24492.exe (PID: 14456)
      • Unicorn-46043.exe (PID: 14820)
      • Unicorn-50127.exe (PID: 14832)
      • Unicorn-51253.exe (PID: 14940)
      • Unicorn-19208.exe (PID: 15004)
      • Unicorn-64325.exe (PID: 15048)
      • Unicorn-44481.exe (PID: 15064)
      • Unicorn-29130.exe (PID: 14756)
      • Unicorn-59778.exe (PID: 14812)
      • Unicorn-40642.exe (PID: 14872)
      • Unicorn-20691.exe (PID: 14968)
      • Unicorn-56078.exe (PID: 15188)
      • Unicorn-28144.exe (PID: 15144)
      • Unicorn-755.exe (PID: 15204)
      • Unicorn-21267.exe (PID: 15164)
      • Unicorn-33519.exe (PID: 15212)
      • Unicorn-61976.exe (PID: 15228)
      • Unicorn-10299.exe (PID: 15252)
      • Unicorn-44481.exe (PID: 15080)
      • Unicorn-17838.exe (PID: 15120)
      • Unicorn-39458.exe (PID: 15416)
      • Unicorn-19038.exe (PID: 15476)
      • Unicorn-60625.exe (PID: 15452)
      • Unicorn-60625.exe (PID: 15432)
      • Unicorn-60625.exe (PID: 15440)
      • Unicorn-49691.exe (PID: 15268)
      • Unicorn-24995.exe (PID: 15324)
      • Unicorn-49691.exe (PID: 15272)
      • Unicorn-37604.exe (PID: 15356)
      • Unicorn-12000.exe (PID: 15628)
      • Unicorn-55171.exe (PID: 15548)
      • Unicorn-28528.exe (PID: 15564)
      • Unicorn-60354.exe (PID: 15728)
      • Unicorn-12000.exe (PID: 15620)
      • Unicorn-37440.exe (PID: 15688)
      • Unicorn-48202.exe (PID: 15704)
      • Unicorn-33049.exe (PID: 15768)
      • Unicorn-33982.exe (PID: 15496)
      • Unicorn-32612.exe (PID: 15584)
      • Unicorn-25379.exe (PID: 15664)
      • Unicorn-35850.exe (PID: 15752)
      • Unicorn-33049.exe (PID: 15776)
      • Unicorn-35850.exe (PID: 15744)
      • Unicorn-17786.exe (PID: 15884)
      • Unicorn-22035.exe (PID: 15944)
      • Unicorn-37080.exe (PID: 15912)
      • Unicorn-51279.exe (PID: 16000)
      • Unicorn-1258.exe (PID: 15976)
      • Unicorn-1258.exe (PID: 15984)
      • Unicorn-19043.exe (PID: 16220)
      • Unicorn-14330.exe (PID: 16176)
      • Unicorn-26774.exe (PID: 16056)
      • Unicorn-26028.exe (PID: 16152)
      • Unicorn-16514.exe (PID: 15760)
      • Unicorn-36142.exe (PID: 16272)
      • Unicorn-20360.exe (PID: 16280)
      • Unicorn-20473.exe (PID: 16304)
      • Unicorn-12305.exe (PID: 16376)
      • Unicorn-4137.exe (PID: 16360)
      • Unicorn-10871.exe (PID: 16440)
      • Unicorn-51108.exe (PID: 16508)
      • Unicorn-55747.exe (PID: 16552)
      • Unicorn-8108.exe (PID: 16228)
      • Unicorn-8108.exe (PID: 16240)
      • Unicorn-50916.exe (PID: 16616)
      • Unicorn-44786.exe (PID: 16608)
      • Unicorn-464.exe (PID: 16844)
      • Unicorn-46401.exe (PID: 16836)
      • Unicorn-47771.exe (PID: 16812)
      • Unicorn-12597.exe (PID: 16712)
      • Unicorn-4984.exe (PID: 16752)
      • Unicorn-39240.exe (PID: 16684)
      • Unicorn-4729.exe (PID: 16960)
      • Unicorn-41497.exe (PID: 17020)
      • Unicorn-1616.exe (PID: 17240)
      • Unicorn-38067.exe (PID: 17272)
      • Unicorn-63042.exe (PID: 6384)
      • Unicorn-50128.exe (PID: 17380)
      • Unicorn-55249.exe (PID: 1812)
      • Unicorn-57552.exe (PID: 17416)
      • Unicorn-2675.exe (PID: 16880)
      • Unicorn-26410.exe (PID: 16920)
      • Unicorn-15125.exe (PID: 17056)
      • Unicorn-60153.exe (PID: 17536)
      • Unicorn-10132.exe (PID: 17520)
      • Unicorn-28771.exe (PID: 17596)
      • Unicorn-42108.exe (PID: 17648)
      • Unicorn-32691.exe (PID: 17488)
      • Unicorn-43162.exe (PID: 17452)

