File name:

1 (434)

Full analysis: https://app.any.run/tasks/a535c964-f941-4cf8-8526-987a628a8e26
Verdict: Malicious activity
Analysis date: March 24, 2025, 22:41:00
OS: Windows 10 Professional (build: 19045, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections
MD5:

9B6AA7695BE1C6528293ADDF3A31BAA0

SHA1:

1A01797CBD3DB4C88C8726145F1A46B7472A2D1C

SHA256:

CE28D20756B6B209C90EAD05AA988064349CEECDD7B2FB345C97D8C61EC822BE

SSDEEP:

6144:2NWybXIJADwLA5BHXjSEiDSx5trqlp8GBV/2yeXdSk/8SwjwpyAvEh+XS37ns6uS:2YcYdLA5pXeyrM+aVuyeXdbx4nxmDsR

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Starts itself from another location

      • 1 (434).exe (PID: 6372)
      • Unicorn-63596.exe (PID: 2384)
      • Unicorn-58889.exe (PID: 6560)
      • Unicorn-17494.exe (PID: 900)
      • Unicorn-12999.exe (PID: 5256)
      • Unicorn-43726.exe (PID: 7012)
      • Unicorn-22320.exe (PID: 3240)
      • Unicorn-59631.exe (PID: 5780)
      • Unicorn-5791.exe (PID: 6192)
      • Unicorn-5791.exe (PID: 1812)
      • Unicorn-1442.exe (PID: 720)
      • Unicorn-61114.exe (PID: 632)
      • Unicorn-64238.exe (PID: 6272)
      • Unicorn-24820.exe (PID: 2088)
      • Unicorn-46419.exe (PID: 4408)
      • Unicorn-22044.exe (PID: 2108)
      • Unicorn-49886.exe (PID: 5360)
      • Unicorn-56663.exe (PID: 7184)
      • Unicorn-5345.exe (PID: 7220)
      • Unicorn-56584.exe (PID: 7240)
      • Unicorn-27904.exe (PID: 7252)
      • Unicorn-48416.exe (PID: 7276)
      • Unicorn-11567.exe (PID: 7308)
      • Unicorn-53155.exe (PID: 7332)
      • Unicorn-11567.exe (PID: 7316)
      • Unicorn-37753.exe (PID: 7352)
      • Unicorn-29087.exe (PID: 7368)
      • Unicorn-18152.exe (PID: 7360)
      • Unicorn-22450.exe (PID: 7692)
      • Unicorn-8151.exe (PID: 7724)
      • Unicorn-18942.exe (PID: 7792)
      • Unicorn-61820.exe (PID: 7896)
      • Unicorn-41500.exe (PID: 7876)
      • Unicorn-25718.exe (PID: 7844)
      • Unicorn-31556.exe (PID: 7984)
      • Unicorn-23410.exe (PID: 8016)
      • Unicorn-10892.exe (PID: 8048)
      • Unicorn-2221.exe (PID: 7960)
      • Unicorn-35470.exe (PID: 8092)
      • Unicorn-64805.exe (PID: 8124)
      • Unicorn-43638.exe (PID: 1912)
      • Unicorn-37151.exe (PID: 8156)
      • Unicorn-19134.exe (PID: 8132)
      • Unicorn-40130.exe (PID: 4244)
      • Unicorn-12911.exe (PID: 8188)
      • Unicorn-12911.exe (PID: 5216)
      • Unicorn-15652.exe (PID: 7292)
      • Unicorn-6695.exe (PID: 5260)
      • Unicorn-40130.exe (PID: 4000)
      • Unicorn-40130.exe (PID: 6708)
      • Unicorn-43638.exe (PID: 5244)
      • Unicorn-15652.exe (PID: 7300)
      • Unicorn-55697.exe (PID: 6080)
      • Unicorn-9495.exe (PID: 2984)
      • Unicorn-36046.exe (PID: 1672)
      • Unicorn-52190.exe (PID: 2152)
      • Unicorn-36430.exe (PID: 7592)
      • Unicorn-61297.exe (PID: 6228)
      • Unicorn-62807.exe (PID: 7600)
      • Unicorn-58967.exe (PID: 5176)
      • Unicorn-34846.exe (PID: 7540)
      • Unicorn-32154.exe (PID: 7648)
      • Unicorn-30016.exe (PID: 7512)
      • Unicorn-36792.exe (PID: 7920)
      • Unicorn-50528.exe (PID: 7788)
      • Unicorn-52309.exe (PID: 7928)
      • Unicorn-64826.exe (PID: 7520)
      • Unicorn-65402.exe (PID: 1452)
      • Unicorn-38184.exe (PID: 7556)
      • Unicorn-20478.exe (PID: 8072)
      • Unicorn-27254.exe (PID: 8088)
      • Unicorn-51104.exe (PID: 7892)
      • Unicorn-60364.exe (PID: 7812)
      • Unicorn-46928.exe (PID: 6036)
      • Unicorn-63264.exe (PID: 4164)
      • Unicorn-420.exe (PID: 7144)
      • Unicorn-12428.exe (PID: 7808)
      • Unicorn-37290.exe (PID: 1168)
      • Unicorn-24946.exe (PID: 8116)
      • Unicorn-37290.exe (PID: 7784)
      • Unicorn-56227.exe (PID: 8224)
      • Unicorn-22616.exe (PID: 8248)
      • Unicorn-62178.exe (PID: 8264)
      • Unicorn-29222.exe (PID: 8284)
      • Unicorn-50197.exe (PID: 8308)
      • Unicorn-47696.exe (PID: 8292)
      • Unicorn-9985.exe (PID: 8328)
      • Unicorn-56824.exe (PID: 8560)
      • Unicorn-4909.exe (PID: 8476)
      • Unicorn-53295.exe (PID: 8536)
      • Unicorn-34820.exe (PID: 8616)
      • Unicorn-15792.exe (PID: 8636)
      • Unicorn-9377.exe (PID: 8688)
      • Unicorn-61297.exe (PID: 4188)
      • Unicorn-42242.exe (PID: 8660)
      • Unicorn-3923.exe (PID: 8760)
      • Unicorn-46326.exe (PID: 8740)
      • Unicorn-12070.exe (PID: 8708)
      • Unicorn-29174.exe (PID: 8808)
      • Unicorn-8562.exe (PID: 8860)
      • Unicorn-34650.exe (PID: 8768)
      • Unicorn-40680.exe (PID: 8836)
      • Unicorn-22398.exe (PID: 8800)
      • Unicorn-59154.exe (PID: 8868)
      • Unicorn-2962.exe (PID: 8852)
      • Unicorn-394.exe (PID: 8892)
      • Unicorn-52700.exe (PID: 8944)
      • Unicorn-38542.exe (PID: 8924)
      • Unicorn-54970.exe (PID: 8952)
      • Unicorn-23887.exe (PID: 9024)
      • Unicorn-12454.exe (PID: 8996)
      • Unicorn-8447.exe (PID: 9056)
      • Unicorn-1593.exe (PID: 8988)
      • Unicorn-24500.exe (PID: 9144)
      • Unicorn-28584.exe (PID: 9136)
      • Unicorn-62024.exe (PID: 9180)
      • Unicorn-25822.exe (PID: 9200)
      • Unicorn-48381.exe (PID: 8240)
      • Unicorn-29251.exe (PID: 668)
      • Unicorn-17292.exe (PID: 9116)
      • Unicorn-47256.exe (PID: 8452)
      • Unicorn-63778.exe (PID: 8604)
      • Unicorn-19137.exe (PID: 8044)
      • Unicorn-56570.exe (PID: 7664)
      • Unicorn-7561.exe (PID: 7752)
      • Unicorn-42372.exe (PID: 7688)
      • Unicorn-1894.exe (PID: 9220)
      • Unicorn-23706.exe (PID: 9248)
      • Unicorn-34566.exe (PID: 9280)
      • Unicorn-65293.exe (PID: 9272)
      • Unicorn-38096.exe (PID: 9304)
      • Unicorn-62911.exe (PID: 9408)
      • Unicorn-15537.exe (PID: 9288)
      • Unicorn-41172.exe (PID: 9496)
      • Unicorn-24282.exe (PID: 9428)
      • Unicorn-32258.exe (PID: 9528)
      • Unicorn-37909.exe (PID: 9456)
      • Unicorn-26974.exe (PID: 9448)

