| File name: | Kawaii-Unicorn.exe.bin |
| Full analysis: | https://app.any.run/tasks/d842bb52-367a-499c-9698-d8dc1ab01e5d |
| Verdict: | Malicious activity |
| Analysis date: | April 11, 2025, 18:36:21 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections |
| MD5: | 59B6A82C8F134F0AA8478B321AF16DC9 |
| SHA1: | A27529406C4FA9EE8F09A70724B13262ABC5815B |
| SHA256: | 45C31557C2FD01D44CDEC92DCC2DD85C9C114648BD069CF24E7AE9F1786D2C03 |
| SSDEEP: | 6144:47w+22IJvDSHAGlstbeQJnfx5tBqlpJGBC/WyeOdTk/8SwjwuyAvEhQpLTgZsyBa:4s9d4HAGCt6gBMLaCOyeOdyx4DxmDsR |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executable content was dropped or overwritten
- Unicorn-37175.exe (PID: 4812)
- Kawaii-Unicorn.exe.bin.exe (PID: 6512)
- Unicorn-28671.exe (PID: 1012)
- Unicorn-5894.exe (PID: 2092)
- Unicorn-17161.exe (PID: 6264)
- Unicorn-36189.exe (PID: 3620)
- Unicorn-48510.exe (PID: 2192)
- Unicorn-41665.exe (PID: 4696)
- Unicorn-38204.exe (PID: 6800)
- Unicorn-13599.exe (PID: 6468)
- Unicorn-1255.exe (PID: 6828)
- Unicorn-55095.exe (PID: 5600)
- Unicorn-50631.exe (PID: 1168)
- Unicorn-12713.exe (PID: 4892)
- Unicorn-35826.exe (PID: 1072)
- Unicorn-43803.exe (PID: 1676)
- Unicorn-20690.exe (PID: 1164)
- Unicorn-39740.exe (PID: 1184)
- Unicorn-2526.exe (PID: 5360)
- Unicorn-55884.exe (PID: 1132)
- Unicorn-28479.exe (PID: 4776)
- Unicorn-55884.exe (PID: 6540)
- Unicorn-31279.exe (PID: 1116)
- Unicorn-990.exe (PID: 6660)
- Unicorn-48271.exe (PID: 3888)
- Unicorn-14249.exe (PID: 7048)
- Unicorn-16999.exe (PID: 3024)
- Unicorn-12111.exe (PID: 6620)
- Unicorn-55090.exe (PID: 2084)
- Unicorn-55645.exe (PID: 7188)
- Unicorn-7927.exe (PID: 7208)
- Unicorn-5396.exe (PID: 7232)
- Unicorn-31524.exe (PID: 7248)
- Unicorn-19595.exe (PID: 7272)
- Unicorn-20563.exe (PID: 7292)
- Unicorn-41660.exe (PID: 7320)
- Unicorn-7404.exe (PID: 7340)
- Unicorn-42844.exe (PID: 7372)
- Unicorn-35438.exe (PID: 7356)
- Unicorn-53720.exe (PID: 7396)
- Unicorn-53720.exe (PID: 7404)
- Unicorn-51800.exe (PID: 720)
- Unicorn-29527.exe (PID: 7500)
- Unicorn-39330.exe (PID: 7452)
- Unicorn-435.exe (PID: 7428)
- Unicorn-56434.exe (PID: 7476)
- Unicorn-30968.exe (PID: 7484)
- Unicorn-48074.exe (PID: 7588)
- Unicorn-23661.exe (PID: 7508)
- Unicorn-63019.exe (PID: 7608)
- Unicorn-43804.exe (PID: 7644)
- Unicorn-15786.exe (PID: 7664)
- Unicorn-819.exe (PID: 7628)
- Unicorn-34814.exe (PID: 7680)
- Unicorn-52542.exe (PID: 7740)
- Unicorn-3076.exe (PID: 7788)
- Unicorn-58664.exe (PID: 7768)
- Unicorn-51151.exe (PID: 7720)
- Unicorn-41420.exe (PID: 7820)
- Unicorn-14223.exe (PID: 7804)
- Unicorn-802.exe (PID: 7860)
- Unicorn-12085.exe (PID: 7840)
- Unicorn-40674.exe (PID: 7876)
- Unicorn-37144.exe (PID: 7896)
- Unicorn-36133.exe (PID: 7936)
- Unicorn-41406.exe (PID: 7988)
- Unicorn-35738.exe (PID: 8012)
- Unicorn-15978.exe (PID: 7912)
- Unicorn-13009.exe (PID: 8156)
- Unicorn-32151.exe (PID: 8180)
- Unicorn-31484.exe (PID: 8132)
- Unicorn-38836.exe (PID: 904)
- Unicorn-22930.exe (PID: 2384)
- Unicorn-32484.exe (PID: 7460)
- Unicorn-52350.exe (PID: 7468)
- Unicorn-56626.exe (PID: 7752)
- Unicorn-17478.exe (PID: 6424)
- Unicorn-39220.exe (PID: 5780)
- Unicorn-30306.exe (PID: 3956)
- Unicorn-12386.exe (PID: 8216)
- Unicorn-48588.exe (PID: 8232)
- Unicorn-50788.exe (PID: 8252)
- Unicorn-64431.exe (PID: 8304)
- Unicorn-42366.exe (PID: 8188)
- Unicorn-1909.exe (PID: 8340)
- Unicorn-5993.exe (PID: 8372)
- Unicorn-42942.exe (PID: 8272)
- Unicorn-19464.exe (PID: 7444)
- Unicorn-64431.exe (PID: 8296)
- Unicorn-1909.exe (PID: 8348)
- Unicorn-64431.exe (PID: 8288)
- Unicorn-49640.exe (PID: 8456)
- Unicorn-61224.exe (PID: 8408)
- Unicorn-20960.exe (PID: 8476)
- Unicorn-62547.exe (PID: 8440)
- Unicorn-61224.exe (PID: 8400)
- Unicorn-37064.exe (PID: 8536)
- Unicorn-62547.exe (PID: 8448)
- Unicorn-13346.exe (PID: 8500)
- Unicorn-26990.exe (PID: 8572)
- Unicorn-49448.exe (PID: 8592)
- Unicorn-55313.exe (PID: 8600)
- Unicorn-51394.exe (PID: 8656)
- Unicorn-60217.exe (PID: 8628)
- Unicorn-6953.exe (PID: 8720)
- Unicorn-36096.exe (PID: 8768)
- Unicorn-43710.exe (PID: 8748)
- Unicorn-44737.exe (PID: 7492)
- Unicorn-36526.exe (PID: 8792)
- Unicorn-61992.exe (PID: 8800)
- Unicorn-28038.exe (PID: 7688)
- Unicorn-65314.exe (PID: 8432)
- Unicorn-62568.exe (PID: 8868)
- Unicorn-62568.exe (PID: 8860)
- Unicorn-439.exe (PID: 8524)
- Unicorn-46.exe (PID: 8900)
- Unicorn-3061.exe (PID: 8932)
- Unicorn-3061.exe (PID: 8928)
- Unicorn-58292.exe (PID: 8964)
- Unicorn-25519.exe (PID: 8972)
- Unicorn-24804.exe (PID: 8992)
- Unicorn-31650.exe (PID: 8980)
- Unicorn-12360.exe (PID: 9060)
- Unicorn-26366.exe (PID: 8836)
- Unicorn-24058.exe (PID: 9044)
- Unicorn-56730.exe (PID: 9120)
- Unicorn-38348.exe (PID: 9096)
- Unicorn-24612.exe (PID: 9088)
- Unicorn-33907.exe (PID: 9140)
- Unicorn-10851.exe (PID: 9156)
- Unicorn-37440.exe (PID: 9176)
- Unicorn-61390.exe (PID: 9196)
- Unicorn-58275.exe (PID: 5740)
- Unicorn-16392.exe (PID: 9272)
- Unicorn-57114.exe (PID: 4228)
- Unicorn-12552.exe (PID: 9224)
- Unicorn-32418.exe (PID: 9232)
- Unicorn-41908.exe (PID: 9256)
- Unicorn-5967.exe (PID: 4380)
- Unicorn-27326.exe (PID: 9340)
- Unicorn-50514.exe (PID: 9360)
- Unicorn-1757.exe (PID: 9488)
- Unicorn-24032.exe (PID: 9412)
- Unicorn-28478.exe (PID: 9452)
- Unicorn-20140.exe (PID: 9516)
- Unicorn-61420.exe (PID: 9644)
- Unicorn-28910.exe (PID: 9288)
- Unicorn-57590.exe (PID: 9304)
- Unicorn-63720.exe (PID: 9312)
- Unicorn-56045.exe (PID: 9588)
- Unicorn-60835.exe (PID: 9732)
- Unicorn-31348.exe (PID: 9636)
- Unicorn-4435.exe (PID: 9756)
- Unicorn-35222.exe (PID: 9672)
- Unicorn-40991.exe (PID: 9772)
- Unicorn-28717.exe (PID: 9716)
- Unicorn-50949.exe (PID: 9612)
- Unicorn-60818.exe (PID: 9944)
- Unicorn-32631.exe (PID: 9856)
- Unicorn-6050.exe (PID: 10028)
- Unicorn-21317.exe (PID: 10068)
- Unicorn-21317.exe (PID: 10064)
- Unicorn-27761.exe (PID: 10188)
- Unicorn-32308.exe (PID: 9804)
- Unicorn-26500.exe (PID: 9840)
- Unicorn-1411.exe (PID: 9972)
- Unicorn-4981.exe (PID: 10036)
- Unicorn-24966.exe (PID: 10284)
- Unicorn-43814.exe (PID: 9936)
- Unicorn-45822.exe (PID: 10172)
- Unicorn-34559.exe (PID: 10220)
- Unicorn-25843.exe (PID: 10376)
- Unicorn-21317.exe (PID: 10076)
- Unicorn-35707.exe (PID: 10004)
- Unicorn-60626.exe (PID: 10140)
- Unicorn-59719.exe (PID: 10212)
- Unicorn-49653.exe (PID: 10204)
- Unicorn-56926.exe (PID: 10352)
- Unicorn-20824.exe (PID: 7144)
- Unicorn-23948.exe (PID: 9928)
- Unicorn-59557.exe (PID: 10164)
- Unicorn-16300.exe (PID: 10292)
Starts itself from another location
- Unicorn-37175.exe (PID: 4812)
- Unicorn-5894.exe (PID: 2092)
- Kawaii-Unicorn.exe.bin.exe (PID: 6512)
- Unicorn-28671.exe (PID: 1012)
