File name:

1 (46)

Full analysis: https://app.any.run/tasks/773ccf48-3036-4ac6-9b13-cd94e417322e
Verdict: Malicious activity
Analysis date: March 24, 2025, 22:16:57
OS: Windows 10 Professional (build: 19044, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections
MD5:

0F935229465AE588925DD930B3EE28B0

SHA1:

9B301F14301DAA1C94B656FA9844FB1C9D61F39B

SHA256:

9CE8DC250716EDD6E783024746426F56DBC391F9EA5810C5B95A8C3B6822704B

SSDEEP:

6144:/o67loIQ7DGHY5eLQ8engb59zt4BlC8GByLOydOt0k/8SwtwpyAvEhbg/8jQsvHs:/R5XlHY5mQf64L/ayqydOtMxSDxmDsR

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Starts itself from another location

      • 1 (46).exe (PID: 5776)
      • Unicorn-65351.exe (PID: 1616)
      • Unicorn-8703.exe (PID: 6388)
      • Unicorn-32653.exe (PID: 1912)
      • Unicorn-940.exe (PID: 4244)
      • Unicorn-940.exe (PID: 680)
      • Unicorn-22321.exe (PID: 5984)
      • Unicorn-18237.exe (PID: 4188)
      • Unicorn-59824.exe (PID: 6372)
      • Unicorn-55740.exe (PID: 2656)
      • Unicorn-5984.exe (PID: 6816)
      • Unicorn-5984.exe (PID: 1660)
      • Unicorn-28278.exe (PID: 1672)
      • Unicorn-17176.exe (PID: 3240)
      • Unicorn-3441.exe (PID: 6644)
      • Unicorn-22412.exe (PID: 2616)
      • Unicorn-59015.exe (PID: 632)
      • Unicorn-35065.exe (PID: 208)
      • Unicorn-3592.exe (PID: 2552)
      • Unicorn-37011.exe (PID: 4120)
      • Unicorn-64945.exe (PID: 5056)
      • Unicorn-40349.exe (PID: 6972)
      • Unicorn-56777.exe (PID: 6080)
      • Unicorn-13706.exe (PID: 6592)
      • Unicorn-10998.exe (PID: 2420)
      • Unicorn-32181.exe (PID: 4696)
      • Unicorn-4147.exe (PID: 4920)
      • Unicorn-54739.exe (PID: 1328)
      • Unicorn-54739.exe (PID: 6512)
      • Unicorn-50390.exe (PID: 6676)
      • Unicorn-31387.exe (PID: 7304)
      • Unicorn-62113.exe (PID: 7332)
      • Unicorn-42247.exe (PID: 7324)
      • Unicorn-51899.exe (PID: 7344)
      • Unicorn-9383.exe (PID: 7392)
      • Unicorn-41501.exe (PID: 7372)
      • Unicorn-41977.exe (PID: 7440)
      • Unicorn-19519.exe (PID: 7460)
      • Unicorn-29825.exe (PID: 7420)
      • Unicorn-52746.exe (PID: 7484)
      • Unicorn-21465.exe (PID: 7500)
      • Unicorn-31579.exe (PID: 7536)
      • Unicorn-23411.exe (PID: 7552)
      • Unicorn-8755.exe (PID: 7520)
      • Unicorn-64998.exe (PID: 7572)
      • Unicorn-54137.exe (PID: 7580)
      • Unicorn-50364.exe (PID: 7604)
      • Unicorn-46545.exe (PID: 7640)
      • Unicorn-10343.exe (PID: 7740)
      • Unicorn-32181.exe (PID: 5360)
      • Unicorn-46545.exe (PID: 7624)
      • Unicorn-17194.exe (PID: 7788)
      • Unicorn-46545.exe (PID: 7632)
      • Unicorn-7650.exe (PID: 7664)
      • Unicorn-65019.exe (PID: 7696)
      • Unicorn-19994.exe (PID: 7812)
      • Unicorn-4743.exe (PID: 7764)
      • Unicorn-46545.exe (PID: 7648)
      • Unicorn-6259.exe (PID: 7796)
      • Unicorn-6259.exe (PID: 7804)
      • Unicorn-4147.exe (PID: 3008)
      • Unicorn-20649.exe (PID: 7892)
      • Unicorn-48683.exe (PID: 7876)
      • Unicorn-24179.exe (PID: 7920)
      • Unicorn-62258.exe (PID: 7956)
      • Unicorn-16678.exe (PID: 8056)
      • Unicorn-54905.exe (PID: 7936)
      • Unicorn-41183.exe (PID: 8004)
      • Unicorn-28839.exe (PID: 8100)
      • Unicorn-30977.exe (PID: 8032)
      • Unicorn-250.exe (PID: 8012)
      • Unicorn-24179.exe (PID: 7912)
      • Unicorn-47048.exe (PID: 7996)
      • Unicorn-59565.exe (PID: 8120)
      • Unicorn-43613.exe (PID: 7852)
      • Unicorn-16129.exe (PID: 8128)
      • Unicorn-4889.exe (PID: 8108)
      • Unicorn-14256.exe (PID: 5556)
      • Unicorn-4042.exe (PID: 1244)
      • Unicorn-26701.exe (PID: 8176)
      • Unicorn-11111.exe (PID: 8024)
      • Unicorn-29201.exe (PID: 8184)
      • Unicorn-29777.exe (PID: 6108)
      • Unicorn-2388.exe (PID: 8208)
      • Unicorn-4340.exe (PID: 8224)
      • Unicorn-39913.exe (PID: 8240)
      • Unicorn-3711.exe (PID: 8260)
      • Unicorn-22928.exe (PID: 3676)
      • Unicorn-58195.exe (PID: 8304)
      • Unicorn-43805.exe (PID: 8276)
      • Unicorn-38329.exe (PID: 8296)
      • Unicorn-37583.exe (PID: 8348)
      • Unicorn-23385.exe (PID: 8324)
      • Unicorn-27368.exe (PID: 8364)
      • Unicorn-1381.exe (PID: 8384)
      • Unicorn-19114.exe (PID: 8432)
      • Unicorn-19685.exe (PID: 8444)
      • Unicorn-13462.exe (PID: 8528)
      • Unicorn-26269.exe (PID: 8656)
      • Unicorn-59134.exe (PID: 8508)
      • Unicorn-31937.exe (PID: 8600)
      • Unicorn-3348.exe (PID: 8476)
      • Unicorn-13462.exe (PID: 8636)
      • Unicorn-13462.exe (PID: 8536)
      • Unicorn-1210.exe (PID: 8572)
      • Unicorn-13462.exe (PID: 8520)
      • Unicorn-36365.exe (PID: 8804)
      • Unicorn-7650.exe (PID: 7656)
      • Unicorn-1210.exe (PID: 8564)
      • Unicorn-49238.exe (PID: 7684)
      • Unicorn-1765.exe (PID: 8768)
      • Unicorn-27752.exe (PID: 8724)
      • Unicorn-64609.exe (PID: 8756)
      • Unicorn-1210.exe (PID: 8576)
      • Unicorn-9854.exe (PID: 8880)
      • Unicorn-48941.exe (PID: 8952)
      • Unicorn-36332.exe (PID: 8840)
      • Unicorn-51542.exe (PID: 8812)
      • Unicorn-16731.exe (PID: 8852)
      • Unicorn-59055.exe (PID: 8888)
      • Unicorn-16731.exe (PID: 8836)
      • Unicorn-2554.exe (PID: 9116)
      • Unicorn-1765.exe (PID: 8776)
      • Unicorn-43395.exe (PID: 9152)
      • Unicorn-18891.exe (PID: 9096)
      • Unicorn-49709.exe (PID: 9132)
      • Unicorn-49425.exe (PID: 5680)
      • Unicorn-27059.exe (PID: 9192)
      • Unicorn-46088.exe (PID: 9172)
      • Unicorn-8392.exe (PID: 1072)
      • Unicorn-8392.exe (PID: 8408)
      • Unicorn-8392.exe (PID: 9092)
      • Unicorn-19275.exe (PID: 9248)
      • Unicorn-19275.exe (PID: 9244)
      • Unicorn-51682.exe (PID: 9320)
      • Unicorn-33665.exe (PID: 9296)
      • Unicorn-60862.exe (PID: 9260)
      • Unicorn-33665.exe (PID: 9288)
      • Unicorn-33473.exe (PID: 9352)
      • Unicorn-33473.exe (PID: 9356)
      • Unicorn-9523.exe (PID: 9368)
      • Unicorn-35419.exe (PID: 9432)
      • Unicorn-35419.exe (PID: 9448)
      • Unicorn-3301.exe (PID: 9476)
      • Unicorn-25204.exe (PID: 9440)
      • Unicorn-22219.exe (PID: 9592)
      • Unicorn-22219.exe (PID: 9584)
      • Unicorn-29070.exe (PID: 9600)
      • Unicorn-18135.exe (PID: 9608)
      • Unicorn-38555.exe (PID: 9716)
      • Unicorn-58421.exe (PID: 9708)
      • Unicorn-2925.exe (PID: 9664)
      • Unicorn-18135.exe (PID: 9616)
      • Unicorn-50445.exe (PID: 9552)
      • Unicorn-15442.exe (PID: 9740)
      • Unicorn-19527.exe (PID: 9724)
      • Unicorn-49491.exe (PID: 9700)
      • Unicorn-56375.exe (PID: 9692)
      • Unicorn-44586.exe (PID: 9792)
      • Unicorn-9796.exe (PID: 9812)
      • Unicorn-26224.exe (PID: 9828)
      • Unicorn-32090.exe (PID: 9836)
      • Unicorn-40331.exe (PID: 9896)
      • Unicorn-41077.exe (PID: 9876)
      • Unicorn-22140.exe (PID: 9844)
      • Unicorn-5294.exe (PID: 8552)
      • Unicorn-55905.exe (PID: 9920)
      • Unicorn-23894.exe (PID: 9932)
      • Unicorn-3348.exe (PID: 8484)

