File name:

1 (492)

Full analysis: https://app.any.run/tasks/294debdb-bdfe-4e79-99dc-16c17ae4b853
Verdict: Malicious activity
Analysis date: March 25, 2025, 01:02:14
OS: Windows 10 Professional (build: 19045, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections
MD5:

17C8988A551E7744F66626BDFD3AD730

SHA1:

DFB89A375E53ACD60731CB41541502525139691A

SHA256:

A6DA05DD358B2621EF73532612AE58569B061D136D42C081A3F38FCC2A0EADDC

SSDEEP:

6144:NwK5t+x2kDvHA5REtMevkofxotB1lvJGBq//yeOg/k/8SwjwpyA4EhByWbCUG5Ni:N9vKLHA56tvMBHhaq3yeOgLx4QxmYsR

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • 1 (492).exe (PID: 2320)
      • Unicorn-15982.exe (PID: 4400)
      • Unicorn-25070.exe (PID: 6268)
      • Unicorn-46988.exe (PID: 5064)
      • Unicorn-42808.exe (PID: 1184)
      • Unicorn-41237.exe (PID: 5772)
      • Unicorn-51936.exe (PID: 1164)
      • Unicorn-10266.exe (PID: 5608)
      • Unicorn-51858.exe (PID: 5592)
      • Unicorn-50633.exe (PID: 6324)
      • Unicorn-18745.exe (PID: 6148)
      • Unicorn-45698.exe (PID: 3332)
      • Unicorn-23353.exe (PID: 4988)
      • Unicorn-60991.exe (PID: 1852)
      • Unicorn-50898.exe (PID: 3100)
      • Unicorn-59931.exe (PID: 4188)
      • Unicorn-6615.exe (PID: 5360)
      • Unicorn-17698.exe (PID: 2692)
      • Unicorn-57855.exe (PID: 6592)
      • Unicorn-62360.exe (PID: 5228)
      • Unicorn-43035.exe (PID: 7172)
      • Unicorn-29889.exe (PID: 4688)
      • Unicorn-18561.exe (PID: 3176)
      • Unicorn-47643.exe (PID: 6800)
      • Unicorn-26258.exe (PID: 3768)
      • Unicorn-114.exe (PID: 4040)
      • Unicorn-23775.exe (PID: 7200)
      • Unicorn-29641.exe (PID: 7184)
      • Unicorn-10040.exe (PID: 7192)
      • Unicorn-25298.exe (PID: 2568)
      • Unicorn-7046.exe (PID: 1128)
      • Unicorn-61341.exe (PID: 7564)
      • Unicorn-33176.exe (PID: 7456)
      • Unicorn-45817.exe (PID: 7468)
      • Unicorn-41785.exe (PID: 7484)
      • Unicorn-16229.exe (PID: 7576)
      • Unicorn-54969.exe (PID: 7740)
      • Unicorn-59992.exe (PID: 7544)
      • Unicorn-4097.exe (PID: 7768)
      • Unicorn-50486.exe (PID: 8036)
      • Unicorn-22654.exe (PID: 7840)
      • Unicorn-16283.exe (PID: 7928)
      • Unicorn-34619.exe (PID: 7636)
      • Unicorn-5969.exe (PID: 7652)
      • Unicorn-10792.exe (PID: 7500)
      • Unicorn-36426.exe (PID: 7708)
      • Unicorn-29797.exe (PID: 7600)
      • Unicorn-30011.exe (PID: 8180)
      • Unicorn-27160.exe (PID: 7428)
      • Unicorn-5530.exe (PID: 8160)
      • Unicorn-11823.exe (PID: 680)
      • Unicorn-25339.exe (PID: 8336)
      • Unicorn-36155.exe (PID: 7992)
      • Unicorn-24475.exe (PID: 744)
      • Unicorn-62054.exe (PID: 8480)
      • Unicorn-42360.exe (PID: 8260)
      • Unicorn-15634.exe (PID: 7720)
      • Unicorn-42483.exe (PID: 8104)
      • Unicorn-40149.exe (PID: 8136)
      • Unicorn-10961.exe (PID: 8056)
      • Unicorn-2524.exe (PID: 1812)
      • Unicorn-30245.exe (PID: 7972)
      • Unicorn-43193.exe (PID: 2644)
      • Unicorn-60894.exe (PID: 4620)
      • Unicorn-19771.exe (PID: 8356)
      • Unicorn-47826.exe (PID: 8500)
      • Unicorn-6632.exe (PID: 8016)
      • Unicorn-14849.exe (PID: 7680)
      • Unicorn-27874.exe (PID: 7440)
      • Unicorn-51175.exe (PID: 2908)
      • Unicorn-63698.exe (PID: 7416)
      • Unicorn-27797.exe (PID: 7592)
      • Unicorn-35966.exe (PID: 8792)
      • Unicorn-13210.exe (PID: 8096)
      • Unicorn-17496.exe (PID: 7900)
      • Unicorn-4222.exe (PID: 7372)
      • Unicorn-1748.exe (PID: 8824)
      • Unicorn-49468.exe (PID: 7672)
      • Unicorn-4704.exe (PID: 9128)
      • Unicorn-49383.exe (PID: 9036)
      • Unicorn-50340.exe (PID: 9148)
      • Unicorn-30003.exe (PID: 9164)
      • Unicorn-62262.exe (PID: 8896)
      • Unicorn-34614.exe (PID: 8436)
      • Unicorn-12375.exe (PID: 8664)
      • Unicorn-43668.exe (PID: 8072)
      • Unicorn-27349.exe (PID: 8468)
      • Unicorn-24914.exe (PID: 8800)
      • Unicorn-5733.exe (PID: 8444)
      • Unicorn-2897.exe (PID: 8084)
      • Unicorn-43193.exe (PID: 7948)
      • Unicorn-26386.exe (PID: 7700)
      • Unicorn-62623.exe (PID: 8108)
      • Unicorn-14237.exe (PID: 8288)
      • Unicorn-49383.exe (PID: 9028)
      • Unicorn-35966.exe (PID: 8784)
      • Unicorn-10189.exe (PID: 9096)
      • Unicorn-65499.exe (PID: 664)
      • Unicorn-36252.exe (PID: 8944)
      • Unicorn-40472.exe (PID: 8928)
      • Unicorn-64310.exe (PID: 7760)
      • Unicorn-20615.exe (PID: 736)
      • Unicorn-16510.exe (PID: 7984)
      • Unicorn-11089.exe (PID: 8912)
      • Unicorn-54948.exe (PID: 8976)
      • Unicorn-40216.exe (PID: 7820)
      • Unicorn-53988.exe (PID: 8988)
      • Unicorn-20615.exe (PID: 7808)
      • Unicorn-26850.exe (PID: 6004)
      • Unicorn-55262.exe (PID: 9760)
      • Unicorn-47582.exe (PID: 9796)
      • Unicorn-21156.exe (PID: 8680)
      • Unicorn-17362.exe (PID: 8268)
      • Unicorn-28062.exe (PID: 9016)
      • Unicorn-57535.exe (PID: 8428)
      • Unicorn-48103.exe (PID: 1280)
      • Unicorn-20615.exe (PID: 7912)
      • Unicorn-64097.exe (PID: 8252)
      • Unicorn-23765.exe (PID: 7384)
      • Unicorn-9047.exe (PID: 9044)
      • Unicorn-63755.exe (PID: 2192)
      • Unicorn-370.exe (PID: 9332)
      • Unicorn-27508.exe (PID: 10004)
      • Unicorn-41569.exe (PID: 9324)
      • Unicorn-52802.exe (PID: 8280)
      • Unicorn-43998.exe (PID: 9412)
      • Unicorn-17575.exe (PID: 11000)
      • Unicorn-22183.exe (PID: 11044)
      • Unicorn-30582.exe (PID: 8396)
      • Unicorn-20484.exe (PID: 9452)
      • Unicorn-30515.exe (PID: 10048)
      • Unicorn-52403.exe (PID: 10548)
      • Unicorn-6822.exe (PID: 11172)
      • Unicorn-39969.exe (PID: 9612)
      • Unicorn-60449.exe (PID: 9180)
      • Unicorn-3182.exe (PID: 9064)
      • Unicorn-20615.exe (PID: 8300)
      • Unicorn-13344.exe (PID: 9508)
      • Unicorn-38052.exe (PID: 8332)
      • Unicorn-13279.exe (PID: 10172)
      • Unicorn-55316.exe (PID: 9852)
      • Unicorn-58456.exe (PID: 7556)
      • Unicorn-10649.exe (PID: 10032)
      • Unicorn-51163.exe (PID: 8540)
      • Unicorn-31550.exe (PID: 7480)
      • Unicorn-55841.exe (PID: 856)
      • Unicorn-34350.exe (PID: 7496)
      • Unicorn-21821.exe (PID: 11476)
      • Unicorn-26340.exe (PID: 7228)
      • Unicorn-30515.exe (PID: 10040)
      • Unicorn-24244.exe (PID: 12800)
      • Unicorn-55944.exe (PID: 8996)
      • Unicorn-64069.exe (PID: 10084)
      • Unicorn-20644.exe (PID: 9668)
      • Unicorn-57850.exe (PID: 10596)
      • Unicorn-23924.exe (PID: 9104)
      • Unicorn-13474.exe (PID: 8692)
      • Unicorn-54984.exe (PID: 9072)
      • Unicorn-61537.exe (PID: 10144)
      • Unicorn-58991.exe (PID: 10540)
      • Unicorn-9047.exe (PID: 9052)
      • Unicorn-21982.exe (PID: 10476)
      • Unicorn-18619.exe (PID: 10436)
      • Unicorn-30916.exe (PID: 11336)
      • Unicorn-49288.exe (PID: 10492)
      • Unicorn-43826.exe (PID: 10824)
      • Unicorn-55567.exe (PID: 8776)
      • Unicorn-19428.exe (PID: 13872)
      • Unicorn-21842.exe (PID: 8840)
      • Unicorn-50382.exe (PID: 13864)
      • Unicorn-4710.exe (PID: 13856)
      • Unicorn-24982.exe (PID: 12884)
      • Unicorn-10509.exe (PID: 12876)
      • Unicorn-3277.exe (PID: 13740)
      • Unicorn-382.exe (PID: 9080)
      • Unicorn-58747.exe (PID: 7300)
      • Unicorn-34673.exe (PID: 6028)
      • Unicorn-14980.exe (PID: 13016)
      • Unicorn-778.exe (PID: 9660)
      • Unicorn-61755.exe (PID: 13400)
      • Unicorn-24542.exe (PID: 9956)
      • Unicorn-7501.exe (PID: 10968)
      • Unicorn-37706.exe (PID: 9912)
      • Unicorn-26142.exe (PID: 10776)
      • Unicorn-42593.exe (PID: 7860)
      • Unicorn-14368.exe (PID: 10444)
      • Unicorn-45039.exe (PID: 11512)
      • Unicorn-44722.exe (PID: 10020)
      • Unicorn-21444.exe (PID: 12808)
      • Unicorn-18398.exe (PID: 10072)
      • Unicorn-50958.exe (PID: 11216)
      • Unicorn-6986.exe (PID: 9276)
      • Unicorn-9760.exe (PID: 10396)
      • Unicorn-37444.exe (PID: 7824)
      • Unicorn-11883.exe (PID: 12816)
      • Unicorn-40216.exe (PID: 9340)
      • Unicorn-24982.exe (PID: 12868)
      • Unicorn-64066.exe (PID: 12132)
      • Unicorn-54174.exe (PID: 12124)
      • Unicorn-24244.exe (PID: 12776)
      • Unicorn-27437.exe (PID: 14980)
      • Unicorn-11747.exe (PID: 13924)
      • Unicorn-444.exe (PID: 12784)
      • Unicorn-14301.exe (PID: 13364)
      • Unicorn-55527.exe (PID: 12404)
      • Unicorn-44583.exe (PID: 13980)
      • Unicorn-52949.exe (PID: 9312)
      • Unicorn-63685.exe (PID: 12792)
      • Unicorn-8422.exe (PID: 12352)
      • Unicorn-50287.exe (PID: 4844)
      • Unicorn-3994.exe (PID: 2416)
      • Unicorn-48206.exe (PID: 12604)
      • Unicorn-21197.exe (PID: 15468)
      • Unicorn-58769.exe (PID: 9088)
      • Unicorn-30689.exe (PID: 11376)
      • Unicorn-26590.exe (PID: 4304)
      • Unicorn-5965.exe (PID: 10892)
      • Unicorn-35870.exe (PID: 10108)
      • Unicorn-53470.exe (PID: 13840)
      • Unicorn-44583.exe (PID: 12936)
      • Unicorn-8931.exe (PID: 9780)
      • Unicorn-45835.exe (PID: 9432)
      • Unicorn-53028.exe (PID: 10864)
      • Unicorn-34350.exe (PID: 7852)