- Unicorn-17161.exe (PID: 6264)
- Unicorn-36189.exe (PID: 3620)
- Unicorn-41665.exe (PID: 4696)
- Unicorn-48510.exe (PID: 2192)
- Unicorn-13599.exe (PID: 6468)
- Unicorn-38204.exe (PID: 6800)
- Unicorn-55095.exe (PID: 5600)
- Unicorn-1255.exe (PID: 6828)
- Unicorn-990.exe (PID: 6660)
- Unicorn-50631.exe (PID: 1168)
- Unicorn-12713.exe (PID: 4892)
- Unicorn-35826.exe (PID: 1072)
- Unicorn-43803.exe (PID: 1676)
- Unicorn-20690.exe (PID: 1164)
- Unicorn-39740.exe (PID: 1184)
- Unicorn-2526.exe (PID: 5360)
- Unicorn-51800.exe (PID: 720)
- Unicorn-28479.exe (PID: 4776)
- Unicorn-55884.exe (PID: 6540)
- Unicorn-55884.exe (PID: 1132)
- Unicorn-48271.exe (PID: 3888)
- Unicorn-14249.exe (PID: 7048)
- Unicorn-31279.exe (PID: 1116)
- Unicorn-16999.exe (PID: 3024)
- Unicorn-12111.exe (PID: 6620)
- Unicorn-55090.exe (PID: 2084)
- Unicorn-55645.exe (PID: 7188)
- Unicorn-7927.exe (PID: 7208)
- Unicorn-5396.exe (PID: 7232)
- Unicorn-31524.exe (PID: 7248)
- Unicorn-19595.exe (PID: 7272)
- Unicorn-20563.exe (PID: 7292)
- Unicorn-41660.exe (PID: 7320)
- Unicorn-7404.exe (PID: 7340)
- Unicorn-35438.exe (PID: 7356)
- Unicorn-42844.exe (PID: 7372)
- Unicorn-53720.exe (PID: 7396)
- Unicorn-53720.exe (PID: 7404)
- Unicorn-29527.exe (PID: 7500)
- Unicorn-435.exe (PID: 7428)
- Unicorn-56434.exe (PID: 7476)
- Unicorn-39330.exe (PID: 7452)
- Unicorn-52350.exe (PID: 7468)
- Unicorn-32484.exe (PID: 7460)
- Unicorn-19464.exe (PID: 7444)
- Unicorn-23661.exe (PID: 7508)
- Unicorn-44737.exe (PID: 7492)
- Unicorn-48074.exe (PID: 7588)
- Unicorn-63019.exe (PID: 7608)
- Unicorn-43804.exe (PID: 7644)
- Unicorn-819.exe (PID: 7628)
- Unicorn-52542.exe (PID: 7740)
- Unicorn-34814.exe (PID: 7680)
- Unicorn-28038.exe (PID: 7688)
- Unicorn-15786.exe (PID: 7664)
- Unicorn-56626.exe (PID: 7752)
- Unicorn-51151.exe (PID: 7720)
- Unicorn-3076.exe (PID: 7788)
- Unicorn-58664.exe (PID: 7768)
- Unicorn-14223.exe (PID: 7804)
- Unicorn-41420.exe (PID: 7820)
- Unicorn-12085.exe (PID: 7840)
- Unicorn-40674.exe (PID: 7876)
- Unicorn-802.exe (PID: 7860)
- Unicorn-37144.exe (PID: 7896)
- Unicorn-15978.exe (PID: 7912)
- Unicorn-36133.exe (PID: 7936)
- Unicorn-41406.exe (PID: 7988)
- Unicorn-35738.exe (PID: 8012)
- Unicorn-13009.exe (PID: 8156)
- Unicorn-42366.exe (PID: 8188)
- Unicorn-32151.exe (PID: 8180)
- Unicorn-31484.exe (PID: 8132)
- Unicorn-22930.exe (PID: 2384)
- Unicorn-30968.exe (PID: 7484)
- Unicorn-17478.exe (PID: 6424)
- Unicorn-39220.exe (PID: 5780)
- Unicorn-30306.exe (PID: 3956)
- Unicorn-12386.exe (PID: 8216)
- Unicorn-48588.exe (PID: 8232)
- Unicorn-50788.exe (PID: 8252)
- Unicorn-64431.exe (PID: 8304)
- Unicorn-1909.exe (PID: 8340)
- Unicorn-5993.exe (PID: 8372)
- Unicorn-42942.exe (PID: 8272)
- Unicorn-1909.exe (PID: 8348)
- Unicorn-64431.exe (PID: 8288)
- Unicorn-64431.exe (PID: 8296)
- Unicorn-38836.exe (PID: 904)
- Unicorn-49640.exe (PID: 8456)
- Unicorn-61224.exe (PID: 8408)
- Unicorn-65314.exe (PID: 8432)
- Unicorn-62547.exe (PID: 8440)
- Unicorn-61224.exe (PID: 8400)
- Unicorn-439.exe (PID: 8524)
- Unicorn-62547.exe (PID: 8448)
- Unicorn-37064.exe (PID: 8536)
- Unicorn-55313.exe (PID: 8600)
- Unicorn-13346.exe (PID: 8500)
- Unicorn-51394.exe (PID: 8656)
- Unicorn-60217.exe (PID: 8628)
- Unicorn-49448.exe (PID: 8592)
- Unicorn-6953.exe (PID: 8720)
- Unicorn-36096.exe (PID: 8768)
- Unicorn-43710.exe (PID: 8748)
- Unicorn-36526.exe (PID: 8792)
- Unicorn-61992.exe (PID: 8800)
- Unicorn-26990.exe (PID: 8572)
- Unicorn-62568.exe (PID: 8860)
- Unicorn-46.exe (PID: 8900)
- Unicorn-62568.exe (PID: 8868)
- Unicorn-3061.exe (PID: 8932)
- Unicorn-3061.exe (PID: 8928)
- Unicorn-58292.exe (PID: 8964)
- Unicorn-25519.exe (PID: 8972)
- Unicorn-24804.exe (PID: 8992)
- Unicorn-31650.exe (PID: 8980)
- Unicorn-12360.exe (PID: 9060)
- Unicorn-24058.exe (PID: 9044)
- Unicorn-26366.exe (PID: 8836)
- Unicorn-56730.exe (PID: 9120)
- Unicorn-38348.exe (PID: 9096)
- Unicorn-24612.exe (PID: 9088)
- Unicorn-33907.exe (PID: 9140)
- Unicorn-10851.exe (PID: 9156)
- Unicorn-37440.exe (PID: 9176)
- Unicorn-61390.exe (PID: 9196)
- Unicorn-58275.exe (PID: 5740)
Executes application which crashes
- Unicorn-35535.exe (PID: 4000)
INFO
The sample compiled with chinese language support
- Kawaii-Unicorn.exe.bin.exe (PID: 6512)
- Unicorn-28671.exe (PID: 1012)
- Unicorn-36189.exe (PID: 3620)
- Unicorn-5894.exe (PID: 2092)
- Unicorn-38204.exe (PID: 6800)
- Unicorn-13599.exe (PID: 6468)
- Unicorn-17161.exe (PID: 6264)
- Unicorn-37175.exe (PID: 4812)
- Unicorn-41665.exe (PID: 4696)
- Unicorn-50631.exe (PID: 1168)
- Unicorn-35826.exe (PID: 1072)
- Unicorn-48510.exe (PID: 2192)
- Unicorn-20690.exe (PID: 1164)
- Unicorn-43803.exe (PID: 1676)
- Unicorn-39740.exe (PID: 1184)
- Unicorn-2526.exe (PID: 5360)
- Unicorn-55884.exe (PID: 1132)
- Unicorn-55884.exe (PID: 6540)
- Unicorn-28479.exe (PID: 4776)
- Unicorn-1255.exe (PID: 6828)
- Unicorn-990.exe (PID: 6660)
- Unicorn-31279.exe (PID: 1116)
- Unicorn-55095.exe (PID: 5600)
- Unicorn-14249.exe (PID: 7048)
- Unicorn-12111.exe (PID: 6620)
- Unicorn-12713.exe (PID: 4892)
- Unicorn-55090.exe (PID: 2084)
- Unicorn-55645.exe (PID: 7188)
- Unicorn-7927.exe (PID: 7208)
- Unicorn-5396.exe (PID: 7232)
- Unicorn-31524.exe (PID: 7248)
- Unicorn-19595.exe (PID: 7272)
- Unicorn-20563.exe (PID: 7292)
- Unicorn-41660.exe (PID: 7320)
- Unicorn-7404.exe (PID: 7340)
- Unicorn-35438.exe (PID: 7356)
- Unicorn-42844.exe (PID: 7372)
- Unicorn-53720.exe (PID: 7396)
- Unicorn-53720.exe (PID: 7404)
- Unicorn-51800.exe (PID: 720)
- Unicorn-435.exe (PID: 7428)
- Unicorn-29527.exe (PID: 7500)
- Unicorn-39330.exe (PID: 7452)
- Unicorn-56434.exe (PID: 7476)
- Unicorn-30968.exe (PID: 7484)
- Unicorn-23661.exe (PID: 7508)
- Unicorn-48074.exe (PID: 7588)
- Unicorn-48271.exe (PID: 3888)
- Unicorn-63019.exe (PID: 7608)
- Unicorn-43804.exe (PID: 7644)
- Unicorn-16999.exe (PID: 3024)
- Unicorn-15786.exe (PID: 7664)
- Unicorn-819.exe (PID: 7628)
- Unicorn-34814.exe (PID: 7680)
- Unicorn-52542.exe (PID: 7740)
- Unicorn-51151.exe (PID: 7720)
- Unicorn-58664.exe (PID: 7768)
- Unicorn-3076.exe (PID: 7788)
- Unicorn-14223.exe (PID: 7804)
- Unicorn-41420.exe (PID: 7820)
- Unicorn-12085.exe (PID: 7840)
- Unicorn-802.exe (PID: 7860)
- Unicorn-40674.exe (PID: 7876)
- Unicorn-15978.exe (PID: 7912)
- Unicorn-36133.exe (PID: 7936)
- Unicorn-37144.exe (PID: 7896)
- Unicorn-41406.exe (PID: 7988)
- Unicorn-35738.exe (PID: 8012)
- Unicorn-13009.exe (PID: 8156)
- Unicorn-38836.exe (PID: 904)
- Unicorn-32151.exe (PID: 8180)
- Unicorn-31484.exe (PID: 8132)
- Unicorn-52350.exe (PID: 7468)
- Unicorn-32484.exe (PID: 7460)
- Unicorn-22930.exe (PID: 2384)
- Unicorn-56626.exe (PID: 7752)
- Unicorn-17478.exe (PID: 6424)
- Unicorn-39220.exe (PID: 5780)