    • Executable content was dropped or overwritten

      • 1 (46).exe (PID: 5776)
      • Unicorn-65351.exe (PID: 1616)
      • Unicorn-8703.exe (PID: 6388)
      • Unicorn-940.exe (PID: 4244)
      • Unicorn-940.exe (PID: 680)
      • Unicorn-32653.exe (PID: 1912)
      • Unicorn-3441.exe (PID: 6644)
      • Unicorn-22321.exe (PID: 5984)
      • Unicorn-18237.exe (PID: 4188)
      • Unicorn-59824.exe (PID: 6372)
      • Unicorn-55740.exe (PID: 2656)
      • Unicorn-5984.exe (PID: 1660)
      • Unicorn-28278.exe (PID: 1672)
      • Unicorn-17176.exe (PID: 3240)
      • Unicorn-59015.exe (PID: 632)
      • Unicorn-35065.exe (PID: 208)
      • Unicorn-3592.exe (PID: 2552)
      • Unicorn-37011.exe (PID: 4120)
      • Unicorn-64945.exe (PID: 5056)
      • Unicorn-40349.exe (PID: 6972)
      • Unicorn-56777.exe (PID: 6080)
      • Unicorn-13706.exe (PID: 6592)
      • Unicorn-32181.exe (PID: 4696)
      • Unicorn-54739.exe (PID: 1328)
      • Unicorn-32181.exe (PID: 5360)
      • Unicorn-50390.exe (PID: 6676)
      • Unicorn-22412.exe (PID: 2616)
      • Unicorn-31387.exe (PID: 7304)
      • Unicorn-42247.exe (PID: 7324)
      • Unicorn-51899.exe (PID: 7344)
      • Unicorn-41501.exe (PID: 7372)
      • Unicorn-9383.exe (PID: 7392)
      • Unicorn-29825.exe (PID: 7420)
      • Unicorn-19519.exe (PID: 7460)
      • Unicorn-41977.exe (PID: 7440)
      • Unicorn-52746.exe (PID: 7484)
      • Unicorn-21465.exe (PID: 7500)
      • Unicorn-31579.exe (PID: 7536)
      • Unicorn-23411.exe (PID: 7552)
      • Unicorn-8755.exe (PID: 7520)
      • Unicorn-64998.exe (PID: 7572)
      • Unicorn-54137.exe (PID: 7580)
      • Unicorn-50364.exe (PID: 7604)
      • Unicorn-46545.exe (PID: 7640)
      • Unicorn-7650.exe (PID: 7656)
      • Unicorn-46545.exe (PID: 7632)
      • Unicorn-7650.exe (PID: 7664)
      • Unicorn-65019.exe (PID: 7696)
      • Unicorn-10998.exe (PID: 2420)
      • Unicorn-4743.exe (PID: 7764)
      • Unicorn-4147.exe (PID: 3008)
      • Unicorn-6259.exe (PID: 7804)
      • Unicorn-4147.exe (PID: 4920)
      • Unicorn-6259.exe (PID: 7796)
      • Unicorn-5984.exe (PID: 6816)
      • Unicorn-54739.exe (PID: 6512)
      • Unicorn-20649.exe (PID: 7892)
      • Unicorn-24179.exe (PID: 7920)
      • Unicorn-62258.exe (PID: 7956)
      • Unicorn-16678.exe (PID: 8056)
      • Unicorn-48683.exe (PID: 7876)
      • Unicorn-250.exe (PID: 8012)
      • Unicorn-28839.exe (PID: 8100)
      • Unicorn-62113.exe (PID: 7332)
      • Unicorn-47048.exe (PID: 7996)
      • Unicorn-4889.exe (PID: 8108)
      • Unicorn-16129.exe (PID: 8128)
      • Unicorn-14256.exe (PID: 5556)
      • Unicorn-11111.exe (PID: 8024)
      • Unicorn-29201.exe (PID: 8184)
      • Unicorn-4042.exe (PID: 1244)
      • Unicorn-26701.exe (PID: 8176)
      • Unicorn-22928.exe (PID: 3676)
      • Unicorn-2388.exe (PID: 8208)
      • Unicorn-4340.exe (PID: 8224)
      • Unicorn-39913.exe (PID: 8240)
      • Unicorn-3711.exe (PID: 8260)
      • Unicorn-58195.exe (PID: 8304)
      • Unicorn-43805.exe (PID: 8276)
      • Unicorn-38329.exe (PID: 8296)
      • Unicorn-37583.exe (PID: 8348)
      • Unicorn-23385.exe (PID: 8324)
      • Unicorn-27368.exe (PID: 8364)
      • Unicorn-1381.exe (PID: 8384)
      • Unicorn-5294.exe (PID: 8552)
      • Unicorn-19114.exe (PID: 8432)
      • Unicorn-19685.exe (PID: 8444)
      • Unicorn-13462.exe (PID: 8528)
      • Unicorn-59134.exe (PID: 8508)
      • Unicorn-10343.exe (PID: 7740)
      • Unicorn-1210.exe (PID: 8572)
      • Unicorn-31937.exe (PID: 8600)
      • Unicorn-26269.exe (PID: 8656)
      • Unicorn-3348.exe (PID: 8476)
      • Unicorn-46545.exe (PID: 7624)
      • Unicorn-13462.exe (PID: 8636)
      • Unicorn-13462.exe (PID: 8536)
      • Unicorn-49238.exe (PID: 7684)
      • Unicorn-1210.exe (PID: 8564)
      • Unicorn-46545.exe (PID: 7648)
      • Unicorn-13462.exe (PID: 8520)
      • Unicorn-1765.exe (PID: 8768)
      • Unicorn-27752.exe (PID: 8724)
      • Unicorn-64609.exe (PID: 8756)
      • Unicorn-9854.exe (PID: 8880)
      • Unicorn-19299.exe (PID: 8796)
      • Unicorn-1210.exe (PID: 8576)
      • Unicorn-36332.exe (PID: 8840)
      • Unicorn-59055.exe (PID: 8888)
      • Unicorn-16731.exe (PID: 8852)
      • Unicorn-48941.exe (PID: 8952)
      • Unicorn-16731.exe (PID: 8836)
      • Unicorn-2554.exe (PID: 9116)
      • Unicorn-43395.exe (PID: 9152)
      • Unicorn-18891.exe (PID: 9096)
      • Unicorn-49709.exe (PID: 9132)
      • Unicorn-46088.exe (PID: 9172)
      • Unicorn-49425.exe (PID: 5680)
      • Unicorn-27059.exe (PID: 9192)
      • Unicorn-54905.exe (PID: 7936)
      • Unicorn-8392.exe (PID: 1072)
      • Unicorn-8392.exe (PID: 8408)
      • Unicorn-8392.exe (PID: 9092)
      • Unicorn-19275.exe (PID: 9248)
      • Unicorn-24179.exe (PID: 7912)
      • Unicorn-19275.exe (PID: 9244)
      • Unicorn-51682.exe (PID: 9320)
      • Unicorn-33665.exe (PID: 9296)
      • Unicorn-59565.exe (PID: 8120)
      • Unicorn-33665.exe (PID: 9288)
      • Unicorn-60862.exe (PID: 9260)
      • Unicorn-9523.exe (PID: 9368)
      • Unicorn-33473.exe (PID: 9356)
      • Unicorn-29777.exe (PID: 6108)
      • Unicorn-33473.exe (PID: 9352)
      • Unicorn-35419.exe (PID: 9432)
      • Unicorn-35419.exe (PID: 9448)
      • Unicorn-3301.exe (PID: 9476)
      • Unicorn-25204.exe (PID: 9440)
      • Unicorn-18135.exe (PID: 9608)
      • Unicorn-29070.exe (PID: 9600)
      • Unicorn-50445.exe (PID: 9552)
      • Unicorn-22219.exe (PID: 9592)
      • Unicorn-38555.exe (PID: 9716)
      • Unicorn-58421.exe (PID: 9708)
      • Unicorn-2925.exe (PID: 9664)
      • Unicorn-56375.exe (PID: 9692)
      • Unicorn-15442.exe (PID: 9740)
      • Unicorn-19527.exe (PID: 9724)
      • Unicorn-49491.exe (PID: 9700)
      • Unicorn-44586.exe (PID: 9792)
      • Unicorn-9796.exe (PID: 9812)
      • Unicorn-26224.exe (PID: 9828)
      • Unicorn-32090.exe (PID: 9836)
      • Unicorn-41077.exe (PID: 9876)
      • Unicorn-40331.exe (PID: 9896)
      • Unicorn-22140.exe (PID: 9844)
      • Unicorn-55905.exe (PID: 9920)
      • Unicorn-23894.exe (PID: 9932)
      • Unicorn-21631.exe (PID: 8784)
      • Unicorn-1765.exe (PID: 8776)
      • Unicorn-34493.exe (PID: 10036)
      • Unicorn-30977.exe (PID: 8032)
      • Unicorn-37761.exe (PID: 10084)
      • Unicorn-55681.exe (PID: 10060)
      • Unicorn-17533.exe (PID: 10192)
      • Unicorn-41675.exe (PID: 10124)
      • Unicorn-21617.exe (PID: 10156)
      • Unicorn-41483.exe (PID: 10164)
      • Unicorn-43521.exe (PID: 10224)
      • Unicorn-22219.exe (PID: 9584)
      • Unicorn-30023.exe (PID: 10108)
      • Unicorn-33891.exe (PID: 2244)
      • Unicorn-9002.exe (PID: 10268)
      • Unicorn-30191.exe (PID: 10340)
      • Unicorn-15892.exe (PID: 10364)
      • Unicorn-9386.exe (PID: 10472)
      • Unicorn-49028.exe (PID: 10448)
      • Unicorn-19994.exe (PID: 7812)
      • Unicorn-42251.exe (PID: 10424)
      • Unicorn-51542.exe (PID: 8812)
      • Unicorn-18877.exe (PID: 10508)
      • Unicorn-13470.exe (PID: 3132)
      • Unicorn-56812.exe (PID: 9088)
      • Unicorn-36391.exe (PID: 2340)
      • Unicorn-49049.exe (PID: 10528)
      • Unicorn-36340.exe (PID: 10544)
      • Unicorn-41183.exe (PID: 8004)
      • Unicorn-7916.exe (PID: 10572)
      • Unicorn-44581.exe (PID: 10600)
      • Unicorn-44581.exe (PID: 10592)
      • Unicorn-30959.exe (PID: 10624)
      • Unicorn-18135.exe (PID: 9616)
      • Unicorn-25291.exe (PID: 10652)
      • Unicorn-12292.exe (PID: 10712)
      • Unicorn-3348.exe (PID: 8484)
      • Unicorn-47850.exe (PID: 10672)
      • Unicorn-26683.exe (PID: 10760)
      • Unicorn-36365.exe (PID: 8804)
      • Unicorn-48279.exe (PID: 10732)
      • Unicorn-6070.exe (PID: 10776)
      • Unicorn-43573.exe (PID: 10812)
      • Unicorn-32713.exe (PID: 10832)
      • Unicorn-27237.exe (PID: 10880)
      • Unicorn-43613.exe (PID: 7852)
      • Unicorn-17194.exe (PID: 7788)
      • Unicorn-12868.exe (PID: 10912)
      • Unicorn-27259.exe (PID: 10972)
      • Unicorn-7393.exe (PID: 10964)
      • Unicorn-60678.exe (PID: 11020)
      • Unicorn-43595.exe (PID: 10904)
      • Unicorn-47679.exe (PID: 11184)
      • Unicorn-37373.exe (PID: 11092)
      • Unicorn-22983.exe (PID: 11348)
      • Unicorn-54264.exe (PID: 11236)
      • Unicorn-2462.exe (PID: 11252)
      • Unicorn-49817.exe (PID: 11028)
      • Unicorn-38119.exe (PID: 10988)
      • Unicorn-7393.exe (PID: 10956)
      • Unicorn-616.exe (PID: 10940)
      • Unicorn-27259.exe (PID: 10948)
      • Unicorn-57985.exe (PID: 10996)
      • Unicorn-25675.exe (PID: 11060)
      • Unicorn-49817.exe (PID: 11036)
      • Unicorn-12676.exe (PID: 11212)
      • Unicorn-38119.exe (PID: 10980)
      • Unicorn-9339.exe (PID: 11124)
      • Unicorn-21037.exe (PID: 11164)
      • Unicorn-2462.exe (PID: 11244)
      • Unicorn-18899.exe (PID: 10756)
      • Unicorn-27813.exe (PID: 11176)
      • Unicorn-53609.exe (PID: 11384)
      • Unicorn-58588.exe (PID: 11292)
      • Unicorn-61969.exe (PID: 11072)
      • Unicorn-39411.exe (PID: 11052)
      • Unicorn-14582.exe (PID: 2064)
      • Unicorn-48063.exe (PID: 11628)
      • Unicorn-21591.exe (PID: 11080)
      • Unicorn-48063.exe (PID: 11620)
      • Unicorn-14714.exe (PID: 11436)
      • Unicorn-55390.exe (PID: 11404)
      • Unicorn-47222.exe (PID: 11444)
      • Unicorn-22983.exe (PID: 11340)
      • Unicorn-5084.exe (PID: 11516)
      • Unicorn-13252.exe (PID: 11472)
      • Unicorn-62453.exe (PID: 11536)
      • Unicorn-26880.exe (PID: 11496)
      • Unicorn-39895.exe (PID: 11488)
      • Unicorn-52239.exe (PID: 11544)
      • Unicorn-24856.exe (PID: 11144)
      • Unicorn-58753.exe (PID: 11716)
      • Unicorn-16137.exe (PID: 11776)
      • Unicorn-34057.exe (PID: 11744)
      • Unicorn-14814.exe (PID: 11300)
      • Unicorn-3330.exe (PID: 11732)