    • Starts itself from another location

      • 1 (492).exe (PID: 2320)
      • Unicorn-46988.exe (PID: 5064)
      • Unicorn-25070.exe (PID: 6268)
      • Unicorn-15982.exe (PID: 4400)
      • Unicorn-10266.exe (PID: 5608)
      • Unicorn-42808.exe (PID: 1184)
      • Unicorn-41237.exe (PID: 5772)
      • Unicorn-51936.exe (PID: 1164)
      • Unicorn-18745.exe (PID: 6148)
      • Unicorn-51858.exe (PID: 5592)
      • Unicorn-50633.exe (PID: 6324)
      • Unicorn-23353.exe (PID: 4988)
      • Unicorn-7046.exe (PID: 1128)
      • Unicorn-60991.exe (PID: 1852)
      • Unicorn-59931.exe (PID: 4188)
      • Unicorn-57855.exe (PID: 6592)
      • Unicorn-6615.exe (PID: 5360)
      • Unicorn-45698.exe (PID: 3332)
      • Unicorn-17698.exe (PID: 2692)
      • Unicorn-62360.exe (PID: 5228)
      • Unicorn-50898.exe (PID: 3100)
      • Unicorn-43035.exe (PID: 7172)
      • Unicorn-29889.exe (PID: 4688)
      • Unicorn-18561.exe (PID: 3176)
      • Unicorn-47643.exe (PID: 6800)
      • Unicorn-26258.exe (PID: 3768)
      • Unicorn-114.exe (PID: 4040)
      • Unicorn-23775.exe (PID: 7200)
      • Unicorn-29641.exe (PID: 7184)
      • Unicorn-10040.exe (PID: 7192)
      • Unicorn-45817.exe (PID: 7468)
      • Unicorn-61341.exe (PID: 7564)
      • Unicorn-58456.exe (PID: 7556)
      • Unicorn-41785.exe (PID: 7484)
      • Unicorn-54969.exe (PID: 7740)
      • Unicorn-16229.exe (PID: 7576)
      • Unicorn-50486.exe (PID: 8036)
      • Unicorn-4097.exe (PID: 7768)
      • Unicorn-59992.exe (PID: 7544)
      • Unicorn-33176.exe (PID: 7456)
      • Unicorn-22654.exe (PID: 7840)
      • Unicorn-16283.exe (PID: 7928)
      • Unicorn-5969.exe (PID: 7652)
      • Unicorn-10792.exe (PID: 7500)
      • Unicorn-34619.exe (PID: 7636)
      • Unicorn-36426.exe (PID: 7708)
      • Unicorn-29797.exe (PID: 7600)
      • Unicorn-30011.exe (PID: 8180)
      • Unicorn-5530.exe (PID: 8160)
      • Unicorn-25298.exe (PID: 2568)
      • Unicorn-11823.exe (PID: 680)
      • Unicorn-27160.exe (PID: 7428)
      • Unicorn-25339.exe (PID: 8336)
      • Unicorn-42360.exe (PID: 8260)
      • Unicorn-24475.exe (PID: 744)
      • Unicorn-62054.exe (PID: 8480)
      • Unicorn-36155.exe (PID: 7992)
      • Unicorn-15634.exe (PID: 7720)
      • Unicorn-42483.exe (PID: 8104)
      • Unicorn-10961.exe (PID: 8056)
      • Unicorn-26850.exe (PID: 6004)
      • Unicorn-2524.exe (PID: 1812)
      • Unicorn-30245.exe (PID: 7972)
      • Unicorn-43193.exe (PID: 7948)
      • Unicorn-40149.exe (PID: 8136)
      • Unicorn-43193.exe (PID: 2644)
      • Unicorn-60894.exe (PID: 4620)
      • Unicorn-47826.exe (PID: 8500)
      • Unicorn-6632.exe (PID: 8016)
      • Unicorn-19771.exe (PID: 8356)
      • Unicorn-27874.exe (PID: 7440)
      • Unicorn-51175.exe (PID: 2908)
      • Unicorn-30582.exe (PID: 8396)
      • Unicorn-63698.exe (PID: 7416)
      • Unicorn-27797.exe (PID: 7592)
      • Unicorn-13210.exe (PID: 8096)
      • Unicorn-35966.exe (PID: 8792)
      • Unicorn-1748.exe (PID: 8824)
      • Unicorn-17496.exe (PID: 7900)
      • Unicorn-4222.exe (PID: 7372)
      • Unicorn-49468.exe (PID: 7672)
      • Unicorn-4704.exe (PID: 9128)
      • Unicorn-30003.exe (PID: 9164)
      • Unicorn-49383.exe (PID: 9036)
      • Unicorn-50340.exe (PID: 9148)
      • Unicorn-62262.exe (PID: 8896)
      • Unicorn-12375.exe (PID: 8664)
      • Unicorn-34614.exe (PID: 8436)
      • Unicorn-51163.exe (PID: 8540)
      • Unicorn-5733.exe (PID: 8444)
      • Unicorn-26386.exe (PID: 7700)
      • Unicorn-43668.exe (PID: 8072)
      • Unicorn-2897.exe (PID: 8084)
      • Unicorn-62623.exe (PID: 8108)
      • Unicorn-14237.exe (PID: 8288)
      • Unicorn-27349.exe (PID: 8468)
      • Unicorn-24914.exe (PID: 8800)
      • Unicorn-35966.exe (PID: 8784)
      • Unicorn-55944.exe (PID: 8996)
      • Unicorn-36252.exe (PID: 8944)
      • Unicorn-65499.exe (PID: 664)
      • Unicorn-64310.exe (PID: 7760)
      • Unicorn-40472.exe (PID: 8928)
      • Unicorn-20615.exe (PID: 736)
      • Unicorn-16510.exe (PID: 7984)
      • Unicorn-53988.exe (PID: 8988)
      • Unicorn-54948.exe (PID: 8976)
      • Unicorn-40216.exe (PID: 7820)
      • Unicorn-11089.exe (PID: 8912)
      • Unicorn-20615.exe (PID: 7808)
      • Unicorn-21156.exe (PID: 8680)
      • Unicorn-28062.exe (PID: 9016)
      • Unicorn-47582.exe (PID: 9796)
      • Unicorn-8931.exe (PID: 9780)
      • Unicorn-17362.exe (PID: 8268)
      • Unicorn-40216.exe (PID: 9340)
      • Unicorn-20615.exe (PID: 7912)
      • Unicorn-48103.exe (PID: 1280)
      • Unicorn-9047.exe (PID: 9044)
      • Unicorn-63755.exe (PID: 2192)
      • Unicorn-64097.exe (PID: 8252)
      • Unicorn-23765.exe (PID: 7384)
      • Unicorn-27508.exe (PID: 10004)
      • Unicorn-41569.exe (PID: 9324)
      • Unicorn-52802.exe (PID: 8280)
      • Unicorn-57535.exe (PID: 8428)
      • Unicorn-43998.exe (PID: 9412)
      • Unicorn-22183.exe (PID: 11044)
      • Unicorn-17575.exe (PID: 11000)
      • Unicorn-30515.exe (PID: 10048)
      • Unicorn-52403.exe (PID: 10548)
      • Unicorn-14849.exe (PID: 7680)
      • Unicorn-39969.exe (PID: 9612)
      • Unicorn-60449.exe (PID: 9180)
      • Unicorn-34350.exe (PID: 7852)
      • Unicorn-20615.exe (PID: 8300)
      • Unicorn-13344.exe (PID: 9508)
      • Unicorn-3182.exe (PID: 9064)
      • Unicorn-55316.exe (PID: 9852)
      • Unicorn-10649.exe (PID: 10032)
      • Unicorn-38052.exe (PID: 8332)
      • Unicorn-13279.exe (PID: 10172)
      • Unicorn-370.exe (PID: 9332)
      • Unicorn-34350.exe (PID: 7496)
      • Unicorn-21821.exe (PID: 11476)
      • Unicorn-31550.exe (PID: 7480)
      • Unicorn-26340.exe (PID: 7228)
      • Unicorn-20484.exe (PID: 9452)
      • Unicorn-30515.exe (PID: 10040)
      • Unicorn-10189.exe (PID: 9096)
      • Unicorn-24244.exe (PID: 12800)
      • Unicorn-63685.exe (PID: 12792)
      • Unicorn-21444.exe (PID: 12808)
      • Unicorn-64069.exe (PID: 10084)
      • Unicorn-20644.exe (PID: 9668)
      • Unicorn-49383.exe (PID: 9028)
      • Unicorn-57850.exe (PID: 10596)
      • Unicorn-23924.exe (PID: 9104)
      • Unicorn-54984.exe (PID: 9072)
      • Unicorn-13474.exe (PID: 8692)
      • Unicorn-61537.exe (PID: 10144)
      • Unicorn-58991.exe (PID: 10540)
      • Unicorn-6822.exe (PID: 11172)
      • Unicorn-9047.exe (PID: 9052)
      • Unicorn-21982.exe (PID: 10476)
      • Unicorn-18619.exe (PID: 10436)
      • Unicorn-30916.exe (PID: 11336)
      • Unicorn-49288.exe (PID: 10492)
      • Unicorn-43826.exe (PID: 10824)
      • Unicorn-55567.exe (PID: 8776)
      • Unicorn-21842.exe (PID: 8840)
      • Unicorn-4710.exe (PID: 13856)
      • Unicorn-50382.exe (PID: 13864)
      • Unicorn-19428.exe (PID: 13872)
      • Unicorn-34673.exe (PID: 6028)
      • Unicorn-14980.exe (PID: 13016)
      • Unicorn-24982.exe (PID: 12884)
      • Unicorn-3277.exe (PID: 13740)
      • Unicorn-10509.exe (PID: 12876)
      • Unicorn-58747.exe (PID: 7300)
      • Unicorn-778.exe (PID: 9660)
      • Unicorn-382.exe (PID: 9080)
      • Unicorn-24542.exe (PID: 9956)
      • Unicorn-6516.exe (PID: 10716)
      • Unicorn-7501.exe (PID: 10968)
      • Unicorn-37706.exe (PID: 9912)
      • Unicorn-42593.exe (PID: 7860)
      • Unicorn-14368.exe (PID: 10444)
      • Unicorn-44722.exe (PID: 10020)
      • Unicorn-26142.exe (PID: 10776)
      • Unicorn-18398.exe (PID: 10072)
      • Unicorn-50958.exe (PID: 11216)
      • Unicorn-37444.exe (PID: 7824)
      • Unicorn-9760.exe (PID: 10396)
      • Unicorn-26517.exe (PID: 15452)
      • Unicorn-21197.exe (PID: 15468)
      • Unicorn-15597.exe (PID: 15444)
      • Unicorn-24982.exe (PID: 12868)
      • Unicorn-64066.exe (PID: 12132)
      • Unicorn-54174.exe (PID: 12124)
      • Unicorn-6986.exe (PID: 9276)
      • Unicorn-11883.exe (PID: 12816)

    • Executes application which crashes

      • Unicorn-10961.exe (PID: 8056)

