File name:

1 (502)

Full analysis: https://app.any.run/tasks/9d04a171-9876-487a-9d96-70919ff4d238
Verdict: Malicious activity
Analysis date: March 25, 2025, 01:18:15
OS: Windows 10 Professional (build: 19045, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 3 sections
MD5:

21BFA9083B3C67DA24021D54002AB180

SHA1:

4B948A04A7585B439D2969BCF86A03683C024E22

SHA256:

D4BA347422B6BACB9EE7CB7343FC7C9150E1E7124A1DF79AE16BE7AE1B4FF801

SSDEEP:

6144:K7agk/OPdDHhAalvtdeUpe4x/EBTlvJGB8/WteOSsk/8SwQwpyAvEhS+f21E9RMa:KmF2dhAaNtUpBZha8OteOSSx4DxmDsR

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • Unicorn-47737.exe (PID: 496)
      • 1 (502).exe (PID: 4880)
      • Unicorn-60345.exe (PID: 6272)
      • Unicorn-1969.exe (PID: 6240)
      • Unicorn-61067.exe (PID: 3304)
      • Unicorn-11871.exe (PID: 1280)
      • Unicorn-49526.exe (PID: 6456)
      • Unicorn-11107.exe (PID: 2516)
      • Unicorn-63862.exe (PID: 6988)
      • Unicorn-20753.exe (PID: 1020)
      • Unicorn-30152.exe (PID: 900)
      • Unicorn-60778.exe (PID: 2152)
      • Unicorn-42923.exe (PID: 2096)
      • Unicorn-23057.exe (PID: 3884)
      • Unicorn-1324.exe (PID: 1128)
      • Unicorn-30364.exe (PID: 1040)
      • Unicorn-26219.exe (PID: 1012)
      • Unicorn-60235.exe (PID: 2984)
      • Unicorn-25451.exe (PID: 208)
      • Unicorn-5393.exe (PID: 1240)
      • Unicorn-26824.exe (PID: 7216)
      • Unicorn-6421.exe (PID: 7176)
      • Unicorn-26110.exe (PID: 7236)
      • Unicorn-15274.exe (PID: 7184)
      • Unicorn-32991.exe (PID: 7192)
      • Unicorn-20843.exe (PID: 7252)
      • Unicorn-27848.exe (PID: 728)
      • Unicorn-15175.exe (PID: 7244)
      • Unicorn-52669.exe (PID: 7200)
      • Unicorn-6997.exe (PID: 7208)
      • Unicorn-41611.exe (PID: 7484)
      • Unicorn-7018.exe (PID: 7552)
      • Unicorn-42684.exe (PID: 7524)
      • Unicorn-24707.exe (PID: 7568)
      • Unicorn-21046.exe (PID: 7648)
      • Unicorn-54105.exe (PID: 5360)
      • Unicorn-57677.exe (PID: 7716)
      • Unicorn-31225.exe (PID: 7780)
      • Unicorn-57182.exe (PID: 7788)
      • Unicorn-22445.exe (PID: 7548)
      • Unicorn-47478.exe (PID: 7852)
      • Unicorn-64546.exe (PID: 7576)
      • Unicorn-61650.exe (PID: 7620)
      • Unicorn-31670.exe (PID: 7816)
      • Unicorn-57942.exe (PID: 7708)
      • Unicorn-17202.exe (PID: 7924)
      • Unicorn-63139.exe (PID: 7944)
      • Unicorn-56715.exe (PID: 7844)
      • Unicorn-18104.exe (PID: 7868)
      • Unicorn-43062.exe (PID: 8116)
      • Unicorn-21823.exe (PID: 7756)
      • Unicorn-4369.exe (PID: 7860)
      • Unicorn-49533.exe (PID: 7472)
      • Unicorn-23196.exe (PID: 8128)
      • Unicorn-48002.exe (PID: 1324)
      • Unicorn-26783.exe (PID: 7400)
      • Unicorn-4613.exe (PID: 8136)
      • Unicorn-20652.exe (PID: 7416)
      • Unicorn-44441.exe (PID: 8168)
      • Unicorn-10005.exe (PID: 8088)
      • Unicorn-26076.exe (PID: 7428)
      • Unicorn-57483.exe (PID: 7888)
      • Unicorn-37515.exe (PID: 2852)
      • Unicorn-54271.exe (PID: 8156)
      • Unicorn-8578.exe (PID: 1348)
      • Unicorn-12231.exe (PID: 8004)
      • Unicorn-55979.exe (PID: 8228)
      • Unicorn-64644.exe (PID: 8324)
      • Unicorn-54546.exe (PID: 8184)
      • Unicorn-60011.exe (PID: 7544)
      • Unicorn-55211.exe (PID: 8204)
      • Unicorn-1365.exe (PID: 8080)
      • Unicorn-33041.exe (PID: 7732)
      • Unicorn-16377.exe (PID: 8504)
      • Unicorn-21241.exe (PID: 732)
      • Unicorn-51656.exe (PID: 1132)
      • Unicorn-36124.exe (PID: 7348)
      • Unicorn-3434.exe (PID: 8548)
      • Unicorn-17596.exe (PID: 8108)
      • Unicorn-37718.exe (PID: 8312)
      • Unicorn-14389.exe (PID: 8764)
      • Unicorn-16394.exe (PID: 7452)
      • Unicorn-15178.exe (PID: 9156)
      • Unicorn-34606.exe (PID: 8604)
      • Unicorn-3480.exe (PID: 9088)
      • Unicorn-2993.exe (PID: 8844)
      • Unicorn-46610.exe (PID: 8568)
      • Unicorn-30531.exe (PID: 8488)
      • Unicorn-24203.exe (PID: 8800)
      • Unicorn-37576.exe (PID: 9132)
      • Unicorn-34968.exe (PID: 8464)
      • Unicorn-25944.exe (PID: 8756)
      • Unicorn-23843.exe (PID: 8780)
      • Unicorn-53782.exe (PID: 8640)
      • Unicorn-43740.exe (PID: 6972)
      • Unicorn-61743.exe (PID: 6656)
      • Unicorn-19587.exe (PID: 8580)
      • Unicorn-53419.exe (PID: 8972)
      • Unicorn-60886.exe (PID: 7372)
      • Unicorn-8821.exe (PID: 8916)
      • Unicorn-24395.exe (PID: 8788)
      • Unicorn-36604.exe (PID: 8456)
      • Unicorn-39012.exe (PID: 8812)
      • Unicorn-18827.exe (PID: 9020)
      • Unicorn-44627.exe (PID: 9904)
      • Unicorn-43794.exe (PID: 7344)
      • Unicorn-10802.exe (PID: 9956)
      • Unicorn-54187.exe (PID: 8852)
      • Unicorn-23569.exe (PID: 10032)
      • Unicorn-39693.exe (PID: 8928)
      • Unicorn-39958.exe (PID: 8936)
      • Unicorn-62184.exe (PID: 9048)
      • Unicorn-26129.exe (PID: 8272)
      • Unicorn-21448.exe (PID: 8544)
      • Unicorn-54173.exe (PID: 8420)
      • Unicorn-60834.exe (PID: 8692)
      • Unicorn-60331.exe (PID: 8672)
      • Unicorn-53353.exe (PID: 7976)
      • Unicorn-50603.exe (PID: 8356)
      • Unicorn-9345.exe (PID: 9080)
      • Unicorn-11917.exe (PID: 9408)
      • Unicorn-41160.exe (PID: 9796)
      • Unicorn-26486.exe (PID: 8532)
      • Unicorn-47592.exe (PID: 9240)
      • Unicorn-36886.exe (PID: 6148)
      • Unicorn-46822.exe (PID: 10192)
      • Unicorn-17256.exe (PID: 8000)
      • Unicorn-42204.exe (PID: 7964)
      • Unicorn-3078.exe (PID: 8216)
      • Unicorn-50333.exe (PID: 8292)
      • Unicorn-1468.exe (PID: 9248)
      • Unicorn-21559.exe (PID: 9804)
      • Unicorn-44186.exe (PID: 6668)
      • Unicorn-3413.exe (PID: 8480)
      • Unicorn-39822.exe (PID: 8340)
      • Unicorn-18556.exe (PID: 9140)
      • Unicorn-29896.exe (PID: 9188)
      • Unicorn-18059.exe (PID: 8908)
      • Unicorn-61416.exe (PID: 9040)
      • Unicorn-64859.exe (PID: 11076)
      • Unicorn-8176.exe (PID: 9776)
      • Unicorn-16820.exe (PID: 11148)
      • Unicorn-9965.exe (PID: 11008)
      • Unicorn-22873.exe (PID: 9612)
      • Unicorn-44994.exe (PID: 11064)
      • Unicorn-26134.exe (PID: 9264)
      • Unicorn-56672.exe (PID: 9104)
      • Unicorn-1906.exe (PID: 10872)
      • Unicorn-25198.exe (PID: 9768)
      • Unicorn-1965.exe (PID: 5392)
      • Unicorn-63455.exe (PID: 5956)
      • Unicorn-4852.exe (PID: 12824)
      • Unicorn-16335.exe (PID: 9096)
      • Unicorn-34664.exe (PID: 8516)
      • Unicorn-28447.exe (PID: 9064)
      • Unicorn-58079.exe (PID: 12800)
      • Unicorn-18587.exe (PID: 12784)
      • Unicorn-5002.exe (PID: 6540)
      • Unicorn-42262.exe (PID: 9000)
      • Unicorn-56017.exe (PID: 9308)
      • Unicorn-43740.exe (PID: 4112)
      • Unicorn-4165.exe (PID: 10184)
      • Unicorn-7998.exe (PID: 10896)
      • Unicorn-56245.exe (PID: 9444)
      • Unicorn-1622.exe (PID: 10160)
      • Unicorn-53043.exe (PID: 11212)
      • Unicorn-14410.exe (PID: 9124)
      • Unicorn-4439.exe (PID: 9336)
      • Unicorn-14957.exe (PID: 10672)
      • Unicorn-37291.exe (PID: 6192)
      • Unicorn-38384.exe (PID: 9568)
      • Unicorn-29940.exe (PID: 9872)
      • Unicorn-47905.exe (PID: 9552)
      • Unicorn-21268.exe (PID: 10140)
      • Unicorn-32500.exe (PID: 4056)
      • Unicorn-36523.exe (PID: 7360)
      • Unicorn-38384.exe (PID: 9576)
      • Unicorn-52819.exe (PID: 10388)
      • Unicorn-48014.exe (PID: 10700)
      • Unicorn-38251.exe (PID: 6768)
      • Unicorn-42183.exe (PID: 9072)
      • Unicorn-13650.exe (PID: 11448)
      • Unicorn-11373.exe (PID: 10152)
      • Unicorn-38841.exe (PID: 9204)
      • Unicorn-11117.exe (PID: 10652)
      • Unicorn-40355.exe (PID: 13212)
      • Unicorn-52275.exe (PID: 11200)
      • Unicorn-51283.exe (PID: 10476)
      • Unicorn-31432.exe (PID: 9112)
      • Unicorn-48562.exe (PID: 9280)
      • Unicorn-27488.exe (PID: 15224)
      • Unicorn-36527.exe (PID: 15280)
      • Unicorn-43740.exe (PID: 4220)
      • Unicorn-29565.exe (PID: 15236)
      • Unicorn-33707.exe (PID: 10920)
      • Unicorn-442.exe (PID: 7532)
      • Unicorn-12788.exe (PID: 11024)
      • Unicorn-54485.exe (PID: 10852)
      • Unicorn-49244.exe (PID: 9684)
      • Unicorn-28238.exe (PID: 11436)
      • Unicorn-10513.exe (PID: 9256)
      • Unicorn-11163.exe (PID: 12132)
      • Unicorn-3196.exe (PID: 5892)
      • Unicorn-45666.exe (PID: 6108)
      • Unicorn-23001.exe (PID: 11936)
      • Unicorn-51637.exe (PID: 9540)
      • Unicorn-13426.exe (PID: 10620)
      • Unicorn-42385.exe (PID: 15004)
      • Unicorn-55573.exe (PID: 11916)
      • Unicorn-29523.exe (PID: 12428)
      • Unicorn-42620.exe (PID: 12840)
      • Unicorn-20177.exe (PID: 12332)
      • Unicorn-286.exe (PID: 11636)
      • Unicorn-35213.exe (PID: 14868)
      • Unicorn-37454.exe (PID: 10796)
      • Unicorn-3572.exe (PID: 11628)
      • Unicorn-23880.exe (PID: 12492)
      • Unicorn-12877.exe (PID: 11716)
      • Unicorn-32500.exe (PID: 5544)
      • Unicorn-11876.exe (PID: 10172)
      • Unicorn-3771.exe (PID: 9836)
      • Unicorn-9527.exe (PID: 14416)
      • Unicorn-10605.exe (PID: 14760)
      • Unicorn-32500.exe (PID: 2140)
      • Unicorn-47731.exe (PID: 13568)
      • Unicorn-46801.exe (PID: 9600)
      • Unicorn-46703.exe (PID: 14684)
      • Unicorn-57656.exe (PID: 7048)
      • Unicorn-42067.exe (PID: 10540)
      • Unicorn-3858.exe (PID: 9372)
      • Unicorn-19421.exe (PID: 10408)
      • Unicorn-5598.exe (PID: 12484)
      • Unicorn-19054.exe (PID: 9896)
      • Unicorn-38483.exe (PID: 10116)
      • Unicorn-62273.exe (PID: 10912)
      • Unicorn-40409.exe (PID: 12768)
      • Unicorn-23700.exe (PID: 11000)
      • Unicorn-16182.exe (PID: 536)
      • Unicorn-28889.exe (PID: 13136)
      • Unicorn-45333.exe (PID: 10324)
      • Unicorn-36909.exe (PID: 9740)
      • Unicorn-43242.exe (PID: 2288)
      • Unicorn-26542.exe (PID: 15472)
      • Unicorn-21147.exe (PID: 11220)
      • Unicorn-56961.exe (PID: 10232)
      • Unicorn-1012.exe (PID: 12716)
      • Unicorn-34782.exe (PID: 14212)
      • Unicorn-9074.exe (PID: 9860)
      • Unicorn-64371.exe (PID: 10780)
      • Unicorn-15155.exe (PID: 14692)
      • Unicorn-32500.exe (PID: 2392)
      • Unicorn-39324.exe (PID: 9288)
      • Unicorn-9716.exe (PID: 4284)
      • Unicorn-19270.exe (PID: 14784)
      • Unicorn-28889.exe (PID: 12740)
      • Unicorn-36691.exe (PID: 10660)
      • Unicorn-64933.exe (PID: 10332)
      • Unicorn-21209.exe (PID: 13004)
      • Unicorn-22996.exe (PID: 9436)
      • Unicorn-17485.exe (PID: 10248)
      • Unicorn-4205.exe (PID: 10788)
      • Unicorn-40581.exe (PID: 11996)
      • Unicorn-38384.exe (PID: 9560)
      • Unicorn-22914.exe (PID: 10760)
      • Unicorn-7291.exe (PID: 10720)
      • Unicorn-54414.exe (PID: 9752)
      • Unicorn-40121.exe (PID: 9456)
      • Unicorn-9941.exe (PID: 3676)
      • Unicorn-7264.exe (PID: 12756)
      • Unicorn-39692.exe (PID: 10208)
      • Unicorn-23173.exe (PID: 9732)
      • Unicorn-63786.exe (PID: 10880)
      • Unicorn-6925.exe (PID: 14676)
      • Unicorn-35767.exe (PID: 14708)
      • Unicorn-35508.exe (PID: 9692)
      • Unicorn-11463.exe (PID: 12472)
      • Unicorn-65207.exe (PID: 14768)
      • Unicorn-40555.exe (PID: 7408)
      • Unicorn-52088.exe (PID: 11648)
      • Unicorn-20900.exe (PID: 10988)
      • Unicorn-14836.exe (PID: 11896)
      • Unicorn-12788.exe (PID: 11032)
      • Unicorn-24416.exe (PID: 10836)
      • Unicorn-42917.exe (PID: 12976)
      • Unicorn-32500.exe (PID: 14328)
      • Unicorn-25118.exe (PID: 9848)
      • Unicorn-57586.exe (PID: 9056)
      • Unicorn-65198.exe (PID: 10344)
      • Unicorn-27470.exe (PID: 11228)
      • Unicorn-37777.exe (PID: 15132)
      • Unicorn-20660.exe (PID: 10952)
      • Unicorn-65207.exe (PID: 14776)
      • Unicorn-45112.exe (PID: 12920)
      • Unicorn-58945.exe (PID: 12056)
      • Unicorn-120.exe (PID: 13072)
      • Unicorn-37368.exe (PID: 12548)
      • Unicorn-12874.exe (PID: 9212)
      • Unicorn-43182.exe (PID: 12968)

