| File name: | Kawaii-Unicorn.exe |
| Full analysis: | https://app.any.run/tasks/6e116737-aa65-46db-a50d-0fdd0d42a841 |
| Verdict: | Malicious activity |
| Analysis date: | August 22, 2024, 05:15:09 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Indicators: | |
| MIME: | application/x-dosexec |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows |
| MD5: | 59B6A82C8F134F0AA8478B321AF16DC9 |
| SHA1: | A27529406C4FA9EE8F09A70724B13262ABC5815B |
| SHA256: | 45C31557C2FD01D44CDEC92DCC2DD85C9C114648BD069CF24E7AE9F1786D2C03 |
| SSDEEP: | 6144:47w+22IJvDSHAGlstbeQJnfx5tBqlpJGBC/WyeOdTk/8SwjwuyAvEhQpLTgZsyBa:4s9d4HAGCt6gBMLaCOyeOdyx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Drops the executable file immediately after the start
- Kawaii-Unicorn.exe (PID: 6580)
- Unicorn-54939.exe (PID: 6796)
- Unicorn-57788.exe (PID: 6700)
- Unicorn-4555.exe (PID: 2628)
- Unicorn-8390.exe (PID: 6788)
- Unicorn-725.exe (PID: 6224)
- Unicorn-14830.exe (PID: 6360)
- Unicorn-45043.exe (PID: 6536)
- Unicorn-4555.exe (PID: 6480)
- Unicorn-45043.exe (PID: 6380)
- Unicorn-56740.exe (PID: 6276)
- Unicorn-16676.exe (PID: 6436)
- Unicorn-14460.exe (PID: 6176)
- Unicorn-6190.exe (PID: 6456)
- Unicorn-6190.exe (PID: 6368)
- Unicorn-14830.exe (PID: 6204)
- Unicorn-43693.exe (PID: 6324)
- Unicorn-2661.exe (PID: 6364)
- Unicorn-6766.exe (PID: 2648)
- Unicorn-8804.exe (PID: 4692)
- Unicorn-64135.exe (PID: 6752)
- Unicorn-3237.exe (PID: 6636)
- Unicorn-64135.exe (PID: 6632)
- Unicorn-65012.exe (PID: 6656)
- Unicorn-22542.exe (PID: 6304)
- Unicorn-56740.exe (PID: 6268)
- Unicorn-22527.exe (PID: 6408)
- Unicorn-28827.exe (PID: 3864)
- Unicorn-35926.exe (PID: 1184)
- Unicorn-48733.exe (PID: 3908)
- Unicorn-41140.exe (PID: 5144)
- Unicorn-36502.exe (PID: 7080)
- Unicorn-54684.exe (PID: 6576)
- Unicorn-5557.exe (PID: 7012)
- Unicorn-10004.exe (PID: 1116)
- Unicorn-23739.exe (PID: 6476)
- Unicorn-13533.exe (PID: 7100)
- Unicorn-43444.exe (PID: 7024)
- Unicorn-38230.exe (PID: 1224)
- Unicorn-13844.exe (PID: 2928)
- Unicorn-63118.exe (PID: 7172)
- Unicorn-63118.exe (PID: 7188)
- Unicorn-58005.exe (PID: 6692)
- Unicorn-38614.exe (PID: 7196)
- Unicorn-63118.exe (PID: 7180)
- Unicorn-5749.exe (PID: 7256)
- Unicorn-5749.exe (PID: 7248)
- Unicorn-5749.exe (PID: 7236)
- Unicorn-58629.exe (PID: 7356)
- Unicorn-58629.exe (PID: 7348)
- Unicorn-4027.exe (PID: 7340)
- Unicorn-65012.exe (PID: 6744)
- Unicorn-5749.exe (PID: 7264)
- Unicorn-53029.exe (PID: 7396)
- Unicorn-22340.exe (PID: 6628)
- Unicorn-31006.exe (PID: 6684)
- Unicorn-45147.exe (PID: 6644)
- Unicorn-51717.exe (PID: 7532)
- Unicorn-3933.exe (PID: 7492)
- Unicorn-10876.exe (PID: 7508)
- Unicorn-6045.exe (PID: 7540)
- Unicorn-13253.exe (PID: 7636)
- Unicorn-59693.exe (PID: 7568)
- Unicorn-36916.exe (PID: 7700)
- Unicorn-24302.exe (PID: 7728)
- Unicorn-14405.exe (PID: 7588)
- Unicorn-48156.exe (PID: 7616)
- Unicorn-64877.exe (PID: 7736)
- Unicorn-4229.exe (PID: 7800)
- Unicorn-62750.exe (PID: 7760)
- Unicorn-62475.exe (PID: 7820)
- Unicorn-39516.exe (PID: 7844)
- Unicorn-4613.exe (PID: 7908)
- Unicorn-21142.exe (PID: 7856)
- Unicorn-3196.exe (PID: 7996)
- Unicorn-22870.exe (PID: 8052)
- Unicorn-20684.exe (PID: 7948)
- Unicorn-3196.exe (PID: 8012)
- Unicorn-30659.exe (PID: 8132)
- Unicorn-31422.exe (PID: 8144)
- Unicorn-2236.exe (PID: 8188)
- Unicorn-16931.exe (PID: 8004)
- Unicorn-10404.exe (PID: 1636)
- Unicorn-6149.exe (PID: 4316)
- Unicorn-39590.exe (PID: 8156)
- Unicorn-32766.exe (PID: 8356)
- Unicorn-31523.exe (PID: 7288)
- Unicorn-22678.exe (PID: 5504)
- Unicorn-49102.exe (PID: 8256)
- Unicorn-32766.exe (PID: 8272)
- Unicorn-49102.exe (PID: 8260)
- Unicorn-46990.exe (PID: 8236)
- Unicorn-31323.exe (PID: 7272)
- Unicorn-45573.exe (PID: 8300)
- Unicorn-49102.exe (PID: 8280)
- Unicorn-47668.exe (PID: 7364)
- Unicorn-16238.exe (PID: 8292)
- Unicorn-32574.exe (PID: 8432)
- Unicorn-48910.exe (PID: 8320)
- Unicorn-48910.exe (PID: 8316)
- Unicorn-58348.exe (PID: 8536)
- Unicorn-16238.exe (PID: 8308)
- Unicorn-58540.exe (PID: 8476)
- Unicorn-62293.exe (PID: 8404)
- Unicorn-39012.exe (PID: 8544)
- Unicorn-62786.exe (PID: 8368)
- Unicorn-31958.exe (PID: 8616)
- Unicorn-63716.exe (PID: 8520)
- Unicorn-64670.exe (PID: 8484)
- Unicorn-58540.exe (PID: 8468)
- Unicorn-6844.exe (PID: 8564)
- Unicorn-32574.exe (PID: 8332)
- Unicorn-52781.exe (PID: 8500)
- Unicorn-53357.exe (PID: 8596)
- Unicorn-15588.exe (PID: 8604)
- Unicorn-402.exe (PID: 8752)
- Unicorn-65363.exe (PID: 8732)
- Unicorn-54050.exe (PID: 8788)
- Unicorn-41243.exe (PID: 8772)
- Unicorn-17788.exe (PID: 7296)
- Unicorn-48540.exe (PID: 7676)
- Unicorn-31731.exe (PID: 8856)
- Unicorn-31923.exe (PID: 8808)
- Unicorn-37389.exe (PID: 7312)
- Unicorn-19928.exe (PID: 8900)
- Unicorn-33960.exe (PID: 8816)
- Unicorn-9914.exe (PID: 8988)
- Unicorn-55778.exe (PID: 8936)
- Unicorn-57698.exe (PID: 9044)
- Unicorn-10106.exe (PID: 8944)
- Unicorn-41819.exe (PID: 9088)
- Unicorn-11258.exe (PID: 9124)