    • Executable content was dropped or overwritten

      • 1 (434).exe (PID: 6372)
      • Unicorn-58889.exe (PID: 6560)
      • Unicorn-17494.exe (PID: 900)
      • Unicorn-63596.exe (PID: 2384)
      • Unicorn-64238.exe (PID: 6272)
      • Unicorn-12999.exe (PID: 5256)
      • Unicorn-43726.exe (PID: 7012)
      • Unicorn-22320.exe (PID: 3240)
      • Unicorn-59631.exe (PID: 5780)
      • Unicorn-24820.exe (PID: 2088)
      • Unicorn-5791.exe (PID: 1812)
      • Unicorn-61114.exe (PID: 632)
      • Unicorn-46419.exe (PID: 4408)
      • Unicorn-22044.exe (PID: 2108)
      • Unicorn-56663.exe (PID: 7184)
      • Unicorn-5345.exe (PID: 7220)
      • Unicorn-56584.exe (PID: 7240)
      • Unicorn-48416.exe (PID: 7276)
      • Unicorn-15652.exe (PID: 7292)
      • Unicorn-15652.exe (PID: 7300)
      • Unicorn-18152.exe (PID: 7360)
      • Unicorn-27904.exe (PID: 7252)
      • Unicorn-37753.exe (PID: 7352)
      • Unicorn-22450.exe (PID: 7692)
      • Unicorn-8151.exe (PID: 7724)
      • Unicorn-18942.exe (PID: 7792)
      • Unicorn-49886.exe (PID: 5360)
      • Unicorn-25718.exe (PID: 7844)
      • Unicorn-41500.exe (PID: 7876)
      • Unicorn-61820.exe (PID: 7896)
      • Unicorn-2221.exe (PID: 7960)
      • Unicorn-31556.exe (PID: 7984)
      • Unicorn-10892.exe (PID: 8048)
      • Unicorn-23410.exe (PID: 8016)
      • Unicorn-35470.exe (PID: 8092)
      • Unicorn-64805.exe (PID: 8124)
      • Unicorn-37151.exe (PID: 8156)
      • Unicorn-19134.exe (PID: 8132)
      • Unicorn-43638.exe (PID: 1912)
      • Unicorn-53155.exe (PID: 7332)
      • Unicorn-12911.exe (PID: 8188)
      • Unicorn-40130.exe (PID: 4244)
      • Unicorn-12911.exe (PID: 5216)
      • Unicorn-40130.exe (PID: 6708)
      • Unicorn-11567.exe (PID: 7316)
      • Unicorn-43638.exe (PID: 5244)
      • Unicorn-40130.exe (PID: 4000)
      • Unicorn-6695.exe (PID: 5260)
      • Unicorn-55697.exe (PID: 6080)
      • Unicorn-11567.exe (PID: 7308)
      • Unicorn-61297.exe (PID: 4188)
      • Unicorn-36046.exe (PID: 1672)
      • Unicorn-9495.exe (PID: 2984)
      • Unicorn-1442.exe (PID: 720)
      • Unicorn-29087.exe (PID: 7368)
      • Unicorn-52190.exe (PID: 2152)
      • Unicorn-36430.exe (PID: 7592)
      • Unicorn-61297.exe (PID: 6228)
      • Unicorn-62807.exe (PID: 7600)
      • Unicorn-58967.exe (PID: 5176)
      • Unicorn-34846.exe (PID: 7540)
      • Unicorn-32154.exe (PID: 7648)
      • Unicorn-64826.exe (PID: 7520)
      • Unicorn-36792.exe (PID: 7920)
      • Unicorn-50528.exe (PID: 7788)
      • Unicorn-52309.exe (PID: 7928)
      • Unicorn-30016.exe (PID: 7512)
      • Unicorn-65402.exe (PID: 1452)
      • Unicorn-38184.exe (PID: 7556)
      • Unicorn-20478.exe (PID: 8072)
      • Unicorn-51104.exe (PID: 7892)
      • Unicorn-60364.exe (PID: 7812)
      • Unicorn-27254.exe (PID: 8088)
      • Unicorn-63264.exe (PID: 4164)
      • Unicorn-46928.exe (PID: 6036)
      • Unicorn-420.exe (PID: 7144)
      • Unicorn-12428.exe (PID: 7808)
      • Unicorn-5791.exe (PID: 6192)
      • Unicorn-37290.exe (PID: 1168)
      • Unicorn-24946.exe (PID: 8116)
      • Unicorn-37290.exe (PID: 7784)
      • Unicorn-56227.exe (PID: 8224)
      • Unicorn-22616.exe (PID: 8248)
      • Unicorn-62178.exe (PID: 8264)
      • Unicorn-47696.exe (PID: 8292)
      • Unicorn-50197.exe (PID: 8308)
      • Unicorn-9985.exe (PID: 8328)
      • Unicorn-56824.exe (PID: 8560)
      • Unicorn-53295.exe (PID: 8536)
      • Unicorn-4909.exe (PID: 8476)
      • Unicorn-34820.exe (PID: 8616)
      • Unicorn-15792.exe (PID: 8636)
      • Unicorn-42242.exe (PID: 8660)
      • Unicorn-9377.exe (PID: 8688)
      • Unicorn-12070.exe (PID: 8708)
      • Unicorn-3923.exe (PID: 8760)
      • Unicorn-40680.exe (PID: 8836)
      • Unicorn-29174.exe (PID: 8808)
      • Unicorn-8562.exe (PID: 8860)
      • Unicorn-34650.exe (PID: 8768)
      • Unicorn-22398.exe (PID: 8800)
      • Unicorn-59154.exe (PID: 8868)
      • Unicorn-2962.exe (PID: 8852)
      • Unicorn-394.exe (PID: 8892)
      • Unicorn-52700.exe (PID: 8944)
      • Unicorn-38542.exe (PID: 8924)
      • Unicorn-54970.exe (PID: 8952)
      • Unicorn-8447.exe (PID: 9056)
      • Unicorn-1593.exe (PID: 8988)
      • Unicorn-12454.exe (PID: 8996)
      • Unicorn-28584.exe (PID: 9136)
      • Unicorn-24500.exe (PID: 9144)
      • Unicorn-62024.exe (PID: 9180)
      • Unicorn-25822.exe (PID: 9200)
      • Unicorn-48381.exe (PID: 8240)
      • Unicorn-29251.exe (PID: 668)
      • Unicorn-63778.exe (PID: 8604)
      • Unicorn-47256.exe (PID: 8452)
      • Unicorn-17292.exe (PID: 9116)
      • Unicorn-4847.exe (PID: 8684)
      • Unicorn-19137.exe (PID: 8044)
      • Unicorn-56570.exe (PID: 7664)
      • Unicorn-42372.exe (PID: 7688)
      • Unicorn-1894.exe (PID: 9220)
      • Unicorn-27881.exe (PID: 9328)
      • Unicorn-34566.exe (PID: 9280)
      • Unicorn-65293.exe (PID: 9272)
      • Unicorn-60462.exe (PID: 9376)
      • Unicorn-38096.exe (PID: 9304)
      • Unicorn-15537.exe (PID: 9288)
      • Unicorn-41172.exe (PID: 9496)
      • Unicorn-24282.exe (PID: 9428)
      • Unicorn-42756.exe (PID: 9468)
      • Unicorn-32258.exe (PID: 9528)
      • Unicorn-37909.exe (PID: 9456)
      • Unicorn-26974.exe (PID: 9448)
      • Unicorn-30866.exe (PID: 9552)
      • Unicorn-46326.exe (PID: 8740)
      • Unicorn-46648.exe (PID: 9568)
      • Unicorn-24474.exe (PID: 9748)
      • Unicorn-9791.exe (PID: 9560)
      • Unicorn-9434.exe (PID: 9616)
      • Unicorn-29926.exe (PID: 9636)
      • Unicorn-16498.exe (PID: 9660)
      • Unicorn-23887.exe (PID: 9024)
      • Unicorn-53254.exe (PID: 9708)
      • Unicorn-45086.exe (PID: 9728)
      • Unicorn-23082.exe (PID: 9768)
      • Unicorn-24373.exe (PID: 9788)
      • Unicorn-63679.exe (PID: 9840)
      • Unicorn-51692.exe (PID: 9868)
      • Unicorn-59403.exe (PID: 9916)
      • Unicorn-9076.exe (PID: 9908)
      • Unicorn-23706.exe (PID: 9248)
      • Unicorn-45278.exe (PID: 9960)
      • Unicorn-49838.exe (PID: 10004)
      • Unicorn-62911.exe (PID: 9408)
      • Unicorn-21158.exe (PID: 10012)
      • Unicorn-23850.exe (PID: 10044)
      • Unicorn-27764.exe (PID: 10088)
      • Unicorn-17384.exe (PID: 10068)
      • Unicorn-42796.exe (PID: 8716)
      • Unicorn-27764.exe (PID: 10096)
      • Unicorn-61422.exe (PID: 9692)
      • Unicorn-26180.exe (PID: 10164)
      • Unicorn-37280.exe (PID: 9804)
      • Unicorn-9321.exe (PID: 9820)
      • Unicorn-16882.exe (PID: 9876)
      • Unicorn-26180.exe (PID: 10172)
      • Unicorn-39776.exe (PID: 10280)
      • Unicorn-29222.exe (PID: 8284)
      • Unicorn-544.exe (PID: 2148)
      • Unicorn-37276.exe (PID: 10272)
      • Unicorn-49362.exe (PID: 9952)
      • Unicorn-7561.exe (PID: 7752)
      • Unicorn-57504.exe (PID: 10316)
      • Unicorn-30862.exe (PID: 10308)
      • Unicorn-46383.exe (PID: 10396)
      • Unicorn-32899.exe (PID: 10380)
      • Unicorn-17218.exe (PID: 10352)
      • Unicorn-7488.exe (PID: 10412)
      • Unicorn-40160.exe (PID: 10480)
      • Unicorn-7151.exe (PID: 10196)
      • Unicorn-58298.exe (PID: 10136)
      • Unicorn-5681.exe (PID: 5736)
      • Unicorn-7296.exe (PID: 10536)
      • Unicorn-41452.exe (PID: 10672)
      • Unicorn-33938.exe (PID: 10552)
      • Unicorn-25024.exe (PID: 10632)
      • Unicorn-25115.exe (PID: 10516)
      • Unicorn-35884.exe (PID: 10640)
      • Unicorn-22977.exe (PID: 10608)
      • Unicorn-287.exe (PID: 10692)
      • Unicorn-64010.exe (PID: 10724)
      • Unicorn-38598.exe (PID: 10748)
      • Unicorn-333.exe (PID: 10884)
      • Unicorn-33938.exe (PID: 10556)
      • Unicorn-21686.exe (PID: 10584)
      • Unicorn-59834.exe (PID: 10616)
      • Unicorn-12479.exe (PID: 10324)
      • Unicorn-31438.exe (PID: 10404)
      • Unicorn-2657.exe (PID: 10456)
      • Unicorn-45728.exe (PID: 10492)
      • Unicorn-15293.exe (PID: 10984)
      • Unicorn-54359.exe (PID: 10700)
      • Unicorn-46212.exe (PID: 10780)
      • Unicorn-28292.exe (PID: 10836)