    • Starts itself from another location

      • 1 (502).exe (PID: 4880)
      • Unicorn-47737.exe (PID: 496)
      • Unicorn-60345.exe (PID: 6272)
      • Unicorn-1969.exe (PID: 6240)
      • Unicorn-61067.exe (PID: 3304)
      • Unicorn-11871.exe (PID: 1280)
      • Unicorn-49526.exe (PID: 6456)
      • Unicorn-11107.exe (PID: 2516)
      • Unicorn-63862.exe (PID: 6988)
      • Unicorn-20753.exe (PID: 1020)
      • Unicorn-30152.exe (PID: 900)
      • Unicorn-42923.exe (PID: 2096)
      • Unicorn-27848.exe (PID: 728)
      • Unicorn-26219.exe (PID: 1012)
      • Unicorn-30364.exe (PID: 1040)
      • Unicorn-54105.exe (PID: 5360)
      • Unicorn-60235.exe (PID: 2984)
      • Unicorn-25451.exe (PID: 208)
      • Unicorn-1324.exe (PID: 1128)
      • Unicorn-5393.exe (PID: 1240)
      • Unicorn-15274.exe (PID: 7184)
      • Unicorn-32991.exe (PID: 7192)
      • Unicorn-26824.exe (PID: 7216)
      • Unicorn-6421.exe (PID: 7176)
      • Unicorn-26110.exe (PID: 7236)
      • Unicorn-60778.exe (PID: 2152)
      • Unicorn-20843.exe (PID: 7252)
      • Unicorn-52669.exe (PID: 7200)
      • Unicorn-15175.exe (PID: 7244)
      • Unicorn-6997.exe (PID: 7208)
      • Unicorn-23057.exe (PID: 3884)
      • Unicorn-41611.exe (PID: 7484)
      • Unicorn-7018.exe (PID: 7552)
      • Unicorn-42684.exe (PID: 7524)
      • Unicorn-24707.exe (PID: 7568)
      • Unicorn-21046.exe (PID: 7648)
      • Unicorn-31225.exe (PID: 7780)
      • Unicorn-57677.exe (PID: 7716)
      • Unicorn-47478.exe (PID: 7852)
      • Unicorn-57182.exe (PID: 7788)
      • Unicorn-61650.exe (PID: 7620)
      • Unicorn-64546.exe (PID: 7576)
      • Unicorn-31670.exe (PID: 7816)
      • Unicorn-22445.exe (PID: 7548)
      • Unicorn-57942.exe (PID: 7708)
      • Unicorn-17202.exe (PID: 7924)
      • Unicorn-63139.exe (PID: 7944)
      • Unicorn-56715.exe (PID: 7844)
      • Unicorn-43062.exe (PID: 8116)
      • Unicorn-21823.exe (PID: 7756)
      • Unicorn-18104.exe (PID: 7868)
      • Unicorn-4369.exe (PID: 7860)
      • Unicorn-49533.exe (PID: 7472)
      • Unicorn-23196.exe (PID: 8128)
      • Unicorn-48002.exe (PID: 1324)
      • Unicorn-26783.exe (PID: 7400)
      • Unicorn-20652.exe (PID: 7416)
      • Unicorn-17256.exe (PID: 8000)
      • Unicorn-4613.exe (PID: 8136)
      • Unicorn-26076.exe (PID: 7428)
      • Unicorn-37515.exe (PID: 2852)
      • Unicorn-57483.exe (PID: 7888)
      • Unicorn-60886.exe (PID: 7372)
      • Unicorn-64644.exe (PID: 8324)
      • Unicorn-8578.exe (PID: 1348)
      • Unicorn-54271.exe (PID: 8156)
      • Unicorn-3078.exe (PID: 8216)
      • Unicorn-54546.exe (PID: 8184)
      • Unicorn-60011.exe (PID: 7544)
      • Unicorn-1365.exe (PID: 8080)
      • Unicorn-12231.exe (PID: 8004)
      • Unicorn-55211.exe (PID: 8204)
      • Unicorn-33041.exe (PID: 7732)
      • Unicorn-16377.exe (PID: 8504)
      • Unicorn-21241.exe (PID: 732)
      • Unicorn-51656.exe (PID: 1132)
      • Unicorn-44441.exe (PID: 8168)
      • Unicorn-36124.exe (PID: 7348)
      • Unicorn-3434.exe (PID: 8548)
      • Unicorn-17596.exe (PID: 8108)
      • Unicorn-10005.exe (PID: 8088)
      • Unicorn-37718.exe (PID: 8312)
      • Unicorn-55979.exe (PID: 8228)
      • Unicorn-14389.exe (PID: 8764)
      • Unicorn-16394.exe (PID: 7452)
      • Unicorn-34606.exe (PID: 8604)
      • Unicorn-29896.exe (PID: 9188)
      • Unicorn-3480.exe (PID: 9088)
      • Unicorn-3413.exe (PID: 8480)
      • Unicorn-46610.exe (PID: 8568)
      • Unicorn-30531.exe (PID: 8488)
      • Unicorn-24203.exe (PID: 8800)
      • Unicorn-37576.exe (PID: 9132)
      • Unicorn-34968.exe (PID: 8464)
      • Unicorn-25944.exe (PID: 8756)
      • Unicorn-53782.exe (PID: 8640)
      • Unicorn-23843.exe (PID: 8780)
      • Unicorn-43740.exe (PID: 6972)
      • Unicorn-2993.exe (PID: 8844)
      • Unicorn-19587.exe (PID: 8580)
      • Unicorn-53419.exe (PID: 8972)
      • Unicorn-61743.exe (PID: 6656)
      • Unicorn-36604.exe (PID: 8456)
      • Unicorn-8821.exe (PID: 8916)
      • Unicorn-24395.exe (PID: 8788)
      • Unicorn-39012.exe (PID: 8812)
      • Unicorn-18827.exe (PID: 9020)
      • Unicorn-44627.exe (PID: 9904)
      • Unicorn-43794.exe (PID: 7344)
      • Unicorn-54187.exe (PID: 8852)
      • Unicorn-10802.exe (PID: 9956)
      • Unicorn-23569.exe (PID: 10032)
      • Unicorn-21448.exe (PID: 8544)
      • Unicorn-39693.exe (PID: 8928)
      • Unicorn-39958.exe (PID: 8936)
      • Unicorn-62184.exe (PID: 9048)
      • Unicorn-26129.exe (PID: 8272)
      • Unicorn-9345.exe (PID: 9080)
      • Unicorn-60834.exe (PID: 8692)
      • Unicorn-53353.exe (PID: 7976)
      • Unicorn-50603.exe (PID: 8356)
      • Unicorn-54173.exe (PID: 8420)
      • Unicorn-60331.exe (PID: 8672)
      • Unicorn-11917.exe (PID: 9408)
      • Unicorn-41160.exe (PID: 9796)
      • Unicorn-26486.exe (PID: 8532)
      • Unicorn-47592.exe (PID: 9240)
      • Unicorn-42204.exe (PID: 7964)
      • Unicorn-36886.exe (PID: 6148)
      • Unicorn-46822.exe (PID: 10192)
      • Unicorn-4165.exe (PID: 10184)
      • Unicorn-1468.exe (PID: 9248)
      • Unicorn-50333.exe (PID: 8292)
      • Unicorn-21559.exe (PID: 9804)
      • Unicorn-44186.exe (PID: 6668)
      • Unicorn-39822.exe (PID: 8340)
      • Unicorn-15178.exe (PID: 9156)
      • Unicorn-18556.exe (PID: 9140)
      • Unicorn-18059.exe (PID: 8908)
      • Unicorn-61416.exe (PID: 9040)
      • Unicorn-22873.exe (PID: 9612)
      • Unicorn-44994.exe (PID: 11064)
      • Unicorn-64859.exe (PID: 11076)
      • Unicorn-16820.exe (PID: 11148)
      • Unicorn-8176.exe (PID: 9776)
      • Unicorn-9965.exe (PID: 11008)
      • Unicorn-26134.exe (PID: 9264)
      • Unicorn-25198.exe (PID: 9768)
      • Unicorn-56672.exe (PID: 9104)
      • Unicorn-1965.exe (PID: 5392)
      • Unicorn-63455.exe (PID: 5956)
      • Unicorn-1906.exe (PID: 10872)
      • Unicorn-4852.exe (PID: 12824)
      • Unicorn-34664.exe (PID: 8516)
      • Unicorn-16335.exe (PID: 9096)
      • Unicorn-5002.exe (PID: 6540)
      • Unicorn-58079.exe (PID: 12800)
      • Unicorn-28447.exe (PID: 9064)
      • Unicorn-42262.exe (PID: 9000)
      • Unicorn-18587.exe (PID: 12784)
      • Unicorn-56245.exe (PID: 9444)
      • Unicorn-1622.exe (PID: 10160)
      • Unicorn-7998.exe (PID: 10896)
      • Unicorn-37454.exe (PID: 10796)
      • Unicorn-37291.exe (PID: 6192)
      • Unicorn-14410.exe (PID: 9124)
      • Unicorn-4439.exe (PID: 9336)
      • Unicorn-47905.exe (PID: 9552)
      • Unicorn-38384.exe (PID: 9568)
      • Unicorn-29940.exe (PID: 9872)
      • Unicorn-21268.exe (PID: 10140)
      • Unicorn-38384.exe (PID: 9576)
      • Unicorn-32500.exe (PID: 4056)
      • Unicorn-32500.exe (PID: 5544)
      • Unicorn-32500.exe (PID: 6488)
      • Unicorn-14957.exe (PID: 10672)
      • Unicorn-36523.exe (PID: 7360)
      • Unicorn-19054.exe (PID: 9896)
      • Unicorn-52819.exe (PID: 10388)
      • Unicorn-48014.exe (PID: 10700)
      • Unicorn-38251.exe (PID: 6768)
      • Unicorn-11373.exe (PID: 10152)
      • Unicorn-42183.exe (PID: 9072)
      • Unicorn-38841.exe (PID: 9204)
      • Unicorn-11117.exe (PID: 10652)
      • Unicorn-13650.exe (PID: 11448)
      • Unicorn-40355.exe (PID: 13212)
      • Unicorn-52275.exe (PID: 11200)
      • Unicorn-31432.exe (PID: 9112)
      • Unicorn-51283.exe (PID: 10476)
      • Unicorn-48562.exe (PID: 9280)

