File f4f50670f01c9aa1_unicorn-51013.exe

Size 184.0KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 97402b82af0a2fb6186105b66e7b7f7c
SHA1 98280574d996a07afa7b3def27994aa561f4e623
SHA256 f4f50670f01c9aa1cc9abca31124aca892d87937e8e4833906e7de8ee59fab29
SHA512
c55304b4d073370125ced2ef1cd0d170358bb54e13739e65b28cac209af48e9dcffd67c257005670479b9673c69097acb0b2564976928b277d6af479b4ed4b0e
CRC32 3A97B56D
ssdeep None
Yara
  • SEH__vba - (no description)

Score

This file is very suspicious, with a score of 10.0 out of 10!

Please notice: The scoring system is currently still in development and should be considered an alpha feature.


Autosubmit

Parent_Task_ID:6585850

Feedback

Expecting different results? Send us this analysis and we will inspect it. Click here

Information on Execution

Analysis
Category Started Completed Duration Routing Logs
FILE July 2, 2025, 12:09 p.m. July 2, 2025, 12:17 p.m. 460 seconds internet Show Analyzer Log
Show Cuckoo Log

Analyzer Log

2025-06-24 21:26:53,015 [analyzer] DEBUG: Starting analyzer from: C:\tmp4nivwu
2025-06-24 21:26:53,030 [analyzer] DEBUG: Pipe server name: \??\PIPE\FnYQpQLPQybLEvYzyDzwxcUjG
2025-06-24 21:26:53,030 [analyzer] DEBUG: Log pipe server name: \??\PIPE\uZtwWPIIUJpuwSyofNv
2025-06-24 21:26:53,030 [analyzer] DEBUG: No analysis package specified, trying to detect it automagically.
2025-06-24 21:26:53,046 [analyzer] INFO: Automatically selected analysis package "exe"
2025-06-24 21:26:53,358 [analyzer] DEBUG: Started auxiliary module Curtain
2025-06-24 21:26:53,358 [analyzer] DEBUG: Started auxiliary module DbgView
2025-06-24 21:26:53,842 [analyzer] DEBUG: Started auxiliary module Disguise
2025-06-24 21:26:54,062 [analyzer] DEBUG: Loaded monitor into process with pid 508
2025-06-24 21:26:54,062 [analyzer] DEBUG: Started auxiliary module DumpTLSMasterSecrets
2025-06-24 21:26:54,062 [analyzer] DEBUG: Started auxiliary module Human
2025-06-24 21:26:54,062 [analyzer] DEBUG: Started auxiliary module InstallCertificate
2025-06-24 21:26:54,062 [analyzer] DEBUG: Started auxiliary module Reboot
2025-06-24 21:26:54,140 [analyzer] DEBUG: Started auxiliary module RecentFiles
2025-06-24 21:26:54,155 [analyzer] DEBUG: Started auxiliary module Screenshots
2025-06-24 21:26:54,155 [analyzer] DEBUG: Started auxiliary module Sysmon
2025-06-24 21:26:54,155 [analyzer] DEBUG: Started auxiliary module LoadZer0m0n
2025-06-24 21:26:54,265 [lib.api.process] INFO: Successfully executed process from path u'C:\\Users\\ADMINI~1\\AppData\\Local\\Temp\\f4f50670f01c9aa1_unicorn-51013.exe' with arguments '' and pid 2244
2025-06-24 21:26:54,483 [analyzer] DEBUG: Loaded monitor into process with pid 2244
2025-06-24 21:26:57,608 [analyzer] INFO: Added new file to list with pid 2244 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51981.exe
2025-06-24 21:26:57,703 [analyzer] INFO: Injected into process with pid 2860 and name u'Unicorn-51981.exe'
2025-06-24 21:26:57,875 [analyzer] DEBUG: Loaded monitor into process with pid 2860
2025-06-24 21:27:00,983 [analyzer] INFO: Added new file to list with pid 2860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44493.exe
2025-06-24 21:27:01,015 [analyzer] INFO: Added new file to list with pid 2244 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10211.exe
2025-06-24 21:27:01,140 [analyzer] INFO: Injected into process with pid 700 and name u'Unicorn-44493.exe'
2025-06-24 21:27:01,140 [analyzer] INFO: Injected into process with pid 2280 and name u'Unicorn-10211.exe'
2025-06-24 21:27:01,312 [analyzer] DEBUG: Loaded monitor into process with pid 700
2025-06-24 21:27:01,312 [analyzer] DEBUG: Loaded monitor into process with pid 2280
2025-06-24 21:27:04,500 [analyzer] INFO: Added new file to list with pid 2280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39117.exe
2025-06-24 21:27:04,500 [analyzer] INFO: Added new file to list with pid 700 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39117.exe
2025-06-24 21:27:04,515 [analyzer] INFO: Added new file to list with pid 2244 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15498.exe
2025-06-24 21:27:04,515 [analyzer] INFO: Added new file to list with pid 2860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1763.exe
2025-06-24 21:27:04,640 [analyzer] INFO: Injected into process with pid 2488 and name u'Unicorn-15498.exe'
2025-06-24 21:27:04,640 [analyzer] INFO: Injected into process with pid 128 and name u'Unicorn-39117.exe'
2025-06-24 21:27:04,640 [analyzer] INFO: Injected into process with pid 1812 and name u'Unicorn-1763.exe'
2025-06-24 21:27:04,828 [analyzer] DEBUG: Loaded monitor into process with pid 128
2025-06-24 21:27:04,842 [analyzer] DEBUG: Loaded monitor into process with pid 1812
2025-06-24 21:27:04,905 [analyzer] DEBUG: Loaded monitor into process with pid 2488
2025-06-24 21:27:07,515 [analyzer] INFO: Added new file to list with pid 2280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6371.exe
2025-06-24 21:27:07,592 [analyzer] INFO: Injected into process with pid 2008 and name u'Unicorn-6371.exe'
2025-06-24 21:27:07,765 [analyzer] DEBUG: Loaded monitor into process with pid 2008
2025-06-24 21:27:08,046 [analyzer] INFO: Added new file to list with pid 1812 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-65453.exe
2025-06-24 21:27:08,092 [analyzer] INFO: Added new file to list with pid 2860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34818.exe
2025-06-24 21:27:08,140 [analyzer] INFO: Added new file to list with pid 128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16061.exe
2025-06-24 21:27:08,155 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7892.exe
2025-06-24 21:27:08,155 [analyzer] INFO: Injected into process with pid 2284 and name u'Unicorn-65453.exe'
2025-06-24 21:27:08,155 [analyzer] INFO: Added new file to list with pid 700 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53564.exe
2025-06-24 21:27:08,171 [analyzer] INFO: Added new file to list with pid 2244 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64996.exe
2025-06-24 21:27:08,328 [analyzer] INFO: Injected into process with pid 348 and name u'Unicorn-34818.exe'
2025-06-24 21:27:08,328 [analyzer] INFO: Injected into process with pid 1816 and name u'Unicorn-16061.exe'
2025-06-24 21:27:08,328 [analyzer] INFO: Injected into process with pid 2012 and name u'Unicorn-64996.exe'
2025-06-24 21:27:08,375 [analyzer] DEBUG: Loaded monitor into process with pid 2284
2025-06-24 21:27:08,375 [analyzer] INFO: Injected into process with pid 296 and name u'Unicorn-53564.exe'
2025-06-24 21:27:08,375 [analyzer] INFO: Injected into process with pid 588 and name u'Unicorn-7892.exe'
2025-06-24 21:27:08,515 [analyzer] DEBUG: Loaded monitor into process with pid 2012
2025-06-24 21:27:08,515 [analyzer] DEBUG: Loaded monitor into process with pid 1816
2025-06-24 21:27:08,546 [analyzer] DEBUG: Loaded monitor into process with pid 296
2025-06-24 21:27:08,608 [analyzer] DEBUG: Loaded monitor into process with pid 588
2025-06-24 21:27:08,655 [analyzer] DEBUG: Loaded monitor into process with pid 348
2025-06-24 21:27:10,890 [analyzer] INFO: Added new file to list with pid 2008 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18749.exe
2025-06-24 21:27:10,921 [analyzer] INFO: Added new file to list with pid 2280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61819.exe
2025-06-24 21:27:10,983 [analyzer] INFO: Injected into process with pid 2792 and name u'Unicorn-18749.exe'
2025-06-24 21:27:11,015 [analyzer] INFO: Injected into process with pid 1580 and name u'Unicorn-61819.exe'
2025-06-24 21:27:11,155 [analyzer] DEBUG: Loaded monitor into process with pid 2792
2025-06-24 21:27:11,155 [analyzer] DEBUG: Loaded monitor into process with pid 1580
2025-06-24 21:27:11,530 [analyzer] INFO: Added new file to list with pid 2284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11924.exe
2025-06-24 21:27:11,608 [analyzer] INFO: Injected into process with pid 2852 and name u'Unicorn-11924.exe'
2025-06-24 21:27:11,625 [analyzer] INFO: Added new file to list with pid 1812 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8203.exe
2025-06-24 21:27:11,703 [analyzer] INFO: Injected into process with pid 2872 and name u'Unicorn-8203.exe'
2025-06-24 21:27:11,780 [analyzer] DEBUG: Loaded monitor into process with pid 2852
2025-06-24 21:27:11,858 [analyzer] DEBUG: Loaded monitor into process with pid 2872
2025-06-24 21:27:11,875 [analyzer] INFO: Added new file to list with pid 1816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28453.exe
2025-06-24 21:27:11,905 [analyzer] INFO: Added new file to list with pid 296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12116.exe
2025-06-24 21:27:11,937 [analyzer] INFO: Added new file to list with pid 128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49620.exe
2025-06-24 21:27:11,937 [analyzer] INFO: Added new file to list with pid 588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61317.exe
2025-06-24 21:27:11,937 [analyzer] INFO: Added new file to list with pid 2012 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61317.exe
2025-06-24 21:27:12,000 [analyzer] INFO: Added new file to list with pid 700 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30682.exe
2025-06-24 21:27:12,000 [analyzer] INFO: Added new file to list with pid 2244 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27882.exe
2025-06-24 21:27:12,000 [analyzer] INFO: Added new file to list with pid 348 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36813.exe
2025-06-24 21:27:12,000 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16947.exe
2025-06-24 21:27:12,046 [analyzer] INFO: Added new file to list with pid 2860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1675.exe
2025-06-24 21:27:12,092 [analyzer] INFO: Injected into process with pid 1988 and name u'Unicorn-12116.exe'
2025-06-24 21:27:12,092 [analyzer] INFO: Injected into process with pid 2524 and name u'Unicorn-28453.exe'
2025-06-24 21:27:12,187 [analyzer] INFO: Injected into process with pid 3108 and name u'Unicorn-61317.exe'
2025-06-24 21:27:12,187 [analyzer] INFO: Injected into process with pid 3084 and name u'Unicorn-49620.exe'
2025-06-24 21:27:12,203 [analyzer] INFO: Injected into process with pid 3144 and name u'Unicorn-27882.exe'
2025-06-24 21:27:12,233 [analyzer] INFO: Injected into process with pid 3160 and name u'Unicorn-36813.exe'
2025-06-24 21:27:12,233 [analyzer] INFO: Injected into process with pid 3168 and name u'Unicorn-16947.exe'
2025-06-24 21:27:12,233 [analyzer] INFO: Injected into process with pid 3128 and name u'Unicorn-30682.exe'
2025-06-24 21:27:12,250 [analyzer] INFO: Injected into process with pid 3180 and name u'Unicorn-1675.exe'
2025-06-24 21:27:12,312 [analyzer] DEBUG: Loaded monitor into process with pid 1988
2025-06-24 21:27:12,358 [analyzer] DEBUG: Loaded monitor into process with pid 2524
2025-06-24 21:27:12,390 [analyzer] DEBUG: Loaded monitor into process with pid 3084
2025-06-24 21:27:12,390 [analyzer] DEBUG: Loaded monitor into process with pid 3108
2025-06-24 21:27:12,405 [analyzer] DEBUG: Loaded monitor into process with pid 3168
2025-06-24 21:27:12,421 [analyzer] DEBUG: Loaded monitor into process with pid 3180
2025-06-24 21:27:12,421 [analyzer] DEBUG: Loaded monitor into process with pid 3128
2025-06-24 21:27:12,467 [analyzer] DEBUG: Loaded monitor into process with pid 3144
2025-06-24 21:27:12,546 [analyzer] DEBUG: Loaded monitor into process with pid 3160
2025-06-24 21:27:14,328 [analyzer] INFO: Added new file to list with pid 2792 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46429.exe
2025-06-24 21:27:14,328 [analyzer] INFO: Added new file to list with pid 1580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46429.exe
2025-06-24 21:27:14,342 [analyzer] INFO: Added new file to list with pid 2008 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18395.exe
2025-06-24 21:27:14,358 [analyzer] INFO: Added new file to list with pid 2280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29828.exe
2025-06-24 21:27:14,437 [analyzer] INFO: Injected into process with pid 3440 and name u'Unicorn-46429.exe'
2025-06-24 21:27:14,453 [analyzer] INFO: Injected into process with pid 3448 and name u'Unicorn-46429.exe'
2025-06-24 21:27:14,467 [analyzer] INFO: Injected into process with pid 3456 and name u'Unicorn-18395.exe'
2025-06-24 21:27:14,467 [analyzer] INFO: Injected into process with pid 3500 and name u'Unicorn-29828.exe'
2025-06-24 21:27:14,608 [analyzer] DEBUG: Loaded monitor into process with pid 3440
2025-06-24 21:27:14,640 [analyzer] DEBUG: Loaded monitor into process with pid 3456
2025-06-24 21:27:14,640 [analyzer] DEBUG: Loaded monitor into process with pid 3448
2025-06-24 21:27:14,703 [analyzer] DEBUG: Loaded monitor into process with pid 3500
2025-06-24 21:27:14,953 [analyzer] INFO: Added new file to list with pid 588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25603.exe
2025-06-24 21:27:14,967 [analyzer] INFO: Added new file to list with pid 2852 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45469.exe
2025-06-24 21:27:15,015 [analyzer] INFO: Added new file to list with pid 2284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3019.exe
2025-06-24 21:27:15,046 [analyzer] INFO: Added new file to list with pid 2872 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63917.exe
2025-06-24 21:27:15,125 [analyzer] INFO: Injected into process with pid 3624 and name u'Unicorn-45469.exe'
2025-06-24 21:27:15,140 [analyzer] INFO: Added new file to list with pid 1812 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8394.exe
2025-06-24 21:27:15,155 [analyzer] INFO: Injected into process with pid 3616 and name u'Unicorn-25603.exe'
2025-06-24 21:27:15,155 [analyzer] INFO: Injected into process with pid 3668 and name u'Unicorn-63917.exe'
2025-06-24 21:27:15,171 [analyzer] INFO: Injected into process with pid 3656 and name u'Unicorn-3019.exe'
2025-06-24 21:27:15,217 [analyzer] INFO: Injected into process with pid 3756 and name u'Unicorn-8394.exe'
2025-06-24 21:27:15,296 [analyzer] DEBUG: Loaded monitor into process with pid 3624
2025-06-24 21:27:15,312 [analyzer] DEBUG: Loaded monitor into process with pid 3668
2025-06-24 21:27:15,328 [analyzer] DEBUG: Loaded monitor into process with pid 3616
2025-06-24 21:27:15,342 [analyzer] DEBUG: Loaded monitor into process with pid 3656
2025-06-24 21:27:15,405 [analyzer] DEBUG: Loaded monitor into process with pid 3756
2025-06-24 21:27:15,796 [analyzer] INFO: Added new file to list with pid 2524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63533.exe
2025-06-24 21:27:15,828 [analyzer] INFO: Added new file to list with pid 3168 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47197.exe
2025-06-24 21:27:15,858 [analyzer] INFO: Added new file to list with pid 1988 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30861.exe
2025-06-24 21:27:15,875 [analyzer] INFO: Added new file to list with pid 3108 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22309.exe
2025-06-24 21:27:15,905 [analyzer] INFO: Injected into process with pid 3836 and name u'Unicorn-63533.exe'
2025-06-24 21:27:15,921 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57211.exe
2025-06-24 21:27:15,921 [analyzer] INFO: Added new file to list with pid 1816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43475.exe
2025-06-24 21:27:15,953 [analyzer] INFO: Injected into process with pid 3860 and name u'Unicorn-47197.exe'
2025-06-24 21:27:15,953 [analyzer] INFO: Added new file to list with pid 2012 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27139.exe
2025-06-24 21:27:15,967 [analyzer] INFO: Added new file to list with pid 3144 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38837.exe
2025-06-24 21:27:15,983 [analyzer] INFO: Added new file to list with pid 3180 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30669.exe
2025-06-24 21:27:15,983 [analyzer] INFO: Added new file to list with pid 2012 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10803.exe
2025-06-24 21:27:16,062 [analyzer] INFO: Added new file to list with pid 2860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44235.exe
2025-06-24 21:27:16,062 [analyzer] INFO: Added new file to list with pid 2244 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27699.exe
2025-06-24 21:27:16,062 [analyzer] INFO: Injected into process with pid 3892 and name u'Unicorn-30861.exe'
2025-06-24 21:27:16,092 [analyzer] INFO: Added new file to list with pid 3084 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36829.exe
2025-06-24 21:27:16,092 [analyzer] INFO: Injected into process with pid 3900 and name u'Unicorn-22309.exe'
2025-06-24 21:27:16,108 [analyzer] DEBUG: Loaded monitor into process with pid 3836
2025-06-24 21:27:16,108 [analyzer] INFO: Injected into process with pid 3964 and name u'Unicorn-57211.exe'
2025-06-24 21:27:16,125 [analyzer] INFO: Added new file to list with pid 3128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20493.exe
2025-06-24 21:27:16,125 [analyzer] INFO: Injected into process with pid 3956 and name u'Unicorn-43475.exe'
2025-06-24 21:27:16,125 [analyzer] INFO: Added new file to list with pid 128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5810.exe
2025-06-24 21:27:16,155 [analyzer] INFO: Added new file to list with pid 3160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3772.exe
2025-06-24 21:27:16,140 [analyzer] INFO: Added new file to list with pid 700 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3507.exe
2025-06-24 21:27:16,171 [analyzer] INFO: Added new file to list with pid 348 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33107.exe
2025-06-24 21:27:16,171 [analyzer] DEBUG: Loaded monitor into process with pid 3860
2025-06-24 21:27:16,203 [analyzer] INFO: Injected into process with pid 4000 and name u'Unicorn-27139.exe'
2025-06-24 21:27:16,250 [analyzer] INFO: Injected into process with pid 4016 and name u'Unicorn-38837.exe'
2025-06-24 21:27:16,265 [analyzer] INFO: Injected into process with pid 4056 and name u'Unicorn-30669.exe'
2025-06-24 21:27:16,296 [analyzer] INFO: Injected into process with pid 4092 and name u'Unicorn-10803.exe'
2025-06-24 21:27:16,342 [analyzer] INFO: Injected into process with pid 3156 and name u'Unicorn-44235.exe'
2025-06-24 21:27:16,358 [analyzer] DEBUG: Loaded monitor into process with pid 3892
2025-06-24 21:27:16,375 [analyzer] DEBUG: Loaded monitor into process with pid 3900
2025-06-24 21:27:16,375 [analyzer] INFO: Injected into process with pid 3256 and name u'Unicorn-27699.exe'
2025-06-24 21:27:16,437 [analyzer] INFO: Injected into process with pid 3260 and name u'Unicorn-36829.exe'
2025-06-24 21:27:16,453 [analyzer] DEBUG: Loaded monitor into process with pid 3964
2025-06-24 21:27:16,483 [analyzer] INFO: Injected into process with pid 3468 and name u'Unicorn-20493.exe'
2025-06-24 21:27:16,500 [analyzer] DEBUG: Loaded monitor into process with pid 3956
2025-06-24 21:27:16,546 [analyzer] INFO: Injected into process with pid 3532 and name u'Unicorn-5810.exe'
2025-06-24 21:27:16,625 [analyzer] INFO: Injected into process with pid 3652 and name u'Unicorn-3507.exe'
2025-06-24 21:27:16,655 [analyzer] INFO: Injected into process with pid 3576 and name u'Unicorn-3772.exe'
2025-06-24 21:27:16,640 [analyzer] DEBUG: Loaded monitor into process with pid 4016
2025-06-24 21:27:16,687 [analyzer] DEBUG: Loaded monitor into process with pid 4092
2025-06-24 21:27:16,717 [analyzer] INFO: Injected into process with pid 3688 and name u'Unicorn-33107.exe'
2025-06-24 21:27:16,780 [analyzer] DEBUG: Loaded monitor into process with pid 3156
2025-06-24 21:27:16,796 [analyzer] DEBUG: Loaded monitor into process with pid 3256
2025-06-24 21:27:16,828 [analyzer] DEBUG: Loaded monitor into process with pid 4000
2025-06-24 21:27:16,842 [analyzer] DEBUG: Loaded monitor into process with pid 3468
2025-06-24 21:27:16,858 [analyzer] DEBUG: Loaded monitor into process with pid 4056
2025-06-24 21:27:16,890 [analyzer] DEBUG: Loaded monitor into process with pid 3576
2025-06-24 21:27:16,905 [analyzer] DEBUG: Loaded monitor into process with pid 3532
2025-06-24 21:27:16,921 [analyzer] DEBUG: Loaded monitor into process with pid 3652
2025-06-24 21:27:16,953 [analyzer] DEBUG: Loaded monitor into process with pid 3688
2025-06-24 21:27:17,000 [analyzer] DEBUG: Loaded monitor into process with pid 3260
2025-06-24 21:27:17,953 [analyzer] INFO: Added new file to list with pid 3440 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-37789.exe
2025-06-24 21:27:18,030 [analyzer] INFO: Added new file to list with pid 3448 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7036.exe
2025-06-24 21:27:18,046 [analyzer] INFO: Added new file to list with pid 1580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44540.exe
2025-06-24 21:27:18,062 [analyzer] INFO: Added new file to list with pid 2792 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36371.exe
2025-06-24 21:27:18,062 [analyzer] INFO: Added new file to list with pid 3500 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56237.exe
2025-06-24 21:27:18,078 [analyzer] INFO: Added new file to list with pid 3456 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48069.exe
2025-06-24 21:27:18,125 [analyzer] INFO: Added new file to list with pid 2008 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17434.exe
2025-06-24 21:27:18,125 [analyzer] INFO: Added new file to list with pid 2280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6082.exe
2025-06-24 21:27:18,312 [analyzer] INFO: Injected into process with pid 3208 and name u'Unicorn-37789.exe'
2025-06-24 21:27:18,467 [analyzer] INFO: Injected into process with pid 3360 and name u'Unicorn-7036.exe'
2025-06-24 21:27:18,467 [analyzer] INFO: Injected into process with pid 3316 and name u'Unicorn-44540.exe'
2025-06-24 21:27:18,500 [analyzer] INFO: Injected into process with pid 3284 and name u'Unicorn-36371.exe'
2025-06-24 21:27:18,500 [analyzer] INFO: Injected into process with pid 3556 and name u'Unicorn-56237.exe'
2025-06-24 21:27:18,530 [analyzer] INFO: Injected into process with pid 3684 and name u'Unicorn-48069.exe'
2025-06-24 21:27:18,530 [analyzer] INFO: Injected into process with pid 3804 and name u'Unicorn-17434.exe'
2025-06-24 21:27:18,562 [analyzer] INFO: Injected into process with pid 3772 and name u'Unicorn-6082.exe'
2025-06-24 21:27:18,562 [analyzer] DEBUG: Loaded monitor into process with pid 3208
2025-06-24 21:27:18,578 [analyzer] INFO: Added new file to list with pid 3616 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47301.exe
2025-06-24 21:27:18,625 [analyzer] INFO: Added new file to list with pid 588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16666.exe
2025-06-24 21:27:18,625 [analyzer] INFO: Added new file to list with pid 3656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22797.exe
2025-06-24 21:27:18,655 [analyzer] INFO: Added new file to list with pid 3624 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14244.exe
2025-06-24 21:27:18,717 [analyzer] INFO: Added new file to list with pid 2284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40979.exe
2025-06-24 21:27:18,733 [analyzer] INFO: Added new file to list with pid 3668 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47109.exe
2025-06-24 21:27:18,750 [analyzer] INFO: Added new file to list with pid 2852 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10907.exe
2025-06-24 21:27:18,750 [analyzer] INFO: Added new file to list with pid 2872 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2739.exe
2025-06-24 21:27:18,750 [analyzer] INFO: Added new file to list with pid 3756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22605.exe
2025-06-24 21:27:18,733 [analyzer] DEBUG: Loaded monitor into process with pid 3316
2025-06-24 21:27:18,780 [analyzer] INFO: Added new file to list with pid 1812 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6387.exe
2025-06-24 21:27:18,780 [analyzer] DEBUG: Loaded monitor into process with pid 3360
2025-06-24 21:27:18,875 [analyzer] DEBUG: Loaded monitor into process with pid 3684
2025-06-24 21:27:18,953 [analyzer] DEBUG: Loaded monitor into process with pid 3772
2025-06-24 21:27:18,983 [analyzer] DEBUG: Loaded monitor into process with pid 3556
2025-06-24 21:27:19,030 [analyzer] INFO: Injected into process with pid 3856 and name u'Unicorn-47301.exe'
2025-06-24 21:27:19,062 [analyzer] DEBUG: Loaded monitor into process with pid 3804
2025-06-24 21:27:19,092 [analyzer] DEBUG: Loaded monitor into process with pid 3284
2025-06-24 21:27:19,155 [analyzer] INFO: Injected into process with pid 3296 and name u'Unicorn-16666.exe'
2025-06-24 21:27:19,250 [analyzer] INFO: Injected into process with pid 3776 and name u'Unicorn-22797.exe'
2025-06-24 21:27:19,265 [analyzer] INFO: Injected into process with pid 4152 and name u'Unicorn-40979.exe'
2025-06-24 21:27:19,280 [analyzer] INFO: Injected into process with pid 4204 and name u'Unicorn-10907.exe'
2025-06-24 21:27:19,296 [analyzer] INFO: Injected into process with pid 4132 and name u'Unicorn-14244.exe'
2025-06-24 21:27:19,328 [analyzer] INFO: Injected into process with pid 4188 and name u'Unicorn-47109.exe'
2025-06-24 21:27:19,358 [analyzer] INFO: Injected into process with pid 4272 and name u'Unicorn-22605.exe'
2025-06-24 21:27:19,375 [analyzer] INFO: Injected into process with pid 4332 and name u'Unicorn-6387.exe'
2025-06-24 21:27:19,390 [analyzer] INFO: Injected into process with pid 4228 and name u'Unicorn-2739.exe'
2025-06-24 21:27:19,405 [analyzer] INFO: Added new file to list with pid 3836 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8764.exe
2025-06-24 21:27:19,467 [analyzer] INFO: Added new file to list with pid 2524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21763.exe
2025-06-24 21:27:19,515 [analyzer] DEBUG: Loaded monitor into process with pid 3296
2025-06-24 21:27:19,592 [analyzer] DEBUG: Loaded monitor into process with pid 3856
2025-06-24 21:27:19,608 [analyzer] DEBUG: Loaded monitor into process with pid 4272
2025-06-24 21:27:19,655 [analyzer] INFO: Added new file to list with pid 3860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24333.exe
2025-06-24 21:27:19,655 [analyzer] DEBUG: Loaded monitor into process with pid 4132
2025-06-24 21:27:19,671 [analyzer] DEBUG: Loaded monitor into process with pid 4204
2025-06-24 21:27:19,703 [analyzer] DEBUG: Loaded monitor into process with pid 4152
2025-06-24 21:27:19,703 [analyzer] INFO: Injected into process with pid 4516 and name u'Unicorn-21763.exe'
2025-06-24 21:27:19,703 [analyzer] INFO: Injected into process with pid 4488 and name u'Unicorn-8764.exe'
2025-06-24 21:27:19,703 [analyzer] DEBUG: Loaded monitor into process with pid 3776
2025-06-24 21:27:19,812 [analyzer] INFO: Added new file to list with pid 3168 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53860.exe
2025-06-24 21:27:19,828 [analyzer] DEBUG: Loaded monitor into process with pid 4228
2025-06-24 21:27:19,921 [analyzer] DEBUG: Loaded monitor into process with pid 4188
2025-06-24 21:27:19,983 [analyzer] DEBUG: Loaded monitor into process with pid 4332
2025-06-24 21:27:20,030 [analyzer] INFO: Injected into process with pid 4612 and name u'Unicorn-24333.exe'
2025-06-24 21:27:20,046 [analyzer] INFO: Injected into process with pid 4640 and name u'Unicorn-53860.exe'
2025-06-24 21:27:20,062 [analyzer] DEBUG: Loaded monitor into process with pid 4516
2025-06-24 21:27:20,092 [analyzer] DEBUG: Loaded monitor into process with pid 4488
2025-06-24 21:27:20,233 [analyzer] DEBUG: Loaded monitor into process with pid 4640
2025-06-24 21:27:20,233 [analyzer] DEBUG: Loaded monitor into process with pid 4612
2025-06-24 21:27:20,905 [analyzer] INFO: Added new file to list with pid 3156 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54613.exe
2025-06-24 21:27:21,000 [analyzer] INFO: Added new file to list with pid 2860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53844.exe
2025-06-24 21:27:21,140 [analyzer] INFO: Injected into process with pid 4732 and name u'Unicorn-54613.exe'
2025-06-24 21:27:21,217 [analyzer] INFO: Added new file to list with pid 3892 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32029.exe
2025-06-24 21:27:21,217 [analyzer] INFO: Injected into process with pid 4756 and name u'Unicorn-53844.exe'
2025-06-24 21:27:21,328 [analyzer] INFO: Added new file to list with pid 4092 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40773.exe
2025-06-24 21:27:21,342 [analyzer] DEBUG: Loaded monitor into process with pid 4732
2025-06-24 21:27:21,358 [analyzer] INFO: Added new file to list with pid 3468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32605.exe
2025-06-24 21:27:21,421 [analyzer] INFO: Injected into process with pid 4808 and name u'Unicorn-32029.exe'
2025-06-24 21:27:21,421 [analyzer] INFO: Added new file to list with pid 3532 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48749.exe
2025-06-24 21:27:21,437 [analyzer] DEBUG: Loaded monitor into process with pid 4756
2025-06-24 21:27:21,453 [analyzer] INFO: Added new file to list with pid 1988 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20715.exe
2025-06-24 21:27:21,530 [analyzer] INFO: Injected into process with pid 4868 and name u'Unicorn-32605.exe'
2025-06-24 21:27:21,578 [analyzer] INFO: Added new file to list with pid 4056 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47789.exe
2025-06-24 21:27:21,578 [analyzer] INFO: Injected into process with pid 4840 and name u'Unicorn-40773.exe'
2025-06-24 21:27:21,592 [analyzer] INFO: Added new file to list with pid 296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25322.exe
2025-06-24 21:27:21,592 [analyzer] INFO: Added new file to list with pid 3128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3419.exe
2025-06-24 21:27:21,608 [analyzer] INFO: Added new file to list with pid 3256 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31453.exe
2025-06-24 21:27:21,625 [analyzer] DEBUG: Loaded monitor into process with pid 4808
2025-06-24 21:27:21,655 [analyzer] INFO: Added new file to list with pid 3576 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55765.exe
2025-06-24 21:27:21,717 [analyzer] INFO: Added new file to list with pid 128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30996.exe
2025-06-24 21:27:21,717 [analyzer] INFO: Added new file to list with pid 3180 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11395.exe
2025-06-24 21:27:21,733 [analyzer] INFO: Injected into process with pid 4904 and name u'Unicorn-48749.exe'
