Analyzer Log
2025-06-24 21:26:54,015 [analyzer] DEBUG: Starting analyzer from: C:\tmp4hzt0l
2025-06-24 21:26:54,015 [analyzer] DEBUG: Pipe server name: \??\PIPE\bzXwcpOFcGPlIHIwYqtqZXNyNzI
2025-06-24 21:26:54,015 [analyzer] DEBUG: Log pipe server name: \??\PIPE\EMETBXssShSAynQeoSVnILvx
2025-06-24 21:26:54,015 [analyzer] DEBUG: No analysis package specified, trying to detect it automagically.
2025-06-24 21:26:54,030 [analyzer] INFO: Automatically selected analysis package "exe"
2025-06-24 21:26:54,483 [analyzer] DEBUG: Started auxiliary module Curtain
2025-06-24 21:26:54,483 [analyzer] DEBUG: Started auxiliary module DbgView
2025-06-24 21:26:54,983 [analyzer] DEBUG: Started auxiliary module Disguise
2025-06-24 21:26:55,250 [analyzer] DEBUG: Loaded monitor into process with pid 504
2025-06-24 21:26:55,250 [analyzer] DEBUG: Started auxiliary module DumpTLSMasterSecrets
2025-06-24 21:26:55,265 [analyzer] DEBUG: Started auxiliary module Human
2025-06-24 21:26:55,265 [analyzer] DEBUG: Started auxiliary module InstallCertificate
2025-06-24 21:26:55,265 [analyzer] DEBUG: Started auxiliary module Reboot
2025-06-24 21:26:55,312 [analyzer] DEBUG: Started auxiliary module RecentFiles
2025-06-24 21:26:55,328 [analyzer] DEBUG: Started auxiliary module Screenshots
2025-06-24 21:26:55,328 [analyzer] DEBUG: Started auxiliary module Sysmon
2025-06-24 21:26:55,328 [analyzer] DEBUG: Started auxiliary module LoadZer0m0n
2025-06-24 21:26:55,500 [lib.api.process] INFO: Successfully executed process from path u'C:\\Users\\ADMINI~1\\AppData\\Local\\Temp\\a523f8098fbce455_unicorn-16322.exe' with arguments '' and pid 1940
2025-06-24 21:26:55,733 [analyzer] DEBUG: Loaded monitor into process with pid 1940
2025-06-24 21:26:58,812 [analyzer] INFO: Added new file to list with pid 1940 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3879.exe
2025-06-24 21:26:58,905 [analyzer] INFO: Injected into process with pid 3024 and name u'Unicorn-3879.exe'
2025-06-24 21:26:59,062 [analyzer] DEBUG: Loaded monitor into process with pid 3024
2025-06-24 21:27:02,125 [analyzer] INFO: Added new file to list with pid 3024 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12120.exe
2025-06-24 21:27:02,187 [analyzer] INFO: Added new file to list with pid 1940 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36110.exe
2025-06-24 21:27:02,250 [analyzer] INFO: Injected into process with pid 2816 and name u'Unicorn-12120.exe'
2025-06-24 21:27:02,296 [analyzer] INFO: Injected into process with pid 2444 and name u'Unicorn-36110.exe'
2025-06-24 21:27:02,421 [analyzer] DEBUG: Loaded monitor into process with pid 2816
2025-06-24 21:27:02,467 [analyzer] DEBUG: Loaded monitor into process with pid 2444
2025-06-24 21:27:05,500 [analyzer] INFO: Added new file to list with pid 2816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10968.exe
2025-06-24 21:27:05,578 [analyzer] INFO: Added new file to list with pid 2444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27497.exe
2025-06-24 21:27:05,578 [analyzer] INFO: Added new file to list with pid 3024 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7631.exe
2025-06-24 21:27:05,671 [analyzer] INFO: Added new file to list with pid 1940 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31973.exe
2025-06-24 21:27:05,671 [analyzer] INFO: Injected into process with pid 1884 and name u'Unicorn-10968.exe'
2025-06-24 21:27:05,717 [analyzer] INFO: Injected into process with pid 860 and name u'Unicorn-27497.exe'
2025-06-24 21:27:05,733 [analyzer] INFO: Injected into process with pid 2368 and name u'Unicorn-7631.exe'
2025-06-24 21:27:05,780 [analyzer] INFO: Injected into process with pid 2568 and name u'Unicorn-31973.exe'
2025-06-24 21:27:05,858 [analyzer] DEBUG: Loaded monitor into process with pid 1884
2025-06-24 21:27:05,890 [analyzer] DEBUG: Loaded monitor into process with pid 860
2025-06-24 21:27:05,905 [analyzer] DEBUG: Loaded monitor into process with pid 2368
2025-06-24 21:27:05,967 [analyzer] DEBUG: Loaded monitor into process with pid 2568
2025-06-24 21:27:09,030 [analyzer] INFO: Added new file to list with pid 1884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57528.exe
2025-06-24 21:27:09,140 [analyzer] INFO: Added new file to list with pid 2816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-37278.exe
2025-06-24 21:27:09,171 [analyzer] INFO: Added new file to list with pid 2368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24280.exe
2025-06-24 21:27:09,217 [analyzer] INFO: Injected into process with pid 2800 and name u'Unicorn-57528.exe'
2025-06-24 21:27:09,250 [analyzer] INFO: Added new file to list with pid 860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61913.exe
2025-06-24 21:27:09,280 [analyzer] INFO: Injected into process with pid 2480 and name u'Unicorn-24280.exe'
2025-06-24 21:27:09,296 [analyzer] INFO: Injected into process with pid 808 and name u'Unicorn-37278.exe'
2025-06-24 21:27:09,328 [analyzer] INFO: Added new file to list with pid 3024 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6774.exe
2025-06-24 21:27:09,328 [analyzer] INFO: Injected into process with pid 2976 and name u'Unicorn-61913.exe'
2025-06-24 21:27:09,342 [analyzer] INFO: Added new file to list with pid 2568 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7751.exe
2025-06-24 21:27:09,375 [analyzer] DEBUG: Loaded monitor into process with pid 2800
2025-06-24 21:27:09,437 [analyzer] INFO: Added new file to list with pid 2444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19982.exe
2025-06-24 21:27:09,453 [analyzer] DEBUG: Loaded monitor into process with pid 808
2025-06-24 21:27:09,453 [analyzer] INFO: Injected into process with pid 1384 and name u'Unicorn-6774.exe'
2025-06-24 21:27:09,483 [analyzer] INFO: Added new file to list with pid 1940 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44928.exe
2025-06-24 21:27:09,500 [analyzer] DEBUG: Loaded monitor into process with pid 2976
2025-06-24 21:27:09,530 [analyzer] DEBUG: Loaded monitor into process with pid 2480
2025-06-24 21:27:09,546 [analyzer] INFO: Injected into process with pid 2520 and name u'Unicorn-7751.exe'
2025-06-24 21:27:09,671 [analyzer] INFO: Injected into process with pid 2884 and name u'Unicorn-19982.exe'
2025-06-24 21:27:09,687 [analyzer] DEBUG: Loaded monitor into process with pid 1384
2025-06-24 21:27:09,703 [analyzer] INFO: Injected into process with pid 580 and name u'Unicorn-44928.exe'
2025-06-24 21:27:09,750 [analyzer] DEBUG: Loaded monitor into process with pid 2520
2025-06-24 21:27:09,858 [analyzer] DEBUG: Loaded monitor into process with pid 2884
2025-06-24 21:27:09,875 [analyzer] DEBUG: Loaded monitor into process with pid 580
2025-06-24 21:27:12,467 [analyzer] INFO: Added new file to list with pid 2800 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24776.exe
2025-06-24 21:27:12,578 [analyzer] INFO: Injected into process with pid 2400 and name u'Unicorn-24776.exe'
2025-06-24 21:27:12,655 [analyzer] INFO: Added new file to list with pid 1884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28511.exe
2025-06-24 21:27:12,750 [analyzer] DEBUG: Loaded monitor into process with pid 2400
2025-06-24 21:27:12,750 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15320.exe
2025-06-24 21:27:12,780 [analyzer] INFO: Injected into process with pid 3112 and name u'Unicorn-28511.exe'
2025-06-24 21:27:12,953 [analyzer] INFO: Added new file to list with pid 2368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38926.exe
2025-06-24 21:27:12,967 [analyzer] DEBUG: Loaded monitor into process with pid 3112
2025-06-24 21:27:13,000 [analyzer] INFO: Injected into process with pid 3152 and name u'Unicorn-15320.exe'
2025-06-24 21:27:13,092 [analyzer] INFO: Injected into process with pid 3196 and name u'Unicorn-38926.exe'
2025-06-24 21:27:13,203 [analyzer] DEBUG: Loaded monitor into process with pid 3152
2025-06-24 21:27:13,250 [analyzer] DEBUG: Loaded monitor into process with pid 3196
2025-06-24 21:27:13,546 [analyzer] INFO: Added new file to list with pid 2976 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51833.exe
2025-06-24 21:27:13,655 [analyzer] INFO: Added new file to list with pid 2884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18777.exe
2025-06-24 21:27:13,765 [analyzer] INFO: Added new file to list with pid 1384 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18393.exe
2025-06-24 21:27:13,765 [analyzer] INFO: Added new file to list with pid 860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64064.exe
2025-06-24 21:27:13,780 [analyzer] INFO: Injected into process with pid 3248 and name u'Unicorn-51833.exe'
2025-06-24 21:27:13,921 [analyzer] INFO: Injected into process with pid 3272 and name u'Unicorn-18777.exe'
2025-06-24 21:27:13,921 [analyzer] INFO: Injected into process with pid 3308 and name u'Unicorn-18393.exe'
2025-06-24 21:27:13,953 [analyzer] INFO: Injected into process with pid 3316 and name u'Unicorn-64064.exe'
2025-06-24 21:27:13,967 [analyzer] INFO: Added new file to list with pid 2444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23253.exe
2025-06-24 21:27:14,030 [analyzer] DEBUG: Loaded monitor into process with pid 3248
2025-06-24 21:27:14,030 [analyzer] INFO: Added new file to list with pid 3024 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40816.exe
2025-06-24 21:27:14,046 [analyzer] INFO: Added new file to list with pid 808 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35928.exe
2025-06-24 21:27:14,078 [analyzer] INFO: Added new file to list with pid 580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52264.exe
2025-06-24 21:27:14,078 [analyzer] DEBUG: Loaded monitor into process with pid 3272
2025-06-24 21:27:14,108 [analyzer] INFO: Injected into process with pid 3412 and name u'Unicorn-23253.exe'
2025-06-24 21:27:14,108 [analyzer] DEBUG: Loaded monitor into process with pid 3308
2025-06-24 21:27:14,155 [analyzer] DEBUG: Loaded monitor into process with pid 3316
2025-06-24 21:27:14,296 [analyzer] DEBUG: Loaded monitor into process with pid 3412
2025-06-24 21:27:14,312 [analyzer] INFO: Injected into process with pid 3452 and name u'Unicorn-40816.exe'
2025-06-24 21:27:14,328 [analyzer] INFO: Injected into process with pid 3496 and name u'Unicorn-52264.exe'
2025-06-24 21:27:14,328 [analyzer] INFO: Injected into process with pid 3480 and name u'Unicorn-35928.exe'
2025-06-24 21:27:14,328 [analyzer] INFO: Added new file to list with pid 2520 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35160.exe
2025-06-24 21:27:14,515 [analyzer] INFO: Added new file to list with pid 2816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3814.exe
2025-06-24 21:27:14,515 [analyzer] INFO: Added new file to list with pid 1940 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1014.exe
2025-06-24 21:27:14,578 [analyzer] INFO: Injected into process with pid 3592 and name u'Unicorn-35160.exe'
2025-06-24 21:27:14,608 [analyzer] DEBUG: Loaded monitor into process with pid 3496
2025-06-24 21:27:14,608 [analyzer] DEBUG: Loaded monitor into process with pid 3452
2025-06-24 21:27:14,608 [analyzer] INFO: Added new file to list with pid 2568 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39279.exe
2025-06-24 21:27:14,625 [analyzer] INFO: Injected into process with pid 3636 and name u'Unicorn-1014.exe'
2025-06-24 21:27:14,655 [analyzer] INFO: Injected into process with pid 3656 and name u'Unicorn-3814.exe'
2025-06-24 21:27:14,671 [analyzer] DEBUG: Loaded monitor into process with pid 3480
2025-06-24 21:27:14,780 [analyzer] DEBUG: Loaded monitor into process with pid 3592
2025-06-24 21:27:14,812 [analyzer] DEBUG: Loaded monitor into process with pid 3636
2025-06-24 21:27:14,828 [analyzer] DEBUG: Loaded monitor into process with pid 3656
2025-06-24 21:27:14,828 [analyzer] INFO: Injected into process with pid 3720 and name u'Unicorn-39279.exe'
2025-06-24 21:27:15,015 [analyzer] DEBUG: Loaded monitor into process with pid 3720
2025-06-24 21:27:15,858 [analyzer] INFO: Added new file to list with pid 2400 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61449.exe
2025-06-24 21:27:16,078 [analyzer] INFO: Added new file to list with pid 2800 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26254.exe
2025-06-24 21:27:16,140 [analyzer] INFO: Injected into process with pid 3796 and name u'Unicorn-61449.exe'
2025-06-24 21:27:16,155 [analyzer] INFO: Added new file to list with pid 3112 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62264.exe
2025-06-24 21:27:16,328 [analyzer] INFO: Injected into process with pid 3828 and name u'Unicorn-26254.exe'
2025-06-24 21:27:16,358 [analyzer] INFO: Added new file to list with pid 1884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6741.exe
2025-06-24 21:27:16,375 [analyzer] INFO: Injected into process with pid 3856 and name u'Unicorn-62264.exe'
2025-06-24 21:27:16,421 [analyzer] DEBUG: Loaded monitor into process with pid 3796
2025-06-24 21:27:16,437 [analyzer] INFO: Added new file to list with pid 3152 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28632.exe
2025-06-24 21:27:16,515 [analyzer] DEBUG: Loaded monitor into process with pid 3828
2025-06-24 21:27:16,562 [analyzer] DEBUG: Loaded monitor into process with pid 3856
2025-06-24 21:27:16,640 [analyzer] INFO: Injected into process with pid 3916 and name u'Unicorn-6741.exe'
2025-06-24 21:27:16,780 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43550.exe
2025-06-24 21:27:16,796 [analyzer] INFO: Added new file to list with pid 3196 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63416.exe