  • INFO

    • The sample compiled with chinese language support

      • 1 (46).exe (PID: 5776)
      • Unicorn-1210.exe (PID: 8576)
      • Unicorn-16731.exe (PID: 8852)
      • Unicorn-54739.exe (PID: 6512)
      • Unicorn-36332.exe (PID: 8840)
      • Unicorn-59055.exe (PID: 8888)
      • Unicorn-16731.exe (PID: 8836)
      • Unicorn-48683.exe (PID: 7876)
      • Unicorn-41183.exe (PID: 8004)
      • Unicorn-49049.exe (PID: 10528)
      • Unicorn-62113.exe (PID: 7332)
      • Unicorn-18237.exe (PID: 4188)
      • Unicorn-24179.exe (PID: 7912)
      • Unicorn-55681.exe (PID: 10060)
      • Unicorn-19275.exe (PID: 9248)
      • Unicorn-4889.exe (PID: 8108)
      • Unicorn-19275.exe (PID: 9244)
      • Unicorn-8392.exe (PID: 8408)
      • Unicorn-59565.exe (PID: 8120)
      • Unicorn-41501.exe (PID: 7372)
      • Unicorn-29825.exe (PID: 7420)
      • Unicorn-41675.exe (PID: 10124)
      • Unicorn-51682.exe (PID: 9320)
      • Unicorn-16129.exe (PID: 8128)
      • Unicorn-35065.exe (PID: 208)
      • Unicorn-9383.exe (PID: 7392)
      • Unicorn-60862.exe (PID: 9260)
      • Unicorn-41977.exe (PID: 7440)
      • Unicorn-51899.exe (PID: 7344)
      • Unicorn-33665.exe (PID: 9288)
      • Unicorn-940.exe (PID: 4244)
      • Unicorn-37011.exe (PID: 4120)
      • Unicorn-22321.exe (PID: 5984)
      • Unicorn-29201.exe (PID: 8184)
      • Unicorn-940.exe (PID: 680)
      • Unicorn-21617.exe (PID: 10156)
      • Unicorn-4042.exe (PID: 1244)
      • Unicorn-3592.exe (PID: 2552)
      • Unicorn-52746.exe (PID: 7484)
      • Unicorn-26701.exe (PID: 8176)
      • Unicorn-13706.exe (PID: 6592)
      • Unicorn-9523.exe (PID: 9368)
      • Unicorn-19519.exe (PID: 7460)
      • Unicorn-59824.exe (PID: 6372)
      • Unicorn-41483.exe (PID: 10164)
      • Unicorn-33473.exe (PID: 9356)
      • Unicorn-33473.exe (PID: 9352)
      • Unicorn-17176.exe (PID: 3240)
      • Unicorn-21465.exe (PID: 7500)
      • Unicorn-29777.exe (PID: 6108)
      • Unicorn-25204.exe (PID: 9440)
      • Unicorn-7916.exe (PID: 10572)
      • Unicorn-8703.exe (PID: 6388)
      • Unicorn-2388.exe (PID: 8208)
      • Unicorn-4340.exe (PID: 8224)
      • Unicorn-44581.exe (PID: 10592)
      • Unicorn-44581.exe (PID: 10600)
      • Unicorn-22219.exe (PID: 9592)
      • Unicorn-33891.exe (PID: 2244)
      • Unicorn-8755.exe (PID: 7520)
      • Unicorn-29070.exe (PID: 9600)
      • Unicorn-11111.exe (PID: 8024)
      • Unicorn-64945.exe (PID: 5056)
      • Unicorn-35419.exe (PID: 9432)
      • Unicorn-35419.exe (PID: 9448)
      • Unicorn-8392.exe (PID: 9092)
      • Unicorn-15442.exe (PID: 9740)
      • Unicorn-50445.exe (PID: 9552)
      • Unicorn-19527.exe (PID: 9724)
      • Unicorn-38555.exe (PID: 9716)
      • Unicorn-22928.exe (PID: 3676)
      • Unicorn-58421.exe (PID: 9708)
      • Unicorn-13470.exe (PID: 3132)
      • Unicorn-2925.exe (PID: 9664)
      • Unicorn-56375.exe (PID: 9692)
      • Unicorn-3711.exe (PID: 8260)
      • Unicorn-31579.exe (PID: 7536)
      • Unicorn-49491.exe (PID: 9700)
      • Unicorn-9796.exe (PID: 9812)
      • Unicorn-44586.exe (PID: 9792)
      • Unicorn-56812.exe (PID: 9088)
      • Unicorn-18135.exe (PID: 9616)
      • Unicorn-39913.exe (PID: 8240)
      • Unicorn-58195.exe (PID: 8304)
      • Unicorn-26224.exe (PID: 9828)
      • Unicorn-43805.exe (PID: 8276)
      • Unicorn-64998.exe (PID: 7572)
      • Unicorn-36391.exe (PID: 2340)
      • Unicorn-32090.exe (PID: 9836)
      • Unicorn-22140.exe (PID: 9844)
      • Unicorn-41077.exe (PID: 9876)
      • Unicorn-38329.exe (PID: 8296)
      • Unicorn-37583.exe (PID: 8348)
      • Unicorn-40331.exe (PID: 9896)
      • Unicorn-9002.exe (PID: 10268)
      • Unicorn-25291.exe (PID: 10652)
      • Unicorn-30959.exe (PID: 10624)
      • Unicorn-40349.exe (PID: 6972)
      • Unicorn-23411.exe (PID: 7552)
      • Unicorn-56777.exe (PID: 6080)
      • Unicorn-50364.exe (PID: 7604)
      • Unicorn-23385.exe (PID: 8324)
      • Unicorn-27368.exe (PID: 8364)
      • Unicorn-54137.exe (PID: 7580)
      • Unicorn-55905.exe (PID: 9920)
      • Unicorn-30191.exe (PID: 10340)
      • Unicorn-1381.exe (PID: 8384)
      • Unicorn-55740.exe (PID: 2656)
      • Unicorn-23894.exe (PID: 9932)
      • Unicorn-32181.exe (PID: 4696)
      • Unicorn-15892.exe (PID: 10364)
      • Unicorn-12292.exe (PID: 10712)
      • Unicorn-3348.exe (PID: 8484)
      • Unicorn-47850.exe (PID: 10672)
      • Unicorn-49028.exe (PID: 10448)
      • Unicorn-19685.exe (PID: 8444)
      • Unicorn-13462.exe (PID: 8528)
      • Unicorn-7650.exe (PID: 7664)
      • Unicorn-26683.exe (PID: 10760)
      • Unicorn-59134.exe (PID: 8508)
      • Unicorn-48279.exe (PID: 10732)
      • Unicorn-10343.exe (PID: 7740)
      • Unicorn-13462.exe (PID: 8536)
      • Unicorn-19994.exe (PID: 7812)
      • Unicorn-36365.exe (PID: 8804)
      • Unicorn-19114.exe (PID: 8432)
      • Unicorn-46545.exe (PID: 7640)
      • Unicorn-9386.exe (PID: 10472)
      • Unicorn-32653.exe (PID: 1912)
      • Unicorn-26269.exe (PID: 8656)
      • Unicorn-28278.exe (PID: 1672)
      • Unicorn-3348.exe (PID: 8476)
      • Unicorn-49238.exe (PID: 7684)
      • Unicorn-1210.exe (PID: 8564)
      • Unicorn-6259.exe (PID: 7796)
      • Unicorn-46545.exe (PID: 7648)
      • Unicorn-54739.exe (PID: 1328)
      • Unicorn-65351.exe (PID: 1616)
      • Unicorn-6259.exe (PID: 7804)
      • Unicorn-4147.exe (PID: 4920)
      • Unicorn-42251.exe (PID: 10424)
      • Unicorn-51542.exe (PID: 8812)
      • Unicorn-48941.exe (PID: 8952)
      • Unicorn-5984.exe (PID: 1660)
      • Unicorn-18877.exe (PID: 10508)
      • Unicorn-4743.exe (PID: 7764)
      • Unicorn-32181.exe (PID: 5360)
      • Unicorn-10998.exe (PID: 2420)
      • Unicorn-1765.exe (PID: 8768)
      • Unicorn-4147.exe (PID: 3008)
      • Unicorn-3441.exe (PID: 6644)
      • Unicorn-6070.exe (PID: 10776)
      • Unicorn-34493.exe (PID: 10036)
      • Unicorn-37761.exe (PID: 10084)
      • Unicorn-43573.exe (PID: 10812)
      • Unicorn-2554.exe (PID: 9116)
      • Unicorn-49709.exe (PID: 9132)
      • Unicorn-43395.exe (PID: 9152)
      • Unicorn-36340.exe (PID: 10544)
      • Unicorn-20649.exe (PID: 7892)
      • Unicorn-49425.exe (PID: 5680)
      • Unicorn-59015.exe (PID: 632)
      • Unicorn-24179.exe (PID: 7920)
      • Unicorn-5984.exe (PID: 6816)
      • Unicorn-50390.exe (PID: 6676)
      • Unicorn-17194.exe (PID: 7788)
      • Unicorn-30023.exe (PID: 10108)
      • Unicorn-250.exe (PID: 8012)
      • Unicorn-54905.exe (PID: 7936)
      • Unicorn-1765.exe (PID: 8776)
      • Unicorn-7650.exe (PID: 7656)
      • Unicorn-8392.exe (PID: 1072)
      • Unicorn-47048.exe (PID: 7996)
      • Unicorn-33665.exe (PID: 9296)
      • Unicorn-62258.exe (PID: 7956)
      • Unicorn-31387.exe (PID: 7304)
      • Unicorn-16678.exe (PID: 8056)
      • Unicorn-27237.exe (PID: 10880)
      • Unicorn-43521.exe (PID: 10224)
      • Unicorn-43595.exe (PID: 10904)
      • Unicorn-12868.exe (PID: 10912)
      • Unicorn-28839.exe (PID: 8100)
      • Unicorn-18135.exe (PID: 9608)
      • Unicorn-27259.exe (PID: 10972)
      • Unicorn-17533.exe (PID: 10192)
      • Unicorn-7393.exe (PID: 10964)
      • Unicorn-60678.exe (PID: 11020)
      • Unicorn-7393.exe (PID: 10956)
      • Unicorn-43613.exe (PID: 7852)
      • Unicorn-42247.exe (PID: 7324)
      • Unicorn-616.exe (PID: 10940)
      • Unicorn-22983.exe (PID: 11348)
      • Unicorn-47679.exe (PID: 11184)
      • Unicorn-37373.exe (PID: 11092)
      • Unicorn-54264.exe (PID: 11236)
      • Unicorn-5294.exe (PID: 8552)
      • Unicorn-27259.exe (PID: 10948)
      • Unicorn-2462.exe (PID: 11252)
      • Unicorn-38119.exe (PID: 10988)
      • Unicorn-46545.exe (PID: 7632)
      • Unicorn-57985.exe (PID: 10996)
      • Unicorn-9339.exe (PID: 11124)
      • Unicorn-12676.exe (PID: 11212)
      • Unicorn-49817.exe (PID: 11036)
      • Unicorn-31937.exe (PID: 8600)
      • Unicorn-27752.exe (PID: 8724)
      • Unicorn-21631.exe (PID: 8784)
      • Unicorn-64609.exe (PID: 8756)
      • Unicorn-38119.exe (PID: 10980)
      • Unicorn-49817.exe (PID: 11028)
      • Unicorn-25675.exe (PID: 11060)
      • Unicorn-39411.exe (PID: 11052)
      • Unicorn-22412.exe (PID: 2616)
      • Unicorn-21037.exe (PID: 11164)
      • Unicorn-2462.exe (PID: 11244)
      • Unicorn-27813.exe (PID: 11176)
      • Unicorn-18899.exe (PID: 10756)
      • Unicorn-53609.exe (PID: 11384)
      • Unicorn-58588.exe (PID: 11292)
      • Unicorn-61969.exe (PID: 11072)
      • Unicorn-19299.exe (PID: 8796)
      • Unicorn-14582.exe (PID: 2064)
      • Unicorn-46545.exe (PID: 7624)
      • Unicorn-1210.exe (PID: 8572)
      • Unicorn-21591.exe (PID: 11080)
      • Unicorn-13462.exe (PID: 8636)
      • Unicorn-48063.exe (PID: 11628)
      • Unicorn-48063.exe (PID: 11620)
      • Unicorn-14714.exe (PID: 11436)
      • Unicorn-55390.exe (PID: 11404)
      • Unicorn-22983.exe (PID: 11340)
      • Unicorn-46088.exe (PID: 9172)
      • Unicorn-14256.exe (PID: 5556)
      • Unicorn-5084.exe (PID: 11516)
      • Unicorn-13252.exe (PID: 11472)
      • Unicorn-22219.exe (PID: 9584)
      • Unicorn-26880.exe (PID: 11496)
      • Unicorn-39895.exe (PID: 11488)
      • Unicorn-24856.exe (PID: 11144)
      • Unicorn-52239.exe (PID: 11544)
      • Unicorn-47222.exe (PID: 11444)
      • Unicorn-62453.exe (PID: 11536)
      • Unicorn-3330.exe (PID: 11732)
      • Unicorn-16137.exe (PID: 11776)
      • Unicorn-34057.exe (PID: 11744)
      • Unicorn-13462.exe (PID: 8520)
      • Unicorn-14814.exe (PID: 11300)
      • Unicorn-32713.exe (PID: 10832)
      • Unicorn-30977.exe (PID: 8032)
      • Unicorn-58753.exe (PID: 11716)