- Unicorn-3209.exe (PID: 9164)
- Unicorn-27795.exe (PID: 6488)
- Unicorn-11258.exe (PID: 9132)
- Unicorn-56930.exe (PID: 9116)
- Unicorn-47802.exe (PID: 8184)
- Unicorn-60459.exe (PID: 9200)
- Unicorn-60098.exe (PID: 7780)
- Unicorn-18088.exe (PID: 8740)
- Unicorn-47802.exe (PID: 7968)
- Unicorn-7065.exe (PID: 9300)
- Unicorn-61139.exe (PID: 9352)
- Unicorn-52781.exe (PID: 8584)
- Unicorn-37788.exe (PID: 8412)
- Unicorn-43843.exe (PID: 9384)
- Unicorn-979.exe (PID: 8512)
- Unicorn-6572.exe (PID: 9392)
- Unicorn-61523.exe (PID: 9448)
- Unicorn-61523.exe (PID: 9456)
- Unicorn-13235.exe (PID: 9540)
- Unicorn-9945.exe (PID: 9424)
- Unicorn-43691.exe (PID: 9580)
- Unicorn-52544.exe (PID: 9552)
Starts itself from another location
- Unicorn-57788.exe (PID: 6700)
- Unicorn-54939.exe (PID: 6796)
- Kawaii-Unicorn.exe (PID: 6580)
- Unicorn-4555.exe (PID: 6480)
- Unicorn-725.exe (PID: 6224)
- Unicorn-14460.exe (PID: 6176)
- Unicorn-4555.exe (PID: 2628)
- Unicorn-45043.exe (PID: 6536)
- Unicorn-56740.exe (PID: 6276)
- Unicorn-56740.exe (PID: 6268)
- Unicorn-22542.exe (PID: 6304)
- Unicorn-16676.exe (PID: 6436)
- Unicorn-8390.exe (PID: 6788)
- Unicorn-6190.exe (PID: 6456)
- Unicorn-6190.exe (PID: 6368)
- Unicorn-14830.exe (PID: 6204)
- Unicorn-6766.exe (PID: 2648)
- Unicorn-8804.exe (PID: 4692)
- Unicorn-43693.exe (PID: 6324)
- Unicorn-64135.exe (PID: 6752)
- Unicorn-65012.exe (PID: 6744)
- Unicorn-58005.exe (PID: 6692)
- Unicorn-3237.exe (PID: 6636)
- Unicorn-45043.exe (PID: 6380)
- Unicorn-65012.exe (PID: 6656)
- Unicorn-28827.exe (PID: 3864)
- Unicorn-48733.exe (PID: 3908)
- Unicorn-41140.exe (PID: 5144)
- Unicorn-22527.exe (PID: 6408)
- Unicorn-36502.exe (PID: 7080)
- Unicorn-14830.exe (PID: 6360)
- Unicorn-54684.exe (PID: 6576)
- Unicorn-5557.exe (PID: 7012)
- Unicorn-2661.exe (PID: 6364)
- Unicorn-10004.exe (PID: 1116)
- Unicorn-23739.exe (PID: 6476)
- Unicorn-13533.exe (PID: 7100)
- Unicorn-38230.exe (PID: 1224)
- Unicorn-13844.exe (PID: 2928)
- Unicorn-43444.exe (PID: 7024)
- Unicorn-63118.exe (PID: 7172)
- Unicorn-63118.exe (PID: 7188)
- Unicorn-5749.exe (PID: 7248)
- Unicorn-31323.exe (PID: 7272)
- Unicorn-38614.exe (PID: 7196)
- Unicorn-5749.exe (PID: 7256)
- Unicorn-47668.exe (PID: 7364)
- Unicorn-58629.exe (PID: 7356)
- Unicorn-58629.exe (PID: 7348)
- Unicorn-17788.exe (PID: 7296)
- Unicorn-37389.exe (PID: 7312)
- Unicorn-17788.exe (PID: 7304)
- Unicorn-5749.exe (PID: 7264)
- Unicorn-22340.exe (PID: 6628)
- Unicorn-64135.exe (PID: 6632)
- Unicorn-4027.exe (PID: 7340)
- Unicorn-31006.exe (PID: 6684)
- Unicorn-45147.exe (PID: 6644)
- Unicorn-53029.exe (PID: 7396)
- Unicorn-10876.exe (PID: 7508)
- Unicorn-3933.exe (PID: 7492)
- Unicorn-51717.exe (PID: 7532)
- Unicorn-6045.exe (PID: 7540)
- Unicorn-48540.exe (PID: 7676)
- Unicorn-59693.exe (PID: 7568)
- Unicorn-35926.exe (PID: 1184)
- Unicorn-36916.exe (PID: 7700)
- Unicorn-13829.exe (PID: 7656)
- Unicorn-24302.exe (PID: 7728)
- Unicorn-14405.exe (PID: 7588)
- Unicorn-64877.exe (PID: 7736)
- Unicorn-4229.exe (PID: 7800)
- Unicorn-62750.exe (PID: 7760)
- Unicorn-60098.exe (PID: 7780)
- Unicorn-62475.exe (PID: 7820)
- Unicorn-13253.exe (PID: 7636)
- Unicorn-4613.exe (PID: 7908)
- Unicorn-3196.exe (PID: 7996)
- Unicorn-21142.exe (PID: 7856)
- Unicorn-22870.exe (PID: 8052)
- Unicorn-20684.exe (PID: 7948)
- Unicorn-39516.exe (PID: 7844)
- Unicorn-3196.exe (PID: 8012)
- Unicorn-31422.exe (PID: 8144)
- Unicorn-30659.exe (PID: 8132)
- Unicorn-16931.exe (PID: 8004)
- Unicorn-2236.exe (PID: 8188)
- Unicorn-10404.exe (PID: 1636)
- Unicorn-6149.exe (PID: 4316)
- Unicorn-39590.exe (PID: 8156)
- Unicorn-32766.exe (PID: 8356)
- Unicorn-63118.exe (PID: 7180)
- Unicorn-22678.exe (PID: 5504)
- Unicorn-31523.exe (PID: 7288)
- Unicorn-46990.exe (PID: 8236)
- Unicorn-49102.exe (PID: 8256)
- Unicorn-32766.exe (PID: 8272)
- Unicorn-49102.exe (PID: 8260)
- Unicorn-63518.exe (PID: 8208)
- Unicorn-5749.exe (PID: 7236)
- Unicorn-45573.exe (PID: 8300)
- Unicorn-48910.exe (PID: 8320)
- Unicorn-16238.exe (PID: 8292)
- Unicorn-32574.exe (PID: 8432)
- Unicorn-58348.exe (PID: 8536)
- Unicorn-58540.exe (PID: 8476)
- Unicorn-16238.exe (PID: 8308)
- Unicorn-37788.exe (PID: 8412)
- Unicorn-62293.exe (PID: 8404)
- Unicorn-48910.exe (PID: 8316)
- Unicorn-39012.exe (PID: 8544)
- Unicorn-62786.exe (PID: 8368)
- Unicorn-31958.exe (PID: 8616)
- Unicorn-58540.exe (PID: 8468)
- Unicorn-6844.exe (PID: 8564)
- Unicorn-64670.exe (PID: 8484)
- Unicorn-52781.exe (PID: 8584)
- Unicorn-63716.exe (PID: 8520)
- Unicorn-979.exe (PID: 8512)
- Unicorn-32574.exe (PID: 8332)
- Unicorn-52781.exe (PID: 8500)
- Unicorn-53357.exe (PID: 8596)
- Unicorn-15588.exe (PID: 8604)
- Unicorn-65363.exe (PID: 8732)
- Unicorn-402.exe (PID: 8752)
- Unicorn-54050.exe (PID: 8788)
- Unicorn-41243.exe (PID: 8772)
- Unicorn-31731.exe (PID: 8856)
- Unicorn-19928.exe (PID: 8900)
- Unicorn-9840.exe (PID: 8876)
- Unicorn-31923.exe (PID: 8808)
- Unicorn-33960.exe (PID: 8816)
- Unicorn-55778.exe (PID: 8936)