  • INFO

    • Reads the computer name

      • Unicorn-58889.exe (PID: 6560)
      • 1 (434).exe (PID: 6372)
      • Unicorn-17494.exe (PID: 900)
      • Unicorn-12999.exe (PID: 5256)
      • Unicorn-43726.exe (PID: 7012)
      • Unicorn-64238.exe (PID: 6272)
      • Unicorn-46419.exe (PID: 4408)
      • Unicorn-5791.exe (PID: 1812)
      • Unicorn-22320.exe (PID: 3240)
      • Unicorn-5791.exe (PID: 6192)
      • Unicorn-59631.exe (PID: 5780)
      • Unicorn-24820.exe (PID: 2088)
      • Unicorn-61114.exe (PID: 632)
      • Unicorn-1442.exe (PID: 720)
      • Unicorn-22044.exe (PID: 2108)
      • Unicorn-56663.exe (PID: 7184)
      • Unicorn-49886.exe (PID: 5360)
      • Unicorn-27904.exe (PID: 7252)
      • Unicorn-56584.exe (PID: 7240)
      • Unicorn-5345.exe (PID: 7220)
      • Unicorn-48416.exe (PID: 7276)
      • Unicorn-15652.exe (PID: 7292)
      • Unicorn-11567.exe (PID: 7316)
      • Unicorn-53155.exe (PID: 7332)
      • Unicorn-18152.exe (PID: 7360)
      • Unicorn-29087.exe (PID: 7368)
      • Unicorn-15652.exe (PID: 7300)
      • Unicorn-37753.exe (PID: 7352)
      • Unicorn-11567.exe (PID: 7308)
      • Unicorn-22450.exe (PID: 7692)
      • Unicorn-8151.exe (PID: 7724)
      • Unicorn-18942.exe (PID: 7792)
      • Unicorn-61820.exe (PID: 7896)
      • Unicorn-41500.exe (PID: 7876)
      • Unicorn-25718.exe (PID: 7844)
      • Unicorn-31556.exe (PID: 7984)
      • Unicorn-2221.exe (PID: 7960)
      • Unicorn-10892.exe (PID: 8048)
      • Unicorn-23410.exe (PID: 8016)
      • Unicorn-35470.exe (PID: 8092)
      • Unicorn-64805.exe (PID: 8124)
      • Unicorn-19134.exe (PID: 8132)
      • Unicorn-37151.exe (PID: 8156)
      • Unicorn-43638.exe (PID: 1912)
      • Unicorn-40130.exe (PID: 4244)
      • Unicorn-12911.exe (PID: 8188)
      • Unicorn-12911.exe (PID: 5216)
      • Unicorn-40130.exe (PID: 6708)
      • Unicorn-43638.exe (PID: 5244)
      • Unicorn-6695.exe (PID: 5260)
      • Unicorn-40130.exe (PID: 4000)
      • Unicorn-61297.exe (PID: 4188)
      • Unicorn-36046.exe (PID: 1672)
      • Unicorn-9495.exe (PID: 2984)
      • Unicorn-61297.exe (PID: 6228)
      • Unicorn-55697.exe (PID: 6080)
      • Unicorn-58967.exe (PID: 5176)
      • Unicorn-52190.exe (PID: 2152)
      • Unicorn-36430.exe (PID: 7592)
      • Unicorn-62807.exe (PID: 7600)
      • Unicorn-34846.exe (PID: 7540)
      • Unicorn-32154.exe (PID: 7648)
      • Unicorn-64826.exe (PID: 7520)
      • Unicorn-30016.exe (PID: 7512)
      • Unicorn-52309.exe (PID: 7928)
      • Unicorn-65402.exe (PID: 1452)
      • Unicorn-36792.exe (PID: 7920)
      • Unicorn-50528.exe (PID: 7788)
      • Unicorn-38184.exe (PID: 7556)
      • Unicorn-20478.exe (PID: 8072)
      • Unicorn-27254.exe (PID: 8088)
      • Unicorn-51104.exe (PID: 7892)
      • Unicorn-60364.exe (PID: 7812)
      • Unicorn-420.exe (PID: 7144)
      • Unicorn-12428.exe (PID: 7808)
      • Unicorn-37290.exe (PID: 1168)
      • Unicorn-63264.exe (PID: 4164)
      • Unicorn-46928.exe (PID: 6036)
      • Unicorn-24946.exe (PID: 8116)
      • Unicorn-37290.exe (PID: 7784)
      • Unicorn-22616.exe (PID: 8248)
      • Unicorn-56227.exe (PID: 8224)
      • Unicorn-47696.exe (PID: 8292)
      • Unicorn-62178.exe (PID: 8264)
      • Unicorn-29222.exe (PID: 8284)
      • Unicorn-50197.exe (PID: 8308)
      • Unicorn-9985.exe (PID: 8328)
      • Unicorn-53295.exe (PID: 8536)
      • Unicorn-4909.exe (PID: 8476)
      • Unicorn-56824.exe (PID: 8560)
      • Unicorn-34820.exe (PID: 8616)
      • Unicorn-15792.exe (PID: 8636)
      • Unicorn-40680.exe (PID: 8836)
      • Unicorn-9377.exe (PID: 8688)
      • Unicorn-3923.exe (PID: 8760)
      • Unicorn-42242.exe (PID: 8660)
      • Unicorn-46326.exe (PID: 8740)
      • Unicorn-42796.exe (PID: 8716)
      • Unicorn-12070.exe (PID: 8708)
      • Unicorn-34650.exe (PID: 8768)
      • Unicorn-29174.exe (PID: 8808)
      • Unicorn-8562.exe (PID: 8860)
      • Unicorn-394.exe (PID: 8892)
      • Unicorn-22398.exe (PID: 8800)
      • Unicorn-2962.exe (PID: 8852)
      • Unicorn-54970.exe (PID: 8952)
      • Unicorn-52700.exe (PID: 8944)
      • Unicorn-59154.exe (PID: 8868)
      • Unicorn-1593.exe (PID: 8988)
      • Unicorn-23887.exe (PID: 9024)
      • Unicorn-12454.exe (PID: 8996)
      • Unicorn-38542.exe (PID: 8924)
      • Unicorn-8447.exe (PID: 9056)
      • Unicorn-28584.exe (PID: 9136)
      • Unicorn-25822.exe (PID: 9200)
      • Unicorn-62024.exe (PID: 9180)
      • Unicorn-24500.exe (PID: 9144)
      • Unicorn-48381.exe (PID: 8240)
      • Unicorn-29251.exe (PID: 668)
      • Unicorn-63778.exe (PID: 8604)
      • Unicorn-47256.exe (PID: 8452)
      • Unicorn-17292.exe (PID: 9116)
      • Unicorn-4847.exe (PID: 8684)
      • Unicorn-19137.exe (PID: 8044)
      • Unicorn-56570.exe (PID: 7664)
      • Unicorn-42372.exe (PID: 7688)
      • Unicorn-7561.exe (PID: 7752)
      • Unicorn-1894.exe (PID: 9220)
      • Unicorn-23706.exe (PID: 9248)
      • Unicorn-27881.exe (PID: 9328)
      • Unicorn-15537.exe (PID: 9288)
      • Unicorn-65293.exe (PID: 9272)
      • Unicorn-60462.exe (PID: 9376)
      • Unicorn-62911.exe (PID: 9408)
      • Unicorn-34566.exe (PID: 9280)
      • Unicorn-38096.exe (PID: 9304)
      • Unicorn-41172.exe (PID: 9496)
      • Unicorn-24282.exe (PID: 9428)
      • Unicorn-42756.exe (PID: 9468)
      • Unicorn-32258.exe (PID: 9528)
      • Unicorn-37909.exe (PID: 9456)
      • Unicorn-26974.exe (PID: 9448)
      • Unicorn-9791.exe (PID: 9560)
      • Unicorn-46648.exe (PID: 9568)
      • Unicorn-30866.exe (PID: 9552)
      • Unicorn-9434.exe (PID: 9616)
      • Unicorn-16498.exe (PID: 9660)
      • Unicorn-29926.exe (PID: 9636)