    • Reads the computer name

      • Unicorn-32653.exe (PID: 1912)
      • Unicorn-65351.exe (PID: 1616)
      • 1 (46).exe (PID: 5776)
      • Unicorn-8703.exe (PID: 6388)
      • Unicorn-17176.exe (PID: 3240)
      • Unicorn-940.exe (PID: 680)
      • Unicorn-940.exe (PID: 4244)
      • Unicorn-3441.exe (PID: 6644)
      • Unicorn-5984.exe (PID: 6816)
      • Unicorn-18237.exe (PID: 4188)
      • Unicorn-59824.exe (PID: 6372)
      • Unicorn-28278.exe (PID: 1672)
      • Unicorn-55740.exe (PID: 2656)
      • Unicorn-22412.exe (PID: 2616)
      • Unicorn-22321.exe (PID: 5984)
      • Unicorn-5984.exe (PID: 1660)
      • Unicorn-3592.exe (PID: 2552)
      • Unicorn-59015.exe (PID: 632)
      • Unicorn-35065.exe (PID: 208)
      • Unicorn-37011.exe (PID: 4120)
      • Unicorn-64945.exe (PID: 5056)
      • Unicorn-40349.exe (PID: 6972)
      • Unicorn-13706.exe (PID: 6592)
      • Unicorn-56777.exe (PID: 6080)
      • Unicorn-32181.exe (PID: 4696)
      • Unicorn-54739.exe (PID: 1328)
      • Unicorn-10998.exe (PID: 2420)
      • Unicorn-32181.exe (PID: 5360)
      • Unicorn-4147.exe (PID: 3008)
      • Unicorn-4147.exe (PID: 4920)
      • Unicorn-54739.exe (PID: 6512)
      • Unicorn-50390.exe (PID: 6676)
      • Unicorn-41501.exe (PID: 7372)
      • Unicorn-31387.exe (PID: 7304)
      • Unicorn-42247.exe (PID: 7324)
      • Unicorn-62113.exe (PID: 7332)
      • Unicorn-51899.exe (PID: 7344)
      • Unicorn-9383.exe (PID: 7392)
      • Unicorn-29825.exe (PID: 7420)
      • Unicorn-19519.exe (PID: 7460)
      • Unicorn-41977.exe (PID: 7440)
      • Unicorn-52746.exe (PID: 7484)
      • Unicorn-21465.exe (PID: 7500)
      • Unicorn-8755.exe (PID: 7520)
      • Unicorn-31579.exe (PID: 7536)
      • Unicorn-23411.exe (PID: 7552)
      • Unicorn-64998.exe (PID: 7572)
      • Unicorn-54137.exe (PID: 7580)
      • Unicorn-50364.exe (PID: 7604)
      • Unicorn-7650.exe (PID: 7664)
      • Unicorn-10343.exe (PID: 7740)
      • Unicorn-46545.exe (PID: 7624)
      • Unicorn-7650.exe (PID: 7656)
      • Unicorn-17194.exe (PID: 7788)
      • Unicorn-49238.exe (PID: 7684)
      • Unicorn-46545.exe (PID: 7640)
      • Unicorn-65019.exe (PID: 7696)
      • Unicorn-6259.exe (PID: 7796)
      • Unicorn-46545.exe (PID: 7648)
      • Unicorn-19994.exe (PID: 7812)
      • Unicorn-46545.exe (PID: 7632)
      • Unicorn-4743.exe (PID: 7764)
      • Unicorn-6259.exe (PID: 7804)
      • Unicorn-20649.exe (PID: 7892)
      • Unicorn-24179.exe (PID: 7920)
      • Unicorn-48683.exe (PID: 7876)
      • Unicorn-16678.exe (PID: 8056)
      • Unicorn-62258.exe (PID: 7956)
      • Unicorn-250.exe (PID: 8012)
      • Unicorn-54905.exe (PID: 7936)
      • Unicorn-41183.exe (PID: 8004)
      • Unicorn-28839.exe (PID: 8100)
      • Unicorn-24179.exe (PID: 7912)
      • Unicorn-47048.exe (PID: 7996)
      • Unicorn-30977.exe (PID: 8032)
      • Unicorn-59565.exe (PID: 8120)
      • Unicorn-16129.exe (PID: 8128)
      • Unicorn-43613.exe (PID: 7852)
      • Unicorn-14256.exe (PID: 5556)
      • Unicorn-11111.exe (PID: 8024)
      • Unicorn-29201.exe (PID: 8184)
      • Unicorn-4042.exe (PID: 1244)
      • Unicorn-4889.exe (PID: 8108)
      • Unicorn-26701.exe (PID: 8176)
      • Unicorn-29777.exe (PID: 6108)
      • Unicorn-22928.exe (PID: 3676)
      • Unicorn-4340.exe (PID: 8224)
      • Unicorn-2388.exe (PID: 8208)
      • Unicorn-3711.exe (PID: 8260)
      • Unicorn-58195.exe (PID: 8304)
      • Unicorn-43805.exe (PID: 8276)
      • Unicorn-38329.exe (PID: 8296)
      • Unicorn-39913.exe (PID: 8240)
      • Unicorn-27368.exe (PID: 8364)
      • Unicorn-37583.exe (PID: 8348)
      • Unicorn-23385.exe (PID: 8324)
      • Unicorn-1381.exe (PID: 8384)
      • Unicorn-3348.exe (PID: 8484)
      • Unicorn-19114.exe (PID: 8432)
      • Unicorn-19685.exe (PID: 8444)
      • Unicorn-5294.exe (PID: 8552)
      • Unicorn-59134.exe (PID: 8508)
      • Unicorn-1210.exe (PID: 8572)
      • Unicorn-31937.exe (PID: 8600)
      • Unicorn-13462.exe (PID: 8636)
      • Unicorn-13462.exe (PID: 8536)
      • Unicorn-3348.exe (PID: 8476)
      • Unicorn-21631.exe (PID: 8784)
      • Unicorn-13462.exe (PID: 8520)
      • Unicorn-13462.exe (PID: 8528)
      • Unicorn-26269.exe (PID: 8656)
      • Unicorn-1210.exe (PID: 8564)
      • Unicorn-27752.exe (PID: 8724)
      • Unicorn-1765.exe (PID: 8768)
      • Unicorn-64609.exe (PID: 8756)
      • Unicorn-51542.exe (PID: 8812)
      • Unicorn-19299.exe (PID: 8796)
      • Unicorn-1210.exe (PID: 8576)
      • Unicorn-9854.exe (PID: 8880)
      • Unicorn-36365.exe (PID: 8804)
      • Unicorn-36332.exe (PID: 8840)
      • Unicorn-16731.exe (PID: 8852)
      • Unicorn-59055.exe (PID: 8888)
      • Unicorn-16731.exe (PID: 8836)
      • Unicorn-1765.exe (PID: 8776)
      • Unicorn-48941.exe (PID: 8952)
      • Unicorn-18891.exe (PID: 9096)
      • Unicorn-49709.exe (PID: 9132)
      • Unicorn-2554.exe (PID: 9116)
      • Unicorn-27059.exe (PID: 9192)
      • Unicorn-46088.exe (PID: 9172)
      • Unicorn-43395.exe (PID: 9152)
      • Unicorn-49425.exe (PID: 5680)
      • Unicorn-8392.exe (PID: 1072)
      • Unicorn-8392.exe (PID: 9092)
      • Unicorn-8392.exe (PID: 8408)
      • Unicorn-51682.exe (PID: 9320)
      • Unicorn-19275.exe (PID: 9248)
      • Unicorn-19275.exe (PID: 9244)
      • Unicorn-33665.exe (PID: 9296)
      • Unicorn-60862.exe (PID: 9260)
      • Unicorn-33665.exe (PID: 9288)
      • Unicorn-35419.exe (PID: 9432)
      • Unicorn-9523.exe (PID: 9368)
      • Unicorn-33473.exe (PID: 9356)
      • Unicorn-33473.exe (PID: 9352)
      • Unicorn-35419.exe (PID: 9448)
      • Unicorn-25204.exe (PID: 9440)
      • Unicorn-3301.exe (PID: 9476)
      • Unicorn-22219.exe (PID: 9592)
      • Unicorn-22219.exe (PID: 9584)
      • Unicorn-18135.exe (PID: 9608)
      • Unicorn-18135.exe (PID: 9616)
      • Unicorn-29070.exe (PID: 9600)
      • Unicorn-50445.exe (PID: 9552)
      • Unicorn-38555.exe (PID: 9716)
      • Unicorn-2925.exe (PID: 9664)
      • Unicorn-58421.exe (PID: 9708)
      • Unicorn-15442.exe (PID: 9740)
      • Unicorn-19527.exe (PID: 9724)
      • Unicorn-49491.exe (PID: 9700)
      • Unicorn-44586.exe (PID: 9792)
      • Unicorn-56375.exe (PID: 9692)
      • Unicorn-9796.exe (PID: 9812)
      • Unicorn-26224.exe (PID: 9828)
      • Unicorn-32090.exe (PID: 9836)
      • Unicorn-22140.exe (PID: 9844)
      • Unicorn-41077.exe (PID: 9876)
      • Unicorn-40331.exe (PID: 9896)
      • Unicorn-55905.exe (PID: 9920)
      • Unicorn-23894.exe (PID: 9932)
      • Unicorn-34493.exe (PID: 10036)
      • Unicorn-55681.exe (PID: 10060)
      • Unicorn-37761.exe (PID: 10084)