    • Executes application which crashes

      • Unicorn-12330.exe (PID: 10936)

  • INFO

    • Reads the computer name

      • Unicorn-47737.exe (PID: 496)
      • Unicorn-60345.exe (PID: 6272)
      • Unicorn-1969.exe (PID: 6240)
      • Unicorn-61067.exe (PID: 3304)
      • Unicorn-11107.exe (PID: 2516)
      • Unicorn-49526.exe (PID: 6456)
      • Unicorn-11871.exe (PID: 1280)
      • Unicorn-63862.exe (PID: 6988)
      • Unicorn-20753.exe (PID: 1020)
      • Unicorn-23057.exe (PID: 3884)
      • Unicorn-30152.exe (PID: 900)
      • Unicorn-60778.exe (PID: 2152)
      • Unicorn-42923.exe (PID: 2096)
      • Unicorn-1324.exe (PID: 1128)
      • Unicorn-27848.exe (PID: 728)
      • Unicorn-26219.exe (PID: 1012)
      • Unicorn-30364.exe (PID: 1040)
      • Unicorn-54105.exe (PID: 5360)
      • Unicorn-60235.exe (PID: 2984)
      • Unicorn-25451.exe (PID: 208)
      • Unicorn-5393.exe (PID: 1240)
      • Unicorn-32991.exe (PID: 7192)
      • Unicorn-15274.exe (PID: 7184)
      • Unicorn-26824.exe (PID: 7216)
      • Unicorn-6421.exe (PID: 7176)
      • Unicorn-26110.exe (PID: 7236)
      • 1 (502).exe (PID: 4880)
      • Unicorn-6997.exe (PID: 7208)
      • Unicorn-52669.exe (PID: 7200)
      • Unicorn-20843.exe (PID: 7252)
      • Unicorn-15175.exe (PID: 7244)
      • Unicorn-41611.exe (PID: 7484)
      • Unicorn-42684.exe (PID: 7524)
      • Unicorn-7018.exe (PID: 7552)
      • Unicorn-24707.exe (PID: 7568)
      • Unicorn-21046.exe (PID: 7648)
      • Unicorn-57677.exe (PID: 7716)
      • Unicorn-31225.exe (PID: 7780)
      • Unicorn-47478.exe (PID: 7852)
      • Unicorn-57182.exe (PID: 7788)
      • Unicorn-22445.exe (PID: 7548)
      • Unicorn-64546.exe (PID: 7576)
      • Unicorn-61650.exe (PID: 7620)
      • Unicorn-31670.exe (PID: 7816)
      • Unicorn-63139.exe (PID: 7944)
      • Unicorn-17202.exe (PID: 7924)
      • Unicorn-56715.exe (PID: 7844)
      • Unicorn-43062.exe (PID: 8116)
      • Unicorn-57942.exe (PID: 7708)
      • Unicorn-4369.exe (PID: 7860)
      • Unicorn-21823.exe (PID: 7756)
      • Unicorn-18104.exe (PID: 7868)
      • Unicorn-49533.exe (PID: 7472)
      • Unicorn-26783.exe (PID: 7400)
      • Unicorn-23196.exe (PID: 8128)
      • Unicorn-48002.exe (PID: 1324)
      • Unicorn-60886.exe (PID: 7372)
      • Unicorn-20652.exe (PID: 7416)
      • Unicorn-4613.exe (PID: 8136)
      • Unicorn-17256.exe (PID: 8000)
      • Unicorn-44441.exe (PID: 8168)
      • Unicorn-26076.exe (PID: 7428)
      • Unicorn-10005.exe (PID: 8088)
      • Unicorn-57483.exe (PID: 7888)
      • Unicorn-37515.exe (PID: 2852)
      • Unicorn-55979.exe (PID: 8228)
      • Unicorn-64644.exe (PID: 8324)
      • Unicorn-8578.exe (PID: 1348)
      • Unicorn-54271.exe (PID: 8156)
      • Unicorn-12231.exe (PID: 8004)
      • Unicorn-3078.exe (PID: 8216)
      • Unicorn-60011.exe (PID: 7544)
      • Unicorn-1365.exe (PID: 8080)
      • Unicorn-55211.exe (PID: 8204)
      • Unicorn-21241.exe (PID: 732)
      • Unicorn-33041.exe (PID: 7732)
      • Unicorn-54546.exe (PID: 8184)
      • Unicorn-3434.exe (PID: 8548)
      • Unicorn-36124.exe (PID: 7348)
      • Unicorn-16377.exe (PID: 8504)
      • Unicorn-51656.exe (PID: 1132)
      • Unicorn-37718.exe (PID: 8312)
      • Unicorn-17596.exe (PID: 8108)
      • Unicorn-14389.exe (PID: 8764)
      • Unicorn-16394.exe (PID: 7452)
      • Unicorn-34606.exe (PID: 8604)
      • Unicorn-25944.exe (PID: 8756)
      • Unicorn-46610.exe (PID: 8568)
      • Unicorn-3480.exe (PID: 9088)
      • Unicorn-18556.exe (PID: 9140)
      • Unicorn-15178.exe (PID: 9156)
      • Unicorn-29896.exe (PID: 9188)
      • Unicorn-30531.exe (PID: 8488)
      • Unicorn-3413.exe (PID: 8480)
      • Unicorn-2993.exe (PID: 8844)
      • Unicorn-24203.exe (PID: 8800)
      • Unicorn-34968.exe (PID: 8464)
      • Unicorn-37576.exe (PID: 9132)
      • Unicorn-53782.exe (PID: 8640)
      • Unicorn-23843.exe (PID: 8780)
      • Unicorn-43740.exe (PID: 6972)
      • Unicorn-53419.exe (PID: 8972)
      • Unicorn-36604.exe (PID: 8456)
      • Unicorn-61743.exe (PID: 6656)
      • Unicorn-8821.exe (PID: 8916)
      • Unicorn-53353.exe (PID: 7976)
      • Unicorn-24395.exe (PID: 8788)
      • Unicorn-39012.exe (PID: 8812)
      • Unicorn-54187.exe (PID: 8852)
      • Unicorn-43794.exe (PID: 7344)
      • Unicorn-44627.exe (PID: 9904)
      • Unicorn-18827.exe (PID: 9020)
      • Unicorn-10802.exe (PID: 9956)
      • Unicorn-23569.exe (PID: 10032)
      • Unicorn-41160.exe (PID: 9796)
      • Unicorn-26486.exe (PID: 8532)
      • Unicorn-39693.exe (PID: 8928)
      • Unicorn-62184.exe (PID: 9048)
      • Unicorn-21448.exe (PID: 8544)
      • Unicorn-26129.exe (PID: 8272)
      • Unicorn-54173.exe (PID: 8420)
      • Unicorn-50603.exe (PID: 8356)
      • Unicorn-60834.exe (PID: 8692)
      • Unicorn-61416.exe (PID: 9040)
      • Unicorn-36886.exe (PID: 6148)
      • Unicorn-11917.exe (PID: 9408)
      • Unicorn-26134.exe (PID: 9264)
      • Unicorn-47592.exe (PID: 9240)
      • Unicorn-1468.exe (PID: 9248)
      • Unicorn-46822.exe (PID: 10192)
      • Unicorn-8176.exe (PID: 9776)
      • Unicorn-21559.exe (PID: 9804)
      • Unicorn-28447.exe (PID: 9064)
      • Unicorn-44186.exe (PID: 6668)
      • Unicorn-39822.exe (PID: 8340)
      • Unicorn-18059.exe (PID: 8908)
      • Unicorn-22873.exe (PID: 9612)
      • Unicorn-44994.exe (PID: 11064)
      • Unicorn-64859.exe (PID: 11076)
      • Unicorn-45666.exe (PID: 6108)
      • Unicorn-16820.exe (PID: 11148)
      • Unicorn-9965.exe (PID: 11008)
      • Unicorn-25198.exe (PID: 9768)
      • Unicorn-1965.exe (PID: 5392)
      • Unicorn-1906.exe (PID: 10872)
      • Unicorn-9941.exe (PID: 3676)
      • Unicorn-42262.exe (PID: 9000)
      • Unicorn-56672.exe (PID: 9104)
      • Unicorn-5002.exe (PID: 6540)
      • Unicorn-34664.exe (PID: 8516)
      • Unicorn-56017.exe (PID: 9308)
      • Unicorn-43740.exe (PID: 4112)
      • Unicorn-4852.exe (PID: 12824)
      • Unicorn-16335.exe (PID: 9096)
      • Unicorn-43740.exe (PID: 4220)
      • Unicorn-52275.exe (PID: 11200)
      • Unicorn-28238.exe (PID: 11436)
      • Unicorn-24416.exe (PID: 10836)
      • Unicorn-64933.exe (PID: 10332)
      • Unicorn-12788.exe (PID: 11024)
      • Unicorn-51283.exe (PID: 10476)
      • Unicorn-55573.exe (PID: 11916)
      • Unicorn-19421.exe (PID: 10408)
      • Unicorn-40555.exe (PID: 7408)
      • Unicorn-39353.exe (PID: 9508)
      • Unicorn-18587.exe (PID: 12784)
      • Unicorn-58079.exe (PID: 12800)
      • Unicorn-40121.exe (PID: 9456)
      • Unicorn-63786.exe (PID: 10880)
      • Unicorn-35508.exe (PID: 9692)
      • Unicorn-7998.exe (PID: 10896)
      • Unicorn-1622.exe (PID: 10160)
      • Unicorn-38384.exe (PID: 9560)
      • Unicorn-13426.exe (PID: 10620)
      • Unicorn-14410.exe (PID: 9124)
      • Unicorn-29523.exe (PID: 12428)
      • Unicorn-19054.exe (PID: 9896)
      • Unicorn-14957.exe (PID: 10672)
      • Unicorn-53043.exe (PID: 11212)
      • Unicorn-56245.exe (PID: 9444)
      • Unicorn-4439.exe (PID: 9336)
      • Unicorn-38841.exe (PID: 9204)
      • Unicorn-21268.exe (PID: 10140)
      • Unicorn-38384.exe (PID: 9568)
      • Unicorn-56961.exe (PID: 10232)
      • Unicorn-11373.exe (PID: 10152)
      • Unicorn-37454.exe (PID: 10796)
      • Unicorn-29940.exe (PID: 9872)
      • Unicorn-47905.exe (PID: 9552)
      • Unicorn-38384.exe (PID: 9576)
      • Unicorn-32500.exe (PID: 6488)
      • Unicorn-32500.exe (PID: 5544)
      • Unicorn-52819.exe (PID: 10388)
      • Unicorn-3196.exe (PID: 5892)
      • Unicorn-36523.exe (PID: 7360)
      • Unicorn-38251.exe (PID: 6768)
      • Unicorn-11117.exe (PID: 10652)
      • Unicorn-42183.exe (PID: 9072)
      • Unicorn-13650.exe (PID: 11448)
      • Unicorn-40355.exe (PID: 13212)
      • Unicorn-48562.exe (PID: 9280)
      • Unicorn-51637.exe (PID: 9540)
      • Unicorn-22914.exe (PID: 10760)
      • Unicorn-27488.exe (PID: 15224)
      • Unicorn-29565.exe (PID: 15236)
      • Unicorn-36527.exe (PID: 15280)
      • Unicorn-6925.exe (PID: 14676)
      • Unicorn-32500.exe (PID: 14328)
      • Unicorn-65207.exe (PID: 14768)