2025-06-24 21:27:21,812 [analyzer] INFO: Injected into process with pid 4924 and name u'Unicorn-20715.exe'
2025-06-24 21:27:21,842 [analyzer] DEBUG: Loaded monitor into process with pid 4868
2025-06-24 21:27:21,890 [analyzer] INFO: Added new file to list with pid 3160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52620.exe
2025-06-24 21:27:21,890 [analyzer] INFO: Injected into process with pid 5000 and name u'Unicorn-47789.exe'
2025-06-24 21:27:21,905 [analyzer] DEBUG: Loaded monitor into process with pid 4840
2025-06-24 21:27:21,921 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56149.exe
2025-06-24 21:27:21,937 [analyzer] INFO: Added new file to list with pid 2244 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47749.exe
2025-06-24 21:27:21,937 [analyzer] INFO: Added new file to list with pid 3956 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56149.exe
2025-06-24 21:27:21,937 [analyzer] INFO: Injected into process with pid 5036 and name u'Unicorn-3419.exe'
2025-06-24 21:27:21,937 [analyzer] INFO: Injected into process with pid 5008 and name u'Unicorn-25322.exe'
2025-06-24 21:27:21,953 [analyzer] INFO: Injected into process with pid 5104 and name u'Unicorn-55765.exe'
2025-06-24 21:27:21,953 [analyzer] INFO: Injected into process with pid 5028 and name u'Unicorn-31453.exe'
2025-06-24 21:27:21,967 [analyzer] DEBUG: Loaded monitor into process with pid 4904
2025-06-24 21:27:22,046 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23477.exe
2025-06-24 21:27:22,046 [analyzer] DEBUG: Loaded monitor into process with pid 4924
2025-06-24 21:27:22,062 [analyzer] INFO: Added new file to list with pid 4000 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23477.exe
2025-06-24 21:27:22,108 [analyzer] INFO: Injected into process with pid 4112 and name u'Unicorn-11395.exe'
2025-06-24 21:27:22,108 [analyzer] INFO: Added new file to list with pid 3260 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33757.exe
2025-06-24 21:27:22,108 [analyzer] INFO: Added new file to list with pid 3900 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33757.exe
2025-06-24 21:27:22,108 [analyzer] INFO: Injected into process with pid 4124 and name u'Unicorn-30996.exe'
2025-06-24 21:27:22,140 [analyzer] DEBUG: Loaded monitor into process with pid 5000
2025-06-24 21:27:22,265 [analyzer] INFO: Added new file to list with pid 3652 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58069.exe
2025-06-24 21:27:22,265 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57804.exe
2025-06-24 21:27:22,265 [analyzer] INFO: Added new file to list with pid 3688 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25397.exe
2025-06-24 21:27:22,280 [analyzer] INFO: Injected into process with pid 4368 and name u'Unicorn-52620.exe'
2025-06-24 21:27:22,296 [analyzer] DEBUG: Loaded monitor into process with pid 5008
2025-06-24 21:27:22,312 [analyzer] INFO: Added new file to list with pid 3144 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38779.exe
2025-06-24 21:27:22,342 [analyzer] DEBUG: Loaded monitor into process with pid 5104
2025-06-24 21:27:22,405 [analyzer] INFO: Added new file to list with pid 1816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28010.exe
2025-06-24 21:27:22,405 [analyzer] INFO: Added new file to list with pid 2012 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3122.exe
2025-06-24 21:27:22,405 [analyzer] DEBUG: Loaded monitor into process with pid 5036
2025-06-24 21:27:22,453 [analyzer] DEBUG: Loaded monitor into process with pid 4112
2025-06-24 21:27:22,515 [analyzer] INFO: Added new file to list with pid 3108 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63284.exe
2025-06-24 21:27:22,515 [analyzer] DEBUG: Loaded monitor into process with pid 5028
2025-06-24 21:27:22,530 [analyzer] INFO: Injected into process with pid 4464 and name u'Unicorn-47749.exe'
2025-06-24 21:27:22,546 [analyzer] INFO: Injected into process with pid 4512 and name u'Unicorn-56149.exe'
2025-06-24 21:27:22,562 [analyzer] INFO: Added new file to list with pid 3084 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45796.exe
2025-06-24 21:27:22,592 [analyzer] DEBUG: Loaded monitor into process with pid 4124
2025-06-24 21:27:22,733 [analyzer] INFO: Added new file to list with pid 348 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26666.exe
2025-06-24 21:27:22,733 [analyzer] INFO: Added new file to list with pid 700 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23866.exe
2025-06-24 21:27:22,780 [analyzer] DEBUG: Loaded monitor into process with pid 4368
2025-06-24 21:27:22,780 [analyzer] INFO: Injected into process with pid 4696 and name u'Unicorn-23477.exe'
2025-06-24 21:27:22,828 [analyzer] INFO: Injected into process with pid 4776 and name u'Unicorn-33757.exe'
2025-06-24 21:27:22,875 [analyzer] DEBUG: Loaded monitor into process with pid 4512
2025-06-24 21:27:22,875 [analyzer] INFO: Injected into process with pid 4888 and name u'Unicorn-58069.exe'
2025-06-24 21:27:22,890 [analyzer] DEBUG: Loaded monitor into process with pid 4464
2025-06-24 21:27:22,905 [analyzer] INFO: Injected into process with pid 4860 and name u'Unicorn-57804.exe'
2025-06-24 21:27:22,921 [analyzer] INFO: Injected into process with pid 4916 and name u'Unicorn-25397.exe'
2025-06-24 21:27:22,921 [analyzer] INFO: Injected into process with pid 5076 and name u'Unicorn-38779.exe'
2025-06-24 21:27:22,983 [analyzer] INFO: Injected into process with pid 4412 and name u'Unicorn-45796.exe'
2025-06-24 21:27:22,983 [analyzer] INFO: Injected into process with pid 4280 and name u'Unicorn-63284.exe'
2025-06-24 21:27:23,015 [analyzer] INFO: Injected into process with pid 4128 and name u'Unicorn-28010.exe'
2025-06-24 21:27:23,030 [analyzer] DEBUG: Loaded monitor into process with pid 4696
2025-06-24 21:27:23,030 [analyzer] INFO: Injected into process with pid 4288 and name u'Unicorn-3122.exe'
2025-06-24 21:27:23,078 [analyzer] DEBUG: Loaded monitor into process with pid 4776
2025-06-24 21:27:23,078 [analyzer] INFO: Injected into process with pid 4884 and name u'Unicorn-23866.exe'
2025-06-24 21:27:23,092 [analyzer] INFO: Injected into process with pid 5068 and name u'Unicorn-26666.exe'
2025-06-24 21:27:23,125 [analyzer] DEBUG: Loaded monitor into process with pid 4888
2025-06-24 21:27:23,155 [analyzer] DEBUG: Loaded monitor into process with pid 5076
2025-06-24 21:27:23,203 [analyzer] DEBUG: Loaded monitor into process with pid 4412
2025-06-24 21:27:23,217 [analyzer] DEBUG: Loaded monitor into process with pid 4916
2025-06-24 21:27:23,217 [analyzer] DEBUG: Loaded monitor into process with pid 4280
2025-06-24 21:27:23,217 [analyzer] DEBUG: Loaded monitor into process with pid 4860
2025-06-24 21:27:23,265 [analyzer] DEBUG: Loaded monitor into process with pid 4288
2025-06-24 21:27:23,296 [analyzer] DEBUG: Loaded monitor into process with pid 4884
2025-06-24 21:27:23,312 [analyzer] DEBUG: Loaded monitor into process with pid 5068
2025-06-24 21:27:23,328 [analyzer] DEBUG: Loaded monitor into process with pid 4128
2025-06-24 21:27:24,187 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48853.exe
2025-06-24 21:27:24,233 [analyzer] INFO: Added new file to list with pid 3556 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24349.exe
2025-06-24 21:27:24,358 [analyzer] INFO: Added new file to list with pid 3500 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62428.exe
2025-06-24 21:27:24,405 [analyzer] INFO: Added new file to list with pid 1580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59443.exe
2025-06-24 21:27:24,453 [analyzer] INFO: Injected into process with pid 5248 and name u'Unicorn-48853.exe'
2025-06-24 21:27:24,483 [analyzer] INFO: Injected into process with pid 5272 and name u'Unicorn-24349.exe'
2025-06-24 21:27:24,530 [analyzer] INFO: Injected into process with pid 5304 and name u'Unicorn-62428.exe'
2025-06-24 21:27:24,546 [analyzer] INFO: Injected into process with pid 5332 and name u'Unicorn-59443.exe'
2025-06-24 21:27:24,655 [analyzer] DEBUG: Loaded monitor into process with pid 5272
2025-06-24 21:27:24,717 [analyzer] DEBUG: Loaded monitor into process with pid 5248
2025-06-24 21:27:24,717 [analyzer] DEBUG: Loaded monitor into process with pid 5304
2025-06-24 21:27:24,765 [analyzer] DEBUG: Loaded monitor into process with pid 5332
2025-06-24 21:27:25,000 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53300.exe
2025-06-24 21:27:25,233 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14187.exe
2025-06-24 21:27:25,280 [analyzer] INFO: Injected into process with pid 5424 and name u'Unicorn-53300.exe'
2025-06-24 21:27:25,296 [analyzer] INFO: Added new file to list with pid 3260 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22931.exe
2025-06-24 21:27:25,483 [analyzer] INFO: Injected into process with pid 5460 and name u'Unicorn-14187.exe'
2025-06-24 21:27:25,500 [analyzer] DEBUG: Loaded monitor into process with pid 5424
2025-06-24 21:27:25,515 [analyzer] INFO: Injected into process with pid 5484 and name u'Unicorn-22931.exe'
2025-06-24 21:27:25,717 [analyzer] DEBUG: Loaded monitor into process with pid 5484
2025-06-24 21:27:25,750 [analyzer] DEBUG: Loaded monitor into process with pid 5460
2025-06-24 21:27:25,858 [analyzer] INFO: Added new file to list with pid 3208 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25693.exe
2025-06-24 21:27:26,092 [analyzer] INFO: Injected into process with pid 5556 and name u'Unicorn-25693.exe'
2025-06-24 21:27:26,171 [analyzer] INFO: Added new file to list with pid 3360 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51925.exe
2025-06-24 21:27:26,296 [analyzer] DEBUG: Loaded monitor into process with pid 5556
2025-06-24 21:27:26,358 [analyzer] INFO: Injected into process with pid 5596 and name u'Unicorn-51925.exe'
2025-06-24 21:27:26,562 [analyzer] DEBUG: Loaded monitor into process with pid 5596
2025-06-24 21:27:27,140 [analyzer] INFO: Added new file to list with pid 3440 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49932.exe
2025-06-24 21:27:27,233 [analyzer] INFO: Added new file to list with pid 3684 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20789.exe
2025-06-24 21:27:27,296 [analyzer] INFO: Injected into process with pid 5648 and name u'Unicorn-49932.exe'
2025-06-24 21:27:27,342 [analyzer] INFO: Added new file to list with pid 3448 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1499.exe
2025-06-24 21:27:27,375 [analyzer] INFO: Injected into process with pid 5680 and name u'Unicorn-20789.exe'
2025-06-24 21:27:27,483 [analyzer] DEBUG: Loaded monitor into process with pid 5648
2025-06-24 21:27:27,483 [analyzer] INFO: Injected into process with pid 5724 and name u'Unicorn-1499.exe'
2025-06-24 21:27:27,562 [analyzer] DEBUG: Loaded monitor into process with pid 5680
2025-06-24 21:27:27,655 [analyzer] INFO: Added new file to list with pid 3456 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32827.exe
2025-06-24 21:27:27,671 [analyzer] DEBUG: Loaded monitor into process with pid 5724
2025-06-24 21:27:27,875 [analyzer] INFO: Injected into process with pid 5780 and name u'Unicorn-32827.exe'
2025-06-24 21:27:28,108 [analyzer] DEBUG: Loaded monitor into process with pid 5780
2025-06-24 21:27:28,125 [analyzer] INFO: Added new file to list with pid 3772 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60402.exe
2025-06-24 21:27:28,312 [analyzer] INFO: Injected into process with pid 5824 and name u'Unicorn-60402.exe'
2025-06-24 21:27:28,312 [analyzer] INFO: Injected into process with pid 5832 and name u'Unicorn-60402.exe'
2025-06-24 21:27:28,483 [analyzer] DEBUG: Loaded monitor into process with pid 5824
2025-06-24 21:27:28,578 [analyzer] DEBUG: Loaded monitor into process with pid 5832
2025-06-24 21:27:28,608 [analyzer] INFO: Added new file to list with pid 3296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59634.exe
2025-06-24 21:27:28,780 [analyzer] INFO: Added new file to list with pid 2280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9856.exe
2025-06-24 21:27:28,796 [analyzer] INFO: Added new file to list with pid 2792 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21023.exe
2025-06-24 21:27:28,921 [analyzer] INFO: Injected into process with pid 5912 and name u'Unicorn-59634.exe'
2025-06-24 21:27:29,046 [analyzer] INFO: Injected into process with pid 5972 and name u'Unicorn-21023.exe'
2025-06-24 21:27:29,046 [analyzer] INFO: Injected into process with pid 5952 and name u'Unicorn-9856.exe'
2025-06-24 21:27:29,062 [analyzer] INFO: Added new file to list with pid 4188 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29074.exe
2025-06-24 21:27:29,125 [analyzer] DEBUG: Loaded monitor into process with pid 5912
2025-06-24 21:27:29,171 [analyzer] INFO: Added new file to list with pid 4132 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45218.exe
2025-06-24 21:27:29,187 [analyzer] INFO: Added new file to list with pid 588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20448.exe
2025-06-24 21:27:29,280 [analyzer] DEBUG: Loaded monitor into process with pid 5952
2025-06-24 21:27:29,342 [analyzer] DEBUG: Loaded monitor into process with pid 5972
2025-06-24 21:27:29,358 [analyzer] INFO: Injected into process with pid 6048 and name u'Unicorn-29074.exe'
2025-06-24 21:27:29,390 [analyzer] INFO: Injected into process with pid 6080 and name u'Unicorn-45218.exe'
2025-06-24 21:27:29,405 [analyzer] INFO: Injected into process with pid 6100 and name u'Unicorn-20448.exe'
2025-06-24 21:27:29,421 [analyzer] INFO: Added new file to list with pid 3804 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29266.exe
2025-06-24 21:27:29,500 [analyzer] INFO: Added new file to list with pid 3668 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34096.exe
2025-06-24 21:27:29,562 [analyzer] DEBUG: Loaded monitor into process with pid 6048
2025-06-24 21:27:29,592 [analyzer] INFO: Added new file to list with pid 4272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20138.exe
2025-06-24 21:27:29,608 [analyzer] DEBUG: Loaded monitor into process with pid 6080
2025-06-24 21:27:29,655 [analyzer] DEBUG: Loaded monitor into process with pid 6100
2025-06-24 21:27:29,687 [analyzer] INFO: Injected into process with pid 5360 and name u'Unicorn-29266.exe'
2025-06-24 21:27:29,687 [analyzer] INFO: Added new file to list with pid 3624 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-80.exe
2025-06-24 21:27:29,750 [analyzer] INFO: Injected into process with pid 5348 and name u'Unicorn-34096.exe'
2025-06-24 21:27:29,780 [analyzer] INFO: Added new file to list with pid 4488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45026.exe
2025-06-24 21:27:29,842 [analyzer] INFO: Injected into process with pid 5476 and name u'Unicorn-20138.exe'
2025-06-24 21:27:29,875 [analyzer] INFO: Added new file to list with pid 4152 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61554.exe
2025-06-24 21:27:29,905 [analyzer] DEBUG: Loaded monitor into process with pid 5360
2025-06-24 21:27:29,953 [analyzer] DEBUG: Loaded monitor into process with pid 5348
2025-06-24 21:27:29,953 [analyzer] INFO: Injected into process with pid 5524 and name u'Unicorn-80.exe'
2025-06-24 21:27:30,062 [analyzer] DEBUG: Loaded monitor into process with pid 5476
2025-06-24 21:27:30,062 [analyzer] INFO: Injected into process with pid 5628 and name u'Unicorn-45026.exe'
2025-06-24 21:27:30,108 [analyzer] INFO: Added new file to list with pid 2008 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63209.exe
2025-06-24 21:27:30,155 [analyzer] DEBUG: Loaded monitor into process with pid 5524
2025-06-24 21:27:30,155 [analyzer] INFO: Injected into process with pid 5740 and name u'Unicorn-61554.exe'
2025-06-24 21:27:30,250 [analyzer] INFO: Added new file to list with pid 3756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35248.exe
2025-06-24 21:27:30,280 [analyzer] DEBUG: Loaded monitor into process with pid 5628
2025-06-24 21:27:30,375 [analyzer] DEBUG: Loaded monitor into process with pid 5740
2025-06-24 21:27:30,390 [analyzer] INFO: Added new file to list with pid 3836 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43993.exe
2025-06-24 21:27:30,405 [analyzer] INFO: Injected into process with pid 5884 and name u'Unicorn-63209.exe'
2025-06-24 21:27:30,405 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63858.exe
2025-06-24 21:27:30,453 [analyzer] INFO: Added new file to list with pid 2284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14200.exe
2025-06-24 21:27:30,592 [analyzer] INFO: Injected into process with pid 5948 and name u'Unicorn-35248.exe'
2025-06-24 21:27:30,640 [analyzer] DEBUG: Loaded monitor into process with pid 5884
2025-06-24 21:27:30,671 [analyzer] INFO: Injected into process with pid 6040 and name u'Unicorn-43993.exe'
2025-06-24 21:27:30,671 [analyzer] INFO: Injected into process with pid 6064 and name u'Unicorn-63858.exe'
2025-06-24 21:27:30,717 [analyzer] INFO: Added new file to list with pid 4640 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5145.exe
2025-06-24 21:27:30,733 [analyzer] INFO: Injected into process with pid 6136 and name u'Unicorn-14200.exe'
2025-06-24 21:27:30,733 [analyzer] INFO: Added new file to list with pid 3616 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42648.exe
2025-06-24 21:27:30,812 [analyzer] DEBUG: Loaded monitor into process with pid 5948
2025-06-24 21:27:30,905 [analyzer] DEBUG: Loaded monitor into process with pid 6040
2025-06-24 21:27:30,937 [analyzer] DEBUG: Loaded monitor into process with pid 6064
2025-06-24 21:27:30,967 [analyzer] DEBUG: Loaded monitor into process with pid 6136
2025-06-24 21:27:30,983 [analyzer] INFO: Injected into process with pid 5704 and name u'Unicorn-42648.exe'
2025-06-24 21:27:31,000 [analyzer] INFO: Injected into process with pid 5616 and name u'Unicorn-5145.exe'
2025-06-24 21:27:31,187 [analyzer] DEBUG: Loaded monitor into process with pid 5704
2025-06-24 21:27:31,203 [analyzer] DEBUG: Loaded monitor into process with pid 5616
2025-06-24 21:27:31,328 [analyzer] INFO: Added new file to list with pid 3168 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34567.exe
2025-06-24 21:27:31,562 [analyzer] INFO: Added new file to list with pid 3776 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39546.exe
2025-06-24 21:27:31,592 [analyzer] INFO: Added new file to list with pid 4332 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6873.exe
2025-06-24 21:27:31,655 [analyzer] INFO: Injected into process with pid 5284 and name u'Unicorn-34567.exe'
2025-06-24 21:27:31,921 [analyzer] DEBUG: Loaded monitor into process with pid 5284
2025-06-24 21:27:32,046 [analyzer] INFO: Added new file to list with pid 4228 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-37730.exe
2025-06-24 21:27:32,046 [analyzer] INFO: Injected into process with pid 5664 and name u'Unicorn-39546.exe'
2025-06-24 21:27:32,046 [analyzer] INFO: Injected into process with pid 5928 and name u'Unicorn-6873.exe'
2025-06-24 21:27:32,187 [analyzer] INFO: Added new file to list with pid 3656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58705.exe
2025-06-24 21:27:32,233 [analyzer] INFO: Injected into process with pid 5536 and name u'Unicorn-37730.exe'
2025-06-24 21:27:32,250 [analyzer] DEBUG: Loaded monitor into process with pid 5928
2025-06-24 21:27:32,265 [analyzer] DEBUG: Loaded monitor into process with pid 5664
2025-06-24 21:27:32,375 [analyzer] INFO: Injected into process with pid 6172 and name u'Unicorn-58705.exe'
2025-06-24 21:27:32,437 [analyzer] DEBUG: Loaded monitor into process with pid 5536
2025-06-24 21:27:32,453 [analyzer] INFO: Added new file to list with pid 1812 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61856.exe
2025-06-24 21:27:32,578 [analyzer] DEBUG: Loaded monitor into process with pid 6172
2025-06-24 21:27:32,717 [analyzer] INFO: Injected into process with pid 6224 and name u'Unicorn-61856.exe'
2025-06-24 21:27:32,750 [analyzer] INFO: Added new file to list with pid 2872 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39000.exe
2025-06-24 21:27:32,812 [analyzer] INFO: Added new file to list with pid 2852 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64080.exe
2025-06-24 21:27:32,921 [analyzer] DEBUG: Loaded monitor into process with pid 6224
2025-06-24 21:27:32,937 [analyzer] INFO: Injected into process with pid 6264 and name u'Unicorn-39000.exe'
2025-06-24 21:27:33,000 [analyzer] INFO: Added new file to list with pid 4612 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53682.exe
2025-06-24 21:27:33,030 [analyzer] INFO: Injected into process with pid 6292 and name u'Unicorn-64080.exe'
2025-06-24 21:27:33,140 [analyzer] DEBUG: Loaded monitor into process with pid 6264
2025-06-24 21:27:33,217 [analyzer] DEBUG: Loaded monitor into process with pid 6292
2025-06-24 21:27:33,233 [analyzer] INFO: Injected into process with pid 6340 and name u'Unicorn-53682.exe'
2025-06-24 21:27:33,405 [analyzer] INFO: Added new file to list with pid 2524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25159.exe
2025-06-24 21:27:33,483 [analyzer] DEBUG: Loaded monitor into process with pid 6340
2025-06-24 21:27:33,562 [analyzer] INFO: Added new file to list with pid 3860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59665.exe
2025-06-24 21:27:33,671 [analyzer] INFO: Injected into process with pid 6404 and name u'Unicorn-25159.exe'
2025-06-24 21:27:33,828 [analyzer] INFO: Injected into process with pid 6436 and name u'Unicorn-59665.exe'
2025-06-24 21:27:33,875 [analyzer] DEBUG: Loaded monitor into process with pid 6404
2025-06-24 21:27:34,062 [analyzer] DEBUG: Loaded monitor into process with pid 6436
2025-06-24 21:27:34,733 [analyzer] INFO: Added new file to list with pid 3156 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52841.exe
2025-06-24 21:27:34,828 [analyzer] INFO: Added new file to list with pid 2860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64882.exe
2025-06-24 21:27:34,967 [analyzer] INFO: Injected into process with pid 6500 and name u'Unicorn-52841.exe'
2025-06-24 21:27:34,967 [analyzer] INFO: Injected into process with pid 6528 and name u'Unicorn-64882.exe'
2025-06-24 21:27:35,030 [analyzer] INFO: Added new file to list with pid 3892 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22472.exe
2025-06-24 21:27:35,078 [analyzer] INFO: Added new file to list with pid 3468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55337.exe
2025-06-24 21:27:35,140 [analyzer] INFO: Added new file to list with pid 4092 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30832.exe
2025-06-24 21:27:35,171 [analyzer] DEBUG: Loaded monitor into process with pid 6500
2025-06-24 21:27:35,187 [analyzer] DEBUG: Loaded monitor into process with pid 6528
2025-06-24 21:27:35,280 [analyzer] INFO: Injected into process with pid 6580 and name u'Unicorn-22472.exe'
2025-06-24 21:27:35,312 [analyzer] INFO: Injected into process with pid 6612 and name u'Unicorn-55337.exe'
2025-06-24 21:27:35,312 [analyzer] INFO: Added new file to list with pid 3532 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63889.exe
2025-06-24 21:27:35,342 [analyzer] INFO: Added new file to list with pid 1988 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61288.exe
2025-06-24 21:27:35,375 [analyzer] INFO: Injected into process with pid 6644 and name u'Unicorn-30832.exe'
2025-06-24 21:27:35,483 [analyzer] DEBUG: Loaded monitor into process with pid 6580
2025-06-24 21:27:35,500 [analyzer] INFO: Added new file to list with pid 4056 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31024.exe
2025-06-24 21:27:35,515 [analyzer] INFO: Added new file to list with pid 3128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27271.exe
2025-06-24 21:27:35,546 [analyzer] DEBUG: Loaded monitor into process with pid 6612
2025-06-24 21:27:35,562 [analyzer] INFO: Added new file to list with pid 296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24969.exe
2025-06-24 21:27:35,592 [analyzer] INFO: Injected into process with pid 6700 and name u'Unicorn-63889.exe'
2025-06-24 21:27:35,608 [analyzer] INFO: Added new file to list with pid 3576 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46401.exe
2025-06-24 21:27:35,625 [analyzer] DEBUG: Loaded monitor into process with pid 6644
2025-06-24 21:27:35,671 [analyzer] INFO: Added new file to list with pid 3256 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21512.exe
2025-06-24 21:27:35,671 [analyzer] INFO: Injected into process with pid 6732 and name u'Unicorn-61288.exe'
2025-06-24 21:27:35,750 [analyzer] INFO: Added new file to list with pid 3180 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43608.exe
2025-06-24 21:27:35,842 [analyzer] DEBUG: Loaded monitor into process with pid 6700
2025-06-24 21:27:35,842 [analyzer] INFO: Injected into process with pid 6780 and name u'Unicorn-31024.exe'
2025-06-24 21:27:35,858 [analyzer] INFO: Injected into process with pid 6796 and name u'Unicorn-27271.exe'
2025-06-24 21:27:35,875 [analyzer] INFO: Added new file to list with pid 128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-41384.exe
2025-06-24 21:27:35,905 [analyzer] INFO: Injected into process with pid 6840 and name u'Unicorn-24969.exe'
2025-06-24 21:27:35,905 [analyzer] DEBUG: Loaded monitor into process with pid 6732
2025-06-24 21:27:35,937 [analyzer] INFO: Injected into process with pid 6868 and name u'Unicorn-46401.exe'
2025-06-24 21:27:36,000 [analyzer] INFO: Added new file to list with pid 3160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52160.exe
2025-06-24 21:27:36,030 [analyzer] INFO: Injected into process with pid 6896 and name u'Unicorn-21512.exe'
2025-06-24 21:27:36,078 [analyzer] INFO: Injected into process with pid 6952 and name u'Unicorn-43608.exe'
2025-06-24 21:27:36,092 [analyzer] DEBUG: Loaded monitor into process with pid 6780
2025-06-24 21:27:36,108 [analyzer] DEBUG: Loaded monitor into process with pid 6796
2025-06-24 21:27:36,155 [analyzer] INFO: Added new file to list with pid 2244 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1463.exe
2025-06-24 21:27:36,171 [analyzer] DEBUG: Loaded monitor into process with pid 6840
2025-06-24 21:27:36,217 [analyzer] DEBUG: Loaded monitor into process with pid 6868
2025-06-24 21:27:36,250 [analyzer] INFO: Added new file to list with pid 3956 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19888.exe
2025-06-24 21:27:36,250 [analyzer] INFO: Injected into process with pid 7012 and name u'Unicorn-41384.exe'
2025-06-24 21:27:36,280 [analyzer] DEBUG: Loaded monitor into process with pid 6896
2025-06-24 21:27:36,342 [analyzer] INFO: Added new file to list with pid 4000 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36800.exe
2025-06-24 21:27:36,375 [analyzer] DEBUG: Loaded monitor into process with pid 6952
2025-06-24 21:27:36,390 [analyzer] INFO: Added new file to list with pid 3900 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20464.exe
2025-06-24 21:27:36,421 [analyzer] INFO: Injected into process with pid 7060 and name u'Unicorn-52160.exe'
2025-06-24 21:27:36,437 [analyzer] INFO: Added new file to list with pid 3652 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61113.exe
2025-06-24 21:27:36,467 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63880.exe
2025-06-24 21:27:36,467 [analyzer] INFO: Added new file to list with pid 4204 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7273.exe
2025-06-24 21:27:36,500 [analyzer] DEBUG: Loaded monitor into process with pid 7012
2025-06-24 21:27:36,500 [analyzer] INFO: Added new file to list with pid 3688 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28440.exe
2025-06-24 21:27:36,515 [analyzer] INFO: Added new file to list with pid 3144 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34007.exe
2025-06-24 21:27:36,592 [analyzer] INFO: Added new file to list with pid 3084 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57552.exe
2025-06-24 21:27:36,592 [analyzer] INFO: Added new file to list with pid 1816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63417.exe
2025-06-24 21:27:36,592 [analyzer] INFO: Added new file to list with pid 3108 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57552.exe
2025-06-24 21:27:36,608 [analyzer] INFO: Added new file to list with pid 2012 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55249.exe
2025-06-24 21:27:36,625 [analyzer] INFO: Injected into process with pid 7124 and name u'Unicorn-1463.exe'
2025-06-24 21:27:36,640 [analyzer] INFO: Injected into process with pid 7152 and name u'Unicorn-19888.exe'
2025-06-24 21:27:36,717 [analyzer] INFO: Added new file to list with pid 348 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63225.exe
2025-06-24 21:27:36,717 [analyzer] INFO: Added new file to list with pid 700 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38024.exe
2025-06-24 21:27:36,733 [analyzer] DEBUG: Loaded monitor into process with pid 7060
2025-06-24 21:27:36,842 [analyzer] INFO: Injected into process with pid 6188 and name u'Unicorn-36800.exe'
2025-06-24 21:27:36,875 [analyzer] INFO: Injected into process with pid 6276 and name u'Unicorn-20464.exe'
2025-06-24 21:27:36,937 [analyzer] INFO: Injected into process with pid 6360 and name u'Unicorn-61113.exe'
2025-06-24 21:27:36,967 [analyzer] DEBUG: Loaded monitor into process with pid 7124
2025-06-24 21:27:37,030 [analyzer] DEBUG: Loaded monitor into process with pid 7152
2025-06-24 21:27:37,015 [analyzer] INFO: Injected into process with pid 6420 and name u'Unicorn-63880.exe'
2025-06-24 21:27:37,030 [analyzer] INFO: Injected into process with pid 6416 and name u'Unicorn-7273.exe'
2025-06-24 21:27:37,030 [analyzer] INFO: Injected into process with pid 6452 and name u'Unicorn-28440.exe'
2025-06-24 21:27:37,078 [analyzer] INFO: Injected into process with pid 6476 and name u'Unicorn-34007.exe'
2025-06-24 21:27:37,125 [analyzer] INFO: Injected into process with pid 6684 and name u'Unicorn-63417.exe'
2025-06-24 21:27:37,125 [analyzer] INFO: Injected into process with pid 6724 and name u'Unicorn-55249.exe'
2025-06-24 21:27:37,140 [analyzer] DEBUG: Loaded monitor into process with pid 6276
2025-06-24 21:27:37,155 [analyzer] DEBUG: Loaded monitor into process with pid 6188
2025-06-24 21:27:37,155 [analyzer] INFO: Injected into process with pid 6668 and name u'Unicorn-57552.exe'
2025-06-24 21:27:37,203 [analyzer] INFO: Injected into process with pid 6832 and name u'Unicorn-63225.exe'
2025-06-24 21:27:37,217 [analyzer] DEBUG: Loaded monitor into process with pid 6360
2025-06-24 21:27:37,250 [analyzer] INFO: Injected into process with pid 6856 and name u'Unicorn-38024.exe'
2025-06-24 21:27:37,280 [analyzer] DEBUG: Loaded monitor into process with pid 6452