    • Checks supported languages

      • Unicorn-65351.exe (PID: 1616)
      • Unicorn-32653.exe (PID: 1912)
      • 1 (46).exe (PID: 5776)
      • Unicorn-940.exe (PID: 4244)
      • Unicorn-940.exe (PID: 680)
      • Unicorn-8703.exe (PID: 6388)
      • Unicorn-17176.exe (PID: 3240)
      • Unicorn-3441.exe (PID: 6644)
      • Unicorn-22321.exe (PID: 5984)
      • Unicorn-59824.exe (PID: 6372)
      • Unicorn-18237.exe (PID: 4188)
      • Unicorn-59015.exe (PID: 632)
      • Unicorn-35065.exe (PID: 208)
      • Unicorn-55740.exe (PID: 2656)
      • Unicorn-5984.exe (PID: 1660)
      • Unicorn-5984.exe (PID: 6816)
      • Unicorn-22412.exe (PID: 2616)
      • Unicorn-28278.exe (PID: 1672)
      • Unicorn-3592.exe (PID: 2552)
      • Unicorn-37011.exe (PID: 4120)
      • Unicorn-13706.exe (PID: 6592)
      • Unicorn-64945.exe (PID: 5056)
      • Unicorn-40349.exe (PID: 6972)
      • Unicorn-56777.exe (PID: 6080)
      • Unicorn-32181.exe (PID: 4696)
      • Unicorn-54739.exe (PID: 6512)
      • Unicorn-54739.exe (PID: 1328)
      • Unicorn-10998.exe (PID: 2420)
      • Unicorn-50390.exe (PID: 6676)
      • Unicorn-32181.exe (PID: 5360)
      • Unicorn-4147.exe (PID: 3008)
      • Unicorn-4147.exe (PID: 4920)
      • Unicorn-31387.exe (PID: 7304)
      • Unicorn-62113.exe (PID: 7332)
      • Unicorn-42247.exe (PID: 7324)
      • Unicorn-41501.exe (PID: 7372)
      • Unicorn-9383.exe (PID: 7392)
      • Unicorn-41977.exe (PID: 7440)
      • Unicorn-29825.exe (PID: 7420)
      • Unicorn-51899.exe (PID: 7344)
      • Unicorn-19519.exe (PID: 7460)
      • Unicorn-52746.exe (PID: 7484)
      • Unicorn-21465.exe (PID: 7500)
      • Unicorn-8755.exe (PID: 7520)
      • Unicorn-31579.exe (PID: 7536)
      • Unicorn-50364.exe (PID: 7604)
      • Unicorn-64998.exe (PID: 7572)
      • Unicorn-54137.exe (PID: 7580)
      • Unicorn-46545.exe (PID: 7632)
      • Unicorn-46545.exe (PID: 7640)
      • Unicorn-23411.exe (PID: 7552)
      • Unicorn-7650.exe (PID: 7664)
      • Unicorn-46545.exe (PID: 7648)
      • Unicorn-49238.exe (PID: 7684)
      • Unicorn-65019.exe (PID: 7696)
      • Unicorn-7650.exe (PID: 7656)
      • Unicorn-6259.exe (PID: 7804)
      • Unicorn-17194.exe (PID: 7788)
      • Unicorn-10343.exe (PID: 7740)
      • Unicorn-4743.exe (PID: 7764)
      • Unicorn-6259.exe (PID: 7796)
      • Unicorn-19994.exe (PID: 7812)
      • Unicorn-46545.exe (PID: 7624)
      • Unicorn-20649.exe (PID: 7892)
      • Unicorn-48683.exe (PID: 7876)
      • Unicorn-24179.exe (PID: 7912)
      • Unicorn-54905.exe (PID: 7936)
      • Unicorn-62258.exe (PID: 7956)
      • Unicorn-24179.exe (PID: 7920)
      • Unicorn-47048.exe (PID: 7996)
      • Unicorn-30977.exe (PID: 8032)
      • Unicorn-16678.exe (PID: 8056)
      • Unicorn-11111.exe (PID: 8024)
      • Unicorn-250.exe (PID: 8012)
      • Unicorn-41183.exe (PID: 8004)
      • Unicorn-4889.exe (PID: 8108)
      • Unicorn-16129.exe (PID: 8128)
      • Unicorn-28839.exe (PID: 8100)
      • Unicorn-59565.exe (PID: 8120)
      • Unicorn-14256.exe (PID: 5556)
      • Unicorn-26701.exe (PID: 8176)
      • Unicorn-29201.exe (PID: 8184)
      • Unicorn-4042.exe (PID: 1244)
      • Unicorn-29777.exe (PID: 6108)
      • Unicorn-2388.exe (PID: 8208)
      • Unicorn-4340.exe (PID: 8224)
      • Unicorn-39913.exe (PID: 8240)
      • Unicorn-3711.exe (PID: 8260)
      • Unicorn-43805.exe (PID: 8276)
      • Unicorn-43613.exe (PID: 7852)
      • Unicorn-22928.exe (PID: 3676)
      • Unicorn-37583.exe (PID: 8348)
      • Unicorn-58195.exe (PID: 8304)
      • Unicorn-38329.exe (PID: 8296)
      • Unicorn-23385.exe (PID: 8324)
      • Unicorn-27368.exe (PID: 8364)
      • Unicorn-1381.exe (PID: 8384)
      • Unicorn-19685.exe (PID: 8444)
      • Unicorn-19114.exe (PID: 8432)
      • Unicorn-3348.exe (PID: 8484)
      • Unicorn-13462.exe (PID: 8528)
      • Unicorn-1210.exe (PID: 8572)
      • Unicorn-5294.exe (PID: 8552)
      • Unicorn-13462.exe (PID: 8636)
      • Unicorn-31937.exe (PID: 8600)
      • Unicorn-13462.exe (PID: 8536)
      • Unicorn-59134.exe (PID: 8508)
      • Unicorn-3348.exe (PID: 8476)
      • Unicorn-13462.exe (PID: 8520)
      • Unicorn-1210.exe (PID: 8576)
      • Unicorn-1210.exe (PID: 8564)
      • Unicorn-26269.exe (PID: 8656)
      • Unicorn-27752.exe (PID: 8724)
      • Unicorn-64609.exe (PID: 8756)
      • Unicorn-1765.exe (PID: 8768)
      • Unicorn-21631.exe (PID: 8784)
      • Unicorn-19299.exe (PID: 8796)
      • Unicorn-51542.exe (PID: 8812)
      • Unicorn-1765.exe (PID: 8776)
      • Unicorn-36365.exe (PID: 8804)
      • Unicorn-9854.exe (PID: 8880)
      • Unicorn-16731.exe (PID: 8836)
      • Unicorn-48941.exe (PID: 8952)
      • Unicorn-18891.exe (PID: 9096)
      • Unicorn-36332.exe (PID: 8840)
      • Unicorn-16731.exe (PID: 8852)
      • Unicorn-59055.exe (PID: 8888)
      • Unicorn-2554.exe (PID: 9116)
      • Unicorn-49709.exe (PID: 9132)
      • Unicorn-43395.exe (PID: 9152)
      • Unicorn-46088.exe (PID: 9172)
      • Unicorn-27059.exe (PID: 9192)
      • Unicorn-8392.exe (PID: 8408)
      • Unicorn-8392.exe (PID: 1072)
      • Unicorn-8392.exe (PID: 9092)
      • Unicorn-19275.exe (PID: 9248)
      • Unicorn-19275.exe (PID: 9244)
      • Unicorn-49425.exe (PID: 5680)
      • Unicorn-60862.exe (PID: 9260)
      • Unicorn-51682.exe (PID: 9320)
      • Unicorn-33665.exe (PID: 9296)
      • Unicorn-9523.exe (PID: 9368)
      • Unicorn-33473.exe (PID: 9356)
      • Unicorn-33473.exe (PID: 9352)
      • Unicorn-33665.exe (PID: 9288)
      • Unicorn-3301.exe (PID: 9476)
      • Unicorn-35419.exe (PID: 9448)
      • Unicorn-50445.exe (PID: 9552)
      • Unicorn-22219.exe (PID: 9584)
      • Unicorn-18135.exe (PID: 9616)
      • Unicorn-22219.exe (PID: 9592)
      • Unicorn-29070.exe (PID: 9600)
      • Unicorn-18135.exe (PID: 9608)
      • Unicorn-2925.exe (PID: 9664)
      • Unicorn-25204.exe (PID: 9440)
      • Unicorn-35419.exe (PID: 9432)
      • Unicorn-56375.exe (PID: 9692)
      • Unicorn-15442.exe (PID: 9740)
      • Unicorn-49491.exe (PID: 9700)
      • Unicorn-38555.exe (PID: 9716)
      • Unicorn-19527.exe (PID: 9724)
      • Unicorn-58421.exe (PID: 9708)
      • Unicorn-44586.exe (PID: 9792)
      • Unicorn-9796.exe (PID: 9812)
      • Unicorn-32090.exe (PID: 9836)
      • Unicorn-22140.exe (PID: 9844)
      • Unicorn-41077.exe (PID: 9876)
      • Unicorn-40331.exe (PID: 9896)
      • Unicorn-34493.exe (PID: 10036)
      • Unicorn-55905.exe (PID: 9920)
      • Unicorn-23894.exe (PID: 9932)
      • Unicorn-26224.exe (PID: 9828)
      • Unicorn-55681.exe (PID: 10060)
      • Unicorn-37761.exe (PID: 10084)
      • Unicorn-30023.exe (PID: 10108)
      • Unicorn-41675.exe (PID: 10124)
      • Unicorn-41483.exe (PID: 10164)
      • Unicorn-21617.exe (PID: 10156)
      • Unicorn-43521.exe (PID: 10224)
      • Unicorn-13470.exe (PID: 3132)
      • Unicorn-56812.exe (PID: 9088)
      • Unicorn-36391.exe (PID: 2340)
      • Unicorn-17533.exe (PID: 10192)
      • Unicorn-33891.exe (PID: 2244)
      • Unicorn-9002.exe (PID: 10268)
      • Unicorn-30191.exe (PID: 10340)
      • Unicorn-15892.exe (PID: 10364)
      • Unicorn-42251.exe (PID: 10424)
      • Unicorn-49028.exe (PID: 10448)
      • Unicorn-9386.exe (PID: 10472)
      • Unicorn-18877.exe (PID: 10508)
      • Unicorn-49049.exe (PID: 10528)
      • Unicorn-44581.exe (PID: 10592)
      • Unicorn-7916.exe (PID: 10572)
