File name:

1 (1279)

Full analysis: https://app.any.run/tasks/5dbb9d9f-f184-4c99-9b30-9aaae25652c9
Verdict: Malicious activity
Analysis date: March 24, 2025, 09:42:44
OS: Windows 10 Professional (build: 19044, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections
MD5:

B45B07EE34199057B91FA8C07E4461B0

SHA1:

E62F34188B561C018AA7C0AA46F8166B56303E52

SHA256:

B26910B44DBDA6DFD15E63C2A883E7343E0A0E87121154B39B13F73D8CB2779A

SSDEEP:

6144:NwK5tNIPkDzHA5dEtKev6Ufx/aB1lvJGBq//yeObBk/8SwjwpyA4Ehw8xk7tGC/N:N9vesHA5Wtl8BHhaq3yeObrx4QxmDsR

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Starts itself from another location

      • Unicorn-20607.exe (PID: 8076)
      • Unicorn-25040.exe (PID: 8012)
      • Unicorn-6731.exe (PID: 8060)
      • 1 (1279).exe (PID: 7340)
      • Unicorn-22064.exe (PID: 8128)
      • Unicorn-2621.exe (PID: 8108)
      • Unicorn-28195.exe (PID: 8140)
      • Unicorn-5314.exe (PID: 8116)
      • Unicorn-49212.exe (PID: 1184)
      • Unicorn-16348.exe (PID: 1452)
      • Unicorn-3903.exe (PID: 5720)
      • Unicorn-62019.exe (PID: 6712)
      • Unicorn-22277.exe (PID: 6272)
      • Unicorn-8542.exe (PID: 4724)
      • Unicorn-32419.exe (PID: 6372)
      • Unicorn-7987.exe (PID: 5376)
      • Unicorn-2486.exe (PID: 7336)
      • Unicorn-43156.exe (PID: 8104)
      • Unicorn-24058.exe (PID: 4200)
      • Unicorn-26305.exe (PID: 5228)
      • Unicorn-46747.exe (PID: 6652)
      • Unicorn-23312.exe (PID: 2140)
      • Unicorn-10099.exe (PID: 7312)
      • Unicorn-17181.exe (PID: 6108)
      • Unicorn-62106.exe (PID: 8184)
      • Unicorn-51900.exe (PID: 5072)
      • Unicorn-11251.exe (PID: 664)
      • Unicorn-27396.exe (PID: 6724)
      • Unicorn-46482.exe (PID: 5972)
      • Unicorn-53976.exe (PID: 7564)
      • Unicorn-57292.exe (PID: 2148)
      • Unicorn-27286.exe (PID: 7296)
      • Unicorn-34609.exe (PID: 7048)
      • Unicorn-25453.exe (PID: 516)
      • Unicorn-53082.exe (PID: 7228)
      • Unicorn-15557.exe (PID: 6988)
      • Unicorn-1843.exe (PID: 7232)
      • Unicorn-26161.exe (PID: 7816)
      • Unicorn-27308.exe (PID: 7624)
      • Unicorn-27043.exe (PID: 4228)
      • Unicorn-42300.exe (PID: 5512)
      • Unicorn-35668.exe (PID: 3888)
      • Unicorn-12870.exe (PID: 7648)
      • Unicorn-60172.exe (PID: 7608)
      • Unicorn-20292.exe (PID: 8100)
      • Unicorn-16208.exe (PID: 1568)
      • Unicorn-6695.exe (PID: 616)
      • Unicorn-19502.exe (PID: 6872)
      • Unicorn-3166.exe (PID: 2432)
      • Unicorn-2699.exe (PID: 6148)
      • Unicorn-35476.exe (PID: 7600)
      • Unicorn-26732.exe (PID: 5576)
      • Unicorn-13902.exe (PID: 7752)
      • Unicorn-61516.exe (PID: 7596)
      • Unicorn-48091.exe (PID: 7660)
      • Unicorn-47323.exe (PID: 6668)
      • Unicorn-20846.exe (PID: 5436)
      • Unicorn-60172.exe (PID: 7632)
      • Unicorn-447.exe (PID: 8092)
      • Unicorn-65045.exe (PID: 7736)
      • Unicorn-2419.exe (PID: 5244)
      • Unicorn-34581.exe (PID: 1012)
      • Unicorn-23032.exe (PID: 728)
      • Unicorn-14266.exe (PID: 4996)
      • Unicorn-18128.exe (PID: 4436)
      • Unicorn-28961.exe (PID: 6228)
      • Unicorn-52793.exe (PID: 7520)
      • Unicorn-31754.exe (PID: 7240)
      • Unicorn-31858.exe (PID: 7932)
      • Unicorn-27198.exe (PID: 4944)
      • Unicorn-64427.exe (PID: 7656)
      • Unicorn-47136.exe (PID: 7704)
      • Unicorn-54671.exe (PID: 6512)
      • Unicorn-34884.exe (PID: 7920)
      • Unicorn-47271.exe (PID: 7616)
      • Unicorn-21356.exe (PID: 8240)
      • Unicorn-65429.exe (PID: 1276)
      • Unicorn-1599.exe (PID: 5608)
      • Unicorn-6503.exe (PID: 7524)
      • Unicorn-17557.exe (PID: 2852)
      • Unicorn-1407.exe (PID: 3140)
      • Unicorn-64707.exe (PID: 8180)
      • Unicorn-9383.exe (PID: 7732)
      • Unicorn-51672.exe (PID: 8796)
      • Unicorn-47536.exe (PID: 7664)
      • Unicorn-18018.exe (PID: 8812)
      • Unicorn-6180.exe (PID: 8804)
      • Unicorn-51869.exe (PID: 5776)
      • Unicorn-16430.exe (PID: 8960)
      • Unicorn-22451.exe (PID: 8028)
      • Unicorn-33416.exe (PID: 8300)
      • Unicorn-43554.exe (PID: 4180)
      • Unicorn-54007.exe (PID: 8352)
      • Unicorn-35366.exe (PID: 8344)
      • Unicorn-33416.exe (PID: 8292)
      • Unicorn-40711.exe (PID: 7712)
      • Unicorn-47448.exe (PID: 7748)
      • Unicorn-359.exe (PID: 8364)
      • Unicorn-61739.exe (PID: 8876)
      • Unicorn-730.exe (PID: 9168)
      • Unicorn-46415.exe (PID: 8252)
      • Unicorn-8335.exe (PID: 6480)
      • Unicorn-29908.exe (PID: 8428)
      • Unicorn-50712.exe (PID: 8388)
      • Unicorn-17555.exe (PID: 8452)
      • Unicorn-52876.exe (PID: 8212)
      • Unicorn-39420.exe (PID: 8788)
      • Unicorn-48098.exe (PID: 2192)
      • Unicorn-51096.exe (PID: 8652)
      • Unicorn-56249.exe (PID: 8664)
      • Unicorn-64427.exe (PID: 9028)
      • Unicorn-57920.exe (PID: 8324)
      • Unicorn-52248.exe (PID: 8720)
      • Unicorn-20706.exe (PID: 8924)
      • Unicorn-9937.exe (PID: 8884)
      • Unicorn-36348.exe (PID: 8224)
      • Unicorn-19886.exe (PID: 8900)
      • Unicorn-63784.exe (PID: 8044)
      • Unicorn-42352.exe (PID: 8404)
      • Unicorn-62943.exe (PID: 8232)
      • Unicorn-60084.exe (PID: 4380)
      • Unicorn-21281.exe (PID: 5956)
      • Unicorn-27241.exe (PID: 9908)
      • Unicorn-27241.exe (PID: 9900)
      • Unicorn-25012.exe (PID: 9960)
      • Unicorn-34738.exe (PID: 8412)
      • Unicorn-5797.exe (PID: 9388)
      • Unicorn-56703.exe (PID: 9400)
      • Unicorn-18808.exe (PID: 8480)
      • Unicorn-56532.exe (PID: 9580)
      • Unicorn-2479.exe (PID: 9444)
      • Unicorn-58452.exe (PID: 9820)
      • Unicorn-55935.exe (PID: 9272)
      • Unicorn-39650.exe (PID: 11172)
      • Unicorn-286.exe (PID: 8908)
      • Unicorn-20352.exe (PID: 9780)
      • Unicorn-30419.exe (PID: 9300)
      • Unicorn-57544.exe (PID: 9152)
      • Unicorn-62474.exe (PID: 11152)
      • Unicorn-59324.exe (PID: 5232)
      • Unicorn-64928.exe (PID: 9996)
      • Unicorn-44900.exe (PID: 6516)
      • Unicorn-5027.exe (PID: 4560)
      • Unicorn-44399.exe (PID: 9492)
      • Unicorn-55764.exe (PID: 9428)
      • Unicorn-54923.exe (PID: 9316)
      • Unicorn-50507.exe (PID: 9240)
      • Unicorn-30626.exe (PID: 11524)
      • Unicorn-40854.exe (PID: 10332)
      • Unicorn-56723.exe (PID: 9680)
      • Unicorn-59215.exe (PID: 11548)
      • Unicorn-20714.exe (PID: 9484)
      • Unicorn-55131.exe (PID: 11540)
      • Unicorn-1099.exe (PID: 11656)
      • Unicorn-57226.exe (PID: 9328)
      • Unicorn-28948.exe (PID: 8380)
      • Unicorn-35448.exe (PID: 10204)
      • Unicorn-3239.exe (PID: 9036)
      • Unicorn-51459.exe (PID: 7924)
      • Unicorn-44088.exe (PID: 9608)
      • Unicorn-3820.exe (PID: 8444)
      • Unicorn-59383.exe (PID: 8532)
      • Unicorn-50248.exe (PID: 12596)
      • Unicorn-41888.exe (PID: 12660)
      • Unicorn-38084.exe (PID: 7460)
      • Unicorn-5250.exe (PID: 10756)
      • Unicorn-7222.exe (PID: 10232)
      • Unicorn-41940.exe (PID: 11664)
      • Unicorn-41430.exe (PID: 10552)
      • Unicorn-25446.exe (PID: 9348)
      • Unicorn-2775.exe (PID: 10432)
      • Unicorn-12235.exe (PID: 9196)
      • Unicorn-59648.exe (PID: 8508)
      • Unicorn-14021.exe (PID: 8892)
      • Unicorn-59220.exe (PID: 9988)
      • Unicorn-13994.exe (PID: 10252)
      • Unicorn-37103.exe (PID: 10712)
      • Unicorn-34633.exe (PID: 9880)
      • Unicorn-21498.exe (PID: 11416)
      • Unicorn-64427.exe (PID: 9020)
      • Unicorn-65048.exe (PID: 12980)
      • Unicorn-41871.exe (PID: 11340)
      • Unicorn-30056.exe (PID: 10320)
      • Unicorn-31341.exe (PID: 11372)
      • Unicorn-2391.exe (PID: 6824)
      • Unicorn-18742.exe (PID: 10056)
      • Unicorn-12817.exe (PID: 7376)
      • Unicorn-14103.exe (PID: 10008)
      • Unicorn-59568.exe (PID: 7860)
      • Unicorn-14342.exe (PID: 13912)
      • Unicorn-14342.exe (PID: 13896)
      • Unicorn-14342.exe (PID: 13904)
      • Unicorn-47124.exe (PID: 10100)
      • Unicorn-40218.exe (PID: 1628)
      • Unicorn-50963.exe (PID: 10656)
      • Unicorn-11777.exe (PID: 10924)
      • Unicorn-18920.exe (PID: 10220)
      • Unicorn-30226.exe (PID: 15340)
      • Unicorn-38394.exe (PID: 15316)
      • Unicorn-47602.exe (PID: 11068)
      • Unicorn-3787.exe (PID: 12568)
      • Unicorn-29480.exe (PID: 9872)
      • Unicorn-64427.exe (PID: 9012)
      • Unicorn-63372.exe (PID: 3620)
      • Unicorn-18654.exe (PID: 10888)
      • Unicorn-42736.exe (PID: 8696)
      • Unicorn-51480.exe (PID: 8496)
      • Unicorn-33416.exe (PID: 8284)
      • Unicorn-28128.exe (PID: 8972)
      • Unicorn-51504.exe (PID: 4056)
      • Unicorn-26718.exe (PID: 10172)
      • Unicorn-48447.exe (PID: 10440)
      • Unicorn-52811.exe (PID: 10676)
      • Unicorn-13351.exe (PID: 11648)
      • Unicorn-28882.exe (PID: 9516)
      • Unicorn-15826.exe (PID: 12120)
      • Unicorn-45183.exe (PID: 12308)
      • Unicorn-39458.exe (PID: 12760)
      • Unicorn-15603.exe (PID: 10340)
      • Unicorn-1106.exe (PID: 8332)
      • Unicorn-2333.exe (PID: 14748)
      • Unicorn-56108.exe (PID: 9620)
      • Unicorn-48940.exe (PID: 9792)
      • Unicorn-12095.exe (PID: 10560)
      • Unicorn-26784.exe (PID: 8548)
      • Unicorn-13558.exe (PID: 11024)
      • Unicorn-57100.exe (PID: 8868)
      • Unicorn-2443.exe (PID: 12184)
      • Unicorn-62531.exe (PID: 13956)
      • Unicorn-13497.exe (PID: 12816)
      • Unicorn-30477.exe (PID: 16772)
      • Unicorn-63540.exe (PID: 8588)
      • Unicorn-33277.exe (PID: 16764)
      • Unicorn-26194.exe (PID: 864)
      • Unicorn-45006.exe (PID: 3828)
      • Unicorn-17518.exe (PID: 7496)
      • Unicorn-20544.exe (PID: 9736)
      • Unicorn-51428.exe (PID: 16780)
      • Unicorn-18058.exe (PID: 18164)
      • Unicorn-57311.exe (PID: 7288)
      • Unicorn-18058.exe (PID: 18172)
      • Unicorn-63440.exe (PID: 18180)