    • Reads the computer name

      • 1 (342).exe (PID: 4620)
      • Unicorn-2262.exe (PID: 6872)
      • Unicorn-56699.exe (PID: 7408)
      • Unicorn-61338.exe (PID: 7428)
      • Unicorn-62490.exe (PID: 7488)
      • Unicorn-63781.exe (PID: 7524)
      • Unicorn-41323.exe (PID: 7468)
      • Unicorn-290.exe (PID: 7504)
      • Unicorn-53300.exe (PID: 7688)
      • Unicorn-40855.exe (PID: 7764)
      • Unicorn-11712.exe (PID: 7716)
      • Unicorn-5582.exe (PID: 7708)
      • Unicorn-60721.exe (PID: 7772)
      • Unicorn-29730.exe (PID: 7780)
      • Unicorn-32133.exe (PID: 7660)
      • Unicorn-36553.exe (PID: 6592)
      • Unicorn-54281.exe (PID: 7628)
      • Unicorn-27639.exe (PID: 7680)
      • Unicorn-48806.exe (PID: 7844)
      • Unicorn-3134.exe (PID: 7872)
      • Unicorn-24359.exe (PID: 7860)
      • Unicorn-15386.exe (PID: 7932)
      • Unicorn-15386.exe (PID: 7976)
      • Unicorn-32277.exe (PID: 7956)
      • Unicorn-43213.exe (PID: 7940)
      • Unicorn-57471.exe (PID: 7448)
      • Unicorn-37535.exe (PID: 7460)
      • Unicorn-59517.exe (PID: 6044)
      • Unicorn-757.exe (PID: 7504)
      • Unicorn-39481.exe (PID: 8068)
      • Unicorn-51733.exe (PID: 8084)
      • Unicorn-51468.exe (PID: 8116)
      • Unicorn-12738.exe (PID: 5008)
      • Unicorn-59709.exe (PID: 7276)
      • Unicorn-59709.exe (PID: 4200)
      • Unicorn-9938.exe (PID: 7228)
      • Unicorn-59709.exe (PID: 6964)
      • Unicorn-7601.exe (PID: 4452)
      • Unicorn-13201.exe (PID: 5504)
      • Unicorn-59709.exe (PID: 4336)
      • Unicorn-59709.exe (PID: 7292)
      • Unicorn-43928.exe (PID: 3140)
      • Unicorn-7171.exe (PID: 8008)
      • Unicorn-10700.exe (PID: 4688)
      • Unicorn-10700.exe (PID: 2564)
      • Unicorn-60456.exe (PID: 7268)
      • Unicorn-55625.exe (PID: 7272)
      • Unicorn-23721.exe (PID: 1272)
      • Unicorn-38111.exe (PID: 4212)
      • Unicorn-36065.exe (PID: 7348)
      • Unicorn-42195.exe (PID: 632)
      • Unicorn-11468.exe (PID: 5984)
      • Unicorn-15287.exe (PID: 5964)
      • Unicorn-13990.exe (PID: 7824)
      • Unicorn-7939.exe (PID: 5176)
      • Unicorn-37487.exe (PID: 4880)
      • Unicorn-6106.exe (PID: 8228)
      • Unicorn-43155.exe (PID: 7340)
      • Unicorn-62813.exe (PID: 5508)
      • Unicorn-1930.exe (PID: 8204)
      • Unicorn-11944.exe (PID: 1128)
      • Unicorn-55791.exe (PID: 8248)
      • Unicorn-48178.exe (PID: 8268)
      • Unicorn-8728.exe (PID: 8284)
      • Unicorn-37871.exe (PID: 8348)
      • Unicorn-12812.exe (PID: 8300)
      • Unicorn-51707.exe (PID: 8316)
      • Unicorn-1115.exe (PID: 8332)
      • Unicorn-14758.exe (PID: 8452)
      • Unicorn-10674.exe (PID: 8428)
      • Unicorn-55691.exe (PID: 8368)
      • Unicorn-49569.exe (PID: 8480)
      • Unicorn-24873.exe (PID: 8664)
      • Unicorn-29703.exe (PID: 8468)
      • Unicorn-14758.exe (PID: 8460)
      • Unicorn-47986.exe (PID: 8628)
      • Unicorn-47986.exe (PID: 8644)
      • Unicorn-24873.exe (PID: 8548)
      • Unicorn-47986.exe (PID: 8620)
      • Unicorn-18843.exe (PID: 8500)
      • Unicorn-61721.exe (PID: 8736)
      • Unicorn-38998.exe (PID: 8716)
      • Unicorn-53653.exe (PID: 8516)
      • Unicorn-49569.exe (PID: 8476)
      • Unicorn-47986.exe (PID: 8636)
      • Unicorn-37431.exe (PID: 8564)
      • Unicorn-52091.exe (PID: 8860)
      • Unicorn-51991.exe (PID: 8876)
      • Unicorn-48007.exe (PID: 8832)
      • Unicorn-38255.exe (PID: 8884)
      • Unicorn-54037.exe (PID: 9008)
      • Unicorn-13559.exe (PID: 9072)
      • Unicorn-33516.exe (PID: 9120)
      • Unicorn-29341.exe (PID: 9048)
      • Unicorn-33425.exe (PID: 9080)
      • Unicorn-45869.exe (PID: 8960)
      • Unicorn-9042.exe (PID: 4180)
      • Unicorn-19035.exe (PID: 9212)
      • Unicorn-41160.exe (PID: 1452)
      • Unicorn-2265.exe (PID: 7252)
      • Unicorn-36811.exe (PID: 7256)
      • Unicorn-10525.exe (PID: 9260)
      • Unicorn-43106.exe (PID: 9320)
      • Unicorn-2265.exe (PID: 7324)
      • Unicorn-58243.exe (PID: 9232)
      • Unicorn-6249.exe (PID: 9384)
      • Unicorn-12379.exe (PID: 9400)
      • Unicorn-8103.exe (PID: 9468)
      • Unicorn-45052.exe (PID: 9492)
      • Unicorn-25186.exe (PID: 9484)
      • Unicorn-48871.exe (PID: 9500)
      • Unicorn-8679.exe (PID: 9532)
      • Unicorn-44045.exe (PID: 9548)
      • Unicorn-20666.exe (PID: 9572)
      • Unicorn-20666.exe (PID: 9576)
      • Unicorn-56681.exe (PID: 9636)
      • Unicorn-31277.exe (PID: 12608)
      • Unicorn-58740.exe (PID: 9672)
      • Unicorn-29868.exe (PID: 9724)
      • Unicorn-46759.exe (PID: 9988)
      • Unicorn-33952.exe (PID: 9740)
      • Unicorn-34336.exe (PID: 10084)
      • Unicorn-47143.exe (PID: 10132)
      • Unicorn-34912.exe (PID: 10176)
      • Unicorn-37604.exe (PID: 10212)
      • Unicorn-47719.exe (PID: 10228)
      • Unicorn-59416.exe (PID: 9328)
      • Unicorn-41496.exe (PID: 5936)
      • Unicorn-35850.exe (PID: 10344)
      • Unicorn-20906.exe (PID: 10316)
      • Unicorn-53578.exe (PID: 10396)