      • Unicorn-44581.exe (PID: 10600)
      • Unicorn-36340.exe (PID: 10544)
      • Unicorn-30959.exe (PID: 10624)
      • Unicorn-25291.exe (PID: 10652)
      • Unicorn-47850.exe (PID: 10672)
      • Unicorn-48279.exe (PID: 10732)
      • Unicorn-12292.exe (PID: 10712)
      • Unicorn-26683.exe (PID: 10760)
      • Unicorn-43573.exe (PID: 10812)
      • Unicorn-27237.exe (PID: 10880)
      • Unicorn-32713.exe (PID: 10832)
      • Unicorn-6070.exe (PID: 10776)
      • Unicorn-43595.exe (PID: 10904)
      • Unicorn-12868.exe (PID: 10912)
      • Unicorn-616.exe (PID: 10940)
      • Unicorn-27259.exe (PID: 10972)
      • Unicorn-7393.exe (PID: 10964)
      • Unicorn-38119.exe (PID: 10988)
      • Unicorn-57985.exe (PID: 10996)
      • Unicorn-7393.exe (PID: 10956)
      • Unicorn-49817.exe (PID: 11028)
      • Unicorn-21591.exe (PID: 11080)
      • Unicorn-38119.exe (PID: 10980)
      • Unicorn-37373.exe (PID: 11092)
      • Unicorn-60678.exe (PID: 11020)
      • Unicorn-27259.exe (PID: 10948)
      • Unicorn-25675.exe (PID: 11060)
      • Unicorn-21037.exe (PID: 11164)
      • Unicorn-54264.exe (PID: 11236)
      • Unicorn-24856.exe (PID: 11144)
      • Unicorn-2462.exe (PID: 11252)
      • Unicorn-2462.exe (PID: 11244)
      • Unicorn-49817.exe (PID: 11036)
      • Unicorn-14582.exe (PID: 2064)
      • Unicorn-9339.exe (PID: 11124)
      • Unicorn-12676.exe (PID: 11212)
      • Unicorn-27813.exe (PID: 11176)
      • Unicorn-61969.exe (PID: 11072)
      • Unicorn-58588.exe (PID: 11292)
      • Unicorn-47679.exe (PID: 11184)
      • Unicorn-14814.exe (PID: 11300)
      • Unicorn-22983.exe (PID: 11348)
      • Unicorn-53609.exe (PID: 11384)
      • Unicorn-22983.exe (PID: 11340)
      • Unicorn-39411.exe (PID: 11052)
      • Unicorn-18899.exe (PID: 10756)
      • Unicorn-55390.exe (PID: 11404)
      • Unicorn-13252.exe (PID: 11472)
      • Unicorn-5084.exe (PID: 11516)
      • Unicorn-39895.exe (PID: 11488)
      • Unicorn-26880.exe (PID: 11496)
      • Unicorn-62453.exe (PID: 11536)
      • Unicorn-15125.exe (PID: 11572)
      • Unicorn-52239.exe (PID: 11544)
      • Unicorn-14714.exe (PID: 11436)
      • Unicorn-47222.exe (PID: 11444)
      • Unicorn-48063.exe (PID: 11628)
      • Unicorn-48063.exe (PID: 11620)
      • Unicorn-58753.exe (PID: 11716)
      • Unicorn-34057.exe (PID: 11744)
      • Unicorn-3330.exe (PID: 11732)
      • Unicorn-16137.exe (PID: 11776)
      • Unicorn-12053.exe (PID: 11792)
      • Unicorn-23751.exe (PID: 11804)
      • Unicorn-42033.exe (PID: 11848)
      • Unicorn-40641.exe (PID: 11868)
      • Unicorn-6957.exe (PID: 11832)
      • Unicorn-11398.exe (PID: 11908)
      • Unicorn-59692.exe (PID: 11916)
      • Unicorn-46117.exe (PID: 11824)
      • Unicorn-29781.exe (PID: 11884)
      • Unicorn-20605.exe (PID: 12012)
      • Unicorn-20605.exe (PID: 12020)
      • Unicorn-22551.exe (PID: 12104)
      • Unicorn-47440.exe (PID: 11940)
      • Unicorn-6407.exe (PID: 11976)
      • Unicorn-36941.exe (PID: 12152)
      • Unicorn-13066.exe (PID: 12168)
      • Unicorn-38333.exe (PID: 12096)
      • Unicorn-41025.exe (PID: 12136)
      • Unicorn-21997.exe (PID: 12160)
      • Unicorn-60891.exe (PID: 12144)
      • Unicorn-36287.exe (PID: 12088)
      • Unicorn-27211.exe (PID: 12244)
      • Unicorn-27211.exe (PID: 12236)
      • Unicorn-47077.exe (PID: 12252)
      • Unicorn-63505.exe (PID: 12264)
      • Unicorn-32879.exe (PID: 12216)
      • Unicorn-44674.exe (PID: 12304)
      • Unicorn-10128.exe (PID: 12320)
      • Unicorn-65451.exe (PID: 12368)
      • Unicorn-65359.exe (PID: 12400)
      • Unicorn-22935.exe (PID: 12388)
      • Unicorn-28502.exe (PID: 12420)
      • Unicorn-42893.exe (PID: 12464)
      • Unicorn-28502.exe (PID: 12408)
      • Unicorn-25073.exe (PID: 12296)
      • Unicorn-25073.exe (PID: 812)
      • Unicorn-40855.exe (PID: 12312)
      • Unicorn-51472.exe (PID: 12536)
      • Unicorn-6520.exe (PID: 12556)
      • Unicorn-52722.exe (PID: 12544)
      • Unicorn-58322.exe (PID: 12568)
      • Unicorn-50154.exe (PID: 12600)
      • Unicorn-20910.exe (PID: 12620)
      • Unicorn-9121.exe (PID: 12664)
      • Unicorn-51280.exe (PID: 12688)
      • Unicorn-42615.exe (PID: 12696)
      • Unicorn-5858.exe (PID: 12472)
      • Unicorn-16250.exe (PID: 12456)
      • Unicorn-62452.exe (PID: 12448)
      • Unicorn-10704.exe (PID: 12480)
      • Unicorn-51545.exe (PID: 12724)
      • Unicorn-37731.exe (PID: 12788)
      • Unicorn-16469.exe (PID: 12680)
      • Unicorn-16634.exe (PID: 12764)
      • Unicorn-57886.exe (PID: 12892)
      • Unicorn-10127.exe (PID: 12864)
      • Unicorn-41623.exe (PID: 12912)
      • Unicorn-25479.exe (PID: 12832)
      • Unicorn-9697.exe (PID: 12808)
      • Unicorn-43569.exe (PID: 12960)
      • Unicorn-25827.exe (PID: 13004)
      • Unicorn-61192.exe (PID: 13076)
      • Unicorn-38441.exe (PID: 13172)
      • Unicorn-20080.exe (PID: 13240)
      • Unicorn-12842.exe (PID: 12952)
      • Unicorn-59997.exe (PID: 12984)
      • Unicorn-40601.exe (PID: 13296)
      • Unicorn-40601.exe (PID: 13304)
      • Unicorn-5790.exe (PID: 13288)
      • Unicorn-26110.exe (PID: 4008)
      • Unicorn-19989.exe (PID: 4620)
      • Unicorn-19756.exe (PID: 4868)
      • Unicorn-34187.exe (PID: 5232)
      • Unicorn-26019.exe (PID: 13348)
      • Unicorn-6153.exe (PID: 13356)
      • Unicorn-13766.exe (PID: 13380)
      • Unicorn-9682.exe (PID: 13400)
      • Unicorn-34187.exe (PID: 13316)
      • Unicorn-54607.exe (PID: 13436)
      • Unicorn-34763.exe (PID: 13476)
      • Unicorn-61405.exe (PID: 13508)
      • Unicorn-55275.exe (PID: 13496)
      • Unicorn-51191.exe (PID: 13544)
      • Unicorn-37455.exe (PID: 13536)
      • Unicorn-42355.exe (PID: 13456)
      • Unicorn-8120.exe (PID: 13624)
      • Unicorn-63351.exe (PID: 13588)
      • Unicorn-7855.exe (PID: 13616)
      • Unicorn-8483.exe (PID: 13704)
      • Unicorn-29095.exe (PID: 13664)
      • Unicorn-63159.exe (PID: 13692)
      • Unicorn-26979.exe (PID: 13772)
      • Unicorn-18811.exe (PID: 13808)
      • Unicorn-16764.exe (PID: 13780)
      • Unicorn-41369.exe (PID: 13884)
      • Unicorn-30962.exe (PID: 13892)
      • Unicorn-29479.exe (PID: 14016)
      • Unicorn-4975.exe (PID: 13936)
      • Unicorn-36636.exe (PID: 14052)
      • Unicorn-38223.exe (PID: 14136)
      • Unicorn-32817.exe (PID: 14084)
      • Unicorn-37285.exe (PID: 14220)
      • Unicorn-9251.exe (PID: 14236)
      • Unicorn-38661.exe (PID: 14252)
      • Unicorn-5188.exe (PID: 14276)
      • Unicorn-33512.exe (PID: 14304)
      • Unicorn-36469.exe (PID: 14332)
      • Unicorn-36469.exe (PID: 14328)
      • Unicorn-47875.exe (PID: 14144)
      • Unicorn-36085.exe (PID: 14180)
      • Unicorn-47683.exe (PID: 14204)
      • Unicorn-15202.exe (PID: 14388)
      • Unicorn-41845.exe (PID: 14408)
      • Unicorn-56619.exe (PID: 14600)
      • Unicorn-11562.exe (PID: 14448)
      • Unicorn-57466.exe (PID: 14464)
      • Unicorn-97.exe (PID: 14456)
      • Unicorn-6127.exe (PID: 14504)
      • Unicorn-16241.exe (PID: 14552)
      • Unicorn-15778.exe (PID: 14520)
      • Unicorn-61358.exe (PID: 14620)
      • Unicorn-61358.exe (PID: 14632)
      • Unicorn-60974.exe (PID: 14344)
      • Unicorn-14103.exe (PID: 14760)
      • Unicorn-61358.exe (PID: 14616)
      • Unicorn-48914.exe (PID: 14712)
      • Unicorn-62649.exe (PID: 14720)
      • Unicorn-58565.exe (PID: 14732)