2025-06-24 21:27:37,312 [analyzer] DEBUG: Loaded monitor into process with pid 6416
2025-06-24 21:27:37,328 [analyzer] DEBUG: Loaded monitor into process with pid 6420
2025-06-24 21:27:37,358 [analyzer] DEBUG: Loaded monitor into process with pid 6476
2025-06-24 21:27:37,421 [analyzer] DEBUG: Loaded monitor into process with pid 6668
2025-06-24 21:27:37,453 [analyzer] DEBUG: Loaded monitor into process with pid 6684
2025-06-24 21:27:37,483 [analyzer] DEBUG: Loaded monitor into process with pid 6724
2025-06-24 21:27:37,515 [analyzer] DEBUG: Loaded monitor into process with pid 6832
2025-06-24 21:27:37,530 [analyzer] DEBUG: Loaded monitor into process with pid 6856
2025-06-24 21:27:38,078 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6624.exe
2025-06-24 21:27:38,092 [analyzer] INFO: Added new file to list with pid 3556 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47657.exe
2025-06-24 21:27:38,155 [analyzer] INFO: Added new file to list with pid 1580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42753.exe
2025-06-24 21:27:38,155 [analyzer] INFO: Added new file to list with pid 3500 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36888.exe
2025-06-24 21:27:38,953 [analyzer] INFO: Added new file to list with pid 4516 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25914.exe
2025-06-24 21:27:38,967 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3447.exe
2025-06-24 21:27:38,983 [analyzer] INFO: Injected into process with pid 6828 and name u'Unicorn-47657.exe'
2025-06-24 21:27:38,983 [analyzer] INFO: Injected into process with pid 6776 and name u'Unicorn-6624.exe'
2025-06-24 21:27:39,030 [analyzer] INFO: Injected into process with pid 6920 and name u'Unicorn-36888.exe'
2025-06-24 21:27:39,046 [analyzer] INFO: Injected into process with pid 6924 and name u'Unicorn-42753.exe'
2025-06-24 21:27:39,108 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62928.exe
2025-06-24 21:27:39,171 [analyzer] INFO: Added new file to list with pid 3260 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29871.exe
2025-06-24 21:27:39,296 [analyzer] DEBUG: Loaded monitor into process with pid 6828
2025-06-24 21:27:39,312 [analyzer] DEBUG: Loaded monitor into process with pid 6776
2025-06-24 21:27:39,358 [analyzer] DEBUG: Loaded monitor into process with pid 6924
2025-06-24 21:27:39,421 [analyzer] DEBUG: Loaded monitor into process with pid 6920
2025-06-24 21:27:39,483 [analyzer] INFO: Injected into process with pid 6992 and name u'Unicorn-3447.exe'
2025-06-24 21:27:39,483 [analyzer] INFO: Injected into process with pid 7044 and name u'Unicorn-25914.exe'
2025-06-24 21:27:39,530 [analyzer] INFO: Injected into process with pid 6808 and name u'Unicorn-62928.exe'
2025-06-24 21:27:39,530 [analyzer] INFO: Injected into process with pid 7184 and name u'Unicorn-29871.exe'
2025-06-24 21:27:39,655 [analyzer] INFO: Added new file to list with pid 3084 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26801.exe
2025-06-24 21:27:39,750 [analyzer] DEBUG: Loaded monitor into process with pid 6992
2025-06-24 21:27:39,765 [analyzer] INFO: Added new file to list with pid 3208 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23728.exe
2025-06-24 21:27:39,765 [analyzer] DEBUG: Loaded monitor into process with pid 7044
2025-06-24 21:27:39,780 [analyzer] DEBUG: Loaded monitor into process with pid 7184
2025-06-24 21:27:39,796 [analyzer] DEBUG: Loaded monitor into process with pid 6808
2025-06-24 21:27:39,953 [analyzer] INFO: Added new file to list with pid 3360 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56785.exe
2025-06-24 21:27:40,062 [analyzer] INFO: Injected into process with pid 7296 and name u'Unicorn-26801.exe'
2025-06-24 21:27:40,125 [analyzer] INFO: Injected into process with pid 7336 and name u'Unicorn-23728.exe'
2025-06-24 21:27:40,280 [analyzer] INFO: Injected into process with pid 7368 and name u'Unicorn-56785.exe'
2025-06-24 21:27:40,296 [analyzer] DEBUG: Loaded monitor into process with pid 7296
2025-06-24 21:27:40,375 [analyzer] DEBUG: Loaded monitor into process with pid 7336
2025-06-24 21:27:40,578 [analyzer] DEBUG: Loaded monitor into process with pid 7368
2025-06-24 21:27:40,921 [analyzer] INFO: Added new file to list with pid 3440 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2399.exe
2025-06-24 21:27:40,983 [analyzer] INFO: Added new file to list with pid 3684 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29696.exe
2025-06-24 21:27:41,062 [analyzer] INFO: Added new file to list with pid 3448 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61880.exe
2025-06-24 21:27:41,187 [analyzer] INFO: Injected into process with pid 7452 and name u'Unicorn-2399.exe'
2025-06-24 21:27:41,217 [analyzer] INFO: Injected into process with pid 7476 and name u'Unicorn-29696.exe'
2025-06-24 21:27:41,296 [analyzer] INFO: Injected into process with pid 7500 and name u'Unicorn-61880.exe'
2025-06-24 21:27:41,405 [analyzer] DEBUG: Loaded monitor into process with pid 7452
2025-06-24 21:27:41,437 [analyzer] DEBUG: Loaded monitor into process with pid 7476
2025-06-24 21:27:41,467 [analyzer] DEBUG: Loaded monitor into process with pid 7500
2025-06-24 21:27:41,530 [analyzer] INFO: Added new file to list with pid 3456 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20079.exe
2025-06-24 21:27:41,842 [analyzer] INFO: Injected into process with pid 7584 and name u'Unicorn-20079.exe'
2025-06-24 21:27:41,953 [analyzer] INFO: Added new file to list with pid 3772 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39400.exe
2025-06-24 21:27:41,953 [analyzer] INFO: Added new file to list with pid 3284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39400.exe
2025-06-24 21:27:42,092 [analyzer] DEBUG: Loaded monitor into process with pid 7584
2025-06-24 21:27:42,421 [analyzer] INFO: Injected into process with pid 7696 and name u'Unicorn-39400.exe'
2025-06-24 21:27:42,483 [analyzer] INFO: Added new file to list with pid 3296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25368.exe
2025-06-24 21:27:42,592 [analyzer] INFO: Added new file to list with pid 2280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52210.exe
2025-06-24 21:27:42,608 [analyzer] INFO: Added new file to list with pid 2792 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60345.exe
2025-06-24 21:27:42,625 [analyzer] DEBUG: Loaded monitor into process with pid 7696
2025-06-24 21:27:42,812 [analyzer] INFO: Injected into process with pid 7740 and name u'Unicorn-25368.exe'
2025-06-24 21:27:42,842 [analyzer] INFO: Injected into process with pid 7768 and name u'Unicorn-52210.exe'
2025-06-24 21:27:42,858 [analyzer] INFO: Injected into process with pid 7776 and name u'Unicorn-60345.exe'
2025-06-24 21:27:42,875 [analyzer] INFO: Added new file to list with pid 4188 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16624.exe
2025-06-24 21:27:42,937 [analyzer] INFO: Added new file to list with pid 4132 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49105.exe
2025-06-24 21:27:43,015 [analyzer] INFO: Added new file to list with pid 588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21119.exe
2025-06-24 21:27:43,030 [analyzer] DEBUG: Loaded monitor into process with pid 7740
2025-06-24 21:27:43,046 [analyzer] DEBUG: Loaded monitor into process with pid 7776
2025-06-24 21:27:43,078 [analyzer] DEBUG: Loaded monitor into process with pid 7768
2025-06-24 21:27:43,265 [analyzer] INFO: Injected into process with pid 7852 and name u'Unicorn-16624.exe'
2025-06-24 21:27:43,312 [analyzer] INFO: Added new file to list with pid 3804 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59769.exe
2025-06-24 21:27:43,328 [analyzer] INFO: Injected into process with pid 7888 and name u'Unicorn-49105.exe'
2025-06-24 21:27:43,405 [analyzer] INFO: Added new file to list with pid 4272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10376.exe
2025-06-24 21:27:43,405 [analyzer] INFO: Added new file to list with pid 3668 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24111.exe
2025-06-24 21:27:43,437 [analyzer] INFO: Injected into process with pid 7924 and name u'Unicorn-21119.exe'
2025-06-24 21:27:43,530 [analyzer] DEBUG: Loaded monitor into process with pid 7852
2025-06-24 21:27:43,562 [analyzer] INFO: Added new file to list with pid 3624 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6815.exe
2025-06-24 21:27:43,608 [analyzer] DEBUG: Loaded monitor into process with pid 7888
2025-06-24 21:27:43,687 [analyzer] DEBUG: Loaded monitor into process with pid 7924
2025-06-24 21:27:43,687 [analyzer] INFO: Added new file to list with pid 4488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58425.exe
2025-06-24 21:27:43,765 [analyzer] INFO: Injected into process with pid 7980 and name u'Unicorn-59769.exe'
2025-06-24 21:27:43,765 [analyzer] INFO: Added new file to list with pid 4152 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17584.exe
2025-06-24 21:27:43,875 [analyzer] INFO: Injected into process with pid 8020 and name u'Unicorn-24111.exe'
2025-06-24 21:27:43,875 [analyzer] INFO: Injected into process with pid 8012 and name u'Unicorn-10376.exe'
2025-06-24 21:27:43,967 [analyzer] INFO: Added new file to list with pid 2008 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45240.exe
2025-06-24 21:27:44,062 [analyzer] INFO: Injected into process with pid 8084 and name u'Unicorn-6815.exe'
2025-06-24 21:27:44,078 [analyzer] DEBUG: Loaded monitor into process with pid 7980
2025-06-24 21:27:44,140 [analyzer] DEBUG: Loaded monitor into process with pid 8012
2025-06-24 21:27:44,203 [analyzer] DEBUG: Loaded monitor into process with pid 8020
2025-06-24 21:27:44,203 [analyzer] INFO: Added new file to list with pid 3756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54008.exe
2025-06-24 21:27:44,233 [analyzer] INFO: Injected into process with pid 8132 and name u'Unicorn-58425.exe'
2025-06-24 21:27:44,280 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-65353.exe
2025-06-24 21:27:44,296 [analyzer] INFO: Added new file to list with pid 3836 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13551.exe
2025-06-24 21:27:44,390 [analyzer] INFO: Added new file to list with pid 2284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35447.exe
2025-06-24 21:27:44,421 [analyzer] DEBUG: Loaded monitor into process with pid 8084
2025-06-24 21:27:44,437 [analyzer] INFO: Injected into process with pid 8156 and name u'Unicorn-17584.exe'
2025-06-24 21:27:44,608 [analyzer] DEBUG: Loaded monitor into process with pid 8132
2025-06-24 21:27:44,640 [analyzer] INFO: Injected into process with pid 7004 and name u'Unicorn-45240.exe'
2025-06-24 21:27:44,655 [analyzer] INFO: Added new file to list with pid 3616 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28927.exe
2025-06-24 21:27:44,655 [analyzer] INFO: Added new file to list with pid 4640 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15192.exe
2025-06-24 21:27:44,796 [analyzer] DEBUG: Loaded monitor into process with pid 8156
2025-06-24 21:27:44,875 [analyzer] INFO: Injected into process with pid 7260 and name u'Unicorn-54008.exe'
2025-06-24 21:27:44,953 [analyzer] DEBUG: Loaded monitor into process with pid 7004
2025-06-24 21:27:44,953 [analyzer] INFO: Injected into process with pid 7392 and name u'Unicorn-65353.exe'
2025-06-24 21:27:44,953 [analyzer] INFO: Injected into process with pid 7404 and name u'Unicorn-13551.exe'
2025-06-24 21:27:45,062 [analyzer] INFO: Injected into process with pid 7496 and name u'Unicorn-35447.exe'
2025-06-24 21:27:45,092 [analyzer] INFO: Added new file to list with pid 3772 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47568.exe
2025-06-24 21:27:45,217 [analyzer] DEBUG: Loaded monitor into process with pid 7260
2025-06-24 21:27:45,421 [analyzer] DEBUG: Loaded monitor into process with pid 7404
2025-06-24 21:27:45,437 [analyzer] DEBUG: Loaded monitor into process with pid 7392
2025-06-24 21:27:45,592 [analyzer] INFO: Added new file to list with pid 3168 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20760.exe
2025-06-24 21:27:45,671 [analyzer] INFO: Injected into process with pid 7616 and name u'Unicorn-28927.exe'
2025-06-24 21:27:45,703 [analyzer] INFO: Injected into process with pid 7752 and name u'Unicorn-15192.exe'
2025-06-24 21:27:45,733 [analyzer] INFO: Added new file to list with pid 4332 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24704.exe
2025-06-24 21:27:45,733 [analyzer] INFO: Added new file to list with pid 3776 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24704.exe
2025-06-24 21:27:45,750 [analyzer] DEBUG: Loaded monitor into process with pid 7496
2025-06-24 21:27:45,937 [analyzer] INFO: Added new file to list with pid 4228 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-392.exe
2025-06-24 21:27:46,030 [analyzer] INFO: Added new file to list with pid 3656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22487.exe
2025-06-24 21:27:46,046 [analyzer] DEBUG: Loaded monitor into process with pid 7616
2025-06-24 21:27:46,125 [analyzer] DEBUG: Loaded monitor into process with pid 7752
2025-06-24 21:27:46,125 [analyzer] INFO: Injected into process with pid 7972 and name u'Unicorn-47568.exe'
2025-06-24 21:27:46,217 [analyzer] INFO: Added new file to list with pid 4696 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63210.exe
2025-06-24 21:27:46,280 [analyzer] INFO: Added new file to list with pid 4904 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46874.exe
2025-06-24 21:27:46,296 [analyzer] INFO: Injected into process with pid 8104 and name u'Unicorn-20760.exe'
2025-06-24 21:27:46,405 [analyzer] INFO: Added new file to list with pid 1812 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5648.exe
2025-06-24 21:27:46,453 [analyzer] INFO: Injected into process with pid 8144 and name u'Unicorn-24704.exe'
2025-06-24 21:27:46,500 [analyzer] DEBUG: Loaded monitor into process with pid 7972
2025-06-24 21:27:46,578 [analyzer] INFO: Injected into process with pid 7264 and name u'Unicorn-392.exe'
2025-06-24 21:27:46,625 [analyzer] DEBUG: Loaded monitor into process with pid 8104
2025-06-24 21:27:46,655 [analyzer] INFO: Added new file to list with pid 2872 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46033.exe
2025-06-24 21:27:46,687 [analyzer] INFO: Added new file to list with pid 2852 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29697.exe
2025-06-24 21:27:46,717 [analyzer] INFO: Injected into process with pid 7396 and name u'Unicorn-22487.exe'
2025-06-24 21:27:46,765 [analyzer] DEBUG: Loaded monitor into process with pid 8144
2025-06-24 21:27:46,875 [analyzer] INFO: Added new file to list with pid 4756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13817.exe
2025-06-24 21:27:46,967 [analyzer] INFO: Added new file to list with pid 4612 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51129.exe
2025-06-24 21:27:47,000 [analyzer] INFO: Injected into process with pid 7804 and name u'Unicorn-46874.exe'
2025-06-24 21:27:47,000 [analyzer] DEBUG: Loaded monitor into process with pid 7264
2025-06-24 21:27:47,015 [analyzer] INFO: Injected into process with pid 7828 and name u'Unicorn-63210.exe'
2025-06-24 21:27:47,108 [analyzer] DEBUG: Loaded monitor into process with pid 7396
2025-06-24 21:27:47,155 [analyzer] INFO: Injected into process with pid 8172 and name u'Unicorn-5648.exe'
2025-06-24 21:27:47,265 [analyzer] INFO: Added new file to list with pid 5000 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48410.exe
2025-06-24 21:27:47,312 [analyzer] INFO: Added new file to list with pid 5036 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24290.exe
2025-06-24 21:27:47,342 [analyzer] DEBUG: Loaded monitor into process with pid 7804
2025-06-24 21:27:47,375 [analyzer] INFO: Injected into process with pid 7528 and name u'Unicorn-46033.exe'
2025-06-24 21:27:47,405 [analyzer] DEBUG: Loaded monitor into process with pid 7828
2025-06-24 21:27:47,421 [analyzer] INFO: Added new file to list with pid 2524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32385.exe
2025-06-24 21:27:47,453 [analyzer] DEBUG: Loaded monitor into process with pid 8172
2025-06-24 21:27:47,453 [analyzer] INFO: Injected into process with pid 7536 and name u'Unicorn-29697.exe'
2025-06-24 21:27:47,530 [analyzer] INFO: Added new file to list with pid 3860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34495.exe
2025-06-24 21:27:47,640 [analyzer] INFO: Injected into process with pid 8196 and name u'Unicorn-13817.exe'
2025-06-24 21:27:47,671 [analyzer] INFO: Injected into process with pid 8220 and name u'Unicorn-51129.exe'
2025-06-24 21:27:47,733 [analyzer] DEBUG: Loaded monitor into process with pid 7528
2025-06-24 21:27:47,750 [analyzer] INFO: Added new file to list with pid 5104 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55810.exe
2025-06-24 21:27:47,812 [analyzer] DEBUG: Loaded monitor into process with pid 7536
2025-06-24 21:27:47,858 [analyzer] INFO: Added new file to list with pid 4916 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31306.exe
2025-06-24 21:27:47,890 [analyzer] INFO: Added new file to list with pid 4732 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23522.exe
2025-06-24 21:27:48,046 [analyzer] DEBUG: Loaded monitor into process with pid 8196
2025-06-24 21:27:48,046 [analyzer] INFO: Injected into process with pid 8308 and name u'Unicorn-24290.exe'
2025-06-24 21:27:48,078 [analyzer] DEBUG: Loaded monitor into process with pid 8220
2025-06-24 21:27:48,078 [analyzer] INFO: Injected into process with pid 8288 and name u'Unicorn-48410.exe'
2025-06-24 21:27:48,078 [analyzer] INFO: Added new file to list with pid 4512 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31690.exe
2025-06-24 21:27:48,155 [analyzer] INFO: Injected into process with pid 8372 and name u'Unicorn-32385.exe'
2025-06-24 21:27:48,250 [analyzer] INFO: Injected into process with pid 8400 and name u'Unicorn-34495.exe'
2025-06-24 21:27:48,328 [analyzer] INFO: Added new file to list with pid 4412 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5369.exe
2025-06-24 21:27:48,375 [analyzer] DEBUG: Loaded monitor into process with pid 8308
2025-06-24 21:27:48,405 [analyzer] INFO: Added new file to list with pid 4288 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30066.exe
2025-06-24 21:27:48,421 [analyzer] INFO: Injected into process with pid 8460 and name u'Unicorn-55810.exe'
2025-06-24 21:27:48,437 [analyzer] DEBUG: Loaded monitor into process with pid 8288
2025-06-24 21:27:48,453 [analyzer] DEBUG: Loaded monitor into process with pid 8372
2025-06-24 21:27:48,515 [analyzer] INFO: Injected into process with pid 8484 and name u'Unicorn-31306.exe'
2025-06-24 21:27:48,546 [analyzer] INFO: Injected into process with pid 8504 and name u'Unicorn-23522.exe'
2025-06-24 21:27:48,562 [analyzer] DEBUG: Loaded monitor into process with pid 8400
2025-06-24 21:27:48,717 [analyzer] INFO: Injected into process with pid 8576 and name u'Unicorn-31690.exe'
2025-06-24 21:27:48,750 [analyzer] INFO: Added new file to list with pid 2860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64328.exe
2025-06-24 21:27:48,750 [analyzer] INFO: Added new file to list with pid 3156 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22591.exe
2025-06-24 21:27:48,796 [analyzer] DEBUG: Loaded monitor into process with pid 8460
2025-06-24 21:27:48,858 [analyzer] DEBUG: Loaded monitor into process with pid 8484
2025-06-24 21:27:48,890 [analyzer] DEBUG: Loaded monitor into process with pid 8504
2025-06-24 21:27:49,030 [analyzer] INFO: Added new file to list with pid 4332 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55648.exe
2025-06-24 21:27:49,108 [analyzer] INFO: Injected into process with pid 8648 and name u'Unicorn-5369.exe'
2025-06-24 21:27:49,140 [analyzer] DEBUG: Loaded monitor into process with pid 8576
2025-06-24 21:27:49,155 [analyzer] INFO: Added new file to list with pid 3468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25087.exe
2025-06-24 21:27:49,171 [analyzer] INFO: Added new file to list with pid 3892 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16919.exe
2025-06-24 21:27:49,187 [analyzer] INFO: Added new file to list with pid 4808 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31218.exe
2025-06-24 21:27:49,233 [analyzer] INFO: Injected into process with pid 8692 and name u'Unicorn-30066.exe'
2025-06-24 21:27:49,375 [analyzer] INFO: Added new file to list with pid 3532 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-775.exe
2025-06-24 21:27:49,405 [analyzer] INFO: Added new file to list with pid 1988 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23169.exe
2025-06-24 21:27:49,483 [analyzer] DEBUG: Loaded monitor into process with pid 8648
2025-06-24 21:27:49,515 [analyzer] INFO: Added new file to list with pid 3128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31145.exe
2025-06-24 21:27:49,530 [analyzer] INFO: Added new file to list with pid 4056 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25279.exe
2025-06-24 21:27:49,608 [analyzer] INFO: Added new file to list with pid 296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46024.exe
2025-06-24 21:27:49,608 [analyzer] DEBUG: Loaded monitor into process with pid 8692
2025-06-24 21:27:49,655 [analyzer] INFO: Injected into process with pid 8772 and name u'Unicorn-22591.exe'
2025-06-24 21:27:49,655 [analyzer] INFO: Added new file to list with pid 3576 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24319.exe
2025-06-24 21:27:49,687 [analyzer] INFO: Injected into process with pid 8764 and name u'Unicorn-64328.exe'
2025-06-24 21:27:49,687 [analyzer] INFO: Added new file to list with pid 3256 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7599.exe
2025-06-24 21:27:49,828 [analyzer] INFO: Injected into process with pid 8836 and name u'Unicorn-55648.exe'
2025-06-24 21:27:49,875 [analyzer] INFO: Added new file to list with pid 3180 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63241.exe
2025-06-24 21:27:49,983 [analyzer] INFO: Injected into process with pid 8884 and name u'Unicorn-31218.exe'
2025-06-24 21:27:49,983 [analyzer] INFO: Injected into process with pid 8868 and name u'Unicorn-25087.exe'
2025-06-24 21:27:50,000 [analyzer] INFO: Injected into process with pid 8876 and name u'Unicorn-16919.exe'
2025-06-24 21:27:50,062 [analyzer] DEBUG: Loaded monitor into process with pid 8772
2025-06-24 21:27:50,078 [analyzer] INFO: Added new file to list with pid 128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56297.exe
2025-06-24 21:27:50,108 [analyzer] DEBUG: Loaded monitor into process with pid 8764
2025-06-24 21:27:50,203 [analyzer] INFO: Added new file to list with pid 3160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7600.exe
2025-06-24 21:27:50,233 [analyzer] INFO: Injected into process with pid 8968 and name u'Unicorn-23169.exe'
2025-06-24 21:27:50,233 [analyzer] INFO: Injected into process with pid 8960 and name u'Unicorn-775.exe'
2025-06-24 21:27:50,265 [analyzer] DEBUG: Loaded monitor into process with pid 8836
2025-06-24 21:27:50,342 [analyzer] INFO: Added new file to list with pid 3956 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59680.exe
2025-06-24 21:27:50,358 [analyzer] DEBUG: Loaded monitor into process with pid 8868
2025-06-24 21:27:50,390 [analyzer] DEBUG: Loaded monitor into process with pid 8876
2025-06-24 21:27:50,390 [analyzer] INFO: Injected into process with pid 9032 and name u'Unicorn-31145.exe'
2025-06-24 21:27:50,405 [analyzer] INFO: Injected into process with pid 9040 and name u'Unicorn-25279.exe'
2025-06-24 21:27:50,421 [analyzer] INFO: Added new file to list with pid 2244 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63409.exe
2025-06-24 21:27:50,437 [analyzer] DEBUG: Loaded monitor into process with pid 8884
2025-06-24 21:27:50,453 [analyzer] INFO: Injected into process with pid 9116 and name u'Unicorn-46024.exe'
2025-06-24 21:27:50,592 [analyzer] INFO: Injected into process with pid 9132 and name u'Unicorn-24319.exe'
2025-06-24 21:27:50,608 [analyzer] INFO: Added new file to list with pid 4000 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1159.exe
2025-06-24 21:27:50,625 [analyzer] INFO: Injected into process with pid 9148 and name u'Unicorn-7599.exe'
2025-06-24 21:27:50,640 [analyzer] DEBUG: Loaded monitor into process with pid 8968
2025-06-24 21:27:50,655 [analyzer] INFO: Added new file to list with pid 3900 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34023.exe
2025-06-24 21:27:50,687 [analyzer] INFO: Added new file to list with pid 3652 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17687.exe
2025-06-24 21:27:50,717 [analyzer] DEBUG: Loaded monitor into process with pid 8960
2025-06-24 21:27:50,780 [analyzer] INFO: Added new file to list with pid 5008 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56298.exe
2025-06-24 21:27:50,796 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6328.exe
2025-06-24 21:27:50,796 [analyzer] INFO: Added new file to list with pid 4204 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11928.exe
2025-06-24 21:27:50,812 [analyzer] INFO: Added new file to list with pid 3688 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25663.exe
2025-06-24 21:27:50,828 [analyzer] DEBUG: Loaded monitor into process with pid 9032
2025-06-24 21:27:50,842 [analyzer] INFO: Injected into process with pid 7356 and name u'Unicorn-63241.exe'
2025-06-24 21:27:50,842 [analyzer] DEBUG: Loaded monitor into process with pid 9040
2025-06-24 21:27:50,890 [analyzer] INFO: Added new file to list with pid 1816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6911.exe
2025-06-24 21:27:50,890 [analyzer] INFO: Added new file to list with pid 3144 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15576.exe
2025-06-24 21:27:50,905 [analyzer] DEBUG: Loaded monitor into process with pid 9116
2025-06-24 21:27:50,937 [analyzer] INFO: Added new file to list with pid 2012 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15271.exe
2025-06-24 21:27:51,030 [analyzer] INFO: Added new file to list with pid 3108 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64585.exe
2025-06-24 21:27:51,108 [analyzer] INFO: Added new file to list with pid 700 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1193.exe
2025-06-24 21:27:51,108 [analyzer] INFO: Added new file to list with pid 348 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-663.exe
2025-06-24 21:27:51,125 [analyzer] DEBUG: Loaded monitor into process with pid 9132
2025-06-24 21:27:51,125 [analyzer] INFO: Injected into process with pid 8284 and name u'Unicorn-56297.exe'
2025-06-24 21:27:51,155 [analyzer] DEBUG: Loaded monitor into process with pid 9148
2025-06-24 21:27:51,265 [analyzer] INFO: Added new file to list with pid 4840 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1233.exe
2025-06-24 21:27:51,296 [analyzer] INFO: Injected into process with pid 8384 and name u'Unicorn-7600.exe'
2025-06-24 21:27:51,328 [analyzer] DEBUG: Loaded monitor into process with pid 7356
2025-06-24 21:27:51,421 [analyzer] INFO: Injected into process with pid 8544 and name u'Unicorn-59680.exe'
2025-06-24 21:27:51,500 [analyzer] INFO: Injected into process with pid 8620 and name u'Unicorn-63409.exe'
2025-06-24 21:27:51,562 [analyzer] INFO: Added new file to list with pid 4288 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54497.exe
2025-06-24 21:27:51,562 [analyzer] DEBUG: Loaded monitor into process with pid 8284
2025-06-24 21:27:51,655 [analyzer] INFO: Injected into process with pid 1444 and name u'Unicorn-1159.exe'
2025-06-24 21:27:51,671 [analyzer] INFO: Injected into process with pid 1208 and name u'Unicorn-34023.exe'
2025-06-24 21:27:51,687 [analyzer] DEBUG: Loaded monitor into process with pid 8384
2025-06-24 21:27:51,687 [analyzer] INFO: Injected into process with pid 8688 and name u'Unicorn-17687.exe'
2025-06-24 21:27:51,796 [analyzer] INFO: Injected into process with pid 7424 and name u'Unicorn-56298.exe'
2025-06-24 21:27:51,796 [analyzer] DEBUG: Loaded monitor into process with pid 8544
2025-06-24 21:27:51,796 [analyzer] INFO: Injected into process with pid 8912 and name u'Unicorn-11928.exe'
2025-06-24 21:27:51,796 [analyzer] INFO: Injected into process with pid 8928 and name u'Unicorn-25663.exe'
2025-06-24 21:27:51,796 [analyzer] INFO: Injected into process with pid 8904 and name u'Unicorn-6328.exe'
2025-06-24 21:27:51,875 [analyzer] DEBUG: Loaded monitor into process with pid 8620
2025-06-24 21:27:51,875 [analyzer] INFO: Injected into process with pid 8176 and name u'Unicorn-15576.exe'
2025-06-24 21:27:51,875 [analyzer] INFO: Injected into process with pid 9208 and name u'Unicorn-6911.exe'
2025-06-24 21:27:51,875 [analyzer] INFO: Injected into process with pid 9112 and name u'Unicorn-15271.exe'
2025-06-24 21:27:51,890 [analyzer] INFO: Injected into process with pid 9184 and name u'Unicorn-64585.exe'
2025-06-24 21:27:51,937 [analyzer] INFO: Injected into process with pid 8304 and name u'Unicorn-663.exe'
2025-06-24 21:27:51,953 [analyzer] INFO: Injected into process with pid 8408 and name u'Unicorn-1193.exe'
2025-06-24 21:27:52,078 [analyzer] DEBUG: Loaded monitor into process with pid 1444
2025-06-24 21:27:52,092 [analyzer] DEBUG: Loaded monitor into process with pid 1208
2025-06-24 21:27:52,108 [analyzer] INFO: Injected into process with pid 2660 and name u'Unicorn-1233.exe'
2025-06-24 21:27:52,155 [analyzer] DEBUG: Loaded monitor into process with pid 8688
2025-06-24 21:27:52,187 [analyzer] DEBUG: Loaded monitor into process with pid 8912
2025-06-24 21:27:52,187 [analyzer] DEBUG: Loaded monitor into process with pid 7424
2025-06-24 21:27:52,203 [analyzer] DEBUG: Loaded monitor into process with pid 8904
2025-06-24 21:27:52,250 [analyzer] DEBUG: Loaded monitor into process with pid 8928
2025-06-24 21:27:52,280 [analyzer] DEBUG: Loaded monitor into process with pid 9112
2025-06-24 21:27:52,280 [analyzer] DEBUG: Loaded monitor into process with pid 9184
2025-06-24 21:27:52,342 [analyzer] DEBUG: Loaded monitor into process with pid 8176
2025-06-24 21:27:52,358 [analyzer] DEBUG: Loaded monitor into process with pid 8408
2025-06-24 21:27:52,390 [analyzer] DEBUG: Loaded monitor into process with pid 8304
2025-06-24 21:27:52,390 [analyzer] INFO: Added new file to list with pid 3468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39993.exe
2025-06-24 21:27:52,421 [analyzer] INFO: Injected into process with pid 7276 and name u'Unicorn-54497.exe'
2025-06-24 21:27:52,483 [analyzer] DEBUG: Loaded monitor into process with pid 2660