  • INFO

    • Reads the computer name

      • Unicorn-25070.exe (PID: 6268)
      • 1 (492).exe (PID: 2320)
      • Unicorn-15982.exe (PID: 4400)
      • Unicorn-46988.exe (PID: 5064)
      • Unicorn-10266.exe (PID: 5608)
      • Unicorn-41237.exe (PID: 5772)
      • Unicorn-42808.exe (PID: 1184)
      • Unicorn-51936.exe (PID: 1164)
      • Unicorn-45698.exe (PID: 3332)
      • Unicorn-18745.exe (PID: 6148)
      • Unicorn-7046.exe (PID: 1128)
      • Unicorn-60991.exe (PID: 1852)
      • Unicorn-51858.exe (PID: 5592)
      • Unicorn-50633.exe (PID: 6324)
      • Unicorn-23353.exe (PID: 4988)
      • Unicorn-50898.exe (PID: 3100)
      • Unicorn-59931.exe (PID: 4188)
      • Unicorn-57855.exe (PID: 6592)
      • Unicorn-6615.exe (PID: 5360)
      • Unicorn-17698.exe (PID: 2692)
      • Unicorn-62360.exe (PID: 5228)
      • Unicorn-29889.exe (PID: 4688)
      • Unicorn-18561.exe (PID: 3176)
      • Unicorn-43035.exe (PID: 7172)
      • Unicorn-47643.exe (PID: 6800)
      • Unicorn-29641.exe (PID: 7184)
      • Unicorn-114.exe (PID: 4040)
      • Unicorn-23775.exe (PID: 7200)
      • Unicorn-25298.exe (PID: 2568)
      • Unicorn-10040.exe (PID: 7192)
      • Unicorn-26258.exe (PID: 3768)
      • Unicorn-10792.exe (PID: 7500)
      • Unicorn-45817.exe (PID: 7468)
      • Unicorn-58456.exe (PID: 7556)
      • Unicorn-61341.exe (PID: 7564)
      • Unicorn-33176.exe (PID: 7456)
      • Unicorn-16229.exe (PID: 7576)
      • Unicorn-8565.exe (PID: 7656)
      • Unicorn-59992.exe (PID: 7544)
      • Unicorn-4097.exe (PID: 7768)
      • Unicorn-54969.exe (PID: 7740)
      • Unicorn-50486.exe (PID: 8036)
      • Unicorn-22654.exe (PID: 7840)
      • Unicorn-16283.exe (PID: 7928)
      • Unicorn-34619.exe (PID: 7636)
      • Unicorn-36426.exe (PID: 7708)
      • Unicorn-5969.exe (PID: 7652)
      • Unicorn-29797.exe (PID: 7600)
      • Unicorn-5530.exe (PID: 8160)
      • Unicorn-30011.exe (PID: 8180)
      • Unicorn-24475.exe (PID: 744)
      • Unicorn-27160.exe (PID: 7428)
      • Unicorn-11823.exe (PID: 680)
      • Unicorn-25339.exe (PID: 8336)
      • Unicorn-36155.exe (PID: 7992)
      • Unicorn-15634.exe (PID: 7720)
      • Unicorn-42483.exe (PID: 8104)
      • Unicorn-62054.exe (PID: 8480)
      • Unicorn-42360.exe (PID: 8260)
      • Unicorn-2524.exe (PID: 1812)
      • Unicorn-40149.exe (PID: 8136)
      • Unicorn-19771.exe (PID: 8356)
      • Unicorn-43193.exe (PID: 2644)
      • Unicorn-30245.exe (PID: 7972)
      • Unicorn-10961.exe (PID: 8056)
      • Unicorn-26850.exe (PID: 6004)
      • Unicorn-13210.exe (PID: 8096)
      • Unicorn-43193.exe (PID: 7948)
      • Unicorn-6632.exe (PID: 8016)
      • Unicorn-51175.exe (PID: 2908)
      • Unicorn-60894.exe (PID: 4620)
      • Unicorn-47826.exe (PID: 8500)
      • Unicorn-27874.exe (PID: 7440)
      • Unicorn-14849.exe (PID: 7680)
      • Unicorn-30582.exe (PID: 8396)
      • Unicorn-63698.exe (PID: 7416)
      • Unicorn-17496.exe (PID: 7900)
      • Unicorn-27797.exe (PID: 7592)
      • Unicorn-35966.exe (PID: 8792)
      • Unicorn-1748.exe (PID: 8824)
      • Unicorn-4222.exe (PID: 7372)
      • Unicorn-49468.exe (PID: 7672)
      • Unicorn-50340.exe (PID: 9148)
      • Unicorn-41785.exe (PID: 7484)
      • Unicorn-4704.exe (PID: 9128)
      • Unicorn-30003.exe (PID: 9164)
      • Unicorn-51163.exe (PID: 8540)
      • Unicorn-27349.exe (PID: 8468)
      • Unicorn-62262.exe (PID: 8896)
      • Unicorn-49383.exe (PID: 9036)
      • Unicorn-34614.exe (PID: 8436)
      • Unicorn-43668.exe (PID: 8072)
      • Unicorn-2897.exe (PID: 8084)
      • Unicorn-24914.exe (PID: 8800)
      • Unicorn-5733.exe (PID: 8444)
      • Unicorn-14237.exe (PID: 8288)
      • Unicorn-26386.exe (PID: 7700)
      • Unicorn-12375.exe (PID: 8664)
      • Unicorn-62623.exe (PID: 8108)
      • Unicorn-49383.exe (PID: 9028)
      • Unicorn-55944.exe (PID: 8996)
      • Unicorn-36252.exe (PID: 8944)
      • Unicorn-35966.exe (PID: 8784)
      • Unicorn-40472.exe (PID: 8928)
      • Unicorn-65499.exe (PID: 664)
      • Unicorn-16510.exe (PID: 7984)
      • Unicorn-20615.exe (PID: 736)
      • Unicorn-10189.exe (PID: 9096)
      • Unicorn-64310.exe (PID: 7760)
      • Unicorn-54948.exe (PID: 8976)
      • Unicorn-20615.exe (PID: 7808)
      • Unicorn-11089.exe (PID: 8912)
      • Unicorn-53988.exe (PID: 8988)
      • Unicorn-40216.exe (PID: 7820)
      • Unicorn-47582.exe (PID: 9796)
      • Unicorn-55262.exe (PID: 9760)
      • Unicorn-8931.exe (PID: 9780)
      • Unicorn-21156.exe (PID: 8680)
      • Unicorn-17362.exe (PID: 8268)
      • Unicorn-28062.exe (PID: 9016)
      • Unicorn-57535.exe (PID: 8428)
      • Unicorn-40216.exe (PID: 9340)
      • Unicorn-20615.exe (PID: 7912)
      • Unicorn-48103.exe (PID: 1280)
      • Unicorn-23765.exe (PID: 7384)
      • Unicorn-52802.exe (PID: 8280)
      • Unicorn-9047.exe (PID: 9044)
      • Unicorn-20615.exe (PID: 8300)
      • Unicorn-63755.exe (PID: 2192)
      • Unicorn-64097.exe (PID: 8252)
      • Unicorn-27508.exe (PID: 10004)
      • Unicorn-30515.exe (PID: 10048)
      • Unicorn-60449.exe (PID: 9180)
      • Unicorn-370.exe (PID: 9332)
      • Unicorn-34350.exe (PID: 7852)
      • Unicorn-41569.exe (PID: 9324)
      • Unicorn-20644.exe (PID: 9668)
      • Unicorn-43998.exe (PID: 9412)
      • Unicorn-39969.exe (PID: 9612)
      • Unicorn-17575.exe (PID: 11000)
      • Unicorn-22183.exe (PID: 11044)
      • Unicorn-20484.exe (PID: 9452)
      • Unicorn-52403.exe (PID: 10548)
      • Unicorn-6822.exe (PID: 11172)
      • Unicorn-778.exe (PID: 9660)
      • Unicorn-21821.exe (PID: 11476)
      • Unicorn-3182.exe (PID: 9064)
      • Unicorn-31550.exe (PID: 7480)
      • Unicorn-55316.exe (PID: 9852)
      • Unicorn-55567.exe (PID: 8776)
      • Unicorn-38052.exe (PID: 8332)
      • Unicorn-13279.exe (PID: 10172)
      • Unicorn-13344.exe (PID: 9508)
      • Unicorn-55841.exe (PID: 856)
      • Unicorn-34350.exe (PID: 7496)
      • Unicorn-30515.exe (PID: 10040)
      • Unicorn-26340.exe (PID: 7228)
      • Unicorn-10649.exe (PID: 10032)
      • Unicorn-63685.exe (PID: 12792)
      • Unicorn-64069.exe (PID: 10084)
      • Unicorn-57850.exe (PID: 10596)
      • Unicorn-24244.exe (PID: 12800)
      • Unicorn-21444.exe (PID: 12808)
      • Unicorn-13474.exe (PID: 8692)
      • Unicorn-54984.exe (PID: 9072)
      • Unicorn-58991.exe (PID: 10540)
      • Unicorn-61537.exe (PID: 10144)
      • Unicorn-23924.exe (PID: 9104)
      • Unicorn-9047.exe (PID: 9052)
      • Unicorn-21982.exe (PID: 10476)
      • Unicorn-18619.exe (PID: 10436)
      • Unicorn-49288.exe (PID: 10492)
      • Unicorn-7501.exe (PID: 10968)
      • Unicorn-21842.exe (PID: 8840)
      • Unicorn-30916.exe (PID: 11336)
      • Unicorn-24542.exe (PID: 9956)
      • Unicorn-43826.exe (PID: 10824)
      • Unicorn-19428.exe (PID: 13872)
      • Unicorn-4710.exe (PID: 13856)
      • Unicorn-50382.exe (PID: 13864)
      • Unicorn-10509.exe (PID: 12876)
      • Unicorn-3277.exe (PID: 13740)
      • Unicorn-44583.exe (PID: 13980)
      • Unicorn-34673.exe (PID: 6028)
      • Unicorn-61755.exe (PID: 13400)
      • Unicorn-11747.exe (PID: 13924)
      • Unicorn-14980.exe (PID: 13016)
      • Unicorn-24982.exe (PID: 12884)
      • Unicorn-382.exe (PID: 9080)
      • Unicorn-58747.exe (PID: 7300)
      • Unicorn-9760.exe (PID: 10396)
      • Unicorn-14368.exe (PID: 10444)
      • Unicorn-5965.exe (PID: 10892)
      • Unicorn-45039.exe (PID: 11512)
      • Unicorn-44722.exe (PID: 10020)
      • Unicorn-37706.exe (PID: 9912)
      • Unicorn-6516.exe (PID: 10716)
      • Unicorn-42593.exe (PID: 7860)
      • Unicorn-53028.exe (PID: 10864)
      • Unicorn-26142.exe (PID: 10776)
      • Unicorn-18398.exe (PID: 10072)
      • Unicorn-30689.exe (PID: 11376)
      • Unicorn-35870.exe (PID: 10108)
      • Unicorn-24244.exe (PID: 12776)
      • Unicorn-37444.exe (PID: 7824)
      • Unicorn-50958.exe (PID: 11216)
      • Unicorn-21197.exe (PID: 15468)
      • Unicorn-26517.exe (PID: 15452)
      • Unicorn-15597.exe (PID: 15444)
      • Unicorn-14301.exe (PID: 13364)
      • Unicorn-3994.exe (PID: 2416)
      • Unicorn-64066.exe (PID: 12132)
      • Unicorn-11883.exe (PID: 12816)
      • Unicorn-6986.exe (PID: 9276)
      • Unicorn-26590.exe (PID: 4304)
      • Unicorn-54174.exe (PID: 12124)
      • Unicorn-24982.exe (PID: 12868)