    • Create files in a temporary directory

      • Unicorn-2262.exe (PID: 6872)
      • Unicorn-56699.exe (PID: 7408)
      • 1 (342).exe (PID: 4620)
      • Unicorn-62490.exe (PID: 7488)
      • Unicorn-61338.exe (PID: 7428)
      • Unicorn-63781.exe (PID: 7524)
      • Unicorn-41323.exe (PID: 7468)
      • Unicorn-5582.exe (PID: 7708)
      • Unicorn-60721.exe (PID: 7772)
      • Unicorn-36553.exe (PID: 6592)
      • Unicorn-21508.exe (PID: 7652)
      • Unicorn-15386.exe (PID: 7976)
      • Unicorn-11712.exe (PID: 7716)
      • Unicorn-3134.exe (PID: 7872)
      • Unicorn-40855.exe (PID: 7764)
      • Unicorn-14810.exe (PID: 5260)
      • Unicorn-757.exe (PID: 7504)
      • Unicorn-59517.exe (PID: 6044)
      • Unicorn-37535.exe (PID: 7460)
      • Unicorn-51733.exe (PID: 8084)
      • Unicorn-51468.exe (PID: 8116)
      • Unicorn-27639.exe (PID: 7680)
      • Unicorn-60456.exe (PID: 7268)
      • Unicorn-24359.exe (PID: 7860)
      • Unicorn-48806.exe (PID: 7844)
      • Unicorn-59709.exe (PID: 7276)
      • Unicorn-59709.exe (PID: 4200)
      • Unicorn-55625.exe (PID: 7272)
      • Unicorn-15386.exe (PID: 7932)
      • Unicorn-12738.exe (PID: 5008)
      • Unicorn-7601.exe (PID: 4452)
      • Unicorn-43928.exe (PID: 3140)
      • Unicorn-59709.exe (PID: 7292)
      • Unicorn-50097.exe (PID: 7596)
      • Unicorn-38111.exe (PID: 4212)
      • Unicorn-23721.exe (PID: 1272)
      • Unicorn-7939.exe (PID: 5176)
      • Unicorn-32133.exe (PID: 7660)
      • Unicorn-65137.exe (PID: 208)
      • Unicorn-54281.exe (PID: 7628)
      • Unicorn-57471.exe (PID: 7448)
      • Unicorn-64732.exe (PID: 8060)
      • Unicorn-11852.exe (PID: 668)
      • Unicorn-36911.exe (PID: 8176)
      • Unicorn-11944.exe (PID: 1128)
      • Unicorn-43155.exe (PID: 7340)
      • Unicorn-61437.exe (PID: 8160)
      • Unicorn-37487.exe (PID: 4880)
      • Unicorn-1930.exe (PID: 8204)
      • Unicorn-6106.exe (PID: 8228)
      • Unicorn-55791.exe (PID: 8248)
      • Unicorn-62813.exe (PID: 5508)
      • Unicorn-48178.exe (PID: 8268)
      • Unicorn-41427.exe (PID: 7192)
      • Unicorn-10700.exe (PID: 4688)
      • Unicorn-12812.exe (PID: 8300)
      • Unicorn-10700.exe (PID: 2564)
      • Unicorn-55691.exe (PID: 8368)
      • Unicorn-61821.exe (PID: 8376)
      • Unicorn-14758.exe (PID: 8452)
      • Unicorn-18843.exe (PID: 8536)
      • Unicorn-24873.exe (PID: 8664)
      • Unicorn-29703.exe (PID: 8468)
      • Unicorn-47986.exe (PID: 8628)
      • Unicorn-32802.exe (PID: 1164)
      • Unicorn-18843.exe (PID: 8492)
      • Unicorn-37431.exe (PID: 8564)
      • Unicorn-32277.exe (PID: 7956)
      • Unicorn-59451.exe (PID: 8612)
      • Unicorn-53653.exe (PID: 8508)
      • Unicorn-47986.exe (PID: 8636)
      • Unicorn-46113.exe (PID: 7924)
      • Unicorn-29730.exe (PID: 7780)
      • Unicorn-59709.exe (PID: 6964)
      • Unicorn-43213.exe (PID: 7940)
      • Unicorn-13201.exe (PID: 5504)
      • Unicorn-52091.exe (PID: 8860)
      • Unicorn-48007.exe (PID: 8832)
      • Unicorn-54037.exe (PID: 9008)
      • Unicorn-33516.exe (PID: 9120)
      • Unicorn-29341.exe (PID: 9048)
      • Unicorn-45869.exe (PID: 8960)
      • Unicorn-11468.exe (PID: 5984)
      • Unicorn-13559.exe (PID: 9072)
      • Unicorn-9042.exe (PID: 4180)
      • Unicorn-42195.exe (PID: 632)
      • Unicorn-36811.exe (PID: 7256)
      • Unicorn-60189.exe (PID: 9348)
      • Unicorn-12571.exe (PID: 9244)
      • Unicorn-53300.exe (PID: 7688)
      • Unicorn-51991.exe (PID: 8876)
      • Unicorn-6249.exe (PID: 9384)
      • Unicorn-39481.exe (PID: 8068)
      • Unicorn-10241.exe (PID: 9368)
      • Unicorn-61388.exe (PID: 9428)
      • Unicorn-12379.exe (PID: 9400)
      • Unicorn-62135.exe (PID: 9392)
      • Unicorn-9280.exe (PID: 9436)
      • Unicorn-8103.exe (PID: 9468)
      • Unicorn-7171.exe (PID: 8008)
      • Unicorn-8679.exe (PID: 9532)
      • Unicorn-41160.exe (PID: 1452)
      • Unicorn-20666.exe (PID: 9576)
      • Unicorn-20666.exe (PID: 9572)
      • Unicorn-44045.exe (PID: 9548)
      • Unicorn-37871.exe (PID: 8348)
      • Unicorn-8728.exe (PID: 8284)
      • Unicorn-61224.exe (PID: 6080)
      • Unicorn-56681.exe (PID: 9636)
      • Unicorn-58740.exe (PID: 9672)
      • Unicorn-51707.exe (PID: 8316)
      • Unicorn-41136.exe (PID: 8420)
      • Unicorn-49569.exe (PID: 8480)
      • Unicorn-9938.exe (PID: 7228)
      • Unicorn-29868.exe (PID: 9724)
      • Unicorn-10674.exe (PID: 8428)
      • Unicorn-59709.exe (PID: 4336)
      • Unicorn-33952.exe (PID: 9740)
      • Unicorn-26936.exe (PID: 2140)
      • Unicorn-47986.exe (PID: 8620)
      • Unicorn-38998.exe (PID: 8716)
      • Unicorn-20896.exe (PID: 8572)
      • Unicorn-24873.exe (PID: 8548)
      • Unicorn-49569.exe (PID: 8476)
      • Unicorn-13201.exe (PID: 3884)
      • Unicorn-40074.exe (PID: 10020)
      • Unicorn-46759.exe (PID: 9988)
      • Unicorn-10508.exe (PID: 7520)
      • Unicorn-28578.exe (PID: 9100)
      • Unicorn-64898.exe (PID: 8984)
      • Unicorn-38255.exe (PID: 8884)
      • Unicorn-36065.exe (PID: 7348)
      • Unicorn-33160.exe (PID: 9064)
      • Unicorn-19035.exe (PID: 6972)
      • Unicorn-47143.exe (PID: 10132)
      • Unicorn-10525.exe (PID: 9260)
      • Unicorn-2265.exe (PID: 7252)
      • Unicorn-2265.exe (PID: 7324)
      • Unicorn-34912.exe (PID: 10176)
      • Unicorn-45052.exe (PID: 9492)
      • Unicorn-48871.exe (PID: 9500)
      • Unicorn-34811.exe (PID: 10236)
      • Unicorn-33425.exe (PID: 9080)
      • Unicorn-47719.exe (PID: 10228)
      • Unicorn-20522.exe (PID: 4436)
      • Unicorn-41496.exe (PID: 5936)
      • Unicorn-4452.exe (PID: 8400)