- Unicorn-30306.exe (PID: 3956)
- Unicorn-12386.exe (PID: 8216)
- Unicorn-48588.exe (PID: 8232)
- Unicorn-50788.exe (PID: 8252)
- Unicorn-64431.exe (PID: 8304)
- Unicorn-1909.exe (PID: 8340)
- Unicorn-42366.exe (PID: 8188)
- Unicorn-5993.exe (PID: 8372)
- Unicorn-42942.exe (PID: 8272)
- Unicorn-19464.exe (PID: 7444)
- Unicorn-1909.exe (PID: 8348)
- Unicorn-64431.exe (PID: 8296)
- Unicorn-64431.exe (PID: 8288)
- Unicorn-49640.exe (PID: 8456)
- Unicorn-61224.exe (PID: 8408)
- Unicorn-20960.exe (PID: 8476)
- Unicorn-62547.exe (PID: 8440)
- Unicorn-61224.exe (PID: 8400)
- Unicorn-26990.exe (PID: 8572)
- Unicorn-37064.exe (PID: 8536)
- Unicorn-62547.exe (PID: 8448)
- Unicorn-55313.exe (PID: 8600)
- Unicorn-13346.exe (PID: 8500)
- Unicorn-51394.exe (PID: 8656)
- Unicorn-60217.exe (PID: 8628)
- Unicorn-49448.exe (PID: 8592)
- Unicorn-6953.exe (PID: 8720)
- Unicorn-36096.exe (PID: 8768)
- Unicorn-43710.exe (PID: 8748)
- Unicorn-44737.exe (PID: 7492)
- Unicorn-61992.exe (PID: 8800)
- Unicorn-28038.exe (PID: 7688)
- Unicorn-36526.exe (PID: 8792)
- Unicorn-65314.exe (PID: 8432)
- Unicorn-62568.exe (PID: 8860)
- Unicorn-62568.exe (PID: 8868)
- Unicorn-439.exe (PID: 8524)
- Unicorn-46.exe (PID: 8900)
- Unicorn-3061.exe (PID: 8932)
- Unicorn-3061.exe (PID: 8928)
- Unicorn-58292.exe (PID: 8964)
- Unicorn-25519.exe (PID: 8972)
- Unicorn-24804.exe (PID: 8992)
- Unicorn-31650.exe (PID: 8980)
- Unicorn-12360.exe (PID: 9060)
- Unicorn-26366.exe (PID: 8836)
- Unicorn-24058.exe (PID: 9044)
- Unicorn-56730.exe (PID: 9120)
- Unicorn-24612.exe (PID: 9088)
- Unicorn-33907.exe (PID: 9140)
- Unicorn-38348.exe (PID: 9096)
- Unicorn-10851.exe (PID: 9156)
- Unicorn-37440.exe (PID: 9176)
- Unicorn-61390.exe (PID: 9196)
- Unicorn-58275.exe (PID: 5740)
- Unicorn-5967.exe (PID: 4380)
- Unicorn-57114.exe (PID: 4228)
- Unicorn-12552.exe (PID: 9224)
- Unicorn-32418.exe (PID: 9232)
- Unicorn-41908.exe (PID: 9256)
- Unicorn-16392.exe (PID: 9272)
- Unicorn-63720.exe (PID: 9312)
- Unicorn-50514.exe (PID: 9360)
- Unicorn-24032.exe (PID: 9412)
- Unicorn-28478.exe (PID: 9452)
- Unicorn-1757.exe (PID: 9488)
- Unicorn-20140.exe (PID: 9516)
- Unicorn-28910.exe (PID: 9288)
- Unicorn-57590.exe (PID: 9304)
- Unicorn-27326.exe (PID: 9340)
- Unicorn-56045.exe (PID: 9588)
- Unicorn-50949.exe (PID: 9612)
- Unicorn-31348.exe (PID: 9636)
- Unicorn-60835.exe (PID: 9732)
- Unicorn-35222.exe (PID: 9672)
- Unicorn-28717.exe (PID: 9716)
- Unicorn-40991.exe (PID: 9772)
- Unicorn-4435.exe (PID: 9756)
- Unicorn-61420.exe (PID: 9644)
- Unicorn-26500.exe (PID: 9840)
- Unicorn-60818.exe (PID: 9944)
- Unicorn-32631.exe (PID: 9856)
- Unicorn-1411.exe (PID: 9972)
- Unicorn-21317.exe (PID: 10068)
- Unicorn-21317.exe (PID: 10064)
- Unicorn-6050.exe (PID: 10028)
- Unicorn-27761.exe (PID: 10188)
- Unicorn-32308.exe (PID: 9804)
- Unicorn-24966.exe (PID: 10284)
- Unicorn-60626.exe (PID: 10140)
- Unicorn-43814.exe (PID: 9936)
- Unicorn-45822.exe (PID: 10172)
- Unicorn-34559.exe (PID: 10220)
- Unicorn-21317.exe (PID: 10076)
- Unicorn-25843.exe (PID: 10376)
- Unicorn-35707.exe (PID: 10004)
- Unicorn-4981.exe (PID: 10036)
- Unicorn-59557.exe (PID: 10164)
- Unicorn-16300.exe (PID: 10292)
- Unicorn-56926.exe (PID: 10352)
- Unicorn-59719.exe (PID: 10212)
- Unicorn-49653.exe (PID: 10204)
- Unicorn-20824.exe (PID: 7144)
- Unicorn-23948.exe (PID: 9928)
Checks supported languages
- Kawaii-Unicorn.exe.bin.exe (PID: 6512)
- Unicorn-28671.exe (PID: 1012)
- Unicorn-37175.exe (PID: 4812)
- Unicorn-5894.exe (PID: 2092)
- Unicorn-17161.exe (PID: 6264)
- Unicorn-36189.exe (PID: 3620)
- Unicorn-41665.exe (PID: 4696)
- Unicorn-48510.exe (PID: 2192)
- Unicorn-40896.exe (PID: 5892)
- Unicorn-38204.exe (PID: 6800)
- Unicorn-35535.exe (PID: 4000)
- Unicorn-55095.exe (PID: 5600)
- Unicorn-1255.exe (PID: 6828)
- Unicorn-50631.exe (PID: 1168)
- Unicorn-13599.exe (PID: 6468)
- Unicorn-990.exe (PID: 6660)
- Unicorn-12713.exe (PID: 4892)
- Unicorn-20690.exe (PID: 1164)
- Unicorn-2526.exe (PID: 5360)
- Unicorn-39740.exe (PID: 1184)
- Unicorn-35826.exe (PID: 1072)
- Unicorn-43803.exe (PID: 1676)
- Unicorn-51800.exe (PID: 720)
- Unicorn-55884.exe (PID: 6540)
- Unicorn-55884.exe (PID: 1132)
- Unicorn-48271.exe (PID: 3888)
- Unicorn-28479.exe (PID: 4776)
- Unicorn-31279.exe (PID: 1116)
- Unicorn-14249.exe (PID: 7048)
- Unicorn-16999.exe (PID: 3024)
- Unicorn-12111.exe (PID: 6620)
- Unicorn-55090.exe (PID: 2084)
- Unicorn-7927.exe (PID: 7208)
- Unicorn-55645.exe (PID: 7188)
- Unicorn-5396.exe (PID: 7232)
- Unicorn-31524.exe (PID: 7248)
- Unicorn-19595.exe (PID: 7272)
- Unicorn-20563.exe (PID: 7292)
- Unicorn-41660.exe (PID: 7320)
- Unicorn-7404.exe (PID: 7340)
- Unicorn-42844.exe (PID: 7372)
- Unicorn-35438.exe (PID: 7356)
- Unicorn-53720.exe (PID: 7404)
- Unicorn-53720.exe (PID: 7396)
- Unicorn-435.exe (PID: 7428)
- Unicorn-39330.exe (PID: 7452)
- Unicorn-19464.exe (PID: 7444)
- Unicorn-32484.exe (PID: 7460)
- Unicorn-56434.exe (PID: 7476)
- Unicorn-52350.exe (PID: 7468)
- Unicorn-29527.exe (PID: 7500)
- Unicorn-23661.exe (PID: 7508)
- Unicorn-30968.exe (PID: 7484)
- Unicorn-44737.exe (PID: 7492)
- Unicorn-48074.exe (PID: 7588)
- Unicorn-15786.exe (PID: 7664)
- Unicorn-819.exe (PID: 7628)
- Unicorn-43804.exe (PID: 7644)
- Unicorn-34814.exe (PID: 7680)
- Unicorn-28038.exe (PID: 7688)
- Unicorn-51151.exe (PID: 7720)
- Unicorn-63019.exe (PID: 7608)
- Unicorn-52542.exe (PID: 7740)
- Unicorn-56626.exe (PID: 7752)
- Unicorn-58664.exe (PID: 7768)
- Unicorn-3076.exe (PID: 7788)
- Unicorn-41420.exe (PID: 7820)
- Unicorn-14223.exe (PID: 7804)
- Unicorn-12085.exe (PID: 7840)
- Unicorn-802.exe (PID: 7860)
- Unicorn-37144.exe (PID: 7896)
- Unicorn-40674.exe (PID: 7876)
- Unicorn-36133.exe (PID: 7936)
- Unicorn-15978.exe (PID: 7912)
- Unicorn-41406.exe (PID: 7988)
- Unicorn-35738.exe (PID: 8012)
- Unicorn-31484.exe (PID: 8132)
- Unicorn-13009.exe (PID: 8156)
- Unicorn-32151.exe (PID: 8180)
- Unicorn-42366.exe (PID: 8188)
- Unicorn-38836.exe (PID: 904)
- Unicorn-17478.exe (PID: 6424)
- Unicorn-39220.exe (PID: 5780)
- Unicorn-30306.exe (PID: 3956)
- Unicorn-12386.exe (PID: 8216)
- Unicorn-22930.exe (PID: 2384)
- Unicorn-48588.exe (PID: 8232)
- Unicorn-50788.exe (PID: 8252)
- Unicorn-42942.exe (PID: 8272)
- Unicorn-64431.exe (PID: 8288)
- Unicorn-1909.exe (PID: 8340)
- Unicorn-1909.exe (PID: 8348)
- Unicorn-64431.exe (PID: 8296)
- Unicorn-64431.exe (PID: 8304)
- Unicorn-61224.exe (PID: 8408)
- Unicorn-61224.exe (PID: 8400)
- Unicorn-62547.exe (PID: 8440)
- Unicorn-62547.exe (PID: 8448)
- Unicorn-5993.exe (PID: 8372)
- Unicorn-49640.exe (PID: 8456)
- Unicorn-65314.exe (PID: 8432)
- Unicorn-37064.exe (PID: 8536)
- Unicorn-20960.exe (PID: 8476)