    • Checks supported languages

      • 1 (492).exe (PID: 2320)
      • Unicorn-25070.exe (PID: 6268)
      • Unicorn-41237.exe (PID: 5772)
      • Unicorn-15982.exe (PID: 4400)
      • Unicorn-46988.exe (PID: 5064)
      • Unicorn-51936.exe (PID: 1164)
      • Unicorn-42808.exe (PID: 1184)
      • Unicorn-10266.exe (PID: 5608)
      • Unicorn-18745.exe (PID: 6148)
      • Unicorn-45698.exe (PID: 3332)
      • Unicorn-23353.exe (PID: 4988)
      • Unicorn-51858.exe (PID: 5592)
      • Unicorn-60991.exe (PID: 1852)
      • Unicorn-50633.exe (PID: 6324)
      • Unicorn-50898.exe (PID: 3100)
      • Unicorn-7046.exe (PID: 1128)
      • Unicorn-29889.exe (PID: 4688)
      • Unicorn-47643.exe (PID: 6800)
      • Unicorn-59931.exe (PID: 4188)
      • Unicorn-57855.exe (PID: 6592)
      • Unicorn-17698.exe (PID: 2692)
      • Unicorn-6615.exe (PID: 5360)
      • Unicorn-62360.exe (PID: 5228)
      • Unicorn-25298.exe (PID: 2568)
      • Unicorn-18561.exe (PID: 3176)
      • Unicorn-43035.exe (PID: 7172)
      • Unicorn-114.exe (PID: 4040)
      • Unicorn-26258.exe (PID: 3768)
      • Unicorn-10040.exe (PID: 7192)
      • Unicorn-23775.exe (PID: 7200)
      • Unicorn-29641.exe (PID: 7184)
      • Unicorn-33176.exe (PID: 7456)
      • Unicorn-45817.exe (PID: 7468)
      • Unicorn-41785.exe (PID: 7484)
      • Unicorn-58456.exe (PID: 7556)
      • Unicorn-10792.exe (PID: 7500)
      • Unicorn-16229.exe (PID: 7576)
      • Unicorn-61341.exe (PID: 7564)
      • Unicorn-14849.exe (PID: 7680)
      • Unicorn-59992.exe (PID: 7544)
      • Unicorn-8565.exe (PID: 7656)
      • Unicorn-26386.exe (PID: 7700)
      • Unicorn-15634.exe (PID: 7720)
      • Unicorn-4097.exe (PID: 7768)
      • Unicorn-36426.exe (PID: 7708)
      • Unicorn-49468.exe (PID: 7672)
      • Unicorn-22654.exe (PID: 7840)
      • Unicorn-54969.exe (PID: 7740)
      • Unicorn-64310.exe (PID: 7760)
      • Unicorn-30245.exe (PID: 7972)
      • Unicorn-16510.exe (PID: 7984)
      • Unicorn-43668.exe (PID: 8072)
      • Unicorn-16283.exe (PID: 7928)
      • Unicorn-62623.exe (PID: 8108)
      • Unicorn-40149.exe (PID: 8136)
      • Unicorn-50486.exe (PID: 8036)
      • Unicorn-34619.exe (PID: 7636)
      • Unicorn-4222.exe (PID: 7372)
      • Unicorn-63698.exe (PID: 7416)
      • Unicorn-65499.exe (PID: 664)
      • Unicorn-27160.exe (PID: 7428)
      • Unicorn-27874.exe (PID: 7440)
      • Unicorn-5530.exe (PID: 8160)
      • Unicorn-5969.exe (PID: 7652)
      • Unicorn-29797.exe (PID: 7600)
      • Unicorn-43193.exe (PID: 2644)
      • Unicorn-13210.exe (PID: 8096)
      • Unicorn-10961.exe (PID: 8056)
      • Unicorn-43193.exe (PID: 7948)
      • Unicorn-24475.exe (PID: 744)
      • Unicorn-36155.exe (PID: 7992)
      • Unicorn-6632.exe (PID: 8016)
      • Unicorn-42483.exe (PID: 8104)
      • Unicorn-2897.exe (PID: 8084)
      • Unicorn-11823.exe (PID: 680)
      • Unicorn-30011.exe (PID: 8180)
      • Unicorn-27797.exe (PID: 7592)
      • Unicorn-23765.exe (PID: 7384)
      • Unicorn-48103.exe (PID: 1280)
      • Unicorn-2524.exe (PID: 1812)
      • Unicorn-60894.exe (PID: 4620)
      • Unicorn-26850.exe (PID: 6004)
      • Unicorn-51175.exe (PID: 2908)
      • Unicorn-52802.exe (PID: 8280)
      • Unicorn-17496.exe (PID: 7900)
      • Unicorn-42360.exe (PID: 8260)
      • Unicorn-5733.exe (PID: 8444)
      • Unicorn-34614.exe (PID: 8436)
      • Unicorn-62054.exe (PID: 8480)
      • Unicorn-27349.exe (PID: 8468)
      • Unicorn-25339.exe (PID: 8336)
      • Unicorn-19771.exe (PID: 8356)
      • Unicorn-51163.exe (PID: 8540)
      • Unicorn-30582.exe (PID: 8396)
      • Unicorn-47826.exe (PID: 8500)
      • Unicorn-57535.exe (PID: 8428)
      • Unicorn-26325.exe (PID: 8636)
      • Unicorn-12375.exe (PID: 8664)
      • Unicorn-55567.exe (PID: 8776)
      • Unicorn-35966.exe (PID: 8792)
      • Unicorn-13474.exe (PID: 8692)
      • Unicorn-35966.exe (PID: 8784)
      • Unicorn-24914.exe (PID: 8800)
      • Unicorn-4704.exe (PID: 9128)
      • Unicorn-50340.exe (PID: 9148)
      • Unicorn-30003.exe (PID: 9164)
      • Unicorn-1748.exe (PID: 8824)
      • Unicorn-41234.exe (PID: 8704)
      • Unicorn-36252.exe (PID: 8944)
      • Unicorn-21842.exe (PID: 8840)
      • Unicorn-14234.exe (PID: 8956)
      • Unicorn-18843.exe (PID: 8964)
      • Unicorn-62262.exe (PID: 8896)
      • Unicorn-53988.exe (PID: 8988)
      • Unicorn-54948.exe (PID: 8976)
      • Unicorn-40472.exe (PID: 8928)
      • Unicorn-11089.exe (PID: 8912)
      • Unicorn-49383.exe (PID: 9036)
      • Unicorn-9047.exe (PID: 9052)
      • Unicorn-3182.exe (PID: 9064)
      • Unicorn-382.exe (PID: 9080)
      • Unicorn-54984.exe (PID: 9072)
      • Unicorn-58769.exe (PID: 9088)
      • Unicorn-55944.exe (PID: 8996)
      • Unicorn-35637.exe (PID: 9008)
      • Unicorn-28062.exe (PID: 9016)
      • Unicorn-49383.exe (PID: 9028)
      • Unicorn-9047.exe (PID: 9044)
      • Unicorn-10189.exe (PID: 9096)
      • Unicorn-17362.exe (PID: 8268)
      • Unicorn-14237.exe (PID: 8288)
      • Unicorn-23924.exe (PID: 9104)
      • Unicorn-60449.exe (PID: 9180)
      • Unicorn-64097.exe (PID: 8252)
      • Unicorn-55841.exe (PID: 856)
      • Unicorn-34350.exe (PID: 7496)
      • Unicorn-38052.exe (PID: 8332)
      • Unicorn-34350.exe (PID: 7852)
      • Unicorn-37444.exe (PID: 7824)
      • Unicorn-40216.exe (PID: 7820)
      • Unicorn-20615.exe (PID: 7808)
      • Unicorn-20615.exe (PID: 736)
      • Unicorn-20615.exe (PID: 7912)
      • Unicorn-40216.exe (PID: 7812)
      • Unicorn-63755.exe (PID: 2192)
      • Unicorn-26340.exe (PID: 7228)
      • Unicorn-21156.exe (PID: 8680)
      • Unicorn-47582.exe (PID: 9796)
      • Unicorn-55262.exe (PID: 9760)
      • Unicorn-8931.exe (PID: 9780)
      • Unicorn-370.exe (PID: 9332)
      • Unicorn-35951.exe (PID: 9704)
      • Unicorn-58227.exe (PID: 9348)
      • Unicorn-35951.exe (PID: 9696)
      • Unicorn-778.exe (PID: 9660)
      • Unicorn-20644.exe (PID: 9668)
      • Unicorn-26209.exe (PID: 9380)
      • Unicorn-43998.exe (PID: 9412)
      • Unicorn-36632.exe (PID: 9748)
      • Unicorn-52949.exe (PID: 9312)
      • Unicorn-4587.exe (PID: 5680)
      • Unicorn-1894.exe (PID: 9736)
      • Unicorn-14340.exe (PID: 9604)
      • Unicorn-28635.exe (PID: 8868)
      • Unicorn-15011.exe (PID: 8688)
      • Unicorn-41569.exe (PID: 9324)
      • Unicorn-39969.exe (PID: 9612)
      • Unicorn-60132.exe (PID: 9592)
      • Unicorn-39521.exe (PID: 1616)
      • Unicorn-3811.exe (PID: 9488)
      • Unicorn-28638.exe (PID: 9572)
      • Unicorn-60372.exe (PID: 9472)
      • Unicorn-48907.exe (PID: 9480)
      • Unicorn-40428.exe (PID: 3896)
      • Unicorn-31921.exe (PID: 4724)
      • Unicorn-13344.exe (PID: 9508)
      • Unicorn-55316.exe (PID: 9852)
      • Unicorn-20484.exe (PID: 9452)
      • Unicorn-45835.exe (PID: 9432)
      • Unicorn-50955.exe (PID: 9840)
      • Unicorn-7395.exe (PID: 9828)
      • Unicorn-6986.exe (PID: 9276)
      • Unicorn-17716.exe (PID: 9268)
      • Unicorn-24542.exe (PID: 9956)
      • Unicorn-18411.exe (PID: 9964)
      • Unicorn-40216.exe (PID: 9340)
      • Unicorn-20615.exe (PID: 8300)
      • Unicorn-27508.exe (PID: 10004)
      • Unicorn-44722.exe (PID: 10020)
      • Unicorn-30515.exe (PID: 10048)
      • Unicorn-18398.exe (PID: 10072)
      • Unicorn-64069.exe (PID: 10084)
      • Unicorn-30515.exe (PID: 10040)
      • Unicorn-35870.exe (PID: 10108)
      • Unicorn-56943.exe (PID: 10124)
      • Unicorn-61537.exe (PID: 10144)
      • Unicorn-15587.exe (PID: 732)
      • Unicorn-44168.exe (PID: 10164)
      • Unicorn-13279.exe (PID: 10172)
      • Unicorn-13392.exe (PID: 9196)
      • Unicorn-17575.exe (PID: 11000)
      • Unicorn-44498.exe (PID: 10212)
      • Unicorn-22183.exe (PID: 11044)
      • Unicorn-54539.exe (PID: 4736)
      • Unicorn-3994.exe (PID: 2416)
      • Unicorn-49459.exe (PID: 6852)
      • Unicorn-21102.exe (PID: 4200)