    • The sample compiled with chinese language support

      • 1 (434).exe (PID: 6372)

    • Create files in a temporary directory

      • 1 (434).exe (PID: 6372)
      • Unicorn-58889.exe (PID: 6560)
      • Unicorn-17494.exe (PID: 900)
      • Unicorn-63596.exe (PID: 2384)
      • Unicorn-64238.exe (PID: 6272)
      • Unicorn-12999.exe (PID: 5256)
      • Unicorn-43726.exe (PID: 7012)
      • Unicorn-22320.exe (PID: 3240)
      • Unicorn-59631.exe (PID: 5780)
      • Unicorn-5791.exe (PID: 1812)
      • Unicorn-61114.exe (PID: 632)
      • Unicorn-46419.exe (PID: 4408)
      • Unicorn-24820.exe (PID: 2088)
      • Unicorn-22044.exe (PID: 2108)
      • Unicorn-49886.exe (PID: 5360)
      • Unicorn-56663.exe (PID: 7184)
      • Unicorn-5345.exe (PID: 7220)
      • Unicorn-56584.exe (PID: 7240)
      • Unicorn-27904.exe (PID: 7252)
      • Unicorn-15652.exe (PID: 7292)
      • Unicorn-48416.exe (PID: 7276)
      • Unicorn-15652.exe (PID: 7300)
      • Unicorn-18152.exe (PID: 7360)
      • Unicorn-37753.exe (PID: 7352)
      • Unicorn-8151.exe (PID: 7724)
      • Unicorn-18942.exe (PID: 7792)
      • Unicorn-22450.exe (PID: 7692)
      • Unicorn-25718.exe (PID: 7844)
      • Unicorn-41500.exe (PID: 7876)
      • Unicorn-61820.exe (PID: 7896)
      • Unicorn-2221.exe (PID: 7960)
      • Unicorn-31556.exe (PID: 7984)
      • Unicorn-23410.exe (PID: 8016)
      • Unicorn-10892.exe (PID: 8048)
      • Unicorn-35470.exe (PID: 8092)
      • Unicorn-64805.exe (PID: 8124)
      • Unicorn-19134.exe (PID: 8132)
      • Unicorn-37151.exe (PID: 8156)
      • Unicorn-43638.exe (PID: 1912)
      • Unicorn-40130.exe (PID: 4244)
      • Unicorn-53155.exe (PID: 7332)
      • Unicorn-12911.exe (PID: 5216)
      • Unicorn-12911.exe (PID: 8188)
      • Unicorn-40130.exe (PID: 6708)
      • Unicorn-11567.exe (PID: 7316)
      • Unicorn-6695.exe (PID: 5260)
      • Unicorn-40130.exe (PID: 4000)
      • Unicorn-43638.exe (PID: 5244)
      • Unicorn-55697.exe (PID: 6080)
      • Unicorn-11567.exe (PID: 7308)
      • Unicorn-61297.exe (PID: 4188)
      • Unicorn-9495.exe (PID: 2984)
      • Unicorn-1442.exe (PID: 720)
      • Unicorn-61297.exe (PID: 6228)
      • Unicorn-36046.exe (PID: 1672)
      • Unicorn-29087.exe (PID: 7368)
      • Unicorn-52190.exe (PID: 2152)
      • Unicorn-36430.exe (PID: 7592)
      • Unicorn-58967.exe (PID: 5176)
      • Unicorn-62807.exe (PID: 7600)
      • Unicorn-32154.exe (PID: 7648)
      • Unicorn-64826.exe (PID: 7520)
      • Unicorn-34846.exe (PID: 7540)
      • Unicorn-50528.exe (PID: 7788)
      • Unicorn-52309.exe (PID: 7928)
      • Unicorn-30016.exe (PID: 7512)
      • Unicorn-36792.exe (PID: 7920)
      • Unicorn-20478.exe (PID: 8072)
      • Unicorn-65402.exe (PID: 1452)
      • Unicorn-38184.exe (PID: 7556)
      • Unicorn-27254.exe (PID: 8088)
      • Unicorn-51104.exe (PID: 7892)
      • Unicorn-60364.exe (PID: 7812)
      • Unicorn-63264.exe (PID: 4164)
      • Unicorn-420.exe (PID: 7144)
      • Unicorn-46928.exe (PID: 6036)
      • Unicorn-12428.exe (PID: 7808)
      • Unicorn-5791.exe (PID: 6192)
      • Unicorn-24946.exe (PID: 8116)
      • Unicorn-37290.exe (PID: 7784)
      • Unicorn-37290.exe (PID: 1168)
      • Unicorn-56227.exe (PID: 8224)
      • Unicorn-22616.exe (PID: 8248)
      • Unicorn-62178.exe (PID: 8264)
      • Unicorn-47696.exe (PID: 8292)
      • Unicorn-50197.exe (PID: 8308)
      • Unicorn-9985.exe (PID: 8328)
      • Unicorn-56824.exe (PID: 8560)
      • Unicorn-4909.exe (PID: 8476)
      • Unicorn-53295.exe (PID: 8536)
      • Unicorn-15792.exe (PID: 8636)
      • Unicorn-34820.exe (PID: 8616)
      • Unicorn-42242.exe (PID: 8660)
      • Unicorn-9377.exe (PID: 8688)
      • Unicorn-12070.exe (PID: 8708)
      • Unicorn-3923.exe (PID: 8760)
      • Unicorn-40680.exe (PID: 8836)
      • Unicorn-29174.exe (PID: 8808)
      • Unicorn-8562.exe (PID: 8860)
      • Unicorn-394.exe (PID: 8892)
      • Unicorn-34650.exe (PID: 8768)
      • Unicorn-22398.exe (PID: 8800)
      • Unicorn-59154.exe (PID: 8868)
      • Unicorn-2962.exe (PID: 8852)
      • Unicorn-54970.exe (PID: 8952)
      • Unicorn-52700.exe (PID: 8944)
      • Unicorn-38542.exe (PID: 8924)
      • Unicorn-1593.exe (PID: 8988)
      • Unicorn-12454.exe (PID: 8996)
      • Unicorn-8447.exe (PID: 9056)
      • Unicorn-24500.exe (PID: 9144)
      • Unicorn-28584.exe (PID: 9136)
      • Unicorn-25822.exe (PID: 9200)
      • Unicorn-62024.exe (PID: 9180)
      • Unicorn-48381.exe (PID: 8240)
      • Unicorn-29251.exe (PID: 668)
      • Unicorn-63778.exe (PID: 8604)
      • Unicorn-47256.exe (PID: 8452)
      • Unicorn-19137.exe (PID: 8044)
      • Unicorn-17292.exe (PID: 9116)
      • Unicorn-4847.exe (PID: 8684)
      • Unicorn-56570.exe (PID: 7664)
      • Unicorn-42372.exe (PID: 7688)
      • Unicorn-1894.exe (PID: 9220)
      • Unicorn-27881.exe (PID: 9328)
      • Unicorn-34566.exe (PID: 9280)
      • Unicorn-65293.exe (PID: 9272)
      • Unicorn-60462.exe (PID: 9376)
      • Unicorn-38096.exe (PID: 9304)
      • Unicorn-15537.exe (PID: 9288)
      • Unicorn-24282.exe (PID: 9428)
      • Unicorn-42756.exe (PID: 9468)
      • Unicorn-26974.exe (PID: 9448)
      • Unicorn-41172.exe (PID: 9496)
      • Unicorn-32258.exe (PID: 9528)
      • Unicorn-37909.exe (PID: 9456)