- Unicorn-439.exe (PID: 8524)
- Unicorn-49448.exe (PID: 8592)
- Unicorn-26990.exe (PID: 8572)
- Unicorn-55313.exe (PID: 8600)
- Unicorn-60217.exe (PID: 8628)
- Unicorn-51394.exe (PID: 8656)
- Unicorn-13346.exe (PID: 8500)
- Unicorn-6953.exe (PID: 8720)
- Unicorn-36096.exe (PID: 8768)
- Unicorn-43710.exe (PID: 8748)
- Unicorn-36526.exe (PID: 8792)
- Unicorn-26366.exe (PID: 8836)
- Unicorn-62568.exe (PID: 8868)
- Unicorn-62568.exe (PID: 8860)
- Unicorn-46.exe (PID: 8900)
- Unicorn-61992.exe (PID: 8800)
- Unicorn-3061.exe (PID: 8932)
- Unicorn-3061.exe (PID: 8928)
- Unicorn-58292.exe (PID: 8964)
- Unicorn-31650.exe (PID: 8980)
- Unicorn-24804.exe (PID: 8992)
- Unicorn-24058.exe (PID: 9044)
- Unicorn-12360.exe (PID: 9060)
- Unicorn-38348.exe (PID: 9096)
- Unicorn-24612.exe (PID: 9088)
- Unicorn-56730.exe (PID: 9120)
- Unicorn-25519.exe (PID: 8972)
- Unicorn-61390.exe (PID: 9196)
- Unicorn-58275.exe (PID: 5740)
- Unicorn-5967.exe (PID: 4380)
- Unicorn-10851.exe (PID: 9156)
- Unicorn-37440.exe (PID: 9176)
- Unicorn-33907.exe (PID: 9140)
- Unicorn-12552.exe (PID: 9224)
- Unicorn-32418.exe (PID: 9232)
- Unicorn-41908.exe (PID: 9256)
- Unicorn-16392.exe (PID: 9272)
- Unicorn-28910.exe (PID: 9288)
- Unicorn-57590.exe (PID: 9304)
- Unicorn-57114.exe (PID: 4228)
- Unicorn-63720.exe (PID: 9312)
- Unicorn-27326.exe (PID: 9340)
- Unicorn-50514.exe (PID: 9360)
- Unicorn-24032.exe (PID: 9412)
- Unicorn-28478.exe (PID: 9452)
- Unicorn-1757.exe (PID: 9488)
- Unicorn-56045.exe (PID: 9588)
- Unicorn-50949.exe (PID: 9612)
- Unicorn-35222.exe (PID: 9672)
- Unicorn-61420.exe (PID: 9644)
- Unicorn-31348.exe (PID: 9636)
- Unicorn-60835.exe (PID: 9732)
- Unicorn-28717.exe (PID: 9716)
- Unicorn-20140.exe (PID: 9516)
- Unicorn-4435.exe (PID: 9756)
- Unicorn-40991.exe (PID: 9772)
- Unicorn-32308.exe (PID: 9804)
- Unicorn-26500.exe (PID: 9840)
- Unicorn-32631.exe (PID: 9856)
- Unicorn-23948.exe (PID: 9928)
- Unicorn-43814.exe (PID: 9936)
- Unicorn-60818.exe (PID: 9944)
- Unicorn-1411.exe (PID: 9972)
- Unicorn-35707.exe (PID: 10004)
- Unicorn-6050.exe (PID: 10028)
- Unicorn-4981.exe (PID: 10036)
- Unicorn-21317.exe (PID: 10064)
- Unicorn-21317.exe (PID: 10076)
- Unicorn-46891.exe (PID: 10092)
- Unicorn-21317.exe (PID: 10068)
- Unicorn-40221.exe (PID: 10196)
- Unicorn-27761.exe (PID: 10188)
- Unicorn-34559.exe (PID: 10220)
- Unicorn-16300.exe (PID: 10292)
- Unicorn-59557.exe (PID: 10164)
- Unicorn-20824.exe (PID: 7144)
- Unicorn-52677.exe (PID: 5364)
- Unicorn-25843.exe (PID: 10376)
- Unicorn-64187.exe (PID: 10424)
- Unicorn-60626.exe (PID: 10140)
- Unicorn-33627.exe (PID: 10180)
- Unicorn-45822.exe (PID: 10172)
- Unicorn-59719.exe (PID: 10212)
- Unicorn-49653.exe (PID: 10204)
- Unicorn-56926.exe (PID: 10352)
- Unicorn-17124.exe (PID: 10400)
- Unicorn-24031.exe (PID: 10504)
- Unicorn-7202.exe (PID: 10552)
- Unicorn-43496.exe (PID: 10536)
- Unicorn-7202.exe (PID: 10560)
- Unicorn-43959.exe (PID: 10628)
- Unicorn-7202.exe (PID: 10584)
- Unicorn-29568.exe (PID: 10668)
- Unicorn-49169.exe (PID: 10660)
- Unicorn-28721.exe (PID: 10452)
- Unicorn-35497.exe (PID: 10496)
- Unicorn-7202.exe (PID: 10568)
- Unicorn-24966.exe (PID: 10284)
- Unicorn-33652.exe (PID: 10684)
- Unicorn-49334.exe (PID: 10732)
- Unicorn-47964.exe (PID: 10756)
- Unicorn-39704.exe (PID: 10816)
- Unicorn-25405.exe (PID: 10796)
- Unicorn-31271.exe (PID: 10788)
- Unicorn-5448.exe (PID: 10844)
- Unicorn-28635.exe (PID: 10860)
- Unicorn-12100.exe (PID: 10868)
- Unicorn-45634.exe (PID: 10924)
- Unicorn-31898.exe (PID: 10916)
- Unicorn-47388.exe (PID: 10708)
- Unicorn-43959.exe (PID: 10636)
- Unicorn-34228.exe (PID: 10748)
- Unicorn-25183.exe (PID: 11032)
- Unicorn-57555.exe (PID: 11136)
- Unicorn-43218.exe (PID: 11080)
- Unicorn-39896.exe (PID: 11072)
- Unicorn-11618.exe (PID: 11144)
- Unicorn-18660.exe (PID: 11120)
- Unicorn-32203.exe (PID: 11196)
- Unicorn-29204.exe (PID: 11232)
- Unicorn-24857.exe (PID: 10956)
- Unicorn-37627.exe (PID: 11000)
- Unicorn-37627.exe (PID: 10992)
- Unicorn-38919.exe (PID: 11040)
- Unicorn-44748.exe (PID: 6876)
- Unicorn-21182.exe (PID: 7384)
- Unicorn-26357.exe (PID: 11288)
- Unicorn-51830.exe (PID: 11316)
- Unicorn-33765.exe (PID: 11064)
- Unicorn-29491.exe (PID: 11352)
- Unicorn-65042.exe (PID: 11464)
- Unicorn-37545.exe (PID: 11512)
- Unicorn-25.exe (PID: 11544)
- Unicorn-48785.exe (PID: 11368)
- Unicorn-58453.exe (PID: 7280)
- Unicorn-59697.exe (PID: 11528)
- Unicorn-60793.exe (PID: 11692)
- Unicorn-5919.exe (PID: 11628)
- Unicorn-44400.exe (PID: 11640)
- Unicorn-49361.exe (PID: 11700)
- Unicorn-6922.exe (PID: 11776)
- Unicorn-52790.exe (PID: 11732)
- Unicorn-9117.exe (PID: 11768)
- Unicorn-61660.exe (PID: 11916)
- Unicorn-290.exe (PID: 11556)
- Unicorn-20136.exe (PID: 11612)
- Unicorn-46284.exe (PID: 11588)
- Unicorn-47684.exe (PID: 11980)
- Unicorn-23179.exe (PID: 11884)
- Unicorn-18903.exe (PID: 12028)
- Unicorn-16866.exe (PID: 12040)
- Unicorn-46450.exe (PID: 11924)
- Unicorn-60591.exe (PID: 11968)
- Unicorn-14462.exe (PID: 12100)
- Unicorn-40393.exe (PID: 12048)
- Unicorn-32133.exe (PID: 12084)
- Unicorn-31064.exe (PID: 12144)
- Unicorn-12324.exe (PID: 12120)
- Unicorn-63828.exe (PID: 12152)
- Unicorn-26002.exe (PID: 12168)
- Unicorn-33015.exe (PID: 12176)
- Unicorn-50421.exe (PID: 12192)
- Unicorn-47711.exe (PID: 12228)
- Unicorn-28031.exe (PID: 1328)
- Unicorn-37862.exe (PID: 12264)
- Unicorn-33546.exe (PID: 12272)
- Unicorn-6680.exe (PID: 12280)
- Unicorn-15303.exe (PID: 7924)
- Unicorn-53221.exe (PID: 2416)
- Unicorn-6373.exe (PID: 12308)
- Unicorn-15094.exe (PID: 12452)
- Unicorn-15094.exe (PID: 12436)
- Unicorn-40092.exe (PID: 12384)
- Unicorn-6943.exe (PID: 3796)
- Unicorn-59086.exe (PID: 3976)
- Unicorn-35816.exe (PID: 2268)
- Unicorn-13065.exe (PID: 776)
- Unicorn-63550.exe (PID: 6228)
- Unicorn-6174.exe (PID: 4376)
- Unicorn-58401.exe (PID: 1128)
- Unicorn-16291.exe (PID: 12392)
- Unicorn-24139.exe (PID: 12548)
- Unicorn-46913.exe (PID: 12564)
- Unicorn-24139.exe (PID: 12556)
- Unicorn-24139.exe (PID: 12532)
- Unicorn-14545.exe (PID: 12628)
- Unicorn-47274.exe (PID: 12676)
- Unicorn-14810.exe (PID: 12648)
- Unicorn-16875.exe (PID: 12420)
- Unicorn-15094.exe (PID: 12444)
- Unicorn-35515.exe (PID: 12480)
- Unicorn-24139.exe (PID: 12540)
- Unicorn-32527.exe (PID: 12744)
- Unicorn-57031.exe (PID: 12788)
- Unicorn-1608.exe (PID: 12876)
- Unicorn-5188.exe (PID: 12812)
- Unicorn-43652.exe (PID: 12728)
- Unicorn-57031.exe (PID: 12796)
- Unicorn-62564.exe (PID: 12892)
- Unicorn-32600.exe (PID: 12904)
- Unicorn-19698.exe (PID: 12620)
- Unicorn-59169.exe (PID: 12700)
- Unicorn-50504.exe (PID: 12712)
- Unicorn-26661.exe (PID: 12736)
- Unicorn-22253.exe (PID: 12804)