      • Unicorn-63652.exe (PID: 10288)
      • Unicorn-14535.exe (PID: 9716)
      • Unicorn-43315.exe (PID: 10320)
      • Unicorn-6822.exe (PID: 11172)
      • Unicorn-14154.exe (PID: 8392)
      • Unicorn-15154.exe (PID: 9256)
      • Unicorn-49931.exe (PID: 4756)
      • Unicorn-14535.exe (PID: 9724)
      • Unicorn-58747.exe (PID: 7300)
      • Unicorn-37706.exe (PID: 9912)
      • Unicorn-25997.exe (PID: 10456)
      • Unicorn-56389.exe (PID: 6068)
      • Unicorn-36211.exe (PID: 10416)
      • Unicorn-9760.exe (PID: 10396)
      • Unicorn-18619.exe (PID: 10436)
      • Unicorn-14368.exe (PID: 10444)
      • Unicorn-58084.exe (PID: 10428)
      • Unicorn-20721.exe (PID: 9244)
      • Unicorn-21982.exe (PID: 10476)
      • Unicorn-49288.exe (PID: 10492)
      • Unicorn-51400.exe (PID: 10484)
      • Unicorn-9574.exe (PID: 10676)
      • Unicorn-44577.exe (PID: 10692)
      • Unicorn-44577.exe (PID: 10684)
      • Unicorn-26142.exe (PID: 10776)
      • Unicorn-43826.exe (PID: 10824)
      • Unicorn-9037.exe (PID: 10932)
      • Unicorn-33345.exe (PID: 10912)
      • Unicorn-38052.exe (PID: 7232)
      • Unicorn-10649.exe (PID: 10032)
      • Unicorn-57850.exe (PID: 10596)
      • Unicorn-58991.exe (PID: 10540)
      • Unicorn-25744.exe (PID: 10508)
      • Unicorn-2016.exe (PID: 10876)
      • Unicorn-61409.exe (PID: 10952)
      • Unicorn-64044.exe (PID: 10988)
      • Unicorn-27097.exe (PID: 11208)
      • Unicorn-42593.exe (PID: 7860)
      • Unicorn-53028.exe (PID: 10864)
      • Unicorn-34471.exe (PID: 10856)
      • Unicorn-6516.exe (PID: 10716)
      • Unicorn-31550.exe (PID: 7480)
      • Unicorn-42276.exe (PID: 10904)
      • Unicorn-30916.exe (PID: 11336)
      • Unicorn-52403.exe (PID: 10548)
      • Unicorn-50287.exe (PID: 4844)
      • Unicorn-50958.exe (PID: 11216)
      • Unicorn-14382.exe (PID: 11244)
      • Unicorn-40205.exe (PID: 11304)
      • Unicorn-49998.exe (PID: 4812)
      • Unicorn-14809.exe (PID: 10520)
      • Unicorn-2653.exe (PID: 11456)
      • Unicorn-33511.exe (PID: 10884)
      • Unicorn-21821.exe (PID: 11476)
      • Unicorn-16740.exe (PID: 456)
      • Unicorn-4429.exe (PID: 10920)
      • Unicorn-49941.exe (PID: 11328)
      • Unicorn-30689.exe (PID: 11376)
      • Unicorn-7501.exe (PID: 10968)
      • Unicorn-26493.exe (PID: 10976)
      • Unicorn-5965.exe (PID: 10892)
      • Unicorn-48996.exe (PID: 10808)
      • Unicorn-39655.exe (PID: 10784)
      • Unicorn-45039.exe (PID: 11512)
      • Unicorn-54101.exe (PID: 11912)
      • Unicorn-57438.exe (PID: 11932)
      • Unicorn-24244.exe (PID: 12800)
      • Unicorn-63685.exe (PID: 12792)
      • Unicorn-47646.exe (PID: 11968)
      • Unicorn-21444.exe (PID: 12808)
      • Unicorn-31896.exe (PID: 11976)
      • Unicorn-12295.exe (PID: 11984)
      • Unicorn-7023.exe (PID: 12152)
      • Unicorn-34107.exe (PID: 12012)
      • Unicorn-54174.exe (PID: 12124)
      • Unicorn-21636.exe (PID: 12100)
      • Unicorn-64066.exe (PID: 12132)
      • Unicorn-39882.exe (PID: 3156)
      • Unicorn-39006.exe (PID: 12260)
      • Unicorn-51943.exe (PID: 12272)
      • Unicorn-29817.exe (PID: 11272)
      • Unicorn-24891.exe (PID: 10516)
      • Unicorn-55912.exe (PID: 1196)
      • Unicorn-43701.exe (PID: 12192)
      • Unicorn-1127.exe (PID: 12180)
      • Unicorn-44439.exe (PID: 12204)
      • Unicorn-64039.exe (PID: 12212)
      • Unicorn-39882.exe (PID: 920)
      • Unicorn-61512.exe (PID: 12304)
      • Unicorn-9957.exe (PID: 12300)
      • Unicorn-61512.exe (PID: 6808)
      • Unicorn-61512.exe (PID: 12292)
      • Unicorn-8422.exe (PID: 12352)
      • Unicorn-3238.exe (PID: 12340)
      • Unicorn-16740.exe (PID: 12360)
      • Unicorn-47198.exe (PID: 12384)
      • Unicorn-55527.exe (PID: 12404)
      • Unicorn-33387.exe (PID: 12396)
      • Unicorn-41054.exe (PID: 12428)
      • Unicorn-22497.exe (PID: 12420)
      • Unicorn-18849.exe (PID: 12556)
      • Unicorn-8096.exe (PID: 12564)
      • Unicorn-40394.exe (PID: 12572)
      • Unicorn-48206.exe (PID: 12604)
      • Unicorn-50571.exe (PID: 12696)
      • Unicorn-9083.exe (PID: 12760)
      • Unicorn-34023.exe (PID: 12640)
      • Unicorn-50382.exe (PID: 13864)
      • Unicorn-19428.exe (PID: 13872)
      • Unicorn-30110.exe (PID: 12852)
      • Unicorn-11883.exe (PID: 12816)
      • Unicorn-11883.exe (PID: 12844)
      • Unicorn-30110.exe (PID: 12860)
      • Unicorn-30110.exe (PID: 12832)
      • Unicorn-30110.exe (PID: 12896)
      • Unicorn-63685.exe (PID: 12824)
      • Unicorn-24982.exe (PID: 12868)
      • Unicorn-24982.exe (PID: 12884)
      • Unicorn-10509.exe (PID: 12904)
      • Unicorn-55710.exe (PID: 12020)
      • Unicorn-44583.exe (PID: 12936)
      • Unicorn-2863.exe (PID: 12948)
      • Unicorn-4710.exe (PID: 13856)
      • Unicorn-24244.exe (PID: 12776)
      • Unicorn-444.exe (PID: 12784)
      • Unicorn-46039.exe (PID: 12956)
      • Unicorn-64304.exe (PID: 13124)
      • Unicorn-13072.exe (PID: 12972)
      • Unicorn-27041.exe (PID: 12988)
      • Unicorn-36173.exe (PID: 13004)
      • Unicorn-14980.exe (PID: 13016)
      • Unicorn-34996.exe (PID: 12616)
      • Unicorn-48359.exe (PID: 13044)
      • Unicorn-51431.exe (PID: 13080)
      • Unicorn-48206.exe (PID: 12596)
      • Unicorn-20237.exe (PID: 13136)
      • Unicorn-33557.exe (PID: 6480)
      • Unicorn-13956.exe (PID: 2800)
      • Unicorn-235.exe (PID: 13700)
      • Unicorn-102.exe (PID: 12964)
      • Unicorn-27691.exe (PID: 10652)
      • Unicorn-61592.exe (PID: 13316)
      • Unicorn-58888.exe (PID: 13200)
      • Unicorn-14301.exe (PID: 13364)
      • Unicorn-14227.exe (PID: 13896)
      • Unicorn-25924.exe (PID: 13956)
      • Unicorn-11747.exe (PID: 13924)
      • Unicorn-44583.exe (PID: 13980)
      • Unicorn-30247.exe (PID: 13456)
      • Unicorn-27188.exe (PID: 13548)
      • Unicorn-2692.exe (PID: 13224)
      • Unicorn-50980.exe (PID: 12076)
      • Unicorn-61755.exe (PID: 13400)
      • Unicorn-17959.exe (PID: 13724)
      • Unicorn-10509.exe (PID: 12876)
      • Unicorn-20938.exe (PID: 12084)
      • Unicorn-26590.exe (PID: 4304)
      • Unicorn-5453.exe (PID: 13348)
      • Unicorn-53470.exe (PID: 13840)
      • Unicorn-36071.exe (PID: 13256)
      • Unicorn-13133.exe (PID: 12080)
      • Unicorn-7086.exe (PID: 13240)
      • Unicorn-18535.exe (PID: 13732)
      • Unicorn-63685.exe (PID: 12768)
      • Unicorn-43314.exe (PID: 12060)
      • Unicorn-29578.exe (PID: 12116)
      • Unicorn-34673.exe (PID: 6028)
      • Unicorn-7086.exe (PID: 13232)
      • Unicorn-60574.exe (PID: 13828)
      • Unicorn-53848.exe (PID: 13684)
      • Unicorn-51003.exe (PID: 13596)
      • Unicorn-65196.exe (PID: 13692)
      • Unicorn-20813.exe (PID: 13168)
      • Unicorn-10013.exe (PID: 13820)
      • Unicorn-58888.exe (PID: 13216)
      • Unicorn-3277.exe (PID: 13740)
      • Unicorn-49179.exe (PID: 12120)
      • Unicorn-47365.exe (PID: 14340)
      • Unicorn-58888.exe (PID: 13208)
      • Unicorn-30247.exe (PID: 13444)
      • Unicorn-21197.exe (PID: 15468)
      • Unicorn-20813.exe (PID: 13160)
      • Unicorn-30247.exe (PID: 13452)
      • Unicorn-15597.exe (PID: 15444)
      • Unicorn-26517.exe (PID: 15452)
      • Unicorn-24284.exe (PID: 14472)
      • Unicorn-12326.exe (PID: 14492)
      • Unicorn-29156.exe (PID: 14504)
      • Unicorn-15303.exe (PID: 14528)
      • Unicorn-40539.exe (PID: 12172)
      • Unicorn-11991.exe (PID: 13188)
      • Unicorn-47143.exe (PID: 14844)
      • Unicorn-39725.exe (PID: 14888)
      • Unicorn-21988.exe (PID: 14852)
      • Unicorn-18929.exe (PID: 14880)
      • Unicorn-41825.exe (PID: 13804)
      • Unicorn-60638.exe (PID: 14908)
      • Unicorn-4563.exe (PID: 14748)
      • Unicorn-58526.exe (PID: 14920)
      • Unicorn-15725.exe (PID: 14988)
      • Unicorn-52290.exe (PID: 14996)
      • Unicorn-27437.exe (PID: 14980)
      • Unicorn-42506.exe (PID: 15036)