    • Checks supported languages

      • 1 (434).exe (PID: 6372)
      • Unicorn-58889.exe (PID: 6560)
      • Unicorn-17494.exe (PID: 900)
      • Unicorn-64238.exe (PID: 6272)
      • Unicorn-46419.exe (PID: 4408)
      • Unicorn-12999.exe (PID: 5256)
      • Unicorn-43726.exe (PID: 7012)
      • Unicorn-59631.exe (PID: 5780)
      • Unicorn-22320.exe (PID: 3240)
      • Unicorn-24820.exe (PID: 2088)
      • Unicorn-5791.exe (PID: 1812)
      • Unicorn-1442.exe (PID: 720)
      • Unicorn-61114.exe (PID: 632)
      • Unicorn-5791.exe (PID: 6192)
      • Unicorn-22044.exe (PID: 2108)
      • Unicorn-49886.exe (PID: 5360)
      • Unicorn-56663.exe (PID: 7184)
      • Unicorn-48416.exe (PID: 7276)
      • Unicorn-56584.exe (PID: 7240)
      • Unicorn-27904.exe (PID: 7252)
      • Unicorn-15652.exe (PID: 7292)
      • Unicorn-5345.exe (PID: 7220)
      • Unicorn-11567.exe (PID: 7316)
      • Unicorn-29087.exe (PID: 7368)
      • Unicorn-53155.exe (PID: 7332)
      • Unicorn-18152.exe (PID: 7360)
      • Unicorn-37753.exe (PID: 7352)
      • Unicorn-11567.exe (PID: 7308)
      • Unicorn-15652.exe (PID: 7300)
      • Unicorn-22450.exe (PID: 7692)
      • Unicorn-8151.exe (PID: 7724)
      • Unicorn-18942.exe (PID: 7792)
      • Unicorn-25718.exe (PID: 7844)
      • Unicorn-41500.exe (PID: 7876)
      • Unicorn-61820.exe (PID: 7896)
      • Unicorn-23410.exe (PID: 8016)
      • Unicorn-2221.exe (PID: 7960)
      • Unicorn-31556.exe (PID: 7984)
      • Unicorn-10892.exe (PID: 8048)
      • Unicorn-35470.exe (PID: 8092)
      • Unicorn-19134.exe (PID: 8132)
      • Unicorn-64805.exe (PID: 8124)
      • Unicorn-37151.exe (PID: 8156)
      • Unicorn-40130.exe (PID: 6708)
      • Unicorn-43638.exe (PID: 1912)
      • Unicorn-36046.exe (PID: 1672)
      • Unicorn-12911.exe (PID: 5216)
      • Unicorn-43638.exe (PID: 5244)
      • Unicorn-40130.exe (PID: 4244)
      • Unicorn-12911.exe (PID: 8188)
      • Unicorn-61297.exe (PID: 4188)
      • Unicorn-40130.exe (PID: 4000)
      • Unicorn-6695.exe (PID: 5260)
      • Unicorn-55697.exe (PID: 6080)
      • Unicorn-61297.exe (PID: 6228)
      • Unicorn-58967.exe (PID: 5176)
      • Unicorn-52190.exe (PID: 2152)
      • Unicorn-62807.exe (PID: 7600)
      • Unicorn-36430.exe (PID: 7592)
      • Unicorn-32154.exe (PID: 7648)
      • Unicorn-9495.exe (PID: 2984)
      • Unicorn-64826.exe (PID: 7520)
      • Unicorn-30016.exe (PID: 7512)
      • Unicorn-36792.exe (PID: 7920)
      • Unicorn-38184.exe (PID: 7556)
      • Unicorn-50528.exe (PID: 7788)
      • Unicorn-52309.exe (PID: 7928)
      • Unicorn-34846.exe (PID: 7540)
      • Unicorn-20478.exe (PID: 8072)
      • Unicorn-27254.exe (PID: 8088)
      • Unicorn-51104.exe (PID: 7892)
      • Unicorn-65402.exe (PID: 1452)
      • Unicorn-63264.exe (PID: 4164)
      • Unicorn-420.exe (PID: 7144)
      • Unicorn-46928.exe (PID: 6036)
      • Unicorn-60364.exe (PID: 7812)
      • Unicorn-24946.exe (PID: 8116)
      • Unicorn-56227.exe (PID: 8224)
      • Unicorn-37290.exe (PID: 1168)
      • Unicorn-37290.exe (PID: 7784)
      • Unicorn-22616.exe (PID: 8248)
      • Unicorn-62178.exe (PID: 8264)
      • Unicorn-12428.exe (PID: 7808)
      • Unicorn-29222.exe (PID: 8284)
      • Unicorn-47696.exe (PID: 8292)
      • Unicorn-50197.exe (PID: 8308)
      • Unicorn-9985.exe (PID: 8328)
      • Unicorn-4909.exe (PID: 8476)
      • Unicorn-53295.exe (PID: 8536)
      • Unicorn-56824.exe (PID: 8560)
      • Unicorn-34820.exe (PID: 8616)
      • Unicorn-9377.exe (PID: 8688)
      • Unicorn-12070.exe (PID: 8708)
      • Unicorn-15792.exe (PID: 8636)
      • Unicorn-42242.exe (PID: 8660)
      • Unicorn-46326.exe (PID: 8740)
      • Unicorn-42796.exe (PID: 8716)
      • Unicorn-22398.exe (PID: 8800)
      • Unicorn-29174.exe (PID: 8808)
      • Unicorn-40680.exe (PID: 8836)
      • Unicorn-3923.exe (PID: 8760)
      • Unicorn-34650.exe (PID: 8768)
      • Unicorn-394.exe (PID: 8892)
      • Unicorn-59154.exe (PID: 8868)
      • Unicorn-54970.exe (PID: 8952)
      • Unicorn-38542.exe (PID: 8924)
      • Unicorn-52700.exe (PID: 8944)
      • Unicorn-8562.exe (PID: 8860)
      • Unicorn-2962.exe (PID: 8852)
      • Unicorn-1593.exe (PID: 8988)
      • Unicorn-8447.exe (PID: 9056)
      • Unicorn-23887.exe (PID: 9024)
      • Unicorn-28584.exe (PID: 9136)
      • Unicorn-12454.exe (PID: 8996)
      • Unicorn-62024.exe (PID: 9180)
      • Unicorn-48381.exe (PID: 8240)
      • Unicorn-25822.exe (PID: 9200)
      • Unicorn-29251.exe (PID: 668)
      • Unicorn-63778.exe (PID: 8604)
      • Unicorn-24500.exe (PID: 9144)
      • Unicorn-17292.exe (PID: 9116)
      • Unicorn-19137.exe (PID: 8044)
      • Unicorn-4847.exe (PID: 8684)
      • Unicorn-47256.exe (PID: 8452)
      • Unicorn-42372.exe (PID: 7688)
      • Unicorn-7561.exe (PID: 7752)
      • Unicorn-1894.exe (PID: 9220)
      • Unicorn-23706.exe (PID: 9248)
      • Unicorn-65293.exe (PID: 9272)
      • Unicorn-15537.exe (PID: 9288)
      • Unicorn-34566.exe (PID: 9280)
      • Unicorn-38096.exe (PID: 9304)
      • Unicorn-27881.exe (PID: 9328)
      • Unicorn-60462.exe (PID: 9376)
      • Unicorn-56570.exe (PID: 7664)
      • Unicorn-26974.exe (PID: 9448)
      • Unicorn-37909.exe (PID: 9456)
      • Unicorn-42756.exe (PID: 9468)
      • Unicorn-41172.exe (PID: 9496)
      • Unicorn-32258.exe (PID: 9528)
      • Unicorn-9791.exe (PID: 9560)
      • Unicorn-30866.exe (PID: 9552)
      • Unicorn-62911.exe (PID: 9408)
      • Unicorn-24282.exe (PID: 9428)
      • Unicorn-9434.exe (PID: 9616)
      • Unicorn-16498.exe (PID: 9660)
      • Unicorn-61422.exe (PID: 9692)
      • Unicorn-53254.exe (PID: 9708)
      • Unicorn-46648.exe (PID: 9568)
      • Unicorn-29926.exe (PID: 9636)
      • Unicorn-45086.exe (PID: 9728)
      • Unicorn-24373.exe (PID: 9788)
      • Unicorn-24474.exe (PID: 9748)
      • Unicorn-23082.exe (PID: 9768)
      • Unicorn-9321.exe (PID: 9820)
      • Unicorn-37280.exe (PID: 9804)
      • Unicorn-63679.exe (PID: 9840)
      • Unicorn-16882.exe (PID: 9876)
      • Unicorn-9076.exe (PID: 9908)
      • Unicorn-49362.exe (PID: 9952)
      • Unicorn-45278.exe (PID: 9960)
      • Unicorn-49838.exe (PID: 10004)
      • Unicorn-23850.exe (PID: 10044)
      • Unicorn-21158.exe (PID: 10012)
      • Unicorn-51692.exe (PID: 9868)
      • Unicorn-59403.exe (PID: 9916)
      • Unicorn-27764.exe (PID: 10096)