2025-06-24 21:27:16,812 [analyzer] INFO: Injected into process with pid 3952 and name u'Unicorn-28632.exe'
2025-06-24 21:27:16,890 [analyzer] INFO: Added new file to list with pid 2368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56902.exe
2025-06-24 21:27:16,890 [analyzer] INFO: Injected into process with pid 4004 and name u'Unicorn-43550.exe'
2025-06-24 21:27:16,905 [analyzer] INFO: Injected into process with pid 4016 and name u'Unicorn-63416.exe'
2025-06-24 21:27:16,937 [analyzer] DEBUG: Loaded monitor into process with pid 3916
2025-06-24 21:27:16,983 [analyzer] DEBUG: Loaded monitor into process with pid 3952
2025-06-24 21:27:17,015 [analyzer] INFO: Injected into process with pid 4088 and name u'Unicorn-56902.exe'
2025-06-24 21:27:17,092 [analyzer] DEBUG: Loaded monitor into process with pid 4016
2025-06-24 21:27:17,092 [analyzer] DEBUG: Loaded monitor into process with pid 4004
2025-06-24 21:27:17,203 [analyzer] DEBUG: Loaded monitor into process with pid 4088
2025-06-24 21:27:17,265 [analyzer] INFO: Added new file to list with pid 3248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4568.exe
2025-06-24 21:27:17,515 [analyzer] INFO: Added new file to list with pid 2976 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52544.exe
2025-06-24 21:27:17,530 [analyzer] INFO: Injected into process with pid 3184 and name u'Unicorn-4568.exe'
2025-06-24 21:27:17,703 [analyzer] DEBUG: Loaded monitor into process with pid 3184
2025-06-24 21:27:17,703 [analyzer] INFO: Added new file to list with pid 3308 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50344.exe
2025-06-24 21:27:17,750 [analyzer] INFO: Injected into process with pid 3304 and name u'Unicorn-52544.exe'
2025-06-24 21:27:17,937 [analyzer] INFO: Injected into process with pid 3352 and name u'Unicorn-50344.exe'
2025-06-24 21:27:18,000 [analyzer] INFO: Added new file to list with pid 1384 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35055.exe
2025-06-24 21:27:18,030 [analyzer] DEBUG: Loaded monitor into process with pid 3304
2025-06-24 21:27:18,171 [analyzer] DEBUG: Loaded monitor into process with pid 3352
2025-06-24 21:27:18,250 [analyzer] INFO: Injected into process with pid 3472 and name u'Unicorn-35055.exe'
2025-06-24 21:27:18,608 [analyzer] DEBUG: Loaded monitor into process with pid 3472
2025-06-24 21:27:18,921 [analyzer] INFO: Added new file to list with pid 3412 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56888.exe
2025-06-24 21:27:19,108 [analyzer] INFO: Injected into process with pid 3584 and name u'Unicorn-56888.exe'
2025-06-24 21:27:19,328 [analyzer] DEBUG: Loaded monitor into process with pid 3584
2025-06-24 21:27:19,342 [analyzer] INFO: Added new file to list with pid 2444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14687.exe
2025-06-24 21:27:19,375 [analyzer] INFO: Added new file to list with pid 3592 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9799.exe
2025-06-24 21:27:19,780 [analyzer] INFO: Injected into process with pid 3688 and name u'Unicorn-14687.exe'
2025-06-24 21:27:19,796 [analyzer] INFO: Injected into process with pid 3696 and name u'Unicorn-9799.exe'
2025-06-24 21:27:19,875 [analyzer] INFO: Added new file to list with pid 2520 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29295.exe
2025-06-24 21:27:20,015 [analyzer] DEBUG: Loaded monitor into process with pid 3688
2025-06-24 21:27:20,030 [analyzer] DEBUG: Loaded monitor into process with pid 3696
2025-06-24 21:27:20,967 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6504.exe
2025-06-24 21:27:21,062 [analyzer] INFO: Added new file to list with pid 3024 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16790.exe
2025-06-24 21:27:21,062 [analyzer] INFO: Added new file to list with pid 860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19590.exe
2025-06-24 21:27:21,078 [analyzer] INFO: Added new file to list with pid 3452 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25721.exe
2025-06-24 21:27:21,108 [analyzer] INFO: Added new file to list with pid 3496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20568.exe
2025-06-24 21:27:21,233 [analyzer] INFO: Injected into process with pid 4032 and name u'Unicorn-6504.exe'
2025-06-24 21:27:21,250 [analyzer] INFO: Injected into process with pid 3868 and name u'Unicorn-29295.exe'
2025-06-24 21:27:21,375 [analyzer] INFO: Injected into process with pid 4064 and name u'Unicorn-19590.exe'
2025-06-24 21:27:21,375 [analyzer] INFO: Injected into process with pid 4072 and name u'Unicorn-16790.exe'
2025-06-24 21:27:21,390 [analyzer] INFO: Injected into process with pid 3228 and name u'Unicorn-20568.exe'
2025-06-24 21:27:21,390 [analyzer] INFO: Injected into process with pid 3088 and name u'Unicorn-25721.exe'
2025-06-24 21:27:21,405 [analyzer] DEBUG: Loaded monitor into process with pid 4032
2025-06-24 21:27:21,530 [analyzer] DEBUG: Loaded monitor into process with pid 3868
2025-06-24 21:27:21,562 [analyzer] DEBUG: Loaded monitor into process with pid 4064
2025-06-24 21:27:21,562 [analyzer] DEBUG: Loaded monitor into process with pid 4072
2025-06-24 21:27:21,578 [analyzer] DEBUG: Loaded monitor into process with pid 3228
2025-06-24 21:27:21,640 [analyzer] DEBUG: Loaded monitor into process with pid 3088
2025-06-24 21:27:21,671 [analyzer] INFO: Added new file to list with pid 2884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7007.exe
2025-06-24 21:27:21,905 [analyzer] INFO: Injected into process with pid 4044 and name u'Unicorn-7007.exe'
2025-06-24 21:27:21,905 [analyzer] INFO: Added new file to list with pid 580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33950.exe
2025-06-24 21:27:23,171 [analyzer] INFO: Added new file to list with pid 1940 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59264.exe
2025-06-24 21:27:23,233 [analyzer] INFO: Added new file to list with pid 2568 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40774.exe
2025-06-24 21:27:23,233 [analyzer] INFO: Added new file to list with pid 3656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47288.exe
2025-06-24 21:27:23,233 [analyzer] INFO: Added new file to list with pid 3720 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46904.exe
2025-06-24 21:27:23,233 [analyzer] INFO: Added new file to list with pid 3636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46904.exe
2025-06-24 21:27:23,358 [analyzer] DEBUG: Loaded monitor into process with pid 4044
2025-06-24 21:27:23,812 [analyzer] INFO: Injected into process with pid 3540 and name u'Unicorn-33950.exe'
2025-06-24 21:27:23,921 [analyzer] INFO: Injected into process with pid 3740 and name u'Unicorn-59264.exe'
2025-06-24 21:27:23,937 [analyzer] INFO: Injected into process with pid 3292 and name u'Unicorn-40774.exe'
2025-06-24 21:27:24,046 [analyzer] DEBUG: Loaded monitor into process with pid 3540
2025-06-24 21:27:24,108 [analyzer] DEBUG: Loaded monitor into process with pid 3740
2025-06-24 21:27:25,421 [analyzer] INFO: Injected into process with pid 3524 and name u'Unicorn-47288.exe'
2025-06-24 21:27:25,453 [analyzer] INFO: Added new file to list with pid 3452 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52799.exe
2025-06-24 21:27:25,453 [analyzer] INFO: Added new file to list with pid 2816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6862.exe
2025-06-24 21:27:25,453 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7127.exe
2025-06-24 21:27:25,453 [analyzer] INFO: Injected into process with pid 1748 and name u'Unicorn-46904.exe'
2025-06-24 21:27:25,453 [analyzer] INFO: Added new file to list with pid 808 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52799.exe
2025-06-24 21:27:25,453 [analyzer] INFO: Added new file to list with pid 3480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7127.exe
2025-06-24 21:27:25,592 [analyzer] DEBUG: Loaded monitor into process with pid 3292
2025-06-24 21:27:25,671 [analyzer] DEBUG: Loaded monitor into process with pid 3524
2025-06-24 21:27:25,750 [analyzer] DEBUG: Loaded monitor into process with pid 1748
2025-06-24 21:27:25,750 [analyzer] INFO: Injected into process with pid 4272 and name u'Unicorn-6862.exe'
2025-06-24 21:27:25,750 [analyzer] INFO: Injected into process with pid 4280 and name u'Unicorn-52799.exe'
2025-06-24 21:27:25,750 [analyzer] INFO: Injected into process with pid 4292 and name u'Unicorn-7127.exe'
2025-06-24 21:27:25,937 [analyzer] DEBUG: Loaded monitor into process with pid 4272
2025-06-24 21:27:25,953 [analyzer] DEBUG: Loaded monitor into process with pid 4280
2025-06-24 21:27:26,000 [analyzer] DEBUG: Loaded monitor into process with pid 4292
2025-06-24 21:27:26,390 [analyzer] INFO: Added new file to list with pid 3636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16063.exe
2025-06-24 21:27:26,500 [analyzer] INFO: Injected into process with pid 4424 and name u'Unicorn-16063.exe'
2025-06-24 21:27:26,687 [analyzer] DEBUG: Loaded monitor into process with pid 4424
2025-06-24 21:27:27,000 [analyzer] INFO: Added new file to list with pid 3112 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28974.exe
2025-06-24 21:27:27,203 [analyzer] INFO: Injected into process with pid 4468 and name u'Unicorn-28974.exe'
2025-06-24 21:27:27,375 [analyzer] DEBUG: Loaded monitor into process with pid 4468
2025-06-24 21:27:28,453 [analyzer] INFO: Added new file to list with pid 3452 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7414.exe
2025-06-24 21:27:28,500 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26351.exe
2025-06-24 21:27:28,608 [analyzer] INFO: Injected into process with pid 4516 and name u'Unicorn-7414.exe'
2025-06-24 21:27:28,625 [analyzer] INFO: Injected into process with pid 4532 and name u'Unicorn-26351.exe'
2025-06-24 21:27:28,796 [analyzer] DEBUG: Loaded monitor into process with pid 4516
2025-06-24 21:27:28,812 [analyzer] DEBUG: Loaded monitor into process with pid 4532
2025-06-24 21:27:29,671 [analyzer] INFO: Added new file to list with pid 2400 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10046.exe
2025-06-24 21:27:29,905 [analyzer] INFO: Added new file to list with pid 2800 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7253.exe
2025-06-24 21:27:29,983 [analyzer] INFO: Injected into process with pid 4616 and name u'Unicorn-10046.exe'
2025-06-24 21:27:30,187 [analyzer] DEBUG: Loaded monitor into process with pid 4616
2025-06-24 21:27:30,328 [analyzer] INFO: Injected into process with pid 4648 and name u'Unicorn-7253.exe'
2025-06-24 21:27:30,358 [analyzer] INFO: Added new file to list with pid 1884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7519.exe
2025-06-24 21:27:30,421 [analyzer] INFO: Added new file to list with pid 3152 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3679.exe
2025-06-24 21:27:30,453 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28597.exe
2025-06-24 21:27:30,483 [analyzer] INFO: Added new file to list with pid 3196 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47919.exe
2025-06-24 21:27:30,562 [analyzer] DEBUG: Loaded monitor into process with pid 4648
2025-06-24 21:27:30,562 [analyzer] INFO: Added new file to list with pid 3796 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26233.exe
2025-06-24 21:27:31,015 [analyzer] INFO: Added new file to list with pid 2368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-41344.exe
2025-06-24 21:27:31,046 [analyzer] INFO: Injected into process with pid 4696 and name u'Unicorn-7519.exe'
2025-06-24 21:27:31,092 [analyzer] INFO: Added new file to list with pid 3248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52143.exe
2025-06-24 21:27:31,125 [analyzer] INFO: Injected into process with pid 4720 and name u'Unicorn-3679.exe'
2025-06-24 21:27:31,155 [analyzer] INFO: Injected into process with pid 4764 and name u'Unicorn-47919.exe'
2025-06-24 21:27:31,155 [analyzer] INFO: Injected into process with pid 4748 and name u'Unicorn-28597.exe'
2025-06-24 21:27:31,233 [analyzer] INFO: Injected into process with pid 4808 and name u'Unicorn-26233.exe'
2025-06-24 21:27:31,265 [analyzer] DEBUG: Loaded monitor into process with pid 4696
2025-06-24 21:27:31,483 [analyzer] INFO: Injected into process with pid 4852 and name u'Unicorn-41344.exe'
2025-06-24 21:27:31,500 [analyzer] INFO: Added new file to list with pid 2976 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64726.exe
2025-06-24 21:27:31,500 [analyzer] DEBUG: Loaded monitor into process with pid 4720
2025-06-24 21:27:31,500 [analyzer] INFO: Added new file to list with pid 3828 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5319.exe
2025-06-24 21:27:31,515 [analyzer] INFO: Added new file to list with pid 3308 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23279.exe
2025-06-24 21:27:31,592 [analyzer] DEBUG: Loaded monitor into process with pid 4764
2025-06-24 21:27:31,640 [analyzer] INFO: Injected into process with pid 4904 and name u'Unicorn-52143.exe'
2025-06-24 21:27:31,671 [analyzer] DEBUG: Loaded monitor into process with pid 4748
2025-06-24 21:27:31,703 [analyzer] DEBUG: Loaded monitor into process with pid 4808
2025-06-24 21:27:31,765 [analyzer] INFO: Added new file to list with pid 1384 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50118.exe
2025-06-24 21:27:31,812 [analyzer] DEBUG: Loaded monitor into process with pid 4852
2025-06-24 21:27:31,875 [analyzer] DEBUG: Loaded monitor into process with pid 4904
2025-06-24 21:27:31,905 [analyzer] INFO: Injected into process with pid 4988 and name u'Unicorn-64726.exe'
2025-06-24 21:27:31,905 [analyzer] INFO: Injected into process with pid 5004 and name u'Unicorn-23279.exe'