- Unicorn-25099.exe (PID: 12948)
- Unicorn-25099.exe (PID: 12956)
- Unicorn-4322.exe (PID: 12988)
- Unicorn-8479.exe (PID: 13040)
- Unicorn-49412.exe (PID: 13064)
- Unicorn-8479.exe (PID: 13048)
- Unicorn-55277.exe (PID: 13056)
- Unicorn-42328.exe (PID: 13100)
- Unicorn-47658.exe (PID: 12928)
- Unicorn-44858.exe (PID: 12936)
- Unicorn-39106.exe (PID: 13152)
- Unicorn-62340.exe (PID: 13204)
- Unicorn-52126.exe (PID: 13172)
- Unicorn-49326.exe (PID: 13180)
- Unicorn-2568.exe (PID: 13228)
- Unicorn-25392.exe (PID: 13236)
- Unicorn-20466.exe (PID: 13084)
- Unicorn-866.exe (PID: 13076)
- Unicorn-17868.exe (PID: 13276)
- Unicorn-35506.exe (PID: 13268)
- Unicorn-55926.exe (PID: 13300)
- Unicorn-55926.exe (PID: 13308)
- Unicorn-31998.exe (PID: 6752)
- Unicorn-49766.exe (PID: 8956)
- Unicorn-44058.exe (PID: 8812)
- Unicorn-24576.exe (PID: 3176)
- Unicorn-38312.exe (PID: 9188)
- Unicorn-58640.exe (PID: 8548)
- Unicorn-38531.exe (PID: 13356)
- Unicorn-44826.exe (PID: 13388)
- Unicorn-32081.exe (PID: 13440)
- Unicorn-60778.exe (PID: 9324)
- Unicorn-12900.exe (PID: 13328)
- Unicorn-33269.exe (PID: 13540)
- Unicorn-6434.exe (PID: 13604)
- Unicorn-56008.exe (PID: 13572)
- Unicorn-48916.exe (PID: 13628)
- Unicorn-29812.exe (PID: 13616)
- Unicorn-3170.exe (PID: 13636)
- Unicorn-23036.exe (PID: 13672)
- Unicorn-29378.exe (PID: 13732)
- Unicorn-7010.exe (PID: 13744)
- Unicorn-9829.exe (PID: 13432)
- Unicorn-12629.exe (PID: 13448)
- Unicorn-17289.exe (PID: 13848)
- Unicorn-56760.exe (PID: 13936)
- Unicorn-26134.exe (PID: 13888)
- Unicorn-53060.exe (PID: 14052)
- Unicorn-13232.exe (PID: 14008)
- Unicorn-24471.exe (PID: 14024)
- Unicorn-50260.exe (PID: 14044)
- Unicorn-1145.exe (PID: 13780)
- Unicorn-14489.exe (PID: 13824)
- Unicorn-47659.exe (PID: 13868)
- Unicorn-53960.exe (PID: 13928)
- Unicorn-26880.exe (PID: 14156)
- Unicorn-40716.exe (PID: 14116)
- Unicorn-46481.exe (PID: 14148)
- Unicorn-46481.exe (PID: 14164)
- Unicorn-35045.exe (PID: 5668)
- Unicorn-8406.exe (PID: 14220)
- Unicorn-31593.exe (PID: 14260)
- Unicorn-62384.exe (PID: 14316)
- Unicorn-42783.exe (PID: 14288)
- Unicorn-41275.exe (PID: 4152)
- Unicorn-58925.exe (PID: 14068)
- Unicorn-45551.exe (PID: 14280)
- Unicorn-4856.exe (PID: 9800)
- Unicorn-46676.exe (PID: 6252)
- Unicorn-37766.exe (PID: 14384)
- Unicorn-58928.exe (PID: 4068)
- Unicorn-55970.exe (PID: 14368)
- Unicorn-30915.exe (PID: 14432)
- Unicorn-37766.exe (PID: 14388)
- Unicorn-53328.exe (PID: 732)
- Unicorn-15705.exe (PID: 14476)
- Unicorn-46432.exe (PID: 14424)
- Unicorn-13183.exe (PID: 14332)
- Unicorn-19139.exe (PID: 9624)
- Unicorn-36610.exe (PID: 6476)
- Unicorn-55970.exe (PID: 14360)
- Unicorn-53520.exe (PID: 5720)
- Unicorn-27766.exe (PID: 14576)
- Unicorn-42421.exe (PID: 14532)
- Unicorn-50133.exe (PID: 14540)
- Unicorn-44367.exe (PID: 14592)
- Unicorn-21814.exe (PID: 14600)
- Unicorn-15009.exe (PID: 14492)
- Unicorn-6163.exe (PID: 14784)
- Unicorn-38456.exe (PID: 14736)
- Unicorn-50211.exe (PID: 14792)
- Unicorn-38456.exe (PID: 14728)
- Unicorn-38456.exe (PID: 14716)
- Unicorn-20801.exe (PID: 14820)
- Unicorn-25213.exe (PID: 14852)
- Unicorn-26012.exe (PID: 14836)
- Unicorn-15777.exe (PID: 14868)
- Unicorn-35113.exe (PID: 14884)
- Unicorn-42732.exe (PID: 14652)
- Unicorn-42732.exe (PID: 14644)
- Unicorn-54984.exe (PID: 14672)
- Unicorn-38456.exe (PID: 14712)
- Unicorn-13255.exe (PID: 14704)
- Unicorn-38648.exe (PID: 14616)
- Unicorn-13258.exe (PID: 14968)
- Unicorn-34789.exe (PID: 14964)
- Unicorn-8933.exe (PID: 14992)
- Unicorn-37273.exe (PID: 14984)
- Unicorn-3333.exe (PID: 15020)
- Unicorn-26661.exe (PID: 15084)
- Unicorn-44870.exe (PID: 15064)
- Unicorn-39717.exe (PID: 15076)
- Unicorn-19669.exe (PID: 15052)
- Unicorn-22312.exe (PID: 15116)
- Unicorn-40978.exe (PID: 14892)
- Unicorn-26090.exe (PID: 14924)
- Unicorn-32312.exe (PID: 14900)
- Unicorn-44373.exe (PID: 15040)
- Unicorn-38727.exe (PID: 15204)
- Unicorn-1579.exe (PID: 15244)
- Unicorn-43341.exe (PID: 15224)
- Unicorn-38727.exe (PID: 15232)
- Unicorn-45254.exe (PID: 15284)
- Unicorn-57506.exe (PID: 15308)
- Unicorn-15046.exe (PID: 15328)
- Unicorn-59723.exe (PID: 3180)
- Unicorn-28416.exe (PID: 5352)
- Unicorn-38481.exe (PID: 4688)
- Unicorn-62986.exe (PID: 3132)
- Unicorn-27791.exe (PID: 15156)
- Unicorn-27791.exe (PID: 15164)
- Unicorn-3344.exe (PID: 15180)
- Unicorn-63016.exe (PID: 15212)
- Unicorn-48788.exe (PID: 2656)
- Unicorn-21953.exe (PID: 6132)
- Unicorn-22337.exe (PID: 1812)
- Unicorn-16499.exe (PID: 1760)
- Unicorn-26613.exe (PID: 6256)
- Unicorn-53478.exe (PID: 5936)
- Unicorn-55632.exe (PID: 960)
- Unicorn-31139.exe (PID: 10804)
- Unicorn-22066.exe (PID: 7268)
- Unicorn-10469.exe (PID: 7176)
- Unicorn-7590.exe (PID: 7256)
- Unicorn-58492.exe (PID: 7424)
- Unicorn-58045.exe (PID: 7332)
- Unicorn-12555.exe (PID: 7380)
- Unicorn-46677.exe (PID: 7524)
- Unicorn-35531.exe (PID: 7572)
- Unicorn-25273.exe (PID: 7084)
- Unicorn-13998.exe (PID: 14172)
- Unicorn-5830.exe (PID: 5020)
- Unicorn-60054.exe (PID: 7284)
- Unicorn-7537.exe (PID: 7728)
- Unicorn-39747.exe (PID: 3396)
- Unicorn-53068.exe (PID: 7716)
- Unicorn-33732.exe (PID: 6960)
- Unicorn-29009.exe (PID: 15372)
- Unicorn-8166.exe (PID: 7784)
- Unicorn-54164.exe (PID: 15488)
- Unicorn-55606.exe (PID: 15472)
- Unicorn-24694.exe (PID: 11204)
- Unicorn-15727.exe (PID: 15416)
- Unicorn-62524.exe (PID: 15440)
- Unicorn-19619.exe (PID: 15536)
- Unicorn-63152.exe (PID: 15552)
- Unicorn-3593.exe (PID: 15584)
- Unicorn-43929.exe (PID: 15572)
- Unicorn-15919.exe (PID: 15672)
- Unicorn-45499.exe (PID: 15480)
- Unicorn-62219.exe (PID: 15712)
- Unicorn-29923.exe (PID: 15772)
- Unicorn-60657.exe (PID: 15836)
- Unicorn-41553.exe (PID: 15820)
- Unicorn-26508.exe (PID: 15936)
- Unicorn-60657.exe (PID: 15828)
- Unicorn-59281.exe (PID: 15868)
- Unicorn-8689.exe (PID: 15888)
- Unicorn-9887.exe (PID: 15980)
- Unicorn-29852.exe (PID: 15732)
- Unicorn-55124.exe (PID: 15756)
- Unicorn-46459.exe (PID: 15764)
- Unicorn-2004.exe (PID: 15856)
- Unicorn-57811.exe (PID: 16024)
- Unicorn-22676.exe (PID: 16076)
- Unicorn-3557.exe (PID: 16000)
- Unicorn-30845.exe (PID: 16092)
- Unicorn-22146.exe (PID: 16084)
- Unicorn-61034.exe (PID: 16008)
- Unicorn-13779.exe (PID: 16104)
- Unicorn-22808.exe (PID: 16160)
- Unicorn-59209.exe (PID: 16168)
- Unicorn-62316.exe (PID: 16140)
- Unicorn-46070.exe (PID: 16188)
- Unicorn-6148.exe (PID: 16228)
- Unicorn-30976.exe (PID: 16216)
- Unicorn-44513.exe (PID: 16268)
- Unicorn-28368.exe (PID: 16048)
- Unicorn-5618.exe (PID: 16260)
- Unicorn-1335.exe (PID: 16328)
- Unicorn-55481.exe (PID: 16304)
- Unicorn-39059.exe (PID: 8624)
- Unicorn-45275.exe (PID: 16320)
- Unicorn-34436.exe (PID: 16356)