    • Executable content was dropped or overwritten

      • 1 (1279).exe (PID: 7340)
      • Unicorn-25040.exe (PID: 8012)
      • Unicorn-20607.exe (PID: 8076)
      • Unicorn-6731.exe (PID: 8060)
      • Unicorn-2621.exe (PID: 8108)
      • Unicorn-22064.exe (PID: 8128)
      • Unicorn-5314.exe (PID: 8116)
      • Unicorn-28195.exe (PID: 8140)
      • Unicorn-49212.exe (PID: 1184)
      • Unicorn-3903.exe (PID: 5720)
      • Unicorn-8542.exe (PID: 4724)
      • Unicorn-7987.exe (PID: 5376)
      • Unicorn-16348.exe (PID: 1452)
      • Unicorn-62019.exe (PID: 6712)
      • Unicorn-22277.exe (PID: 6272)
      • Unicorn-32419.exe (PID: 6372)
      • Unicorn-2486.exe (PID: 7336)
      • Unicorn-43156.exe (PID: 8104)
      • Unicorn-24058.exe (PID: 4200)
      • Unicorn-46747.exe (PID: 6652)
      • Unicorn-26305.exe (PID: 5228)
      • Unicorn-23312.exe (PID: 2140)
      • Unicorn-10099.exe (PID: 7312)
      • Unicorn-17181.exe (PID: 6108)
      • Unicorn-27396.exe (PID: 6724)
      • Unicorn-51900.exe (PID: 5072)
      • Unicorn-11251.exe (PID: 664)
      • Unicorn-34609.exe (PID: 7048)
      • Unicorn-64707.exe (PID: 8180)
      • Unicorn-46482.exe (PID: 5972)
      • Unicorn-57292.exe (PID: 2148)
      • Unicorn-27286.exe (PID: 7296)
      • Unicorn-53976.exe (PID: 7564)
      • Unicorn-27043.exe (PID: 4228)
      • Unicorn-15557.exe (PID: 6988)
      • Unicorn-25453.exe (PID: 516)
      • Unicorn-53082.exe (PID: 7228)
      • Unicorn-1843.exe (PID: 7232)
      • Unicorn-26161.exe (PID: 7816)
      • Unicorn-27308.exe (PID: 7624)
      • Unicorn-35668.exe (PID: 3888)
      • Unicorn-42300.exe (PID: 5512)
      • Unicorn-60172.exe (PID: 7608)
      • Unicorn-12870.exe (PID: 7648)
      • Unicorn-20292.exe (PID: 8100)
      • Unicorn-16208.exe (PID: 1568)
      • Unicorn-35476.exe (PID: 7600)
      • Unicorn-6695.exe (PID: 616)
      • Unicorn-19502.exe (PID: 6872)
      • Unicorn-3166.exe (PID: 2432)
      • Unicorn-2699.exe (PID: 6148)
      • Unicorn-60172.exe (PID: 7632)
      • Unicorn-61516.exe (PID: 7596)
      • Unicorn-48091.exe (PID: 7660)
      • Unicorn-20846.exe (PID: 5436)
      • Unicorn-47323.exe (PID: 6668)
      • Unicorn-54671.exe (PID: 6512)
      • Unicorn-447.exe (PID: 8092)
      • Unicorn-62106.exe (PID: 8184)
      • Unicorn-2419.exe (PID: 5244)
      • Unicorn-34581.exe (PID: 1012)
      • Unicorn-14266.exe (PID: 4996)
      • Unicorn-18128.exe (PID: 4436)
      • Unicorn-6503.exe (PID: 7524)
      • Unicorn-31754.exe (PID: 7240)
      • Unicorn-23032.exe (PID: 728)
      • Unicorn-52793.exe (PID: 7520)
      • Unicorn-64427.exe (PID: 7656)
      • Unicorn-27198.exe (PID: 4944)
      • Unicorn-47136.exe (PID: 7704)
      • Unicorn-31858.exe (PID: 7932)
      • Unicorn-47271.exe (PID: 7616)
      • Unicorn-34884.exe (PID: 7920)
      • Unicorn-21356.exe (PID: 8240)
      • Unicorn-65429.exe (PID: 1276)
      • Unicorn-1599.exe (PID: 5608)
      • Unicorn-17557.exe (PID: 2852)
      • Unicorn-47536.exe (PID: 7664)
      • Unicorn-9383.exe (PID: 7732)
      • Unicorn-51672.exe (PID: 8796)
      • Unicorn-1407.exe (PID: 3140)
      • Unicorn-6180.exe (PID: 8804)
      • Unicorn-51869.exe (PID: 5776)
      • Unicorn-18018.exe (PID: 8812)
      • Unicorn-33416.exe (PID: 8300)
      • Unicorn-47448.exe (PID: 7748)
      • Unicorn-39420.exe (PID: 8788)
      • Unicorn-22451.exe (PID: 8028)
      • Unicorn-43554.exe (PID: 4180)
      • Unicorn-54007.exe (PID: 8352)
      • Unicorn-35366.exe (PID: 8344)
      • Unicorn-40711.exe (PID: 7712)
      • Unicorn-33416.exe (PID: 8292)
      • Unicorn-61739.exe (PID: 8876)
      • Unicorn-359.exe (PID: 8364)
      • Unicorn-730.exe (PID: 9168)
      • Unicorn-8335.exe (PID: 6480)
      • Unicorn-46415.exe (PID: 8252)
      • Unicorn-29908.exe (PID: 8428)
      • Unicorn-50712.exe (PID: 8388)
      • Unicorn-26732.exe (PID: 5576)
      • Unicorn-17555.exe (PID: 8452)
      • Unicorn-52876.exe (PID: 8212)
      • Unicorn-56249.exe (PID: 8664)
      • Unicorn-51096.exe (PID: 8652)
      • Unicorn-48098.exe (PID: 2192)
      • Unicorn-64427.exe (PID: 9028)
      • Unicorn-57920.exe (PID: 8324)
      • Unicorn-20706.exe (PID: 8924)
      • Unicorn-9937.exe (PID: 8884)
      • Unicorn-28961.exe (PID: 6228)
      • Unicorn-42352.exe (PID: 8404)
      • Unicorn-36348.exe (PID: 8224)
      • Unicorn-52248.exe (PID: 8720)
      • Unicorn-34738.exe (PID: 8412)
      • Unicorn-63784.exe (PID: 8044)
      • Unicorn-13902.exe (PID: 7752)
      • Unicorn-62943.exe (PID: 8232)
      • Unicorn-60084.exe (PID: 4380)
      • Unicorn-21281.exe (PID: 5956)
      • Unicorn-27241.exe (PID: 9908)
      • Unicorn-27241.exe (PID: 9900)
      • Unicorn-5797.exe (PID: 9388)
      • Unicorn-18808.exe (PID: 8480)
      • Unicorn-25012.exe (PID: 9960)
      • Unicorn-56703.exe (PID: 9400)
      • Unicorn-2479.exe (PID: 9444)
      • Unicorn-58452.exe (PID: 9820)
      • Unicorn-56532.exe (PID: 9580)
      • Unicorn-55935.exe (PID: 9272)
      • Unicorn-16430.exe (PID: 8960)
      • Unicorn-62474.exe (PID: 11152)
      • Unicorn-286.exe (PID: 8908)
      • Unicorn-50507.exe (PID: 9240)
      • Unicorn-30419.exe (PID: 9300)
      • Unicorn-54923.exe (PID: 9316)
      • Unicorn-39650.exe (PID: 11172)
      • Unicorn-59324.exe (PID: 5232)
      • Unicorn-64928.exe (PID: 9996)
      • Unicorn-44900.exe (PID: 6516)
      • Unicorn-20714.exe (PID: 9484)
      • Unicorn-14980.exe (PID: 10068)
      • Unicorn-44399.exe (PID: 9492)
      • Unicorn-55764.exe (PID: 9428)
      • Unicorn-30626.exe (PID: 11524)
      • Unicorn-40854.exe (PID: 10332)
      • Unicorn-56723.exe (PID: 9680)
      • Unicorn-59215.exe (PID: 11548)
      • Unicorn-55131.exe (PID: 11540)
      • Unicorn-57226.exe (PID: 9328)
      • Unicorn-3239.exe (PID: 9036)
      • Unicorn-1099.exe (PID: 11656)
      • Unicorn-35448.exe (PID: 10204)
      • Unicorn-44088.exe (PID: 9608)
      • Unicorn-51459.exe (PID: 7924)
      • Unicorn-3820.exe (PID: 8444)
      • Unicorn-3787.exe (PID: 12568)
      • Unicorn-50248.exe (PID: 12596)
      • Unicorn-41888.exe (PID: 12660)
      • Unicorn-41940.exe (PID: 11664)
      • Unicorn-59383.exe (PID: 8532)
      • Unicorn-5250.exe (PID: 10756)
      • Unicorn-7222.exe (PID: 10232)
      • Unicorn-21498.exe (PID: 11416)
      • Unicorn-38084.exe (PID: 7460)
      • Unicorn-30056.exe (PID: 10320)
      • Unicorn-12235.exe (PID: 9196)
      • Unicorn-25446.exe (PID: 9348)
      • Unicorn-59648.exe (PID: 8508)
      • Unicorn-14021.exe (PID: 8892)
      • Unicorn-59220.exe (PID: 9988)
      • Unicorn-37103.exe (PID: 10712)
      • Unicorn-34633.exe (PID: 9880)
      • Unicorn-13994.exe (PID: 10252)
      • Unicorn-65048.exe (PID: 12980)
      • Unicorn-41871.exe (PID: 11340)
      • Unicorn-64427.exe (PID: 9020)
      • Unicorn-2391.exe (PID: 6824)
      • Unicorn-31341.exe (PID: 11372)
      • Unicorn-18742.exe (PID: 10056)
      • Unicorn-14103.exe (PID: 10008)
      • Unicorn-59568.exe (PID: 7860)
      • Unicorn-12817.exe (PID: 7376)
      • Unicorn-14342.exe (PID: 13912)
      • Unicorn-14342.exe (PID: 13896)
      • Unicorn-47124.exe (PID: 10100)
      • Unicorn-40218.exe (PID: 1628)
      • Unicorn-18920.exe (PID: 10220)
      • Unicorn-50963.exe (PID: 10656)
      • Unicorn-11777.exe (PID: 10924)
      • Unicorn-30226.exe (PID: 15340)
      • Unicorn-47602.exe (PID: 11068)
      • Unicorn-64427.exe (PID: 9012)
      • Unicorn-63372.exe (PID: 3620)
      • Unicorn-18654.exe (PID: 10888)
      • Unicorn-29480.exe (PID: 9872)
      • Unicorn-51480.exe (PID: 8496)
      • Unicorn-42736.exe (PID: 8696)
      • Unicorn-20352.exe (PID: 9780)
      • Unicorn-41430.exe (PID: 10552)
      • Unicorn-33416.exe (PID: 8284)
      • Unicorn-28128.exe (PID: 8972)
      • Unicorn-26718.exe (PID: 10172)
      • Unicorn-51504.exe (PID: 4056)
      • Unicorn-15826.exe (PID: 12120)
      • Unicorn-57100.exe (PID: 8868)
      • Unicorn-13351.exe (PID: 11648)
      • Unicorn-28882.exe (PID: 9516)
      • Unicorn-14342.exe (PID: 13904)
      • Unicorn-48447.exe (PID: 10440)
      • Unicorn-45183.exe (PID: 12308)
      • Unicorn-15603.exe (PID: 10340)
      • Unicorn-39458.exe (PID: 12760)
      • Unicorn-1106.exe (PID: 8332)
      • Unicorn-19886.exe (PID: 8900)
      • Unicorn-54399.exe (PID: 9100)
      • Unicorn-56108.exe (PID: 9620)
      • Unicorn-12095.exe (PID: 10560)
      • Unicorn-62531.exe (PID: 13956)
      • Unicorn-48940.exe (PID: 9792)
      • Unicorn-26784.exe (PID: 8548)
      • Unicorn-2333.exe (PID: 14748)
      • Unicorn-13558.exe (PID: 11024)
      • Unicorn-2443.exe (PID: 12184)
      • Unicorn-63540.exe (PID: 8588)
      • Unicorn-5027.exe (PID: 4560)
      • Unicorn-13497.exe (PID: 12816)
      • Unicorn-33277.exe (PID: 16764)
      • Unicorn-30477.exe (PID: 16772)
      • Unicorn-51428.exe (PID: 16780)
      • Unicorn-26194.exe (PID: 864)
      • Unicorn-57730.exe (PID: 15308)
      • Unicorn-45006.exe (PID: 3828)
      • Unicorn-20544.exe (PID: 9736)
      • Unicorn-57544.exe (PID: 9152)
      • Unicorn-27570.exe (PID: 3804)
      • Unicorn-33180.exe (PID: 9640)
      • Unicorn-57311.exe (PID: 7288)
      • Unicorn-46326.exe (PID: 13328)
      • Unicorn-19584.exe (PID: 9600)
      • Unicorn-1594.exe (PID: 12044)
      • Unicorn-38394.exe (PID: 15316)
      • Unicorn-4939.exe (PID: 12692)
      • Unicorn-17518.exe (PID: 7496)
      • Unicorn-5633.exe (PID: 12264)
      • Unicorn-15744.exe (PID: 11300)
      • Unicorn-54104.exe (PID: 6344)
      • Unicorn-48238.exe (PID: 9832)
      • Unicorn-10647.exe (PID: 9436)
      • Unicorn-28948.exe (PID: 8380)
      • Unicorn-65045.exe (PID: 7736)
      • Unicorn-43284.exe (PID: 12208)
      • Unicorn-28437.exe (PID: 10700)
      • Unicorn-36876.exe (PID: 19864)