2025-06-24 21:27:31,921 [analyzer] INFO: Injected into process with pid 4996 and name u'Unicorn-5319.exe'
2025-06-24 21:27:32,125 [analyzer] DEBUG: Loaded monitor into process with pid 4988
2025-06-24 21:27:32,140 [analyzer] DEBUG: Loaded monitor into process with pid 4996
2025-06-24 21:27:32,203 [analyzer] DEBUG: Loaded monitor into process with pid 5004
2025-06-24 21:27:33,108 [analyzer] INFO: Added new file to list with pid 3412 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15599.exe
2025-06-24 21:27:33,233 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35465.exe
2025-06-24 21:27:33,233 [analyzer] INFO: Added new file to list with pid 3952 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35465.exe
2025-06-24 21:27:33,233 [analyzer] INFO: Added new file to list with pid 3916 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35465.exe
2025-06-24 21:27:35,703 [analyzer] INFO: Added new file to list with pid 4032 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-65480.exe
2025-06-24 21:27:35,703 [analyzer] INFO: Injected into process with pid 5112 and name u'Unicorn-50118.exe'
2025-06-24 21:27:35,890 [analyzer] INFO: Added new file to list with pid 3868 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30857.exe
2025-06-24 21:27:35,905 [analyzer] INFO: Added new file to list with pid 3592 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7950.exe
2025-06-24 21:27:35,905 [analyzer] INFO: Added new file to list with pid 2444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18885.exe
2025-06-24 21:27:35,921 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7950.exe
2025-06-24 21:27:36,280 [analyzer] DEBUG: Loaded monitor into process with pid 5112
2025-06-24 21:27:37,046 [analyzer] INFO: Added new file to list with pid 3024 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9278.exe
2025-06-24 21:27:37,155 [analyzer] INFO: Injected into process with pid 4188 and name u'Unicorn-15599.exe'
2025-06-24 21:27:37,187 [analyzer] INFO: Added new file to list with pid 2520 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30533.exe
2025-06-24 21:27:37,217 [analyzer] INFO: Added new file to list with pid 860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3534.exe
2025-06-24 21:27:37,250 [analyzer] INFO: Injected into process with pid 4320 and name u'Unicorn-65480.exe'
2025-06-24 21:27:37,250 [analyzer] INFO: Injected into process with pid 2464 and name u'Unicorn-35465.exe'
2025-06-24 21:27:37,375 [analyzer] INFO: Injected into process with pid 4384 and name u'Unicorn-30857.exe'
2025-06-24 21:27:37,375 [analyzer] INFO: Injected into process with pid 4420 and name u'Unicorn-7950.exe'
2025-06-24 21:27:37,390 [analyzer] INFO: Added new file to list with pid 3272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5231.exe
2025-06-24 21:27:37,390 [analyzer] INFO: Injected into process with pid 4380 and name u'Unicorn-18885.exe'
2025-06-24 21:27:37,390 [analyzer] INFO: Added new file to list with pid 3496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5231.exe
2025-06-24 21:27:37,437 [analyzer] INFO: Added new file to list with pid 2884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29765.exe
2025-06-24 21:27:37,483 [analyzer] DEBUG: Loaded monitor into process with pid 4188
2025-06-24 21:27:37,546 [analyzer] DEBUG: Loaded monitor into process with pid 4320
2025-06-24 21:27:37,562 [analyzer] DEBUG: Loaded monitor into process with pid 2464
2025-06-24 21:27:37,671 [analyzer] DEBUG: Loaded monitor into process with pid 4384
2025-06-24 21:27:37,687 [analyzer] DEBUG: Loaded monitor into process with pid 4420
2025-06-24 21:27:37,733 [analyzer] INFO: Injected into process with pid 2060 and name u'Unicorn-9278.exe'
2025-06-24 21:27:37,750 [analyzer] DEBUG: Loaded monitor into process with pid 4380
2025-06-24 21:27:37,812 [analyzer] INFO: Injected into process with pid 4712 and name u'Unicorn-30533.exe'
2025-06-24 21:27:37,890 [analyzer] INFO: Injected into process with pid 4744 and name u'Unicorn-3534.exe'
2025-06-24 21:27:37,921 [analyzer] INFO: Injected into process with pid 4864 and name u'Unicorn-5231.exe'
2025-06-24 21:27:37,921 [analyzer] INFO: Added new file to list with pid 4004 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-37432.exe
2025-06-24 21:27:37,953 [analyzer] INFO: Injected into process with pid 4880 and name u'Unicorn-29765.exe'
2025-06-24 21:27:38,046 [analyzer] DEBUG: Loaded monitor into process with pid 2060
2025-06-24 21:27:38,108 [analyzer] DEBUG: Loaded monitor into process with pid 4712
2025-06-24 21:27:38,140 [analyzer] DEBUG: Loaded monitor into process with pid 4744
2025-06-24 21:27:38,171 [analyzer] DEBUG: Loaded monitor into process with pid 4864
2025-06-24 21:27:38,280 [analyzer] DEBUG: Loaded monitor into process with pid 4880
2025-06-24 21:27:38,280 [analyzer] INFO: Injected into process with pid 2168 and name u'Unicorn-37432.exe'
2025-06-24 21:27:38,515 [analyzer] DEBUG: Loaded monitor into process with pid 2168
2025-06-24 21:27:38,530 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14655.exe
2025-06-24 21:27:38,530 [analyzer] INFO: Added new file to list with pid 3916 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14655.exe
2025-06-24 21:27:38,530 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14655.exe
2025-06-24 21:27:38,530 [analyzer] INFO: Added new file to list with pid 3952 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14655.exe
2025-06-24 21:27:38,953 [analyzer] INFO: Injected into process with pid 4512 and name u'Unicorn-14655.exe'
2025-06-24 21:27:39,203 [analyzer] INFO: Added new file to list with pid 3720 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43326.exe
2025-06-24 21:27:39,203 [analyzer] INFO: Added new file to list with pid 3656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43326.exe
2025-06-24 21:27:39,203 [analyzer] INFO: Added new file to list with pid 1940 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54792.exe
2025-06-24 21:27:39,203 [analyzer] INFO: Added new file to list with pid 580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57062.exe
2025-06-24 21:27:39,217 [analyzer] INFO: Added new file to list with pid 2568 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62927.exe
2025-06-24 21:27:39,203 [analyzer] INFO: Added new file to list with pid 3592 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57062.exe
2025-06-24 21:27:39,453 [analyzer] DEBUG: Loaded monitor into process with pid 4512
2025-06-24 21:27:40,092 [analyzer] INFO: Added new file to list with pid 3480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23503.exe
2025-06-24 21:27:40,092 [analyzer] INFO: Added new file to list with pid 2816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34438.exe
2025-06-24 21:27:40,155 [analyzer] INFO: Added new file to list with pid 808 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-37239.exe
2025-06-24 21:27:40,155 [analyzer] INFO: Injected into process with pid 2120 and name u'Unicorn-43326.exe'
2025-06-24 21:27:40,203 [analyzer] INFO: Injected into process with pid 4788 and name u'Unicorn-62927.exe'
2025-06-24 21:27:40,203 [analyzer] INFO: Injected into process with pid 4636 and name u'Unicorn-54792.exe'
2025-06-24 21:27:40,203 [analyzer] INFO: Injected into process with pid 2688 and name u'Unicorn-57062.exe'
2025-06-24 21:27:40,296 [analyzer] INFO: Added new file to list with pid 3636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36855.exe
2025-06-24 21:27:40,405 [analyzer] DEBUG: Loaded monitor into process with pid 4788
2025-06-24 21:27:40,453 [analyzer] DEBUG: Loaded monitor into process with pid 2120
2025-06-24 21:27:40,530 [analyzer] INFO: Added new file to list with pid 3272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17093.exe
2025-06-24 21:27:40,578 [analyzer] INFO: Injected into process with pid 4540 and name u'Unicorn-34438.exe'
2025-06-24 21:27:40,578 [analyzer] INFO: Injected into process with pid 2656 and name u'Unicorn-23503.exe'
2025-06-24 21:27:40,687 [analyzer] DEBUG: Loaded monitor into process with pid 2688
2025-06-24 21:27:40,703 [analyzer] DEBUG: Loaded monitor into process with pid 4636
2025-06-24 21:27:40,828 [analyzer] DEBUG: Loaded monitor into process with pid 4540
2025-06-24 21:27:43,983 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29397.exe
2025-06-24 21:27:44,000 [analyzer] INFO: Added new file to list with pid 3112 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34550.exe
2025-06-24 21:27:44,015 [analyzer] INFO: Added new file to list with pid 3592 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35263.exe
2025-06-24 21:27:44,030 [analyzer] INFO: Added new file to list with pid 3452 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35263.exe
2025-06-24 21:27:44,030 [analyzer] INFO: Added new file to list with pid 3916 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1686.exe
2025-06-24 21:27:44,030 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1686.exe
2025-06-24 21:27:44,030 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1686.exe
2025-06-24 21:27:44,030 [analyzer] INFO: Added new file to list with pid 3720 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1686.exe
2025-06-24 21:27:44,046 [analyzer] INFO: Added new file to list with pid 3352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7816.exe
2025-06-24 21:27:44,030 [analyzer] INFO: Injected into process with pid 4780 and name u'Unicorn-37239.exe'
2025-06-24 21:27:44,108 [analyzer] INFO: Injected into process with pid 4936 and name u'Unicorn-36855.exe'
2025-06-24 21:27:44,108 [analyzer] DEBUG: Loaded monitor into process with pid 2656
2025-06-24 21:27:44,140 [analyzer] INFO: Injected into process with pid 5124 and name u'Unicorn-17093.exe'
2025-06-24 21:27:44,155 [analyzer] INFO: Added new file to list with pid 2400 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40807.exe
2025-06-24 21:27:44,375 [analyzer] DEBUG: Loaded monitor into process with pid 4780
2025-06-24 21:27:44,375 [analyzer] INFO: Added new file to list with pid 3304 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13688.exe
2025-06-24 21:27:44,405 [analyzer] INFO: Injected into process with pid 5248 and name u'Unicorn-35263.exe'
2025-06-24 21:27:44,405 [analyzer] INFO: Injected into process with pid 5228 and name u'Unicorn-29397.exe'
2025-06-24 21:27:44,421 [analyzer] DEBUG: Loaded monitor into process with pid 5124
2025-06-24 21:27:44,421 [analyzer] INFO: Injected into process with pid 5236 and name u'Unicorn-34550.exe'
2025-06-24 21:27:44,453 [analyzer] INFO: Injected into process with pid 5264 and name u'Unicorn-7816.exe'
2025-06-24 21:27:44,483 [analyzer] INFO: Injected into process with pid 5256 and name u'Unicorn-1686.exe'
2025-06-24 21:27:44,483 [analyzer] INFO: Injected into process with pid 5296 and name u'Unicorn-7816.exe'
2025-06-24 21:27:44,500 [analyzer] DEBUG: Loaded monitor into process with pid 4936
2025-06-24 21:27:44,500 [analyzer] INFO: Injected into process with pid 5372 and name u'Unicorn-40807.exe'
2025-06-24 21:27:44,640 [analyzer] DEBUG: Loaded monitor into process with pid 5248
2025-06-24 21:27:44,671 [analyzer] DEBUG: Loaded monitor into process with pid 5228
2025-06-24 21:27:44,687 [analyzer] DEBUG: Loaded monitor into process with pid 5264
2025-06-24 21:27:44,703 [analyzer] DEBUG: Loaded monitor into process with pid 5256
2025-06-24 21:27:44,703 [analyzer] INFO: Added new file to list with pid 3584 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10455.exe
2025-06-24 21:27:44,717 [analyzer] DEBUG: Loaded monitor into process with pid 5296
2025-06-24 21:27:44,733 [analyzer] INFO: Injected into process with pid 5496 and name u'Unicorn-13688.exe'
2025-06-24 21:27:44,750 [analyzer] DEBUG: Loaded monitor into process with pid 5236
2025-06-24 21:27:44,812 [analyzer] DEBUG: Loaded monitor into process with pid 5372
2025-06-24 21:27:44,953 [analyzer] INFO: Injected into process with pid 5604 and name u'Unicorn-10455.exe'
2025-06-24 21:27:44,967 [analyzer] DEBUG: Loaded monitor into process with pid 5496
2025-06-24 21:27:45,171 [analyzer] DEBUG: Loaded monitor into process with pid 5604
2025-06-24 21:27:46,967 [analyzer] INFO: Added new file to list with pid 2800 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57824.exe
2025-06-24 21:27:47,108 [analyzer] INFO: Added new file to list with pid 3916 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55359.exe
2025-06-24 21:27:47,125 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55359.exe
2025-06-24 21:27:47,125 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55359.exe
2025-06-24 21:27:47,125 [analyzer] INFO: Added new file to list with pid 3592 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46694.exe
2025-06-24 21:27:47,358 [analyzer] INFO: Injected into process with pid 5680 and name u'Unicorn-57824.exe'
2025-06-24 21:27:47,437 [analyzer] INFO: Added new file to list with pid 1884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61686.exe
2025-06-24 21:27:47,437 [analyzer] INFO: Injected into process with pid 5704 and name u'Unicorn-46694.exe'
2025-06-24 21:27:47,467 [analyzer] INFO: Injected into process with pid 5712 and name u'Unicorn-55359.exe'
2025-06-24 21:27:47,546 [analyzer] INFO: Added new file to list with pid 3796 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39759.exe
2025-06-24 21:27:47,546 [analyzer] INFO: Added new file to list with pid 2976 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59360.exe
2025-06-24 21:27:47,546 [analyzer] INFO: Added new file to list with pid 3152 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53495.exe