    • Reads security settings of Internet Explorer

      • BackgroundTransferHost.exe (PID: 1240)
      • BackgroundTransferHost.exe (PID: 4120)
      • BackgroundTransferHost.exe (PID: 6576)
      • BackgroundTransferHost.exe (PID: 208)
      • BackgroundTransferHost.exe (PID: 4464)

    • Checks proxy server information

      • BackgroundTransferHost.exe (PID: 1240)

    • Create files in a temporary directory

      • Unicorn-8703.exe (PID: 6388)
      • 1 (46).exe (PID: 5776)
      • Unicorn-32653.exe (PID: 1912)
      • Unicorn-940.exe (PID: 4244)
      • Unicorn-17176.exe (PID: 3240)
      • Unicorn-22321.exe (PID: 5984)
      • Unicorn-940.exe (PID: 680)
      • Unicorn-59824.exe (PID: 6372)
      • Unicorn-28278.exe (PID: 1672)
      • Unicorn-65351.exe (PID: 1616)
      • Unicorn-35065.exe (PID: 208)
      • Unicorn-40349.exe (PID: 6972)
      • Unicorn-55740.exe (PID: 2656)
      • Unicorn-13706.exe (PID: 6592)
      • Unicorn-54739.exe (PID: 1328)
      • Unicorn-50390.exe (PID: 6676)
      • Unicorn-32181.exe (PID: 4696)
      • Unicorn-22412.exe (PID: 2616)
      • Unicorn-42247.exe (PID: 7324)
      • Unicorn-51899.exe (PID: 7344)
      • Unicorn-31387.exe (PID: 7304)
      • Unicorn-3592.exe (PID: 2552)
      • Unicorn-9383.exe (PID: 7392)
      • Unicorn-18237.exe (PID: 4188)
      • Unicorn-37011.exe (PID: 4120)
      • Unicorn-29825.exe (PID: 7420)
      • Unicorn-41977.exe (PID: 7440)
      • Unicorn-52746.exe (PID: 7484)
      • Unicorn-21465.exe (PID: 7500)
      • Unicorn-8755.exe (PID: 7520)
      • Unicorn-31579.exe (PID: 7536)
      • Unicorn-23411.exe (PID: 7552)
      • Unicorn-56777.exe (PID: 6080)
      • Unicorn-64945.exe (PID: 5056)
      • Unicorn-50364.exe (PID: 7604)
      • Unicorn-64998.exe (PID: 7572)
      • Unicorn-54137.exe (PID: 7580)
      • Unicorn-32181.exe (PID: 5360)
      • Unicorn-65019.exe (PID: 7696)
      • Unicorn-4743.exe (PID: 7764)
      • Unicorn-6259.exe (PID: 7796)
      • Unicorn-6259.exe (PID: 7804)
      • Unicorn-4147.exe (PID: 3008)
      • Unicorn-5984.exe (PID: 1660)
      • Unicorn-5984.exe (PID: 6816)
      • Unicorn-54739.exe (PID: 6512)
      • Unicorn-3441.exe (PID: 6644)
      • Unicorn-20649.exe (PID: 7892)
      • Unicorn-24179.exe (PID: 7920)
      • Unicorn-62258.exe (PID: 7956)
      • Unicorn-59015.exe (PID: 632)
      • Unicorn-250.exe (PID: 8012)
      • Unicorn-30977.exe (PID: 8032)
      • Unicorn-47048.exe (PID: 7996)
      • Unicorn-4889.exe (PID: 8108)
      • Unicorn-41501.exe (PID: 7372)
      • Unicorn-16129.exe (PID: 8128)
      • Unicorn-14256.exe (PID: 5556)
      • Unicorn-11111.exe (PID: 8024)
      • Unicorn-4042.exe (PID: 1244)
      • Unicorn-26701.exe (PID: 8176)
      • Unicorn-29201.exe (PID: 8184)
      • Unicorn-19519.exe (PID: 7460)
      • Unicorn-22928.exe (PID: 3676)
      • Unicorn-4340.exe (PID: 8224)
      • Unicorn-39913.exe (PID: 8240)
      • Unicorn-3711.exe (PID: 8260)
      • Unicorn-43805.exe (PID: 8276)
      • Unicorn-58195.exe (PID: 8304)
      • Unicorn-23385.exe (PID: 8324)
      • Unicorn-38329.exe (PID: 8296)
      • Unicorn-37583.exe (PID: 8348)
      • Unicorn-27368.exe (PID: 8364)
      • Unicorn-1381.exe (PID: 8384)
      • Unicorn-3348.exe (PID: 8484)
      • Unicorn-19114.exe (PID: 8432)
      • Unicorn-46545.exe (PID: 7632)
      • Unicorn-46545.exe (PID: 7640)
      • Unicorn-19685.exe (PID: 8444)
      • Unicorn-59134.exe (PID: 8508)
      • Unicorn-13462.exe (PID: 8528)
      • Unicorn-10343.exe (PID: 7740)
      • Unicorn-1210.exe (PID: 8572)
      • Unicorn-31937.exe (PID: 8600)
      • Unicorn-7650.exe (PID: 7664)
      • Unicorn-26269.exe (PID: 8656)
      • Unicorn-13462.exe (PID: 8636)
      • Unicorn-46545.exe (PID: 7624)
      • Unicorn-3348.exe (PID: 8476)
      • Unicorn-19994.exe (PID: 7812)
      • Unicorn-13462.exe (PID: 8536)
      • Unicorn-7650.exe (PID: 7656)
      • Unicorn-1210.exe (PID: 8564)
      • Unicorn-46545.exe (PID: 7648)
      • Unicorn-13462.exe (PID: 8520)
      • Unicorn-49238.exe (PID: 7684)
      • Unicorn-10998.exe (PID: 2420)
      • Unicorn-1765.exe (PID: 8768)
      • Unicorn-64609.exe (PID: 8756)
      • Unicorn-27752.exe (PID: 8724)
      • Unicorn-1210.exe (PID: 8576)
      • Unicorn-9854.exe (PID: 8880)
      • Unicorn-19299.exe (PID: 8796)
      • Unicorn-4147.exe (PID: 4920)
      • Unicorn-48941.exe (PID: 8952)
      • Unicorn-36332.exe (PID: 8840)
      • Unicorn-59055.exe (PID: 8888)
      • Unicorn-16731.exe (PID: 8836)
      • Unicorn-16731.exe (PID: 8852)
      • Unicorn-2554.exe (PID: 9116)
      • Unicorn-18891.exe (PID: 9096)
      • Unicorn-43395.exe (PID: 9152)
      • Unicorn-49709.exe (PID: 9132)
      • Unicorn-48683.exe (PID: 7876)
      • Unicorn-46088.exe (PID: 9172)
      • Unicorn-16678.exe (PID: 8056)
      • Unicorn-49425.exe (PID: 5680)
      • Unicorn-27059.exe (PID: 9192)
      • Unicorn-28839.exe (PID: 8100)
      • Unicorn-62113.exe (PID: 7332)
      • Unicorn-8392.exe (PID: 1072)
      • Unicorn-24179.exe (PID: 7912)
      • Unicorn-41183.exe (PID: 8004)
      • Unicorn-8392.exe (PID: 9092)
      • Unicorn-19275.exe (PID: 9248)
      • Unicorn-8392.exe (PID: 8408)
      • Unicorn-19275.exe (PID: 9244)
      • Unicorn-51682.exe (PID: 9320)
      • Unicorn-33665.exe (PID: 9296)
      • Unicorn-59565.exe (PID: 8120)
      • Unicorn-60862.exe (PID: 9260)
      • Unicorn-33665.exe (PID: 9288)
      • Unicorn-9523.exe (PID: 9368)
      • Unicorn-33473.exe (PID: 9356)
      • Unicorn-29777.exe (PID: 6108)
      • Unicorn-33473.exe (PID: 9352)
      • Unicorn-35419.exe (PID: 9432)
      • Unicorn-35419.exe (PID: 9448)
      • Unicorn-3301.exe (PID: 9476)
      • Unicorn-25204.exe (PID: 9440)
      • Unicorn-2388.exe (PID: 8208)
      • Unicorn-29070.exe (PID: 9600)
      • Unicorn-50445.exe (PID: 9552)
      • Unicorn-22219.exe (PID: 9592)
      • Unicorn-18135.exe (PID: 9608)
      • Unicorn-38555.exe (PID: 9716)
      • Unicorn-58421.exe (PID: 9708)
      • Unicorn-2925.exe (PID: 9664)
      • Unicorn-19527.exe (PID: 9724)
      • Unicorn-49491.exe (PID: 9700)
      • Unicorn-56375.exe (PID: 9692)
      • Unicorn-15442.exe (PID: 9740)
      • Unicorn-44586.exe (PID: 9792)
      • Unicorn-9796.exe (PID: 9812)
      • Unicorn-32090.exe (PID: 9836)
      • Unicorn-26224.exe (PID: 9828)
      • Unicorn-41077.exe (PID: 9876)
      • Unicorn-40331.exe (PID: 9896)
      • Unicorn-22140.exe (PID: 9844)
      • Unicorn-55905.exe (PID: 9920)
      • Unicorn-5294.exe (PID: 8552)
      • Unicorn-23894.exe (PID: 9932)
      • Unicorn-17194.exe (PID: 7788)
      • Unicorn-21631.exe (PID: 8784)

    • Creates files or folders in the user directory

      • BackgroundTransferHost.exe (PID: 1240)

    • Reads the software policy settings

      • BackgroundTransferHost.exe (PID: 1240)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable Microsoft Visual Basic 6 (90.6)
.exe | Win32 Executable (generic) (4.9)
.exe | Generic Win/DOS Executable (2.2)
.exe | DOS Executable Generic (2.2)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:01:20 00:32:00+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 299008
UninitializedDataSize: -
EntryPoint: 0x13d4
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
Internalame: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
533
Monitored processes
401
Malicious processes
62
Suspicious processes
64