2025-06-24 21:27:52,483 [analyzer] DEBUG: Loaded monitor into process with pid 9208
2025-06-24 21:27:52,765 [analyzer] INFO: Added new file to list with pid 3556 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24615.exe
2025-06-24 21:27:52,765 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24615.exe
2025-06-24 21:27:52,828 [analyzer] INFO: Added new file to list with pid 3500 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22313.exe
2025-06-24 21:27:52,828 [analyzer] INFO: Added new file to list with pid 1580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13647.exe
2025-06-24 21:27:52,828 [analyzer] DEBUG: Loaded monitor into process with pid 7276
2025-06-24 21:27:52,967 [analyzer] INFO: Added new file to list with pid 4868 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39490.exe
2025-06-24 21:27:53,358 [analyzer] INFO: Added new file to list with pid 4516 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62385.exe
2025-06-24 21:27:53,358 [analyzer] INFO: Added new file to list with pid 3260 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16448.exe
2025-06-24 21:27:53,358 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16448.exe
2025-06-24 21:27:53,358 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16448.exe
2025-06-24 21:27:53,608 [analyzer] INFO: Injected into process with pid 9372 and name u'Unicorn-39993.exe'
2025-06-24 21:27:53,750 [analyzer] INFO: Added new file to list with pid 4112 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64954.exe
2025-06-24 21:27:53,875 [analyzer] INFO: Added new file to list with pid 3084 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48432.exe
2025-06-24 21:27:53,967 [analyzer] INFO: Added new file to list with pid 3208 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59208.exe
2025-06-24 21:27:54,030 [analyzer] INFO: Injected into process with pid 9412 and name u'Unicorn-24615.exe'
2025-06-24 21:27:54,078 [analyzer] DEBUG: Loaded monitor into process with pid 9372
2025-06-24 21:27:54,125 [analyzer] INFO: Injected into process with pid 9428 and name u'Unicorn-22313.exe'
2025-06-24 21:27:54,140 [analyzer] INFO: Injected into process with pid 9436 and name u'Unicorn-13647.exe'
2025-06-24 21:27:54,155 [analyzer] INFO: Added new file to list with pid 3360 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36816.exe
2025-06-24 21:27:54,203 [analyzer] INFO: Added new file to list with pid 4464 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42946.exe
2025-06-24 21:27:54,250 [analyzer] INFO: Injected into process with pid 9476 and name u'Unicorn-39490.exe'
2025-06-24 21:27:54,578 [analyzer] DEBUG: Loaded monitor into process with pid 9412
2025-06-24 21:27:54,578 [analyzer] INFO: Injected into process with pid 9528 and name u'Unicorn-16448.exe'
2025-06-24 21:27:54,578 [analyzer] INFO: Injected into process with pid 9520 and name u'Unicorn-62385.exe'
2025-06-24 21:27:54,687 [analyzer] DEBUG: Loaded monitor into process with pid 9436
2025-06-24 21:27:54,687 [analyzer] DEBUG: Loaded monitor into process with pid 9428
2025-06-24 21:27:54,703 [analyzer] INFO: Added new file to list with pid 4368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34010.exe
2025-06-24 21:27:54,703 [analyzer] INFO: Added new file to list with pid 5028 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25842.exe
2025-06-24 21:27:54,765 [analyzer] DEBUG: Loaded monitor into process with pid 9476
2025-06-24 21:27:54,937 [analyzer] INFO: Added new file to list with pid 3684 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11927.exe
2025-06-24 21:27:54,937 [analyzer] INFO: Added new file to list with pid 3440 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17792.exe
2025-06-24 21:27:55,015 [analyzer] INFO: Injected into process with pid 9604 and name u'Unicorn-64954.exe'
2025-06-24 21:27:55,062 [analyzer] DEBUG: Loaded monitor into process with pid 9528
2025-06-24 21:27:55,078 [analyzer] INFO: Added new file to list with pid 3448 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11352.exe
2025-06-24 21:27:55,125 [analyzer] DEBUG: Loaded monitor into process with pid 9520
2025-06-24 21:27:55,125 [analyzer] INFO: Injected into process with pid 9632 and name u'Unicorn-48432.exe'
2025-06-24 21:27:55,217 [analyzer] INFO: Injected into process with pid 9684 and name u'Unicorn-59208.exe'
2025-06-24 21:27:55,390 [analyzer] INFO: Added new file to list with pid 4128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3833.exe
2025-06-24 21:27:55,453 [analyzer] INFO: Injected into process with pid 9724 and name u'Unicorn-42946.exe'
2025-06-24 21:27:55,453 [analyzer] INFO: Injected into process with pid 9716 and name u'Unicorn-36816.exe'
2025-06-24 21:27:55,515 [analyzer] DEBUG: Loaded monitor into process with pid 9604
2025-06-24 21:27:55,608 [analyzer] DEBUG: Loaded monitor into process with pid 9632
2025-06-24 21:27:55,687 [analyzer] DEBUG: Loaded monitor into process with pid 9684
2025-06-24 21:27:55,717 [analyzer] INFO: Added new file to list with pid 3456 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18944.exe
2025-06-24 21:27:55,890 [analyzer] INFO: Injected into process with pid 9844 and name u'Unicorn-25842.exe'
2025-06-24 21:27:55,905 [analyzer] INFO: Injected into process with pid 9836 and name u'Unicorn-34010.exe'
2025-06-24 21:27:55,967 [analyzer] INFO: Added new file to list with pid 4924 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35930.exe
2025-06-24 21:27:55,967 [analyzer] DEBUG: Loaded monitor into process with pid 9724
2025-06-24 21:27:55,967 [analyzer] INFO: Added new file to list with pid 4884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19594.exe
2025-06-24 21:27:55,983 [analyzer] DEBUG: Loaded monitor into process with pid 9716
2025-06-24 21:27:56,046 [analyzer] INFO: Added new file to list with pid 3556 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35473.exe
2025-06-24 21:27:56,078 [analyzer] INFO: Injected into process with pid 9920 and name u'Unicorn-17792.exe'
2025-06-24 21:27:56,092 [analyzer] INFO: Injected into process with pid 9912 and name u'Unicorn-11927.exe'
2025-06-24 21:27:56,125 [analyzer] INFO: Added new file to list with pid 4860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27570.exe
2025-06-24 21:27:56,203 [analyzer] INFO: Injected into process with pid 9980 and name u'Unicorn-11352.exe'
2025-06-24 21:27:56,265 [analyzer] INFO: Added new file to list with pid 3284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2903.exe
2025-06-24 21:27:56,358 [analyzer] DEBUG: Loaded monitor into process with pid 9844
2025-06-24 21:27:56,375 [analyzer] DEBUG: Loaded monitor into process with pid 9836
2025-06-24 21:27:56,390 [analyzer] INFO: Injected into process with pid 10032 and name u'Unicorn-3833.exe'
2025-06-24 21:27:56,467 [analyzer] DEBUG: Loaded monitor into process with pid 9920
2025-06-24 21:27:56,530 [analyzer] DEBUG: Loaded monitor into process with pid 9912
2025-06-24 21:27:56,546 [analyzer] DEBUG: Loaded monitor into process with pid 9980
2025-06-24 21:27:56,608 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32199.exe
2025-06-24 21:27:56,625 [analyzer] INFO: Injected into process with pid 10100 and name u'Unicorn-18944.exe'
2025-06-24 21:27:56,640 [analyzer] INFO: Added new file to list with pid 3296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26831.exe
2025-06-24 21:27:56,655 [analyzer] INFO: Added new file to list with pid 2792 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24031.exe
2025-06-24 21:27:56,671 [analyzer] INFO: Added new file to list with pid 2280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3031.exe
2025-06-24 21:27:56,796 [analyzer] DEBUG: Loaded monitor into process with pid 10032
2025-06-24 21:27:56,842 [analyzer] INFO: Injected into process with pid 10156 and name u'Unicorn-35930.exe'
2025-06-24 21:27:56,858 [analyzer] INFO: Injected into process with pid 10164 and name u'Unicorn-19594.exe'
2025-06-24 21:27:56,858 [analyzer] INFO: Injected into process with pid 10184 and name u'Unicorn-35473.exe'
2025-06-24 21:27:56,967 [analyzer] INFO: Injected into process with pid 10232 and name u'Unicorn-27570.exe'
2025-06-24 21:27:57,046 [analyzer] DEBUG: Loaded monitor into process with pid 10100
2025-06-24 21:27:57,062 [analyzer] INFO: Added new file to list with pid 4132 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61808.exe
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 8808 and name u'Unicorn-2903.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Added new file to list with pid 4188 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61808.exe
2025-06-24 21:27:57,250 [analyzer] DEBUG: Loaded monitor into process with pid 10156
2025-06-24 21:27:57,280 [analyzer] INFO: Added new file to list with pid 4124 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59578.exe
2025-06-24 21:27:57,328 [analyzer] DEBUG: Loaded monitor into process with pid 10184
2025-06-24 21:27:57,328 [analyzer] INFO: Added new file to list with pid 588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42856.exe
2025-06-24 21:27:57,358 [analyzer] DEBUG: Loaded monitor into process with pid 10232
2025-06-24 21:27:57,390 [analyzer] DEBUG: Loaded monitor into process with pid 10164
2025-06-24 21:27:57,515 [analyzer] DEBUG: Loaded monitor into process with pid 8808
2025-06-24 21:27:57,592 [analyzer] INFO: Added new file to list with pid 4888 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19122.exe
2025-06-24 21:27:57,640 [analyzer] INFO: Injected into process with pid 9508 and name u'Unicorn-3031.exe'
2025-06-24 21:27:57,640 [analyzer] INFO: Injected into process with pid 9472 and name u'Unicorn-32199.exe'
2025-06-24 21:27:57,655 [analyzer] INFO: Injected into process with pid 9484 and name u'Unicorn-26831.exe'
2025-06-24 21:27:57,671 [analyzer] INFO: Injected into process with pid 9464 and name u'Unicorn-24031.exe'
2025-06-24 21:27:57,671 [analyzer] INFO: Added new file to list with pid 3804 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28367.exe
2025-06-24 21:27:57,765 [analyzer] INFO: Added new file to list with pid 3668 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42209.exe
2025-06-24 21:27:57,765 [analyzer] INFO: Added new file to list with pid 4272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36344.exe
2025-06-24 21:27:57,858 [analyzer] INFO: Added new file to list with pid 3624 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50953.exe
2025-06-24 21:27:57,937 [analyzer] INFO: Added new file to list with pid 5304 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18546.exe
2025-06-24 21:27:58,092 [analyzer] DEBUG: Loaded monitor into process with pid 9508
2025-06-24 21:27:58,108 [analyzer] INFO: Added new file to list with pid 4280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26522.exe
2025-06-24 21:27:58,125 [analyzer] DEBUG: Loaded monitor into process with pid 9464
2025-06-24 21:27:58,140 [analyzer] DEBUG: Loaded monitor into process with pid 9484
2025-06-24 21:27:58,140 [analyzer] INFO: Added new file to list with pid 4488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30671.exe
2025-06-24 21:27:58,171 [analyzer] DEBUG: Loaded monitor into process with pid 9472
2025-06-24 21:27:58,296 [analyzer] INFO: Injected into process with pid 9764 and name u'Unicorn-61808.exe'
2025-06-24 21:27:58,342 [analyzer] INFO: Added new file to list with pid 4152 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30479.exe
2025-06-24 21:27:58,405 [analyzer] INFO: Injected into process with pid 9932 and name u'Unicorn-59578.exe'
2025-06-24 21:27:58,437 [analyzer] INFO: Added new file to list with pid 2008 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44200.exe
2025-06-24 21:27:58,530 [analyzer] INFO: Injected into process with pid 9864 and name u'Unicorn-42856.exe'
2025-06-24 21:27:58,703 [analyzer] INFO: Added new file to list with pid 3756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2712.exe
2025-06-24 21:27:58,717 [analyzer] DEBUG: Loaded monitor into process with pid 9764
2025-06-24 21:27:58,733 [analyzer] INFO: Injected into process with pid 9992 and name u'Unicorn-19122.exe'
2025-06-24 21:27:58,765 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29711.exe
2025-06-24 21:27:58,796 [analyzer] INFO: Added new file to list with pid 3836 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11072.exe
2025-06-24 21:27:58,796 [analyzer] INFO: Injected into process with pid 10024 and name u'Unicorn-28367.exe'
2025-06-24 21:27:58,875 [analyzer] DEBUG: Loaded monitor into process with pid 9932
2025-06-24 21:27:58,890 [analyzer] INFO: Injected into process with pid 10148 and name u'Unicorn-42209.exe'
2025-06-24 21:27:58,890 [analyzer] INFO: Added new file to list with pid 2284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10952.exe
2025-06-24 21:27:58,890 [analyzer] INFO: Injected into process with pid 10096 and name u'Unicorn-36344.exe'
2025-06-24 21:27:59,000 [analyzer] INFO: Added new file to list with pid 9864 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20082.exe
2025-06-24 21:27:59,000 [analyzer] DEBUG: Loaded monitor into process with pid 9864
2025-06-24 21:27:59,015 [analyzer] INFO: Injected into process with pid 10220 and name u'Unicorn-50953.exe'
2025-06-24 21:27:59,062 [analyzer] INFO: Injected into process with pid 9012 and name u'Unicorn-18546.exe'
2025-06-24 21:27:59,171 [analyzer] DEBUG: Loaded monitor into process with pid 9992
2025-06-24 21:27:59,250 [analyzer] INFO: Injected into process with pid 9552 and name u'Unicorn-30671.exe'
2025-06-24 21:27:59,250 [analyzer] DEBUG: Loaded monitor into process with pid 10024
2025-06-24 21:27:59,265 [analyzer] INFO: Injected into process with pid 2480 and name u'Unicorn-26522.exe'
2025-06-24 21:27:59,328 [analyzer] DEBUG: Loaded monitor into process with pid 10096
2025-06-24 21:27:59,390 [analyzer] DEBUG: Loaded monitor into process with pid 10148
2025-06-24 21:27:59,453 [analyzer] INFO: Injected into process with pid 9968 and name u'Unicorn-30479.exe'
2025-06-24 21:27:59,500 [analyzer] INFO: Added new file to list with pid 3616 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38265.exe
2025-06-24 21:27:59,515 [analyzer] DEBUG: Loaded monitor into process with pid 10220
2025-06-24 21:27:59,515 [analyzer] INFO: Added new file to list with pid 4640 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32399.exe
2025-06-24 21:27:59,655 [analyzer] DEBUG: Loaded monitor into process with pid 9012
2025-06-24 21:27:59,671 [analyzer] INFO: Injected into process with pid 10008 and name u'Unicorn-44200.exe'
2025-06-24 21:27:59,796 [analyzer] DEBUG: Loaded monitor into process with pid 9552
2025-06-24 21:27:59,812 [analyzer] DEBUG: Loaded monitor into process with pid 2480
2025-06-24 21:27:59,842 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28824.exe
2025-06-24 21:27:59,875 [analyzer] INFO: Injected into process with pid 10204 and name u'Unicorn-2712.exe'
2025-06-24 21:27:59,921 [analyzer] INFO: Added new file to list with pid 3772 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21352.exe
2025-06-24 21:27:59,937 [analyzer] DEBUG: Loaded monitor into process with pid 9968
2025-06-24 21:27:59,967 [analyzer] INFO: Injected into process with pid 2752 and name u'Unicorn-29711.exe'
2025-06-24 21:28:00,015 [analyzer] INFO: Injected into process with pid 9960 and name u'Unicorn-11072.exe'
2025-06-24 21:28:00,030 [analyzer] INFO: Injected into process with pid 10272 and name u'Unicorn-10952.exe'
2025-06-24 21:28:00,092 [analyzer] INFO: Added new file to list with pid 5272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29594.exe
2025-06-24 21:28:00,108 [analyzer] INFO: Added new file to list with pid 3168 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10391.exe
2025-06-24 21:28:00,140 [analyzer] DEBUG: Loaded monitor into process with pid 10008
2025-06-24 21:28:00,203 [analyzer] INFO: Injected into process with pid 10304 and name u'Unicorn-20082.exe'
2025-06-24 21:28:00,296 [analyzer] INFO: Added new file to list with pid 3776 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62200.exe
2025-06-24 21:28:00,328 [analyzer] INFO: Added new file to list with pid 4132 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51729.exe
2025-06-24 21:28:00,375 [analyzer] DEBUG: Loaded monitor into process with pid 10204
2025-06-24 21:28:00,437 [analyzer] INFO: Added new file to list with pid 4228 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46440.exe
2025-06-24 21:28:00,483 [analyzer] DEBUG: Loaded monitor into process with pid 2752
2025-06-24 21:28:00,562 [analyzer] DEBUG: Loaded monitor into process with pid 9960
2025-06-24 21:28:00,562 [analyzer] DEBUG: Loaded monitor into process with pid 10272
2025-06-24 21:28:00,562 [analyzer] INFO: Added new file to list with pid 3656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26457.exe
2025-06-24 21:28:00,750 [analyzer] DEBUG: Loaded monitor into process with pid 10304
2025-06-24 21:28:00,780 [analyzer] INFO: Injected into process with pid 10444 and name u'Unicorn-32399.exe'
2025-06-24 21:28:00,780 [analyzer] INFO: Injected into process with pid 10436 and name u'Unicorn-38265.exe'
2025-06-24 21:28:00,937 [analyzer] INFO: Added new file to list with pid 4904 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15600.exe
2025-06-24 21:28:00,983 [analyzer] INFO: Injected into process with pid 10532 and name u'Unicorn-28824.exe'
2025-06-24 21:28:00,983 [analyzer] INFO: Added new file to list with pid 1812 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2177.exe
2025-06-24 21:28:01,015 [analyzer] INFO: Added new file to list with pid 5068 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2409.exe
2025-06-24 21:28:01,030 [analyzer] INFO: Injected into process with pid 10564 and name u'Unicorn-21352.exe'
2025-06-24 21:28:01,233 [analyzer] INFO: Injected into process with pid 10608 and name u'Unicorn-10391.exe'
2025-06-24 21:28:01,233 [analyzer] INFO: Injected into process with pid 10600 and name u'Unicorn-29594.exe'
2025-06-24 21:28:01,250 [analyzer] DEBUG: Loaded monitor into process with pid 10444
2025-06-24 21:28:01,250 [analyzer] INFO: Added new file to list with pid 2872 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11735.exe
2025-06-24 21:28:01,265 [analyzer] DEBUG: Loaded monitor into process with pid 10436
2025-06-24 21:28:01,375 [analyzer] INFO: Added new file to list with pid 2852 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53344.exe
2025-06-24 21:28:01,405 [analyzer] INFO: Injected into process with pid 10688 and name u'Unicorn-51729.exe'
2025-06-24 21:28:01,421 [analyzer] INFO: Injected into process with pid 10676 and name u'Unicorn-62200.exe'
2025-06-24 21:28:01,467 [analyzer] INFO: Added new file to list with pid 4612 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6751.exe
2025-06-24 21:28:01,483 [analyzer] INFO: Added new file to list with pid 4756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58553.exe
2025-06-24 21:28:01,515 [analyzer] DEBUG: Loaded monitor into process with pid 10532
2025-06-24 21:28:01,546 [analyzer] DEBUG: Loaded monitor into process with pid 10564
2025-06-24 21:28:01,562 [analyzer] INFO: Injected into process with pid 10736 and name u'Unicorn-46440.exe'
2025-06-24 21:28:01,703 [analyzer] INFO: Injected into process with pid 10784 and name u'Unicorn-26457.exe'
2025-06-24 21:28:01,733 [analyzer] DEBUG: Loaded monitor into process with pid 10608
2025-06-24 21:28:01,750 [analyzer] DEBUG: Loaded monitor into process with pid 10600
2025-06-24 21:28:01,967 [analyzer] DEBUG: Loaded monitor into process with pid 10688
2025-06-24 21:28:02,030 [analyzer] DEBUG: Loaded monitor into process with pid 10676
2025-06-24 21:28:02,062 [analyzer] INFO: Added new file to list with pid 2524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36047.exe
2025-06-24 21:28:02,062 [analyzer] INFO: Added new file to list with pid 5000 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16944.exe
2025-06-24 21:28:02,062 [analyzer] INFO: Added new file to list with pid 5036 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16944.exe
2025-06-24 21:28:02,078 [analyzer] INFO: Added new file to list with pid 3860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36545.exe
2025-06-24 21:28:02,092 [analyzer] DEBUG: Loaded monitor into process with pid 10736
2025-06-24 21:28:02,125 [analyzer] INFO: Injected into process with pid 10876 and name u'Unicorn-15600.exe'
2025-06-24 21:28:02,125 [analyzer] INFO: Injected into process with pid 10884 and name u'Unicorn-15600.exe'
2025-06-24 21:28:02,203 [analyzer] DEBUG: Loaded monitor into process with pid 10784
2025-06-24 21:28:02,265 [analyzer] INFO: Injected into process with pid 10948 and name u'Unicorn-2409.exe'
2025-06-24 21:28:02,296 [analyzer] INFO: Injected into process with pid 10916 and name u'Unicorn-2177.exe'
2025-06-24 21:28:02,312 [analyzer] INFO: Added new file to list with pid 5104 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35200.exe
2025-06-24 21:28:02,453 [analyzer] INFO: Added new file to list with pid 4732 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27608.exe
2025-06-24 21:28:02,453 [analyzer] INFO: Added new file to list with pid 4916 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27608.exe
2025-06-24 21:28:02,530 [analyzer] INFO: Injected into process with pid 11016 and name u'Unicorn-11735.exe'
2025-06-24 21:28:02,640 [analyzer] INFO: Added new file to list with pid 4512 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1760.exe
2025-06-24 21:28:02,640 [analyzer] INFO: Injected into process with pid 11048 and name u'Unicorn-53344.exe'
2025-06-24 21:28:02,655 [analyzer] DEBUG: Loaded monitor into process with pid 10876
2025-06-24 21:28:02,655 [analyzer] DEBUG: Loaded monitor into process with pid 10884
2025-06-24 21:28:02,828 [analyzer] DEBUG: Loaded monitor into process with pid 10916
2025-06-24 21:28:02,828 [analyzer] INFO: Injected into process with pid 11100 and name u'Unicorn-58553.exe'
2025-06-24 21:28:02,842 [analyzer] INFO: Injected into process with pid 11088 and name u'Unicorn-6751.exe'
2025-06-24 21:28:02,842 [analyzer] DEBUG: Loaded monitor into process with pid 10948
2025-06-24 21:28:03,015 [analyzer] INFO: Added new file to list with pid 4412 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1952.exe
2025-06-24 21:28:03,092 [analyzer] INFO: Added new file to list with pid 5076 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4064.exe
2025-06-24 21:28:03,125 [analyzer] DEBUG: Loaded monitor into process with pid 11016
2025-06-24 21:28:03,203 [analyzer] INFO: Added new file to list with pid 5332 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7593.exe
2025-06-24 21:28:03,217 [analyzer] DEBUG: Loaded monitor into process with pid 11048
2025-06-24 21:28:03,405 [analyzer] DEBUG: Loaded monitor into process with pid 11100
2025-06-24 21:28:03,467 [analyzer] DEBUG: Loaded monitor into process with pid 11088
2025-06-24 21:28:03,467 [analyzer] INFO: Injected into process with pid 11236 and name u'Unicorn-36047.exe'
2025-06-24 21:28:03,546 [analyzer] INFO: Injected into process with pid 11248 and name u'Unicorn-36545.exe'
2025-06-24 21:28:03,546 [analyzer] INFO: Injected into process with pid 11256 and name u'Unicorn-16944.exe'
2025-06-24 21:28:03,765 [analyzer] INFO: Added new file to list with pid 3156 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30873.exe
2025-06-24 21:28:03,796 [analyzer] INFO: Added new file to list with pid 4332 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47401.exe
2025-06-24 21:28:03,796 [analyzer] INFO: Added new file to list with pid 2860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4232.exe
2025-06-24 21:28:03,828 [analyzer] INFO: Injected into process with pid 10128 and name u'Unicorn-35200.exe'
2025-06-24 21:28:03,875 [analyzer] INFO: Added new file to list with pid 4092 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6944.exe
2025-06-24 21:28:03,875 [analyzer] INFO: Added new file to list with pid 4808 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52881.exe
2025-06-24 21:28:03,983 [analyzer] INFO: Injected into process with pid 10264 and name u'Unicorn-27608.exe'
2025-06-24 21:28:03,983 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10896,10912,0').
Traceback (most recent call last):
  File "C:/tmp4nivwu/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp4nivwu/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp4nivwu/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp4nivwu\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp4nivwu\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp4nivwu\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:28:04,078 [analyzer] INFO: Injected into process with pid 10316 and name u'Unicorn-1760.exe'
2025-06-24 21:28:04,140 [analyzer] INFO: Added new file to list with pid 1988 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53448.exe
2025-06-24 21:28:04,140 [analyzer] INFO: Added new file to list with pid 3532 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62113.exe
2025-06-24 21:28:04,233 [analyzer] INFO: Added new file to list with pid 3128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12223.exe
2025-06-24 21:28:04,296 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11148,11160,0').
Traceback (most recent call last):
  File "C:/tmp4nivwu/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp4nivwu/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp4nivwu/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp4nivwu\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp4nivwu\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp4nivwu\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:28:04,312 [analyzer] INFO: Added new file to list with pid 4056 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21464.exe
2025-06-24 21:28:04,390 [analyzer] INFO: Added new file to list with pid 296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53633.exe
2025-06-24 21:28:04,437 [analyzer] INFO: Injected into process with pid 10428 and name u'Unicorn-1952.exe'
2025-06-24 21:28:04,500 [analyzer] INFO: Added new file to list with pid 5248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38258.exe
2025-06-24 21:28:04,515 [analyzer] INFO: Injected into process with pid 10492 and name u'Unicorn-4064.exe'
2025-06-24 21:28:04,530 [analyzer] INFO: Injected into process with pid 10588 and name u'Unicorn-7593.exe'
2025-06-24 21:28:04,562 [analyzer] INFO: Added new file to list with pid 3576 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29633.exe
2025-06-24 21:28:04,562 [analyzer] INFO: Added new file to list with pid 3576 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29633.exe
2025-06-24 21:28:04,717 [analyzer] INFO: Added new file to list with pid 3180 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52488.exe
2025-06-24 21:28:04,937 [analyzer] INFO: Injected into process with pid 10744 and name u'Unicorn-30873.exe'
2025-06-24 21:28:04,953 [analyzer] INFO: Injected into process with pid 10872 and name u'Unicorn-4232.exe'
2025-06-24 21:28:04,967 [analyzer] INFO: Injected into process with pid 10772 and name u'Unicorn-47401.exe'
2025-06-24 21:28:05,108 [analyzer] INFO: Added new file to list with pid 128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28898.exe
2025-06-24 21:28:05,108 [analyzer] INFO: Injected into process with pid 2060 and name u'Unicorn-52881.exe'
2025-06-24 21:28:05,390 [analyzer] INFO: Added new file to list with pid 3160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39032.exe
2025-06-24 21:28:05,421 [analyzer] INFO: Injected into process with pid 11216 and name u'Unicorn-53448.exe'
2025-06-24 21:28:05,453 [analyzer] INFO: Injected into process with pid 2708 and name u'Unicorn-62113.exe'
2025-06-24 21:28:05,453 [analyzer] INFO: Added new file to list with pid 3956 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39529.exe
2025-06-24 21:28:05,483 [analyzer] INFO: Added new file to list with pid 2244 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-41208.exe
2025-06-24 21:28:05,483 [analyzer] INFO: Added new file to list with pid 5000 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-607.exe
2025-06-24 21:28:05,562 [analyzer] INFO: Added new file to list with pid 3652 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39337.exe
2025-06-24 21:28:05,671 [analyzer] INFO: Injected into process with pid 10248 and name u'Unicorn-21464.exe'
2025-06-24 21:28:05,687 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '2508,2868,0').
Traceback (most recent call last):
  File "C:/tmp4nivwu/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp4nivwu/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp4nivwu/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp4nivwu\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp4nivwu\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp4nivwu\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:28:05,687 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '1200,1896,0').
Traceback (most recent call last):
  File "C:/tmp4nivwu/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp4nivwu/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp4nivwu/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp4nivwu\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp4nivwu\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp4nivwu\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:28:05,687 [analyzer] INFO: Injected into process with pid 10284 and name u'Unicorn-53633.exe'
2025-06-24 21:28:05,703 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '1124,2104,0').
Traceback (most recent call last):
  File "C:/tmp4nivwu/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp4nivwu/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp4nivwu/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp4nivwu\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp4nivwu\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp4nivwu\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:28:05,796 [analyzer] INFO: Added new file to list with pid 3144 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45856.exe
2025-06-24 21:28:05,812 [analyzer] INFO: Added new file to list with pid 4732 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48656.exe
2025-06-24 21:28:05,812 [analyzer] INFO: Added new file to list with pid 4204 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48656.exe