  • INFO

    • Reads the computer name

      • 1 (1279).exe (PID: 7340)
      • Unicorn-25040.exe (PID: 8012)
      • Unicorn-6731.exe (PID: 8060)
      • Unicorn-20607.exe (PID: 8076)
      • Unicorn-28195.exe (PID: 8140)
      • Unicorn-2621.exe (PID: 8108)
      • Unicorn-22064.exe (PID: 8128)
      • Unicorn-5314.exe (PID: 8116)
      • Unicorn-3903.exe (PID: 5720)
      • Unicorn-8542.exe (PID: 4724)
      • Unicorn-7987.exe (PID: 5376)
      • Unicorn-32419.exe (PID: 6372)
      • Unicorn-49212.exe (PID: 1184)
      • Unicorn-62019.exe (PID: 6712)
      • Unicorn-26305.exe (PID: 5228)
      • Unicorn-2486.exe (PID: 7336)
      • Unicorn-24058.exe (PID: 4200)
      • Unicorn-46747.exe (PID: 6652)
      • Unicorn-51900.exe (PID: 5072)
      • Unicorn-34609.exe (PID: 7048)
      • Unicorn-27396.exe (PID: 6724)
      • Unicorn-64707.exe (PID: 8180)
      • Unicorn-27286.exe (PID: 7296)
      • Unicorn-15557.exe (PID: 6988)
      • Unicorn-53082.exe (PID: 7228)
      • Unicorn-12870.exe (PID: 7648)
      • Unicorn-60172.exe (PID: 7608)
      • Unicorn-27308.exe (PID: 7624)
      • Unicorn-16208.exe (PID: 1568)
      • Unicorn-35476.exe (PID: 7600)
      • Unicorn-3166.exe (PID: 2432)
      • Unicorn-60172.exe (PID: 7632)
      • Unicorn-447.exe (PID: 8092)
      • Unicorn-48091.exe (PID: 7660)
      • Unicorn-20846.exe (PID: 5436)
      • Unicorn-14266.exe (PID: 4996)
      • Unicorn-23032.exe (PID: 728)
      • Unicorn-6503.exe (PID: 7524)
      • Unicorn-31754.exe (PID: 7240)
      • Unicorn-27198.exe (PID: 4944)
      • Unicorn-47136.exe (PID: 7704)
      • Unicorn-47271.exe (PID: 7616)
      • Unicorn-51869.exe (PID: 5776)
      • Unicorn-21356.exe (PID: 8240)
      • Unicorn-47536.exe (PID: 7664)
      • Unicorn-1407.exe (PID: 3140)
      • Unicorn-1599.exe (PID: 5608)
      • Unicorn-51672.exe (PID: 8796)
      • Unicorn-16430.exe (PID: 8960)
      • Unicorn-39420.exe (PID: 8788)
      • Unicorn-18018.exe (PID: 8812)
      • Unicorn-22451.exe (PID: 8028)
      • Unicorn-54007.exe (PID: 8352)
      • Unicorn-33416.exe (PID: 8292)
      • Unicorn-43554.exe (PID: 4180)
      • Unicorn-8335.exe (PID: 6480)
      • Unicorn-50712.exe (PID: 8388)
      • Unicorn-52876.exe (PID: 8212)
      • Unicorn-29908.exe (PID: 8428)
      • Unicorn-56249.exe (PID: 8664)
      • Unicorn-48098.exe (PID: 2192)
      • Unicorn-64427.exe (PID: 9028)
      • Unicorn-57920.exe (PID: 8324)
      • Unicorn-63784.exe (PID: 8044)
      • Unicorn-60084.exe (PID: 4380)
      • Unicorn-27241.exe (PID: 9908)
      • Unicorn-27241.exe (PID: 9900)
      • Unicorn-50507.exe (PID: 9240)
      • Unicorn-30419.exe (PID: 9300)
      • Unicorn-2479.exe (PID: 9444)
      • Unicorn-59324.exe (PID: 5232)
      • Unicorn-56723.exe (PID: 9680)
      • Unicorn-25446.exe (PID: 9348)
      • Unicorn-41888.exe (PID: 12660)
      • Unicorn-5250.exe (PID: 10756)
      • Unicorn-41430.exe (PID: 10552)
      • Unicorn-2775.exe (PID: 10432)
      • Unicorn-14021.exe (PID: 8892)
      • Unicorn-18742.exe (PID: 10056)
      • Unicorn-28128.exe (PID: 8972)
      • Unicorn-47602.exe (PID: 11068)
      • Unicorn-39458.exe (PID: 12760)
      • Unicorn-28882.exe (PID: 9516)
      • Unicorn-45006.exe (PID: 3828)
      • Unicorn-46326.exe (PID: 13328)