      • Unicorn-27764.exe (PID: 10088)
      • Unicorn-26180.exe (PID: 10172)
      • Unicorn-58298.exe (PID: 10136)
      • Unicorn-26180.exe (PID: 10164)
      • Unicorn-17384.exe (PID: 10068)
      • Unicorn-5681.exe (PID: 5736)
      • Unicorn-544.exe (PID: 2148)
      • Unicorn-7151.exe (PID: 10196)
      • Unicorn-37276.exe (PID: 10272)
      • Unicorn-39776.exe (PID: 10280)
      • Unicorn-57504.exe (PID: 10316)
      • Unicorn-30862.exe (PID: 10308)
      • Unicorn-12479.exe (PID: 10324)
      • Unicorn-32899.exe (PID: 10380)
      • Unicorn-46383.exe (PID: 10396)
      • Unicorn-7488.exe (PID: 10412)
      • Unicorn-2657.exe (PID: 10456)
      • Unicorn-45728.exe (PID: 10492)
      • Unicorn-40160.exe (PID: 10480)
      • Unicorn-17218.exe (PID: 10352)
      • Unicorn-31438.exe (PID: 10404)
      • Unicorn-22977.exe (PID: 10608)
      • Unicorn-59834.exe (PID: 10616)
      • Unicorn-35884.exe (PID: 10640)
      • Unicorn-25024.exe (PID: 10632)
      • Unicorn-287.exe (PID: 10692)
      • Unicorn-41452.exe (PID: 10672)
      • Unicorn-64010.exe (PID: 10724)
      • Unicorn-7296.exe (PID: 10536)
      • Unicorn-25115.exe (PID: 10516)
      • Unicorn-33938.exe (PID: 10556)
      • Unicorn-33938.exe (PID: 10552)
      • Unicorn-21686.exe (PID: 10584)
      • Unicorn-54359.exe (PID: 10700)
      • Unicorn-38598.exe (PID: 10748)
      • Unicorn-46212.exe (PID: 10780)
      • Unicorn-47007.exe (PID: 10788)
      • Unicorn-9263.exe (PID: 10864)
      • Unicorn-28292.exe (PID: 10836)
      • Unicorn-42028.exe (PID: 10844)
      • Unicorn-9263.exe (PID: 10872)
      • Unicorn-31630.exe (PID: 10932)
      • Unicorn-23462.exe (PID: 10956)
      • Unicorn-15293.exe (PID: 10984)
      • Unicorn-15028.exe (PID: 10992)
      • Unicorn-9263.exe (PID: 10856)
      • Unicorn-333.exe (PID: 10884)
      • Unicorn-37852.exe (PID: 11024)
      • Unicorn-33576.exe (PID: 11032)
      • Unicorn-29492.exe (PID: 11056)
      • Unicorn-1479.exe (PID: 11108)
      • Unicorn-9071.exe (PID: 11088)
      • Unicorn-59403.exe (PID: 11180)
      • Unicorn-51235.exe (PID: 11232)
      • Unicorn-26538.exe (PID: 11288)
      • Unicorn-62740.exe (PID: 11256)
      • Unicorn-58656.exe (PID: 10800)
      • Unicorn-17816.exe (PID: 11172)
      • Unicorn-15577.exe (PID: 11320)
      • Unicorn-52434.exe (PID: 11328)
      • Unicorn-15577.exe (PID: 11312)
      • Unicorn-36674.exe (PID: 11368)
      • Unicorn-11904.exe (PID: 11400)
      • Unicorn-36674.exe (PID: 11360)
      • Unicorn-59787.exe (PID: 11432)
      • Unicorn-48512.exe (PID: 11540)
      • Unicorn-59595.exe (PID: 11500)
      • Unicorn-65510.exe (PID: 11664)
      • Unicorn-44925.exe (PID: 11556)
      • Unicorn-21048.exe (PID: 11656)
      • Unicorn-62081.exe (PID: 11588)
      • Unicorn-64027.exe (PID: 11628)
      • Unicorn-2574.exe (PID: 11620)
      • Unicorn-54489.exe (PID: 11696)
      • Unicorn-46788.exe (PID: 11456)
      • Unicorn-23268.exe (PID: 11492)
      • Unicorn-25245.exe (PID: 11760)
      • Unicorn-15594.exe (PID: 11740)
      • Unicorn-33876.exe (PID: 11804)
      • Unicorn-48267.exe (PID: 11848)
      • Unicorn-38590.exe (PID: 11920)
      • Unicorn-47520.exe (PID: 11912)
      • Unicorn-12709.exe (PID: 11928)
      • Unicorn-8817.exe (PID: 11704)
      • Unicorn-64140.exe (PID: 11724)
      • Unicorn-39544.exe (PID: 11712)
      • Unicorn-6414.exe (PID: 11840)
      • Unicorn-36444.exe (PID: 11980)
      • Unicorn-33684.exe (PID: 12032)
      • Unicorn-27411.exe (PID: 12144)
      • Unicorn-24146.exe (PID: 12104)
      • Unicorn-56356.exe (PID: 12132)
      • Unicorn-27676.exe (PID: 12152)
      • Unicorn-3534.exe (PID: 12160)
      • Unicorn-41874.exe (PID: 12216)
      • Unicorn-15402.exe (PID: 11960)
      • Unicorn-20969.exe (PID: 12000)
      • Unicorn-39252.exe (PID: 12060)
      • Unicorn-48459.exe (PID: 5308)
      • Unicorn-52543.exe (PID: 6572)
      • Unicorn-6056.exe (PID: 7456)
      • Unicorn-16362.exe (PID: 5232)
      • Unicorn-17653.exe (PID: 12300)
      • Unicorn-32043.exe (PID: 12332)
      • Unicorn-15350.exe (PID: 12316)
      • Unicorn-39350.exe (PID: 12352)
      • Unicorn-12086.exe (PID: 12404)
      • Unicorn-46897.exe (PID: 12392)
      • Unicorn-12331.exe (PID: 12260)
      • Unicorn-27252.exe (PID: 3100)
      • Unicorn-3342.exe (PID: 5552)
      • Unicorn-4547.exe (PID: 12376)
      • Unicorn-65292.exe (PID: 12468)
      • Unicorn-36974.exe (PID: 12516)
      • Unicorn-36974.exe (PID: 12524)
      • Unicorn-57032.exe (PID: 12444)
      • Unicorn-62492.exe (PID: 12476)
      • Unicorn-50810.exe (PID: 12500)
      • Unicorn-6004.exe (PID: 12604)
      • Unicorn-26690.exe (PID: 12580)
      • Unicorn-47857.exe (PID: 12612)
      • Unicorn-14337.exe (PID: 12648)
      • Unicorn-49611.exe (PID: 12724)
      • Unicorn-50240.exe (PID: 12696)
      • Unicorn-49611.exe (PID: 12716)
      • Unicorn-10737.exe (PID: 12776)
      • Unicorn-13430.exe (PID: 12792)
      • Unicorn-55754.exe (PID: 12844)
      • Unicorn-60301.exe (PID: 12888)
      • Unicorn-10545.exe (PID: 12896)
      • Unicorn-39134.exe (PID: 12964)
      • Unicorn-39134.exe (PID: 12956)
      • Unicorn-61427.exe (PID: 13004)
      • Unicorn-50187.exe (PID: 12820)
      • Unicorn-55754.exe (PID: 12852)
      • Unicorn-53908.exe (PID: 13080)
      • Unicorn-7421.exe (PID: 13168)
      • Unicorn-53908.exe (PID: 13076)
      • Unicorn-25280.exe (PID: 13032)
      • Unicorn-48262.exe (PID: 13192)
      • Unicorn-15397.exe (PID: 13232)
      • Unicorn-11313.exe (PID: 13240)
      • Unicorn-46316.exe (PID: 13160)
      • Unicorn-32288.exe (PID: 13288)
      • Unicorn-22750.exe (PID: 13320)
      • Unicorn-33771.exe (PID: 6944)
      • Unicorn-22750.exe (PID: 5596)
      • Unicorn-15974.exe (PID: 8060)
      • Unicorn-60322.exe (PID: 13272)
      • Unicorn-60322.exe (PID: 13280)
      • Unicorn-3621.exe (PID: 13364)
      • Unicorn-60633.exe (PID: 13336)
      • Unicorn-11432.exe (PID: 13424)
      • Unicorn-54676.exe (PID: 13396)
      • Unicorn-24041.exe (PID: 13448)
      • Unicorn-24041.exe (PID: 13452)
      • Unicorn-17728.exe (PID: 13464)
      • Unicorn-17920.exe (PID: 13356)
      • Unicorn-40478.exe (PID: 13372)
      • Unicorn-10306.exe (PID: 13520)
      • Unicorn-62579.exe (PID: 13616)
      • Unicorn-13643.exe (PID: 13492)
      • Unicorn-20420.exe (PID: 13512)
      • Unicorn-30071.exe (PID: 13536)