2025-06-24 21:27:47,546 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59360.exe
2025-06-24 21:27:47,546 [analyzer] INFO: Added new file to list with pid 3248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53495.exe
2025-06-24 21:27:47,546 [analyzer] INFO: Added new file to list with pid 3828 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39759.exe
2025-06-24 21:27:47,562 [analyzer] INFO: Added new file to list with pid 2368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50695.exe
2025-06-24 21:27:47,562 [analyzer] INFO: Added new file to list with pid 3308 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53495.exe
2025-06-24 21:27:47,562 [analyzer] INFO: Added new file to list with pid 3196 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53495.exe
2025-06-24 21:27:47,625 [analyzer] DEBUG: Loaded monitor into process with pid 5680
2025-06-24 21:27:47,812 [analyzer] INFO: Injected into process with pid 5792 and name u'Unicorn-61686.exe'
2025-06-24 21:27:47,858 [analyzer] DEBUG: Loaded monitor into process with pid 5704
2025-06-24 21:27:47,858 [analyzer] INFO: Injected into process with pid 5836 and name u'Unicorn-50695.exe'
2025-06-24 21:27:47,858 [analyzer] INFO: Injected into process with pid 5844 and name u'Unicorn-53495.exe'
2025-06-24 21:27:47,875 [analyzer] INFO: Injected into process with pid 5816 and name u'Unicorn-59360.exe'
2025-06-24 21:27:47,875 [analyzer] INFO: Injected into process with pid 5828 and name u'Unicorn-39759.exe'
2025-06-24 21:27:47,937 [analyzer] DEBUG: Loaded monitor into process with pid 5712
2025-06-24 21:27:48,015 [analyzer] DEBUG: Loaded monitor into process with pid 5792
2025-06-24 21:27:48,046 [analyzer] DEBUG: Loaded monitor into process with pid 5836
2025-06-24 21:27:48,078 [analyzer] DEBUG: Loaded monitor into process with pid 5816
2025-06-24 21:27:48,140 [analyzer] DEBUG: Loaded monitor into process with pid 5844
2025-06-24 21:27:48,546 [analyzer] INFO: Added new file to list with pid 3696 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61400.exe
2025-06-24 21:27:48,578 [analyzer] DEBUG: Loaded monitor into process with pid 5828
2025-06-24 21:27:48,875 [analyzer] INFO: Injected into process with pid 6032 and name u'Unicorn-61400.exe'
2025-06-24 21:27:49,155 [analyzer] DEBUG: Loaded monitor into process with pid 6032
2025-06-24 21:27:54,467 [analyzer] INFO: Added new file to list with pid 3688 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-87.exe
2025-06-24 21:27:54,530 [analyzer] INFO: Added new file to list with pid 3024 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56249.exe
2025-06-24 21:27:54,530 [analyzer] INFO: Added new file to list with pid 3868 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44784.exe
2025-06-24 21:27:54,530 [analyzer] INFO: Added new file to list with pid 2520 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64384.exe
2025-06-24 21:27:54,530 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58519.exe
2025-06-24 21:27:54,530 [analyzer] INFO: Added new file to list with pid 4088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44784.exe
2025-06-24 21:27:54,733 [analyzer] INFO: Added new file to list with pid 2976 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55719.exe
2025-06-24 21:27:54,780 [analyzer] INFO: Added new file to list with pid 2444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39183.exe
2025-06-24 21:27:54,875 [analyzer] INFO: Added new file to list with pid 3740 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64649.exe
2025-06-24 21:27:54,875 [analyzer] INFO: Added new file to list with pid 3228 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64649.exe
2025-06-24 21:27:54,875 [analyzer] INFO: Added new file to list with pid 4072 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64649.exe
2025-06-24 21:27:54,875 [analyzer] INFO: Added new file to list with pid 4064 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64649.exe
2025-06-24 21:27:54,890 [analyzer] INFO: Added new file to list with pid 3088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64649.exe
2025-06-24 21:27:54,890 [analyzer] INFO: Added new file to list with pid 4044 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64649.exe
2025-06-24 21:27:54,983 [analyzer] INFO: Added new file to list with pid 860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8054.exe
2025-06-24 21:27:55,187 [analyzer] INFO: Added new file to list with pid 2884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30783.exe
2025-06-24 21:27:55,233 [analyzer] INFO: Added new file to list with pid 3496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8005.exe
2025-06-24 21:27:56,983 [analyzer] INFO: Injected into process with pid 5156 and name u'Unicorn-87.exe'
2025-06-24 21:27:57,000 [analyzer] INFO: Injected into process with pid 5212 and name u'Unicorn-58519.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 5284 and name u'Unicorn-64384.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 5356 and name u'Unicorn-44784.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 5208 and name u'Unicorn-64384.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 5320 and name u'Unicorn-55719.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 2028 and name u'Unicorn-56249.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 5244 and name u'Unicorn-64384.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 5220 and name u'Unicorn-44784.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 5468 and name u'Unicorn-39183.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 5672 and name u'Unicorn-64649.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 5276 and name u'Unicorn-55719.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 5360 and name u'Unicorn-55719.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 5492 and name u'Unicorn-64384.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 5400 and name u'Unicorn-58519.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 5384 and name u'Unicorn-64384.exe'
2025-06-24 21:27:57,062 [analyzer] INFO: Injected into process with pid 5344 and name u'Unicorn-58519.exe'
2025-06-24 21:27:57,108 [analyzer] INFO: Injected into process with pid 5892 and name u'Unicorn-8054.exe'
2025-06-24 21:27:57,155 [analyzer] INFO: Injected into process with pid 2772 and name u'Unicorn-30783.exe'
2025-06-24 21:27:57,390 [analyzer] INFO: Injected into process with pid 592 and name u'Unicorn-8005.exe'
2025-06-24 21:27:57,578 [analyzer] DEBUG: Loaded monitor into process with pid 5212
2025-06-24 21:27:57,640 [analyzer] DEBUG: Loaded monitor into process with pid 5156
2025-06-24 21:28:02,421 [analyzer] INFO: Added new file to list with pid 4004 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52895.exe
2025-06-24 21:28:02,562 [analyzer] DEBUG: Loaded monitor into process with pid 5356
2025-06-24 21:28:02,625 [analyzer] INFO: Added new file to list with pid 3480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63177.exe
2025-06-24 21:28:02,625 [analyzer] INFO: Added new file to list with pid 580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3505.exe
2025-06-24 21:28:02,625 [analyzer] INFO: Added new file to list with pid 3720 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3505.exe
2025-06-24 21:28:02,625 [analyzer] INFO: Added new file to list with pid 2816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43841.exe
2025-06-24 21:28:02,625 [analyzer] INFO: Added new file to list with pid 2400 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3505.exe
2025-06-24 21:28:02,655 [analyzer] INFO: Added new file to list with pid 1940 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39376.exe
2025-06-24 21:28:02,671 [analyzer] INFO: Added new file to list with pid 3452 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60377.exe
2025-06-24 21:28:02,671 [analyzer] DEBUG: Loaded monitor into process with pid 5284
2025-06-24 21:28:02,687 [analyzer] INFO: Added new file to list with pid 4072 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56541.exe
2025-06-24 21:28:02,703 [analyzer] DEBUG: Loaded monitor into process with pid 2028
2025-06-24 21:28:02,717 [analyzer] INFO: Added new file to list with pid 3952 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4739.exe
2025-06-24 21:28:02,733 [analyzer] DEBUG: Loaded monitor into process with pid 5400
2025-06-24 21:28:02,733 [analyzer] INFO: Added new file to list with pid 3088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49442.exe
2025-06-24 21:28:02,750 [analyzer] DEBUG: Loaded monitor into process with pid 5492
2025-06-24 21:28:02,796 [analyzer] DEBUG: Loaded monitor into process with pid 5220
2025-06-24 21:28:02,828 [analyzer] DEBUG: Loaded monitor into process with pid 5892
2025-06-24 21:28:02,875 [analyzer] INFO: Added new file to list with pid 3524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52011.exe
2025-06-24 21:28:02,921 [analyzer] DEBUG: Loaded monitor into process with pid 5208
2025-06-24 21:28:02,921 [analyzer] DEBUG: Loaded monitor into process with pid 5276
2025-06-24 21:28:02,967 [analyzer] DEBUG: Loaded monitor into process with pid 5320
2025-06-24 21:28:03,030 [analyzer] DEBUG: Loaded monitor into process with pid 5344
2025-06-24 21:28:03,046 [analyzer] DEBUG: Loaded monitor into process with pid 5360
2025-06-24 21:28:03,046 [analyzer] DEBUG: Loaded monitor into process with pid 592
2025-06-24 21:28:03,092 [analyzer] DEBUG: Loaded monitor into process with pid 5384
2025-06-24 21:28:03,108 [analyzer] DEBUG: Loaded monitor into process with pid 5244
2025-06-24 21:28:03,171 [analyzer] DEBUG: Loaded monitor into process with pid 5672
2025-06-24 21:28:03,233 [analyzer] DEBUG: Loaded monitor into process with pid 5468
2025-06-24 21:28:03,296 [analyzer] DEBUG: Loaded monitor into process with pid 2772
2025-06-24 21:28:09,608 [analyzer] INFO: Added new file to list with pid 3540 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42214.exe
2025-06-24 21:28:10,203 [analyzer] INFO: Added new file to list with pid 580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33880.exe
2025-06-24 21:28:10,233 [analyzer] INFO: Added new file to list with pid 3656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49645.exe
2025-06-24 21:28:10,233 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40980.exe
2025-06-24 21:28:11,296 [analyzer] INFO: Added new file to list with pid 3452 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7916.exe
2025-06-24 21:28:11,296 [analyzer] INFO: Injected into process with pid 6516 and name u'Unicorn-52895.exe'
2025-06-24 21:28:11,328 [analyzer] INFO: Added new file to list with pid 4072 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27251.exe
2025-06-24 21:28:11,342 [analyzer] INFO: Added new file to list with pid 3472 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21304.exe
2025-06-24 21:28:11,358 [analyzer] INFO: Added new file to list with pid 3584 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59924.exe
2025-06-24 21:28:11,358 [analyzer] INFO: Added new file to list with pid 3088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59924.exe
2025-06-24 21:28:11,358 [analyzer] INFO: Added new file to list with pid 3304 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21304.exe
2025-06-24 21:28:11,421 [analyzer] INFO: Added new file to list with pid 3352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30323.exe
2025-06-24 21:28:11,453 [analyzer] INFO: Added new file to list with pid 4064 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55897.exe
2025-06-24 21:28:12,078 [analyzer] INFO: Added new file to list with pid 2800 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13299.exe
2025-06-24 21:28:12,125 [analyzer] INFO: Injected into process with pid 6604 and name u'Unicorn-63177.exe'
2025-06-24 21:28:12,125 [analyzer] INFO: Injected into process with pid 6632 and name u'Unicorn-3505.exe'
2025-06-24 21:28:12,125 [analyzer] INFO: Injected into process with pid 6640 and name u'Unicorn-39376.exe'
2025-06-24 21:28:12,125 [analyzer] INFO: Injected into process with pid 6624 and name u'Unicorn-43841.exe'
2025-06-24 21:28:12,125 [analyzer] INFO: Injected into process with pid 6616 and name u'Unicorn-3505.exe'
2025-06-24 21:28:12,140 [analyzer] INFO: Injected into process with pid 6664 and name u'Unicorn-3505.exe'
2025-06-24 21:28:12,171 [analyzer] INFO: Injected into process with pid 6736 and name u'Unicorn-4739.exe'
2025-06-24 21:28:12,217 [analyzer] INFO: Injected into process with pid 6680 and name u'Unicorn-3505.exe'
2025-06-24 21:28:12,233 [analyzer] INFO: Injected into process with pid 6688 and name u'Unicorn-56541.exe'
2025-06-24 21:28:12,265 [analyzer] INFO: Added new file to list with pid 2368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51165.exe
2025-06-24 21:28:12,265 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2163.exe
2025-06-24 21:28:12,296 [analyzer] INFO: Added new file to list with pid 3828 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30536.exe
2025-06-24 21:28:12,296 [analyzer] INFO: Injected into process with pid 6672 and name u'Unicorn-60377.exe'
2025-06-24 21:28:12,296 [analyzer] INFO: Injected into process with pid 6756 and name u'Unicorn-49442.exe'
2025-06-24 21:28:12,312 [analyzer] INFO: Added new file to list with pid 3592 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11201.exe
2025-06-24 21:28:12,312 [analyzer] INFO: Added new file to list with pid 1884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11201.exe