    • Checks supported languages

      • 1 (1279).exe (PID: 7340)
      • Unicorn-25040.exe (PID: 8012)
      • Unicorn-20607.exe (PID: 8076)
      • Unicorn-2621.exe (PID: 8108)
      • Unicorn-5314.exe (PID: 8116)
      • Unicorn-49212.exe (PID: 1184)
      • Unicorn-28195.exe (PID: 8140)
      • Unicorn-32419.exe (PID: 6372)
      • Unicorn-22277.exe (PID: 6272)
      • Unicorn-7987.exe (PID: 5376)
      • Unicorn-62019.exe (PID: 6712)
      • Unicorn-16348.exe (PID: 1452)
      • Unicorn-8542.exe (PID: 4724)
      • Unicorn-43156.exe (PID: 8104)
      • Unicorn-11251.exe (PID: 664)
      • Unicorn-10099.exe (PID: 7312)
      • Unicorn-24058.exe (PID: 4200)
      • Unicorn-27396.exe (PID: 6724)
      • Unicorn-23312.exe (PID: 2140)
      • Unicorn-46482.exe (PID: 5972)
      • Unicorn-51900.exe (PID: 5072)
      • Unicorn-34609.exe (PID: 7048)
      • Unicorn-62106.exe (PID: 8184)
      • Unicorn-64707.exe (PID: 8180)
      • Unicorn-27286.exe (PID: 7296)
      • Unicorn-15557.exe (PID: 6988)
      • Unicorn-35668.exe (PID: 3888)
      • Unicorn-25453.exe (PID: 516)
      • Unicorn-1843.exe (PID: 7232)
      • Unicorn-6695.exe (PID: 616)
      • Unicorn-27308.exe (PID: 7624)
      • Unicorn-26732.exe (PID: 5576)
      • Unicorn-35476.exe (PID: 7600)
      • Unicorn-19502.exe (PID: 6872)
      • Unicorn-23032.exe (PID: 728)
      • Unicorn-14266.exe (PID: 4996)
      • Unicorn-47271.exe (PID: 7616)
      • Unicorn-60172.exe (PID: 7632)
      • Unicorn-6503.exe (PID: 7524)
      • Unicorn-64427.exe (PID: 7656)
      • Unicorn-12870.exe (PID: 7648)
      • Unicorn-20292.exe (PID: 8100)
      • Unicorn-47536.exe (PID: 7664)
      • Unicorn-20846.exe (PID: 5436)
      • Unicorn-26161.exe (PID: 7816)
      • Unicorn-1599.exe (PID: 5608)
      • Unicorn-1407.exe (PID: 3140)
      • Unicorn-9383.exe (PID: 7732)
      • Unicorn-40711.exe (PID: 7712)
      • Unicorn-47448.exe (PID: 7748)
      • Unicorn-31858.exe (PID: 7932)
      • Unicorn-22451.exe (PID: 8028)
      • Unicorn-47136.exe (PID: 7704)
      • Unicorn-52876.exe (PID: 8212)
      • Unicorn-36348.exe (PID: 8224)
      • Unicorn-62943.exe (PID: 8232)
      • Unicorn-46415.exe (PID: 8252)
      • Unicorn-57920.exe (PID: 8324)
      • Unicorn-54007.exe (PID: 8352)
      • Unicorn-28948.exe (PID: 8380)
      • Unicorn-34738.exe (PID: 8412)
      • Unicorn-3820.exe (PID: 8444)
      • Unicorn-51672.exe (PID: 8796)
      • Unicorn-18018.exe (PID: 8812)
      • Unicorn-29908.exe (PID: 8428)
      • Unicorn-59648.exe (PID: 8508)
      • Unicorn-59383.exe (PID: 8532)
      • Unicorn-26784.exe (PID: 8548)
      • Unicorn-63540.exe (PID: 8588)
      • Unicorn-56249.exe (PID: 8664)
      • Unicorn-51096.exe (PID: 8652)
      • Unicorn-42736.exe (PID: 8696)
      • Unicorn-52248.exe (PID: 8720)
      • Unicorn-39420.exe (PID: 8788)
      • Unicorn-51480.exe (PID: 8496)
      • Unicorn-57100.exe (PID: 8868)
      • Unicorn-19886.exe (PID: 8900)
      • Unicorn-16430.exe (PID: 8960)
      • Unicorn-17555.exe (PID: 8452)
      • Unicorn-64427.exe (PID: 9020)
      • Unicorn-14021.exe (PID: 8892)
      • Unicorn-2597.exe (PID: 9108)
      • Unicorn-61820.exe (PID: 9132)
      • Unicorn-12235.exe (PID: 9196)
      • Unicorn-48098.exe (PID: 2192)
      • Unicorn-12817.exe (PID: 7376)
      • Unicorn-38084.exe (PID: 7460)
      • Unicorn-55660.exe (PID: 9220)
      • Unicorn-50507.exe (PID: 9240)
      • Unicorn-30419.exe (PID: 9300)
      • Unicorn-26194.exe (PID: 864)
      • Unicorn-5027.exe (PID: 4560)
      • Unicorn-54399.exe (PID: 9100)
      • Unicorn-56703.exe (PID: 9400)
      • Unicorn-2479.exe (PID: 9444)
      • Unicorn-27241.exe (PID: 9908)
      • Unicorn-56641.exe (PID: 9456)
      • Unicorn-20714.exe (PID: 9484)
      • Unicorn-55764.exe (PID: 9428)
      • Unicorn-10647.exe (PID: 9436)
      • Unicorn-61000.exe (PID: 9524)
      • Unicorn-56532.exe (PID: 9580)
      • Unicorn-28882.exe (PID: 9516)
      • Unicorn-14103.exe (PID: 10008)
      • Unicorn-56108.exe (PID: 9620)
      • Unicorn-33180.exe (PID: 9640)
      • Unicorn-19584.exe (PID: 9600)
      • Unicorn-33734.exe (PID: 9660)
      • Unicorn-38608.exe (PID: 10044)
      • Unicorn-26718.exe (PID: 10172)
      • Unicorn-14980.exe (PID: 10068)
      • Unicorn-2391.exe (PID: 6824)
      • Unicorn-63844.exe (PID: 1616)
      • Unicorn-35448.exe (PID: 10204)
      • Unicorn-18920.exe (PID: 10220)
      • Unicorn-7222.exe (PID: 10232)
      • Unicorn-41523.exe (PID: 10180)
      • Unicorn-42500.exe (PID: 10196)
      • Unicorn-48238.exe (PID: 9832)
      • Unicorn-29480.exe (PID: 9872)
      • Unicorn-34633.exe (PID: 9880)
      • Unicorn-40854.exe (PID: 10332)
      • Unicorn-47627.exe (PID: 10420)
      • Unicorn-59931.exe (PID: 10244)
      • Unicorn-64810.exe (PID: 10500)
      • Unicorn-48660.exe (PID: 10592)
      • Unicorn-37346.exe (PID: 10528)
      • Unicorn-41430.exe (PID: 10552)
      • Unicorn-17502.exe (PID: 10772)
      • Unicorn-31045.exe (PID: 10816)
      • Unicorn-14517.exe (PID: 10868)
      • Unicorn-18654.exe (PID: 10888)
      • Unicorn-11777.exe (PID: 10924)
      • Unicorn-32389.exe (PID: 10904)
      • Unicorn-47602.exe (PID: 11068)
      • Unicorn-52811.exe (PID: 10676)
      • Unicorn-15744.exe (PID: 11300)
      • Unicorn-41871.exe (PID: 11340)
      • Unicorn-30626.exe (PID: 11524)
      • Unicorn-15359.exe (PID: 10784)
      • Unicorn-11742.exe (PID: 12108)
      • Unicorn-50248.exe (PID: 12596)
      • Unicorn-41888.exe (PID: 12660)
      • Unicorn-36386.exe (PID: 12068)
      • Unicorn-6335.exe (PID: 12216)
      • Unicorn-30137.exe (PID: 12280)
      • Unicorn-13669.exe (PID: 2968)
      • Unicorn-26629.exe (PID: 12472)
      • Unicorn-57435.exe (PID: 12240)
      • Unicorn-25168.exe (PID: 12768)
      • Unicorn-58918.exe (PID: 12328)
      • Unicorn-53792.exe (PID: 12536)
      • Unicorn-2562.exe (PID: 12860)
      • Unicorn-64783.exe (PID: 12364)
      • Unicorn-16297.exe (PID: 12928)
      • Unicorn-65048.exe (PID: 12980)
      • Unicorn-52775.exe (PID: 12392)
      • Unicorn-14342.exe (PID: 13912)
      • Unicorn-34031.exe (PID: 13120)
      • Unicorn-2562.exe (PID: 12876)
      • Unicorn-5302.exe (PID: 12752)
      • Unicorn-44354.exe (PID: 13584)
      • Unicorn-38986.exe (PID: 13596)
      • Unicorn-34296.exe (PID: 13128)
      • Unicorn-47950.exe (PID: 14260)
      • Unicorn-47950.exe (PID: 14268)
      • Unicorn-51504.exe (PID: 4056)
      • Unicorn-10228.exe (PID: 13656)
      • Unicorn-45780.exe (PID: 13336)
      • Unicorn-18181.exe (PID: 13664)
      • Unicorn-2562.exe (PID: 12908)
      • Unicorn-53668.exe (PID: 13796)
      • Unicorn-59459.exe (PID: 13856)
      • Unicorn-14342.exe (PID: 13888)
      • Unicorn-26860.exe (PID: 13304)
      • Unicorn-62531.exe (PID: 13956)
      • Unicorn-43912.exe (PID: 14444)
      • Unicorn-14939.exe (PID: 14532)
      • Unicorn-19578.exe (PID: 14548)
      • Unicorn-46159.exe (PID: 14664)
      • Unicorn-33313.exe (PID: 14540)
      • Unicorn-2333.exe (PID: 14724)
      • Unicorn-33357.exe (PID: 14960)
      • Unicorn-17976.exe (PID: 15196)
      • Unicorn-27991.exe (PID: 15396)
      • Unicorn-2333.exe (PID: 14748)
      • Unicorn-6558.exe (PID: 5216)
      • Unicorn-9018.exe (PID: 14840)
      • Unicorn-3418.exe (PID: 14788)
      • Unicorn-27960.exe (PID: 14624)
      • Unicorn-22755.exe (PID: 15272)
      • Unicorn-33277.exe (PID: 16764)
      • Unicorn-18058.exe (PID: 18164)
      • Unicorn-20384.exe (PID: 3028)
      • Unicorn-63646.exe (PID: 17380)
      • Unicorn-63646.exe (PID: 17456)
      • Unicorn-63646.exe (PID: 17340)
      • Unicorn-44850.exe (PID: 780)
      • Unicorn-49911.exe (PID: 16840)
      • Unicorn-63646.exe (PID: 1052)
      • Unicorn-60846.exe (PID: 16416)
      • Unicorn-22937.exe (PID: 16960)
      • Unicorn-11758.exe (PID: 16556)
      • Unicorn-9350.exe (PID: 17868)
      • Unicorn-15833.exe (PID: 17980)