    • The sample compiled with chinese language support

      • 1 (502).exe (PID: 4880)

    • Checks supported languages

      • 1 (502).exe (PID: 4880)
      • Unicorn-1969.exe (PID: 6240)
      • Unicorn-60345.exe (PID: 6272)
      • Unicorn-61067.exe (PID: 3304)
      • Unicorn-11871.exe (PID: 1280)
      • Unicorn-49526.exe (PID: 6456)
      • Unicorn-11107.exe (PID: 2516)
      • Unicorn-63862.exe (PID: 6988)
      • Unicorn-20753.exe (PID: 1020)
      • Unicorn-30152.exe (PID: 900)
      • Unicorn-60778.exe (PID: 2152)
      • Unicorn-42923.exe (PID: 2096)
      • Unicorn-23057.exe (PID: 3884)
      • Unicorn-27848.exe (PID: 728)
      • Unicorn-1324.exe (PID: 1128)
      • Unicorn-26219.exe (PID: 1012)
      • Unicorn-30364.exe (PID: 1040)
      • Unicorn-60235.exe (PID: 2984)
      • Unicorn-54105.exe (PID: 5360)
      • Unicorn-25451.exe (PID: 208)
      • Unicorn-5393.exe (PID: 1240)
      • Unicorn-6421.exe (PID: 7176)
      • Unicorn-15274.exe (PID: 7184)
      • Unicorn-52669.exe (PID: 7200)
      • Unicorn-32991.exe (PID: 7192)
      • Unicorn-6997.exe (PID: 7208)
      • Unicorn-26824.exe (PID: 7216)
      • Unicorn-15175.exe (PID: 7244)
      • Unicorn-26110.exe (PID: 7236)
      • Unicorn-20843.exe (PID: 7252)
      • Unicorn-47737.exe (PID: 496)
      • Unicorn-41611.exe (PID: 7484)
      • Unicorn-24707.exe (PID: 7568)
      • Unicorn-7018.exe (PID: 7552)
      • Unicorn-42684.exe (PID: 7524)
      • Unicorn-21046.exe (PID: 7648)
      • Unicorn-57677.exe (PID: 7716)
      • Unicorn-57942.exe (PID: 7708)
      • Unicorn-57182.exe (PID: 7788)
      • Unicorn-31670.exe (PID: 7816)
      • Unicorn-56715.exe (PID: 7844)
      • Unicorn-21823.exe (PID: 7756)
      • Unicorn-31225.exe (PID: 7780)
      • Unicorn-47478.exe (PID: 7852)
      • Unicorn-4369.exe (PID: 7860)
      • Unicorn-57483.exe (PID: 7888)
      • Unicorn-22445.exe (PID: 7548)
      • Unicorn-63139.exe (PID: 7944)
      • Unicorn-17202.exe (PID: 7924)
      • Unicorn-53353.exe (PID: 7976)
      • Unicorn-64546.exe (PID: 7576)
      • Unicorn-12231.exe (PID: 8004)
      • Unicorn-18104.exe (PID: 7868)
      • Unicorn-43062.exe (PID: 8116)
      • Unicorn-4613.exe (PID: 8136)
      • Unicorn-26076.exe (PID: 7428)
      • Unicorn-54271.exe (PID: 8156)
      • Unicorn-20652.exe (PID: 7416)
      • Unicorn-54546.exe (PID: 8184)
      • Unicorn-26783.exe (PID: 7400)
      • Unicorn-61650.exe (PID: 7620)
      • Unicorn-10005.exe (PID: 8088)
      • Unicorn-17596.exe (PID: 8108)
      • Unicorn-44441.exe (PID: 8168)
      • Unicorn-16394.exe (PID: 7452)
      • Unicorn-49533.exe (PID: 7472)
      • Unicorn-60886.exe (PID: 7372)
      • Unicorn-23196.exe (PID: 8128)
      • Unicorn-21241.exe (PID: 732)
      • Unicorn-36124.exe (PID: 7348)
      • Unicorn-8578.exe (PID: 1348)
      • Unicorn-48002.exe (PID: 1324)
      • Unicorn-1365.exe (PID: 8080)
      • Unicorn-60011.exe (PID: 7544)
      • Unicorn-17256.exe (PID: 8000)
      • Unicorn-37515.exe (PID: 2852)
      • Unicorn-51656.exe (PID: 1132)
      • Unicorn-43794.exe (PID: 7344)
      • Unicorn-55211.exe (PID: 8204)
      • Unicorn-33041.exe (PID: 7732)
      • Unicorn-3078.exe (PID: 8216)
      • Unicorn-55979.exe (PID: 8228)
      • Unicorn-50333.exe (PID: 8292)
      • Unicorn-64644.exe (PID: 8324)
      • Unicorn-50603.exe (PID: 8356)
      • Unicorn-54173.exe (PID: 8420)
      • Unicorn-26129.exe (PID: 8272)
      • Unicorn-37718.exe (PID: 8312)
      • Unicorn-30531.exe (PID: 8488)
      • Unicorn-3413.exe (PID: 8480)
      • Unicorn-34664.exe (PID: 8516)
      • Unicorn-26486.exe (PID: 8532)
      • Unicorn-3434.exe (PID: 8548)
      • Unicorn-46610.exe (PID: 8568)
      • Unicorn-19587.exe (PID: 8580)
      • Unicorn-34968.exe (PID: 8464)
      • Unicorn-16377.exe (PID: 8504)
      • Unicorn-34606.exe (PID: 8604)
      • Unicorn-25944.exe (PID: 8756)
      • Unicorn-39012.exe (PID: 8812)
      • Unicorn-60331.exe (PID: 8672)
      • Unicorn-60834.exe (PID: 8692)
      • Unicorn-24203.exe (PID: 8800)
      • Unicorn-53782.exe (PID: 8640)
      • Unicorn-14389.exe (PID: 8764)
      • Unicorn-24395.exe (PID: 8788)
      • Unicorn-2993.exe (PID: 8844)
      • Unicorn-18556.exe (PID: 9140)
      • Unicorn-15178.exe (PID: 9156)
      • Unicorn-8821.exe (PID: 8916)
      • Unicorn-39693.exe (PID: 8928)
      • Unicorn-39958.exe (PID: 8936)
      • Unicorn-29896.exe (PID: 9188)
      • Unicorn-18059.exe (PID: 8908)
      • Unicorn-53419.exe (PID: 8972)
      • Unicorn-42262.exe (PID: 9000)
      • Unicorn-54187.exe (PID: 8852)
      • Unicorn-61416.exe (PID: 9040)
      • Unicorn-18827.exe (PID: 9020)
      • Unicorn-57586.exe (PID: 9056)
      • Unicorn-14410.exe (PID: 9124)
      • Unicorn-16335.exe (PID: 9096)
      • Unicorn-56672.exe (PID: 9104)
      • Unicorn-31432.exe (PID: 9112)
      • Unicorn-38841.exe (PID: 9204)
      • Unicorn-12874.exe (PID: 9212)
      • Unicorn-36886.exe (PID: 6148)
      • Unicorn-63455.exe (PID: 5956)
      • Unicorn-28447.exe (PID: 9064)
      • Unicorn-9345.exe (PID: 9080)
      • Unicorn-42183.exe (PID: 9072)
      • Unicorn-3480.exe (PID: 9088)
      • Unicorn-45666.exe (PID: 6108)
      • Unicorn-36604.exe (PID: 8456)
      • Unicorn-5002.exe (PID: 6540)
      • Unicorn-42204.exe (PID: 7964)
      • Unicorn-62184.exe (PID: 9048)
      • Unicorn-40555.exe (PID: 7408)
      • Unicorn-37576.exe (PID: 9132)
      • Unicorn-21448.exe (PID: 8544)
      • Unicorn-23843.exe (PID: 8780)
      • Unicorn-43740.exe (PID: 4220)
      • Unicorn-43740.exe (PID: 6972)
      • Unicorn-43740.exe (PID: 4112)
      • Unicorn-9941.exe (PID: 3676)
      • Unicorn-37291.exe (PID: 6192)
      • Unicorn-61743.exe (PID: 6656)
      • Unicorn-38251.exe (PID: 6768)
      • Unicorn-45490.exe (PID: 9224)
      • Unicorn-47592.exe (PID: 9240)
      • Unicorn-1468.exe (PID: 9248)
      • Unicorn-26134.exe (PID: 9264)
      • Unicorn-48562.exe (PID: 9280)
      • Unicorn-39324.exe (PID: 9288)
      • Unicorn-56017.exe (PID: 9308)
      • Unicorn-4439.exe (PID: 9336)
      • Unicorn-10513.exe (PID: 9256)
      • Unicorn-36523.exe (PID: 7360)
      • Unicorn-11917.exe (PID: 9408)
      • Unicorn-56245.exe (PID: 9444)
      • Unicorn-44627.exe (PID: 9904)
      • Unicorn-35379.exe (PID: 9424)
      • Unicorn-22996.exe (PID: 9436)
      • Unicorn-442.exe (PID: 7532)
      • Unicorn-40121.exe (PID: 9456)
      • Unicorn-51637.exe (PID: 9540)
      • Unicorn-47905.exe (PID: 9552)
      • Unicorn-38384.exe (PID: 9560)
      • Unicorn-38384.exe (PID: 9568)
      • Unicorn-46801.exe (PID: 9600)
      • Unicorn-49244.exe (PID: 9684)
      • Unicorn-23569.exe (PID: 10032)
      • Unicorn-22873.exe (PID: 9612)
      • Unicorn-39353.exe (PID: 9508)
      • Unicorn-10802.exe (PID: 9956)
      • Unicorn-38384.exe (PID: 9576)
      • Unicorn-23173.exe (PID: 9732)
      • Unicorn-54414.exe (PID: 9752)
      • Unicorn-25198.exe (PID: 9768)
      • Unicorn-35295.exe (PID: 9784)
      • Unicorn-8176.exe (PID: 9776)
      • Unicorn-35508.exe (PID: 9692)
      • Unicorn-36909.exe (PID: 9740)
      • Unicorn-25118.exe (PID: 9848)
      • Unicorn-41160.exe (PID: 9796)
      • Unicorn-21559.exe (PID: 9804)
      • Unicorn-9074.exe (PID: 9860)
      • Unicorn-29940.exe (PID: 9872)
      • Unicorn-43676.exe (PID: 9880)
      • Unicorn-19054.exe (PID: 9896)
      • Unicorn-38483.exe (PID: 10116)
      • Unicorn-21268.exe (PID: 10140)