- Unicorn-54574.exe (PID: 8828)
- Unicorn-17625.exe (PID: 6820)
- Unicorn-51119.exe (PID: 7948)
- Unicorn-55004.exe (PID: 1628)
- Unicorn-53065.exe (PID: 2664)
- Unicorn-1335.exe (PID: 16312)
- Unicorn-23408.exe (PID: 16432)
- Unicorn-22878.exe (PID: 16416)
- Unicorn-22878.exe (PID: 16424)
- Unicorn-38031.exe (PID: 16396)
- Unicorn-50183.exe (PID: 16512)
- Unicorn-22878.exe (PID: 16440)
- Unicorn-57689.exe (PID: 16448)
- Unicorn-41153.exe (PID: 16456)
- Unicorn-512.exe (PID: 7316)
- Unicorn-48981.exe (PID: 8140)
- Unicorn-53065.exe (PID: 7148)
- Unicorn-43373.exe (PID: 8740)
- Unicorn-25201.exe (PID: 16616)
- Unicorn-37645.exe (PID: 16556)
- Unicorn-18598.exe (PID: 16696)
- Unicorn-29292.exe (PID: 16812)
- Unicorn-13263.exe (PID: 16704)
- Unicorn-21117.exe (PID: 16592)
- Unicorn-44213.exe (PID: 16712)
- Unicorn-11672.exe (PID: 16720)
- Unicorn-57874.exe (PID: 16728)
- Unicorn-37652.exe (PID: 16608)
- Unicorn-31231.exe (PID: 16740)
- Unicorn-46318.exe (PID: 16600)
- Unicorn-60549.exe (PID: 16796)
- Unicorn-37076.exe (PID: 16540)
- Unicorn-25931.exe (PID: 16572)
- Unicorn-10818.exe (PID: 16824)
- Unicorn-10818.exe (PID: 16828)
- Unicorn-30609.exe (PID: 16860)
- Unicorn-19555.exe (PID: 16892)
- Unicorn-42783.exe (PID: 16968)
- Unicorn-51051.exe (PID: 16936)
- Unicorn-42783.exe (PID: 16952)
- Unicorn-23447.exe (PID: 16988)
- Unicorn-48648.exe (PID: 16980)
- Unicorn-1088.exe (PID: 16960)
- Unicorn-27150.exe (PID: 16996)
- Unicorn-60933.exe (PID: 17008)
- Unicorn-25592.exe (PID: 17032)
- Unicorn-380.exe (PID: 17128)
- Unicorn-10494.exe (PID: 17180)
- Unicorn-56696.exe (PID: 17172)
- Unicorn-45305.exe (PID: 17216)
- Unicorn-16524.exe (PID: 17256)
- Unicorn-53149.exe (PID: 17264)
- Unicorn-2710.exe (PID: 17352)
- Unicorn-14386.exe (PID: 17288)
- Unicorn-39659.exe (PID: 17304)
- Unicorn-43867.exe (PID: 17024)
- Unicorn-20138.exe (PID: 17112)
- Unicorn-63232.exe (PID: 17224)
- Unicorn-6894.exe (PID: 17320)
- Unicorn-35026.exe (PID: 8244)
- Unicorn-15839.exe (PID: 8196)
- Unicorn-26891.exe (PID: 8224)
- Unicorn-56022.exe (PID: 8380)
- Unicorn-35867.exe (PID: 8356)
- Unicorn-47357.exe (PID: 8420)
- Unicorn-11855.exe (PID: 17372)
- Unicorn-45597.exe (PID: 17388)
- Unicorn-22031.exe (PID: 5500)
- Unicorn-35410.exe (PID: 17416)
- Unicorn-13208.exe (PID: 12780)
- Unicorn-47927.exe (PID: 17436)
- Unicorn-37427.exe (PID: 17460)
- Unicorn-23898.exe (PID: 17496)
- Unicorn-30373.exe (PID: 17528)
- Unicorn-54347.exe (PID: 17556)
- Unicorn-30504.exe (PID: 17564)
- Unicorn-15061.exe (PID: 17632)
- Unicorn-22031.exe (PID: 12684)
- Unicorn-62700.exe (PID: 17708)
- Unicorn-46868.exe (PID: 17756)
- Unicorn-41003.exe (PID: 17764)
- Unicorn-25751.exe (PID: 17788)
- Unicorn-10184.exe (PID: 17844)
- Unicorn-43562.exe (PID: 17824)
- Unicorn-2571.exe (PID: 17860)
- Unicorn-18358.exe (PID: 17876)
- Unicorn-14612.exe (PID: 17948)
- Unicorn-14082.exe (PID: 17956)
- Unicorn-44609.exe (PID: 17984)
- Unicorn-31735.exe (PID: 18008)
- Unicorn-33730.exe (PID: 17684)
- Unicorn-22364.exe (PID: 17700)
- Unicorn-38733.exe (PID: 17744)
- Unicorn-16213.exe (PID: 18152)
- Unicorn-50594.exe (PID: 18124)
- Unicorn-53931.exe (PID: 18180)
- Unicorn-39547.exe (PID: 18204)
- Unicorn-113.exe (PID: 18232)
- Unicorn-48584.exe (PID: 18220)
- Unicorn-58021.exe (PID: 18188)
- Unicorn-44293.exe (PID: 18284)
- Unicorn-57723.exe (PID: 18016)
- Unicorn-5722.exe (PID: 18048)
- Unicorn-6252.exe (PID: 18056)
- Unicorn-29041.exe (PID: 18296)
- Unicorn-10521.exe (PID: 18416)
- Unicorn-35768.exe (PID: 18328)
- Unicorn-11336.exe (PID: 18392)
- Unicorn-45614.exe (PID: 18408)
- Unicorn-30122.exe (PID: 18424)
- Unicorn-49909.exe (PID: 18360)
- Unicorn-45882.exe (PID: 18400)
- Unicorn-21986.exe (PID: 9192)
- Unicorn-43815.exe (PID: 1040)
- Unicorn-37593.exe (PID: 9296)
- Unicorn-49254.exe (PID: 18372)
- Unicorn-33128.exe (PID: 9320)
- Unicorn-48437.exe (PID: 1560)
- Unicorn-26906.exe (PID: 4436)
- Unicorn-7297.exe (PID: 9628)
- Unicorn-29739.exe (PID: 9652)
- Unicorn-20684.exe (PID: 18464)
- Unicorn-38098.exe (PID: 18444)
Reads the computer name
- Kawaii-Unicorn.exe.bin.exe (PID: 6512)
- Unicorn-28671.exe (PID: 1012)
- Unicorn-37175.exe (PID: 4812)
- Unicorn-5894.exe (PID: 2092)
- Unicorn-17161.exe (PID: 6264)
- Unicorn-36189.exe (PID: 3620)
- Unicorn-35535.exe (PID: 4000)
- Unicorn-41665.exe (PID: 4696)
- Unicorn-40896.exe (PID: 5892)
- Unicorn-48510.exe (PID: 2192)
- Unicorn-990.exe (PID: 6660)
- Unicorn-1255.exe (PID: 6828)
- Unicorn-13599.exe (PID: 6468)
- Unicorn-38204.exe (PID: 6800)
- Unicorn-55095.exe (PID: 5600)
- Unicorn-50631.exe (PID: 1168)
- Unicorn-12713.exe (PID: 4892)
- Unicorn-35826.exe (PID: 1072)
- Unicorn-2526.exe (PID: 5360)
- Unicorn-20690.exe (PID: 1164)
- Unicorn-43803.exe (PID: 1676)
- Unicorn-39740.exe (PID: 1184)
- Unicorn-55884.exe (PID: 1132)
- Unicorn-51800.exe (PID: 720)
- Unicorn-28479.exe (PID: 4776)
- Unicorn-55884.exe (PID: 6540)
- Unicorn-31279.exe (PID: 1116)
- Unicorn-48271.exe (PID: 3888)
- Unicorn-14249.exe (PID: 7048)
- Unicorn-16999.exe (PID: 3024)
- Unicorn-12111.exe (PID: 6620)
- Unicorn-55090.exe (PID: 2084)
- Unicorn-7927.exe (PID: 7208)
- Unicorn-55645.exe (PID: 7188)
- Unicorn-5396.exe (PID: 7232)
- Unicorn-31524.exe (PID: 7248)
- Unicorn-19595.exe (PID: 7272)
- Unicorn-20563.exe (PID: 7292)
- Unicorn-41660.exe (PID: 7320)
- Unicorn-7404.exe (PID: 7340)
- Unicorn-35438.exe (PID: 7356)
- Unicorn-53720.exe (PID: 7396)
- Unicorn-53720.exe (PID: 7404)
- Unicorn-435.exe (PID: 7428)
- Unicorn-32484.exe (PID: 7460)
- Unicorn-52350.exe (PID: 7468)
- Unicorn-39330.exe (PID: 7452)
- Unicorn-19464.exe (PID: 7444)
- Unicorn-42844.exe (PID: 7372)
- Unicorn-29527.exe (PID: 7500)
- Unicorn-56434.exe (PID: 7476)
- Unicorn-30968.exe (PID: 7484)
- Unicorn-23661.exe (PID: 7508)
- Unicorn-44737.exe (PID: 7492)
- Unicorn-48074.exe (PID: 7588)
- Unicorn-43804.exe (PID: 7644)
- Unicorn-819.exe (PID: 7628)
- Unicorn-63019.exe (PID: 7608)
- Unicorn-15786.exe (PID: 7664)
- Unicorn-34814.exe (PID: 7680)
- Unicorn-28038.exe (PID: 7688)
- Unicorn-52542.exe (PID: 7740)
- Unicorn-58664.exe (PID: 7768)
- Unicorn-51151.exe (PID: 7720)
- Unicorn-56626.exe (PID: 7752)
- Unicorn-3076.exe (PID: 7788)
- Unicorn-41420.exe (PID: 7820)
- Unicorn-12085.exe (PID: 7840)
- Unicorn-802.exe (PID: 7860)
- Unicorn-40674.exe (PID: 7876)
- Unicorn-14223.exe (PID: 7804)
- Unicorn-37144.exe (PID: 7896)
- Unicorn-15978.exe (PID: 7912)
- Unicorn-36133.exe (PID: 7936)
- Unicorn-41406.exe (PID: 7988)
- Unicorn-13009.exe (PID: 8156)
- Unicorn-32151.exe (PID: 8180)
- Unicorn-31484.exe (PID: 8132)
- Unicorn-35738.exe (PID: 8012)
- Unicorn-42366.exe (PID: 8188)
- Unicorn-22930.exe (PID: 2384)
- Unicorn-38836.exe (PID: 904)