- Unicorn-9914.exe (PID: 8988)
- Unicorn-57698.exe (PID: 9044)
- Unicorn-10106.exe (PID: 8944)
- Unicorn-48156.exe (PID: 7616)
- Unicorn-41819.exe (PID: 9088)
- Unicorn-11258.exe (PID: 9132)
- Unicorn-11258.exe (PID: 9124)
- Unicorn-3209.exe (PID: 9164)
- Unicorn-56930.exe (PID: 9116)
- Unicorn-47802.exe (PID: 8184)
- Unicorn-57314.exe (PID: 9172)
- Unicorn-60459.exe (PID: 9200)
- Unicorn-27795.exe (PID: 6488)
- Unicorn-18088.exe (PID: 8740)
- Unicorn-47802.exe (PID: 7968)
- Unicorn-7065.exe (PID: 9300)
- Unicorn-49102.exe (PID: 8280)
- Unicorn-43843.exe (PID: 9384)
- Unicorn-61523.exe (PID: 9448)
- Unicorn-6572.exe (PID: 9392)
- Unicorn-9945.exe (PID: 9424)
- Unicorn-13235.exe (PID: 9540)
- Unicorn-61523.exe (PID: 9456)
- Unicorn-43691.exe (PID: 9580)
- Unicorn-52544.exe (PID: 9552)
Executable content was dropped or overwritten
- Unicorn-57788.exe (PID: 6700)
- Unicorn-54939.exe (PID: 6796)
- Kawaii-Unicorn.exe (PID: 6580)
- Unicorn-4555.exe (PID: 2628)
- Unicorn-8390.exe (PID: 6788)
- Unicorn-725.exe (PID: 6224)
- Unicorn-14830.exe (PID: 6360)
- Unicorn-4555.exe (PID: 6480)
- Unicorn-45043.exe (PID: 6536)
- Unicorn-45043.exe (PID: 6380)
- Unicorn-56740.exe (PID: 6276)
- Unicorn-14460.exe (PID: 6176)
- Unicorn-16676.exe (PID: 6436)
- Unicorn-6190.exe (PID: 6456)
- Unicorn-6190.exe (PID: 6368)
- Unicorn-14830.exe (PID: 6204)
- Unicorn-43693.exe (PID: 6324)
- Unicorn-2661.exe (PID: 6364)
- Unicorn-6766.exe (PID: 2648)
- Unicorn-8804.exe (PID: 4692)
- Unicorn-3237.exe (PID: 6636)
- Unicorn-65012.exe (PID: 6656)
- Unicorn-64135.exe (PID: 6752)
- Unicorn-64135.exe (PID: 6632)
- Unicorn-22542.exe (PID: 6304)
- Unicorn-56740.exe (PID: 6268)
- Unicorn-28827.exe (PID: 3864)
- Unicorn-35926.exe (PID: 1184)
- Unicorn-22527.exe (PID: 6408)
- Unicorn-48733.exe (PID: 3908)
- Unicorn-41140.exe (PID: 5144)
- Unicorn-36502.exe (PID: 7080)
- Unicorn-54684.exe (PID: 6576)
- Unicorn-5557.exe (PID: 7012)
- Unicorn-10004.exe (PID: 1116)
- Unicorn-23739.exe (PID: 6476)
- Unicorn-38230.exe (PID: 1224)
- Unicorn-13844.exe (PID: 2928)
- Unicorn-13533.exe (PID: 7100)
- Unicorn-43444.exe (PID: 7024)
- Unicorn-63118.exe (PID: 7172)
- Unicorn-63118.exe (PID: 7188)
- Unicorn-58005.exe (PID: 6692)
- Unicorn-38614.exe (PID: 7196)
- Unicorn-5749.exe (PID: 7256)
- Unicorn-63118.exe (PID: 7180)
- Unicorn-5749.exe (PID: 7248)
- Unicorn-5749.exe (PID: 7236)
- Unicorn-5749.exe (PID: 7264)
- Unicorn-58629.exe (PID: 7356)
- Unicorn-58629.exe (PID: 7348)
- Unicorn-4027.exe (PID: 7340)
- Unicorn-65012.exe (PID: 6744)
- Unicorn-22340.exe (PID: 6628)
- Unicorn-53029.exe (PID: 7396)
- Unicorn-45147.exe (PID: 6644)
- Unicorn-31006.exe (PID: 6684)
- Unicorn-3933.exe (PID: 7492)
- Unicorn-10876.exe (PID: 7508)
- Unicorn-59693.exe (PID: 7568)
- Unicorn-51717.exe (PID: 7532)
- Unicorn-6045.exe (PID: 7540)
- Unicorn-13253.exe (PID: 7636)
- Unicorn-36916.exe (PID: 7700)
- Unicorn-64877.exe (PID: 7736)
- Unicorn-14405.exe (PID: 7588)
- Unicorn-24302.exe (PID: 7728)
- Unicorn-48156.exe (PID: 7616)
- Unicorn-4229.exe (PID: 7800)
- Unicorn-62750.exe (PID: 7760)
- Unicorn-62475.exe (PID: 7820)
- Unicorn-4613.exe (PID: 7908)
- Unicorn-39516.exe (PID: 7844)
- Unicorn-21142.exe (PID: 7856)
- Unicorn-3196.exe (PID: 7996)
- Unicorn-22870.exe (PID: 8052)
- Unicorn-20684.exe (PID: 7948)
- Unicorn-3196.exe (PID: 8012)
- Unicorn-30659.exe (PID: 8132)
- Unicorn-31422.exe (PID: 8144)
- Unicorn-16931.exe (PID: 8004)
- Unicorn-2236.exe (PID: 8188)
- Unicorn-10404.exe (PID: 1636)
- Unicorn-39590.exe (PID: 8156)
- Unicorn-6149.exe (PID: 4316)
- Unicorn-22678.exe (PID: 5504)
- Unicorn-31523.exe (PID: 7288)
- Unicorn-32766.exe (PID: 8356)
- Unicorn-49102.exe (PID: 8256)
- Unicorn-32766.exe (PID: 8272)
- Unicorn-49102.exe (PID: 8260)
- Unicorn-46990.exe (PID: 8236)
- Unicorn-31323.exe (PID: 7272)
- Unicorn-47668.exe (PID: 7364)
- Unicorn-49102.exe (PID: 8280)
- Unicorn-45573.exe (PID: 8300)
- Unicorn-48910.exe (PID: 8320)
- Unicorn-16238.exe (PID: 8292)
- Unicorn-32574.exe (PID: 8432)
- Unicorn-48910.exe (PID: 8316)
- Unicorn-16238.exe (PID: 8308)
- Unicorn-58348.exe (PID: 8536)
- Unicorn-58540.exe (PID: 8476)
- Unicorn-62293.exe (PID: 8404)
- Unicorn-39012.exe (PID: 8544)
- Unicorn-63716.exe (PID: 8520)
- Unicorn-62786.exe (PID: 8368)
- Unicorn-31958.exe (PID: 8616)
- Unicorn-58540.exe (PID: 8468)
- Unicorn-64670.exe (PID: 8484)
- Unicorn-6844.exe (PID: 8564)
- Unicorn-52781.exe (PID: 8500)
- Unicorn-15588.exe (PID: 8604)
- Unicorn-32574.exe (PID: 8332)
- Unicorn-53357.exe (PID: 8596)
- Unicorn-402.exe (PID: 8752)
- Unicorn-65363.exe (PID: 8732)
- Unicorn-17788.exe (PID: 7296)
- Unicorn-41243.exe (PID: 8772)
- Unicorn-54050.exe (PID: 8788)
- Unicorn-48540.exe (PID: 7676)
- Unicorn-31923.exe (PID: 8808)
- Unicorn-31731.exe (PID: 8856)
- Unicorn-37389.exe (PID: 7312)
- Unicorn-19928.exe (PID: 8900)
- Unicorn-33960.exe (PID: 8816)
- Unicorn-9914.exe (PID: 8988)
- Unicorn-55778.exe (PID: 8936)
- Unicorn-57698.exe (PID: 9044)
- Unicorn-10106.exe (PID: 8944)