2025-06-24 21:28:05,812 [analyzer] INFO: Added new file to list with pid 1816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29320.exe
2025-06-24 21:28:05,812 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46386.exe
2025-06-24 21:28:05,828 [analyzer] INFO: Added new file to list with pid 3688 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54521.exe
2025-06-24 21:28:05,828 [analyzer] INFO: Added new file to list with pid 5008 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34920.exe
2025-06-24 21:28:05,905 [analyzer] INFO: Injected into process with pid 10372 and name u'Unicorn-38258.exe'
2025-06-24 21:28:05,937 [analyzer] INFO: Added new file to list with pid 3108 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54600.exe
2025-06-24 21:28:05,953 [analyzer] INFO: Added new file to list with pid 348 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21728.exe
2025-06-24 21:28:05,953 [analyzer] INFO: Added new file to list with pid 700 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25431.exe
2025-06-24 21:28:05,983 [analyzer] INFO: Added new file to list with pid 2012 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29896.exe
2025-06-24 21:28:05,983 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10384,10848,0').
Traceback (most recent call last):
  File "C:/tmp4nivwu/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp4nivwu/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp4nivwu/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp4nivwu\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp4nivwu\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp4nivwu\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:28:06,000 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '2932,10668,0').
Traceback (most recent call last):
  File "C:/tmp4nivwu/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp4nivwu/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp4nivwu/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp4nivwu\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp4nivwu\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp4nivwu\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:28:06,000 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11024,10624,0').
Traceback (most recent call last):
  File "C:/tmp4nivwu/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp4nivwu/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp4nivwu/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp4nivwu\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp4nivwu\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp4nivwu\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:28:06,015 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11056,10584,0').
Traceback (most recent call last):
  File "C:/tmp4nivwu/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp4nivwu/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp4nivwu/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp4nivwu\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp4nivwu\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp4nivwu\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:28:06,015 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10484,10652,0').
Traceback (most recent call last):
  File "C:/tmp4nivwu/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp4nivwu/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp4nivwu/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp4nivwu\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp4nivwu\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp4nivwu\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:28:06,015 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11080,10860,0').
Traceback (most recent call last):
  File "C:/tmp4nivwu/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp4nivwu/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp4nivwu/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp4nivwu\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp4nivwu\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp4nivwu\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:28:06,030 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10852,10748,0').
Traceback (most recent call last):
  File "C:/tmp4nivwu/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp4nivwu/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp4nivwu/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp4nivwu\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp4nivwu\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp4nivwu\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:28:06,030 [analyzer] INFO: Injected into process with pid 1408 and name u'Unicorn-29633.exe'
2025-06-24 21:28:06,108 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11292,11296,0').
Traceback (most recent call last):
  File "C:/tmp4nivwu/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp4nivwu/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp4nivwu/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp4nivwu\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp4nivwu\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp4nivwu\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:28:06,171 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11304,11308,0').
Traceback (most recent call last):
  File "C:/tmp4nivwu/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp4nivwu/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp4nivwu/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp4nivwu\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp4nivwu\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp4nivwu\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:28:06,187 [analyzer] INFO: Added new file to list with pid 4840 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12912.exe
2025-06-24 21:28:06,296 [analyzer] INFO: Injected into process with pid 10552 and name u'Unicorn-52488.exe'
2025-06-24 21:28:06,328 [analyzer] INFO: Added new file to list with pid 4288 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42792.exe
2025-06-24 21:28:06,342 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11456,11460,0').
Traceback (most recent call last):
  File "C:/tmp4nivwu/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp4nivwu/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp4nivwu/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp4nivwu\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp4nivwu\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp4nivwu\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:28:06,703 [analyzer] INFO: Injected into process with pid 10844 and name u'Unicorn-28898.exe'
2025-06-24 21:28:06,717 [analyzer] INFO: Injected into process with pid 10988 and name u'Unicorn-39032.exe'
2025-06-24 21:28:06,858 [analyzer] INFO: Injected into process with pid 11036 and name u'Unicorn-39529.exe'
2025-06-24 21:28:06,858 [analyzer] INFO: Injected into process with pid 11156 and name u'Unicorn-607.exe'
2025-06-24 21:28:06,858 [analyzer] INFO: Injected into process with pid 11144 and name u'Unicorn-41208.exe'
2025-06-24 21:28:07,108 [analyzer] INFO: Injected into process with pid 11328 and name u'Unicorn-29896.exe'
2025-06-24 21:28:07,125 [analyzer] INFO: Added new file to list with pid 4092 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49888.exe
2025-06-24 21:28:07,155 [analyzer] INFO: Injected into process with pid 11312 and name u'Unicorn-25431.exe'
2025-06-24 21:28:07,312 [analyzer] INFO: Added new file to list with pid 5424 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58626.exe
2025-06-24 21:28:07,328 [analyzer] INFO: Injected into process with pid 11476 and name u'Unicorn-42792.exe'
2025-06-24 21:28:07,375 [analyzer] INFO: Added new file to list with pid 3468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33935.exe
2025-06-24 21:28:07,515 [analyzer] INFO: Added new file to list with pid 5484 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42674.exe
2025-06-24 21:28:07,765 [analyzer] INFO: Added new file to list with pid 3576 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57096.exe
2025-06-24 21:28:07,858 [analyzer] INFO: Injected into process with pid 11580 and name u'Unicorn-49888.exe'
2025-06-24 21:28:08,062 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33473.exe
2025-06-24 21:28:08,140 [analyzer] INFO: Added new file to list with pid 3500 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39136.exe
2025-06-24 21:28:08,155 [analyzer] INFO: Added new file to list with pid 1580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22600.exe
2025-06-24 21:28:08,155 [analyzer] INFO: Injected into process with pid 11608 and name u'Unicorn-58626.exe'
2025-06-24 21:28:08,233 [analyzer] INFO: Added new file to list with pid 4868 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20032.exe
2025-06-24 21:28:08,312 [analyzer] INFO: Injected into process with pid 11632 and name u'Unicorn-33935.exe'
2025-06-24 21:28:08,453 [analyzer] INFO: Added new file to list with pid 4516 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1095.exe
2025-06-24 21:28:08,467 [analyzer] INFO: Added new file to list with pid 3260 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63832.exe
2025-06-24 21:28:08,608 [analyzer] INFO: Injected into process with pid 11664 and name u'Unicorn-42674.exe'
2025-06-24 21:28:08,953 [analyzer] INFO: Injected into process with pid 11708 and name u'Unicorn-57096.exe'
2025-06-24 21:28:08,967 [analyzer] INFO: Added new file to list with pid 4112 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19648.exe
2025-06-24 21:28:09,203 [analyzer] INFO: Added new file to list with pid 3084 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56617.exe
2025-06-24 21:28:09,203 [analyzer] INFO: Injected into process with pid 11736 and name u'Unicorn-33473.exe'
2025-06-24 21:28:09,250 [analyzer] INFO: Injected into process with pid 11760 and name u'Unicorn-22600.exe'
2025-06-24 21:28:09,250 [analyzer] INFO: Injected into process with pid 11752 and name u'Unicorn-39136.exe'
2025-06-24 21:28:09,265 [analyzer] INFO: Added new file to list with pid 3208 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-65481.exe
2025-06-24 21:28:09,312 [analyzer] INFO: Injected into process with pid 11780 and name u'Unicorn-20032.exe'
2025-06-24 21:28:09,358 [analyzer] INFO: Added new file to list with pid 3360 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57889.exe
2025-06-24 21:28:09,375 [analyzer] INFO: Added new file to list with pid 4464 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38288.exe
2025-06-24 21:28:09,467 [analyzer] INFO: Injected into process with pid 11856 and name u'Unicorn-1095.exe'
2025-06-24 21:28:09,467 [analyzer] INFO: Injected into process with pid 11864 and name u'Unicorn-63832.exe'
2025-06-24 21:28:09,655 [analyzer] INFO: Added new file to list with pid 4368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4464.exe
2025-06-24 21:28:09,655 [analyzer] INFO: Added new file to list with pid 5028 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4464.exe
2025-06-24 21:28:09,750 [analyzer] INFO: Injected into process with pid 11940 and name u'Unicorn-19648.exe'
2025-06-24 21:28:09,842 [analyzer] INFO: Injected into process with pid 11996 and name u'Unicorn-56617.exe'
2025-06-24 21:28:09,858 [analyzer] INFO: Added new file to list with pid 3440 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40288.exe
2025-06-24 21:28:09,858 [analyzer] INFO: Added new file to list with pid 3684 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48953.exe
2025-06-24 21:28:09,875 [analyzer] INFO: Injected into process with pid 12004 and name u'Unicorn-65481.exe'
2025-06-24 21:28:09,937 [analyzer] INFO: Added new file to list with pid 3448 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56432.exe
2025-06-24 21:28:10,000 [analyzer] INFO: Injected into process with pid 12044 and name u'Unicorn-57889.exe'
2025-06-24 21:28:10,000 [analyzer] INFO: Injected into process with pid 12052 and name u'Unicorn-38288.exe'
2025-06-24 21:28:10,062 [analyzer] INFO: Added new file to list with pid 4128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39440.exe
2025-06-24 21:28:10,155 [analyzer] INFO: Injected into process with pid 12124 and name u'Unicorn-4464.exe'
2025-06-24 21:28:10,328 [analyzer] INFO: Injected into process with pid 12188 and name u'Unicorn-48953.exe'
2025-06-24 21:28:10,328 [analyzer] INFO: Injected into process with pid 12180 and name u'Unicorn-40288.exe'
2025-06-24 21:28:10,358 [analyzer] INFO: Added new file to list with pid 3456 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26255.exe
2025-06-24 21:28:10,375 [analyzer] INFO: Injected into process with pid 12236 and name u'Unicorn-56432.exe'
2025-06-24 21:28:10,437 [analyzer] INFO: Injected into process with pid 12268 and name u'Unicorn-39440.exe'
2025-06-24 21:28:10,483 [analyzer] INFO: Added new file to list with pid 4884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23296.exe
2025-06-24 21:28:10,483 [analyzer] INFO: Added new file to list with pid 4924 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23296.exe
2025-06-24 21:28:10,483 [analyzer] INFO: Added new file to list with pid 3556 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34231.exe
2025-06-24 21:28:10,592 [analyzer] INFO: Added new file to list with pid 4860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30504.exe
2025-06-24 21:28:10,608 [analyzer] INFO: Added new file to list with pid 5556 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50370.exe
2025-06-24 21:28:10,687 [analyzer] INFO: Injected into process with pid 1336 and name u'Unicorn-26255.exe'
2025-06-24 21:28:10,750 [analyzer] INFO: Added new file to list with pid 3284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25409.exe
2025-06-24 21:28:10,828 [analyzer] INFO: Injected into process with pid 1348 and name u'Unicorn-23296.exe'
2025-06-24 21:28:10,842 [analyzer] INFO: Injected into process with pid 2780 and name u'Unicorn-23296.exe'
2025-06-24 21:28:10,842 [analyzer] INFO: Injected into process with pid 1304 and name u'Unicorn-34231.exe'
2025-06-24 21:28:10,890 [analyzer] INFO: Injected into process with pid 11392 and name u'Unicorn-30504.exe'
2025-06-24 21:28:10,905 [analyzer] INFO: Injected into process with pid 11380 and name u'Unicorn-50370.exe'
2025-06-24 21:28:11,062 [analyzer] INFO: Injected into process with pid 1876 and name u'Unicorn-25409.exe'
2025-06-24 21:28:11,358 [analyzer] INFO: Added new file to list with pid 2792 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19424.exe
2025-06-24 21:28:11,358 [analyzer] INFO: Added new file to list with pid 3296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44625.exe
2025-06-24 21:28:11,358 [analyzer] INFO: Added new file to list with pid 2280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9624.exe
2025-06-24 21:28:11,358 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19424.exe
2025-06-24 21:28:11,717 [analyzer] INFO: Injected into process with pid 11696 and name u'Unicorn-9624.exe'
2025-06-24 21:28:11,717 [analyzer] INFO: Injected into process with pid 11676 and name u'Unicorn-44625.exe'
2025-06-24 21:28:11,717 [analyzer] INFO: Injected into process with pid 11684 and name u'Unicorn-19424.exe'
2025-06-24 21:28:12,108 [analyzer] INFO: Added new file to list with pid 4124 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5720.exe
2025-06-24 21:28:12,108 [analyzer] INFO: Added new file to list with pid 4188 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25321.exe
2025-06-24 21:28:12,217 [analyzer] INFO: Added new file to list with pid 588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25162.exe
2025-06-24 21:28:12,405 [analyzer] INFO: Added new file to list with pid 4888 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54921.exe
2025-06-24 21:28:12,405 [analyzer] INFO: Injected into process with pid 11892 and name u'Unicorn-5720.exe'
2025-06-24 21:28:12,421 [analyzer] INFO: Injected into process with pid 11888 and name u'Unicorn-25321.exe'
2025-06-24 21:28:12,467 [analyzer] INFO: Added new file to list with pid 3804 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33681.exe
2025-06-24 21:28:12,515 [analyzer] INFO: Injected into process with pid 11952 and name u'Unicorn-25162.exe'
2025-06-24 21:28:12,608 [analyzer] INFO: Added new file to list with pid 3668 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15887.exe
2025-06-24 21:28:12,608 [analyzer] INFO: Added new file to list with pid 4272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24553.exe
2025-06-24 21:28:12,717 [analyzer] INFO: Added new file to list with pid 4368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26663.exe
2025-06-24 21:28:12,717 [analyzer] INFO: Added new file to list with pid 3624 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23863.exe
2025-06-24 21:28:12,717 [analyzer] INFO: Injected into process with pid 12092 and name u'Unicorn-54921.exe'
2025-06-24 21:28:12,780 [analyzer] INFO: Added new file to list with pid 5304 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54345.exe
2025-06-24 21:28:12,875 [analyzer] INFO: Injected into process with pid 12168 and name u'Unicorn-33681.exe'
2025-06-24 21:28:12,875 [analyzer] INFO: Added new file to list with pid 4488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16768.exe
2025-06-24 21:28:12,953 [analyzer] INFO: Added new file to list with pid 4280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29648.exe
2025-06-24 21:28:12,967 [analyzer] INFO: Injected into process with pid 12156 and name u'Unicorn-15887.exe'
2025-06-24 21:28:12,967 [analyzer] INFO: Injected into process with pid 12164 and name u'Unicorn-24553.exe'
2025-06-24 21:28:13,078 [analyzer] INFO: Injected into process with pid 11340 and name u'Unicorn-23863.exe'
2025-06-24 21:28:13,108 [analyzer] INFO: Added new file to list with pid 4152 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35025.exe
2025-06-24 21:28:13,108 [analyzer] INFO: Injected into process with pid 12256 and name u'Unicorn-26663.exe'
2025-06-24 21:28:13,140 [analyzer] INFO: Injected into process with pid 2180 and name u'Unicorn-54345.exe'
2025-06-24 21:28:13,217 [analyzer] INFO: Injected into process with pid 11012 and name u'Unicorn-16768.exe'
2025-06-24 21:28:13,280 [analyzer] INFO: Injected into process with pid 11600 and name u'Unicorn-29648.exe'
2025-06-24 21:28:13,296 [analyzer] INFO: Added new file to list with pid 2008 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51778.exe
2025-06-24 21:28:13,421 [analyzer] INFO: Injected into process with pid 11728 and name u'Unicorn-35025.exe'
2025-06-24 21:28:13,453 [analyzer] INFO: Added new file to list with pid 5460 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2617.exe
2025-06-24 21:28:13,500 [analyzer] INFO: Added new file to list with pid 3756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18383.exe
2025-06-24 21:28:13,578 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50593.exe
2025-06-24 21:28:13,655 [analyzer] INFO: Added new file to list with pid 3836 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-703.exe
2025-06-24 21:28:13,703 [analyzer] INFO: Injected into process with pid 11836 and name u'Unicorn-51778.exe'
2025-06-24 21:28:13,796 [analyzer] INFO: Injected into process with pid 11960 and name u'Unicorn-2617.exe'
2025-06-24 21:28:13,842 [analyzer] INFO: Added new file to list with pid 4776 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15040.exe
2025-06-24 21:28:13,858 [analyzer] INFO: Injected into process with pid 12064 and name u'Unicorn-18383.exe'
2025-06-24 21:28:13,921 [analyzer] INFO: Injected into process with pid 12036 and name u'Unicorn-50593.exe'
2025-06-24 21:28:14,421 [analyzer] INFO: Added new file to list with pid 4640 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3888.exe
2025-06-24 21:28:14,421 [analyzer] INFO: Added new file to list with pid 3616 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60760.exe
2025-06-24 21:28:14,453 [analyzer] INFO: Added new file to list with pid 2792 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44954.exe
2025-06-24 21:28:14,625 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27658.exe
2025-06-24 21:28:14,671 [analyzer] INFO: Added new file to list with pid 3772 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51440.exe
2025-06-24 21:28:14,842 [analyzer] INFO: Added new file to list with pid 3168 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10976.exe
2025-06-24 21:28:14,842 [analyzer] INFO: Added new file to list with pid 5272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16576.exe
2025-06-24 21:28:14,967 [analyzer] INFO: Added new file to list with pid 5596 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52586.exe
2025-06-24 21:28:15,030 [analyzer] INFO: Added new file to list with pid 4132 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4735.exe
2025-06-24 21:28:15,030 [analyzer] INFO: Added new file to list with pid 3776 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13400.exe
2025-06-24 21:28:15,187 [analyzer] INFO: Added new file to list with pid 4228 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54241.exe
2025-06-24 21:28:15,280 [analyzer] INFO: Added new file to list with pid 3656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5119.exe
2025-06-24 21:28:15,750 [analyzer] INFO: Added new file to list with pid 4696 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14935.exe
2025-06-24 21:28:15,750 [analyzer] INFO: Added new file to list with pid 4904 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14935.exe
2025-06-24 21:28:15,890 [analyzer] INFO: Added new file to list with pid 5068 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58761.exe
2025-06-24 21:28:15,890 [analyzer] INFO: Added new file to list with pid 1812 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48695.exe
2025-06-24 21:28:16,187 [analyzer] INFO: Added new file to list with pid 2872 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26456.exe
2025-06-24 21:28:16,250 [analyzer] INFO: Added new file to list with pid 2852 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51153.exe
2025-06-24 21:28:16,483 [analyzer] INFO: Added new file to list with pid 4756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21671.exe
2025-06-24 21:28:16,500 [analyzer] INFO: Added new file to list with pid 4612 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19368.exe
2025-06-24 21:28:17,187 [analyzer] INFO: Added new file to list with pid 3860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36359.exe
2025-06-24 21:28:17,187 [analyzer] INFO: Added new file to list with pid 5036 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39160.exe
2025-06-24 21:28:17,562 [analyzer] INFO: Added new file to list with pid 5104 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15039.exe
2025-06-24 21:28:17,733 [analyzer] INFO: Added new file to list with pid 4916 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30223.exe
2025-06-24 21:28:17,733 [analyzer] INFO: Added new file to list with pid 3892 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27423.exe
2025-06-24 21:28:17,765 [analyzer] INFO: Added new file to list with pid 4512 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5719.exe
2025-06-24 21:28:17,967 [analyzer] INFO: Added new file to list with pid 3128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11272.exe
2025-06-24 21:28:18,030 [analyzer] INFO: Added new file to list with pid 4412 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57224.exe
2025-06-24 21:28:18,140 [analyzer] INFO: Added new file to list with pid 5076 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-65200.exe
2025-06-24 21:28:18,187 [analyzer] INFO: Added new file to list with pid 5332 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35128.exe
2025-06-24 21:28:18,562 [analyzer] INFO: Added new file to list with pid 3156 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53656.exe
2025-06-24 21:28:18,608 [analyzer] INFO: Added new file to list with pid 2860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7016.exe
2025-06-24 21:28:18,625 [analyzer] INFO: Added new file to list with pid 4332 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29151.exe
2025-06-24 21:28:18,733 [analyzer] INFO: Added new file to list with pid 4808 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15423.exe
2025-06-24 21:28:18,796 [analyzer] INFO: Added new file to list with pid 4696 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62705.exe
2025-06-24 21:28:19,062 [analyzer] INFO: Added new file to list with pid 1988 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31256.exe
2025-06-24 21:28:19,092 [analyzer] INFO: Added new file to list with pid 3532 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23287.exe
2025-06-24 21:28:19,280 [analyzer] INFO: Added new file to list with pid 4056 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56344.exe
2025-06-24 21:28:19,280 [analyzer] INFO: Added new file to list with pid 296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56874.exe
2025-06-24 21:28:19,296 [analyzer] INFO: Added new file to list with pid 3652 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48176.exe
2025-06-24 21:28:19,312 [analyzer] INFO: Added new file to list with pid 3900 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40008.exe
2025-06-24 21:28:19,515 [analyzer] INFO: Added new file to list with pid 5248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52425.exe
2025-06-24 21:28:19,640 [analyzer] INFO: Added new file to list with pid 1816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6713.exe
2025-06-24 21:28:19,703 [analyzer] INFO: Added new file to list with pid 5008 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-41464.exe
2025-06-24 21:28:19,703 [analyzer] INFO: Added new file to list with pid 3144 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22128.exe
2025-06-24 21:28:19,703 [analyzer] INFO: Added new file to list with pid 4204 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47329.exe
2025-06-24 21:28:19,703 [analyzer] INFO: Added new file to list with pid 3256 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38664.exe
2025-06-24 21:28:19,750 [analyzer] INFO: Added new file to list with pid 3688 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22327.exe
2025-06-24 21:28:19,750 [analyzer] INFO: Added new file to list with pid 4732 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30993.exe
2025-06-24 21:28:19,765 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1327.exe
2025-06-24 21:28:19,828 [analyzer] INFO: Added new file to list with pid 3108 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30872.exe
2025-06-24 21:28:19,858 [analyzer] INFO: Added new file to list with pid 348 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23433.exe
2025-06-24 21:28:19,937 [analyzer] INFO: Added new file to list with pid 3180 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30680.exe
2025-06-24 21:28:19,983 [analyzer] INFO: Added new file to list with pid 4840 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17343.exe
2025-06-24 21:28:20,328 [analyzer] INFO: Added new file to list with pid 128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8255.exe
2025-06-24 21:28:20,342 [analyzer] INFO: Added new file to list with pid 3160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4552.exe
2025-06-24 21:28:20,530 [analyzer] INFO: Added new file to list with pid 5000 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61273.exe
2025-06-24 21:28:20,530 [analyzer] INFO: Added new file to list with pid 2244 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2736.exe
2025-06-24 21:28:20,530 [analyzer] INFO: Added new file to list with pid 3956 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52608.exe
2025-06-24 21:28:20,765 [analyzer] INFO: Added new file to list with pid 700 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34440.exe
2025-06-24 21:28:20,765 [analyzer] INFO: Added new file to list with pid 2012 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61306.exe
2025-06-24 21:28:20,983 [analyzer] INFO: Added new file to list with pid 4288 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20624.exe
2025-06-24 21:28:21,592 [analyzer] INFO: Added new file to list with pid 4092 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21272.exe
2025-06-24 21:28:21,796 [analyzer] INFO: Added new file to list with pid 5424 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35424.exe
2025-06-24 21:28:22,217 [analyzer] INFO: Added new file to list with pid 5484 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12648.exe
2025-06-24 21:28:22,342 [analyzer] INFO: Added new file to list with pid 3652 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7624.exe
2025-06-24 21:28:22,578 [analyzer] INFO: Added new file to list with pid 3576 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6472.exe
2025-06-24 21:28:22,842 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15223.exe
2025-06-24 21:28:22,842 [analyzer] INFO: Added new file to list with pid 3500 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64225.exe
2025-06-24 21:28:22,858 [analyzer] INFO: Added new file to list with pid 1580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15753.exe
2025-06-24 21:28:22,967 [analyzer] INFO: Added new file to list with pid 4868 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25999.exe
2025-06-24 21:28:23,062 [analyzer] INFO: Added new file to list with pid 4516 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50313.exe
2025-06-24 21:28:23,062 [analyzer] INFO: Added new file to list with pid 3260 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25112.exe
2025-06-24 21:28:23,342 [analyzer] INFO: Added new file to list with pid 4112 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28495.exe
2025-06-24 21:28:23,437 [analyzer] INFO: Added new file to list with pid 3084 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42370.exe
2025-06-24 21:28:23,515 [analyzer] INFO: Added new file to list with pid 3208 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-999.exe
2025-06-24 21:28:23,625 [analyzer] INFO: Added new file to list with pid 3360 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16375.exe
2025-06-24 21:28:23,625 [analyzer] INFO: Added new file to list with pid 4464 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19175.exe