- Unicorn-39220.exe (PID: 5780)
- Unicorn-17478.exe (PID: 6424)
- Unicorn-12386.exe (PID: 8216)
- Unicorn-48588.exe (PID: 8232)
- Unicorn-30306.exe (PID: 3956)
- Unicorn-50788.exe (PID: 8252)
- Unicorn-64431.exe (PID: 8304)
- Unicorn-1909.exe (PID: 8340)
- Unicorn-42942.exe (PID: 8272)
- Unicorn-1909.exe (PID: 8348)
- Unicorn-5993.exe (PID: 8372)
- Unicorn-64431.exe (PID: 8296)
- Unicorn-64431.exe (PID: 8288)
- Unicorn-49640.exe (PID: 8456)
- Unicorn-61224.exe (PID: 8408)
- Unicorn-62547.exe (PID: 8440)
- Unicorn-61224.exe (PID: 8400)
- Unicorn-65314.exe (PID: 8432)
- Unicorn-20960.exe (PID: 8476)
- Unicorn-26990.exe (PID: 8572)
- Unicorn-37064.exe (PID: 8536)
- Unicorn-439.exe (PID: 8524)
- Unicorn-13346.exe (PID: 8500)
- Unicorn-62547.exe (PID: 8448)
- Unicorn-55313.exe (PID: 8600)
- Unicorn-49448.exe (PID: 8592)
- Unicorn-60217.exe (PID: 8628)
- Unicorn-51394.exe (PID: 8656)
- Unicorn-6953.exe (PID: 8720)
- Unicorn-43710.exe (PID: 8748)
- Unicorn-36096.exe (PID: 8768)
- Unicorn-36526.exe (PID: 8792)
- Unicorn-61992.exe (PID: 8800)
- Unicorn-26366.exe (PID: 8836)
- Unicorn-62568.exe (PID: 8868)
- Unicorn-62568.exe (PID: 8860)
- Unicorn-46.exe (PID: 8900)
- Unicorn-3061.exe (PID: 8932)
- Unicorn-3061.exe (PID: 8928)
- Unicorn-58292.exe (PID: 8964)
- Unicorn-25519.exe (PID: 8972)
- Unicorn-24804.exe (PID: 8992)
- Unicorn-31650.exe (PID: 8980)
- Unicorn-12360.exe (PID: 9060)
- Unicorn-24058.exe (PID: 9044)
- Unicorn-56730.exe (PID: 9120)
- Unicorn-38348.exe (PID: 9096)
- Unicorn-24612.exe (PID: 9088)
- Unicorn-33907.exe (PID: 9140)
- Unicorn-10851.exe (PID: 9156)
- Unicorn-61390.exe (PID: 9196)
- Unicorn-58275.exe (PID: 5740)
- Unicorn-37440.exe (PID: 9176)
- Unicorn-57114.exe (PID: 4228)
- Unicorn-5967.exe (PID: 4380)
Create files in a temporary directory
- Kawaii-Unicorn.exe.bin.exe (PID: 6512)
- Unicorn-5894.exe (PID: 2092)
- Unicorn-28671.exe (PID: 1012)
- Unicorn-37175.exe (PID: 4812)
- Unicorn-17161.exe (PID: 6264)
- Unicorn-36189.exe (PID: 3620)
- Unicorn-48510.exe (PID: 2192)
- Unicorn-41665.exe (PID: 4696)
- Unicorn-13599.exe (PID: 6468)
- Unicorn-38204.exe (PID: 6800)
- Unicorn-55095.exe (PID: 5600)
- Unicorn-1255.exe (PID: 6828)
- Unicorn-50631.exe (PID: 1168)
- Unicorn-12713.exe (PID: 4892)
- Unicorn-35826.exe (PID: 1072)
- Unicorn-20690.exe (PID: 1164)
- Unicorn-43803.exe (PID: 1676)
- Unicorn-39740.exe (PID: 1184)
- Unicorn-2526.exe (PID: 5360)
- Unicorn-55884.exe (PID: 1132)
- Unicorn-55884.exe (PID: 6540)
- Unicorn-28479.exe (PID: 4776)
- Unicorn-31279.exe (PID: 1116)
- Unicorn-990.exe (PID: 6660)
- Unicorn-48271.exe (PID: 3888)
- Unicorn-14249.exe (PID: 7048)
- Unicorn-12111.exe (PID: 6620)
- Unicorn-55090.exe (PID: 2084)
- Unicorn-16999.exe (PID: 3024)
- Unicorn-7927.exe (PID: 7208)
- Unicorn-5396.exe (PID: 7232)
- Unicorn-55645.exe (PID: 7188)
- Unicorn-19595.exe (PID: 7272)
- Unicorn-20563.exe (PID: 7292)
- Unicorn-31524.exe (PID: 7248)
- Unicorn-41660.exe (PID: 7320)
- Unicorn-7404.exe (PID: 7340)
- Unicorn-35438.exe (PID: 7356)
- Unicorn-42844.exe (PID: 7372)
- Unicorn-53720.exe (PID: 7404)
- Unicorn-51800.exe (PID: 720)
- Unicorn-53720.exe (PID: 7396)
- Unicorn-29527.exe (PID: 7500)
- Unicorn-39330.exe (PID: 7452)
- Unicorn-435.exe (PID: 7428)
- Unicorn-56434.exe (PID: 7476)
- Unicorn-30968.exe (PID: 7484)
- Unicorn-48074.exe (PID: 7588)
- Unicorn-23661.exe (PID: 7508)
- Unicorn-63019.exe (PID: 7608)
- Unicorn-43804.exe (PID: 7644)
- Unicorn-15786.exe (PID: 7664)
- Unicorn-819.exe (PID: 7628)
- Unicorn-34814.exe (PID: 7680)
- Unicorn-52542.exe (PID: 7740)
- Unicorn-3076.exe (PID: 7788)
- Unicorn-58664.exe (PID: 7768)
- Unicorn-51151.exe (PID: 7720)
- Unicorn-41420.exe (PID: 7820)
- Unicorn-14223.exe (PID: 7804)
- Unicorn-12085.exe (PID: 7840)
- Unicorn-802.exe (PID: 7860)
- Unicorn-40674.exe (PID: 7876)
- Unicorn-36133.exe (PID: 7936)
- Unicorn-15978.exe (PID: 7912)
- Unicorn-37144.exe (PID: 7896)
- Unicorn-41406.exe (PID: 7988)
- Unicorn-35738.exe (PID: 8012)
- Unicorn-13009.exe (PID: 8156)
- Unicorn-32151.exe (PID: 8180)
- Unicorn-31484.exe (PID: 8132)
- Unicorn-38836.exe (PID: 904)
- Unicorn-22930.exe (PID: 2384)
- Unicorn-52350.exe (PID: 7468)
- Unicorn-32484.exe (PID: 7460)
- Unicorn-56626.exe (PID: 7752)
- Unicorn-17478.exe (PID: 6424)
- Unicorn-39220.exe (PID: 5780)
- Unicorn-30306.exe (PID: 3956)
- Unicorn-12386.exe (PID: 8216)
- Unicorn-48588.exe (PID: 8232)
- Unicorn-50788.exe (PID: 8252)
- Unicorn-64431.exe (PID: 8304)
- Unicorn-42366.exe (PID: 8188)
- Unicorn-1909.exe (PID: 8340)
- Unicorn-19464.exe (PID: 7444)
- Unicorn-5993.exe (PID: 8372)
- Unicorn-42942.exe (PID: 8272)
- Unicorn-1909.exe (PID: 8348)
- Unicorn-64431.exe (PID: 8296)
- Unicorn-64431.exe (PID: 8288)
- Unicorn-49640.exe (PID: 8456)
- Unicorn-20960.exe (PID: 8476)
- Unicorn-61224.exe (PID: 8408)
- Unicorn-61224.exe (PID: 8400)
- Unicorn-62547.exe (PID: 8440)
- Unicorn-62547.exe (PID: 8448)
- Unicorn-26990.exe (PID: 8572)
- Unicorn-37064.exe (PID: 8536)
- Unicorn-55313.exe (PID: 8600)
- Unicorn-49448.exe (PID: 8592)
- Unicorn-13346.exe (PID: 8500)
- Unicorn-51394.exe (PID: 8656)
- Unicorn-60217.exe (PID: 8628)
- Unicorn-6953.exe (PID: 8720)
- Unicorn-36096.exe (PID: 8768)
- Unicorn-43710.exe (PID: 8748)
- Unicorn-44737.exe (PID: 7492)
- Unicorn-61992.exe (PID: 8800)
- Unicorn-28038.exe (PID: 7688)
- Unicorn-36526.exe (PID: 8792)
- Unicorn-65314.exe (PID: 8432)
- Unicorn-439.exe (PID: 8524)
- Unicorn-62568.exe (PID: 8860)
- Unicorn-62568.exe (PID: 8868)
- Unicorn-46.exe (PID: 8900)
- Unicorn-58292.exe (PID: 8964)
- Unicorn-3061.exe (PID: 8928)
- Unicorn-3061.exe (PID: 8932)
- Unicorn-25519.exe (PID: 8972)
- Unicorn-24804.exe (PID: 8992)
- Unicorn-31650.exe (PID: 8980)
- Unicorn-12360.exe (PID: 9060)
- Unicorn-26366.exe (PID: 8836)
- Unicorn-24058.exe (PID: 9044)
- Unicorn-38348.exe (PID: 9096)
- Unicorn-56730.exe (PID: 9120)
- Unicorn-24612.exe (PID: 9088)
- Unicorn-33907.exe (PID: 9140)
- Unicorn-10851.exe (PID: 9156)
- Unicorn-37440.exe (PID: 9176)
- Unicorn-61390.exe (PID: 9196)
- Unicorn-58275.exe (PID: 5740)
Creates files or folders in the user directory
- WerFault.exe (PID: 3888)
- WerFault.exe (PID: 2384)
Reads the software policy settings
- slui.exe (PID: 968)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .exe | | | Win32 Executable Microsoft Visual Basic 6 (90.6) |
|---|---|---|
| .exe | | | Win32 Executable (generic) (4.9) |
| .exe | | | Generic Win/DOS Executable (2.2) |
| .exe | | | DOS Executable Generic (2.2) |
EXIF
EXE
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2019:01:19 13:34:56+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 176128 |
| InitializedDataSize: | 299008 |
| UninitializedDataSize: | - |