      • Unicorn-1622.exe (PID: 10160)
      • Unicorn-11373.exe (PID: 10152)
      • Unicorn-11876.exe (PID: 10172)
      • Unicorn-4165.exe (PID: 10184)
      • Unicorn-46822.exe (PID: 10192)
      • Unicorn-56961.exe (PID: 10232)
      • Unicorn-1965.exe (PID: 5392)
      • Unicorn-39822.exe (PID: 8340)
      • Unicorn-44186.exe (PID: 6668)
      • Unicorn-43242.exe (PID: 2288)
      • Unicorn-29262.exe (PID: 9988)
      • Unicorn-65198.exe (PID: 10344)
      • Unicorn-44994.exe (PID: 11064)
      • Unicorn-23616.exe (PID: 10260)
      • Unicorn-45333.exe (PID: 10324)
      • Unicorn-64859.exe (PID: 11076)
      • Unicorn-38041.exe (PID: 10304)
      • Unicorn-64933.exe (PID: 10332)
      • Unicorn-51283.exe (PID: 10476)
      • Unicorn-19421.exe (PID: 10408)
      • Unicorn-16820.exe (PID: 11148)
      • Unicorn-52819.exe (PID: 10388)
      • Unicorn-17485.exe (PID: 10248)
      • Unicorn-16583.exe (PID: 10272)
      • Unicorn-31417.exe (PID: 10484)
      • Unicorn-42067.exe (PID: 10540)
      • Unicorn-53390.exe (PID: 10612)
      • Unicorn-13426.exe (PID: 10620)
      • Unicorn-11117.exe (PID: 10652)
      • Unicorn-36691.exe (PID: 10660)
      • Unicorn-14957.exe (PID: 10672)
      • Unicorn-39692.exe (PID: 10208)
      • Unicorn-16182.exe (PID: 536)
      • Unicorn-56961.exe (PID: 3888)
      • Unicorn-28046.exe (PID: 10068)
      • Unicorn-27470.exe (PID: 11228)
      • Unicorn-53043.exe (PID: 11212)
      • Unicorn-21147.exe (PID: 11220)
      • Unicorn-52275.exe (PID: 11200)
      • Unicorn-9965.exe (PID: 11008)
      • Unicorn-30282.exe (PID: 10844)
      • Unicorn-9716.exe (PID: 4284)
      • Unicorn-23700.exe (PID: 11000)
      • Unicorn-12330.exe (PID: 10936)
      • Unicorn-57656.exe (PID: 7048)
      • Unicorn-7998.exe (PID: 10896)
      • Unicorn-33667.exe (PID: 11052)
      • Unicorn-12788.exe (PID: 11024)
      • Unicorn-20900.exe (PID: 10988)
      • Unicorn-33619.exe (PID: 10964)
      • Unicorn-63786.exe (PID: 10880)
      • Unicorn-54485.exe (PID: 10852)
      • Unicorn-24416.exe (PID: 10836)
      • Unicorn-20660.exe (PID: 10952)
      • Unicorn-23723.exe (PID: 11016)
      • Unicorn-12114.exe (PID: 11560)
      • Unicorn-28046.exe (PID: 11468)
      • Unicorn-286.exe (PID: 11636)
      • Unicorn-33707.exe (PID: 10920)
      • Unicorn-10681.exe (PID: 10824)
      • Unicorn-3572.exe (PID: 11628)
      • Unicorn-48828.exe (PID: 11660)
      • Unicorn-12877.exe (PID: 11716)
      • Unicorn-62273.exe (PID: 10912)
      • Unicorn-1906.exe (PID: 10872)
      • Unicorn-52088.exe (PID: 11648)
      • Unicorn-37454.exe (PID: 10796)
      • Unicorn-63157.exe (PID: 11900)
      • Unicorn-23001.exe (PID: 11936)
      • Unicorn-62965.exe (PID: 11920)
      • Unicorn-8818.exe (PID: 10712)
      • Unicorn-4205.exe (PID: 10788)
      • Unicorn-48014.exe (PID: 10700)
      • Unicorn-7291.exe (PID: 10720)
      • Unicorn-22914.exe (PID: 10760)
      • Unicorn-5741.exe (PID: 10752)
      • Unicorn-28192.exe (PID: 12008)
      • Unicorn-63436.exe (PID: 12048)
      • Unicorn-45210.exe (PID: 12040)
      • Unicorn-30571.exe (PID: 12032)
      • Unicorn-11163.exe (PID: 12132)
      • Unicorn-58945.exe (PID: 12056)
      • Unicorn-55573.exe (PID: 11916)
      • Unicorn-14989.exe (PID: 11880)
      • Unicorn-23249.exe (PID: 11968)
      • Unicorn-40581.exe (PID: 11996)
      • Unicorn-64371.exe (PID: 10780)
      • Unicorn-42099.exe (PID: 11988)
      • Unicorn-62965.exe (PID: 11928)
      • Unicorn-18587.exe (PID: 12784)
      • Unicorn-58079.exe (PID: 12800)
      • Unicorn-4852.exe (PID: 12824)
      • Unicorn-28238.exe (PID: 11436)
      • Unicorn-58532.exe (PID: 10944)
      • Unicorn-13650.exe (PID: 11448)
      • Unicorn-28889.exe (PID: 12688)
      • Unicorn-19273.exe (PID: 12576)
      • Unicorn-5598.exe (PID: 12484)
      • Unicorn-37368.exe (PID: 12548)
      • Unicorn-11463.exe (PID: 12472)
      • Unicorn-10145.exe (PID: 12500)
      • Unicorn-23880.exe (PID: 12492)
      • Unicorn-28889.exe (PID: 12740)
      • Unicorn-1012.exe (PID: 12716)
      • Unicorn-32938.exe (PID: 12696)
      • Unicorn-51837.exe (PID: 12584)
      • Unicorn-29523.exe (PID: 12428)
      • Unicorn-11541.exe (PID: 12400)
      • Unicorn-14836.exe (PID: 11896)
      • Unicorn-44250.exe (PID: 12416)
      • Unicorn-17940.exe (PID: 13288)
      • Unicorn-8345.exe (PID: 13232)
      • Unicorn-39342.exe (PID: 13264)
      • Unicorn-40355.exe (PID: 13212)
      • Unicorn-57333.exe (PID: 13188)
      • Unicorn-28558.exe (PID: 12464)
      • Unicorn-32411.exe (PID: 12388)
      • Unicorn-15236.exe (PID: 13016)
      • Unicorn-55573.exe (PID: 12848)
      • Unicorn-42620.exe (PID: 12840)
      • Unicorn-43182.exe (PID: 12968)
      • Unicorn-40409.exe (PID: 12768)
      • Unicorn-61173.exe (PID: 13052)
      • Unicorn-11099.exe (PID: 12868)
      • Unicorn-3771.exe (PID: 9836)
      • Unicorn-20177.exe (PID: 12332)
      • Unicorn-39539.exe (PID: 13144)
      • Unicorn-55573.exe (PID: 12860)
      • Unicorn-40409.exe (PID: 12324)
      • Unicorn-17051.exe (PID: 13164)
      • Unicorn-32500.exe (PID: 5544)
      • Unicorn-32500.exe (PID: 4056)
      • Unicorn-32500.exe (PID: 6488)
      • Unicorn-5961.exe (PID: 13852)
      • Unicorn-43118.exe (PID: 13784)
      • Unicorn-24062.exe (PID: 13040)
      • Unicorn-7177.exe (PID: 12880)
      • Unicorn-28889.exe (PID: 13136)
      • Unicorn-21209.exe (PID: 13004)
      • Unicorn-29891.exe (PID: 13584)
      • Unicorn-29652.exe (PID: 13644)
      • Unicorn-54949.exe (PID: 13604)
      • Unicorn-32603.exe (PID: 12380)
      • Unicorn-47731.exe (PID: 13568)
      • Unicorn-16969.exe (PID: 12776)
      • Unicorn-27488.exe (PID: 15224)
      • Unicorn-42385.exe (PID: 15004)
      • Unicorn-60942.exe (PID: 14976)
      • Unicorn-20583.exe (PID: 14908)
      • Unicorn-45104.exe (PID: 14840)
      • Unicorn-44321.exe (PID: 14832)
      • Unicorn-36527.exe (PID: 15280)
      • Unicorn-49297.exe (PID: 14852)
      • Unicorn-35213.exe (PID: 14868)
      • Unicorn-15622.exe (PID: 14876)
      • Unicorn-20849.exe (PID: 14884)
      • Unicorn-46157.exe (PID: 14892)
      • Unicorn-29565.exe (PID: 15236)
      • Unicorn-65313.exe (PID: 14988)
      • Unicorn-13405.exe (PID: 14800)
      • Unicorn-19270.exe (PID: 14784)
      • Unicorn-10605.exe (PID: 14744)
      • Unicorn-34535.exe (PID: 14248)
      • Unicorn-35767.exe (PID: 14708)
      • Unicorn-55368.exe (PID: 14700)
      • Unicorn-10380.exe (PID: 14720)
      • Unicorn-59607.exe (PID: 14752)
      • Unicorn-10605.exe (PID: 14760)
      • Unicorn-65207.exe (PID: 14768)
      • Unicorn-65207.exe (PID: 14776)
      • Unicorn-15155.exe (PID: 14692)
      • Unicorn-46703.exe (PID: 14684)
      • Unicorn-22363.exe (PID: 14660)
      • Unicorn-49712.exe (PID: 14668)
      • Unicorn-6925.exe (PID: 14676)
      • Unicorn-31923.exe (PID: 14644)
      • Unicorn-34782.exe (PID: 14212)
      • Unicorn-26900.exe (PID: 14312)
      • Unicorn-32500.exe (PID: 14328)
      • Unicorn-32500.exe (PID: 4152)
      • Unicorn-46236.exe (PID: 14368)
      • Unicorn-32500.exe (PID: 2392)
      • Unicorn-46236.exe (PID: 14360)
      • Unicorn-50791.exe (PID: 14636)
      • Unicorn-46236.exe (PID: 14376)
      • Unicorn-9527.exe (PID: 14416)
      • Unicorn-59605.exe (PID: 14432)
      • Unicorn-49845.exe (PID: 13156)
      • Unicorn-42051.exe (PID: 14392)
      • Unicorn-24276.exe (PID: 14404)