    • Reads security settings of Internet Explorer

      • BackgroundTransferHost.exe (PID: 7568)
      • BackgroundTransferHost.exe (PID: 2136)
      • BackgroundTransferHost.exe (PID: 8024)
      • BackgroundTransferHost.exe (PID: 7176)
      • BackgroundTransferHost.exe (PID: 4652)

    • Creates files or folders in the user directory

      • WerFault.exe (PID: 7888)
      • BackgroundTransferHost.exe (PID: 8024)

    • Checks proxy server information

      • BackgroundTransferHost.exe (PID: 8024)

    • Reads the software policy settings

      • BackgroundTransferHost.exe (PID: 8024)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable (generic) (52.9)
.exe | Generic Win/DOS Executable (23.5)
.exe | DOS Executable Generic (23.5)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:04:26 10:28:09+00:00
ImageFileCharacteristics: Executable, No line numbers, No symbols, [6], Bytes reversed lo, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 8192
UninitializedDataSize: -
EntryPoint: 0x13b0
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x0000
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: aaaa
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
InternalName: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
687
Monitored processes
552
Malicious processes
78
Suspicious processes
69

Behavior graph

Click at the process to see the details
start 1 (342).exe sppextcomobj.exe no specs slui.exe no specs unicorn-2262.exe unicorn-56699.exe unicorn-61338.exe unicorn-41323.exe unicorn-62490.exe unicorn-290.exe unicorn-63781.exe backgroundtransferhost.exe no specs unicorn-32133.exe unicorn-53300.exe unicorn-5582.exe unicorn-11712.exe unicorn-40855.exe unicorn-60721.exe unicorn-29730.exe werfault.exe no specs backgroundtransferhost.exe backgroundtransferhost.exe no specs backgroundtransferhost.exe no specs backgroundtransferhost.exe no specs unicorn-14810.exe unicorn-36553.exe unicorn-54281.exe unicorn-21508.exe unicorn-27639.exe unicorn-48806.exe unicorn-3134.exe unicorn-24359.exe unicorn-46113.exe unicorn-15386.exe unicorn-43213.exe unicorn-32277.exe unicorn-15386.exe unicorn-50097.exe unicorn-10508.exe unicorn-757.exe unicorn-59517.exe unicorn-57471.exe unicorn-37535.exe unicorn-64732.exe unicorn-39481.exe unicorn-51733.exe unicorn-51468.exe unicorn-7171.exe unicorn-41427.exe unicorn-10700.exe unicorn-10700.exe unicorn-60456.exe unicorn-12738.exe unicorn-9938.exe unicorn-55625.exe unicorn-59709.exe unicorn-59709.exe unicorn-59709.exe unicorn-59709.exe unicorn-59709.exe unicorn-32802.exe unicorn-13201.exe unicorn-13201.exe unicorn-7601.exe unicorn-26936.exe unicorn-43928.exe unicorn-23721.exe unicorn-7939.exe unicorn-38111.exe unicorn-36065.exe unicorn-42195.exe unicorn-11468.exe unicorn-15287.exe unicorn-61224.exe unicorn-65137.exe unicorn-14545.exe unicorn-13990.exe unicorn-11944.exe unicorn-11852.exe unicorn-36911.exe unicorn-43155.exe unicorn-37487.exe unicorn-61437.exe unicorn-62813.exe unicorn-1930.exe unicorn-6106.exe unicorn-55791.exe unicorn-48178.exe unicorn-8728.exe unicorn-12812.exe unicorn-51707.exe unicorn-1115.exe unicorn-37871.exe unicorn-55691.exe unicorn-61821.exe unicorn-4452.exe unicorn-41136.exe unicorn-10674.exe unicorn-14758.exe unicorn-14758.exe unicorn-29703.exe unicorn-49569.exe unicorn-49569.exe unicorn-18843.exe unicorn-18843.exe unicorn-53653.exe unicorn-53653.exe unicorn-18843.exe unicorn-24873.exe unicorn-37431.exe unicorn-20896.exe unicorn-5007.exe unicorn-59451.exe unicorn-47986.exe unicorn-47986.exe unicorn-47986.exe unicorn-47986.exe unicorn-24873.exe unicorn-38998.exe unicorn-61721.exe unicorn-48007.exe unicorn-52091.exe unicorn-51991.exe unicorn-38255.exe unicorn-45869.exe unicorn-64898.exe unicorn-54037.exe unicorn-54037.exe unicorn-29341.exe unicorn-33160.exe unicorn-13559.exe unicorn-33425.exe unicorn-28578.exe unicorn-17643.exe unicorn-33516.exe unicorn-19035.exe unicorn-19035.exe unicorn-9042.exe unicorn-22777.exe unicorn-2265.exe unicorn-2265.exe unicorn-17210.exe unicorn-36811.exe unicorn-41160.exe unicorn-58243.exe unicorn-12571.exe unicorn-10525.exe unicorn-43106.exe unicorn-60189.exe unicorn-10241.exe unicorn-6249.exe unicorn-62135.exe