    • Reads security settings of Internet Explorer

      • BackgroundTransferHost.exe (PID: 5400)
      • BackgroundTransferHost.exe (PID: 1012)
      • BackgroundTransferHost.exe (PID: 7520)
      • BackgroundTransferHost.exe (PID: 7824)
      • BackgroundTransferHost.exe (PID: 7680)

    • Creates files or folders in the user directory

      • BackgroundTransferHost.exe (PID: 1012)

    • Checks proxy server information

      • BackgroundTransferHost.exe (PID: 1012)

    • Reads the software policy settings

      • BackgroundTransferHost.exe (PID: 1012)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | DOS Executable Generic (100)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:01:19 13:34:56+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 299008
UninitializedDataSize: -
EntryPoint: 0x13d4
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
InternalName: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
475
Monitored processes
344
Malicious processes
53
Suspicious processes
44

Behavior graph

Click at the process to see the details
start 1 (434).exe unicorn-63596.exe sppextcomobj.exe no specs unicorn-17494.exe unicorn-58889.exe unicorn-12999.exe unicorn-43726.exe unicorn-64238.exe unicorn-46419.exe unicorn-22320.exe unicorn-59631.exe unicorn-24820.exe unicorn-5791.exe unicorn-5791.exe unicorn-1442.exe unicorn-61114.exe backgroundtransferhost.exe no specs unicorn-22044.exe backgroundtransferhost.exe unicorn-49886.exe unicorn-56663.exe unicorn-5345.exe unicorn-56584.exe unicorn-27904.exe unicorn-48416.exe unicorn-15652.exe unicorn-15652.exe unicorn-11567.exe unicorn-11567.exe unicorn-53155.exe unicorn-37753.exe unicorn-18152.exe unicorn-29087.exe backgroundtransferhost.exe no specs unicorn-22450.exe unicorn-8151.exe unicorn-18942.exe backgroundtransferhost.exe no specs unicorn-25718.exe unicorn-41500.exe unicorn-61820.exe unicorn-2221.exe unicorn-31556.exe unicorn-23410.exe unicorn-10892.exe unicorn-35470.exe unicorn-64805.exe unicorn-19134.exe unicorn-37151.exe unicorn-12911.exe unicorn-43638.exe unicorn-43638.exe unicorn-12911.exe unicorn-40130.exe unicorn-40130.exe unicorn-36046.exe unicorn-40130.exe unicorn-55697.exe unicorn-6695.exe unicorn-61297.exe unicorn-61297.exe unicorn-9495.exe unicorn-52190.exe unicorn-58967.exe unicorn-36430.exe unicorn-62807.exe unicorn-32154.exe backgroundtransferhost.exe no specs unicorn-34846.exe unicorn-38184.exe unicorn-64826.exe unicorn-30016.exe unicorn-50528.exe unicorn-36792.exe unicorn-52309.exe unicorn-20478.exe unicorn-27254.exe unicorn-65402.exe unicorn-51104.exe unicorn-63264.exe unicorn-420.exe unicorn-46928.exe unicorn-60364.exe unicorn-24946.exe unicorn-12428.exe unicorn-37290.exe unicorn-37290.exe unicorn-56227.exe unicorn-22616.exe unicorn-62178.exe unicorn-29222.exe unicorn-47696.exe unicorn-50197.exe unicorn-9985.exe unicorn-4909.exe unicorn-53295.exe unicorn-56824.exe unicorn-34820.exe unicorn-15792.exe unicorn-42242.exe unicorn-9377.exe unicorn-12070.exe unicorn-42796.exe unicorn-46326.exe unicorn-3923.exe unicorn-34650.exe unicorn-22398.exe unicorn-29174.exe unicorn-40680.exe unicorn-2962.exe unicorn-8562.exe unicorn-59154.exe unicorn-394.exe unicorn-38542.exe unicorn-52700.exe unicorn-54970.exe unicorn-1593.exe unicorn-12454.exe unicorn-23887.exe unicorn-8447.exe unicorn-28584.exe unicorn-24500.exe unicorn-62024.exe unicorn-25822.exe unicorn-48381.exe unicorn-29251.exe unicorn-63778.exe unicorn-47256.exe unicorn-17292.exe unicorn-19137.exe unicorn-4847.exe unicorn-42372.exe unicorn-7561.exe unicorn-56570.exe unicorn-1894.exe unicorn-23706.exe unicorn-65293.exe unicorn-34566.exe unicorn-15537.exe unicorn-38096.exe unicorn-27881.exe unicorn-60462.exe unicorn-62911.exe unicorn-24282.exe unicorn-26974.exe unicorn-37909.exe unicorn-42756.exe unicorn-41172.exe unicorn-32258.exe unicorn-30866.exe unicorn-9791.exe unicorn-46648.exe unicorn-9434.exe unicorn-29926.exe unicorn-16498.exe unicorn-61422.exe unicorn-53254.exe unicorn-45086.exe unicorn-24474.exe unicorn-23082.exe unicorn-24373.exe unicorn-37280.exe unicorn-9321.exe unicorn-63679.exe unicorn-51692.exe unicorn-16882.exe unicorn-9076.exe unicorn-59403.exe unicorn-49362.exe unicorn-45278.exe unicorn-49838.exe unicorn-21158.exe unicorn-23850.exe unicorn-17384.exe unicorn-27764.exe unicorn-27764.exe unicorn-58298.exe unicorn-26180.exe unicorn-26180.exe unicorn-7151.exe unicorn-5681.exe unicorn-544.exe unicorn-37276.exe unicorn-39776.exe unicorn-30862.exe unicorn-57504.exe unicorn-12479.exe unicorn-17218.exe unicorn-32899.exe unicorn-46383.exe unicorn-31438.exe unicorn-7488.exe unicorn-2657.exe unicorn-40160.exe unicorn-45728.exe unicorn-25115.exe unicorn-7296.exe unicorn-33938.exe unicorn-33938.exe unicorn-21686.exe unicorn-22977.exe unicorn-59834.exe unicorn-25024.exe unicorn-35884.exe unicorn-41452.exe unicorn-287.exe unicorn-54359.exe unicorn-64010.exe unicorn-38598.exe unicorn-45947.exe no specs unicorn-46212.exe unicorn-47007.exe no specs unicorn-28292.exe unicorn-42028.exe no specs unicorn-9263.exe no specs unicorn-9263.exe no specs unicorn-9263.exe no specs unicorn-333.exe unicorn-31630.exe no specs unicorn-23462.exe no specs unicorn-15293.exe unicorn-15028.exe no specs unicorn-37852.exe no specs unicorn-33576.exe no specs unicorn-29492.exe no specs unicorn-9071.exe no specs unicorn-1479.exe no specs unicorn-17816.exe no specs unicorn-59403.exe no specs unicorn-51235.exe no specs unicorn-62740.exe no specs unicorn-58656.exe no specs unicorn-26538.exe no specs unicorn-15577.exe no specs unicorn-15577.exe no specs unicorn-52434.exe no specs unicorn-36674.exe no specs unicorn-36674.exe no specs unicorn-11904.exe no specs unicorn-59787.exe no specs unicorn-46788.exe no specs unicorn-23268.exe no specs unicorn-59595.exe no specs unicorn-48512.exe no specs unicorn-44925.exe no specs unicorn-62081.exe no specs unicorn-2574.exe no specs unicorn-64027.exe no specs unicorn-21048.exe no specs unicorn-65510.exe no specs unicorn-54489.exe no specs unicorn-8817.exe no specs unicorn-39544.exe no specs unicorn-64140.exe no specs unicorn-15594.exe no specs unicorn-25245.exe no specs unicorn-33876.exe no specs unicorn-6414.exe no specs unicorn-48267.exe no specs unicorn-47520.exe no specs unicorn-38590.exe no specs unicorn-12709.exe no specs unicorn-15402.exe no specs unicorn-36444.exe no specs unicorn-20969.exe no specs unicorn-33684.exe no specs unicorn-39252.exe no specs unicorn-24146.exe no specs unicorn-56356.exe no specs unicorn-27411.exe no specs unicorn-27676.exe no specs unicorn-3534.exe no specs unicorn-41874.exe no specs unicorn-12331.exe no specs unicorn-27252.exe no specs unicorn-3342.exe no specs unicorn-52543.exe no specs unicorn-48459.exe no specs unicorn-6056.exe no specs unicorn-16362.exe no specs unicorn-17653.exe no specs unicorn-15350.exe no specs unicorn-32043.exe no specs unicorn-39350.exe no specs unicorn-4547.exe no specs unicorn-46897.exe no specs unicorn-12086.exe no specs unicorn-57032.exe no specs unicorn-65292.exe no specs unicorn-62492.exe no specs unicorn-50810.exe no specs unicorn-36974.exe no specs unicorn-36974.exe no specs unicorn-26690.exe no specs unicorn-6004.exe no specs unicorn-47857.exe no specs unicorn-14337.exe no specs unicorn-50240.exe no specs unicorn-49611.exe no specs unicorn-49611.exe no specs unicorn-10737.exe no specs unicorn-13430.exe no specs unicorn-50187.exe no specs unicorn-55754.exe no specs unicorn-55754.exe no specs unicorn-60301.exe no specs unicorn-10545.exe no specs unicorn-39134.exe no specs unicorn-39134.exe no specs unicorn-61427.exe no specs unicorn-25280.exe no specs unicorn-53908.exe no specs unicorn-53908.exe no specs unicorn-46316.exe no specs unicorn-7421.exe no specs unicorn-48262.exe no specs unicorn-15397.exe no specs unicorn-11313.exe no specs unicorn-60322.exe no specs unicorn-60322.exe no specs unicorn-32288.exe no specs unicorn-33771.exe no specs unicorn-15974.exe no specs unicorn-22750.exe no specs unicorn-22750.exe no specs unicorn-60633.exe no specs unicorn-17920.exe no specs unicorn-3621.exe no specs unicorn-40478.exe no specs unicorn-54676.exe no specs unicorn-11432.exe no specs unicorn-24041.exe no specs unicorn-24041.exe no specs unicorn-17728.exe no specs unicorn-13643.exe no specs unicorn-20420.exe no specs unicorn-10306.exe no specs unicorn-30071.exe no specs unicorn-62579.exe no specs unicorn-65293.exe no specs unicorn-59428.exe no specs unicorn-24617.exe no specs unicorn-24617.exe no specs unicorn-38816.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
632C:\Users\admin\AppData\Local\Temp\Unicorn-61114.exeC:\Users\admin\AppData\Local\Temp\Unicorn-61114.exe
Unicorn-63596.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-61114.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
668C:\Users\admin\AppData\Local\Temp\Unicorn-29251.exeC:\Users\admin\AppData\Local\Temp\Unicorn-29251.exe
Unicorn-22044.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-29251.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
720C:\Users\admin\AppData\Local\Temp\Unicorn-1442.exeC:\Users\admin\AppData\Local\Temp\Unicorn-1442.exe
1 (434).exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-1442.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
900C:\Users\admin\AppData\Local\Temp\Unicorn-17494.exeC:\Users\admin\AppData\Local\Temp\Unicorn-17494.exe
Unicorn-63596.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-17494.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1012"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.1C:\Windows\System32\BackgroundTransferHost.exe
svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Download/Upload Host
Exit code:
1
Version:
10.0.19041.3636 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\backgroundtransferhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\kernel.appcore.dll
c:\windows\system32\bcryptprimitives.dll
1168C:\Users\admin\AppData\Local\Temp\Unicorn-37290.exeC:\Users\admin\AppData\Local\Temp\Unicorn-37290.exe
Unicorn-5791.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-37290.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1452C:\Users\admin\AppData\Local\Temp\Unicorn-65402.exeC:\Users\admin\AppData\Local\Temp\Unicorn-65402.exe
Unicorn-31556.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-65402.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1672C:\Users\admin\AppData\Local\Temp\Unicorn-36046.exeC:\Users\admin\AppData\Local\Temp\Unicorn-36046.exe
Unicorn-37753.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-36046.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1812C:\Users\admin\AppData\Local\Temp\Unicorn-5791.exeC:\Users\admin\AppData\Local\Temp\Unicorn-5791.exe
Unicorn-46419.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-5791.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1912C:\Users\admin\AppData\Local\Temp\Unicorn-43638.exeC:\Users\admin\AppData\Local\Temp\Unicorn-43638.exe
Unicorn-53155.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-43638.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
Total events
8 614
Read events
8 599
Write events
15
Delete events
0