    • Create files in a temporary directory

      • Unicorn-47737.exe (PID: 496)
      • 1 (502).exe (PID: 4880)
      • Unicorn-60345.exe (PID: 6272)
      • Unicorn-1969.exe (PID: 6240)
      • Unicorn-49526.exe (PID: 6456)
      • Unicorn-63862.exe (PID: 6988)
      • Unicorn-20753.exe (PID: 1020)
      • Unicorn-30152.exe (PID: 900)
      • Unicorn-60778.exe (PID: 2152)
      • Unicorn-11871.exe (PID: 1280)
      • Unicorn-42923.exe (PID: 2096)
      • Unicorn-11107.exe (PID: 2516)
      • Unicorn-1324.exe (PID: 1128)
      • Unicorn-26219.exe (PID: 1012)
      • Unicorn-30364.exe (PID: 1040)
      • Unicorn-60235.exe (PID: 2984)
      • Unicorn-25451.exe (PID: 208)
      • Unicorn-5393.exe (PID: 1240)
      • Unicorn-26824.exe (PID: 7216)
      • Unicorn-6421.exe (PID: 7176)
      • Unicorn-26110.exe (PID: 7236)
      • Unicorn-27848.exe (PID: 728)
      • Unicorn-52669.exe (PID: 7200)
      • Unicorn-15175.exe (PID: 7244)
      • Unicorn-6997.exe (PID: 7208)
      • Unicorn-23057.exe (PID: 3884)
      • Unicorn-20843.exe (PID: 7252)
      • Unicorn-41611.exe (PID: 7484)
      • Unicorn-7018.exe (PID: 7552)
      • Unicorn-21046.exe (PID: 7648)
      • Unicorn-24707.exe (PID: 7568)
      • Unicorn-61067.exe (PID: 3304)
      • Unicorn-57677.exe (PID: 7716)
      • Unicorn-31225.exe (PID: 7780)
      • Unicorn-57182.exe (PID: 7788)
      • Unicorn-32991.exe (PID: 7192)
      • Unicorn-47478.exe (PID: 7852)
      • Unicorn-64546.exe (PID: 7576)
      • Unicorn-61650.exe (PID: 7620)
      • Unicorn-31670.exe (PID: 7816)
      • Unicorn-42684.exe (PID: 7524)
      • Unicorn-57942.exe (PID: 7708)
      • Unicorn-17202.exe (PID: 7924)
      • Unicorn-56715.exe (PID: 7844)
      • Unicorn-15274.exe (PID: 7184)
      • Unicorn-43062.exe (PID: 8116)
      • Unicorn-21823.exe (PID: 7756)
      • Unicorn-4369.exe (PID: 7860)
      • Unicorn-49533.exe (PID: 7472)
      • Unicorn-48002.exe (PID: 1324)
      • Unicorn-4613.exe (PID: 8136)
      • Unicorn-44441.exe (PID: 8168)
      • Unicorn-57483.exe (PID: 7888)
      • Unicorn-10005.exe (PID: 8088)
      • Unicorn-26076.exe (PID: 7428)
      • Unicorn-64644.exe (PID: 8324)
      • Unicorn-8578.exe (PID: 1348)
      • Unicorn-54271.exe (PID: 8156)
      • Unicorn-55979.exe (PID: 8228)
      • Unicorn-54105.exe (PID: 5360)
      • Unicorn-54546.exe (PID: 8184)
      • Unicorn-60011.exe (PID: 7544)
      • Unicorn-55211.exe (PID: 8204)
      • Unicorn-1365.exe (PID: 8080)
      • Unicorn-33041.exe (PID: 7732)
      • Unicorn-16377.exe (PID: 8504)
      • Unicorn-21241.exe (PID: 732)
      • Unicorn-22445.exe (PID: 7548)
      • Unicorn-51656.exe (PID: 1132)
      • Unicorn-36124.exe (PID: 7348)
      • Unicorn-18104.exe (PID: 7868)
      • Unicorn-17596.exe (PID: 8108)
      • Unicorn-63139.exe (PID: 7944)
      • Unicorn-14389.exe (PID: 8764)
      • Unicorn-34606.exe (PID: 8604)
      • Unicorn-15178.exe (PID: 9156)
      • Unicorn-46610.exe (PID: 8568)
      • Unicorn-3480.exe (PID: 9088)
      • Unicorn-12231.exe (PID: 8004)
      • Unicorn-34968.exe (PID: 8464)
      • Unicorn-30531.exe (PID: 8488)
      • Unicorn-24203.exe (PID: 8800)
      • Unicorn-37576.exe (PID: 9132)
      • Unicorn-23843.exe (PID: 8780)
      • Unicorn-25944.exe (PID: 8756)
      • Unicorn-53782.exe (PID: 8640)
      • Unicorn-43740.exe (PID: 6972)
      • Unicorn-61743.exe (PID: 6656)
      • Unicorn-2993.exe (PID: 8844)
      • Unicorn-53419.exe (PID: 8972)
      • Unicorn-19587.exe (PID: 8580)
      • Unicorn-36604.exe (PID: 8456)
      • Unicorn-24395.exe (PID: 8788)
      • Unicorn-43794.exe (PID: 7344)
      • Unicorn-20652.exe (PID: 7416)
      • Unicorn-18827.exe (PID: 9020)
      • Unicorn-44627.exe (PID: 9904)
      • Unicorn-39012.exe (PID: 8812)
      • Unicorn-10802.exe (PID: 9956)
      • Unicorn-54187.exe (PID: 8852)
      • Unicorn-23569.exe (PID: 10032)
      • Unicorn-21448.exe (PID: 8544)
      • Unicorn-39693.exe (PID: 8928)
      • Unicorn-39958.exe (PID: 8936)
      • Unicorn-62184.exe (PID: 9048)
      • Unicorn-26129.exe (PID: 8272)
      • Unicorn-54173.exe (PID: 8420)
      • Unicorn-53353.exe (PID: 7976)
      • Unicorn-50603.exe (PID: 8356)
      • Unicorn-60331.exe (PID: 8672)
      • Unicorn-9345.exe (PID: 9080)
      • Unicorn-60834.exe (PID: 8692)
      • Unicorn-23196.exe (PID: 8128)
      • Unicorn-16394.exe (PID: 7452)
      • Unicorn-41160.exe (PID: 9796)
      • Unicorn-26783.exe (PID: 7400)
      • Unicorn-26486.exe (PID: 8532)
      • Unicorn-47592.exe (PID: 9240)
      • Unicorn-42204.exe (PID: 7964)
      • Unicorn-36886.exe (PID: 6148)
      • Unicorn-3078.exe (PID: 8216)
      • Unicorn-46822.exe (PID: 10192)
      • Unicorn-1468.exe (PID: 9248)
      • Unicorn-3413.exe (PID: 8480)
      • Unicorn-60886.exe (PID: 7372)
      • Unicorn-21559.exe (PID: 9804)
      • Unicorn-44186.exe (PID: 6668)
      • Unicorn-39822.exe (PID: 8340)
      • Unicorn-3434.exe (PID: 8548)
      • Unicorn-8821.exe (PID: 8916)
      • Unicorn-29896.exe (PID: 9188)
      • Unicorn-18556.exe (PID: 9140)
      • Unicorn-61416.exe (PID: 9040)
      • Unicorn-37515.exe (PID: 2852)
      • Unicorn-16820.exe (PID: 11148)
      • Unicorn-8176.exe (PID: 9776)
      • Unicorn-9965.exe (PID: 11008)
      • Unicorn-22873.exe (PID: 9612)
      • Unicorn-44994.exe (PID: 11064)
      • Unicorn-26134.exe (PID: 9264)
      • Unicorn-37718.exe (PID: 8312)
      • Unicorn-25198.exe (PID: 9768)
      • Unicorn-56672.exe (PID: 9104)
      • Unicorn-11917.exe (PID: 9408)
      • Unicorn-1906.exe (PID: 10872)
      • Unicorn-63455.exe (PID: 5956)
      • Unicorn-4852.exe (PID: 12824)
      • Unicorn-34664.exe (PID: 8516)
      • Unicorn-16335.exe (PID: 9096)
      • Unicorn-43740.exe (PID: 4112)
      • Unicorn-28447.exe (PID: 9064)
      • Unicorn-18587.exe (PID: 12784)
      • Unicorn-58079.exe (PID: 12800)
      • Unicorn-42262.exe (PID: 9000)
      • Unicorn-4165.exe (PID: 10184)
      • Unicorn-64859.exe (PID: 11076)
      • Unicorn-56245.exe (PID: 9444)
      • Unicorn-1622.exe (PID: 10160)
      • Unicorn-7998.exe (PID: 10896)
      • Unicorn-37291.exe (PID: 6192)
      • Unicorn-53043.exe (PID: 11212)
      • Unicorn-21268.exe (PID: 10140)
      • Unicorn-4439.exe (PID: 9336)
      • Unicorn-14957.exe (PID: 10672)
      • Unicorn-18059.exe (PID: 8908)
      • Unicorn-38384.exe (PID: 9568)
      • Unicorn-29940.exe (PID: 9872)
      • Unicorn-47905.exe (PID: 9552)
      • Unicorn-17256.exe (PID: 8000)
      • Unicorn-38384.exe (PID: 9576)
      • Unicorn-32500.exe (PID: 4056)
      • Unicorn-36523.exe (PID: 7360)
      • Unicorn-50333.exe (PID: 8292)
      • Unicorn-52819.exe (PID: 10388)
      • Unicorn-48014.exe (PID: 10700)
      • Unicorn-38251.exe (PID: 6768)
      • Unicorn-42183.exe (PID: 9072)
      • Unicorn-1965.exe (PID: 5392)
      • Unicorn-13650.exe (PID: 11448)
      • Unicorn-11373.exe (PID: 10152)
      • Unicorn-38841.exe (PID: 9204)
      • Unicorn-40355.exe (PID: 13212)
      • Unicorn-52275.exe (PID: 11200)
      • Unicorn-31432.exe (PID: 9112)