unicorn-12379.exe unicorn-61388.exe unicorn-9280.exe unicorn-8103.exe unicorn-25186.exe unicorn-45052.exe unicorn-48871.exe unicorn-8679.exe unicorn-44045.exe unicorn-20666.exe unicorn-20666.exe unicorn-56681.exe unicorn-60210.exe unicorn-58740.exe unicorn-29868.exe unicorn-33952.exe unicorn-46759.exe unicorn-40074.exe unicorn-34336.exe unicorn-47143.exe unicorn-19946.exe unicorn-34912.exe unicorn-34912.exe unicorn-37604.exe unicorn-47719.exe unicorn-34811.exe unicorn-20522.exe unicorn-59416.exe unicorn-52929.exe unicorn-41496.exe unicorn-18960.exe unicorn-20906.exe unicorn-35850.exe unicorn-12545.exe unicorn-53578.exe unicorn-7070.exe unicorn-47356.exe unicorn-20714.exe unicorn-4953.exe unicorn-35680.exe unicorn-39764.exe unicorn-4191.exe unicorn-58793.exe unicorn-13121.exe unicorn-35580.exe unicorn-52571.exe unicorn-45794.exe unicorn-47932.exe unicorn-47932.exe unicorn-32150.exe unicorn-45886.exe unicorn-23327.exe unicorn-9592.exe unicorn-52016.exe unicorn-52016.exe unicorn-677.exe unicorn-52016.exe unicorn-4761.exe unicorn-4761.exe unicorn-35488.exe unicorn-8845.exe unicorn-15067.exe unicorn-15067.exe unicorn-23236.exe unicorn-44211.exe unicorn-21652.exe unicorn-33118.exe no specs unicorn-10883.exe unicorn-62685.exe unicorn-57085.exe unicorn-25977.exe unicorn-23135.exe unicorn-46925.exe unicorn-57860.exe unicorn-988.exe unicorn-20282.exe unicorn-20282.exe unicorn-9513.exe unicorn-7283.exe unicorn-60568.exe no specs unicorn-3754.exe unicorn-27704.exe unicorn-64460.exe no specs unicorn-45721.exe unicorn-38486.exe unicorn-61699.exe unicorn-28280.exe unicorn-28280.exe unicorn-3583.exe unicorn-42478.exe no specs unicorn-52784.exe no specs unicorn-26142.exe no specs unicorn-26142.exe no specs unicorn-32172.exe no specs unicorn-36256.exe no specs unicorn-38948.exe no specs unicorn-4138.exe no specs unicorn-44979.exe no specs unicorn-12736.exe no specs unicorn-46105.exe no specs unicorn-42378.exe no specs unicorn-42378.exe no specs unicorn-19819.exe no specs unicorn-21103.exe no specs unicorn-47693.exe no specs unicorn-47693.exe no specs unicorn-55306.exe no specs unicorn-63474.exe no specs unicorn-28664.exe no specs unicorn-28664.exe no specs unicorn-28664.exe no specs unicorn-12135.exe no specs unicorn-49084.exe no specs unicorn-5913.exe no specs unicorn-5913.exe no specs unicorn-5913.exe no specs unicorn-36640.exe no specs unicorn-51030.exe no specs unicorn-16220.exe no specs unicorn-63182.exe no specs unicorn-23045.exe no specs unicorn-63593.exe no specs unicorn-43993.exe no specs unicorn-43993.exe no specs unicorn-54928.exe no specs unicorn-28783.exe no specs unicorn-45939.exe no specs unicorn-50023.exe no specs unicorn-4251.exe no specs unicorn-21242.exe no specs unicorn-41108.exe no specs unicorn-25326.exe no specs unicorn-25326.exe no specs unicorn-62275.exe no specs unicorn-49368.exe no specs unicorn-49368.exe no specs unicorn-63666.exe no specs unicorn-4159.exe no specs unicorn-12327.exe no specs unicorn-26718.exe no specs unicorn-33516.exe no specs unicorn-41684.exe no specs unicorn-45768.exe no specs unicorn-51990.exe no specs unicorn-16914.exe no specs unicorn-35462.exe no specs unicorn-29986.exe no specs unicorn-7428.exe no specs unicorn-48269.exe no specs unicorn-31277.exe no specs unicorn-21626.exe no specs unicorn-21626.exe no specs unicorn-10857.exe no specs unicorn-15404.exe no specs unicorn-26870.exe no specs unicorn-58383.exe no specs unicorn-7257.exe no specs unicorn-37221.exe no specs unicorn-20064.exe no specs unicorn-50599.exe no specs unicorn-4927.exe no specs unicorn-60926.exe no specs unicorn-23978.exe no specs unicorn-21931.exe no specs unicorn-23877.exe no specs unicorn-48597.exe no specs unicorn-52380.exe no specs unicorn-35108.exe no specs unicorn-8928.exe no specs unicorn-61201.exe no specs unicorn-45130.exe no specs unicorn-7366.exe no specs unicorn-15534.exe no specs unicorn-14979.exe no specs unicorn-2627.exe no specs unicorn-47387.exe no specs unicorn-35519.exe no specs unicorn-52867.exe no specs unicorn-7095.exe no specs unicorn-28170.exe no specs unicorn-21948.exe no specs unicorn-21948.exe no specs unicorn-23239.exe no specs unicorn-63915.exe no specs unicorn-58050.exe no specs