- Unicorn-41819.exe (PID: 9088)
- Unicorn-3209.exe (PID: 9164)
- Unicorn-56930.exe (PID: 9116)
- Unicorn-11258.exe (PID: 9124)
- Unicorn-27795.exe (PID: 6488)
- Unicorn-11258.exe (PID: 9132)
- Unicorn-47802.exe (PID: 8184)
- Unicorn-60459.exe (PID: 9200)
- Unicorn-47802.exe (PID: 7968)
- Unicorn-18088.exe (PID: 8740)
- Unicorn-60098.exe (PID: 7780)
- Unicorn-7065.exe (PID: 9300)
- Unicorn-61139.exe (PID: 9352)
- Unicorn-37788.exe (PID: 8412)
- Unicorn-52781.exe (PID: 8584)
- Unicorn-43843.exe (PID: 9384)
- Unicorn-979.exe (PID: 8512)
- Unicorn-6572.exe (PID: 9392)
- Unicorn-61523.exe (PID: 9448)
- Unicorn-61523.exe (PID: 9456)
- Unicorn-13235.exe (PID: 9540)
- Unicorn-9945.exe (PID: 9424)
- Unicorn-43691.exe (PID: 9580)
- Unicorn-52544.exe (PID: 9552)
INFO
Reads the computer name
- Kawaii-Unicorn.exe (PID: 6580)
- Unicorn-57788.exe (PID: 6700)
- Unicorn-8390.exe (PID: 6788)
- Unicorn-54939.exe (PID: 6796)
- Unicorn-4555.exe (PID: 2628)
- Unicorn-4555.exe (PID: 6480)
- Unicorn-725.exe (PID: 6224)
- Unicorn-14460.exe (PID: 6176)
- Unicorn-45043.exe (PID: 6536)
- Unicorn-45043.exe (PID: 6380)
- Unicorn-16676.exe (PID: 6436)
- Unicorn-56740.exe (PID: 6276)
- Unicorn-56740.exe (PID: 6268)
- Unicorn-22542.exe (PID: 6304)
- Unicorn-14830.exe (PID: 6204)
- Unicorn-14830.exe (PID: 6360)
- Unicorn-6190.exe (PID: 6456)
- Unicorn-6190.exe (PID: 6368)
- Unicorn-43693.exe (PID: 6324)
- Unicorn-58005.exe (PID: 6692)
- Unicorn-8804.exe (PID: 4692)
- Unicorn-65012.exe (PID: 6744)
- Unicorn-22527.exe (PID: 6408)
- Unicorn-2661.exe (PID: 6364)
- Unicorn-6766.exe (PID: 2648)
- Unicorn-3237.exe (PID: 6636)
- Unicorn-64135.exe (PID: 6752)
- Unicorn-22340.exe (PID: 6628)
- Unicorn-31006.exe (PID: 6684)
- Unicorn-64135.exe (PID: 6632)
- Unicorn-65012.exe (PID: 6656)
- Unicorn-45147.exe (PID: 6644)
- Unicorn-28827.exe (PID: 3864)
- Unicorn-35926.exe (PID: 1184)
- Unicorn-48733.exe (PID: 3908)
- Unicorn-36502.exe (PID: 7080)
- Unicorn-54684.exe (PID: 6576)
- Unicorn-5557.exe (PID: 7012)
- Unicorn-10004.exe (PID: 1116)
- Unicorn-13533.exe (PID: 7100)
- Unicorn-23739.exe (PID: 6476)
- Unicorn-43444.exe (PID: 7024)
- Unicorn-38230.exe (PID: 1224)
- Unicorn-41140.exe (PID: 5144)
- Unicorn-13844.exe (PID: 2928)
- Unicorn-63118.exe (PID: 7172)
- Unicorn-63118.exe (PID: 7188)
- Unicorn-38614.exe (PID: 7196)
- Unicorn-63118.exe (PID: 7180)
- Unicorn-5749.exe (PID: 7248)
- Unicorn-47668.exe (PID: 7364)
- Unicorn-31323.exe (PID: 7272)
- Unicorn-5749.exe (PID: 7264)
- Unicorn-5749.exe (PID: 7236)
- Unicorn-58629.exe (PID: 7356)
- Unicorn-31523.exe (PID: 7288)
- Unicorn-17788.exe (PID: 7304)
- Unicorn-17788.exe (PID: 7296)
- Unicorn-4027.exe (PID: 7340)
- Unicorn-58629.exe (PID: 7348)
- Unicorn-5749.exe (PID: 7256)
- Unicorn-37389.exe (PID: 7312)
- Unicorn-53029.exe (PID: 7396)
- Unicorn-51717.exe (PID: 7532)
- Unicorn-10876.exe (PID: 7508)
- Unicorn-59693.exe (PID: 7568)
- Unicorn-3933.exe (PID: 7492)
- Unicorn-6045.exe (PID: 7540)
- Unicorn-48540.exe (PID: 7676)
- Unicorn-13253.exe (PID: 7636)
- Unicorn-14405.exe (PID: 7588)
- Unicorn-48156.exe (PID: 7616)
- Unicorn-64877.exe (PID: 7736)
- Unicorn-13829.exe (PID: 7656)
- Unicorn-24302.exe (PID: 7728)
- Unicorn-36916.exe (PID: 7700)
- Unicorn-62750.exe (PID: 7760)
- Unicorn-62475.exe (PID: 7820)
- Unicorn-60098.exe (PID: 7780)
- Unicorn-29310.exe (PID: 7872)
- Unicorn-4613.exe (PID: 7908)
- Unicorn-39516.exe (PID: 7844)
- Unicorn-21142.exe (PID: 7856)
- Unicorn-4229.exe (PID: 7800)
- Unicorn-22870.exe (PID: 8052)
- Unicorn-3196.exe (PID: 8012)
- Unicorn-30659.exe (PID: 8132)
- Unicorn-3196.exe (PID: 7996)
- Unicorn-20684.exe (PID: 7948)
- Unicorn-31422.exe (PID: 8144)
- Unicorn-2236.exe (PID: 8188)
- Unicorn-6149.exe (PID: 4316)
- Unicorn-10404.exe (PID: 1636)
- Unicorn-39590.exe (PID: 8156)
- Unicorn-16931.exe (PID: 8004)
- Unicorn-32766.exe (PID: 8356)
- Unicorn-22678.exe (PID: 5504)
- Unicorn-63518.exe (PID: 8208)
- Unicorn-46990.exe (PID: 8236)
- Unicorn-49102.exe (PID: 8256)
- Unicorn-32766.exe (PID: 8272)
- Unicorn-45573.exe (PID: 8300)
- Unicorn-49102.exe (PID: 8280)
- Unicorn-48910.exe (PID: 8320)
- Unicorn-49102.exe (PID: 8260)
- Unicorn-32574.exe (PID: 8432)
- Unicorn-16238.exe (PID: 8292)
- Unicorn-58540.exe (PID: 8476)
- Unicorn-58348.exe (PID: 8536)
- Unicorn-48910.exe (PID: 8316)
- Unicorn-16238.exe (PID: 8308)
- Unicorn-37788.exe (PID: 8412)
- Unicorn-62293.exe (PID: 8404)
- Unicorn-39012.exe (PID: 8544)
- Unicorn-6844.exe (PID: 8564)
- Unicorn-58540.exe (PID: 8468)
- Unicorn-52781.exe (PID: 8584)
- Unicorn-15588.exe (PID: 8604)
- Unicorn-52781.exe (PID: 8500)
- Unicorn-53357.exe (PID: 8596)
- Unicorn-62786.exe (PID: 8368)
- Unicorn-31958.exe (PID: 8616)
- Unicorn-63716.exe (PID: 8520)
- Unicorn-64670.exe (PID: 8484)
- Unicorn-979.exe (PID: 8512)
- Unicorn-32574.exe (PID: 8332)
- Unicorn-65363.exe (PID: 8732)
- Unicorn-402.exe (PID: 8752)
- Unicorn-54050.exe (PID: 8788)
- Unicorn-41243.exe (PID: 8772)
- Unicorn-31731.exe (PID: 8856)