    • Reads security settings of Internet Explorer

      • BackgroundTransferHost.exe (PID: 7356)
      • BackgroundTransferHost.exe (PID: 7676)
      • BackgroundTransferHost.exe (PID: 8032)
      • BackgroundTransferHost.exe (PID: 7808)
      • BackgroundTransferHost.exe (PID: 7732)

    • Checks proxy server information

      • BackgroundTransferHost.exe (PID: 7676)

    • Creates files or folders in the user directory

      • BackgroundTransferHost.exe (PID: 7676)
      • WerFault.exe (PID: 12280)

    • Reads the software policy settings

      • BackgroundTransferHost.exe (PID: 7676)
      • slui.exe (PID: 6476)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable Microsoft Visual Basic 6 (90.6)
.exe | Win32 Executable (generic) (4.9)
.exe | Generic Win/DOS Executable (2.2)
.exe | DOS Executable Generic (2.2)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:01:19 13:34:56+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit, No debug, Removable run from swap, Net run from swap, Uniprocessor only, Bytes reversed hi
PEType: PE32
LinkerVersion: 6
CodeSize: 176128
InitializedDataSize: 299008
UninitializedDataSize: -
EntryPoint: 0x13d4
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Chinese (Simplified)
CharacterSet: Unicode
CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1
ProductVersion: 1
InternalName: Kawaii-Unicorn
OriginalFileName: Kawaii-Unicorn.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
639
Monitored processes
500
Malicious processes
87
Suspicious processes
55

Behavior graph

Click at the process to see the details
start 1 (502).exe unicorn-47737.exe sppextcomobj.exe no specs slui.exe unicorn-60345.exe unicorn-1969.exe unicorn-61067.exe unicorn-11871.exe unicorn-49526.exe unicorn-11107.exe unicorn-63862.exe unicorn-20753.exe unicorn-30152.exe unicorn-60778.exe unicorn-27848.exe unicorn-23057.exe unicorn-42923.exe unicorn-1324.exe unicorn-26219.exe unicorn-30364.exe unicorn-60235.exe unicorn-54105.exe unicorn-25451.exe unicorn-5393.exe unicorn-6421.exe unicorn-15274.exe unicorn-32991.exe unicorn-52669.exe unicorn-6997.exe unicorn-26824.exe unicorn-26110.exe unicorn-15175.exe unicorn-20843.exe backgroundtransferhost.exe no specs unicorn-41611.exe unicorn-42684.exe unicorn-7018.exe unicorn-24707.exe unicorn-21046.exe backgroundtransferhost.exe unicorn-57942.exe unicorn-57677.exe unicorn-21823.exe unicorn-31225.exe unicorn-57182.exe unicorn-31670.exe unicorn-56715.exe unicorn-47478.exe unicorn-4369.exe unicorn-18104.exe unicorn-57483.exe unicorn-17202.exe unicorn-63139.exe unicorn-53353.exe unicorn-12231.exe backgroundtransferhost.exe no specs unicorn-10005.exe unicorn-17596.exe unicorn-43062.exe unicorn-23196.exe unicorn-4613.exe unicorn-54271.exe unicorn-44441.exe unicorn-54546.exe unicorn-26783.exe unicorn-20652.exe unicorn-26076.exe unicorn-16394.exe unicorn-49533.exe unicorn-22445.exe unicorn-64546.exe unicorn-61650.exe unicorn-60886.exe unicorn-36124.exe backgroundtransferhost.exe no specs unicorn-21241.exe unicorn-8578.exe unicorn-48002.exe unicorn-1365.exe unicorn-51656.exe unicorn-37515.exe backgroundtransferhost.exe no specs unicorn-60011.exe unicorn-17256.exe unicorn-43794.exe unicorn-33041.exe unicorn-55211.exe unicorn-3078.exe unicorn-55979.exe unicorn-26129.exe unicorn-50333.exe unicorn-37718.exe unicorn-64644.exe unicorn-50603.exe unicorn-54173.exe unicorn-34968.exe unicorn-3413.exe unicorn-30531.exe unicorn-16377.exe unicorn-34664.exe unicorn-26486.exe unicorn-3434.exe unicorn-46610.exe unicorn-19587.exe unicorn-34606.exe unicorn-29579.exe no specs unicorn-53782.exe unicorn-60331.exe unicorn-60834.exe unicorn-25944.exe unicorn-14389.exe unicorn-24395.exe unicorn-24203.exe unicorn-39012.exe unicorn-2993.exe unicorn-54187.exe unicorn-18059.exe unicorn-8821.exe unicorn-39693.exe unicorn-39958.exe unicorn-53419.exe unicorn-42262.exe unicorn-18827.exe unicorn-61416.exe unicorn-62184.exe unicorn-57586.exe unicorn-28447.exe unicorn-42183.exe unicorn-9345.exe unicorn-3480.exe unicorn-16335.exe unicorn-56672.exe unicorn-31432.exe unicorn-14410.exe unicorn-37576.exe unicorn-18556.exe unicorn-15178.exe unicorn-29896.exe unicorn-38841.exe unicorn-12874.exe unicorn-36886.exe unicorn-45666.exe unicorn-63455.exe unicorn-37291.exe unicorn-5002.exe unicorn-38251.exe unicorn-36604.exe unicorn-42204.exe unicorn-21448.exe unicorn-36523.exe unicorn-40555.exe unicorn-442.exe unicorn-23843.exe unicorn-43740.exe unicorn-43740.exe unicorn-43740.exe unicorn-9941.exe unicorn-61743.exe unicorn-3196.exe unicorn-45490.exe no specs unicorn-29611.exe no specs unicorn-47592.exe unicorn-1468.exe unicorn-10513.exe unicorn-26134.exe unicorn-48562.exe unicorn-39324.exe unicorn-56017.exe unicorn-4439.exe unicorn-3858.exe unicorn-11917.exe unicorn-35379.exe no specs unicorn-22996.exe unicorn-56245.exe unicorn-40121.exe unicorn-39353.exe no specs unicorn-51637.exe unicorn-47905.exe unicorn-38384.exe unicorn-38384.exe unicorn-38384.exe unicorn-46801.exe unicorn-22873.exe unicorn-29614.exe no specs unicorn-49244.exe unicorn-35508.exe unicorn-23173.exe unicorn-36909.exe unicorn-54414.exe unicorn-25198.exe unicorn-8176.exe unicorn-35295.exe no specs unicorn-41160.exe unicorn-21559.exe unicorn-25118.exe unicorn-9074.exe unicorn-29940.exe unicorn-43676.exe no specs unicorn-19054.exe unicorn-44627.exe unicorn-10802.exe unicorn-23569.exe unicorn-38483.exe unicorn-21268.exe unicorn-11373.exe unicorn-1622.exe unicorn-11876.exe unicorn-4165.exe unicorn-46822.exe unicorn-39692.exe unicorn-56961.exe unicorn-56961.exe no specs unicorn-1965.exe unicorn-39822.exe unicorn-44186.exe unicorn-43242.exe unicorn-29262.exe no specs unicorn-17485.exe unicorn-23616.exe no specs unicorn-16583.exe no specs unicorn-38041.exe no specs unicorn-45333.exe unicorn-64933.exe unicorn-65198.exe unicorn-52819.exe unicorn-19421.exe unicorn-51283.exe unicorn-31417.exe no specs unicorn-59726.exe no specs unicorn-42067.exe unicorn-53390.exe no specs unicorn-13426.exe unicorn-11117.exe unicorn-36691.exe unicorn-14957.exe unicorn-48014.exe unicorn-8818.exe no specs unicorn-7291.exe unicorn-5741.exe no specs unicorn-22914.exe unicorn-64371.exe unicorn-4205.exe unicorn-37454.exe unicorn-10681.exe no specs unicorn-24416.exe unicorn-30282.exe no specs unicorn-54485.exe unicorn-1906.exe unicorn-63786.exe unicorn-7998.exe unicorn-62273.exe unicorn-33707.exe unicorn-12330.exe unicorn-58532.exe no specs unicorn-20660.exe unicorn-33619.exe no specs unicorn-20900.exe unicorn-23700.exe unicorn-9965.exe unicorn-23723.exe no specs unicorn-12788.exe unicorn-12788.exe unicorn-33667.exe no specs unicorn-44994.exe unicorn-64859.exe unicorn-16820.exe unicorn-52275.exe unicorn-53043.exe unicorn-21147.exe unicorn-27470.exe unicorn-16182.exe unicorn-57656.exe unicorn-9716.exe unicorn-28046.exe no specs unicorn-28238.exe unicorn-13650.exe unicorn-28046.exe no specs unicorn-12114.exe no specs unicorn-3572.exe unicorn-286.exe unicorn-52088.exe unicorn-48828.exe no specs unicorn-12877.exe unicorn-14989.exe no specs unicorn-63157.exe no specs unicorn-62965.exe no specs unicorn-62965.exe no specs unicorn-23001.exe unicorn-23249.exe no specs unicorn-42099.exe no specs unicorn-40581.exe unicorn-28192.exe no specs unicorn-30571.exe no specs unicorn-45210.exe no specs unicorn-63436.exe no specs unicorn-58945.exe unicorn-11163.exe werfault.exe no specs unicorn-3771.exe unicorn-55573.exe unicorn-14836.exe unicorn-877.exe no specs unicorn-59699.exe no specs unicorn-40409.exe no specs unicorn-20177.exe unicorn-60010.exe no specs unicorn-971.exe no specs unicorn-51345.exe no specs unicorn-32603.exe no specs unicorn-32411.exe no specs unicorn-11541.exe no specs unicorn-44250.exe no specs unicorn-29523.exe unicorn-28558.exe no specs unicorn-11463.exe unicorn-5598.exe unicorn-23880.exe unicorn-10145.exe no specs unicorn-37368.exe unicorn-19273.exe no specs unicorn-51837.exe no specs unicorn-28889.exe no specs unicorn-32938.exe no specs unicorn-1012.exe unicorn-28889.exe unicorn-7264.exe unicorn-40409.exe unicorn-16969.exe no specs unicorn-18587.exe unicorn-58079.exe unicorn-4852.exe unicorn-42620.exe unicorn-55573.exe no specs unicorn-55573.exe no specs unicorn-11099.exe no specs unicorn-7177.exe no specs unicorn-11858.exe no specs unicorn-45112.exe unicorn-3145.exe no specs unicorn-3145.exe no specs unicorn-43182.exe unicorn-42917.exe unicorn-21209.exe unicorn-15236.exe no specs unicorn-24062.exe no specs unicorn-61173.exe no specs unicorn-120.exe unicorn-28889.exe unicorn-39539.exe no specs unicorn-49845.exe no specs unicorn-17051.exe no specs unicorn-57333.exe no specs unicorn-40355.exe unicorn-8345.exe no specs unicorn-39342.exe no specs unicorn-17940.exe no specs unicorn-19017.exe no specs unicorn-47731.exe unicorn-29891.exe no specs unicorn-54949.exe no specs unicorn-29652.exe no specs unicorn-58387.exe no specs unicorn-59054.exe no specs unicorn-23411.exe no specs unicorn-46460.exe no specs unicorn-19097.exe no specs unicorn-13124.exe no specs unicorn-12932.exe no specs unicorn-39731.exe no specs unicorn-16491.exe no specs unicorn-20093.exe no specs unicorn-8628.exe no specs unicorn-23311.exe no specs unicorn-43118.exe no specs unicorn-58577.exe no specs unicorn-20944.exe no specs unicorn-43621.exe no specs unicorn-37756.exe no specs unicorn-5961.exe no specs slui.exe no specs unicorn-34782.exe no specs unicorn-34782.exe unicorn-51612.exe no specs unicorn-34535.exe no specs unicorn-24985.exe no specs unicorn-55644.exe no specs unicorn-25209.exe no specs unicorn-52101.exe no specs unicorn-26900.exe no specs unicorn-52474.exe no specs unicorn-32500.exe unicorn-32500.exe unicorn-32500.exe unicorn-32500.exe unicorn-32500.exe unicorn-32500.exe no specs unicorn-32500.exe no specs unicorn-32500.exe no specs unicorn-46236.exe no specs unicorn-46236.exe no specs unicorn-46236.exe no specs unicorn-42051.exe no specs unicorn-24276.exe no specs unicorn-9527.exe unicorn-59605.exe no specs unicorn-37971.exe no specs unicorn-57877.exe no specs unicorn-13165.exe no specs unicorn-61681.exe no specs unicorn-24062.exe no specs unicorn-50791.exe no specs unicorn-31923.exe no specs unicorn-22363.exe no specs unicorn-49712.exe no specs unicorn-6925.exe unicorn-46703.exe unicorn-15155.exe unicorn-55368.exe no specs unicorn-35767.exe unicorn-10380.exe no specs unicorn-10605.exe no specs unicorn-59607.exe no specs unicorn-10605.exe unicorn-65207.exe unicorn-65207.exe unicorn-19270.exe unicorn-13405.exe no specs unicorn-13405.exe no specs unicorn-30585.exe no specs unicorn-44321.exe no specs unicorn-45104.exe no specs unicorn-49297.exe no specs unicorn-64220.exe no specs unicorn-35213.exe unicorn-15622.exe no specs unicorn-20849.exe no specs unicorn-46157.exe no specs unicorn-20583.exe no specs unicorn-60942.exe no specs unicorn-65313.exe no specs unicorn-42385.exe unicorn-13936.exe no specs unicorn-13936.exe no specs unicorn-53111.exe no specs unicorn-64974.exe no specs unicorn-37777.exe no specs unicorn-37777.exe no specs unicorn-37777.exe unicorn-58844.exe no specs unicorn-5031.exe no specs unicorn-62399.exe no specs unicorn-48664.exe no specs unicorn-31280.exe no specs unicorn-2727.exe no specs unicorn-63359.exe no specs unicorn-58206.exe no specs unicorn-35888.exe no specs unicorn-27488.exe unicorn-29565.exe unicorn-36527.exe unicorn-15115.exe no specs unicorn-48364.exe no specs unicorn-48364.exe no specs unicorn-48364.exe no specs unicorn-48364.exe no specs unicorn-14039.exe no specs unicorn-17915.exe no specs unicorn-702.exe no specs unicorn-6567.exe no specs unicorn-40008.exe no specs unicorn-40008.exe no specs unicorn-24158.exe no specs unicorn-36566.exe no specs unicorn-26542.exe unicorn-30320.exe no specs unicorn-26449.exe no specs unicorn-41710.exe no specs unicorn-28753.exe no specs unicorn-256.exe no specs unicorn-7931.exe no specs unicorn-7931.exe no specs unicorn-13796.exe no specs unicorn-8358.exe no specs unicorn-59733.exe no specs unicorn-59733.exe no specs unicorn-15151.exe no specs unicorn-17735.exe no specs unicorn-8878.exe no specs unicorn-50792.exe no specs unicorn-50600.exe no specs unicorn-59609.exe no specs unicorn-16998.exe no specs unicorn-55473.exe no specs unicorn-47825.exe no specs unicorn-34099.exe no specs unicorn-52922.exe no specs unicorn-7757.exe no specs unicorn-20881.exe no specs unicorn-28471.exe no specs unicorn-31597.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
208C:\Users\admin\AppData\Local\Temp\Unicorn-25451.exeC:\Users\admin\AppData\Local\Temp\Unicorn-25451.exe
Unicorn-30152.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-25451.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
496C:\Users\admin\AppData\Local\Temp\Unicorn-47737.exeC:\Users\admin\AppData\Local\Temp\Unicorn-47737.exe
1 (502).exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-47737.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
536C:\Users\admin\AppData\Local\Temp\Unicorn-16182.exeC:\Users\admin\AppData\Local\Temp\Unicorn-16182.exe
Unicorn-33041.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-16182.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
728C:\Users\admin\AppData\Local\Temp\Unicorn-27848.exeC:\Users\admin\AppData\Local\Temp\Unicorn-27848.exe
Unicorn-49526.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-27848.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
732C:\Users\admin\AppData\Local\Temp\Unicorn-21241.exeC:\Users\admin\AppData\Local\Temp\Unicorn-21241.exe
Unicorn-21046.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-21241.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
900C:\Users\admin\AppData\Local\Temp\Unicorn-30152.exeC:\Users\admin\AppData\Local\Temp\Unicorn-30152.exe
Unicorn-11871.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-30152.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1012C:\Users\admin\AppData\Local\Temp\Unicorn-26219.exeC:\Users\admin\AppData\Local\Temp\Unicorn-26219.exe
Unicorn-63862.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-26219.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1020C:\Users\admin\AppData\Local\Temp\Unicorn-20753.exeC:\Users\admin\AppData\Local\Temp\Unicorn-20753.exe
Unicorn-60345.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-20753.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1040C:\Users\admin\AppData\Local\Temp\Unicorn-30364.exeC:\Users\admin\AppData\Local\Temp\Unicorn-30364.exe
Unicorn-61067.exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-30364.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
1128C:\Users\admin\AppData\Local\Temp\Unicorn-1324.exeC:\Users\admin\AppData\Local\Temp\Unicorn-1324.exe
1 (502).exe
User:
admin
Company:
UEFI
Integrity Level:
MEDIUM
Version:
1.00
Modules
Images
c:\users\admin\appdata\local\temp\unicorn-1324.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
Total events
12 514
Read events
12 499
Write events
15
Delete events
0