unicorn-64180.exe no specs unicorn-42944.exe no specs unicorn-42944.exe no specs unicorn-16931.exe no specs unicorn-54542.exe no specs unicorn-18056.exe no specs unicorn-4434.exe no specs unicorn-22253.exe no specs unicorn-6380.exe no specs unicorn-61803.exe no specs unicorn-59010.exe no specs unicorn-2296.exe no specs unicorn-2296.exe no specs unicorn-22716.exe no specs unicorn-22716.exe no specs unicorn-26800.exe no specs unicorn-46666.exe no specs unicorn-30884.exe no specs unicorn-44620.exe no specs unicorn-25284.exe no specs unicorn-13536.exe no specs unicorn-7671.exe no specs unicorn-13801.exe no specs unicorn-28746.exe no specs unicorn-32830.exe no specs unicorn-32830.exe no specs unicorn-24419.exe no specs unicorn-18553.exe no specs unicorn-22637.exe no specs unicorn-28503.exe no specs unicorn-12986.exe no specs unicorn-12986.exe no specs unicorn-51881.exe no specs unicorn-51881.exe no specs unicorn-51881.exe no specs unicorn-51881.exe no specs unicorn-54019.exe no specs unicorn-31460.exe no specs unicorn-62187.exe no specs unicorn-35544.exe no specs unicorn-14932.exe no specs unicorn-59394.exe no specs unicorn-34889.exe no specs unicorn-16415.exe no specs unicorn-24492.exe no specs unicorn-63121.exe no specs unicorn-54986.exe no specs unicorn-58846.exe no specs unicorn-28311.exe no specs unicorn-30613.exe no specs unicorn-27813.exe no specs unicorn-11278.exe no specs unicorn-49088.exe no specs unicorn-49088.exe no specs unicorn-26173.exe no specs unicorn-3879.exe no specs unicorn-29130.exe no specs unicorn-59778.exe no specs unicorn-46043.exe no specs unicorn-50127.exe no specs unicorn-40642.exe no specs unicorn-51253.exe no specs unicorn-20691.exe no specs unicorn-19208.exe no specs unicorn-19208.exe no specs unicorn-21346.exe no specs unicorn-64325.exe no specs unicorn-44481.exe no specs unicorn-44481.exe no specs unicorn-44481.exe no specs unicorn-17838.exe no specs unicorn-28144.exe no specs unicorn-21267.exe no specs unicorn-56078.exe no specs unicorn-755.exe no specs unicorn-33519.exe no specs unicorn-61976.exe no specs unicorn-10299.exe no specs unicorn-49691.exe no specs unicorn-49691.exe no specs unicorn-65331.exe no specs unicorn-24995.exe no specs unicorn-37604.exe no specs unicorn-37604.exe no specs unicorn-38066.exe no specs unicorn-19592.exe no specs unicorn-39458.exe no specs unicorn-60625.exe no specs unicorn-60625.exe no specs unicorn-60625.exe no specs unicorn-19038.exe no specs unicorn-33982.exe no specs unicorn-33982.exe no specs unicorn-55171.exe no specs unicorn-55171.exe no specs unicorn-28528.exe no specs unicorn-32612.exe no specs unicorn-12000.exe no specs unicorn-12000.exe no specs unicorn-25379.exe no specs unicorn-37440.exe no specs unicorn-48202.exe no specs unicorn-60354.exe no specs unicorn-35850.exe no specs unicorn-35850.exe no specs unicorn-16514.exe no specs unicorn-33049.exe no specs unicorn-33049.exe no specs unicorn-13291.exe no specs unicorn-17786.exe no specs unicorn-50816.exe no specs unicorn-37080.exe no specs unicorn-22035.exe no specs unicorn-22035.exe no specs unicorn-1258.exe no specs unicorn-1258.exe no specs unicorn-51279.exe no specs unicorn-26774.exe no specs unicorn-40972.exe no specs unicorn-26028.exe no specs unicorn-14330.exe no specs unicorn-24636.exe no specs unicorn-2078.exe no specs unicorn-19043.exe no specs unicorn-8108.exe no specs unicorn-8108.exe no specs unicorn-36142.exe no specs unicorn-20360.exe no specs unicorn-20473.exe no specs unicorn-59368.exe no specs unicorn-4137.exe no specs unicorn-12305.exe no specs unicorn-22419.exe no specs unicorn-45690.exe no specs unicorn-34671.exe no specs unicorn-10871.exe no specs unicorn-55092.exe no specs unicorn-51108.exe no specs unicorn-55747.exe no specs unicorn-11060.exe no specs unicorn-44786.exe no specs unicorn-50916.exe no specs unicorn-39240.exe no specs unicorn-12597.exe no specs unicorn-10551.exe no specs unicorn-4984.exe no specs unicorn-47771.exe no specs unicorn-46401.exe no specs unicorn-464.exe no specs unicorn-2675.exe no specs unicorn-43443.exe no specs unicorn-26410.exe no specs unicorn-4729.exe no specs unicorn-5197.exe no specs unicorn-41497.exe no specs unicorn-15211.exe no specs