    • The sample compiled with chinese language support

      • 1 (1279).exe (PID: 7340)
      • Unicorn-7987.exe (PID: 5376)
      • Unicorn-63784.exe (PID: 8044)
      • Unicorn-3166.exe (PID: 2432)
      • Unicorn-13902.exe (PID: 7752)
      • Unicorn-43156.exe (PID: 8104)
      • Unicorn-60084.exe (PID: 4380)
      • Unicorn-21281.exe (PID: 5956)
      • Unicorn-47323.exe (PID: 6668)
      • Unicorn-22064.exe (PID: 8128)
      • Unicorn-61516.exe (PID: 7596)
      • Unicorn-62943.exe (PID: 8232)
      • Unicorn-51900.exe (PID: 5072)
      • Unicorn-6695.exe (PID: 616)
      • Unicorn-46482.exe (PID: 5972)
      • Unicorn-35668.exe (PID: 3888)
      • Unicorn-447.exe (PID: 8092)
      • Unicorn-27043.exe (PID: 4228)
      • Unicorn-27241.exe (PID: 9908)
      • Unicorn-27241.exe (PID: 9900)
      • Unicorn-5314.exe (PID: 8116)
      • Unicorn-49212.exe (PID: 1184)
      • Unicorn-25012.exe (PID: 9960)
      • Unicorn-46747.exe (PID: 6652)
      • Unicorn-26305.exe (PID: 5228)
      • Unicorn-34738.exe (PID: 8412)
      • Unicorn-53976.exe (PID: 7564)
      • Unicorn-28961.exe (PID: 6228)
      • Unicorn-27286.exe (PID: 7296)
      • Unicorn-5797.exe (PID: 9388)
      • Unicorn-48091.exe (PID: 7660)
      • Unicorn-12870.exe (PID: 7648)
      • Unicorn-6731.exe (PID: 8060)
      • Unicorn-18808.exe (PID: 8480)
      • Unicorn-56703.exe (PID: 9400)
      • Unicorn-2699.exe (PID: 6148)
      • Unicorn-16348.exe (PID: 1452)
      • Unicorn-2479.exe (PID: 9444)
      • Unicorn-62106.exe (PID: 8184)
      • Unicorn-56532.exe (PID: 9580)
      • Unicorn-58452.exe (PID: 9820)
      • Unicorn-60172.exe (PID: 7632)
      • Unicorn-55935.exe (PID: 9272)
      • Unicorn-2419.exe (PID: 5244)
      • Unicorn-31754.exe (PID: 7240)
      • Unicorn-53082.exe (PID: 7228)
      • Unicorn-730.exe (PID: 9168)
      • Unicorn-51672.exe (PID: 8796)
      • Unicorn-18018.exe (PID: 8812)
      • Unicorn-16430.exe (PID: 8960)
      • Unicorn-6180.exe (PID: 8804)
      • Unicorn-62474.exe (PID: 11152)
      • Unicorn-34581.exe (PID: 1012)
      • Unicorn-39650.exe (PID: 11172)
      • Unicorn-286.exe (PID: 8908)
      • Unicorn-30419.exe (PID: 9300)
      • Unicorn-54923.exe (PID: 9316)
      • Unicorn-25040.exe (PID: 8012)
      • Unicorn-17557.exe (PID: 2852)
      • Unicorn-40711.exe (PID: 7712)
      • Unicorn-1599.exe (PID: 5608)
      • Unicorn-59324.exe (PID: 5232)
      • Unicorn-64928.exe (PID: 9996)
      • Unicorn-16208.exe (PID: 1568)
      • Unicorn-20714.exe (PID: 9484)
      • Unicorn-44399.exe (PID: 9492)
      • Unicorn-14980.exe (PID: 10068)
      • Unicorn-28195.exe (PID: 8140)
      • Unicorn-62019.exe (PID: 6712)
      • Unicorn-11251.exe (PID: 664)
      • Unicorn-21356.exe (PID: 8240)
      • Unicorn-64427.exe (PID: 7656)
      • Unicorn-44900.exe (PID: 6516)
      • Unicorn-25453.exe (PID: 516)
      • Unicorn-8542.exe (PID: 4724)
      • Unicorn-20607.exe (PID: 8076)
      • Unicorn-47271.exe (PID: 7616)
      • Unicorn-47536.exe (PID: 7664)
      • Unicorn-64707.exe (PID: 8180)
      • Unicorn-35366.exe (PID: 8344)
      • Unicorn-50507.exe (PID: 9240)
      • Unicorn-55764.exe (PID: 9428)
      • Unicorn-17181.exe (PID: 6108)
      • Unicorn-20292.exe (PID: 8100)
      • Unicorn-40854.exe (PID: 10332)
      • Unicorn-56723.exe (PID: 9680)
      • Unicorn-57920.exe (PID: 8324)
      • Unicorn-59215.exe (PID: 11548)
      • Unicorn-30626.exe (PID: 11524)
      • Unicorn-55131.exe (PID: 11540)
      • Unicorn-1099.exe (PID: 11656)
      • Unicorn-57226.exe (PID: 9328)
      • Unicorn-10099.exe (PID: 7312)
      • Unicorn-9383.exe (PID: 7732)
      • Unicorn-65429.exe (PID: 1276)
      • Unicorn-2621.exe (PID: 8108)
      • Unicorn-2486.exe (PID: 7336)
      • Unicorn-3239.exe (PID: 9036)
      • Unicorn-47136.exe (PID: 7704)
      • Unicorn-44088.exe (PID: 9608)
      • Unicorn-35448.exe (PID: 10204)
      • Unicorn-51459.exe (PID: 7924)
      • Unicorn-17555.exe (PID: 8452)
      • Unicorn-31858.exe (PID: 7932)
      • Unicorn-26732.exe (PID: 5576)
      • Unicorn-3820.exe (PID: 8444)
      • Unicorn-59383.exe (PID: 8532)
      • Unicorn-50248.exe (PID: 12596)
      • Unicorn-3787.exe (PID: 12568)
      • Unicorn-41940.exe (PID: 11664)
      • Unicorn-41888.exe (PID: 12660)
      • Unicorn-29908.exe (PID: 8428)
      • Unicorn-21498.exe (PID: 11416)
      • Unicorn-38084.exe (PID: 7460)
      • Unicorn-5250.exe (PID: 10756)
      • Unicorn-51096.exe (PID: 8652)
      • Unicorn-50712.exe (PID: 8388)
      • Unicorn-7222.exe (PID: 10232)
      • Unicorn-30056.exe (PID: 10320)
      • Unicorn-12235.exe (PID: 9196)
      • Unicorn-59648.exe (PID: 8508)
      • Unicorn-25446.exe (PID: 9348)
      • Unicorn-14021.exe (PID: 8892)
      • Unicorn-59220.exe (PID: 9988)
      • Unicorn-34633.exe (PID: 9880)
      • Unicorn-13994.exe (PID: 10252)
      • Unicorn-37103.exe (PID: 10712)
      • Unicorn-65048.exe (PID: 12980)
      • Unicorn-41871.exe (PID: 11340)
      • Unicorn-42300.exe (PID: 5512)
      • Unicorn-64427.exe (PID: 9020)
      • Unicorn-57292.exe (PID: 2148)
      • Unicorn-31341.exe (PID: 11372)
      • Unicorn-2391.exe (PID: 6824)
      • Unicorn-56249.exe (PID: 8664)
      • Unicorn-18742.exe (PID: 10056)
      • Unicorn-42352.exe (PID: 8404)
      • Unicorn-15557.exe (PID: 6988)
      • Unicorn-20706.exe (PID: 8924)
      • Unicorn-6503.exe (PID: 7524)
      • Unicorn-12817.exe (PID: 7376)
      • Unicorn-14103.exe (PID: 10008)
      • Unicorn-59568.exe (PID: 7860)
      • Unicorn-14342.exe (PID: 13912)
      • Unicorn-14342.exe (PID: 13896)
      • Unicorn-47124.exe (PID: 10100)
      • Unicorn-40218.exe (PID: 1628)
      • Unicorn-18920.exe (PID: 10220)
      • Unicorn-50963.exe (PID: 10656)
      • Unicorn-11777.exe (PID: 10924)
      • Unicorn-30226.exe (PID: 15340)
      • Unicorn-47602.exe (PID: 11068)
      • Unicorn-64427.exe (PID: 9028)
      • Unicorn-22277.exe (PID: 6272)
      • Unicorn-29480.exe (PID: 9872)
      • Unicorn-52793.exe (PID: 7520)
      • Unicorn-64427.exe (PID: 9012)
      • Unicorn-52876.exe (PID: 8212)
      • Unicorn-63372.exe (PID: 3620)
      • Unicorn-18654.exe (PID: 10888)
      • Unicorn-46415.exe (PID: 8252)
      • Unicorn-42736.exe (PID: 8696)
      • Unicorn-51480.exe (PID: 8496)
      • Unicorn-27396.exe (PID: 6724)
      • Unicorn-41430.exe (PID: 10552)
      • Unicorn-39420.exe (PID: 8788)
      • Unicorn-33416.exe (PID: 8284)
      • Unicorn-14266.exe (PID: 4996)
      • Unicorn-28128.exe (PID: 8972)
      • Unicorn-48098.exe (PID: 2192)
      • Unicorn-26718.exe (PID: 10172)
      • Unicorn-24058.exe (PID: 4200)
      • Unicorn-51504.exe (PID: 4056)
      • Unicorn-20352.exe (PID: 9780)
      • Unicorn-3903.exe (PID: 5720)
      • Unicorn-57100.exe (PID: 8868)
      • Unicorn-13351.exe (PID: 11648)
      • Unicorn-15826.exe (PID: 12120)
      • Unicorn-28882.exe (PID: 9516)
      • Unicorn-14342.exe (PID: 13904)
      • Unicorn-48447.exe (PID: 10440)
      • Unicorn-19886.exe (PID: 8900)
      • Unicorn-45183.exe (PID: 12308)
      • Unicorn-15603.exe (PID: 10340)
      • Unicorn-39458.exe (PID: 12760)
      • Unicorn-1106.exe (PID: 8332)
      • Unicorn-54399.exe (PID: 9100)
      • Unicorn-2333.exe (PID: 14748)
      • Unicorn-56108.exe (PID: 9620)
      • Unicorn-12095.exe (PID: 10560)
      • Unicorn-48940.exe (PID: 9792)
      • Unicorn-62531.exe (PID: 13956)
      • Unicorn-26784.exe (PID: 8548)
      • Unicorn-5027.exe (PID: 4560)
      • Unicorn-2443.exe (PID: 12184)
      • Unicorn-13558.exe (PID: 11024)
      • Unicorn-13497.exe (PID: 12816)
      • Unicorn-30477.exe (PID: 16772)
      • Unicorn-33277.exe (PID: 16764)
      • Unicorn-63540.exe (PID: 8588)
      • Unicorn-57730.exe (PID: 15308)
      • Unicorn-26194.exe (PID: 864)
      • Unicorn-45006.exe (PID: 3828)
      • Unicorn-20544.exe (PID: 9736)
      • Unicorn-51428.exe (PID: 16780)
      • Unicorn-33180.exe (PID: 9640)
      • Unicorn-36348.exe (PID: 8224)
      • Unicorn-57544.exe (PID: 9152)
      • Unicorn-9937.exe (PID: 8884)
      • Unicorn-19584.exe (PID: 9600)
      • Unicorn-27570.exe (PID: 3804)
      • Unicorn-57311.exe (PID: 7288)
      • Unicorn-1594.exe (PID: 12044)
      • Unicorn-47448.exe (PID: 7748)
      • Unicorn-46326.exe (PID: 13328)
      • Unicorn-1843.exe (PID: 7232)
      • Unicorn-35476.exe (PID: 7600)
      • Unicorn-34609.exe (PID: 7048)
      • Unicorn-27198.exe (PID: 4944)
      • Unicorn-1407.exe (PID: 3140)
      • Unicorn-38394.exe (PID: 15316)
      • Unicorn-60172.exe (PID: 7608)
      • Unicorn-17518.exe (PID: 7496)
      • Unicorn-18128.exe (PID: 4436)
      • Unicorn-43554.exe (PID: 4180)
      • Unicorn-20846.exe (PID: 5436)
      • Unicorn-4939.exe (PID: 12692)
      • Unicorn-27308.exe (PID: 7624)
      • Unicorn-8335.exe (PID: 6480)
      • Unicorn-23032.exe (PID: 728)
      • Unicorn-61739.exe (PID: 8876)
      • Unicorn-34884.exe (PID: 7920)
      • Unicorn-54104.exe (PID: 6344)
      • Unicorn-22451.exe (PID: 8028)
      • Unicorn-15744.exe (PID: 11300)
      • Unicorn-10647.exe (PID: 9436)
      • Unicorn-28948.exe (PID: 8380)
      • Unicorn-48238.exe (PID: 9832)
      • Unicorn-65045.exe (PID: 7736)
      • Unicorn-32419.exe (PID: 6372)
      • Unicorn-33416.exe (PID: 8292)
      • Unicorn-5633.exe (PID: 12264)
      • Unicorn-54007.exe (PID: 8352)
      • Unicorn-28437.exe (PID: 10700)
      • Unicorn-36876.exe (PID: 19864)
      • Unicorn-43284.exe (PID: 12208)