Modification events

(PID) Process:(7356) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(7356) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(7356) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(7676) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(7676) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(7676) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(8032) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(8032) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(8032) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(7808) BackgroundTransferHost.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\Internet Settings\Cache\Content
Operation:writeName:CachePrefix
Value:
Executable files
832
Suspicious files
8
Text files
1
Unknown types
0

Dropped files

PID
Process
Filename
Type
48801 (502).exeC:\Users\admin\AppData\Local\Temp\Unicorn-1969.exeexecutable
MD5:E6249667BE000AE2CCC62B10CB790850
SHA256:3FC30E2F607E3429532E8BD8DD1EEF53127686534ED848CD4E7315ABE0102C61
496Unicorn-47737.exeC:\Users\admin\AppData\Local\Temp\Unicorn-60345.exeexecutable
MD5:80EB9A4BCCA215075CF83834F29400E2
SHA256:7A938DB33FE3EDA7F7144B7F48C5773B39650935A4F3E9018E64AD3223933FDE
6272Unicorn-60345.exeC:\Users\admin\AppData\Local\Temp\Unicorn-61067.exeexecutable
MD5:974B3A1651225AD8E58393726F698DB9
SHA256:E3F4E031F27221245099FAB1A56658BACDDC8C7C63890F7DA8F4525596EE8A02
3304Unicorn-61067.exeC:\Users\admin\AppData\Local\Temp\Unicorn-63862.exeexecutable
MD5:5AA7E4EDCC2A6BAC108011D749A16E7A
SHA256:C173A67C82761A12235993453DE60516CEFD029E164B34B36B3DAEC9D7D15219
48801 (502).exeC:\Users\admin\AppData\Local\Temp\Unicorn-47737.exeexecutable
MD5:FAFF77938C755AFE2BEA54DD191AD25B
SHA256:3FAA1FD38CEEF1FDB88F4557CDB78FFCFD3FE82C0319647C4FB75935C8AC31C3
496Unicorn-47737.exeC:\Users\admin\AppData\Local\Temp\Unicorn-11871.exeexecutable
MD5:F17060CE96D1BDFDCB0429480C16F192
SHA256:3C8B474BAE61724B1B1D3F9A6BFDEE29FCD682AFD5C92E3DB7726BA4855669C4
48801 (502).exeC:\Users\admin\AppData\Local\Temp\Unicorn-11107.exeexecutable
MD5:F85125E8AA1E58841F9C0438578817F0
SHA256:473F9A05EB08ECA205B2E6CF1E506A6BFB76F45537B4CA77DB6D618B3D55611C
6240Unicorn-1969.exeC:\Users\admin\AppData\Local\Temp\Unicorn-49526.exeexecutable
MD5:DDE44303D64649B2ADEA836E14C79B72
SHA256:4B900E19620A6F3B382B6BBF18C38ECD2BFC2A9454D3E4B01C1C6215A2F7BB8C
496Unicorn-47737.exeC:\Users\admin\AppData\Local\Temp\Unicorn-60778.exeexecutable
MD5:193F41916D931294E3676D2B6C41183E
SHA256:6F605B9B102CFB59B386ED28E27A8239024B226C4546608AD4C6C6F6F20B56ED
6456Unicorn-49526.exeC:\Users\admin\AppData\Local\Temp\Unicorn-27848.exeexecutable
MD5:793FAF6D0957B1BF6D60E3FEB5EA80AC
SHA256:2A35767591029796BEBFCBCE75C297ED0F2508C1278FB721892F73BFD9F133D0
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
25
DNS requests
18
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
8260
SIHClient.exe
GET
200
95.101.149.131:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
8260
SIHClient.exe
GET
200
95.101.149.131:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
7676
BackgroundTransferHost.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
5496
MoUsoCoreWorker.exe
GET
200
23.48.23.156:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
6544
svchost.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
1228
backgroundTaskHost.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
2104
svchost.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
—
—
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
5496
MoUsoCoreWorker.exe
23.48.23.156:80
crl.microsoft.com
Akamai International B.V.
DE
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
5216
RUXIMICS.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
6544
svchost.exe
40.126.32.68:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6544
svchost.exe
184.30.131.245:80
ocsp.digicert.com
AKAMAI-AS
US
whitelisted
2112
svchost.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
3216
svchost.exe
40.113.110.67:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 4.231.128.59
whitelisted
google.com
  • 142.250.186.78
whitelisted
crl.microsoft.com
  • 23.48.23.156
  • 23.48.23.143
whitelisted
login.live.com
  • 40.126.32.68
  • 20.190.160.3
  • 20.190.160.64
  • 20.190.160.4
  • 20.190.160.14
  • 20.190.160.130
  • 20.190.160.132
  • 20.190.160.5
whitelisted
ocsp.digicert.com
  • 184.30.131.245
whitelisted
client.wns.windows.com
  • 40.113.110.67
whitelisted
arc.msn.com
  • 20.31.169.57
whitelisted
www.bing.com
  • 92.123.104.34
  • 92.123.104.63
  • 92.123.104.31
  • 92.123.104.38
  • 92.123.104.32
whitelisted
slscr.update.microsoft.com
  • 52.149.20.212
whitelisted
www.microsoft.com
  • 95.101.149.131
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
1 (502)