- Unicorn-33960.exe (PID: 8816)
- Unicorn-31923.exe (PID: 8808)
- Unicorn-9840.exe (PID: 8876)
- Unicorn-19928.exe (PID: 8900)
- Unicorn-57698.exe (PID: 9044)
- Unicorn-55778.exe (PID: 8936)
- Unicorn-9914.exe (PID: 8988)
- Unicorn-10106.exe (PID: 8944)
- Unicorn-41819.exe (PID: 9088)
- Unicorn-56930.exe (PID: 9116)
- Unicorn-3209.exe (PID: 9164)
- Unicorn-27795.exe (PID: 6488)
- Unicorn-57314.exe (PID: 9172)
- Unicorn-11258.exe (PID: 9132)
- Unicorn-11258.exe (PID: 9124)
- Unicorn-47802.exe (PID: 8184)
- Unicorn-60459.exe (PID: 9200)
- Unicorn-47802.exe (PID: 7968)
- Unicorn-18088.exe (PID: 8740)
- Unicorn-7065.exe (PID: 9300)
- Unicorn-61139.exe (PID: 9352)
- Unicorn-43843.exe (PID: 9384)
- Unicorn-6572.exe (PID: 9392)
- Unicorn-61523.exe (PID: 9448)
- Unicorn-9945.exe (PID: 9424)
- Unicorn-61523.exe (PID: 9456)
- Unicorn-13235.exe (PID: 9540)
- Unicorn-52544.exe (PID: 9552)
Checks supported languages
- Kawaii-Unicorn.exe (PID: 6580)
- Unicorn-54939.exe (PID: 6796)
- Unicorn-8390.exe (PID: 6788)
- Unicorn-57788.exe (PID: 6700)
- Unicorn-725.exe (PID: 6224)
- Unicorn-14460.exe (PID: 6176)
- Unicorn-56740.exe (PID: 6268)
- Unicorn-56740.exe (PID: 6276)
- Unicorn-22542.exe (PID: 6304)
- Unicorn-14830.exe (PID: 6204)
- Unicorn-14830.exe (PID: 6360)
- Unicorn-45043.exe (PID: 6380)
- Unicorn-45043.exe (PID: 6536)
- Unicorn-6190.exe (PID: 6368)
- Unicorn-43693.exe (PID: 6324)
- Unicorn-16676.exe (PID: 6436)
- Unicorn-6190.exe (PID: 6456)
- Unicorn-2661.exe (PID: 6364)
- Unicorn-58005.exe (PID: 6692)
- Unicorn-22527.exe (PID: 6408)
- Unicorn-8804.exe (PID: 4692)
- Unicorn-6766.exe (PID: 2648)
- Unicorn-64135.exe (PID: 6632)
- Unicorn-65012.exe (PID: 6656)
- Unicorn-65012.exe (PID: 6744)
- Unicorn-3237.exe (PID: 6636)
- Unicorn-22340.exe (PID: 6628)
- Unicorn-64135.exe (PID: 6752)
- Unicorn-45147.exe (PID: 6644)
- Unicorn-31006.exe (PID: 6684)
- Unicorn-4555.exe (PID: 2628)
- Unicorn-4555.exe (PID: 6480)
- Unicorn-28827.exe (PID: 3864)
- Unicorn-35926.exe (PID: 1184)
- Unicorn-48733.exe (PID: 3908)
- Unicorn-36502.exe (PID: 7080)
- Unicorn-41140.exe (PID: 5144)
- Unicorn-5557.exe (PID: 7012)
- Unicorn-38230.exe (PID: 1224)
- Unicorn-23739.exe (PID: 6476)
- Unicorn-13533.exe (PID: 7100)
- Unicorn-54684.exe (PID: 6576)
- Unicorn-63118.exe (PID: 7172)
- Unicorn-63118.exe (PID: 7188)
- Unicorn-38614.exe (PID: 7196)
- Unicorn-63118.exe (PID: 7180)
- Unicorn-10004.exe (PID: 1116)
- Unicorn-43444.exe (PID: 7024)
- Unicorn-13844.exe (PID: 2928)
- Unicorn-5749.exe (PID: 7248)
- Unicorn-5749.exe (PID: 7256)
- Unicorn-5749.exe (PID: 7236)
- Unicorn-31323.exe (PID: 7272)
- Unicorn-31523.exe (PID: 7288)
- Unicorn-5749.exe (PID: 7264)
- Unicorn-47668.exe (PID: 7364)
- Unicorn-17788.exe (PID: 7296)
- Unicorn-37389.exe (PID: 7312)
- Unicorn-4027.exe (PID: 7340)
- Unicorn-58629.exe (PID: 7348)
- Unicorn-53029.exe (PID: 7396)
- Unicorn-3933.exe (PID: 7492)
- Unicorn-10876.exe (PID: 7508)
- Unicorn-17788.exe (PID: 7304)
- Unicorn-58629.exe (PID: 7356)
- Unicorn-51717.exe (PID: 7532)
- Unicorn-14405.exe (PID: 7588)
- Unicorn-59693.exe (PID: 7568)
- Unicorn-48156.exe (PID: 7616)
- Unicorn-13253.exe (PID: 7636)
- Unicorn-6045.exe (PID: 7540)
- Unicorn-13829.exe (PID: 7656)
- Unicorn-48540.exe (PID: 7676)
- Unicorn-36916.exe (PID: 7700)
- Unicorn-64877.exe (PID: 7736)
- Unicorn-24302.exe (PID: 7728)
- Unicorn-62750.exe (PID: 7760)
- Unicorn-60098.exe (PID: 7780)
- Unicorn-4229.exe (PID: 7800)
- Unicorn-62475.exe (PID: 7820)
- Unicorn-39516.exe (PID: 7844)
- Unicorn-21142.exe (PID: 7856)
- Unicorn-29310.exe (PID: 7872)
- Unicorn-20684.exe (PID: 7948)
- Unicorn-4613.exe (PID: 7908)
- Unicorn-3196.exe (PID: 7996)
- Unicorn-3196.exe (PID: 8012)
- Unicorn-16931.exe (PID: 8004)
- Unicorn-22870.exe (PID: 8052)
- Unicorn-30659.exe (PID: 8132)
- Unicorn-31422.exe (PID: 8144)
- Unicorn-39590.exe (PID: 8156)
- Unicorn-2236.exe (PID: 8188)
- Unicorn-10404.exe (PID: 1636)
- Unicorn-6149.exe (PID: 4316)
- Unicorn-22678.exe (PID: 5504)
- Unicorn-63518.exe (PID: 8208)
- Unicorn-46990.exe (PID: 8236)
- Unicorn-32766.exe (PID: 8272)
- Unicorn-49102.exe (PID: 8280)
- Unicorn-49102.exe (PID: 8256)
- Unicorn-49102.exe (PID: 8260)
- Unicorn-48910.exe (PID: 8320)
- Unicorn-45573.exe (PID: 8300)
- Unicorn-16238.exe (PID: 8292)
- Unicorn-32766.exe (PID: 8356)
- Unicorn-16238.exe (PID: 8308)
- Unicorn-48910.exe (PID: 8316)
- Unicorn-62786.exe (PID: 8368)
- Unicorn-32574.exe (PID: 8432)
- Unicorn-62293.exe (PID: 8404)
- Unicorn-58540.exe (PID: 8476)
- Unicorn-63716.exe (PID: 8520)
- Unicorn-979.exe (PID: 8512)
- Unicorn-39012.exe (PID: 8544)
- Unicorn-58348.exe (PID: 8536)
- Unicorn-58540.exe (PID: 8468)
- Unicorn-32574.exe (PID: 8332)
- Unicorn-37788.exe (PID: 8412)
- Unicorn-52781.exe (PID: 8500)
- Unicorn-31958.exe (PID: 8616)
- Unicorn-64670.exe (PID: 8484)
- Unicorn-52781.exe (PID: 8584)
- Unicorn-6844.exe (PID: 8564)
- Unicorn-54050.exe (PID: 8788)
- Unicorn-41243.exe (PID: 8772)
- Unicorn-53357.exe (PID: 8596)