    • The sample compiled with chinese language support

      • 1 (492).exe (PID: 2320)
      • Unicorn-43193.exe (PID: 7948)
      • Unicorn-17362.exe (PID: 8268)
      • Unicorn-10509.exe (PID: 12876)
      • Unicorn-9047.exe (PID: 9044)
      • Unicorn-21444.exe (PID: 12808)
      • Unicorn-27797.exe (PID: 7592)
      • Unicorn-60991.exe (PID: 1852)
      • Unicorn-34619.exe (PID: 7636)
      • Unicorn-63685.exe (PID: 12792)
      • Unicorn-30003.exe (PID: 9164)
      • Unicorn-26340.exe (PID: 7228)
      • Unicorn-18745.exe (PID: 6148)
      • Unicorn-64066.exe (PID: 12132)
      • Unicorn-6986.exe (PID: 9276)
      • Unicorn-59992.exe (PID: 7544)
      • Unicorn-24475.exe (PID: 744)
      • Unicorn-25339.exe (PID: 8336)
      • Unicorn-27349.exe (PID: 8468)
      • Unicorn-29889.exe (PID: 4688)
      • Unicorn-5965.exe (PID: 10892)
      • Unicorn-30916.exe (PID: 11336)
      • Unicorn-26850.exe (PID: 6004)
      • Unicorn-23353.exe (PID: 4988)
      • Unicorn-5530.exe (PID: 8160)
      • Unicorn-7501.exe (PID: 10968)
      • Unicorn-21197.exe (PID: 15468)
      • Unicorn-17575.exe (PID: 11000)
      • Unicorn-12375.exe (PID: 8664)
      • Unicorn-6632.exe (PID: 8016)
      • Unicorn-24244.exe (PID: 12776)
      • Unicorn-27437.exe (PID: 14980)
      • Unicorn-42808.exe (PID: 1184)
      • Unicorn-10792.exe (PID: 7500)
      • Unicorn-41569.exe (PID: 9324)
      • Unicorn-23775.exe (PID: 7200)
      • Unicorn-25070.exe (PID: 6268)
      • Unicorn-26590.exe (PID: 4304)
      • Unicorn-34350.exe (PID: 7496)
      • Unicorn-25298.exe (PID: 2568)
      • Unicorn-17496.exe (PID: 7900)
      • Unicorn-45835.exe (PID: 9432)
      • Unicorn-36155.exe (PID: 7992)
      • Unicorn-36252.exe (PID: 8944)
      • Unicorn-10649.exe (PID: 10032)
      • Unicorn-64097.exe (PID: 8252)
      • Unicorn-53028.exe (PID: 10864)
      • Unicorn-13344.exe (PID: 9508)
      • Unicorn-20615.exe (PID: 7912)
      • Unicorn-29797.exe (PID: 7600)
      • Unicorn-42483.exe (PID: 8104)
      • Unicorn-40216.exe (PID: 9340)
      • Unicorn-3182.exe (PID: 9064)
      • Unicorn-3277.exe (PID: 13740)
      • Unicorn-49383.exe (PID: 9028)
      • Unicorn-54948.exe (PID: 8976)
      • Unicorn-1748.exe (PID: 8824)
      • Unicorn-47826.exe (PID: 8500)
      • Unicorn-54174.exe (PID: 12124)
      • Unicorn-53470.exe (PID: 13840)
      • Unicorn-20615.exe (PID: 8300)
      • Unicorn-55944.exe (PID: 8996)
      • Unicorn-48103.exe (PID: 1280)
      • Unicorn-62623.exe (PID: 8108)
      • Unicorn-20644.exe (PID: 9668)
      • Unicorn-24542.exe (PID: 9956)
      • Unicorn-10040.exe (PID: 7192)
      • Unicorn-23765.exe (PID: 7384)
      • Unicorn-34350.exe (PID: 7852)
      • Unicorn-27874.exe (PID: 7440)
      • Unicorn-43998.exe (PID: 9412)
      • Unicorn-13474.exe (PID: 8692)

    • Create files in a temporary directory

      • 1 (492).exe (PID: 2320)
      • Unicorn-25070.exe (PID: 6268)
      • Unicorn-46988.exe (PID: 5064)
      • Unicorn-15982.exe (PID: 4400)
      • Unicorn-10266.exe (PID: 5608)
      • Unicorn-41237.exe (PID: 5772)
      • Unicorn-51936.exe (PID: 1164)
      • Unicorn-42808.exe (PID: 1184)
      • Unicorn-18745.exe (PID: 6148)
      • Unicorn-50633.exe (PID: 6324)
      • Unicorn-45698.exe (PID: 3332)
      • Unicorn-51858.exe (PID: 5592)
      • Unicorn-23353.exe (PID: 4988)
      • Unicorn-50898.exe (PID: 3100)
      • Unicorn-60991.exe (PID: 1852)
      • Unicorn-59931.exe (PID: 4188)
      • Unicorn-57855.exe (PID: 6592)
      • Unicorn-6615.exe (PID: 5360)
      • Unicorn-62360.exe (PID: 5228)
      • Unicorn-17698.exe (PID: 2692)
      • Unicorn-47643.exe (PID: 6800)
      • Unicorn-43035.exe (PID: 7172)
      • Unicorn-29889.exe (PID: 4688)
      • Unicorn-18561.exe (PID: 3176)
      • Unicorn-26258.exe (PID: 3768)
      • Unicorn-114.exe (PID: 4040)
      • Unicorn-23775.exe (PID: 7200)
      • Unicorn-10040.exe (PID: 7192)
      • Unicorn-25298.exe (PID: 2568)
      • Unicorn-7046.exe (PID: 1128)
      • Unicorn-29641.exe (PID: 7184)
      • Unicorn-61341.exe (PID: 7564)
      • Unicorn-45817.exe (PID: 7468)
      • Unicorn-41785.exe (PID: 7484)
      • Unicorn-16229.exe (PID: 7576)
      • Unicorn-33176.exe (PID: 7456)
      • Unicorn-54969.exe (PID: 7740)
      • Unicorn-59992.exe (PID: 7544)
      • Unicorn-50486.exe (PID: 8036)
      • Unicorn-22654.exe (PID: 7840)
      • Unicorn-4097.exe (PID: 7768)
      • Unicorn-16283.exe (PID: 7928)
      • Unicorn-10792.exe (PID: 7500)
      • Unicorn-34619.exe (PID: 7636)
      • Unicorn-5969.exe (PID: 7652)
      • Unicorn-36426.exe (PID: 7708)
      • Unicorn-29797.exe (PID: 7600)
      • Unicorn-5530.exe (PID: 8160)
      • Unicorn-27160.exe (PID: 7428)
      • Unicorn-30011.exe (PID: 8180)
      • Unicorn-11823.exe (PID: 680)
      • Unicorn-24475.exe (PID: 744)
      • Unicorn-25339.exe (PID: 8336)
      • Unicorn-42360.exe (PID: 8260)
      • Unicorn-36155.exe (PID: 7992)
      • Unicorn-62054.exe (PID: 8480)
      • Unicorn-15634.exe (PID: 7720)
      • Unicorn-42483.exe (PID: 8104)
      • Unicorn-40149.exe (PID: 8136)
      • Unicorn-10961.exe (PID: 8056)
      • Unicorn-2524.exe (PID: 1812)
      • Unicorn-13210.exe (PID: 8096)
      • Unicorn-30245.exe (PID: 7972)
      • Unicorn-43193.exe (PID: 7948)
      • Unicorn-6632.exe (PID: 8016)
      • Unicorn-43193.exe (PID: 2644)
      • Unicorn-60894.exe (PID: 4620)
      • Unicorn-19771.exe (PID: 8356)
      • Unicorn-47826.exe (PID: 8500)
      • Unicorn-27874.exe (PID: 7440)
      • Unicorn-14849.exe (PID: 7680)
      • Unicorn-51175.exe (PID: 2908)
      • Unicorn-63698.exe (PID: 7416)
      • Unicorn-27797.exe (PID: 7592)
      • Unicorn-35966.exe (PID: 8792)
      • Unicorn-17496.exe (PID: 7900)
      • Unicorn-1748.exe (PID: 8824)
      • Unicorn-4222.exe (PID: 7372)
      • Unicorn-49468.exe (PID: 7672)
      • Unicorn-4704.exe (PID: 9128)
      • Unicorn-30003.exe (PID: 9164)
      • Unicorn-49383.exe (PID: 9036)
      • Unicorn-50340.exe (PID: 9148)
      • Unicorn-62262.exe (PID: 8896)
      • Unicorn-34614.exe (PID: 8436)
      • Unicorn-12375.exe (PID: 8664)
      • Unicorn-43668.exe (PID: 8072)
      • Unicorn-27349.exe (PID: 8468)
      • Unicorn-5733.exe (PID: 8444)
      • Unicorn-26386.exe (PID: 7700)
      • Unicorn-2897.exe (PID: 8084)
      • Unicorn-24914.exe (PID: 8800)
      • Unicorn-14237.exe (PID: 8288)
      • Unicorn-49383.exe (PID: 9028)
      • Unicorn-62623.exe (PID: 8108)
      • Unicorn-35966.exe (PID: 8784)
      • Unicorn-10189.exe (PID: 9096)
      • Unicorn-36252.exe (PID: 8944)
      • Unicorn-65499.exe (PID: 664)
      • Unicorn-40472.exe (PID: 8928)
      • Unicorn-64310.exe (PID: 7760)
      • Unicorn-20615.exe (PID: 736)
      • Unicorn-16510.exe (PID: 7984)
      • Unicorn-11089.exe (PID: 8912)
      • Unicorn-40216.exe (PID: 7820)
      • Unicorn-53988.exe (PID: 8988)
      • Unicorn-20615.exe (PID: 7808)
      • Unicorn-55262.exe (PID: 9760)
      • Unicorn-47582.exe (PID: 9796)
      • Unicorn-21156.exe (PID: 8680)
      • Unicorn-28062.exe (PID: 9016)
      • Unicorn-17362.exe (PID: 8268)
      • Unicorn-48103.exe (PID: 1280)
      • Unicorn-20615.exe (PID: 7912)
      • Unicorn-26850.exe (PID: 6004)
      • Unicorn-57535.exe (PID: 8428)
      • Unicorn-63755.exe (PID: 2192)
      • Unicorn-64097.exe (PID: 8252)
      • Unicorn-23765.exe (PID: 7384)
      • Unicorn-9047.exe (PID: 9044)
      • Unicorn-370.exe (PID: 9332)
      • Unicorn-27508.exe (PID: 10004)
      • Unicorn-41569.exe (PID: 9324)
      • Unicorn-52802.exe (PID: 8280)
      • Unicorn-43998.exe (PID: 9412)
      • Unicorn-17575.exe (PID: 11000)
      • Unicorn-22183.exe (PID: 11044)
      • Unicorn-6822.exe (PID: 11172)
      • Unicorn-30582.exe (PID: 8396)
      • Unicorn-20484.exe (PID: 9452)
      • Unicorn-30515.exe (PID: 10048)
      • Unicorn-52403.exe (PID: 10548)
      • Unicorn-39969.exe (PID: 9612)
      • Unicorn-60449.exe (PID: 9180)
      • Unicorn-3182.exe (PID: 9064)
      • Unicorn-58456.exe (PID: 7556)
      • Unicorn-55316.exe (PID: 9852)
      • Unicorn-20615.exe (PID: 8300)
      • Unicorn-13344.exe (PID: 9508)
      • Unicorn-38052.exe (PID: 8332)
      • Unicorn-10649.exe (PID: 10032)
      • Unicorn-51163.exe (PID: 8540)
      • Unicorn-13279.exe (PID: 10172)
      • Unicorn-55841.exe (PID: 856)
      • Unicorn-31550.exe (PID: 7480)
      • Unicorn-54948.exe (PID: 8976)
      • Unicorn-21821.exe (PID: 11476)
      • Unicorn-34350.exe (PID: 7496)
      • Unicorn-26340.exe (PID: 7228)
      • Unicorn-30515.exe (PID: 10040)
      • Unicorn-24244.exe (PID: 12800)
      • Unicorn-20644.exe (PID: 9668)
      • Unicorn-57850.exe (PID: 10596)
      • Unicorn-61537.exe (PID: 10144)
      • Unicorn-55944.exe (PID: 8996)
      • Unicorn-64069.exe (PID: 10084)
      • Unicorn-23924.exe (PID: 9104)
      • Unicorn-54984.exe (PID: 9072)
      • Unicorn-13474.exe (PID: 8692)
      • Unicorn-58991.exe (PID: 10540)
      • Unicorn-21982.exe (PID: 10476)
      • Unicorn-9047.exe (PID: 9052)
      • Unicorn-18619.exe (PID: 10436)
      • Unicorn-30916.exe (PID: 11336)
      • Unicorn-49288.exe (PID: 10492)
      • Unicorn-43826.exe (PID: 10824)
      • Unicorn-55567.exe (PID: 8776)
      • Unicorn-21842.exe (PID: 8840)
      • Unicorn-19428.exe (PID: 13872)
      • Unicorn-4710.exe (PID: 13856)
      • Unicorn-50382.exe (PID: 13864)
      • Unicorn-10509.exe (PID: 12876)
      • Unicorn-3277.exe (PID: 13740)
      • Unicorn-14980.exe (PID: 13016)
      • Unicorn-24982.exe (PID: 12884)
      • Unicorn-382.exe (PID: 9080)
      • Unicorn-58747.exe (PID: 7300)
      • Unicorn-24542.exe (PID: 9956)
      • Unicorn-61755.exe (PID: 13400)
      • Unicorn-34673.exe (PID: 6028)
      • Unicorn-778.exe (PID: 9660)
      • Unicorn-7501.exe (PID: 10968)
      • Unicorn-14368.exe (PID: 10444)
      • Unicorn-26142.exe (PID: 10776)
      • Unicorn-42593.exe (PID: 7860)
      • Unicorn-37706.exe (PID: 9912)
      • Unicorn-45039.exe (PID: 11512)
      • Unicorn-44722.exe (PID: 10020)
      • Unicorn-21444.exe (PID: 12808)
      • Unicorn-18398.exe (PID: 10072)
      • Unicorn-37444.exe (PID: 7824)
      • Unicorn-50958.exe (PID: 11216)
      • Unicorn-9760.exe (PID: 10396)
      • Unicorn-26517.exe (PID: 15452)
      • Unicorn-21197.exe (PID: 15468)
      • Unicorn-6986.exe (PID: 9276)