    • Create files in a temporary directory

      • Unicorn-20607.exe (PID: 8076)
      • 1 (1279).exe (PID: 7340)
      • Unicorn-6731.exe (PID: 8060)
      • Unicorn-25040.exe (PID: 8012)
      • Unicorn-5314.exe (PID: 8116)
      • Unicorn-28195.exe (PID: 8140)
      • Unicorn-2621.exe (PID: 8108)
      • Unicorn-32419.exe (PID: 6372)
      • Unicorn-10099.exe (PID: 7312)
      • Unicorn-43156.exe (PID: 8104)
      • Unicorn-26305.exe (PID: 5228)
      • Unicorn-3903.exe (PID: 5720)
      • Unicorn-22064.exe (PID: 8128)
      • Unicorn-11251.exe (PID: 664)
      • Unicorn-7987.exe (PID: 5376)
      • Unicorn-8542.exe (PID: 4724)
      • Unicorn-27396.exe (PID: 6724)
      • Unicorn-64707.exe (PID: 8180)
      • Unicorn-53976.exe (PID: 7564)
      • Unicorn-16348.exe (PID: 1452)
      • Unicorn-27043.exe (PID: 4228)
      • Unicorn-15557.exe (PID: 6988)
      • Unicorn-1843.exe (PID: 7232)
      • Unicorn-26161.exe (PID: 7816)
      • Unicorn-27308.exe (PID: 7624)
      • Unicorn-42300.exe (PID: 5512)
      • Unicorn-12870.exe (PID: 7648)
      • Unicorn-47323.exe (PID: 6668)
      • Unicorn-48091.exe (PID: 7660)
      • Unicorn-20846.exe (PID: 5436)
      • Unicorn-61516.exe (PID: 7596)
      • Unicorn-57292.exe (PID: 2148)
      • Unicorn-34609.exe (PID: 7048)
      • Unicorn-2419.exe (PID: 5244)
      • Unicorn-34581.exe (PID: 1012)
      • Unicorn-447.exe (PID: 8092)
      • Unicorn-6503.exe (PID: 7524)
      • Unicorn-23032.exe (PID: 728)
      • Unicorn-18128.exe (PID: 4436)
      • Unicorn-27198.exe (PID: 4944)
      • Unicorn-22277.exe (PID: 6272)
      • Unicorn-54671.exe (PID: 6512)
      • Unicorn-34884.exe (PID: 7920)
      • Unicorn-21356.exe (PID: 8240)
      • Unicorn-49212.exe (PID: 1184)
      • Unicorn-19502.exe (PID: 6872)
      • Unicorn-47536.exe (PID: 7664)
      • Unicorn-25453.exe (PID: 516)
      • Unicorn-53082.exe (PID: 7228)
      • Unicorn-2486.exe (PID: 7336)
      • Unicorn-51869.exe (PID: 5776)
      • Unicorn-18018.exe (PID: 8812)
      • Unicorn-43554.exe (PID: 4180)
      • Unicorn-60172.exe (PID: 7608)
      • Unicorn-33416.exe (PID: 8292)
      • Unicorn-35366.exe (PID: 8344)
      • Unicorn-46415.exe (PID: 8252)
      • Unicorn-359.exe (PID: 8364)
      • Unicorn-16208.exe (PID: 1568)
      • Unicorn-50712.exe (PID: 8388)
      • Unicorn-26732.exe (PID: 5576)
      • Unicorn-52876.exe (PID: 8212)
      • Unicorn-8335.exe (PID: 6480)
      • Unicorn-48098.exe (PID: 2192)
      • Unicorn-39420.exe (PID: 8788)
      • Unicorn-28961.exe (PID: 6228)
      • Unicorn-24058.exe (PID: 4200)
      • Unicorn-60084.exe (PID: 4380)
      • Unicorn-6695.exe (PID: 616)
      • Unicorn-27241.exe (PID: 9900)
      • Unicorn-34738.exe (PID: 8412)
      • Unicorn-27286.exe (PID: 7296)
      • Unicorn-56532.exe (PID: 9580)
      • Unicorn-30419.exe (PID: 9300)
      • Unicorn-58452.exe (PID: 9820)
      • Unicorn-60172.exe (PID: 7632)
      • Unicorn-2699.exe (PID: 6148)
      • Unicorn-16430.exe (PID: 8960)
      • Unicorn-286.exe (PID: 8908)
      • Unicorn-50507.exe (PID: 9240)
      • Unicorn-62474.exe (PID: 11152)
      • Unicorn-40711.exe (PID: 7712)
      • Unicorn-62106.exe (PID: 8184)
      • Unicorn-17557.exe (PID: 2852)
      • Unicorn-64928.exe (PID: 9996)
      • Unicorn-20714.exe (PID: 9484)
      • Unicorn-44399.exe (PID: 9492)
      • Unicorn-64427.exe (PID: 7656)
      • Unicorn-18808.exe (PID: 8480)
      • Unicorn-20292.exe (PID: 8100)
      • Unicorn-1407.exe (PID: 3140)
      • Unicorn-57920.exe (PID: 8324)
      • Unicorn-51672.exe (PID: 8796)
      • Unicorn-56703.exe (PID: 9400)
      • Unicorn-55131.exe (PID: 11540)
      • Unicorn-35448.exe (PID: 10204)
      • Unicorn-51459.exe (PID: 7924)
      • Unicorn-31858.exe (PID: 7932)
      • Unicorn-27241.exe (PID: 9908)
      • Unicorn-41888.exe (PID: 12660)
      • Unicorn-59383.exe (PID: 8532)
      • Unicorn-730.exe (PID: 9168)
      • Unicorn-7222.exe (PID: 10232)
      • Unicorn-13994.exe (PID: 10252)
      • Unicorn-34633.exe (PID: 9880)
      • Unicorn-64427.exe (PID: 9020)
      • Unicorn-41871.exe (PID: 11340)
      • Unicorn-30056.exe (PID: 10320)
      • Unicorn-2391.exe (PID: 6824)
      • Unicorn-42352.exe (PID: 8404)
      • Unicorn-59324.exe (PID: 5232)
      • Unicorn-13902.exe (PID: 7752)
      • Unicorn-56249.exe (PID: 8664)
      • Unicorn-20706.exe (PID: 8924)
      • Unicorn-14103.exe (PID: 10008)
      • Unicorn-59568.exe (PID: 7860)
      • Unicorn-18742.exe (PID: 10056)
      • Unicorn-59220.exe (PID: 9988)
      • Unicorn-64427.exe (PID: 9012)
      • Unicorn-33416.exe (PID: 8284)
      • Unicorn-29480.exe (PID: 9872)
      • Unicorn-9383.exe (PID: 7732)
      • Unicorn-41430.exe (PID: 10552)
      • Unicorn-35668.exe (PID: 3888)
      • Unicorn-62531.exe (PID: 13956)
      • Unicorn-57100.exe (PID: 8868)
      • Unicorn-13497.exe (PID: 12816)

    • Creates files or folders in the user directory

      • BackgroundTransferHost.exe (PID: 4980)

    • Checks proxy server information

      • BackgroundTransferHost.exe (PID: 4980)

    • Reads security settings of Internet Explorer

      • BackgroundTransferHost.exe (PID: 4980)
      • BackgroundTransferHost.exe (PID: 6148)
      • BackgroundTransferHost.exe (PID: 632)

    • Reads the software policy settings

      • BackgroundTransferHost.exe (PID: 4980)
      • slui.exe (PID: 7400)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable Microsoft Visual Basic 6 (90.6)
.exe | Win32 Executable (generic) (4.9)
.exe | Generic Win/DOS Executable (2.2)
.exe | DOS Executable Generic (2.2)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:01:19 13:34:56+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 299008
UninitializedDataSize: -
EntryPoint: 0x13d4
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
InternalName: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
854
Monitored processes
720
Malicious processes
101
Suspicious processes
80