- Unicorn-15588.exe (PID: 8604)
- Unicorn-402.exe (PID: 8752)
- Unicorn-65363.exe (PID: 8732)
- Unicorn-31923.exe (PID: 8808)
- Unicorn-33960.exe (PID: 8816)
- Unicorn-19928.exe (PID: 8900)
- Unicorn-31731.exe (PID: 8856)
- Unicorn-9840.exe (PID: 8876)
- Unicorn-55778.exe (PID: 8936)
- Unicorn-10106.exe (PID: 8944)
- Unicorn-57698.exe (PID: 9044)
- Unicorn-41819.exe (PID: 9088)
- Unicorn-11258.exe (PID: 9124)
- Unicorn-56930.exe (PID: 9116)
- Unicorn-11258.exe (PID: 9132)
- Unicorn-3209.exe (PID: 9164)
- Unicorn-57314.exe (PID: 9172)
- Unicorn-9914.exe (PID: 8988)
- Unicorn-27795.exe (PID: 6488)
- Unicorn-60459.exe (PID: 9200)
- Unicorn-18088.exe (PID: 8740)
- Unicorn-47802.exe (PID: 8184)
- Unicorn-47802.exe (PID: 7968)
- Unicorn-7065.exe (PID: 9300)
- Unicorn-61139.exe (PID: 9352)
- Unicorn-43843.exe (PID: 9384)
- Unicorn-6572.exe (PID: 9392)
- Unicorn-9945.exe (PID: 9424)
- Unicorn-52544.exe (PID: 9552)
- Unicorn-13235.exe (PID: 9540)
- Unicorn-43691.exe (PID: 9580)
- Unicorn-61523.exe (PID: 9456)
- Unicorn-61523.exe (PID: 9448)
- Unicorn-17258.exe (PID: 9636)
- Unicorn-14180.exe (PID: 9684)
- Unicorn-63189.exe (PID: 9732)
- Unicorn-47429.exe (PID: 9748)
- Unicorn-8020.exe (PID: 9644)
- Unicorn-55057.exe (PID: 9820)
- Unicorn-35456.exe (PID: 9828)
- Unicorn-56867.exe (PID: 9916)
- Unicorn-27288.exe (PID: 9844)
- Unicorn-21965.exe (PID: 9932)
- Unicorn-59276.exe (PID: 9956)
- Unicorn-43707.exe (PID: 9784)
- Unicorn-63573.exe (PID: 9776)
- Unicorn-50920.exe (PID: 10080)
- Unicorn-47813.exe (PID: 10072)
- Unicorn-14954.exe (PID: 9980)
- Unicorn-64149.exe (PID: 10104)
- Unicorn-23693.exe (PID: 10180)
- Unicorn-24651.exe (PID: 10228)
- Unicorn-56173.exe (PID: 10236)
- Unicorn-17253.exe (PID: 3832)
- Unicorn-5555.exe (PID: 2660)
- Unicorn-25421.exe (PID: 1684)
- Unicorn-9203.exe (PID: 2024)
- Unicorn-18714.exe (PID: 1964)
- Unicorn-148.exe (PID: 6836)
- Unicorn-10162.exe (PID: 1432)
- Unicorn-17423.exe (PID: 2204)
- Unicorn-29998.exe (PID: 4160)
- Unicorn-27703.exe (PID: 7044)
- Unicorn-44917.exe (PID: 4284)
- Unicorn-29156.exe (PID: 5708)
- Unicorn-49733.exe (PID: 2820)
- Unicorn-56998.exe (PID: 10248)
- Unicorn-7989.exe (PID: 4672)
- Unicorn-7989.exe (PID: 2232)
- Unicorn-20796.exe (PID: 10268)
- Unicorn-48830.exe (PID: 10288)
- Unicorn-35103.exe (PID: 10368)
- Unicorn-35103.exe (PID: 10380)
- Unicorn-25019.exe (PID: 10452)
- Unicorn-47678.exe (PID: 10428)
- Unicorn-39510.exe (PID: 10420)
- Unicorn-12436.exe (PID: 10296)
- Unicorn-32302.exe (PID: 10312)
- Unicorn-10599.exe (PID: 10344)
- Unicorn-51440.exe (PID: 10356)
- Unicorn-41055.exe (PID: 10472)
- Unicorn-11284.exe (PID: 10460)
- Unicorn-47185.exe (PID: 10484)
- Unicorn-57391.exe (PID: 10516)
- Unicorn-63329.exe (PID: 10560)
- Unicorn-46054.exe (PID: 10584)
- Unicorn-29718.exe (PID: 10596)
- Unicorn-37694.exe (PID: 10656)
- Unicorn-26188.exe (PID: 10576)
- Unicorn-39924.exe (PID: 10568)
- Unicorn-21166.exe (PID: 10688)
- Unicorn-28801.exe (PID: 10704)
- Unicorn-46173.exe (PID: 10736)
- Unicorn-52775.exe (PID: 10752)
- Unicorn-37201.exe (PID: 10728)
- Unicorn-20900.exe (PID: 10672)
- Unicorn-15611.exe (PID: 10784)
- Unicorn-20900.exe (PID: 10680)
- Unicorn-62198.exe (PID: 10720)
- Unicorn-1300.exe (PID: 10664)
- Unicorn-39239.exe (PID: 10796)
- Unicorn-61705.exe (PID: 10760)
- Unicorn-20972.exe (PID: 10812)
- Unicorn-55575.exe (PID: 10768)
- Unicorn-53345.exe (PID: 10864)
- Unicorn-36936.exe (PID: 10776)
- Unicorn-45286.exe (PID: 10880)
- Unicorn-37118.exe (PID: 10916)
- Unicorn-36438.exe (PID: 10804)
- Unicorn-65516.exe (PID: 10824)
- Unicorn-29910.exe (PID: 10832)
- Unicorn-53454.exe (PID: 10896)
- Unicorn-62198.exe (PID: 10712)
- Unicorn-53454.exe (PID: 10984)
- Unicorn-20590.exe (PID: 10932)
- Unicorn-53345.exe (PID: 10872)
- Unicorn-45670.exe (PID: 11044)
- Unicorn-54305.exe (PID: 5344)
- Unicorn-17911.exe (PID: 7076)
- Unicorn-29068.exe (PID: 11272)
- Unicorn-32790.exe (PID: 6956)
- Unicorn-61430.exe (PID: 11016)
- Unicorn-42031.exe (PID: 11224)
- Unicorn-42607.exe (PID: 5164)
- Unicorn-53838.exe (PID: 11056)
- Unicorn-21550.exe (PID: 11096)
- Unicorn-56151.exe (PID: 6848)
- Unicorn-20407.exe (PID: 11304)
- Unicorn-32909.exe (PID: 11312)
- Unicorn-48358.exe (PID: 11348)
- Unicorn-22593.exe (PID: 11380)
- Unicorn-42612.exe (PID: 11396)
- Unicorn-32333.exe (PID: 11280)
- Unicorn-63360.exe (PID: 11364)
- Unicorn-33374.exe (PID: 11440)
- Unicorn-33374.exe (PID: 11432)
- Unicorn-3111.exe (PID: 11472)
- Unicorn-27615.exe (PID: 11500)
- Unicorn-50470.exe (PID: 11528)
- Unicorn-32302.exe (PID: 11540)
- Unicorn-26275.exe (PID: 11412)
- Unicorn-42420.exe (PID: 11448)
- Unicorn-58145.exe (PID: 11576)
- Unicorn-26350.exe (PID: 11568)
- Unicorn-37511.exe (PID: 11636)
- Unicorn-45104.exe (PID: 11600)
- Unicorn-37511.exe (PID: 11628)
- Unicorn-57377.exe (PID: 11644)
- Unicorn-57377.exe (PID: 11652)
- Unicorn-51247.exe (PID: 11620)
- Unicorn-14643.exe (PID: 11728)
- Unicorn-35119.exe (PID: 11760)