    • Reads security settings of Internet Explorer

      • BackgroundTransferHost.exe (PID: 7244)
      • BackgroundTransferHost.exe (PID: 7600)
      • BackgroundTransferHost.exe (PID: 7904)
      • BackgroundTransferHost.exe (PID: 7264)
      • BackgroundTransferHost.exe (PID: 4844)

    • Creates files or folders in the user directory

      • BackgroundTransferHost.exe (PID: 7600)
      • WerFault.exe (PID: 5452)

    • Checks proxy server information

      • BackgroundTransferHost.exe (PID: 7600)

    • Reads the software policy settings

      • BackgroundTransferHost.exe (PID: 7600)
      • slui.exe (PID: 6132)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable Microsoft Visual Basic 6 (90.6)
.exe | Win32 Executable (generic) (4.9)
.exe | Generic Win/DOS Executable (2.2)
.exe | DOS Executable Generic (2.2)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:01:19 13:34:56+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 299008
UninitializedDataSize: -
EntryPoint: 0x13d4
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
InternalName: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
654
Monitored processes
519
Malicious processes
76
Suspicious processes
64

Behavior graph

Click at the process to see the details
start 1 (492).exe unicorn-25070.exe sppextcomobj.exe no specs slui.exe unicorn-46988.exe unicorn-15982.exe unicorn-41237.exe unicorn-51936.exe unicorn-10266.exe unicorn-42808.exe unicorn-18745.exe unicorn-45698.exe unicorn-51858.exe unicorn-23353.exe unicorn-60991.exe unicorn-50633.exe unicorn-50898.exe unicorn-7046.exe unicorn-59931.exe unicorn-57855.exe unicorn-6615.exe unicorn-17698.exe unicorn-62360.exe unicorn-29889.exe unicorn-47643.exe unicorn-114.exe unicorn-26258.exe unicorn-18561.exe unicorn-25298.exe unicorn-43035.exe unicorn-29641.exe unicorn-10040.exe unicorn-23775.exe backgroundtransferhost.exe no specs unicorn-33176.exe unicorn-45817.exe unicorn-41785.exe unicorn-10792.exe unicorn-59992.exe unicorn-58456.exe unicorn-61341.exe unicorn-16229.exe backgroundtransferhost.exe unicorn-8565.exe no specs unicorn-49468.exe unicorn-14849.exe unicorn-26386.exe unicorn-36426.exe unicorn-15634.exe unicorn-54969.exe unicorn-64310.exe unicorn-4097.exe unicorn-22654.exe backgroundtransferhost.exe no specs unicorn-16283.exe unicorn-30245.exe unicorn-16510.exe unicorn-50486.exe unicorn-43668.exe unicorn-13210.exe unicorn-62623.exe unicorn-40149.exe unicorn-5530.exe unicorn-4222.exe unicorn-63698.exe unicorn-27160.exe unicorn-27874.exe backgroundtransferhost.exe no specs unicorn-65499.exe unicorn-24475.exe unicorn-5969.exe unicorn-34619.exe unicorn-29797.exe unicorn-43193.exe unicorn-43193.exe unicorn-36155.exe unicorn-6632.exe unicorn-10961.exe unicorn-2897.exe unicorn-42483.exe unicorn-30011.exe unicorn-17496.exe backgroundtransferhost.exe no specs unicorn-11823.exe unicorn-60894.exe unicorn-27797.exe unicorn-26850.exe unicorn-23765.exe unicorn-48103.exe unicorn-51175.exe unicorn-2524.exe unicorn-42360.exe unicorn-52802.exe unicorn-25339.exe unicorn-19771.exe unicorn-30582.exe unicorn-57535.exe unicorn-34614.exe unicorn-5733.exe unicorn-27349.exe unicorn-62054.exe unicorn-47826.exe unicorn-51163.exe unicorn-26325.exe no specs unicorn-12375.exe unicorn-13474.exe unicorn-41234.exe no specs unicorn-55567.exe unicorn-35966.exe unicorn-35966.exe unicorn-24914.exe unicorn-1748.exe unicorn-21842.exe unicorn-28635.exe no specs unicorn-62262.exe unicorn-11089.exe unicorn-40472.exe unicorn-36252.exe unicorn-14234.exe no specs unicorn-18843.exe no specs unicorn-54948.exe unicorn-53988.exe unicorn-55944.exe unicorn-35637.exe no specs unicorn-28062.exe unicorn-49383.exe unicorn-49383.exe unicorn-9047.exe unicorn-9047.exe unicorn-3182.exe unicorn-54984.exe unicorn-382.exe unicorn-58769.exe unicorn-10189.exe unicorn-23924.exe unicorn-4704.exe unicorn-50340.exe unicorn-30003.exe unicorn-60449.exe unicorn-13392.exe no specs unicorn-64097.exe unicorn-17362.exe unicorn-14237.exe unicorn-55841.exe unicorn-50287.exe unicorn-38052.exe no specs unicorn-58747.exe unicorn-38052.exe unicorn-31921.exe no specs unicorn-14154.exe no specs unicorn-42593.exe unicorn-34350.exe unicorn-31550.exe unicorn-34350.exe unicorn-20615.exe unicorn-37444.exe unicorn-40216.exe unicorn-40216.exe no specs unicorn-20615.exe unicorn-20615.exe unicorn-20615.exe unicorn-26340.exe unicorn-63755.exe unicorn-21156.exe unicorn-39521.exe no specs unicorn-40428.exe no specs unicorn-15011.exe no specs unicorn-15587.exe no specs unicorn-4587.exe no specs unicorn-56389.exe no specs unicorn-20721.exe no specs unicorn-15154.exe no specs unicorn-17716.exe no specs unicorn-6986.exe unicorn-52949.exe unicorn-41569.exe unicorn-370.exe unicorn-40216.exe unicorn-58227.exe no specs unicorn-26209.exe no specs unicorn-43998.exe unicorn-45835.exe unicorn-20484.exe unicorn-60372.exe no specs unicorn-48907.exe no specs unicorn-3811.exe no specs unicorn-13344.exe unicorn-28638.exe no specs unicorn-60132.exe no specs unicorn-14340.exe no specs unicorn-39969.exe unicorn-778.exe unicorn-20644.exe unicorn-35951.exe no specs unicorn-35951.exe no specs unicorn-14535.exe no specs unicorn-14535.exe no specs unicorn-1894.exe no specs unicorn-36632.exe no specs unicorn-55262.exe unicorn-8931.exe unicorn-47582.exe unicorn-7395.exe no specs unicorn-50955.exe no specs unicorn-55316.exe unicorn-37706.exe unicorn-24542.exe unicorn-18411.exe no specs unicorn-27508.exe unicorn-44722.exe unicorn-10649.exe unicorn-30515.exe unicorn-30515.exe unicorn-18398.exe unicorn-64069.exe unicorn-35870.exe unicorn-56943.exe no specs unicorn-61537.exe unicorn-44168.exe no specs unicorn-13279.exe unicorn-44498.exe no specs unicorn-49931.exe no specs unicorn-49459.exe no specs unicorn-3994.exe unicorn-54539.exe no specs unicorn-21102.exe no specs unicorn-63652.exe no specs unicorn-43315.exe no specs unicorn-9760.exe unicorn-36211.exe no specs unicorn-58084.exe no specs unicorn-18619.exe unicorn-14368.exe unicorn-25997.exe no specs unicorn-21982.exe unicorn-51400.exe no specs unicorn-49288.exe unicorn-25744.exe no specs unicorn-14809.exe no specs unicorn-58991.exe unicorn-52403.exe unicorn-57850.exe unicorn-9574.exe no specs unicorn-44577.exe no specs unicorn-44577.exe no specs unicorn-6516.exe no specs unicorn-26142.exe unicorn-39655.exe no specs unicorn-48996.exe no specs unicorn-43826.exe unicorn-34471.exe no specs unicorn-53028.exe unicorn-2016.exe no specs unicorn-33511.exe no specs unicorn-5965.exe unicorn-42276.exe no specs unicorn-33345.exe no specs unicorn-4429.exe no specs unicorn-9037.exe no specs unicorn-61409.exe no specs unicorn-7501.exe unicorn-26493.exe no specs unicorn-64044.exe no specs unicorn-17575.exe unicorn-22183.exe unicorn-6822.exe unicorn-27097.exe no specs unicorn-50958.exe unicorn-14382.exe no specs unicorn-16740.exe no specs werfault.exe no specs unicorn-49998.exe no specs unicorn-40205.exe no specs unicorn-49941.exe no specs unicorn-30916.exe unicorn-30689.exe unicorn-2653.exe no specs unicorn-21821.exe unicorn-45039.exe unicorn-54101.exe no specs unicorn-57438.exe no specs unicorn-47646.exe no specs unicorn-31896.exe no specs unicorn-12295.exe no specs unicorn-34107.exe no specs unicorn-55710.exe no specs unicorn-21636.exe no specs unicorn-54174.exe unicorn-64066.exe unicorn-7023.exe no specs unicorn-1127.exe no specs unicorn-43701.exe no specs unicorn-44439.exe no specs unicorn-64039.exe no specs unicorn-39006.exe no specs unicorn-51943.exe no specs unicorn-29817.exe no specs unicorn-39882.exe no specs unicorn-39882.exe no specs unicorn-24891.exe no specs unicorn-27691.exe no specs unicorn-55912.exe no specs unicorn-33557.exe no specs unicorn-13956.exe no specs unicorn-61512.exe no specs unicorn-61512.exe no specs unicorn-9957.exe no specs unicorn-61512.exe no specs unicorn-3238.exe no specs unicorn-8422.exe unicorn-16740.exe no specs unicorn-47198.exe no specs unicorn-33387.exe no specs unicorn-55527.exe unicorn-22497.exe no specs unicorn-41054.exe no specs unicorn-18849.exe no specs unicorn-8096.exe no specs unicorn-40394.exe no specs unicorn-48206.exe no specs unicorn-48206.exe unicorn-34996.exe no specs unicorn-34023.exe no specs unicorn-50571.exe no specs unicorn-9083.exe no specs unicorn-63685.exe no specs unicorn-24244.exe unicorn-444.exe unicorn-63685.exe unicorn-24244.exe unicorn-21444.exe unicorn-11883.exe unicorn-63685.exe no specs unicorn-30110.exe no specs unicorn-11883.exe no specs unicorn-30110.exe no specs unicorn-30110.exe no specs unicorn-24982.exe unicorn-10509.exe unicorn-24982.exe unicorn-30110.exe no specs unicorn-10509.exe no specs unicorn-44583.exe unicorn-2863.exe no specs unicorn-46039.exe no specs unicorn-102.exe no specs unicorn-13072.exe no specs unicorn-27041.exe no specs unicorn-36173.exe no specs unicorn-14980.exe unicorn-48359.exe no specs unicorn-51431.exe no specs unicorn-64304.exe no specs unicorn-20237.exe no specs unicorn-20813.exe no specs unicorn-20813.exe no specs unicorn-11991.exe no specs unicorn-58888.exe no specs unicorn-58888.exe no specs unicorn-58888.exe no specs unicorn-2692.exe no specs unicorn-7086.exe no specs unicorn-7086.exe no specs unicorn-36071.exe no specs unicorn-50980.exe no specs unicorn-13133.exe no specs unicorn-29578.exe no specs unicorn-49179.exe no specs unicorn-40539.exe no specs unicorn-43314.exe no specs unicorn-20938.exe no specs unicorn-34673.exe slui.exe no specs unicorn-26590.exe unicorn-61592.exe no specs unicorn-5453.exe no specs unicorn-14301.exe unicorn-61755.exe unicorn-30247.exe no specs unicorn-30247.exe no specs unicorn-30247.exe no specs unicorn-27188.exe no specs unicorn-51003.exe no specs unicorn-53848.exe no specs unicorn-65196.exe no specs unicorn-235.exe no specs unicorn-17959.exe no specs unicorn-18535.exe no specs unicorn-3277.exe unicorn-41825.exe no specs unicorn-10013.exe no specs unicorn-60574.exe no specs unicorn-53470.exe unicorn-4710.exe unicorn-50382.exe unicorn-19428.exe unicorn-14227.exe no specs unicorn-11747.exe unicorn-25924.exe no specs unicorn-44583.exe unicorn-47365.exe no specs unicorn-24284.exe no specs unicorn-12326.exe no specs unicorn-29156.exe no specs unicorn-15303.exe no specs unicorn-53982.exe no specs unicorn-4646.exe no specs unicorn-60967.exe no specs unicorn-47838.exe no specs unicorn-18298.exe no specs unicorn-4563.exe no specs unicorn-4563.exe no specs unicorn-44661.exe no specs unicorn-47143.exe no specs unicorn-21988.exe no specs unicorn-18929.exe no specs unicorn-39725.exe no specs unicorn-60638.exe no specs unicorn-58526.exe no specs unicorn-44702.exe no specs unicorn-27437.exe unicorn-15725.exe no specs unicorn-52290.exe no specs unicorn-7587.exe no specs unicorn-46430.exe no specs unicorn-42506.exe no specs unicorn-50098.exe no specs unicorn-53746.exe no specs unicorn-53746.exe no specs unicorn-43623.exe no specs unicorn-33156.exe no specs unicorn-27806.exe no specs unicorn-22238.exe no specs unicorn-29802.exe no specs unicorn-20020.exe no specs unicorn-13021.exe no specs unicorn-23092.exe no specs unicorn-58300.exe no specs unicorn-41182.exe no specs unicorn-17262.exe no specs unicorn-44421.exe no specs unicorn-33485.exe no specs unicorn-53086.exe no specs unicorn-44254.exe no specs unicorn-43678.exe no specs unicorn-38110.exe no specs unicorn-995.exe no specs unicorn-28318.exe no specs unicorn-5484.exe no specs unicorn-40798.exe no specs unicorn-40798.exe no specs unicorn-34356.exe no specs unicorn-40222.exe no specs unicorn-40798.exe no specs unicorn-4398.exe no specs unicorn-15021.exe no specs unicorn-1316.exe no specs unicorn-15597.exe no specs unicorn-26517.exe no specs unicorn-21197.exe unicorn-20651.exe no specs unicorn-20621.exe no specs unicorn-20621.exe no specs unicorn-51458.exe no specs unicorn-20621.exe no specs unicorn-20621.exe no specs unicorn-20621.exe no specs unicorn-34932.exe no specs unicorn-55256.exe no specs unicorn-21162.exe no specs unicorn-46564.exe no specs unicorn-60741.exe no specs unicorn-60741.exe no specs unicorn-60741.exe no specs unicorn-17876.exe no specs unicorn-9620.exe no specs unicorn-21789.exe no specs unicorn-2491.exe no specs unicorn-63118.exe no specs unicorn-11316.exe no specs unicorn-46207.exe no specs unicorn-18442.exe no specs unicorn-55332.exe no specs unicorn-5015.exe no specs unicorn-23573.exe no specs unicorn-62463.exe no specs unicorn-54107.exe no specs unicorn-65211.exe no specs unicorn-50050.exe no specs unicorn-56603.exe no specs unicorn-38622.exe no specs unicorn-62191.exe no specs unicorn-60641.exe no specs unicorn-39986.exe no specs unicorn-46692.exe no specs unicorn-361.exe no specs unicorn-20455.exe no specs unicorn-55457.exe no specs unicorn-55457.exe no specs unicorn-20621.exe no specs unicorn-20621.exe no specs unicorn-52850.exe no specs unicorn-9140.exe no specs unicorn-58123.exe no specs unicorn-15862.exe no specs unicorn-47228.exe no specs unicorn-38872.exe no specs unicorn-50988.exe no specs unicorn-55582.exe no specs unicorn-28385.exe no specs unicorn-42282.exe no specs unicorn-22730.exe no specs unicorn-20618.exe no specs unicorn-55237.exe no specs unicorn-33380.exe no specs unicorn-62828.exe no specs unicorn-60558.exe no specs unicorn-43492.exe no specs unicorn-43007.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
456C:\Users\admin\AppData\Local\Temp\Unicorn-16740.exeC:\Users\admin\AppData\Local\Temp\Unicorn-16740.exe—Unicorn-41569.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-16740.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
664C:\Users\admin\AppData\Local\Temp\Unicorn-65499.exeC:\Users\admin\AppData\Local\Temp\Unicorn-65499.exe
Unicorn-45817.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-65499.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
680C:\Users\admin\AppData\Local\Temp\Unicorn-11823.exeC:\Users\admin\AppData\Local\Temp\Unicorn-11823.exe
Unicorn-59992.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-11823.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
732C:\Users\admin\AppData\Local\Temp\Unicorn-15587.exeC:\Users\admin\AppData\Local\Temp\Unicorn-15587.exe—Unicorn-1748.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-15587.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
736C:\Users\admin\AppData\Local\Temp\Unicorn-20615.exeC:\Users\admin\AppData\Local\Temp\Unicorn-20615.exe
Unicorn-23775.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-20615.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
744C:\Users\admin\AppData\Local\Temp\Unicorn-24475.exeC:\Users\admin\AppData\Local\Temp\Unicorn-24475.exe
Unicorn-61341.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-24475.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
856C:\Users\admin\AppData\Local\Temp\Unicorn-55841.exeC:\Users\admin\AppData\Local\Temp\Unicorn-55841.exe
Unicorn-27874.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-55841.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
920C:\Users\admin\AppData\Local\Temp\Unicorn-39882.exeC:\Users\admin\AppData\Local\Temp\Unicorn-39882.exe—Unicorn-60894.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-39882.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
968C:\Users\admin\AppData\Local\Temp\Unicorn-43007.exeC:\Users\admin\AppData\Local\Temp\Unicorn-43007.exe—Unicorn-51858.exe
User:
admin
Integrity Level:
MEDIUM
1128C:\Users\admin\AppData\Local\Temp\Unicorn-7046.exeC:\Users\admin\AppData\Local\Temp\Unicorn-7046.exe
Unicorn-25070.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-7046.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
Total events
12 698
Read events
12 683
Write events
15
Delete events
0