2025-06-24 21:28:23,828 [analyzer] INFO: Added new file to list with pid 5028 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35896.exe
2025-06-24 21:28:24,030 [analyzer] INFO: Added new file to list with pid 3440 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8399.exe
2025-06-24 21:28:24,030 [analyzer] INFO: Added new file to list with pid 3440 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57401.exe
2025-06-24 21:28:24,062 [analyzer] INFO: Added new file to list with pid 3448 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22528.exe
2025-06-24 21:28:24,140 [analyzer] INFO: Added new file to list with pid 4128 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58392.exe
2025-06-24 21:28:24,342 [analyzer] INFO: Added new file to list with pid 3456 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14744.exe
2025-06-24 21:28:24,405 [analyzer] INFO: Added new file to list with pid 4924 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50224.exe
2025-06-24 21:28:24,405 [analyzer] INFO: Added new file to list with pid 4884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50224.exe
2025-06-24 21:28:24,405 [analyzer] INFO: Added new file to list with pid 3556 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30888.exe
2025-06-24 21:28:24,500 [analyzer] INFO: Added new file to list with pid 4860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1215.exe
2025-06-24 21:28:24,546 [analyzer] INFO: Added new file to list with pid 5556 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27360.exe
2025-06-24 21:28:24,655 [analyzer] INFO: Added new file to list with pid 3284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38103.exe
2025-06-24 21:28:25,342 [analyzer] INFO: Added new file to list with pid 2280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59881.exe
2025-06-24 21:28:25,342 [analyzer] INFO: Added new file to list with pid 3296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16479.exe
2025-06-24 21:28:25,358 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-673.exe
2025-06-24 21:28:26,092 [analyzer] INFO: Added new file to list with pid 4188 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17631.exe
2025-06-24 21:28:26,092 [analyzer] INFO: Added new file to list with pid 4124 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20431.exe
2025-06-24 21:28:26,125 [analyzer] INFO: Added new file to list with pid 588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45831.exe
2025-06-24 21:28:26,328 [analyzer] INFO: Added new file to list with pid 4888 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20815.exe
2025-06-24 21:28:26,467 [analyzer] INFO: Added new file to list with pid 3804 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17823.exe
2025-06-24 21:28:26,562 [analyzer] INFO: Added new file to list with pid 4272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25031.exe
2025-06-24 21:28:26,562 [analyzer] INFO: Added new file to list with pid 3668 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8496.exe
2025-06-24 21:28:26,780 [analyzer] INFO: Added new file to list with pid 4368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17168.exe
2025-06-24 21:28:26,780 [analyzer] INFO: Added new file to list with pid 3624 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57505.exe
2025-06-24 21:28:26,828 [analyzer] INFO: Added new file to list with pid 5304 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36384.exe
2025-06-24 21:28:26,875 [analyzer] INFO: Added new file to list with pid 4488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-911.exe
2025-06-24 21:28:26,905 [analyzer] INFO: Added new file to list with pid 4280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52528.exe
2025-06-24 21:28:27,030 [analyzer] INFO: Added new file to list with pid 4152 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51840.exe
2025-06-24 21:28:27,217 [analyzer] INFO: Added new file to list with pid 2284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55343.exe
2025-06-24 21:28:27,421 [analyzer] INFO: Added new file to list with pid 3756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27328.exe
2025-06-24 21:28:27,421 [analyzer] INFO: Added new file to list with pid 2008 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22863.exe
2025-06-24 21:28:27,453 [analyzer] INFO: Added new file to list with pid 5460 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8424.exe
2025-06-24 21:28:27,483 [analyzer] INFO: Added new file to list with pid 4924 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11688.exe
2025-06-24 21:28:27,500 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60392.exe
2025-06-24 21:30:15,092 [analyzer] INFO: Analysis timeout hit, terminating analysis.
2025-06-24 21:30:43,171 [analyzer] INFO: Terminating remaining processes before shutdown.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 2244.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 2860.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 700.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 2280.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 2488.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 1812.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 128.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 2008.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 2284.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 348.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 1816.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 588.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 296.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 2012.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 2792.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 1580.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 2852.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 2872.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 2524.
2025-06-24 21:30:43,171 [lib.api.process] INFO: Successfully terminated process with pid 1988.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3084.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3108.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3128.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3144.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3160.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3168.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3180.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3440.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3448.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3456.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3500.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3616.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3624.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3656.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3668.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3756.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3836.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3860.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3892.
2025-06-24 21:30:43,187 [lib.api.process] INFO: Successfully terminated process with pid 3900.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 3956.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 3964.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 4000.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 4016.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 4056.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 4092.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 3156.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 3256.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 3260.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 3468.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 3532.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 3576.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 3652.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 3688.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 3208.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 3360.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 3316.
2025-06-24 21:30:43,203 [lib.api.process] INFO: Successfully terminated process with pid 3284.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 3556.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 3684.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 3804.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 3772.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 3856.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 3296.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 3776.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 4132.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 4152.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 4188.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 4204.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 4228.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 4272.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 4332.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 4488.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 4516.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 4612.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 4640.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 4732.
2025-06-24 21:30:43,217 [lib.api.process] INFO: Successfully terminated process with pid 4756.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 4808.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 4840.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 4868.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 4904.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 4924.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 5000.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 5008.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 5036.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 5028.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 5104.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 4112.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 4124.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 4368.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 4464.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 4512.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 4696.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 4776.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 4888.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 4860.
2025-06-24 21:30:43,233 [lib.api.process] INFO: Successfully terminated process with pid 4916.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5076.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 4288.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 4128.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 4412.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 4280.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5068.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 4884.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5248.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5272.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5304.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5332.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5424.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5460.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5484.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5556.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5596.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5648.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5680.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5724.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5780.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5824.
2025-06-24 21:30:43,250 [lib.api.process] INFO: Successfully terminated process with pid 5832.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 5912.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 5952.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 5972.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 6048.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 6080.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 6100.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 5360.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 5348.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 5476.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 5524.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 5628.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 5740.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 5884.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 5948.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 6040.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 6064.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 6136.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 5704.
2025-06-24 21:30:43,265 [lib.api.process] INFO: Successfully terminated process with pid 5616.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 5284.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 5664.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 5928.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 5536.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6172.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6224.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6264.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6292.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6340.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6404.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6436.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6500.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6528.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6580.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6612.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6644.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6700.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6732.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6780.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6796.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6840.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6868.
2025-06-24 21:30:43,280 [lib.api.process] INFO: Successfully terminated process with pid 6896.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6952.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 7012.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 7060.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 7124.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 7152.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6188.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6276.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6360.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6416.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6420.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6452.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6476.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6684.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6668.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6724.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6832.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6856.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6776.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6828.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6924.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6920.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6992.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 7044.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 6808.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 7184.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 7296.
2025-06-24 21:30:43,296 [lib.api.process] INFO: Successfully terminated process with pid 7336.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 7368.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 7452.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 7476.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 7500.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 7584.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 7696.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 7740.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 7768.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 7776.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 7852.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 7888.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 7924.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 7980.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 8012.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 8020.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 8084.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 8132.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 8156.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 7004.
2025-06-24 21:30:43,312 [lib.api.process] INFO: Successfully terminated process with pid 7260.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 7404.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 7392.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 7496.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 7616.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 7752.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 7972.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 8104.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 8144.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 7264.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 7396.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 7828.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 7804.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 8172.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 7528.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 7536.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 8196.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 8220.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 8288.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 8308.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 8372.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 8400.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 8460.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 8484.
2025-06-24 21:30:43,328 [lib.api.process] INFO: Successfully terminated process with pid 8504.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 8576.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 8648.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 8692.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 8772.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 8764.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 8836.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 8868.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 8876.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 8884.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 8960.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 8968.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 9032.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 9040.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 9116.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 9132.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 9148.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 7356.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 8284.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 8384.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 8544.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 8620.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 1444.
2025-06-24 21:30:43,342 [lib.api.process] INFO: Successfully terminated process with pid 1208.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 8688.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 7424.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 8928.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 8912.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 8904.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 9208.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 9112.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 8176.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 9184.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 8408.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 8304.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 2660.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 7276.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 9372.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 9412.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 9428.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 9436.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 9476.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 9520.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 9528.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 9604.
2025-06-24 21:30:43,358 [lib.api.process] INFO: Successfully terminated process with pid 9632.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9684.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9716.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9724.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9836.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9844.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9912.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9920.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9980.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 10032.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 10100.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 10156.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 10164.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 10184.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 10232.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 8808.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9472.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9484.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9508.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9464.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9764.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9932.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9864.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 9992.
2025-06-24 21:30:43,375 [lib.api.process] INFO: Successfully terminated process with pid 10024.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10148.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10096.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10220.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 9012.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 2480.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 9552.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 9968.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10008.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10204.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 2752.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 9960.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10272.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10304.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10436.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10444.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10532.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10564.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10600.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10608.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10676.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10688.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10736.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10784.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10884.
2025-06-24 21:30:43,390 [lib.api.process] INFO: Successfully terminated process with pid 10876.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10916.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10948.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 11016.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 11048.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 11088.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 11100.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 11236.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 11256.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 11248.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10128.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10264.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10316.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10428.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10492.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10588.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10744.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10772.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10872.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 2060.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10896.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 2708.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 11216.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 11148.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10248.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10284.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10372.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 1408.
2025-06-24 21:30:43,405 [lib.api.process] INFO: Successfully terminated process with pid 10552.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 10844.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 10988.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 11036.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 11156.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 11144.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 2508.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 1200.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 1124.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 10384.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 11024.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 2932.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 10484.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 11056.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 11080.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 10852.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 11292.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 11328.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 11304.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 11312.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 11456.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 11476.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 11580.
2025-06-24 21:30:43,421 [lib.api.process] INFO: Successfully terminated process with pid 11608.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 11632.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 11664.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 11708.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 11736.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 11760.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 11752.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 11780.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 11856.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 11864.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 11940.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 11996.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 12004.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 12052.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 12044.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 12124.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 12188.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 12180.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 12236.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 12268.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 1336.
2025-06-24 21:30:43,437 [lib.api.process] INFO: Successfully terminated process with pid 2780.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 1304.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 1348.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 11392.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 11380.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 1876.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 11676.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 11696.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 11684.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 11892.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 11888.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 11952.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 12092.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 12168.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 12156.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 12164.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 12256.
2025-06-24 21:30:43,453 [lib.api.process] INFO: Successfully terminated process with pid 11340.
2025-06-24 21:30:43,467 [lib.api.process] INFO: Successfully terminated process with pid 2180.
2025-06-24 21:30:43,467 [lib.api.process] INFO: Successfully terminated process with pid 11012.
2025-06-24 21:30:43,467 [lib.api.process] INFO: Successfully terminated process with pid 11600.
2025-06-24 21:30:43,467 [lib.api.process] INFO: Successfully terminated process with pid 11728.