2025-06-24 21:28:12,328 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27736.exe
2025-06-24 21:28:12,342 [analyzer] INFO: Added new file to list with pid 3196 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43501.exe
2025-06-24 21:28:12,421 [analyzer] INFO: Injected into process with pid 6648 and name u'Unicorn-3505.exe'
2025-06-24 21:28:12,453 [analyzer] DEBUG: Loaded monitor into process with pid 6516
2025-06-24 21:28:12,483 [analyzer] INFO: Injected into process with pid 6860 and name u'Unicorn-52011.exe'
2025-06-24 21:28:12,592 [analyzer] INFO: Injected into process with pid 7056 and name u'Unicorn-42214.exe'
2025-06-24 21:28:12,671 [analyzer] DEBUG: Loaded monitor into process with pid 6604
2025-06-24 21:28:12,687 [analyzer] DEBUG: Loaded monitor into process with pid 6632
2025-06-24 21:28:12,703 [analyzer] DEBUG: Loaded monitor into process with pid 6616
2025-06-24 21:28:12,733 [analyzer] DEBUG: Loaded monitor into process with pid 6640
2025-06-24 21:28:12,750 [analyzer] DEBUG: Loaded monitor into process with pid 6736
2025-06-24 21:28:12,750 [analyzer] DEBUG: Loaded monitor into process with pid 6664
2025-06-24 21:28:12,765 [analyzer] DEBUG: Loaded monitor into process with pid 6756
2025-06-24 21:28:12,780 [analyzer] DEBUG: Loaded monitor into process with pid 6680
2025-06-24 21:28:12,780 [analyzer] DEBUG: Loaded monitor into process with pid 6624
2025-06-24 21:28:12,780 [analyzer] INFO: Added new file to list with pid 1748 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21675.exe
2025-06-24 21:28:12,842 [analyzer] DEBUG: Loaded monitor into process with pid 6672
2025-06-24 21:28:12,905 [analyzer] DEBUG: Loaded monitor into process with pid 6688
2025-06-24 21:28:12,921 [analyzer] INFO: Injected into process with pid 7144 and name u'Unicorn-33880.exe'
2025-06-24 21:28:12,937 [analyzer] INFO: Added new file to list with pid 3696 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17569.exe
2025-06-24 21:28:12,937 [analyzer] INFO: Injected into process with pid 5536 and name u'Unicorn-40980.exe'
2025-06-24 21:28:12,937 [analyzer] INFO: Injected into process with pid 7152 and name u'Unicorn-49645.exe'
2025-06-24 21:28:12,937 [analyzer] DEBUG: Loaded monitor into process with pid 6648
2025-06-24 21:28:12,953 [analyzer] DEBUG: Loaded monitor into process with pid 6860
2025-06-24 21:28:12,967 [analyzer] INFO: Injected into process with pid 5932 and name u'Unicorn-30323.exe'
2025-06-24 21:28:12,967 [analyzer] INFO: Injected into process with pid 7160 and name u'Unicorn-49645.exe'
2025-06-24 21:28:12,983 [analyzer] INFO: Injected into process with pid 5908 and name u'Unicorn-21304.exe'
2025-06-24 21:28:13,000 [analyzer] DEBUG: Loaded monitor into process with pid 7056
2025-06-24 21:28:13,000 [analyzer] INFO: Injected into process with pid 5856 and name u'Unicorn-7916.exe'
2025-06-24 21:28:13,000 [analyzer] INFO: Injected into process with pid 5976 and name u'Unicorn-27251.exe'
2025-06-24 21:28:13,015 [analyzer] INFO: Injected into process with pid 5924 and name u'Unicorn-55897.exe'
2025-06-24 21:28:13,030 [analyzer] INFO: Injected into process with pid 5916 and name u'Unicorn-59924.exe'
2025-06-24 21:28:17,233 [analyzer] INFO: Injected into process with pid 6284 and name u'Unicorn-13299.exe'
2025-06-24 21:28:17,405 [analyzer] INFO: Injected into process with pid 6280 and name u'Unicorn-51165.exe'
2025-06-24 21:28:17,437 [analyzer] INFO: Injected into process with pid 6428 and name u'Unicorn-2163.exe'
2025-06-24 21:28:17,453 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8796.exe
2025-06-24 21:28:17,500 [analyzer] INFO: Added new file to list with pid 3496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17660.exe
2025-06-24 21:28:17,500 [analyzer] INFO: Added new file to list with pid 4088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27747.exe
2025-06-24 21:28:17,500 [analyzer] INFO: Added new file to list with pid 2976 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8412.exe
2025-06-24 21:28:17,500 [analyzer] INFO: Added new file to list with pid 3916 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8412.exe
2025-06-24 21:28:17,500 [analyzer] INFO: Added new file to list with pid 4032 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28131.exe
2025-06-24 21:28:17,515 [analyzer] INFO: Added new file to list with pid 1384 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8995.exe
2025-06-24 21:28:17,515 [analyzer] INFO: Added new file to list with pid 1384 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8995.exe
2025-06-24 21:28:17,515 [analyzer] INFO: Added new file to list with pid 2444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9525.exe
2025-06-24 21:28:17,530 [analyzer] INFO: Added new file to list with pid 3152 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8995.exe
2025-06-24 21:28:17,546 [analyzer] INFO: Added new file to list with pid 3688 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14012.exe
2025-06-24 21:28:17,546 [analyzer] INFO: Added new file to list with pid 860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57997.exe
2025-06-24 21:28:17,530 [analyzer] INFO: Added new file to list with pid 2520 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8995.exe
2025-06-24 21:28:17,546 [analyzer] INFO: Added new file to list with pid 4044 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63597.exe
2025-06-24 21:28:17,546 [analyzer] INFO: Added new file to list with pid 3308 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24947.exe
2025-06-24 21:28:17,546 [analyzer] INFO: Added new file to list with pid 3024 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53531.exe
2025-06-24 21:28:17,546 [analyzer] INFO: Added new file to list with pid 2884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24947.exe
2025-06-24 21:28:17,546 [analyzer] DEBUG: Loaded monitor into process with pid 7152
2025-06-24 21:28:17,546 [analyzer] DEBUG: Loaded monitor into process with pid 7160
2025-06-24 21:28:17,592 [analyzer] DEBUG: Loaded monitor into process with pid 5536
2025-06-24 21:28:17,640 [analyzer] INFO: Added new file to list with pid 3592 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18186.exe
2025-06-24 21:28:17,640 [analyzer] DEBUG: Loaded monitor into process with pid 5856
2025-06-24 21:28:17,640 [analyzer] INFO: Added new file to list with pid 3472 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26322.exe
2025-06-24 21:28:17,640 [analyzer] INFO: Added new file to list with pid 3584 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26322.exe
2025-06-24 21:28:17,671 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17457.exe
2025-06-24 21:28:17,687 [analyzer] INFO: Injected into process with pid 6348 and name u'Unicorn-11201.exe'
2025-06-24 21:28:17,703 [analyzer] INFO: Injected into process with pid 6432 and name u'Unicorn-30536.exe'
2025-06-24 21:28:17,717 [analyzer] DEBUG: Loaded monitor into process with pid 7144
2025-06-24 21:28:17,733 [analyzer] INFO: Injected into process with pid 1824 and name u'Unicorn-27736.exe'
2025-06-24 21:28:17,750 [analyzer] DEBUG: Loaded monitor into process with pid 5976
2025-06-24 21:28:17,750 [analyzer] INFO: Injected into process with pid 2516 and name u'Unicorn-43501.exe'
2025-06-24 21:28:17,796 [analyzer] DEBUG: Loaded monitor into process with pid 5932
2025-06-24 21:28:17,828 [analyzer] DEBUG: Loaded monitor into process with pid 5924
2025-06-24 21:28:17,921 [analyzer] DEBUG: Loaded monitor into process with pid 5916
2025-06-24 21:28:17,953 [analyzer] DEBUG: Loaded monitor into process with pid 6284
2025-06-24 21:28:18,000 [analyzer] DEBUG: Loaded monitor into process with pid 6428
2025-06-24 21:28:18,030 [analyzer] DEBUG: Loaded monitor into process with pid 6280
2025-06-24 21:28:18,046 [analyzer] INFO: Injected into process with pid 6800 and name u'Unicorn-21675.exe'
2025-06-24 21:28:18,092 [analyzer] DEBUG: Loaded monitor into process with pid 5908
2025-06-24 21:28:18,358 [analyzer] DEBUG: Loaded monitor into process with pid 6348
2025-06-24 21:28:18,358 [analyzer] DEBUG: Loaded monitor into process with pid 6432
2025-06-24 21:28:18,358 [analyzer] DEBUG: Loaded monitor into process with pid 1824
2025-06-24 21:28:18,375 [analyzer] INFO: Injected into process with pid 2756 and name u'Unicorn-17569.exe'
2025-06-24 21:28:18,390 [analyzer] DEBUG: Loaded monitor into process with pid 2516
2025-06-24 21:28:18,467 [analyzer] INFO: Injected into process with pid 5692 and name u'Unicorn-27747.exe'
2025-06-24 21:28:18,483 [analyzer] DEBUG: Loaded monitor into process with pid 6800
2025-06-24 21:28:18,483 [analyzer] INFO: Injected into process with pid 5956 and name u'Unicorn-8796.exe'
2025-06-24 21:28:18,500 [analyzer] INFO: Injected into process with pid 6308 and name u'Unicorn-63597.exe'
2025-06-24 21:28:18,515 [analyzer] INFO: Injected into process with pid 5880 and name u'Unicorn-17660.exe'
2025-06-24 21:28:18,530 [analyzer] INFO: Injected into process with pid 6372 and name u'Unicorn-8995.exe'
2025-06-24 21:28:18,530 [analyzer] INFO: Injected into process with pid 6228 and name u'Unicorn-14012.exe'
2025-06-24 21:28:18,546 [analyzer] INFO: Injected into process with pid 5980 and name u'Unicorn-28131.exe'
2025-06-24 21:28:18,546 [analyzer] INFO: Injected into process with pid 6080 and name u'Unicorn-57997.exe'
2025-06-24 21:28:18,562 [analyzer] INFO: Injected into process with pid 6360 and name u'Unicorn-9525.exe'
2025-06-24 21:28:18,562 [analyzer] INFO: Injected into process with pid 5964 and name u'Unicorn-8412.exe'
2025-06-24 21:28:18,592 [analyzer] INFO: Injected into process with pid 6468 and name u'Unicorn-53531.exe'
2025-06-24 21:28:18,592 [analyzer] INFO: Injected into process with pid 2956 and name u'Unicorn-24947.exe'
2025-06-24 21:28:18,703 [analyzer] DEBUG: Loaded monitor into process with pid 2756
2025-06-24 21:28:18,796 [analyzer] INFO: Injected into process with pid 7032 and name u'Unicorn-17457.exe'
2025-06-24 21:28:18,812 [analyzer] INFO: Injected into process with pid 2692 and name u'Unicorn-18186.exe'
2025-06-24 21:28:18,905 [analyzer] INFO: Injected into process with pid 6164 and name u'Unicorn-26322.exe'
2025-06-24 21:28:18,921 [analyzer] DEBUG: Loaded monitor into process with pid 5692
2025-06-24 21:28:18,937 [analyzer] DEBUG: Loaded monitor into process with pid 5956
2025-06-24 21:28:18,953 [analyzer] DEBUG: Loaded monitor into process with pid 6308
2025-06-24 21:28:18,983 [analyzer] DEBUG: Loaded monitor into process with pid 5880
2025-06-24 21:28:19,000 [analyzer] DEBUG: Loaded monitor into process with pid 6372
2025-06-24 21:28:19,030 [analyzer] DEBUG: Loaded monitor into process with pid 5964
2025-06-24 21:28:19,046 [analyzer] DEBUG: Loaded monitor into process with pid 6360
2025-06-24 21:28:19,046 [analyzer] DEBUG: Loaded monitor into process with pid 5980
2025-06-24 21:28:19,078 [analyzer] DEBUG: Loaded monitor into process with pid 6080
2025-06-24 21:28:19,078 [analyzer] DEBUG: Loaded monitor into process with pid 6228
2025-06-24 21:28:19,092 [analyzer] DEBUG: Loaded monitor into process with pid 6468
2025-06-24 21:28:19,108 [analyzer] DEBUG: Loaded monitor into process with pid 2956
2025-06-24 21:28:19,187 [analyzer] DEBUG: Loaded monitor into process with pid 7032
2025-06-24 21:28:19,187 [analyzer] DEBUG: Loaded monitor into process with pid 2692
2025-06-24 21:28:19,233 [analyzer] DEBUG: Loaded monitor into process with pid 6164
2025-06-24 21:28:19,233 [analyzer] INFO: Added new file to list with pid 3292 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21211.exe
2025-06-24 21:28:19,765 [analyzer] INFO: Injected into process with pid 7604 and name u'Unicorn-21211.exe'
2025-06-24 21:28:20,030 [analyzer] DEBUG: Loaded monitor into process with pid 7604
2025-06-24 21:28:20,358 [analyzer] INFO: Added new file to list with pid 4292 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27947.exe
2025-06-24 21:28:20,703 [analyzer] INFO: Added new file to list with pid 3412 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44564.exe
2025-06-24 21:28:20,703 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44564.exe
2025-06-24 21:28:20,703 [analyzer] INFO: Added new file to list with pid 1384 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28028.exe
2025-06-24 21:28:20,703 [analyzer] INFO: Added new file to list with pid 2976 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45094.exe
2025-06-24 21:28:20,703 [analyzer] INFO: Added new file to list with pid 3248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28028.exe
2025-06-24 21:28:20,703 [analyzer] INFO: Added new file to list with pid 3496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44564.exe
2025-06-24 21:28:20,765 [analyzer] INFO: Injected into process with pid 7656 and name u'Unicorn-27947.exe'
2025-06-24 21:28:20,796 [analyzer] INFO: Added new file to list with pid 3152 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20545.exe
2025-06-24 21:28:20,812 [analyzer] INFO: Added new file to list with pid 3308 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53218.exe
2025-06-24 21:28:21,000 [analyzer] INFO: Added new file to list with pid 3472 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53225.exe
2025-06-24 21:28:21,015 [analyzer] DEBUG: Loaded monitor into process with pid 7656
2025-06-24 21:28:21,046 [analyzer] INFO: Injected into process with pid 7704 and name u'Unicorn-28028.exe'
2025-06-24 21:28:21,046 [analyzer] INFO: Injected into process with pid 7696 and name u'Unicorn-45094.exe'