Modification events

(PID) Process:(7244) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(7244) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(7244) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(7600) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(7600) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(7600) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(7904) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(7904) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(7904) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(7264) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
Executable files
647
Suspicious files
8
Text files
1
Unknown types
0

Dropped files

PID
Process
Filename
Type
6268Unicorn-25070.exeC:\Users\admin\AppData\Local\Temp\Unicorn-15982.exeexecutable
MD5:3856B82FA2E41E60F831238A7C68E7B1
SHA256:4AF41E64C087E7EB1A2D391BB3F6C5A08E914895E4256A308750AD0B9F97D3A1
23201 (492).exeC:\Users\admin\AppData\Local\Temp\Unicorn-46988.exeexecutable
MD5:A2EADE63138F6F4B47D12DFD39AF0695
SHA256:87E3FEA31DE632C273AE1D1E15B97DFCCDD4A8F93D5D1368E455DF12D4F57877
5064Unicorn-46988.exeC:\Users\admin\AppData\Local\Temp\Unicorn-41237.exeexecutable
MD5:E69E7D76D9CF0B38BDF82152231BD95E
SHA256:87D0B397106F82A8EEDD4B36ABED2F928071CDD239E659D8DD7DF30266C3C9E8
23201 (492).exeC:\Users\admin\AppData\Local\Temp\Unicorn-51936.exeexecutable
MD5:4845EC637C9A9B1306E1969F1685C123
SHA256:9EAC2CA0FA62FED63AB18E3CC3C201C80D1FAF1A4A721CE6D69518A15D1135C2
4400Unicorn-15982.exeC:\Users\admin\AppData\Local\Temp\Unicorn-45698.exeexecutable
MD5:0CFE9570F9F58E6E0F01DD1F4DA71CE5
SHA256:FB4B2D5C18505618D8C4436A132569EFFEE4B28FF4C707EA166BE2F9B0C47EE5
4400Unicorn-15982.exeC:\Users\admin\AppData\Local\Temp\Unicorn-10266.exeexecutable
MD5:0E8EE380E179913B5A806921323D497A
SHA256:CB4833F6E8535686D7CB5706727CA2D98B126D8C403578830C7883A4185CEAB9
5064Unicorn-46988.exeC:\Users\admin\AppData\Local\Temp\Unicorn-60991.exeexecutable
MD5:1C8E58129C37620E3A18EBFA198C04CF
SHA256:DDBEB04A80852FB41E340AD1D6D170EAE73C6091C03E58E42E20D3F953139269
1164Unicorn-51936.exeC:\Users\admin\AppData\Local\Temp\Unicorn-23353.exeexecutable
MD5:3BB2E0F4842ED4FCBA4609B74FE188FC
SHA256:B50A6308D568F69AA6A660385B63A52C7D8903153B3AC632949FC53922E28D39
1184Unicorn-42808.exeC:\Users\admin\AppData\Local\Temp\Unicorn-50898.exeexecutable
MD5:2E94A590DEA396728ECE3F0B2C4A2728
SHA256:29223215531105F59E43CCC2E8884E5298E20DB81343BB17F245755BA99743B7
23201 (492).exeC:\Users\admin\AppData\Local\Temp\Unicorn-25070.exeexecutable
MD5:6D75B71C549FC72FD776FEE2C1B09172
SHA256:750006653775EEC170F8081BAA59D792F3C378219E02A067D579FC1E3CBE3F9F
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
27
DNS requests
18
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
—
—
GET
200
23.48.23.156:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
6544
svchost.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
2852
backgroundTaskHost.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
whitelisted
7600
BackgroundTransferHost.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
7248
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
7248
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
2104
svchost.exe
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
—
—
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
—
—
23.48.23.156:80
crl.microsoft.com
Akamai International B.V.
DE
whitelisted
5496
MoUsoCoreWorker.exe
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
3216
svchost.exe
40.113.110.67:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
20.190.160.131:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
184.30.131.245:80
ocsp.digicert.com
AKAMAI-AS
US
whitelisted
2112
svchost.exe
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
2852
backgroundTaskHost.exe
20.103.156.88:443
arc.msn.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 40.127.240.158
  • 4.231.128.59
whitelisted
google.com
  • 142.250.186.78
whitelisted
crl.microsoft.com
  • 23.48.23.156
  • 23.48.23.143
whitelisted
client.wns.windows.com
  • 40.113.110.67
whitelisted
login.live.com
  • 20.190.160.131
  • 20.190.160.2
  • 20.190.160.67
  • 40.126.32.140
  • 20.190.160.66
  • 20.190.160.64
  • 40.126.32.134
  • 40.126.32.138
whitelisted
ocsp.digicert.com
  • 184.30.131.245
whitelisted
arc.msn.com
  • 20.103.156.88
whitelisted
www.bing.com
  • 104.126.37.129
  • 104.126.37.145
  • 104.126.37.171
  • 104.126.37.161
  • 104.126.37.123
  • 104.126.37.163
  • 104.126.37.147
  • 104.126.37.139
  • 104.126.37.153
whitelisted
slscr.update.microsoft.com
  • 52.149.20.212
whitelisted
www.microsoft.com
  • 184.30.21.171
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
1 (492)