2025-06-24 21:30:43,467 [lib.api.process] INFO: Successfully terminated process with pid 11836.
2025-06-24 21:30:43,467 [lib.api.process] INFO: Successfully terminated process with pid 11960.
2025-06-24 21:30:43,467 [lib.api.process] INFO: Successfully terminated process with pid 12064.
2025-06-24 21:30:43,467 [lib.api.process] INFO: Successfully terminated process with pid 12036.
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5719.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39160.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-45240.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30504.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64954.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36344.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40979.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57552.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31690.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26666.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11272.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36813.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49888.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20079.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63533.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36371.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35896.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24553.exe
2025-06-24 21:30:43,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-65200.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27608.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1499.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3031.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39032.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6751.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10976.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7273.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29594.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61306.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22591.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34495.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49620.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32399.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27658.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25368.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-42209.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47568.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55648.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-45856.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27882.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52488.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34818.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58761.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35424.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30479.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48176.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-59634.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14200.exe
2025-06-24 21:30:43,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28440.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35025.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11072.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1159.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11688.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-65481.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8496.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21728.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11924.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63917.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6472.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-80.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39993.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16947.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52841.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5145.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35200.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33757.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61856.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2736.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22863.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10211.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2177.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50370.exe
2025-06-24 21:30:43,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63832.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55343.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13647.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30996.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18395.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4735.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9856.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57224.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54921.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-59208.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54497.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36816.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32605.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-46429.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23863.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28367.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64996.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54600.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20082.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22487.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-59578.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-41384.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39000.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-673.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43608.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25031.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11395.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34010.exe
2025-06-24 21:30:43,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63880.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9624.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19175.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-59769.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10376.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63225.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38288.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53656.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21671.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48853.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56297.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11735.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54241.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26255.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23433.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22313.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51981.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29648.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24349.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22327.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-999.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10952.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22600.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4064.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25999.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15576.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18546.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61819.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17434.exe
2025-06-24 21:30:43,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-46440.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36888.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19424.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24333.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11352.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38258.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1760.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24290.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31453.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-42946.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64225.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27328.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39136.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63409.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63889.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10391.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57401.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15039.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33681.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38664.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11928.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15192.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-45796.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25663.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17792.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5648.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30066.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61317.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57889.exe
2025-06-24 21:30:43,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25409.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55337.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44625.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6371.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26457.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32385.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55249.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52160.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30671.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31306.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35473.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25112.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5369.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60760.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33935.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63241.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16666.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20493.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-703.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10907.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43475.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2712.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18383.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56298.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47657.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17168.exe
2025-06-24 21:30:43,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3833.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-59665.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19594.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57804.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2739.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-45831.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29151.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4552.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-663.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50313.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-911.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62385.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-42648.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56237.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40008.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15040.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28898.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40288.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60402.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62928.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64882.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49932.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25087.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8203.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48656.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-59443.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54521.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50593.exe
2025-06-24 21:30:43,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1327.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25914.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2399.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61880.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64080.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30993.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3019.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5810.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3888.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53564.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23169.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35128.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16375.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44200.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15498.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28927.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50224.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-46386.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20815.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58626.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29320.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38837.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56344.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44540.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56785.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23296.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35447.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34440.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57505.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25321.exe
2025-06-24 21:30:43,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53860.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48695.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-12116.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38779.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10803.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16576.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29696.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16768.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13400.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27271.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29266.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52425.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17631.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47789.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-45469.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31024.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2903.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34920.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-42792.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-42674.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8255.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61273.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52881.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25603.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-59680.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44235.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17823.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-41208.exe
2025-06-24 21:30:43,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58425.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7593.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15271.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30888.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31218.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8764.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13551.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-37730.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27570.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16479.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22309.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18749.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3447.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47109.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52586.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56874.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30832.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1095.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24615.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7624.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1763.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25279.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22605.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39337.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31145.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36800.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22472.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43993.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61113.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32199.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28495.exe
2025-06-24 21:30:43,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62113.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-59881.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54008.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25842.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1233.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23728.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-45026.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57211.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25693.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35930.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17584.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1675.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6713.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26663.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-46033.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38024.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36829.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30680.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28824.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63209.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21512.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6082.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26522.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63858.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64585.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29697.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40773.exe
2025-06-24 21:30:43,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38265.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20032.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14935.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29633.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6911.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52528.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48432.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26801.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24111.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6328.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44493.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23866.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53682.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29896.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39529.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29871.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6944.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62428.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26831.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21464.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1193.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-607.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58553.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27423.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48410.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22128.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3122.exe
2025-06-24 21:30:43,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3419.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58069.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5720.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16944.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36384.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55765.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1463.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48749.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36359.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-45218.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3772.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-46874.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27139.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21272.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34231.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17343.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23287.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62200.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51153.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13817.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20789.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20464.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48953.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19648.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24319.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8399.exe
2025-06-24 21:30:43,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29828.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50953.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47301.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15223.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47401.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7599.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7600.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53344.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54345.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6624.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4232.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20624.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63284.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14244.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15753.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31256.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34096.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47197.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20138.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30861.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19888.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30669.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28453.exe
2025-06-24 21:30:43,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-65453.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52620.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-46401.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20760.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7036.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54613.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-42753.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16624.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2617.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33107.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35248.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44954.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-775.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36047.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24031.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15423.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22528.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56617.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7016.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14744.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53633.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25159.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-46024.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16919.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39400.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27699.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20715.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52210.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-42370.exe
2025-06-24 21:30:43,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-42856.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23522.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47749.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23477.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11927.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21119.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21352.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-392.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14187.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30872.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51840.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60345.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32827.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25431.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21763.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20448.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-12648.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32029.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39117.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5119.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56432.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6873.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21023.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57096.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24704.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34007.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26456.exe
2025-06-24 21:30:43,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3507.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30682.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29711.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60392.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58705.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-65353.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6815.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18944.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4464.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51129.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22797.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48069.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34023.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55810.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17687.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51925.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39490.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51440.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19368.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33473.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58392.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8424.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-37789.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20431.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51778.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30873.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36545.exe
2025-06-24 21:30:43,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22931.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25397.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24969.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61288.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1215.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39546.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28010.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51729.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52608.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61808.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53448.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47329.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25322.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53844.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-41464.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62705.exe
2025-06-24 21:30:43,937 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63417.exe
2025-06-24 21:30:43,937 [analyzer] INFO: Analysis completed.