Modification events

(PID) Process:(5400) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(5400) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(5400) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(1012) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(1012) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(1012) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(7520) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(7520) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(7520) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(7824) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
Executable files
1 026
Suspicious files
5
Text files
0
Unknown types
0

Dropped files

PID
Process
Filename
Type
1012BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\65bc04cf-f638-4175-bfd1-92b34b2b452f.down_data —
MD5:—
SHA256:—
2384Unicorn-63596.exeC:\Users\admin\AppData\Local\Temp\Unicorn-17494.exeexecutable
MD5:0600A69EBDE1D79C18C189521BA75DC7
SHA256:99276796642980C02636FFF701164CAF42D5DF1704540BB2CC9C868257380297
63721 (434).exeC:\Users\admin\AppData\Local\Temp\Unicorn-58889.exeexecutable
MD5:BDAA39AC3ECA11CEC63C603B98028E07
SHA256:29743C69FC37F856749137B9D2AED0BB9CF853E1161F9449BE60FBCC68695AD6
6560Unicorn-58889.exeC:\Users\admin\AppData\Local\Temp\Unicorn-12999.exeexecutable
MD5:CC3887F6A7A72C4F0ED3A3CEE7F02A5C
SHA256:3EBD607766F6E9B19A25F1139DFD2CDDBCB843A3BCCAFA1E34884C1FE2AC802D
1012BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10Dbinary
MD5:EA1D3E258BD716F797E5745E4164F0BC
SHA256:8CB8328B6F7D26890C4B8DCD2F4471EE749492F5A6F95B8E718483EA9819F4B0
7012Unicorn-43726.exeC:\Users\admin\AppData\Local\Temp\Unicorn-22044.exeexecutable
MD5:8AB06C039A1E3D2C966CF2441E5677B6
SHA256:7BF6F92B24F631011B159DE2B519A9CA396CDE951A26A6F2B6A2B0A9438AD073
3240Unicorn-22320.exeC:\Users\admin\AppData\Local\Temp\Unicorn-49886.exeexecutable
MD5:96BFB887AF545B7FA848A5EB2D9F4BBE
SHA256:ACBF44D823209BECE4D1975CCB2CDAE7ECDD7EB1AB5ADD96D1796BC1F4720532
5256Unicorn-12999.exeC:\Users\admin\AppData\Local\Temp\Unicorn-56663.exeexecutable
MD5:3FB21C151630F80BC726BE7DAC8BA9AF
SHA256:2A908A90BAB883FE2B099AE7428A0D301B2FAE23CA6417BAD6384027666639B2
5780Unicorn-59631.exeC:\Users\admin\AppData\Local\Temp\Unicorn-5345.exeexecutable
MD5:B9D19BDE6A95AC0477A9EE2AD121F5EB
SHA256:D6E27EA2D05207E3010460129934B0A3BDCCF98720B610DF80B074E0B8A3AC8C
1012BackgroundTransferHost.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10Dbinary
MD5:4872BABAF39AA62B8D32695EBB7E9173
SHA256:2EE85DF86EE29BBEB3DCA81AA29B6DE204F605A2769B84C728A329178A2D0999
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
7
TCP/UDP connections
27
DNS requests
17
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
—
—
GET
304
23.48.23.176:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
—
—
GET
200
23.48.23.176:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
6544
svchost.exe
GET
200
2.17.190.73:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
2852
backgroundTaskHost.exe
GET
200
2.17.190.73:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
whitelisted
1012
BackgroundTransferHost.exe
GET
200
2.17.190.73:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
8368
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
8368
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:138
—
—
—
whitelisted
—
—
51.124.78.146:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
—
—
23.48.23.176:80
crl.microsoft.com
Akamai International B.V.
DE
whitelisted
—
—
20.197.71.89:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
SG
whitelisted
—
—
20.190.160.130:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
2.17.190.73:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted
6544
svchost.exe
20.190.160.130:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
3216
svchost.exe
20.197.71.89:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
SG
whitelisted
2112
svchost.exe
40.127.240.158:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
2852
backgroundTaskHost.exe
20.105.99.58:443
arc.msn.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 51.124.78.146
  • 40.127.240.158
whitelisted
google.com
  • 216.58.206.78
whitelisted
crl.microsoft.com
  • 23.48.23.176
  • 23.48.23.166
  • 23.48.23.173
whitelisted
client.wns.windows.com
  • 20.197.71.89
whitelisted
login.live.com
  • 20.190.160.130
  • 40.126.32.138
  • 20.190.160.5
  • 20.190.160.132
  • 40.126.32.140
  • 20.190.160.65
  • 20.190.160.20
  • 20.190.160.17
whitelisted
ocsp.digicert.com
  • 2.17.190.73
whitelisted
arc.msn.com
  • 20.105.99.58
whitelisted
www.bing.com
  • 104.126.37.171
  • 104.126.37.176
  • 104.126.37.129
  • 104.126.37.178
  • 104.126.37.179
  • 104.126.37.168
  • 104.126.37.186
  • 104.126.37.130
  • 104.126.37.184
whitelisted
slscr.update.microsoft.com
  • 4.175.87.197
whitelisted
www.microsoft.com
  • 184.30.21.171
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
1 (434)