2025-06-24 21:28:21,078 [analyzer] INFO: Injected into process with pid 7712 and name u'Unicorn-44564.exe'
2025-06-24 21:28:21,125 [analyzer] INFO: Injected into process with pid 7768 and name u'Unicorn-20545.exe'
2025-06-24 21:28:21,140 [analyzer] INFO: Injected into process with pid 7776 and name u'Unicorn-53218.exe'
2025-06-24 21:28:21,280 [analyzer] DEBUG: Loaded monitor into process with pid 7696
2025-06-24 21:28:21,280 [analyzer] DEBUG: Loaded monitor into process with pid 7704
2025-06-24 21:28:22,687 [analyzer] DEBUG: Loaded monitor into process with pid 7712
2025-06-24 21:28:22,765 [analyzer] INFO: Injected into process with pid 7864 and name u'Unicorn-53225.exe'
2025-06-24 21:28:22,828 [analyzer] DEBUG: Loaded monitor into process with pid 7768
2025-06-24 21:28:22,828 [analyzer] DEBUG: Loaded monitor into process with pid 7776
2025-06-24 21:28:22,967 [analyzer] DEBUG: Loaded monitor into process with pid 7864
2025-06-24 21:28:25,421 [analyzer] INFO: Added new file to list with pid 4280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17366.exe
2025-06-24 21:28:25,515 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42081.exe
2025-06-24 21:28:25,515 [analyzer] INFO: Added new file to list with pid 1384 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17429.exe
2025-06-24 21:28:25,780 [analyzer] INFO: Added new file to list with pid 4272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61190.exe
2025-06-24 21:28:26,108 [analyzer] INFO: Injected into process with pid 7984 and name u'Unicorn-17366.exe'
2025-06-24 21:28:26,155 [analyzer] INFO: Added new file to list with pid 2816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42038.exe
2025-06-24 21:28:26,155 [analyzer] INFO: Added new file to list with pid 3272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-41508.exe
2025-06-24 21:28:26,155 [analyzer] INFO: Added new file to list with pid 1940 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15172.exe
2025-06-24 21:28:26,155 [analyzer] INFO: Added new file to list with pid 2568 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40924.exe
2025-06-24 21:28:26,171 [analyzer] INFO: Added new file to list with pid 3524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30572.exe
2025-06-24 21:28:26,187 [analyzer] INFO: Added new file to list with pid 3868 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50173.exe
2025-06-24 21:28:26,187 [analyzer] INFO: Injected into process with pid 8016 and name u'Unicorn-17429.exe'
2025-06-24 21:28:26,171 [analyzer] INFO: Added new file to list with pid 3740 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44308.exe
2025-06-24 21:28:26,203 [analyzer] INFO: Added new file to list with pid 3112 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57460.exe
2025-06-24 21:28:26,203 [analyzer] INFO: Added new file to list with pid 3228 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60260.exe
2025-06-24 21:28:26,203 [analyzer] INFO: Added new file to list with pid 808 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57460.exe
2025-06-24 21:28:26,203 [analyzer] INFO: Added new file to list with pid 4004 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60260.exe
2025-06-24 21:28:26,203 [analyzer] INFO: Added new file to list with pid 3636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57460.exe
2025-06-24 21:28:26,203 [analyzer] INFO: Added new file to list with pid 3952 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-588.exe
2025-06-24 21:28:26,203 [analyzer] INFO: Injected into process with pid 8008 and name u'Unicorn-42081.exe'
2025-06-24 21:28:26,405 [analyzer] INFO: Added new file to list with pid 3540 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62669.exe
2025-06-24 21:28:26,437 [analyzer] INFO: Injected into process with pid 8056 and name u'Unicorn-61190.exe'
2025-06-24 21:28:26,453 [analyzer] DEBUG: Loaded monitor into process with pid 7984
2025-06-24 21:28:26,530 [analyzer] DEBUG: Loaded monitor into process with pid 8016
2025-06-24 21:28:26,592 [analyzer] INFO: Added new file to list with pid 3304 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11553.exe
2025-06-24 21:28:26,592 [analyzer] INFO: Added new file to list with pid 3352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11553.exe
2025-06-24 21:28:26,592 [analyzer] INFO: Added new file to list with pid 580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51890.exe
2025-06-24 21:28:26,592 [analyzer] INFO: Added new file to list with pid 3720 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51890.exe
2025-06-24 21:28:26,592 [analyzer] INFO: Added new file to list with pid 3480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2888.exe
2025-06-24 21:28:26,592 [analyzer] INFO: Added new file to list with pid 3656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2888.exe
2025-06-24 21:28:26,608 [analyzer] DEBUG: Loaded monitor into process with pid 8008
2025-06-24 21:28:26,687 [analyzer] INFO: Added new file to list with pid 4064 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27698.exe
2025-06-24 21:28:26,733 [analyzer] INFO: Added new file to list with pid 3452 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19562.exe
2025-06-24 21:28:26,750 [analyzer] INFO: Injected into process with pid 6340 and name u'Unicorn-50173.exe'
2025-06-24 21:28:26,765 [analyzer] DEBUG: Loaded monitor into process with pid 8056
2025-06-24 21:28:26,796 [analyzer] INFO: Injected into process with pid 8140 and name u'Unicorn-15172.exe'
2025-06-24 21:28:26,812 [analyzer] INFO: Injected into process with pid 8132 and name u'Unicorn-41508.exe'
2025-06-24 21:28:26,828 [analyzer] INFO: Injected into process with pid 8124 and name u'Unicorn-42038.exe'
2025-06-24 21:28:26,890 [analyzer] INFO: Injected into process with pid 6480 and name u'Unicorn-44308.exe'
2025-06-24 21:28:26,890 [analyzer] INFO: Injected into process with pid 956 and name u'Unicorn-60260.exe'
2025-06-24 21:28:26,905 [analyzer] INFO: Injected into process with pid 6100 and name u'Unicorn-30572.exe'
2025-06-24 21:28:26,921 [analyzer] INFO: Injected into process with pid 2044 and name u'Unicorn-588.exe'
2025-06-24 21:28:26,937 [analyzer] INFO: Injected into process with pid 6964 and name u'Unicorn-40924.exe'
2025-06-24 21:28:26,937 [analyzer] INFO: Injected into process with pid 7260 and name u'Unicorn-57460.exe'
2025-06-24 21:28:27,046 [analyzer] DEBUG: Loaded monitor into process with pid 6340
2025-06-24 21:28:27,078 [analyzer] INFO: Injected into process with pid 7324 and name u'Unicorn-11553.exe'
2025-06-24 21:28:27,078 [analyzer] INFO: Injected into process with pid 7444 and name u'Unicorn-51890.exe'
2025-06-24 21:28:27,092 [analyzer] INFO: Injected into process with pid 7208 and name u'Unicorn-62669.exe'
2025-06-24 21:28:27,108 [analyzer] DEBUG: Loaded monitor into process with pid 8140
2025-06-24 21:28:27,125 [analyzer] DEBUG: Loaded monitor into process with pid 956
2025-06-24 21:28:27,140 [analyzer] INFO: Injected into process with pid 7340 and name u'Unicorn-2888.exe'
2025-06-24 21:28:27,187 [analyzer] INFO: Injected into process with pid 7752 and name u'Unicorn-27698.exe'
2025-06-24 21:28:27,203 [analyzer] DEBUG: Loaded monitor into process with pid 6480
2025-06-24 21:28:27,233 [analyzer] DEBUG: Loaded monitor into process with pid 8124
2025-06-24 21:28:27,250 [analyzer] INFO: Injected into process with pid 7876 and name u'Unicorn-19562.exe'
2025-06-24 21:28:27,250 [analyzer] INFO: Injected into process with pid 7744 and name u'Unicorn-27698.exe'
2025-06-24 21:28:27,265 [analyzer] DEBUG: Loaded monitor into process with pid 6100
2025-06-24 21:28:27,280 [analyzer] DEBUG: Loaded monitor into process with pid 2044
2025-06-24 21:28:27,280 [analyzer] DEBUG: Loaded monitor into process with pid 6964
2025-06-24 21:28:27,280 [analyzer] INFO: Injected into process with pid 7756 and name u'Unicorn-27698.exe'
2025-06-24 21:28:27,296 [analyzer] DEBUG: Loaded monitor into process with pid 8132
2025-06-24 21:28:27,296 [analyzer] DEBUG: Loaded monitor into process with pid 7260
2025-06-24 21:28:27,358 [analyzer] DEBUG: Loaded monitor into process with pid 7444
2025-06-24 21:28:27,375 [analyzer] DEBUG: Loaded monitor into process with pid 7208
2025-06-24 21:28:27,421 [analyzer] DEBUG: Loaded monitor into process with pid 7752
2025-06-24 21:28:27,453 [analyzer] DEBUG: Loaded monitor into process with pid 7324
2025-06-24 21:28:27,467 [analyzer] DEBUG: Loaded monitor into process with pid 7744
2025-06-24 21:28:27,467 [analyzer] DEBUG: Loaded monitor into process with pid 7340
2025-06-24 21:28:27,500 [analyzer] DEBUG: Loaded monitor into process with pid 7756
2025-06-24 21:28:27,530 [analyzer] DEBUG: Loaded monitor into process with pid 7876
2025-06-24 21:28:28,953 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12650.exe
2025-06-24 21:28:29,265 [analyzer] INFO: Added new file to list with pid 3272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21516.exe
2025-06-24 21:28:29,328 [analyzer] INFO: Added new file to list with pid 3112 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4604.exe
2025-06-24 21:28:29,328 [analyzer] INFO: Added new file to list with pid 808 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4604.exe
2025-06-24 21:28:29,328 [analyzer] INFO: Added new file to list with pid 3228 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29805.exe
2025-06-24 21:28:29,483 [analyzer] INFO: Injected into process with pid 7924 and name u'Unicorn-12650.exe'
2025-06-24 21:28:29,703 [analyzer] INFO: Added new file to list with pid 3480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32097.exe
2025-06-24 21:28:29,703 [analyzer] INFO: Added new file to list with pid 3304 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48633.exe
2025-06-24 21:28:29,717 [analyzer] INFO: Added new file to list with pid 580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49163.exe
2025-06-24 21:28:29,828 [analyzer] DEBUG: Loaded monitor into process with pid 7924
2025-06-24 21:28:29,937 [analyzer] INFO: Injected into process with pid 7624 and name u'Unicorn-21516.exe'
2025-06-24 21:28:29,967 [analyzer] INFO: Injected into process with pid 7692 and name u'Unicorn-29805.exe'
2025-06-24 21:28:29,983 [analyzer] INFO: Injected into process with pid 7428 and name u'Unicorn-4604.exe'
2025-06-24 21:28:30,155 [analyzer] INFO: Injected into process with pid 8108 and name u'Unicorn-32097.exe'
2025-06-24 21:28:30,171 [analyzer] INFO: Injected into process with pid 7936 and name u'Unicorn-48633.exe'
2025-06-24 21:28:30,171 [analyzer] INFO: Injected into process with pid 8076 and name u'Unicorn-49163.exe'
2025-06-24 21:28:30,187 [analyzer] DEBUG: Loaded monitor into process with pid 7624
2025-06-24 21:28:30,233 [analyzer] DEBUG: Loaded monitor into process with pid 7692
2025-06-24 21:28:30,296 [analyzer] DEBUG: Loaded monitor into process with pid 7428
2025-06-24 21:28:30,358 [analyzer] DEBUG: Loaded monitor into process with pid 8108
2025-06-24 21:28:30,375 [analyzer] DEBUG: Loaded monitor into process with pid 8076
2025-06-24 21:28:30,437 [analyzer] DEBUG: Loaded monitor into process with pid 7936
2025-06-24 21:28:30,562 [analyzer] INFO: Added new file to list with pid 4424 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23158.exe
2025-06-24 21:28:31,015 [analyzer] INFO: Injected into process with pid 7388 and name u'Unicorn-23158.exe'
2025-06-24 21:28:31,296 [analyzer] DEBUG: Loaded monitor into process with pid 7388
2025-06-24 21:28:31,921 [analyzer] INFO: Added new file to list with pid 2800 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58050.exe
2025-06-24 21:28:31,921 [analyzer] INFO: Added new file to list with pid 2368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9578.exe
2025-06-24 21:28:31,983 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49004.exe
2025-06-24 21:28:32,233 [analyzer] INFO: Added new file to list with pid 3828 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31453.exe
2025-06-24 21:28:32,233 [analyzer] INFO: Injected into process with pid 7900 and name u'Unicorn-9578.exe'
2025-06-24 21:28:32,250 [analyzer] INFO: Injected into process with pid 7396 and name u'Unicorn-58050.exe'
2025-06-24 21:28:32,250 [analyzer] INFO: Injected into process with pid 8204 and name u'Unicorn-49004.exe'
2025-06-24 21:28:32,265 [analyzer] INFO: Added new file to list with pid 1884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55990.exe
2025-06-24 21:28:32,280 [analyzer] INFO: Added new file to list with pid 3196 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5875.exe
2025-06-24 21:28:32,280 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54877.exe
2025-06-24 21:28:32,296 [analyzer] INFO: Added new file to list with pid 2520 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14913.exe
2025-06-24 21:28:32,358 [analyzer] INFO: Added new file to list with pid 3688 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34248.exe
2025-06-24 21:28:32,358 [analyzer] INFO: Added new file to list with pid 4044 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34248.exe
2025-06-24 21:28:32,358 [analyzer] INFO: Added new file to list with pid 860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31979.exe
2025-06-24 21:28:32,358 [analyzer] INFO: Added new file to list with pid 3796 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31448.exe
2025-06-24 21:28:32,358 [analyzer] INFO: Added new file to list with pid 3696 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34248.exe