Cuckoo Log

2025-07-02 12:09:48,101 [cuckoo.core.scheduler] DEBUG: Task #6631120: no machine available yet
2025-07-02 12:09:49,196 [cuckoo.core.scheduler] INFO: Task #6631120: acquired machine win7x6424 (label=win7x6424)
2025-07-02 12:09:49,222 [cuckoo.core.resultserver] DEBUG: Now tracking machine 192.168.168.224 for task #6631120
2025-07-02 12:09:49,606 [cuckoo.auxiliary.sniffer] INFO: Started sniffer with PID 2748138 (interface=vboxnet0, host=192.168.168.224)
2025-07-02 12:09:49,763 [cuckoo.machinery.virtualbox] DEBUG: Starting vm win7x6424
2025-07-02 12:09:50,335 [cuckoo.machinery.virtualbox] DEBUG: Restoring virtual machine win7x6424 to vmcloak
2025-07-02 12:11:22,862 [cuckoo.core.guest] INFO: Starting analysis #6631120 on guest (id=win7x6424, ip=192.168.168.224)
2025-07-02 12:11:23,869 [cuckoo.core.guest] DEBUG: win7x6424: not ready yet
2025-07-02 12:11:28,910 [cuckoo.core.guest] INFO: Guest is running Cuckoo Agent 0.10 (id=win7x6424, ip=192.168.168.224)
2025-07-02 12:11:29,065 [cuckoo.core.guest] DEBUG: Uploading analyzer to guest (id=win7x6424, ip=192.168.168.224, monitor=latest, size=6660546)
2025-07-02 12:11:30,312 [cuckoo.core.resultserver] DEBUG: Task #6631120: live log analysis.log initialized.
2025-07-02 12:11:31,700 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:31,786 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:32,574 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'shots/0001.jpg'
2025-07-02 12:11:32,585 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 96748
2025-07-02 12:11:35,114 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:38,553 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:38,555 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:42,070 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:42,071 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:42,072 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:45,006 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:45,033 [cuckoo.core.guest] DEBUG: win7x6424: analysis #6631120 still processing
2025-07-02 12:11:45,862 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:45,863 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:45,864 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:45,866 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:45,867 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:45,897 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:48,398 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:48,412 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:49,408 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:49,409 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'shots/0002.jpg'
2025-07-02 12:11:49,412 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:49,507 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 96732
2025-07-02 12:11:49,552 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:49,600 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:49,637 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:49,639 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:49,658 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:49,668 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:49,680 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:49,711 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:49,772 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:50,586 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'shots/0003.jpg'
2025-07-02 12:11:50,597 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 96741
2025-07-02 12:11:51,848 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:51,883 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:51,885 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:51,946 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:52,540 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:52,578 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:52,584 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:52,595 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:52,644 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:53,342 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:53,409 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:53,563 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:53,658 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:53,678 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:53,739 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:53,907 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:53,920 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:53,958 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:53,996 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:54,031 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:54,049 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:54,083 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:54,149 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:54,165 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:54,168 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:54,172 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:54,193 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:55,806 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:55,931 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:56,074 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:56,077 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:56,079 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:56,174 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:56,187 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:56,244 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:56,761 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:56,772 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:56,799 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:56,830 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:56,843 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:56,879 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:56,895 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:57,010 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:57,011 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:57,040 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:57,181 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'shots/0004.jpg'
2025-07-02 12:11:57,240 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 96061
2025-07-02 12:11:57,309 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:57,335 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:57,469 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:57,474 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:58,725 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:58,726 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:59,060 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:59,098 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:59,154 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:59,367 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:59,369 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:59,397 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:59,499 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:59,590 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:59,600 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:59,657 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:59,685 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'shots/0005.jpg'
2025-07-02 12:11:59,773 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:59,852 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:11:59,954 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 96783
2025-07-02 12:12:00,027 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:00,118 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:00,133 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:00,215 [cuckoo.core.guest] DEBUG: win7x6424: analysis #6631120 still processing
2025-07-02 12:12:00,275 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:00,317 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:00,354 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:00,397 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:00,444 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:00,459 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:00,474 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:00,475 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:00,506 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:00,537 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:00,551 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:00,566 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:01,898 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:01,959 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:01,960 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:01,990 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:02,724 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:02,958 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:02,960 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:03,541 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:03,803 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:04,725 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:05,042 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:05,045 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:05,448 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:05,740 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:05,818 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:06,369 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:06,716 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:07,036 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:07,213 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:07,230 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:07,238 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:07,408 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:07,460 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:07,467 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:07,490 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:07,533 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:07,603 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:08,127 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:08,351 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:08,362 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:08,363 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:08,405 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:08,430 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:08,433 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:09,167 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:09,492 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:09,506 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:09,676 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:09,807 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:10,163 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:10,395 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:10,458 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:10,708 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:11,147 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:11,814 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:12,594 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:12,596 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:12,740 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:12,786 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:12,857 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:13,089 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:13,139 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:13,363 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:13,365 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:13,433 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:13,514 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:13,545 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:13,618 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:13,724 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:13,990 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:14,208 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:14,209 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:15,384 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:15,385 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:15,387 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:15,388 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:15,390 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:15,391 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:15,392 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:15,393 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:15,395 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:15,396 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:15,429 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:15,445 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:15,588 [cuckoo.core.guest] DEBUG: win7x6424: analysis #6631120 still processing
2025-07-02 12:12:16,523 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:16,557 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:16,590 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:16,603 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:16,970 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:16,972 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:17,023 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:17,036 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:17,551 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:17,599 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:17,756 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:18,885 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:18,886 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:18,889 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,065 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,107 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,175 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,177 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,180 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,186 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,219 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,220 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,270 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,273 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,277 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,312 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,318 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,336 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,344 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,351 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,355 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,377 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,431 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,458 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,462 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,839 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:23,864 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:24,006 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:24,193 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:24,352 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:24,597 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:24,645 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:24,693 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:25,103 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:25,106 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:25,241 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:25,302 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:25,561 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'shots/0006.jpg'
2025-07-02 12:12:25,572 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 96856
2025-07-02 12:12:25,615 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:25,619 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:25,695 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:25,813 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:26,051 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:26,109 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:26,134 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:26,703 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:26,770 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'shots/0007.jpg'
2025-07-02 12:12:26,774 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:26,949 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 101553
2025-07-02 12:12:26,996 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:27,435 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:27,465 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:27,504 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:27,774 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:27,782 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:27,786 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:27,880 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:27,921 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:28,068 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:28,084 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:28,133 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:28,369 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:28,395 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:28,567 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:28,801 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:28,927 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,037 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,116 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,404 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,405 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,406 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,426 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,427 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,441 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,489 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,527 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,528 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,584 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,600 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,646 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,708 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:29,739 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:30,334 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:31,152 [cuckoo.core.guest] DEBUG: win7x6424: analysis #6631120 still processing
2025-07-02 12:12:31,309 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:31,817 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:31,926 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:31,933 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:32,010 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:32,302 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:32,364 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:32,755 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:33,015 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:33,018 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:33,393 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:33,398 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:33,755 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:33,756 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:33,759 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:33,811 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:33,815 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:34,040 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:34,420 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:34,633 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'shots/0008.jpg'
2025-07-02 12:12:34,804 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:34,827 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:34,829 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:34,833 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 96783
2025-07-02 12:12:34,854 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:34,858 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:35,345 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:35,379 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:35,399 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:35,405 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:36,346 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:36,451 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:36,692 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:37,722 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:37,754 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:37,788 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:37,791 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:38,752 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:38,763 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:39,002 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:39,010 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:39,019 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:39,040 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:39,775 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:40,149 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:40,167 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:40,175 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:40,199 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:40,266 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:40,273 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:41,196 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:41,199 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:41,245 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:41,248 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:41,303 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:41,717 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:41,895 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:44,887 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:45,171 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:45,188 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:45,201 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:45,206 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:45,234 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:45,271 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:45,289 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:45,291 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:45,423 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:45,424 [cuckoo.core.resultserver] DEBUG: Task #6631120 is sending a BSON stream
2025-07-02 12:12:47,989 [cuckoo.core.guest] DEBUG: win7x6424: analysis #6631120 still processing
2025-07-02 12:13:03,720 [cuckoo.core.guest] DEBUG: win7x6424: analysis #6631120 still processing
2025-07-02 12:13:19,299 [cuckoo.core.guest] DEBUG: win7x6424: analysis #6631120 still processing
2025-07-02 12:13:35,333 [cuckoo.core.guest] DEBUG: win7x6424: analysis #6631120 still processing
2025-07-02 12:13:50,954 [cuckoo.core.guest] DEBUG: win7x6424: analysis #6631120 still processing
2025-07-02 12:14:06,779 [cuckoo.core.guest] DEBUG: win7x6424: analysis #6631120 still processing
2025-07-02 12:14:22,012 [cuckoo.core.guest] DEBUG: win7x6424: analysis #6631120 still processing
2025-07-02 12:14:37,431 [cuckoo.core.guest] DEBUG: win7x6424: analysis #6631120 still processing
2025-07-02 12:14:52,820 [cuckoo.core.guest] DEBUG: win7x6424: analysis #6631120 still processing
2025-07-02 12:15:08,204 [cuckoo.core.guest] DEBUG: win7x6424: analysis #6631120 still processing
2025-07-02 12:15:09,319 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'curtain/1750793431.98.curtain.log'
2025-07-02 12:15:09,322 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 36
2025-07-02 12:15:20,249 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'sysmon/1750793442.69.sysmon.xml'
2025-07-02 12:15:20,502 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 21474770
2025-07-02 12:15:20,799 [cuckoo.core.guest] INFO: win7x6424: end of analysis reached!
2025-07-02 12:15:20,851 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/044a514409833bb9_unicorn-7892.exe'
2025-07-02 12:15:20,852 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Redsocks
2025-07-02 12:15:20,887 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188420
2025-07-02 12:15:20,892 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Sniffer
2025-07-02 12:15:20,896 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/28a91638a5e1c528_unicorn-16061.exe'
2025-07-02 12:15:21,091 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/e432eb03f58b2056_unicorn-12223.exe'
2025-07-02 12:15:21,104 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/f83245f14c45a023_unicorn-19122.exe'
2025-07-02 12:15:21,109 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188423
2025-07-02 12:15:21,269 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188422
2025-07-02 12:15:21,275 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188422
2025-07-02 12:15:21,318 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/bab98b4ca264bfcc_unicorn-38103.exe'
2025-07-02 12:15:21,324 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/56ed7d85b2243bcb_unicorn-8394.exe'
2025-07-02 12:15:21,329 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/05db5270f4c094a3_unicorn-64328.exe'
2025-07-02 12:15:21,332 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/6d18349872132269_unicorn-29074.exe'
2025-07-02 12:15:21,335 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/b0278de4f26eecf2_unicorn-30223.exe'
2025-07-02 12:15:21,338 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/78abada1fc9b0f47_unicorn-15887.exe'
2025-07-02 12:15:21,340 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/6ee567868d961334_unicorn-56149.exe'
2025-07-02 12:15:21,343 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/f8ea61527f37c86b_unicorn-15600.exe'
2025-07-02 12:15:21,346 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/b0dfd8c6edd7575c_unicorn-61554.exe'
2025-07-02 12:15:21,371 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/80b249efa318db25_unicorn-2409.exe'
2025-07-02 12:15:21,374 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/208f3befdaa13ee4_unicorn-63210.exe'
2025-07-02 12:15:21,379 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/91d272cf28ea9937_unicorn-25162.exe'
2025-07-02 12:15:21,390 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/7373e27b9b8e1ee8_unicorn-49105.exe'
2025-07-02 12:15:21,394 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/626088a773c27ae9_unicorn-1952.exe'
2025-07-02 12:15:21,397 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/19eab646519d2cdb_unicorn-16448.exe'
2025-07-02 12:15:21,400 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/2b5e1225c7cdb4f9_unicorn-6387.exe'
2025-07-02 12:15:21,565 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188421
2025-07-02 12:15:21,577 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/38e33f50ae1987f2_unicorn-12912.exe'
2025-07-02 12:15:21,583 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/a2510cfb9cfd953d_unicorn-27360.exe'
2025-07-02 12:15:21,586 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/6f4be7fedfaff5da_unicorn-53300.exe'
2025-07-02 12:15:21,641 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/ca2a8cb40f9c814a_unicorn-39440.exe'
2025-07-02 12:15:21,686 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188424
2025-07-02 12:15:21,689 [cuckoo.core.resultserver] DEBUG: Task #6631120: File upload for 'files/4bdba195b11b8861_unicorn-34567.exe'
2025-07-02 12:15:21,704 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188421
2025-07-02 12:15:21,707 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188421
2025-07-02 12:15:21,709 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188425
2025-07-02 12:15:21,710 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188424
2025-07-02 12:15:21,712 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188424
2025-07-02 12:15:21,714 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188424
2025-07-02 12:15:21,715 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188425
2025-07-02 12:15:21,717 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188421
2025-07-02 12:15:21,718 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188422
2025-07-02 12:15:21,720 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188422
2025-07-02 12:15:21,721 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188423
2025-07-02 12:15:21,723 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188424
2025-07-02 12:15:21,724 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188424
2025-07-02 12:15:21,726 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188423
2025-07-02 12:15:21,727 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188423
2025-07-02 12:15:21,729 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188424
2025-07-02 12:15:21,730 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188423
2025-07-02 12:15:21,732 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188421
2025-07-02 12:15:21,734 [cuckoo.core.resultserver] DEBUG: Task #6631120 uploaded file length: 188420
2025-07-02 12:15:21,932 [cuckoo.machinery.virtualbox] INFO: Successfully generated memory dump for virtual machine with label win7x6424 to path /srv/cuckoo/cwd/storage/analyses/6631120/memory.dmp
2025-07-02 12:15:21,934 [cuckoo.machinery.virtualbox] DEBUG: Stopping vm win7x6424
2025-07-02 12:15:22,369 [cuckoo.core.resultserver] DEBUG: Task #6631120 had connection reset for <Context for LOG>
2025-07-02 12:17:20,697 [cuckoo.core.resultserver] DEBUG: Stopped tracking machine 192.168.168.224 for task #6631120
2025-07-02 12:17:21,138 [cuckoo.core.scheduler] DEBUG: Released database task #6631120
2025-07-02 12:17:27,969 [cuckoo.core.scheduler] INFO: Task #6631120: analysis procedure completed

Signatures

Yara rule detected for file (1 event)
description (no description) rule SEH__vba
One or more processes crashed (50 out of 1029 events)
Time & API Arguments Status Return Repeated

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 6098832
registers.esi: 6098832
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636796
registers.edi: 2148139061
registers.eax: 1636796
registers.ebp: 1636876
registers.edx: 0
registers.ebx: 6098832
registers.esi: 6098832
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636792
registers.edi: 2148139061
registers.eax: 1636792
registers.ebp: 1636872
registers.edx: 0
registers.ebx: 6098832
registers.esi: 6098832
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 5774864
registers.esi: 5774864
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636796
registers.edi: 2148139061
registers.eax: 1636796
registers.ebp: 1636876
registers.edx: 0
registers.ebx: 5774864
registers.esi: 5774864
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636792
registers.edi: 2148139061
registers.eax: 1636792
registers.ebp: 1636872
registers.edx: 0
registers.ebx: 5774864
registers.esi: 5774864
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 6168080
registers.esi: 6168080
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636796
registers.edi: 2148139061
registers.eax: 1636796
registers.ebp: 1636876
registers.edx: 0
registers.ebx: 6168080
registers.esi: 6168080
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636792
registers.edi: 2148139061
registers.eax: 1636792
registers.ebp: 1636872
registers.edx: 0
registers.ebx: 6168080
registers.esi: 6168080
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1633640
registers.edi: 6168080
registers.eax: 1633640
registers.ebp: 1633720
registers.edx: 0
registers.ebx: 6168080
registers.esi: 6168080
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 8920592
registers.esi: 8920592
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636796
registers.edi: 2148139061
registers.eax: 1636796
registers.ebp: 1636876
registers.edx: 0
registers.ebx: 8920592
registers.esi: 8920592
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636792
registers.edi: 2148139061
registers.eax: 1636792
registers.ebp: 1636872
registers.edx: 0
registers.ebx: 8920592
registers.esi: 8920592
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 5971472
registers.esi: 5971472
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636796
registers.edi: 2148139061
registers.eax: 1636796
registers.ebp: 1636876
registers.edx: 0
registers.ebx: 5971472
registers.esi: 5971472
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636792
registers.edi: 2148139061
registers.eax: 1636792
registers.ebp: 1636872
registers.edx: 0
registers.ebx: 5971472
registers.esi: 5971472
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 6168080
registers.esi: 6168080
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636796
registers.edi: 2148139061
registers.eax: 1636796
registers.ebp: 1636876
registers.edx: 0
registers.ebx: 6168080
registers.esi: 6168080
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636792
registers.edi: 2148139061
registers.eax: 1636792
registers.ebp: 1636872
registers.edx: 0
registers.ebx: 6168080
registers.esi: 6168080
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 5840400
registers.esi: 5840400
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636796
registers.edi: 2148139061
registers.eax: 1636796
registers.ebp: 1636876
registers.edx: 0
registers.ebx: 5840400
registers.esi: 5840400
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636792
registers.edi: 2148139061
registers.eax: 1636792
registers.ebp: 1636872
registers.edx: 0
registers.ebx: 5840400
registers.esi: 5840400
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 5905936
registers.esi: 5905936
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636796
registers.edi: 2148139061
registers.eax: 1636796
registers.ebp: 1636876
registers.edx: 0
registers.ebx: 5905936
registers.esi: 5905936
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636792
registers.edi: 2148139061
registers.eax: 1636792
registers.ebp: 1636872
registers.edx: 0
registers.ebx: 5905936
registers.esi: 5905936
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 6168080
registers.esi: 6168080
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636796
registers.edi: 2148139061
registers.eax: 1636796
registers.ebp: 1636876
registers.edx: 0
registers.ebx: 6168080
registers.esi: 6168080
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636792
registers.edi: 2148139061
registers.eax: 1636792
registers.ebp: 1636872
registers.edx: 0
registers.ebx: 6168080
registers.esi: 6168080
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1633692
registers.edi: 6168080
registers.eax: 1633692
registers.ebp: 1633772
registers.edx: 0
registers.ebx: 6168080
registers.esi: 6168080
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 3350032
registers.esi: 3350032
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636796
registers.edi: 2148139061
registers.eax: 1636796
registers.ebp: 1636876
registers.edx: 0
registers.ebx: 3350032
registers.esi: 3350032
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636792
registers.edi: 2148139061
registers.eax: 1636792
registers.ebp: 1636872
registers.edx: 0
registers.ebx: 3350032
registers.esi: 3350032
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 5316112
registers.esi: 5316112
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636796
registers.edi: 2148139061
registers.eax: 1636796
registers.ebp: 1636876
registers.edx: 0
registers.ebx: 5316112
registers.esi: 5316112
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636792
registers.edi: 2148139061
registers.eax: 1636792
registers.ebp: 1636872
registers.edx: 0
registers.ebx: 5316112
registers.esi: 5316112
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 4988432
registers.esi: 4988432
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636796
registers.edi: 2148139061
registers.eax: 1636796
registers.ebp: 1636876
registers.edx: 0
registers.ebx: 4988432
registers.esi: 4988432
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636792
registers.edi: 2148139061
registers.eax: 1636792
registers.ebp: 1636872
registers.edx: 0
registers.ebx: 4988432
registers.esi: 4988432
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 2956816
registers.esi: 2956816
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636796
registers.edi: 2148139061
registers.eax: 1636796
registers.ebp: 1636876
registers.edx: 0
registers.ebx: 2956816
registers.esi: 2956816
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636792
registers.edi: 2148139061
registers.eax: 1636792
registers.ebp: 1636872
registers.edx: 0
registers.ebx: 2956816
registers.esi: 2956816
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1633640
registers.edi: 2956816
registers.eax: 1633640
registers.ebp: 1633720
registers.edx: 0
registers.ebx: 2956816
registers.esi: 2956816
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 5971472
registers.esi: 5971472
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636796
registers.edi: 2148139061
registers.eax: 1636796
registers.ebp: 1636876
registers.edx: 0
registers.ebx: 5971472
registers.esi: 5971472
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636792
registers.edi: 2148139061
registers.eax: 1636792
registers.ebp: 1636872
registers.edx: 0
registers.ebx: 5971472
registers.esi: 5971472
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 4988432
registers.esi: 4988432
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636796
registers.edi: 2148139061
registers.eax: 1636796
registers.ebp: 1636876
registers.edx: 0
registers.ebx: 4988432
registers.esi: 4988432
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636792
registers.edi: 2148139061
registers.eax: 1636792
registers.ebp: 1636872
registers.edx: 0
registers.ebx: 4988432
registers.esi: 4988432
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1633640
registers.edi: 4988432
registers.eax: 1633640
registers.ebp: 1633720
registers.edx: 0
registers.ebx: 4988432
registers.esi: 4988432
registers.ecx: 2
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x7625c41f
registers.esp: 1636800
registers.edi: 2148139061
registers.eax: 1636800
registers.ebp: 1636880
registers.edx: 0
registers.ebx: 6168080
registers.esi: 6168080
registers.ecx: 2
1 0 0
Foreign language identified in PE resource (1 event)
name RT_VERSION language LANG_CHINESE filetype data sublanguage SUBLANG_CHINESE_SIMPLIFIED offset 0x0002d150 size 0x00000234
Creates executable files on the filesystem (50 out of 528 events)
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-58392.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-65453.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-17434.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-1215.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-34231.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-29711.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-36888.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-63832.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-1233.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-24333.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-24290.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-18944.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-42946.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-16624.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-17584.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-26666.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-63533.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-23863.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-24553.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-2903.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-25159.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-25397.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-24969.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-52210.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-50224.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-44625.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-11395.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-29074.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-34010.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-55249.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-23522.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-33757.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-59769.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-41464.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-6815.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-21352.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-38288.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-60760.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-30872.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-33935.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-48853.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-2399.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-28440.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-11735.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-54345.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-3019.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-41208.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-21763.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-65481.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-60402.exe
Drops an executable to the user AppData folder (2 events)
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-7892.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-16061.exe
Changes read-write memory protection to read-execute (probably to avoid detection when setting all RWX flags at the same time) (1 event)
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

process_identifier: 2244
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 24576
protection: 32 (PAGE_EXECUTE_READ)
base_address: 0x00330000
process_handle: 0xffffffff
1 0 0
File has been identified by 14 AntiVirus engine on IRMA as malicious (14 events)
G Data Antivirus (Windows) Virus: Generic.Dacic.94CCEEA9.A.A7364D06 (Engine A)
Avast Core Security (Linux) Win32:VB-AJKU [Trj]
C4S ClamAV (Linux) Win.Malware.Generickdz-10004857-0
Trend Micro SProtect (Linux) Possible_SMMULDROPVSA
Trellix (Linux) GenericRXHC-SS
WithSecure (Linux) Trojan.TR/Crypt.XPACK.Gen
eScan Antivirus (Linux) Generic.Dacic.94CCEEA9.A.A7364D06(DB)
ESET Security (Windows) a variant of Win32/VBClone.D trojan
Sophos Anti-Virus (Linux) Mal/VB-AQT
DrWeb Antivirus (Linux) Trojan.MulDrop17.61497
ClamAV (Linux) Win.Malware.Generickdz-10004857-0
Bitdefender Antivirus (Linux) Generic.Dacic.94CCEEA9.A.A7364D06
Kaspersky Standard (Windows) HEUR:Trojan.Win32.VB.gen
Emsisoft Commandline Scanner (Windows) Generic.Dacic.94CCEEA9.A.A7364D06 (B)
Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action VT Location
No hosts contacted.
Cuckoo

We're processing your submission... This could take a few seconds.