unicorn-15125.exe no specs unicorn-22472.exe no specs unicorn-17733.exe no specs unicorn-17733.exe no specs unicorn-44839.exe no specs unicorn-1616.exe no specs unicorn-38067.exe no specs unicorn-50128.exe no specs unicorn-63042.exe no specs unicorn-55249.exe no specs unicorn-57552.exe no specs unicorn-43162.exe no specs unicorn-43162.exe no specs unicorn-32691.exe no specs unicorn-10132.exe no specs unicorn-1467.exe no specs unicorn-60153.exe no specs unicorn-55322.exe no specs unicorn-28771.exe no specs unicorn-28771.exe no specs unicorn-42108.exe no specs unicorn-44751.exe no specs unicorn-53660.exe no specs unicorn-26926.exe no specs unicorn-6505.exe no specs unicorn-8954.exe no specs unicorn-3089.exe no specs unicorn-47849.exe no specs unicorn-41984.exe no specs unicorn-3089.exe no specs unicorn-13203.exe no specs unicorn-13203.exe no specs unicorn-48014.exe no specs unicorn-13303.exe no specs unicorn-21371.exe no specs unicorn-23185.exe no specs unicorn-21371.exe no specs unicorn-11720.exe no specs unicorn-31321.exe no specs unicorn-12349.exe no specs unicorn-21014.exe no specs unicorn-1414.exe no specs unicorn-60266.exe no specs unicorn-60266.exe no specs unicorn-4678.exe no specs unicorn-60266.exe no specs unicorn-13011.exe no specs unicorn-13011.exe no specs unicorn-13011.exe no specs unicorn-18876.exe no specs unicorn-10211.exe no specs unicorn-13011.exe no specs unicorn-13011.exe no specs unicorn-10211.exe no specs unicorn-25263.exe no specs unicorn-25263.exe no specs unicorn-25263.exe no specs unicorn-25263.exe no specs unicorn-27401.exe no specs unicorn-4843.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
208C:\Users\admin\AppData\Local\Temp\Unicorn-65137.exeC:\Users\admin\AppData\Local\Temp\Unicorn-65137.exe
Unicorn-37535.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-65137.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
536C:\Users\admin\AppData\Local\Temp\Unicorn-50023.exeC:\Users\admin\AppData\Local\Temp\Unicorn-50023.exe—Unicorn-14545.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-50023.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
632C:\Users\admin\AppData\Local\Temp\Unicorn-42195.exeC:\Users\admin\AppData\Local\Temp\Unicorn-42195.exe
Unicorn-59517.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-42195.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
668C:\Users\admin\AppData\Local\Temp\Unicorn-11852.exeC:\Users\admin\AppData\Local\Temp\Unicorn-11852.exe
Unicorn-39481.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-11852.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
728C:\WINDOWS\system32\SppExtComObj.exe -EmbeddingC:\Windows\System32\SppExtComObj.Exe—svchost.exe
User:
NETWORK SERVICE
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
KMS Connection Broker
Version:
10.0.19041.3996 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\sppextcomobj.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\oleaut32.dll
872C:\Users\admin\AppData\Local\Temp\Unicorn-41108.exeC:\Users\admin\AppData\Local\Temp\Unicorn-41108.exe—Unicorn-6249.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-41108.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1128C:\Users\admin\AppData\Local\Temp\Unicorn-11944.exeC:\Users\admin\AppData\Local\Temp\Unicorn-11944.exe
Unicorn-53300.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-11944.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1164C:\Users\admin\AppData\Local\Temp\Unicorn-32802.exeC:\Users\admin\AppData\Local\Temp\Unicorn-32802.exe
Unicorn-61338.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-32802.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1272C:\Users\admin\AppData\Local\Temp\Unicorn-23721.exeC:\Users\admin\AppData\Local\Temp\Unicorn-23721.exe
Unicorn-10508.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-23721.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1452C:\Users\admin\AppData\Local\Temp\Unicorn-41160.exeC:\Users\admin\AppData\Local\Temp\Unicorn-41160.exe
Unicorn-11852.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-41160.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
Total events
13 942
Read events
13 927
Write events
15
Delete events
0