Behavior graph

Click at the process to see the details
start 1 (1279).exe sppextcomobj.exe no specs slui.exe unicorn-25040.exe unicorn-6731.exe unicorn-20607.exe unicorn-2621.exe unicorn-5314.exe unicorn-22064.exe unicorn-28195.exe backgroundtransferhost.exe no specs backgroundtransferhost.exe unicorn-49212.exe unicorn-62019.exe unicorn-16348.exe unicorn-32419.exe unicorn-7987.exe unicorn-3903.exe unicorn-22277.exe unicorn-8542.exe backgroundtransferhost.exe no specs backgroundtransferhost.exe no specs backgroundtransferhost.exe no specs unicorn-43156.exe unicorn-26305.exe unicorn-10099.exe unicorn-2486.exe unicorn-11251.exe unicorn-24058.exe unicorn-27396.exe unicorn-17181.exe unicorn-23312.exe unicorn-46747.exe unicorn-46482.exe unicorn-51900.exe unicorn-2699.exe unicorn-62106.exe unicorn-64707.exe unicorn-34609.exe unicorn-57292.exe unicorn-53976.exe unicorn-27286.exe unicorn-42300.exe unicorn-15557.exe unicorn-35668.exe unicorn-25453.exe unicorn-35476.exe unicorn-26732.exe unicorn-27308.exe unicorn-27043.exe unicorn-1843.exe unicorn-47323.exe unicorn-53082.exe unicorn-60172.exe unicorn-60172.exe unicorn-6695.exe unicorn-23032.exe unicorn-3166.exe unicorn-14266.exe unicorn-13902.exe unicorn-19502.exe unicorn-31754.exe unicorn-47271.exe unicorn-47536.exe unicorn-48091.exe unicorn-2419.exe unicorn-6503.exe unicorn-64427.exe unicorn-26161.exe unicorn-28961.exe unicorn-61516.exe unicorn-12870.exe unicorn-20292.exe unicorn-16208.exe unicorn-34581.exe unicorn-20846.exe unicorn-54671.exe unicorn-447.exe unicorn-17557.exe unicorn-18128.exe unicorn-1599.exe unicorn-1407.exe unicorn-34884.exe unicorn-47136.exe unicorn-9383.exe unicorn-65045.exe unicorn-52793.exe unicorn-31858.exe unicorn-51459.exe unicorn-47448.exe unicorn-63784.exe unicorn-40711.exe unicorn-27198.exe unicorn-43554.exe unicorn-65429.exe unicorn-22451.exe unicorn-21281.exe unicorn-40218.exe unicorn-60084.exe unicorn-8335.exe unicorn-51869.exe unicorn-44900.exe unicorn-52876.exe unicorn-36348.exe unicorn-62943.exe unicorn-21356.exe unicorn-46415.exe unicorn-33416.exe unicorn-33416.exe unicorn-33416.exe unicorn-57920.exe unicorn-1106.exe unicorn-35366.exe unicorn-54007.exe unicorn-359.exe unicorn-61580.exe no specs unicorn-28948.exe unicorn-50712.exe unicorn-42352.exe unicorn-34738.exe unicorn-29908.exe unicorn-3820.exe unicorn-17555.exe unicorn-18808.exe unicorn-51480.exe unicorn-59648.exe unicorn-59383.exe unicorn-26784.exe unicorn-63540.exe unicorn-31230.exe no specs unicorn-51096.exe unicorn-56249.exe unicorn-42736.exe unicorn-52248.exe unicorn-39420.exe unicorn-51672.exe unicorn-6180.exe unicorn-18018.exe unicorn-57100.exe unicorn-61739.exe unicorn-9937.exe unicorn-14021.exe unicorn-19886.exe unicorn-286.exe unicorn-20706.exe unicorn-16430.exe unicorn-28128.exe unicorn-64427.exe unicorn-64427.exe unicorn-64427.exe unicorn-3239.exe unicorn-54399.exe unicorn-2597.exe no specs unicorn-61820.exe no specs unicorn-57544.exe unicorn-730.exe unicorn-12235.exe unicorn-12817.exe unicorn-38084.exe unicorn-48098.exe unicorn-26194.exe unicorn-5027.exe unicorn-55660.exe no specs unicorn-4835.exe no specs unicorn-50507.exe unicorn-55935.exe unicorn-30419.exe unicorn-62786.exe no specs unicorn-54923.exe unicorn-57226.exe unicorn-25446.exe unicorn-5797.exe unicorn-56703.exe unicorn-55764.exe unicorn-10647.exe unicorn-2479.exe unicorn-56641.exe no specs unicorn-20714.exe unicorn-44399.exe unicorn-38534.exe no specs unicorn-28882.exe unicorn-61000.exe no specs unicorn-56532.exe unicorn-19584.exe unicorn-44088.exe unicorn-56108.exe unicorn-44643.exe no specs unicorn-33180.exe unicorn-33734.exe no specs unicorn-56723.exe unicorn-20544.exe unicorn-53216.exe no specs unicorn-20352.exe unicorn-48940.exe unicorn-58452.exe unicorn-48238.exe unicorn-29672.exe no specs unicorn-29480.exe unicorn-34633.exe unicorn-27241.exe unicorn-27241.exe unicorn-25012.exe unicorn-59220.exe unicorn-64928.exe unicorn-14103.exe unicorn-38608.exe no specs unicorn-18742.exe unicorn-14980.exe unicorn-26718.exe unicorn-41523.exe no specs unicorn-38970.exe no specs unicorn-42500.exe no specs unicorn-35448.exe unicorn-18920.exe unicorn-7222.exe unicorn-63844.exe no specs unicorn-2391.exe unicorn-59568.exe unicorn-56361.exe no specs unicorn-47124.exe unicorn-59931.exe no specs unicorn-13994.exe unicorn-59376.exe no specs unicorn-30056.exe unicorn-40854.exe unicorn-15603.exe unicorn-64420.exe no specs unicorn-47627.exe no specs unicorn-2775.exe no specs unicorn-48447.exe unicorn-64810.exe no specs unicorn-53875.exe no specs unicorn-37346.exe no specs unicorn-48282.exe no specs unicorn-56947.exe no specs unicorn-41430.exe unicorn-12095.exe unicorn-48660.exe no specs unicorn-3543.exe no specs unicorn-28437.exe unicorn-37103.exe unicorn-18985.exe no specs unicorn-5250.exe unicorn-5250.exe no specs unicorn-17502.exe no specs unicorn-42006.exe no specs unicorn-31045.exe no specs unicorn-14517.exe no specs unicorn-8395.exe no specs unicorn-18654.exe unicorn-54856.exe no specs unicorn-32389.exe no specs unicorn-11777.exe unicorn-38063.exe no specs unicorn-38063.exe no specs unicorn-38063.exe no specs unicorn-58748.exe no specs unicorn-58483.exe no specs unicorn-50943.exe no specs unicorn-13558.exe unicorn-50196.exe no specs unicorn-47602.exe unicorn-62758.exe no specs unicorn-62474.exe unicorn-39650.exe unicorn-59324.exe unicorn-8077.exe no specs unicorn-50963.exe unicorn-39589.exe no specs unicorn-15359.exe no specs unicorn-25373.exe no specs unicorn-46946.exe no specs unicorn-52811.exe no specs unicorn-15744.exe unicorn-31317.exe no specs unicorn-34117.exe no specs unicorn-20382.exe no specs unicorn-61737.exe no specs unicorn-41871.exe unicorn-31341.exe unicorn-1078.exe no specs unicorn-21498.exe unicorn-30626.exe unicorn-55131.exe unicorn-59215.exe unicorn-10014.exe no specs unicorn-29880.exe no specs unicorn-13351.exe unicorn-1099.exe unicorn-41940.exe unicorn-35588.exe no specs unicorn-715.exe no specs unicorn-1594.exe unicorn-36386.exe no specs unicorn-42251.exe no specs unicorn-11742.exe no specs unicorn-15826.exe unicorn-10995.exe no specs unicorn-64088.exe no specs unicorn-8757.exe no specs unicorn-35308.exe no specs unicorn-2443.exe unicorn-43284.exe unicorn-6335.exe no specs unicorn-56615.exe no specs unicorn-39582.exe no specs unicorn-57435.exe no specs unicorn-57435.exe no specs unicorn-5633.exe unicorn-11763.exe no specs unicorn-30137.exe no specs unicorn-16402.exe no specs unicorn-2204.exe no specs unicorn-13669.exe no specs unicorn-50750.exe no specs unicorn-56118.exe no specs unicorn-45183.exe unicorn-28462.exe no specs unicorn-58918.exe no specs unicorn-56118.exe no specs unicorn-45183.exe no specs unicorn-64783.exe no specs unicorn-52775.exe no specs unicorn-13278.exe no specs unicorn-26629.exe no specs unicorn-48639.exe no specs unicorn-53792.exe no specs unicorn-3787.exe unicorn-50248.exe unicorn-41888.exe unicorn-46527.exe no specs unicorn-4939.exe unicorn-43734.exe no specs unicorn-5302.exe no specs unicorn-39458.exe unicorn-25168.exe no specs unicorn-29252.exe no specs unicorn-8639.exe no specs unicorn-14027.exe no specs unicorn-13497.exe unicorn-47487.exe no specs unicorn-61222.exe no specs unicorn-47487.exe no specs unicorn-37014.exe no specs unicorn-2562.exe no specs unicorn-2562.exe no specs unicorn-2562.exe no specs unicorn-2562.exe no specs unicorn-2562.exe no specs unicorn-2562.exe no specs unicorn-2562.exe no specs unicorn-2562.exe no specs unicorn-16297.exe no specs unicorn-64783.exe no specs unicorn-65048.exe unicorn-33506.exe no specs unicorn-22162.exe no specs unicorn-28165.exe no specs unicorn-34031.exe no specs unicorn-34296.exe no specs unicorn-58800.exe no specs unicorn-34031.exe no specs unicorn-26860.exe no specs unicorn-46326.exe unicorn-45780.exe no specs unicorn-15930.exe no specs unicorn-7762.exe no specs unicorn-44327.exe no specs unicorn-44354.exe no specs unicorn-38986.exe no specs unicorn-3818.exe no specs unicorn-63490.exe no specs unicorn-61187.exe no specs unicorn-58783.exe no specs unicorn-64830.exe no specs unicorn-10228.exe no specs unicorn-18181.exe no specs unicorn-49371.exe no specs unicorn-37441.exe no specs unicorn-7591.exe no specs unicorn-21380.exe no specs unicorn-4851.exe no specs slui.exe no specs unicorn-53668.exe no specs unicorn-24888.exe no specs unicorn-57560.exe no specs unicorn-44606.exe no specs unicorn-34400.exe no specs unicorn-59459.exe no specs unicorn-14342.exe no specs unicorn-14342.exe no specs unicorn-14342.exe no specs unicorn-14342.exe unicorn-14342.exe unicorn-14342.exe unicorn-62531.exe unicorn-54396.exe no specs unicorn-5235.exe no specs unicorn-47950.exe no specs unicorn-47950.exe no specs unicorn-31638.exe no specs unicorn-51504.exe unicorn-63372.exe unicorn-6558.exe no specs unicorn-1727.exe no specs unicorn-19408.exe no specs unicorn-43912.exe no specs unicorn-23300.exe no specs unicorn-51888.exe no specs unicorn-14939.exe no specs unicorn-33313.exe no specs unicorn-19578.exe no specs unicorn-44083.exe no specs unicorn-11742.exe no specs unicorn-7731.exe no specs unicorn-40404.exe no specs unicorn-27960.exe no specs unicorn-26674.exe no specs unicorn-46159.exe no specs unicorn-8198.exe no specs unicorn-8198.exe no specs unicorn-2333.exe no specs unicorn-2333.exe no specs unicorn-2333.exe unicorn-2333.exe no specs unicorn-8198.exe no specs unicorn-2333.exe no specs unicorn-8198.exe no specs unicorn-3418.exe no specs unicorn-22753.exe no specs unicorn-9018.exe no specs unicorn-49859.exe no specs unicorn-9018.exe no specs unicorn-48380.exe no specs unicorn-28619.exe no specs unicorn-28619.exe no specs unicorn-57015.exe no specs unicorn-33357.exe no specs unicorn-36158.exe no specs unicorn-22422.exe no specs unicorn-22422.exe no specs unicorn-16822.exe no specs unicorn-16822.exe no specs unicorn-49999.exe no specs unicorn-20908.exe no specs unicorn-56002.exe no specs unicorn-679.exe no specs unicorn-16440.exe no specs unicorn-17976.exe no specs unicorn-30228.exe no specs unicorn-35391.exe no specs unicorn-22755.exe no specs unicorn-22755.exe no specs unicorn-21951.exe no specs unicorn-39356.exe no specs unicorn-39356.exe no specs unicorn-57730.exe unicorn-38394.exe unicorn-30226.exe unicorn-2215.exe no specs unicorn-53454.exe no specs unicorn-27991.exe no specs unicorn-31378.exe no specs unicorn-56579.exe no specs unicorn-56579.exe no specs unicorn-60632.exe no specs unicorn-65070.exe no specs unicorn-54135.exe no specs unicorn-19953.exe no specs unicorn-57730.exe no specs unicorn-57730.exe no specs unicorn-61814.exe no specs unicorn-2910.exe no specs unicorn-11343.exe no specs unicorn-33108.exe no specs unicorn-16580.exe no specs unicorn-48013.exe no specs unicorn-44850.exe no specs unicorn-56159.exe no specs unicorn-27378.exe no specs unicorn-44850.exe no specs unicorn-50279.exe no specs unicorn-3477.exe no specs unicorn-20384.exe no specs unicorn-27570.exe unicorn-20384.exe no specs unicorn-23853.exe no specs unicorn-20384.exe no specs unicorn-54104.exe unicorn-5650.exe no specs unicorn-63646.exe no specs unicorn-50243.exe no specs unicorn-64798.exe no specs unicorn-25812.exe no specs unicorn-42340.exe no specs unicorn-37466.exe no specs unicorn-52634.exe no specs unicorn-60846.exe no specs unicorn-49911.exe no specs unicorn-27021.exe no specs unicorn-58794.exe no specs unicorn-20018.exe no specs unicorn-52791.exe no specs unicorn-22693.exe no specs unicorn-11758.exe no specs unicorn-11758.exe no specs unicorn-17325.exe no specs unicorn-32178.exe no specs unicorn-18417.exe no specs unicorn-60575.exe no specs unicorn-22807.exe no specs unicorn-22807.exe no specs unicorn-14141.exe no specs unicorn-14141.exe no specs unicorn-14141.exe no specs unicorn-22807.exe no specs unicorn-14141.exe no specs unicorn-22807.exe no specs unicorn-34561.exe no specs unicorn-19542.exe no specs unicorn-33277.exe unicorn-30477.exe unicorn-51428.exe unicorn-22807.exe no specs unicorn-8079.exe no specs unicorn-49911.exe no specs unicorn-2267.exe no specs unicorn-3538.exe no specs unicorn-28041.exe no specs unicorn-53004.exe no specs unicorn-50958.exe no specs unicorn-56823.exe no specs unicorn-63646.exe no specs unicorn-61376.exe no specs unicorn-22937.exe no specs unicorn-731.exe no specs unicorn-17540.exe no specs unicorn-62582.exe no specs unicorn-22937.exe no specs unicorn-22937.exe no specs unicorn-16086.exe no specs unicorn-29821.exe no specs unicorn-25737.exe no specs unicorn-1937.exe no specs unicorn-31603.exe no specs unicorn-31603.exe no specs unicorn-49667.exe no specs unicorn-17046.exe no specs unicorn-44310.exe no specs unicorn-28951.exe no specs unicorn-3974.exe no specs unicorn-23085.exe no specs unicorn-49038.exe no specs unicorn-35302.exe no specs unicorn-63455.exe no specs unicorn-35302.exe no specs unicorn-9350.exe no specs unicorn-57590.exe no specs unicorn-28951.exe no specs unicorn-5735.exe no specs unicorn-17518.exe no specs unicorn-28453.exe no specs unicorn-43855.exe no specs unicorn-43855.exe no specs unicorn-39845.exe no specs unicorn-57590.exe no specs unicorn-31602.exe no specs unicorn-42843.exe no specs unicorn-60846.exe no specs unicorn-63646.exe no specs unicorn-63646.exe no specs unicorn-63646.exe no specs unicorn-60846.exe no specs unicorn-63646.exe no specs unicorn-63646.exe no specs unicorn-63646.exe no specs unicorn-3537.exe no specs unicorn-49667.exe no specs unicorn-63646.exe no specs unicorn-63646.exe no specs unicorn-49911.exe no specs unicorn-55339.exe no specs unicorn-58794.exe no specs unicorn-39458.exe no specs unicorn-45006.exe unicorn-57311.exe unicorn-17518.exe unicorn-28453.exe no specs unicorn-49911.exe no specs unicorn-49596.exe no specs unicorn-55994.exe no specs unicorn-58794.exe no specs unicorn-3974.exe no specs unicorn-63646.exe no specs unicorn-4026.exe no specs unicorn-35687.exe no specs unicorn-16393.exe no specs unicorn-8563.exe no specs unicorn-41002.exe no specs unicorn-30066.exe no specs unicorn-36718.exe no specs unicorn-49667.exe no specs unicorn-41002.exe no specs unicorn-12002.exe no specs unicorn-12002.exe no specs unicorn-46128.exe no specs unicorn-49834.exe no specs unicorn-9350.exe no specs unicorn-38254.exe no specs unicorn-54990.exe no specs unicorn-6159.exe no specs unicorn-1651.exe no specs unicorn-31253.exe no specs unicorn-37119.exe no specs unicorn-43802.exe no specs unicorn-28951.exe no specs unicorn-28951.exe no specs unicorn-22807.exe no specs unicorn-43874.exe no specs unicorn-16698.exe no specs unicorn-9734.exe no specs unicorn-48688.exe no specs unicorn-3537.exe no specs unicorn-8563.exe no specs unicorn-23085.exe no specs unicorn-9350.exe no specs unicorn-9350.exe no specs unicorn-6402.exe no specs unicorn-51535.exe no specs unicorn-3750.exe no specs unicorn-27745.exe no specs unicorn-36751.exe no specs unicorn-15833.exe no specs unicorn-47083.exe no specs unicorn-58018.exe no specs unicorn-50420.exe no specs unicorn-34638.exe no specs unicorn-34638.exe no specs unicorn-34638.exe no specs unicorn-17556.exe no specs unicorn-62215.exe no specs unicorn-20685.exe no specs unicorn-13087.exe no specs unicorn-37592.exe no specs unicorn-41676.exe no specs unicorn-14431.exe no specs unicorn-53929.exe no specs unicorn-6071.exe no specs unicorn-18058.exe no specs unicorn-18058.exe no specs unicorn-63440.exe no specs unicorn-29813.exe no specs unicorn-26300.exe no specs unicorn-29616.exe no specs unicorn-48182.exe no specs unicorn-34276.exe no specs unicorn-47872.exe no specs unicorn-15007.exe no specs unicorn-31536.exe no specs unicorn-23176.exe no specs unicorn-6647.exe no specs unicorn-60487.exe no specs unicorn-5885.exe no specs unicorn-14550.exe no specs unicorn-8685.exe no specs unicorn-14550.exe no specs unicorn-14550.exe no specs unicorn-8685.exe no specs unicorn-14550.exe no specs unicorn-14550.exe no specs unicorn-15370.exe no specs unicorn-14550.exe no specs unicorn-8685.exe no specs unicorn-8685.exe no specs unicorn-60487.exe no specs unicorn-8685.exe no specs unicorn-8685.exe no specs unicorn-14550.exe no specs unicorn-6415.exe no specs unicorn-6415.exe no specs unicorn-27452.exe no specs unicorn-46534.exe no specs unicorn-56625.exe no specs unicorn-32304.exe no specs unicorn-11862.exe no specs unicorn-32688.exe no specs unicorn-25480.exe no specs unicorn-28609.exe no specs unicorn-33191.exe no specs unicorn-53684.exe no specs unicorn-38308.exe no specs unicorn-1359.exe no specs unicorn-21780.exe no specs unicorn-34819.exe no specs unicorn-46019.exe no specs unicorn-40154.exe no specs unicorn-40154.exe no specs unicorn-11018.exe no specs unicorn-46019.exe no specs unicorn-34570.exe no specs unicorn-49822.exe no specs unicorn-36086.exe no specs unicorn-36086.exe no specs unicorn-36086.exe no specs unicorn-55687.exe no specs unicorn-26409.exe no specs unicorn-44276.exe no specs unicorn-44276.exe no specs unicorn-44276.exe no specs unicorn-15303.exe no specs unicorn-19388.exe no specs unicorn-63543.exe no specs unicorn-12106.exe no specs unicorn-3441.exe no specs unicorn-36876.exe unicorn-49128.exe no specs unicorn-32029.exe no specs unicorn-40768.exe no specs unicorn-16031.exe no specs unicorn-32143.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
456C:\Users\admin\AppData\Local\Temp\Unicorn-5650.exeC:\Users\admin\AppData\Local\Temp\Unicorn-5650.exe—Unicorn-64427.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-5650.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
516C:\Users\admin\AppData\Local\Temp\Unicorn-25453.exeC:\Users\admin\AppData\Local\Temp\Unicorn-25453.exe
Unicorn-28195.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-25453.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
616C:\Users\admin\AppData\Local\Temp\Unicorn-6695.exeC:\Users\admin\AppData\Local\Temp\Unicorn-6695.exe
Unicorn-2699.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-6695.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
632"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.1C:\Windows\System32\BackgroundTransferHost.exe—svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Download/Upload Host
Exit code:
1
Version:
10.0.19041.3636 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\backgroundtransferhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\kernel.appcore.dll
c:\windows\system32\bcryptprimitives.dll
664C:\Users\admin\AppData\Local\Temp\Unicorn-11251.exeC:\Users\admin\AppData\Local\Temp\Unicorn-11251.exe
Unicorn-3903.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-11251.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
720C:\Users\admin\AppData\Local\Temp\Unicorn-58794.exeC:\Users\admin\AppData\Local\Temp\Unicorn-58794.exe—Unicorn-61739.exe
User:
admin
Integrity Level:
MEDIUM
728C:\Users\admin\AppData\Local\Temp\Unicorn-23032.exeC:\Users\admin\AppData\Local\Temp\Unicorn-23032.exe
Unicorn-17181.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-23032.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
780C:\Users\admin\AppData\Local\Temp\Unicorn-44850.exeC:\Users\admin\AppData\Local\Temp\Unicorn-44850.exe—Unicorn-27241.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-44850.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
864C:\Users\admin\AppData\Local\Temp\Unicorn-26194.exeC:\Users\admin\AppData\Local\Temp\Unicorn-26194.exe
Unicorn-19502.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-26194.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1012C:\Users\admin\AppData\Local\Temp\Unicorn-34581.exeC:\Users\admin\AppData\Local\Temp\Unicorn-34581.exe
Unicorn-16348.exe
User:
admin
Integrity Level:
MEDIUM
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-34581.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
Total events
14 142
Read events
14 127
Write events
15
Delete events
0