Behavior graph

Click at the process to see the details
start 1 (46).exe sppextcomobj.exe no specs slui.exe no specs unicorn-65351.exe unicorn-32653.exe unicorn-8703.exe unicorn-940.exe unicorn-940.exe unicorn-17176.exe unicorn-3441.exe backgroundtransferhost.exe no specs backgroundtransferhost.exe backgroundtransferhost.exe no specs backgroundtransferhost.exe no specs unicorn-22321.exe unicorn-18237.exe unicorn-59824.exe unicorn-55740.exe unicorn-5984.exe unicorn-5984.exe unicorn-22412.exe unicorn-28278.exe backgroundtransferhost.exe no specs unicorn-59015.exe unicorn-35065.exe unicorn-3592.exe unicorn-37011.exe unicorn-13706.exe unicorn-64945.exe unicorn-40349.exe unicorn-56777.exe unicorn-32181.exe unicorn-32181.exe unicorn-54739.exe unicorn-54739.exe unicorn-4147.exe unicorn-4147.exe unicorn-50390.exe unicorn-10998.exe unicorn-31387.exe unicorn-42247.exe unicorn-62113.exe unicorn-51899.exe unicorn-41501.exe unicorn-9383.exe unicorn-29825.exe unicorn-41977.exe unicorn-19519.exe unicorn-52746.exe unicorn-21465.exe unicorn-8755.exe unicorn-31579.exe unicorn-23411.exe unicorn-64998.exe unicorn-54137.exe unicorn-50364.exe unicorn-46545.exe unicorn-46545.exe unicorn-46545.exe unicorn-46545.exe unicorn-7650.exe unicorn-7650.exe unicorn-49238.exe unicorn-65019.exe unicorn-10343.exe unicorn-4743.exe unicorn-17194.exe unicorn-6259.exe unicorn-6259.exe unicorn-19994.exe unicorn-48683.exe unicorn-20649.exe unicorn-24179.exe unicorn-24179.exe unicorn-54905.exe unicorn-62258.exe unicorn-47048.exe unicorn-41183.exe unicorn-250.exe unicorn-11111.exe unicorn-30977.exe unicorn-16678.exe unicorn-28839.exe unicorn-4889.exe unicorn-59565.exe unicorn-16129.exe unicorn-26701.exe unicorn-29201.exe unicorn-14256.exe unicorn-4042.exe unicorn-43613.exe unicorn-22928.exe unicorn-29777.exe unicorn-2388.exe unicorn-4340.exe unicorn-39913.exe unicorn-3711.exe unicorn-43805.exe unicorn-38329.exe unicorn-58195.exe unicorn-23385.exe unicorn-37583.exe unicorn-27368.exe unicorn-1381.exe unicorn-19114.exe unicorn-19685.exe unicorn-3348.exe unicorn-3348.exe unicorn-59134.exe unicorn-13462.exe unicorn-13462.exe unicorn-13462.exe unicorn-5294.exe unicorn-1210.exe unicorn-1210.exe unicorn-1210.exe unicorn-31937.exe unicorn-13462.exe unicorn-26269.exe unicorn-27752.exe unicorn-64609.exe unicorn-1765.exe unicorn-1765.exe unicorn-21631.exe unicorn-19299.exe unicorn-36365.exe unicorn-51542.exe unicorn-16731.exe unicorn-36332.exe unicorn-16731.exe unicorn-9854.exe unicorn-59055.exe unicorn-48941.exe unicorn-18891.exe unicorn-2554.exe unicorn-49709.exe unicorn-43395.exe unicorn-46088.exe unicorn-27059.exe unicorn-49425.exe unicorn-8392.exe unicorn-8392.exe unicorn-8392.exe unicorn-19275.exe unicorn-19275.exe unicorn-60862.exe unicorn-33665.exe unicorn-33665.exe unicorn-51682.exe unicorn-33473.exe unicorn-33473.exe unicorn-9523.exe unicorn-35419.exe unicorn-25204.exe unicorn-35419.exe unicorn-3301.exe unicorn-50445.exe unicorn-22219.exe unicorn-22219.exe unicorn-29070.exe unicorn-18135.exe unicorn-18135.exe unicorn-2925.exe unicorn-56375.exe unicorn-49491.exe unicorn-58421.exe unicorn-38555.exe unicorn-19527.exe unicorn-15442.exe unicorn-44586.exe unicorn-9796.exe unicorn-26224.exe unicorn-32090.exe unicorn-22140.exe unicorn-41077.exe unicorn-40331.exe unicorn-55905.exe unicorn-23894.exe unicorn-34493.exe unicorn-55681.exe unicorn-37761.exe unicorn-30023.exe unicorn-41675.exe unicorn-21617.exe unicorn-41483.exe unicorn-17533.exe unicorn-43521.exe unicorn-33891.exe unicorn-13470.exe unicorn-56812.exe unicorn-36391.exe unicorn-9002.exe unicorn-30191.exe unicorn-15892.exe unicorn-42251.exe unicorn-49028.exe unicorn-9386.exe unicorn-18877.exe unicorn-49049.exe unicorn-36340.exe unicorn-7916.exe unicorn-44581.exe unicorn-44581.exe unicorn-30959.exe unicorn-25291.exe unicorn-47850.exe unicorn-12292.exe unicorn-48279.exe unicorn-26683.exe unicorn-6070.exe unicorn-43573.exe unicorn-32713.exe unicorn-27237.exe unicorn-43595.exe unicorn-12868.exe unicorn-616.exe unicorn-27259.exe unicorn-7393.exe unicorn-7393.exe unicorn-27259.exe unicorn-38119.exe unicorn-38119.exe unicorn-57985.exe unicorn-60678.exe unicorn-49817.exe unicorn-49817.exe unicorn-39411.exe unicorn-25675.exe unicorn-61969.exe unicorn-21591.exe unicorn-37373.exe unicorn-9339.exe unicorn-24856.exe unicorn-21037.exe unicorn-27813.exe unicorn-47679.exe unicorn-12676.exe unicorn-54264.exe unicorn-2462.exe unicorn-2462.exe unicorn-14582.exe unicorn-18899.exe unicorn-58588.exe unicorn-14814.exe unicorn-22983.exe unicorn-22983.exe unicorn-53609.exe unicorn-55390.exe unicorn-14714.exe unicorn-47222.exe unicorn-13252.exe unicorn-39895.exe unicorn-26880.exe unicorn-5084.exe unicorn-62453.exe unicorn-52239.exe unicorn-15125.exe no specs unicorn-48063.exe unicorn-48063.exe unicorn-58753.exe unicorn-3330.exe unicorn-34057.exe unicorn-16137.exe unicorn-12053.exe no specs unicorn-23751.exe no specs unicorn-46117.exe no specs unicorn-6957.exe no specs unicorn-42033.exe no specs unicorn-40641.exe no specs unicorn-29781.exe no specs unicorn-11398.exe no specs unicorn-59692.exe no specs unicorn-47440.exe no specs unicorn-6407.exe no specs unicorn-20605.exe no specs unicorn-20605.exe no specs unicorn-36287.exe no specs unicorn-38333.exe no specs unicorn-22551.exe no specs unicorn-41025.exe no specs unicorn-60891.exe no specs unicorn-36941.exe no specs unicorn-21997.exe no specs unicorn-13066.exe no specs unicorn-32879.exe no specs unicorn-27211.exe no specs unicorn-27211.exe no specs unicorn-47077.exe no specs unicorn-63505.exe no specs unicorn-25073.exe no specs unicorn-25073.exe no specs unicorn-44674.exe no specs unicorn-40855.exe no specs unicorn-10128.exe no specs unicorn-65451.exe no specs unicorn-22935.exe no specs unicorn-65359.exe no specs unicorn-28502.exe no specs unicorn-28502.exe no specs unicorn-62452.exe no specs unicorn-16250.exe no specs unicorn-42893.exe no specs unicorn-5858.exe no specs unicorn-10704.exe no specs unicorn-51472.exe no specs unicorn-52722.exe no specs unicorn-6520.exe no specs unicorn-58322.exe no specs unicorn-50154.exe no specs unicorn-20910.exe no specs unicorn-9121.exe no specs unicorn-16469.exe no specs unicorn-51280.exe no specs unicorn-42615.exe no specs unicorn-51545.exe no specs unicorn-16634.exe no specs unicorn-37731.exe no specs unicorn-9697.exe no specs unicorn-25479.exe no specs unicorn-10127.exe no specs unicorn-57886.exe no specs unicorn-41623.exe no specs unicorn-12842.exe no specs unicorn-43569.exe no specs unicorn-59997.exe no specs unicorn-25827.exe no specs unicorn-61192.exe no specs unicorn-38441.exe no specs unicorn-20080.exe no specs unicorn-5790.exe no specs unicorn-40601.exe no specs unicorn-40601.exe no specs unicorn-26110.exe no specs unicorn-19756.exe no specs unicorn-19989.exe no specs unicorn-34187.exe no specs unicorn-34187.exe no specs unicorn-26019.exe no specs unicorn-6153.exe no specs unicorn-13766.exe no specs unicorn-9682.exe no specs unicorn-54607.exe no specs unicorn-42355.exe no specs unicorn-34763.exe no specs unicorn-55275.exe no specs unicorn-61405.exe no specs unicorn-37455.exe no specs unicorn-51191.exe no specs unicorn-63351.exe no specs unicorn-7855.exe no specs unicorn-8120.exe no specs unicorn-29095.exe no specs unicorn-63159.exe no specs unicorn-8483.exe no specs unicorn-26979.exe no specs unicorn-16764.exe no specs unicorn-18811.exe no specs unicorn-41369.exe no specs unicorn-30962.exe no specs unicorn-4975.exe no specs unicorn-29479.exe no specs unicorn-36636.exe no specs unicorn-32817.exe no specs unicorn-38223.exe no specs unicorn-47875.exe no specs unicorn-36085.exe no specs unicorn-47683.exe no specs unicorn-37285.exe no specs unicorn-9251.exe no specs unicorn-38661.exe no specs unicorn-5188.exe no specs unicorn-33512.exe no specs unicorn-36469.exe no specs unicorn-36469.exe no specs unicorn-60974.exe no specs unicorn-15202.exe no specs unicorn-41845.exe no specs unicorn-11562.exe no specs unicorn-97.exe no specs unicorn-57466.exe no specs unicorn-6127.exe no specs unicorn-15778.exe no specs unicorn-16241.exe no specs unicorn-56619.exe no specs unicorn-61358.exe no specs unicorn-61358.exe no specs unicorn-61358.exe no specs unicorn-48914.exe no specs unicorn-62649.exe no specs unicorn-58565.exe no specs unicorn-58565.exe no specs unicorn-14103.exe no specs unicorn-14103.exe no specs unicorn-44830.exe no specs unicorn-46313.exe no specs unicorn-52178.exe no specs unicorn-32577.exe no specs unicorn-59220.exe no specs unicorn-13283.exe no specs unicorn-534.exe no specs unicorn-3334.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
208"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.1C:\Windows\System32\BackgroundTransferHost.exe—svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Download/Upload Host
Exit code:
1
Version:
10.0.19041.3636 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\backgroundtransferhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\kernel.appcore.dll
c:\windows\system32\bcryptprimitives.dll
208C:\Users\admin\AppData\Local\Temp\Unicorn-35065.exeC:\Users\admin\AppData\Local\Temp\Unicorn-35065.exe
Unicorn-940.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-35065.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
632C:\Users\admin\AppData\Local\Temp\Unicorn-59015.exeC:\Users\admin\AppData\Local\Temp\Unicorn-59015.exe
Unicorn-22321.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-59015.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
680C:\Users\admin\AppData\Local\Temp\Unicorn-940.exeC:\Users\admin\AppData\Local\Temp\Unicorn-940.exe
Unicorn-32653.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-940.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
812C:\Users\admin\AppData\Local\Temp\Unicorn-25073.exeC:\Users\admin\AppData\Local\Temp\Unicorn-25073.exe—Unicorn-43613.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-25073.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1072C:\Users\admin\AppData\Local\Temp\Unicorn-8392.exeC:\Users\admin\AppData\Local\Temp\Unicorn-8392.exe
Unicorn-250.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-8392.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1240"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.1C:\Windows\System32\BackgroundTransferHost.exe
svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Download/Upload Host
Exit code:
1
Version:
10.0.19041.3636 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\backgroundtransferhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\kernel.appcore.dll
c:\windows\system32\bcryptprimitives.dll
1244C:\Users\admin\AppData\Local\Temp\Unicorn-4042.exeC:\Users\admin\AppData\Local\Temp\Unicorn-4042.exe
Unicorn-59824.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-4042.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1328C:\Users\admin\AppData\Local\Temp\Unicorn-54739.exeC:\Users\admin\AppData\Local\Temp\Unicorn-54739.exe
Unicorn-28278.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-54739.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1616C:\Users\admin\AppData\Local\Temp\Unicorn-65351.exeC:\Users\admin\AppData\Local\Temp\Unicorn-65351.exe
1 (46).exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-65351.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
Total events
9 872
Read events
9 857
Write events
15
Delete events
0

Modification events

(PID) Process:(4120) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(4120) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(4120) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(1240) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(6576) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(6576) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(6576) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(1240) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(1240) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(208) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
Executable files
1 247
Suspicious files
5
Text files
0
Unknown types
0

Dropped files

PID
Process
Filename
Type
1240BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\e87fa75a-9d9a-48e5-be3a-888f55a8f056.down_data —
MD5:—
SHA256:—
1240BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10Dbinary
MD5:4872BABAF39AA62B8D32695EBB7E9173
SHA256:2EE85DF86EE29BBEB3DCA81AA29B6DE204F605A2769B84C728A329178A2D0999
6388Unicorn-8703.exeC:\Users\admin\AppData\Local\Temp\Unicorn-940.exeexecutable
MD5:188ACC0646E290EB0EB2AF85D18A96DF
SHA256:F167756707BE660B0A1CEF002C2D426414B6A1C1A662036E156BE2D2AFF38E34
57761 (46).exeC:\Users\admin\AppData\Local\Temp\Unicorn-65351.exeexecutable
MD5:6A01FC30F823E129DC3263531DD52549
SHA256:E306CBF6008E4CFBBBAF21E12AC36B58BA89B2A54691D45B46E0E07A578D12DA
57761 (46).exeC:\Users\admin\AppData\Local\Temp\Unicorn-17176.exeexecutable
MD5:C48053300D05C8DC2F7C0932EE7AB4D0
SHA256:3348864FDFECE0D443B19D66001A9875DF417EB89EFF95F2A70C718141C9A4CC
1616Unicorn-65351.exeC:\Users\admin\AppData\Local\Temp\Unicorn-3441.exeexecutable
MD5:573532B9AC24179E9235D7BA4805240D
SHA256:634E0E1C73092AEE33ACD63111634F3C9972758EEBEDB507D6B46B0B0EB4D5A2
680Unicorn-940.exeC:\Users\admin\AppData\Local\Temp\Unicorn-18237.exeexecutable
MD5:32F2C5AB269A363C705EAA3F58C842BD
SHA256:48B2CADD4B808609B2E06ABA69B477EE76E20B68DE236C010B701F9AE13D8301
4244Unicorn-940.exeC:\Users\admin\AppData\Local\Temp\Unicorn-22321.exeexecutable
MD5:4601DAC3BB535F3F3BA5B5EE32EB5565
SHA256:EF457F4337B3C7007B48ABC969513746590DFF33783AA8EE34D6ABC8E106A640
1240BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10Dbinary
MD5:B9A5176A37B52F6214503136F9BBDE49
SHA256:ECE9C12136C863A91E38CE435D7C6F14591310755DDD5CBE8640E1631C30F7CC
1616Unicorn-65351.exeC:\Users\admin\AppData\Local\Temp\Unicorn-32653.exeexecutable
MD5:844EA32EC79BD3DED328D9150260522B
SHA256:7DCC41D75443A7170345DD037DD5789154786F0510FFB3E085CF0FA19F4FF4DE
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
25
DNS requests
17
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
6544
svchost.exe
GET
200
184.24.0.227:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
—
—
GET
200
2.19.11.120:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
8396
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
1764
backgroundTaskHost.exe
GET
200
184.24.0.227:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
whitelisted
8396
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
1240
BackgroundTransferHost.exe
GET
200
184.24.0.227:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:137
—
—
—
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
—
—
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
—
—
2.19.11.120:80
crl.microsoft.com
Elisa Oyj
NL
whitelisted
3216
svchost.exe
40.113.110.67:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
20.190.159.64:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
6544
svchost.exe
184.24.0.227:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted
1764
backgroundTaskHost.exe
20.74.47.205:443
arc.msn.com
MICROSOFT-CORP-MSN-AS-BLOCK
FR
whitelisted
1764
backgroundTaskHost.exe
184.24.0.227:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted
1240
BackgroundTransferHost.exe
2.23.227.215:443
www.bing.com
Ooredoo Q.S.C.
QA
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 4.231.128.59
  • 51.104.136.2
whitelisted
crl.microsoft.com
  • 2.19.11.120
  • 2.19.11.105
whitelisted
google.com
  • 142.250.184.238
whitelisted
client.wns.windows.com
  • 40.113.110.67
whitelisted
login.live.com
  • 20.190.159.64
  • 20.190.159.71
  • 40.126.31.73
  • 40.126.31.128
  • 20.190.159.68
  • 20.190.159.73
  • 40.126.31.71
  • 40.126.31.3
whitelisted
ocsp.digicert.com
  • 184.24.0.227
whitelisted
arc.msn.com
  • 20.74.47.205
whitelisted
www.bing.com
  • 2.23.227.215
  • 2.23.227.208
whitelisted
slscr.update.microsoft.com
  • 52.149.20.212
whitelisted
www.microsoft.com
  • 184.30.21.171
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
1 (46)