- Unicorn-54720.exe (PID: 11752)
- Unicorn-34163.exe (PID: 11796)
- Unicorn-33278.exe (PID: 11872)
- Unicorn-41446.exe (PID: 11856)
- Unicorn-13567.exe (PID: 11828)
- Unicorn-60292.exe (PID: 11708)
- Unicorn-34163.exe (PID: 11788)
- Unicorn-25302.exe (PID: 11912)
- Unicorn-34739.exe (PID: 11980)
- Unicorn-32318.exe (PID: 11952)
- Unicorn-58057.exe (PID: 12028)
- Unicorn-59463.exe (PID: 12200)
- Unicorn-42598.exe (PID: 12172)
- Unicorn-40953.exe (PID: 12164)
- Unicorn-21960.exe (PID: 12216)
- Unicorn-38680.exe (PID: 12244)
- Unicorn-13023.exe (PID: 12268)
- Unicorn-4855.exe (PID: 5888)
- Unicorn-64262.exe (PID: 11268)
- Unicorn-50527.exe (PID: 5904)
- Unicorn-29581.exe (PID: 6524)
- Unicorn-4855.exe (PID: 1292)
- Unicorn-13215.exe (PID: 5180)
- Unicorn-44264.exe (PID: 6976)
- Unicorn-62062.exe (PID: 10548)
- Unicorn-2390.exe (PID: 2700)
- Unicorn-16614.exe (PID: 12332)
- Unicorn-37056.exe (PID: 5732)
- Unicorn-24782.exe (PID: 12348)
- Unicorn-49287.exe (PID: 12376)
- Unicorn-8830.exe (PID: 12424)
- Unicorn-23822.exe (PID: 12240)
- Unicorn-49095.exe (PID: 7116)
- Unicorn-43039.exe (PID: 11184)
- Unicorn-37829.exe (PID: 12508)
- Unicorn-16125.exe (PID: 12528)
- Unicorn-365.exe (PID: 12564)
- Unicorn-22375.exe (PID: 12648)
- Unicorn-31885.exe (PID: 12708)
- Unicorn-51015.exe (PID: 12660)
- Unicorn-20262.exe (PID: 12792)
- Unicorn-61559.exe (PID: 12736)
- Unicorn-36790.exe (PID: 12764)
- Unicorn-39863.exe (PID: 12784)
- Unicorn-61679.exe (PID: 12820)
- Unicorn-39320.exe (PID: 12844)
- Unicorn-27854.exe (PID: 12852)
- Unicorn-18918.exe (PID: 12476)
- Unicorn-32653.exe (PID: 12468)
- Unicorn-23600.exe (PID: 12960)
- Unicorn-6309.exe (PID: 13000)
- Unicorn-7293.exe (PID: 13124)
- Unicorn-34206.exe (PID: 13048)
- Unicorn-61975.exe (PID: 13024)
- Unicorn-46215.exe (PID: 13080)
- Unicorn-59287.exe (PID: 13096)
- Unicorn-30837.exe (PID: 13176)
- Unicorn-25462.exe (PID: 13156)
- Unicorn-14309.exe (PID: 13196)
- Unicorn-55726.exe (PID: 13228)
- Unicorn-52359.exe (PID: 12884)
- Unicorn-16893.exe (PID: 12912)
- Unicorn-3158.exe (PID: 12924)
- Unicorn-958.exe (PID: 13304)
- Unicorn-14693.exe (PID: 8064)
- Unicorn-44103.exe (PID: 7600)
- Unicorn-11238.exe (PID: 13344)
- Unicorn-41310.exe (PID: 13424)
- Unicorn-277.exe (PID: 13416)
- Unicorn-32949.exe (PID: 13464)
- Unicorn-24781.exe (PID: 13456)
- Unicorn-2878.exe (PID: 13492)
- Unicorn-44487.exe (PID: 13544)
- Unicorn-55919.exe (PID: 13572)
- Unicorn-9021.exe (PID: 13584)
- Unicorn-17294.exe (PID: 13280)
- Unicorn-47558.exe (PID: 13252)
- Unicorn-17294.exe (PID: 13288)
- Unicorn-41502.exe (PID: 13324)
- Unicorn-13734.exe (PID: 13680)
- Unicorn-2302.exe (PID: 13704)
- Unicorn-16037.exe (PID: 13692)
- Unicorn-2302.exe (PID: 13700)
- Unicorn-27382.exe (PID: 13776)
- Unicorn-10854.exe (PID: 13804)
- Unicorn-21789.exe (PID: 13796)
- Unicorn-21789.exe (PID: 13812)
- Unicorn-33461.exe (PID: 13856)
- Unicorn-43526.exe (PID: 13868)
- Unicorn-63392.exe (PID: 13876)
- Unicorn-44295.exe (PID: 13612)
- Unicorn-6526.exe (PID: 13620)
- Unicorn-39199.exe (PID: 13656)
- Unicorn-59671.exe (PID: 13672)
- Unicorn-38125.exe (PID: 13928)
- Unicorn-27190.exe (PID: 13904)
- Unicorn-30238.exe (PID: 13992)
- Unicorn-5791.exe (PID: 13956)
- Unicorn-59863.exe (PID: 13964)
- Unicorn-45639.exe (PID: 13976)
- Unicorn-38431.exe (PID: 14008)
- Unicorn-20942.exe (PID: 14068)
- Unicorn-20942.exe (PID: 14072)
- Unicorn-15541.exe (PID: 14116)
- Unicorn-46791.exe (PID: 13912)
- Unicorn-21590.exe (PID: 13888)
- Unicorn-40926.exe (PID: 13896)
- Unicorn-62405.exe (PID: 14152)
- Unicorn-2468.exe (PID: 14180)
- Unicorn-8197.exe (PID: 14172)
- Unicorn-28063.exe (PID: 14248)
- Unicorn-16365.exe (PID: 14240)
- Unicorn-17242.exe (PID: 14292)
- Unicorn-8005.exe (PID: 14284)
- Unicorn-13926.exe (PID: 14084)
- Unicorn-45447.exe (PID: 14136)
- Unicorn-4606.exe (PID: 14108)
- Unicorn-56630.exe (PID: 14160)
- Unicorn-2468.exe (PID: 14220)
- Unicorn-10766.exe (PID: 7812)
- Unicorn-6940.exe (PID: 14360)
- Unicorn-31444.exe (PID: 14388)
- Unicorn-38653.exe (PID: 14416)
- Unicorn-28182.exe (PID: 14436)
- Unicorn-8389.exe (PID: 14464)
- Unicorn-60165.exe (PID: 14516)
- Unicorn-11726.exe (PID: 14488)
- Unicorn-54797.exe (PID: 14496)
- Unicorn-36044.exe (PID: 14560)
- Unicorn-63541.exe (PID: 14552)
- Unicorn-18586.exe (PID: 14396)
- Unicorn-50943.exe (PID: 14624)
- Unicorn-15317.exe (PID: 14640)
- Unicorn-51062.exe (PID: 14680)
- Unicorn-33766.exe (PID: 14720)
- Unicorn-27700.exe (PID: 14688)
- Unicorn-9340.exe (PID: 14588)
- Unicorn-63942.exe (PID: 14596)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
580
Monitored processes
449
Malicious processes
69
Suspicious processes
71