Modification events

(PID) Process:(7568) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(7568) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(7568) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(8024) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(8024) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(8024) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(7176) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(7176) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(7176) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(2136) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
Executable files
1 116
Suspicious files
8
Text files
1
Unknown types
0

Dropped files

PID
Process
Filename
Type
7888WerFault.exeC:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Unicorn-290.exe_89e57babe87fe07df480a5707fd5b9d7a72fe367_f3cbdcd7_d4c3413c-4512-4248-b488-b527aa63041e\Report.wer —
MD5:—
SHA256:—
46201 (342).exeC:\Users\admin\AppData\Local\Temp\Unicorn-29730.exeexecutable
MD5:917F6C8D32057F62B70FBE51F52852D8
SHA256:C4CAD486C799CC2BF6BFBC1D989386FEB82CD39E6CF50197BD1FA77A2039247B
8024BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\20900b88-7163-4a64-bc87-55d9fd8e4b53.down_data —
MD5:—
SHA256:—
7488Unicorn-62490.exeC:\Users\admin\AppData\Local\Temp\Unicorn-11712.exeexecutable
MD5:B77571BDC7E503DF9BC3F373A5AB23F4
SHA256:E47B9D3C3FD1B726569F4E3FAFFBE3F143E7FDD41C77048D51B4A589ED3A7726
6872Unicorn-2262.exeC:\Users\admin\AppData\Local\Temp\Unicorn-62490.exeexecutable
MD5:1A9AD994EA979AB6D3FC725C8FC39A08
SHA256:0B5C8E74BA6DB0BE22966E8290F99BADE738430B1DFBCBB55AADC1A2FE480ACA
7888WerFault.exeC:\ProgramData\Microsoft\Windows\WER\Temp\WERFD6D.tmp.dmpbinary
MD5:9AB60C224172389F1ED2FE05C69DCB75
SHA256:F7ECC94C6538E460D65AEF8D2EC1A23D908FFD9FBB97A428618FE642EB967B45
46201 (342).exeC:\Users\admin\AppData\Local\Temp\Unicorn-63781.exeexecutable
MD5:76D9237E76AD4563B4A140FAB5C9C91F
SHA256:146B04A179AD978A7B169077B3DBF64A2D2F6A1DF2295AF8BCAC801E530932D8
7408Unicorn-56699.exeC:\Users\admin\AppData\Local\Temp\Unicorn-53300.exeexecutable
MD5:DC15CD5E7BAC558CF694B0ECD6CBBCB5
SHA256:75FC25D3C10D9410147D4580F287E268D4D5558EC0D94253B4DE33C4A4E5C16B
7524Unicorn-63781.exeC:\Users\admin\AppData\Local\Temp\Unicorn-60721.exeexecutable
MD5:B97FE98A1FF9912E7BB396ABA15BDE9B
SHA256:7CFBF3C2EAC228AE6AAF4FB983070A74EE53E711A4B076F18A2D19A0D6C450B3
7888WerFault.exeC:\ProgramData\Microsoft\Windows\WER\Temp\WERFE0A.tmp.WERInternalMetadata.xmlbinary
MD5:2B7A4E5A65B75EEF16ADE0CFB47739AF
SHA256:BBDECC01CE000FD345AB403EF6225B57314B368662376F393AE974EFE0244CC7
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
25
DNS requests
19
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
6544
svchost.exe
GET
200
23.63.118.230:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
8024
BackgroundTransferHost.exe
GET
200
23.63.118.230:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
—
—
GET
200
184.24.77.35:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
6048
backgroundTaskHost.exe
GET
200
23.63.118.230:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
whitelisted
8804
SIHClient.exe
GET
200
2.23.246.101:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
8804
SIHClient.exe
GET
200
2.23.246.101:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
—
—
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
—
—
184.24.77.35:80
crl.microsoft.com
Akamai International B.V.
DE
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
6544
svchost.exe
20.190.160.67:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
23.63.118.230:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted
5496
MoUsoCoreWorker.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
3216
svchost.exe
40.113.110.67:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
40.126.31.73:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
2104
svchost.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
6048
backgroundTaskHost.exe
20.223.35.26:443
arc.msn.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 4.231.128.59
whitelisted
crl.microsoft.com
  • 184.24.77.35
  • 184.24.77.6
  • 184.24.77.37
whitelisted
google.com
  • 172.217.16.142
whitelisted
login.live.com
  • 20.190.160.67
  • 20.190.160.128
  • 40.126.32.74
  • 20.190.160.14
  • 20.190.160.5
  • 20.190.160.2
  • 40.126.32.133
  • 40.126.32.136
  • 40.126.31.73
  • 40.126.31.71
  • 20.190.159.23
  • 20.190.159.128
  • 20.190.159.2
  • 20.190.159.0
  • 40.126.31.131
  • 40.126.31.129
whitelisted
ocsp.digicert.com
  • 23.63.118.230
whitelisted
client.wns.windows.com
  • 40.113.110.67
  • 40.113.103.199
whitelisted
arc.msn.com
  • 20.223.35.26
whitelisted
www.bing.com
  • 23.212.110.209
  • 23.212.110.187
  • 23.212.110.201
  • 23.212.110.200
  • 23.212.110.208
  • 23.212.110.186
  • 23.212.110.202
  • 23.212.110.185
  • 23.212.110.203
whitelisted
slscr.update.microsoft.com
  • 20.109.210.53
whitelisted
www.microsoft.com
  • 2.23.246.101
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2026 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
1 (342)