Modification events

(PID) Process:(6148) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(6148) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(6148) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(4980) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(4980) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(4980) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(7208) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(7208) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(7208) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(7780) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
Executable files
802
Suspicious files
5
Text files
0
Unknown types
0

Dropped files

PID
Process
Filename
Type
4980BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\646f567e-5fac-4c3e-9546-85eaf2140860.down_data —
MD5:—
SHA256:—
8012Unicorn-25040.exeC:\Users\admin\AppData\Local\Temp\Unicorn-5314.exeexecutable
MD5:95019CE2672C6D4D111D3D17FC0A06B8
SHA256:A79070E842F056D058ED1D8E47939219EE565FAC40A668368D0F1C23EC44905F
8060Unicorn-6731.exeC:\Users\admin\AppData\Local\Temp\Unicorn-2621.exeexecutable
MD5:39E28B02919FBDD9B8BC458D3D4322FB
SHA256:74E60E2B0CB0AE1B0978D36F3245FEFFC40347941D8C6E21B93166E2CCFB9DE1
73401 (1279).exeC:\Users\admin\AppData\Local\Temp\Unicorn-20607.exeexecutable
MD5:13F55D81B1D657E47E2B39C6FEDC26B8
SHA256:AB0A5CE1192617DC17981A9516DCF9165462285D56C3A9AD62558BD36AB3D00D
4980BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10Dbinary
MD5:4872BABAF39AA62B8D32695EBB7E9173
SHA256:2EE85DF86EE29BBEB3DCA81AA29B6DE204F605A2769B84C728A329178A2D0999
4980BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\646f567e-5fac-4c3e-9546-85eaf2140860.28b5e3ba-2df3-4680-9b02-7991892c703a.down_metabinary
MD5:936DDC4DFDF1D15AE09A6F5102D75BBD
SHA256:416754F981B840A373CC75307448FF25C5C7A68015B7FD033849F95F38C82357
8116Unicorn-5314.exeC:\Users\admin\AppData\Local\Temp\Unicorn-7987.exeexecutable
MD5:E3D794D25B7FFF1F79239A91CAA769B2
SHA256:5C4B451422D77FB48F9D44EE9A93E37DE9F5A71BC2591BB0E87C29C5969E1E28
8076Unicorn-20607.exeC:\Users\admin\AppData\Local\Temp\Unicorn-8542.exeexecutable
MD5:0CBAAFC577BB91C77153285EFBEBCBD5
SHA256:E3C7BF71D5E2C720548A0B4D718B8FF672DBBFB9960BE9B28C0C90281309B5D0
73401 (1279).exeC:\Users\admin\AppData\Local\Temp\Unicorn-22064.exeexecutable
MD5:BE9CE5B2453FF9C6796422B6A0B7FBBF
SHA256:F0568F5B205746FA1F222B465DC36A93C497E1C4585D989475590DAEAF58E03F
8076Unicorn-20607.exeC:\Users\admin\AppData\Local\Temp\Unicorn-28195.exeexecutable
MD5:E9C8486ACEBF63DE3A3340FE56A46112
SHA256:FE2B7C87239AD11BFDF38401A7F65957B81F88D1E0456445E9A96DDAF81A7592
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
25
DNS requests
16
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
5496
MoUsoCoreWorker.exe
GET
200
2.16.164.51:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
6544
svchost.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
7756
SIHClient.exe
GET
200
2.23.246.101:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
7696
backgroundTaskHost.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
whitelisted
7756
SIHClient.exe
GET
200
2.23.246.101:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
4980
BackgroundTransferHost.exe
GET
200
2.23.77.188:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
—
—
40.127.240.158:443
—
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
—
—
192.168.100.255:137
—
—
—
whitelisted
6404
RUXIMICS.exe
40.127.240.158:443
—
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
5496
MoUsoCoreWorker.exe
2.16.164.51:80
crl.microsoft.com
Akamai International B.V.
NL
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
3216
svchost.exe
20.198.162.76:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
SG
whitelisted
6544
svchost.exe
20.190.159.73:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
6544
svchost.exe
184.30.131.245:80
ocsp.digicert.com
AKAMAI-AS
US
whitelisted
2104
svchost.exe
51.124.78.146:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
7696
backgroundTaskHost.exe
20.199.58.43:443
arc.msn.com
MICROSOFT-CORP-MSN-AS-BLOCK
FR
whitelisted

DNS requests

Domain
IP
Reputation
google.com
  • 142.250.185.238
whitelisted
crl.microsoft.com
  • 2.16.164.51
  • 2.16.164.9
  • 2.16.164.18
  • 2.16.164.24
whitelisted
client.wns.windows.com
  • 20.198.162.76
whitelisted
login.live.com
  • 20.190.159.73
  • 40.126.31.131
  • 20.190.159.75
  • 20.190.159.4
  • 40.126.31.73
  • 20.190.159.23
  • 40.126.31.69
  • 20.190.159.130
whitelisted
ocsp.digicert.com
  • 184.30.131.245
  • 2.23.77.188
whitelisted
settings-win.data.microsoft.com
  • 51.124.78.146
whitelisted
arc.msn.com
  • 20.199.58.43
whitelisted
www.bing.com
  • 2.23.227.208
  • 2.23.227.215
whitelisted
slscr.update.microsoft.com
  • 20.12.23.50
whitelisted
www.microsoft.com
  • 2.23.246.101
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
1 (1279)