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1116 | C:\Users\admin\Desktop\Unicorn-10004.exe | C:\Users\admin\Desktop\Unicorn-10004.exe | Unicorn-45043.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1184 | C:\Users\admin\Desktop\Unicorn-35926.exe | C:\Users\admin\Desktop\Unicorn-35926.exe | Unicorn-6190.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1224 | C:\Users\admin\Desktop\Unicorn-38230.exe | C:\Users\admin\Desktop\Unicorn-38230.exe | Unicorn-6766.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1292 | C:\Users\admin\Desktop\Unicorn-4855.exe | C:\Users\admin\Desktop\Unicorn-4855.exe | — | Unicorn-47802.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1432 | C:\Users\admin\Desktop\Unicorn-10162.exe | C:\Users\admin\Desktop\Unicorn-10162.exe | — | Unicorn-58005.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1636 | C:\Users\admin\Desktop\Unicorn-10404.exe | C:\Users\admin\Desktop\Unicorn-10404.exe | Unicorn-58005.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1684 | C:\Users\admin\Desktop\Unicorn-25421.exe | C:\Users\admin\Desktop\Unicorn-25421.exe | — | Unicorn-6149.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1964 | C:\Users\admin\Desktop\Unicorn-18714.exe | C:\Users\admin\Desktop\Unicorn-18714.exe | — | Unicorn-64135.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 2024 | C:\Users\admin\Desktop\Unicorn-9203.exe | C:\Users\admin\Desktop\Unicorn-9203.exe | — | Unicorn-45043.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 2204 | C:\Users\admin\Desktop\Unicorn-17423.exe | C:\Users\admin\Desktop\Unicorn-17423.exe | — | Unicorn-63118.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
26 113
Read events
26 113
Write events
0
Delete events
0
Modification events
Executable files
401
Suspicious files
0
Text files
0
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 6700 | Unicorn-57788.exe | C:\Users\admin\Desktop\Unicorn-8390.exe | executable | |
MD5:4DE0EAD5E9BAEDBE9BE89BE3916D0140 | SHA256:74C273EBAD7F078C46FA44FB3D9B001345DC3DEA9B729B4EB86DD86A946B0533 | |||
| 2628 | Unicorn-4555.exe | C:\Users\admin\Desktop\Unicorn-14830.exe | executable | |
MD5:E8ED7083138569F3B1B53A9CC7C301F8 | SHA256:A60F3A34484BFBFDC93DCAA761FE1D29624B8271FE6A06EC3B10AC0C2DC0B984 | |||
| 6580 | Kawaii-Unicorn.exe | C:\Users\admin\Desktop\Unicorn-54939.exe | executable | |
MD5:A815BA578EF34CB63F2E38EBB88B061E | SHA256:AD1D58706BC5E2C83D54F8956525FCE49D89AFA03A12516208ED096A8AE7654A | |||
| 6224 | Unicorn-725.exe | C:\Users\admin\Desktop\Unicorn-56740.exe | executable | |
MD5:10AA8D9F9974BFE675FAFC600EB7421F | SHA256:632ADFFEE7B4B4187EFF02642AA2747AC03B3A82FE31DC46001AF1C6AB7A22BB | |||
| 6788 | Unicorn-8390.exe | C:\Users\admin\Desktop\Unicorn-45043.exe | executable | |
MD5:BC803A05CBFC3110DE08920CF45A080A | SHA256:9F1FEC7FEA0D25C66E3DA947720A46481D18DB4F9DE4225C7FC3394E4A5BA02D | |||
| 6580 | Kawaii-Unicorn.exe | C:\Users\admin\Desktop\Unicorn-14460.exe | executable | |
MD5:B531CA04BDE13F84AD06DDE9BAA326A3 | SHA256:34461A5E22ED642AAF8C371C2DD36CEA3BD9EE3A0F450E668D9594D587A5841C | |||
| 6580 | Kawaii-Unicorn.exe | C:\Users\admin\Desktop\Unicorn-22542.exe | executable | |
MD5:EF35EC2C725D07662A7D1F499E162B55 | SHA256:D10B3094F086369E6D3FD310737A0950B0B3B7B96C52EDEF3C7F43CDF27CCEC1 | |||
| 6360 | Unicorn-14830.exe | C:\Users\admin\Desktop\Unicorn-6190.exe | executable | |
MD5:4602F3DBBCF5EF5B0B196528F04F9EBD | SHA256:76FA91A7A2C3AD5BED55555B5D0EB6D33ABEB08C6529D44CA633B604CBCBC0B1 | |||
| 6700 | Unicorn-57788.exe | C:\Users\admin\Desktop\Unicorn-16676.exe | executable | |
MD5:04819A1869C0368CB78618393B037E4A | SHA256:6C2A4EFDD6FD09FBFE83F23CB0E49BA306748B738F1A77FFCC48EAEDAF5682B0 | |||
| 6796 | Unicorn-54939.exe | C:\Users\admin\Desktop\Unicorn-4555.exe | executable | |
MD5:56B810770B3E06CD599050074D6D6D66 | SHA256:492B6F3E6C70964138A3F46F07CEE659AA419543F6CB70B8309AB80C27DF546D | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
3
TCP/UDP connections
29
DNS requests
15
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
5468 | svchost.exe | GET | 200 | 192.229.221.95:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
6992 | backgroundTaskHost.exe | GET | 200 | 192.229.221.95:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D | unknown | — | — | whitelisted |
7964 | SIHClient.exe | GET | 200 | 95.101.149.131:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
5300 | svchost.exe | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
360 | RUXIMICS.exe | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
2120 | MoUsoCoreWorker.exe | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
5300 | svchost.exe | 4.231.128.59:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
3260 | svchost.exe | 40.113.110.67:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
5468 | svchost.exe | 40.126.31.69:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | unknown |
5468 | svchost.exe | 192.229.221.95:80 | ocsp.digicert.com | EDGECAST | US | whitelisted |
6992 | backgroundTaskHost.exe | 20.223.36.55:443 | arc.msn.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | unknown |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
arc.msn.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |
nexusrules.officeapps.live.com |
| whitelisted |