2025-06-24 21:28:32,358 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31979.exe
2025-06-24 21:28:32,358 [analyzer] INFO: Added new file to list with pid 3688 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40114.exe
2025-06-24 21:28:32,358 [analyzer] INFO: Added new file to list with pid 2444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10448.exe
2025-06-24 21:28:32,358 [analyzer] INFO: Added new file to list with pid 3024 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5113.exe
2025-06-24 21:28:32,421 [analyzer] INFO: Added new file to list with pid 3916 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6021.exe
2025-06-24 21:28:32,437 [analyzer] INFO: Added new file to list with pid 1748 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60093.exe
2025-06-24 21:28:32,421 [analyzer] INFO: Added new file to list with pid 4088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14156.exe
2025-06-24 21:28:32,483 [analyzer] INFO: Added new file to list with pid 3112 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31595.exe
2025-06-24 21:28:32,530 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48123.exe
2025-06-24 21:28:32,530 [analyzer] INFO: Added new file to list with pid 3592 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26592.exe
2025-06-24 21:28:32,608 [analyzer] INFO: Added new file to list with pid 3584 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40852.exe
2025-06-24 21:28:32,655 [analyzer] DEBUG: Loaded monitor into process with pid 7900
2025-06-24 21:28:32,703 [analyzer] DEBUG: Loaded monitor into process with pid 7396
2025-06-24 21:28:32,780 [analyzer] DEBUG: Loaded monitor into process with pid 8204
2025-06-24 21:28:32,812 [analyzer] INFO: Injected into process with pid 8280 and name u'Unicorn-31453.exe'
2025-06-24 21:28:32,858 [analyzer] INFO: Injected into process with pid 8392 and name u'Unicorn-31979.exe'
2025-06-24 21:28:32,890 [analyzer] INFO: Injected into process with pid 8384 and name u'Unicorn-31448.exe'
2025-06-24 21:28:32,921 [analyzer] INFO: Injected into process with pid 8336 and name u'Unicorn-14913.exe'
2025-06-24 21:28:32,937 [analyzer] INFO: Injected into process with pid 8328 and name u'Unicorn-14913.exe'
2025-06-24 21:28:32,967 [analyzer] INFO: Injected into process with pid 8320 and name u'Unicorn-54877.exe'
2025-06-24 21:28:32,983 [analyzer] INFO: Injected into process with pid 8312 and name u'Unicorn-5875.exe'
2025-06-24 21:28:32,983 [analyzer] INFO: Injected into process with pid 8296 and name u'Unicorn-55990.exe'
2025-06-24 21:28:32,983 [analyzer] INFO: Injected into process with pid 8484 and name u'Unicorn-6021.exe'
2025-06-24 21:28:33,046 [analyzer] INFO: Injected into process with pid 8424 and name u'Unicorn-40114.exe'
2025-06-24 21:28:33,046 [analyzer] INFO: Injected into process with pid 8456 and name u'Unicorn-5113.exe'
2025-06-24 21:28:33,062 [analyzer] DEBUG: Loaded monitor into process with pid 8280
2025-06-24 21:28:33,078 [analyzer] INFO: Injected into process with pid 8408 and name u'Unicorn-34248.exe'
2025-06-24 21:28:33,125 [analyzer] INFO: Injected into process with pid 8416 and name u'Unicorn-10448.exe'
2025-06-24 21:28:33,155 [analyzer] INFO: Injected into process with pid 8604 and name u'Unicorn-31595.exe'
2025-06-24 21:28:33,155 [analyzer] INFO: Injected into process with pid 8552 and name u'Unicorn-14156.exe'
2025-06-24 21:28:33,171 [analyzer] DEBUG: Loaded monitor into process with pid 8392
2025-06-24 21:28:33,171 [analyzer] INFO: Injected into process with pid 8516 and name u'Unicorn-60093.exe'
2025-06-24 21:28:33,171 [analyzer] INFO: Injected into process with pid 8616 and name u'Unicorn-48123.exe'
2025-06-24 21:28:33,217 [analyzer] INFO: Injected into process with pid 8660 and name u'Unicorn-26592.exe'
2025-06-24 21:28:33,250 [analyzer] DEBUG: Loaded monitor into process with pid 8384
2025-06-24 21:28:33,265 [analyzer] DEBUG: Loaded monitor into process with pid 8336
2025-06-24 21:28:33,265 [analyzer] INFO: Injected into process with pid 8676 and name u'Unicorn-40852.exe'
2025-06-24 21:28:33,280 [analyzer] DEBUG: Loaded monitor into process with pid 8328
2025-06-24 21:28:33,296 [analyzer] DEBUG: Loaded monitor into process with pid 8296
2025-06-24 21:28:33,328 [analyzer] DEBUG: Loaded monitor into process with pid 8424
2025-06-24 21:28:33,342 [analyzer] DEBUG: Loaded monitor into process with pid 8320
2025-06-24 21:28:33,342 [analyzer] DEBUG: Loaded monitor into process with pid 8408
2025-06-24 21:28:33,375 [analyzer] DEBUG: Loaded monitor into process with pid 8456
2025-06-24 21:28:33,390 [analyzer] DEBUG: Loaded monitor into process with pid 8312
2025-06-24 21:28:33,421 [analyzer] DEBUG: Loaded monitor into process with pid 8416
2025-06-24 21:28:33,437 [analyzer] DEBUG: Loaded monitor into process with pid 8616
2025-06-24 21:28:33,453 [analyzer] DEBUG: Loaded monitor into process with pid 8660
2025-06-24 21:28:33,467 [analyzer] DEBUG: Loaded monitor into process with pid 8484
2025-06-24 21:28:33,500 [analyzer] DEBUG: Loaded monitor into process with pid 8516
2025-06-24 21:28:33,530 [analyzer] DEBUG: Loaded monitor into process with pid 8604
2025-06-24 21:28:33,562 [analyzer] DEBUG: Loaded monitor into process with pid 8676
2025-06-24 21:28:33,592 [analyzer] DEBUG: Loaded monitor into process with pid 8552
2025-06-24 21:28:40,796 [analyzer] INFO: Added new file to list with pid 2976 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52944.exe
2025-06-24 21:28:40,796 [analyzer] INFO: Added new file to list with pid 4044 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17073.exe
2025-06-24 21:28:40,796 [analyzer] INFO: Added new file to list with pid 3248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8938.exe
2025-06-24 21:28:40,812 [analyzer] INFO: Added new file to list with pid 4292 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63010.exe
2025-06-24 21:28:40,812 [analyzer] INFO: Added new file to list with pid 3152 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8938.exe
2025-06-24 21:28:40,812 [analyzer] INFO: Added new file to list with pid 3496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57410.exe
2025-06-24 21:28:40,828 [analyzer] INFO: Added new file to list with pid 3308 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8938.exe
2025-06-24 21:28:41,171 [analyzer] INFO: Added new file to list with pid 3292 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23404.exe
2025-06-24 21:28:45,187 [analyzer] INFO: Injected into process with pid 8364 and name u'Unicorn-8938.exe'
2025-06-24 21:28:45,187 [analyzer] INFO: Injected into process with pid 8272 and name u'Unicorn-52944.exe'
2025-06-24 21:28:45,187 [analyzer] INFO: Injected into process with pid 8292 and name u'Unicorn-57410.exe'
2025-06-24 21:28:45,187 [analyzer] INFO: Added new file to list with pid 4044 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12648.exe
2025-06-24 21:28:45,187 [analyzer] INFO: Injected into process with pid 8268 and name u'Unicorn-52944.exe'
2025-06-24 21:28:45,187 [analyzer] INFO: Added new file to list with pid 3248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57184.exe
2025-06-24 21:28:45,203 [analyzer] INFO: Injected into process with pid 8276 and name u'Unicorn-17073.exe'
2025-06-24 21:28:45,217 [analyzer] INFO: Added new file to list with pid 3152 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57184.exe
2025-06-24 21:28:45,217 [analyzer] INFO: Injected into process with pid 8372 and name u'Unicorn-63010.exe'
2025-06-24 21:28:45,296 [analyzer] INFO: Added new file to list with pid 2400 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14561.exe
2025-06-24 21:28:45,296 [analyzer] INFO: Added new file to list with pid 4272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53026.exe
2025-06-24 21:28:45,296 [analyzer] INFO: Added new file to list with pid 3412 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31627.exe
2025-06-24 21:28:45,312 [analyzer] INFO: Added new file to list with pid 3228 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47433.exe
2025-06-24 21:28:45,328 [analyzer] INFO: Added new file to list with pid 3272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47963.exe
2025-06-24 21:28:45,328 [analyzer] INFO: Added new file to list with pid 580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26432.exe
2025-06-24 21:28:45,328 [analyzer] INFO: Added new file to list with pid 3352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47433.exe
2025-06-24 21:28:45,328 [analyzer] INFO: Added new file to list with pid 3088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54916.exe
2025-06-24 21:28:45,328 [analyzer] INFO: Added new file to list with pid 2568 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47963.exe
2025-06-24 21:28:45,328 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9712.exe
2025-06-24 21:28:45,375 [analyzer] INFO: Added new file to list with pid 2816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9712.exe
2025-06-24 21:28:45,375 [analyzer] INFO: Added new file to list with pid 3524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33512.exe
2025-06-24 21:28:45,390 [analyzer] INFO: Added new file to list with pid 808 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47579.exe
2025-06-24 21:28:45,390 [analyzer] INFO: Added new file to list with pid 4064 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30712.exe
2025-06-24 21:28:45,390 [analyzer] INFO: Added new file to list with pid 1384 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26048.exe
2025-06-24 21:28:45,390 [analyzer] INFO: Added new file to list with pid 4004 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55714.exe
2025-06-24 21:28:45,453 [analyzer] INFO: Added new file to list with pid 4072 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15484.exe
2025-06-24 21:28:45,453 [analyzer] INFO: Added new file to list with pid 4072 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63193.exe
2025-06-24 21:28:45,500 [analyzer] INFO: Added new file to list with pid 3304 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53757.exe
2025-06-24 21:28:45,500 [analyzer] INFO: Added new file to list with pid 4280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59357.exe
2025-06-24 21:28:45,546 [analyzer] INFO: Added new file to list with pid 3952 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4755.exe
2025-06-24 21:28:45,546 [analyzer] INFO: Added new file to list with pid 3540 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7555.exe
2025-06-24 21:28:45,578 [analyzer] INFO: Added new file to list with pid 3740 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13420.exe
2025-06-24 21:28:45,592 [analyzer] INFO: Added new file to list with pid 3720 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5285.exe
2025-06-24 21:28:45,592 [analyzer] INFO: Injected into process with pid 8596 and name u'Unicorn-23404.exe'
2025-06-24 21:28:45,655 [analyzer] INFO: Added new file to list with pid 3452 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33147.exe
2025-06-24 21:28:45,937 [analyzer] INFO: Added new file to list with pid 3472 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39148.exe
2025-06-24 21:28:46,015 [analyzer] DEBUG: Loaded monitor into process with pid 8364
2025-06-24 21:28:46,250 [analyzer] DEBUG: Loaded monitor into process with pid 8292
2025-06-24 21:28:46,250 [analyzer] DEBUG: Loaded monitor into process with pid 8272
2025-06-24 21:28:46,280 [analyzer] DEBUG: Loaded monitor into process with pid 8372
2025-06-24 21:28:46,296 [analyzer] DEBUG: Loaded monitor into process with pid 8268
2025-06-24 21:28:46,390 [analyzer] DEBUG: Loaded monitor into process with pid 8276
2025-06-24 21:28:46,483 [analyzer] DEBUG: Loaded monitor into process with pid 8596
2025-06-24 21:28:46,515 [analyzer] INFO: Added new file to list with pid 2368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39691.exe
2025-06-24 21:28:46,546 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21258.exe
2025-06-24 21:28:46,546 [analyzer] INFO: Added new file to list with pid 2800 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21258.exe
2025-06-24 21:28:46,546 [analyzer] INFO: Added new file to list with pid 4424 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9793.exe
2025-06-24 21:28:53,578 [analyzer] INFO: Added new file to list with pid 3828 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61956.exe
2025-06-24 21:28:53,608 [analyzer] INFO: Added new file to list with pid 1884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27115.exe
2025-06-24 21:28:53,608 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27115.exe
2025-06-24 21:28:53,608 [analyzer] INFO: Added new file to list with pid 2520 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48646.exe
2025-06-24 21:28:53,625 [analyzer] INFO: Added new file to list with pid 2884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48646.exe
2025-06-24 21:28:53,625 [analyzer] INFO: Added new file to list with pid 3196 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31580.exe
2025-06-24 21:28:53,640 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59787.exe
2025-06-24 21:28:53,640 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10952.exe
2025-06-24 21:28:53,655 [analyzer] INFO: Added new file to list with pid 3112 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59787.exe
2025-06-24 21:28:53,655 [analyzer] INFO: Added new file to list with pid 3024 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51553.exe