| EntryPoint: | 0x13d4 |
| OSVersion: | 4 |
| ImageVersion: | 1 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 1.0.0.0 |
| ProductVersionNumber: | 1.0.0.0 |
| FileFlagsMask: | 0x003f |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | Chinese (Simplified) |
| CharacterSet: | Unicode |
| CompanyName: | UEFI |
| ProductName: | Kawaii-Unicorn |
| FileVersion: | 1 |
| ProductVersion: | 1 |
| InternalName: | Kawaii-Unicorn |
| OriginalFileName: | Kawaii-Unicorn.exe |
Total processes
780
Monitored processes
649
Malicious processes
90
Suspicious processes
31
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 720 | C:\Users\admin\AppData\Local\Temp\Unicorn-51800.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-51800.exe | Unicorn-1255.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 732 | C:\Users\admin\AppData\Local\Temp\Unicorn-53328.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-53328.exe | — | Unicorn-50631.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 776 | C:\Users\admin\AppData\Local\Temp\Unicorn-13065.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13065.exe | — | Unicorn-819.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 904 | C:\Users\admin\AppData\Local\Temp\Unicorn-38836.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-38836.exe | Unicorn-2526.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 960 | C:\Users\admin\AppData\Local\Temp\Unicorn-55632.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-55632.exe | — | Unicorn-56434.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 968 | "C:\WINDOWS\System32\SLUI.exe" RuleId=3482d82e-ca2c-4e1f-8864-da0267b484b2;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=TimerEvent | C:\Windows\System32\slui.exe | SppExtComObj.Exe | ||||||||||||
User: NETWORK SERVICE Company: Microsoft Corporation Integrity Level: SYSTEM Description: Windows Activation Client Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 1012 | C:\Users\admin\AppData\Local\Temp\Unicorn-28671.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-28671.exe | Kawaii-Unicorn.exe.bin.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1040 | C:\Users\admin\AppData\Local\Temp\Unicorn-43815.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-43815.exe | — | Unicorn-19464.exe | |||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1072 | C:\Users\admin\AppData\Local\Temp\Unicorn-35826.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-35826.exe | Unicorn-17161.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
| 1116 | C:\Users\admin\AppData\Local\Temp\Unicorn-31279.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-31279.exe | Unicorn-37175.exe | ||||||||||||
User: admin Company: UEFI Integrity Level: MEDIUM Version: 1.00 Modules
| |||||||||||||||
Total events
16 914
Read events
16 914
Write events
0
Delete events
0
Modification events
Executable files
2 099
Suspicious files
4
Text files
4
Unknown types
0
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 3888 | WerFault.exe | C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Unicorn-35535.ex_2630670b4f2c37c865ad86c19d4b7b08d4a28ba_891175ee_828a5fd5-fb75-43fc-831d-d8da4631df0f\Report.wer | — | |
MD5:— | SHA256:— | |||
| 6512 | Kawaii-Unicorn.exe.bin.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-37175.exe | executable | |
MD5:F9EC1966213187D227B9A106918B18D5 | SHA256:BB788877EC5929881D490536C62C2DF6B011ED7F8C69FAF269D11DF355C7F753 | |||
| 2092 | Unicorn-5894.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-17161.exe | executable | |
MD5:57BB50C29DF5417A945BD62790FC05B5 | SHA256:6B7CFED4B99626C60C55CF357135C743A4E83168B082A2284E77AEA2A12F44BC | |||
| 6512 | Kawaii-Unicorn.exe.bin.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-28671.exe | executable | |
MD5:3D10F34217B9B9BB715F6961DA99400D | SHA256:9BEC01FC68091EEAC9D99DF2B907AFE0455D2986E0F88B8904A6EFCD6EE2071E | |||
| 1012 | Unicorn-28671.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-5894.exe | executable | |
MD5:4B98E794215A672D0B55578349DA60FC | SHA256:FC2FD31B134CC97A3D9AA5F8FC21DD3691CBBBC2E3F310DF1066C85628DBA07E | |||
| 3620 | Unicorn-36189.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-38204.exe | executable | |
MD5:F596B7F251267498AB2FEA58BC95EC59 | SHA256:5C6D29A0EB62D31BADA4144B78DC6867C4C26D4625CB4EB211064945AD2E3698 | |||
| 3888 | WerFault.exe | C:\ProgramData\Microsoft\Windows\WER\Temp\WER4340.tmp.dmp | binary | |
MD5:7F12702EC0AA7F018FAD6453190AA8AB | SHA256:C134E544BAC59D4C7E74AE628F394F751A3605CD3168EF99F86C280EB65156C7 | |||
| 2192 | Unicorn-48510.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-12713.exe | executable | |
MD5:AC2E2179995070E8BEE6D3F424984BC1 | SHA256:3BF669EAEF4F15EEEE9D05540126500997D71C00816C45F26206E7FF6F09BDED | |||
| 4812 | Unicorn-37175.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-55095.exe | executable | |
MD5:6692B262DBDF05C399BAAEF8AEE7BA5E | SHA256:BEBF7674EF91949F03A6958CF56DC8C06E210B50FCAB2A59A3F248C665CA3DE2 | |||
| 1012 | Unicorn-28671.exe | C:\Users\admin\AppData\Local\Temp\Unicorn-13599.exe | executable | |
MD5:D1F79BC6539C6F19C1CD745376FF98CA | SHA256:DCD739660381648398E9A98A1022983E08009AC9FF2FF9EF4CA8CFD2FEBF9E94 | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
4
TCP/UDP connections
21
DNS requests
15
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
6544 | svchost.exe | GET | 200 | 184.30.131.245:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
5496 | MoUsoCoreWorker.exe | GET | 200 | 2.19.11.105:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
7020 | SIHClient.exe | GET | 200 | 95.101.149.131:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
7020 | SIHClient.exe | GET | 200 | 95.101.149.131:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 20.73.194.208:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | NL | whitelisted |
5496 | MoUsoCoreWorker.exe | 2.19.11.105:80 | crl.microsoft.com | Elisa Oyj | NL | whitelisted |
3216 | svchost.exe | 172.211.123.249:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | FR | whitelisted |
6544 | svchost.exe | 20.190.159.64:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 184.30.131.245:80 | ocsp.digicert.com | AKAMAI-AS | US | whitelisted |
4996 | RUXIMICS.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
7012 | svchost.exe | 40.127.240.158:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
7020 | SIHClient.exe | 52.149.20.212:443 | slscr.update.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | US | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
fe3cr.delivery.mp.microsoft.com |
| whitelisted |
nexusrules.officeapps.live.com |
| whitelisted |