2025-06-24 21:28:53,655 [analyzer] INFO: Added new file to list with pid 3584 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64253.exe
2025-06-24 21:28:53,671 [analyzer] INFO: Added new file to list with pid 3592 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54452.exe
2025-06-24 21:28:53,671 [analyzer] INFO: Added new file to list with pid 3916 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19824.exe
2025-06-24 21:28:53,687 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-41355.exe
2025-06-24 21:28:53,687 [analyzer] INFO: Added new file to list with pid 3696 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49490.exe
2025-06-24 21:28:53,671 [analyzer] INFO: Added new file to list with pid 3796 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24289.exe
2025-06-24 21:28:53,687 [analyzer] INFO: Added new file to list with pid 4088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40825.exe
2025-06-24 21:28:53,687 [analyzer] INFO: Added new file to list with pid 4032 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40825.exe
2025-06-24 21:28:53,687 [analyzer] INFO: Added new file to list with pid 4088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14489.exe
2025-06-24 21:28:53,905 [analyzer] INFO: Added new file to list with pid 3248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13721.exe
2025-06-24 21:28:53,937 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63114.exe
2025-06-24 21:28:53,937 [analyzer] INFO: Added new file to list with pid 3228 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7377.exe
2025-06-24 21:28:53,937 [analyzer] INFO: Added new file to list with pid 3272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2912.exe
2025-06-24 21:28:53,983 [analyzer] INFO: Added new file to list with pid 3720 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10011.exe
2025-06-24 21:28:54,015 [analyzer] INFO: Added new file to list with pid 3304 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47494.exe
2025-06-24 21:28:54,155 [analyzer] INFO: Injected into process with pid 8816 and name u'Unicorn-57184.exe'
2025-06-24 21:28:54,155 [analyzer] INFO: Injected into process with pid 8912 and name u'Unicorn-31627.exe'
2025-06-24 21:28:54,171 [analyzer] INFO: Injected into process with pid 8892 and name u'Unicorn-14561.exe'
2025-06-24 21:28:54,171 [analyzer] INFO: Injected into process with pid 8880 and name u'Unicorn-12648.exe'
2025-06-24 21:28:54,187 [analyzer] INFO: Injected into process with pid 8832 and name u'Unicorn-53026.exe'
2025-06-24 21:28:54,217 [analyzer] INFO: Injected into process with pid 8940 and name u'Unicorn-47433.exe'
2025-06-24 21:28:54,250 [analyzer] INFO: Injected into process with pid 8888 and name u'Unicorn-54916.exe'
2025-06-24 21:28:54,250 [analyzer] INFO: Injected into process with pid 9156 and name u'Unicorn-15484.exe'
2025-06-24 21:28:54,250 [analyzer] INFO: Injected into process with pid 8984 and name u'Unicorn-47963.exe'
2025-06-24 21:28:54,265 [analyzer] INFO: Injected into process with pid 9000 and name u'Unicorn-47579.exe'
2025-06-24 21:28:54,265 [analyzer] INFO: Injected into process with pid 8936 and name u'Unicorn-26432.exe'
2025-06-24 21:28:54,280 [analyzer] INFO: Injected into process with pid 9044 and name u'Unicorn-26048.exe'
2025-06-24 21:28:54,280 [analyzer] INFO: Injected into process with pid 8996 and name u'Unicorn-33512.exe'
2025-06-24 21:28:54,296 [analyzer] INFO: Injected into process with pid 8756 and name u'Unicorn-53757.exe'
2025-06-24 21:28:54,312 [analyzer] INFO: Injected into process with pid 9148 and name u'Unicorn-63193.exe'
2025-06-24 21:28:54,312 [analyzer] INFO: Injected into process with pid 8988 and name u'Unicorn-9712.exe'
2025-06-24 21:28:54,328 [analyzer] INFO: Injected into process with pid 9112 and name u'Unicorn-59357.exe'
2025-06-24 21:28:54,342 [analyzer] INFO: Injected into process with pid 8432 and name u'Unicorn-4755.exe'
2025-06-24 21:28:54,358 [analyzer] INFO: Injected into process with pid 9012 and name u'Unicorn-30712.exe'
2025-06-24 21:28:54,375 [analyzer] INFO: Injected into process with pid 8444 and name u'Unicorn-7555.exe'
2025-06-24 21:28:54,375 [analyzer] INFO: Injected into process with pid 8448 and name u'Unicorn-13420.exe'
2025-06-24 21:28:54,375 [analyzer] INFO: Injected into process with pid 8592 and name u'Unicorn-5285.exe'
2025-06-24 21:28:54,390 [analyzer] INFO: Injected into process with pid 7796 and name u'Unicorn-55714.exe'
2025-06-24 21:28:54,405 [analyzer] INFO: Injected into process with pid 8512 and name u'Unicorn-53757.exe'
2025-06-24 21:28:54,421 [analyzer] INFO: Injected into process with pid 8540 and name u'Unicorn-4755.exe'
2025-06-24 21:28:54,437 [analyzer] INFO: Injected into process with pid 8692 and name u'Unicorn-33147.exe'
2025-06-24 21:28:54,453 [analyzer] INFO: Injected into process with pid 9520 and name u'Unicorn-39148.exe'
2025-06-24 21:28:54,578 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24256.exe
2025-06-24 21:28:54,655 [analyzer] INFO: Injected into process with pid 9604 and name u'Unicorn-39691.exe'
2025-06-24 21:28:54,733 [analyzer] INFO: Injected into process with pid 9620 and name u'Unicorn-9793.exe'
2025-06-24 21:28:54,750 [analyzer] INFO: Injected into process with pid 9612 and name u'Unicorn-21258.exe'
2025-06-24 21:28:54,750 [analyzer] INFO: Added new file to list with pid 4468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14581.exe
2025-06-24 21:28:54,796 [analyzer] DEBUG: Loaded monitor into process with pid 8892
2025-06-24 21:28:54,842 [analyzer] INFO: Injected into process with pid 9912 and name u'Unicorn-61956.exe'
2025-06-24 21:28:54,842 [analyzer] DEBUG: Loaded monitor into process with pid 8832
2025-06-24 21:28:54,953 [analyzer] DEBUG: Loaded monitor into process with pid 8888
2025-06-24 21:28:54,967 [analyzer] DEBUG: Loaded monitor into process with pid 8756
2025-06-24 21:28:55,000 [analyzer] DEBUG: Loaded monitor into process with pid 9604
2025-06-24 21:28:55,030 [analyzer] DEBUG: Loaded monitor into process with pid 8988
2025-06-24 21:28:55,062 [analyzer] DEBUG: Loaded monitor into process with pid 8984
2025-06-24 21:28:55,078 [analyzer] DEBUG: Loaded monitor into process with pid 8512
2025-06-24 21:28:55,092 [analyzer] DEBUG: Loaded monitor into process with pid 8540
2025-06-24 21:28:55,092 [analyzer] DEBUG: Loaded monitor into process with pid 8996
2025-06-24 21:28:55,092 [analyzer] INFO: Injected into process with pid 9992 and name u'Unicorn-48646.exe'
2025-06-24 21:28:55,108 [analyzer] INFO: Injected into process with pid 10016 and name u'Unicorn-10952.exe'
2025-06-24 21:28:55,108 [analyzer] INFO: Injected into process with pid 10040 and name u'Unicorn-54452.exe'
2025-06-24 21:28:55,125 [analyzer] DEBUG: Loaded monitor into process with pid 8940
2025-06-24 21:28:55,140 [analyzer] DEBUG: Loaded monitor into process with pid 9000
2025-06-24 21:28:55,140 [analyzer] DEBUG: Loaded monitor into process with pid 8444
2025-06-24 21:28:55,140 [analyzer] INFO: Injected into process with pid 9976 and name u'Unicorn-27115.exe'
2025-06-24 21:28:55,155 [analyzer] DEBUG: Loaded monitor into process with pid 8592
2025-06-24 21:28:55,155 [analyzer] INFO: Injected into process with pid 10008 and name u'Unicorn-31580.exe'
2025-06-24 21:28:55,171 [analyzer] DEBUG: Loaded monitor into process with pid 8936
2025-06-24 21:28:55,187 [analyzer] DEBUG: Loaded monitor into process with pid 8816
2025-06-24 21:28:55,187 [analyzer] INFO: Injected into process with pid 10088 and name u'Unicorn-40825.exe'
2025-06-24 21:28:55,187 [analyzer] INFO: Injected into process with pid 10024 and name u'Unicorn-51553.exe'
2025-06-24 21:28:55,203 [analyzer] DEBUG: Loaded monitor into process with pid 9112
2025-06-24 21:28:55,217 [analyzer] INFO: Injected into process with pid 10072 and name u'Unicorn-24289.exe'
2025-06-24 21:28:55,233 [analyzer] DEBUG: Loaded monitor into process with pid 7796
2025-06-24 21:28:55,233 [analyzer] DEBUG: Loaded monitor into process with pid 9044
2025-06-24 21:28:55,250 [analyzer] DEBUG: Loaded monitor into process with pid 8432
2025-06-24 21:28:55,265 [analyzer] DEBUG: Loaded monitor into process with pid 8692
2025-06-24 21:28:55,312 [analyzer] DEBUG: Loaded monitor into process with pid 8448
2025-06-24 21:28:55,312 [analyzer] INFO: Injected into process with pid 10096 and name u'Unicorn-14489.exe'
2025-06-24 21:28:55,328 [analyzer] DEBUG: Loaded monitor into process with pid 9148
2025-06-24 21:28:55,328 [analyzer] DEBUG: Loaded monitor into process with pid 8912
2025-06-24 21:28:55,342 [analyzer] DEBUG: Loaded monitor into process with pid 9620
2025-06-24 21:28:55,342 [analyzer] INFO: Injected into process with pid 10064 and name u'Unicorn-41355.exe'
2025-06-24 21:28:55,358 [analyzer] DEBUG: Loaded monitor into process with pid 9612
2025-06-24 21:28:55,390 [analyzer] DEBUG: Loaded monitor into process with pid 9520
2025-06-24 21:28:55,390 [analyzer] INFO: Injected into process with pid 10080 and name u'Unicorn-49490.exe'
2025-06-24 21:28:55,405 [analyzer] DEBUG: Loaded monitor into process with pid 8880
2025-06-24 21:28:55,405 [analyzer] INFO: Injected into process with pid 10044 and name u'Unicorn-64253.exe'
2025-06-24 21:28:55,405 [analyzer] INFO: Injected into process with pid 10032 and name u'Unicorn-59787.exe'
2025-06-24 21:28:55,421 [analyzer] INFO: Injected into process with pid 10056 and name u'Unicorn-19824.exe'
2025-06-24 21:28:55,437 [analyzer] DEBUG: Loaded monitor into process with pid 9156
2025-06-24 21:28:55,453 [analyzer] INFO: Injected into process with pid 8876 and name u'Unicorn-13721.exe'
2025-06-24 21:28:55,467 [analyzer] DEBUG: Loaded monitor into process with pid 9912
2025-06-24 21:28:55,467 [analyzer] INFO: Injected into process with pid 8652 and name u'Unicorn-63114.exe'
2025-06-24 21:28:55,467 [analyzer] INFO: Injected into process with pid 9280 and name u'Unicorn-7377.exe'
2025-06-24 21:28:55,500 [analyzer] INFO: Injected into process with pid 9240 and name u'Unicorn-2912.exe'
2025-06-24 21:28:55,500 [analyzer] INFO: Injected into process with pid 9288 and name u'Unicorn-47494.exe'
2025-06-24 21:28:55,515 [analyzer] DEBUG: Loaded monitor into process with pid 9012
2025-06-24 21:28:55,515 [analyzer] INFO: Injected into process with pid 8820 and name u'Unicorn-10011.exe'
2025-06-24 21:28:55,608 [analyzer] DEBUG: Loaded monitor into process with pid 9992
2025-06-24 21:28:55,625 [analyzer] DEBUG: Loaded monitor into process with pid 10040
2025-06-24 21:28:55,640 [analyzer] DEBUG: Loaded monitor into process with pid 9976
2025-06-24 21:28:55,703 [analyzer] DEBUG: Loaded monitor into process with pid 10008
2025-06-24 21:28:55,717 [analyzer] DEBUG: Loaded monitor into process with pid 10088
2025-06-24 21:28:55,733 [analyzer] DEBUG: Loaded monitor into process with pid 10072
2025-06-24 21:28:55,733 [analyzer] DEBUG: Loaded monitor into process with pid 10024
2025-06-24 21:28:55,765 [analyzer] DEBUG: Loaded monitor into process with pid 10016
2025-06-24 21:28:55,765 [analyzer] DEBUG: Loaded monitor into process with pid 10096
2025-06-24 21:28:55,796 [analyzer] INFO: Injected into process with pid 9300 and name u'Unicorn-24256.exe'
2025-06-24 21:28:55,812 [analyzer] DEBUG: Loaded monitor into process with pid 10064
2025-06-24 21:28:55,858 [analyzer] DEBUG: Loaded monitor into process with pid 10080
2025-06-24 21:28:55,875 [analyzer] DEBUG: Loaded monitor into process with pid 10044
2025-06-24 21:28:55,890 [analyzer] DEBUG: Loaded monitor into process with pid 10032
2025-06-24 21:28:55,937 [analyzer] DEBUG: Loaded monitor into process with pid 8820
2025-06-24 21:28:55,937 [analyzer] DEBUG: Loaded monitor into process with pid 9288
2025-06-24 21:28:55,967 [analyzer] DEBUG: Loaded monitor into process with pid 9280
2025-06-24 21:28:56,000 [analyzer] INFO: Injected into process with pid 9948 and name u'Unicorn-14581.exe'
2025-06-24 21:28:56,030 [analyzer] DEBUG: Loaded monitor into process with pid 9240
2025-06-24 21:28:56,046 [analyzer] DEBUG: Loaded monitor into process with pid 8652
2025-06-24 21:28:56,062 [analyzer] DEBUG: Loaded monitor into process with pid 8876
2025-06-24 21:28:56,092 [analyzer] DEBUG: Loaded monitor into process with pid 10056
2025-06-24 21:28:56,265 [analyzer] DEBUG: Loaded monitor into process with pid 9300
2025-06-24 21:29:04,967 [analyzer] DEBUG: Loaded monitor into process with pid 9948
2025-06-24 21:29:05,092 [analyzer] INFO: Added new file to list with pid 1884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38924.exe
2025-06-24 21:29:05,108 [analyzer] INFO: Added new file to list with pid 4088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48724.exe
2025-06-24 21:29:05,108 [analyzer] INFO: Added new file to list with pid 2520 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44259.exe
2025-06-24 21:29:07,390 [analyzer] INFO: Added new file to list with pid 3308 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56179.exe
2025-06-24 21:29:08,108 [analyzer] INFO: Added new file to list with pid 860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61234.exe
2025-06-24 21:29:08,108 [analyzer] INFO: Added new file to list with pid 3496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22562.exe
2025-06-24 21:29:08,437 [analyzer] INFO: Added new file to list with pid 2976 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1857.exe
2025-06-24 21:29:08,625 [analyzer] INFO: Added new file to list with pid 3688 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1275.exe
2025-06-24 21:29:09,515 [analyzer] INFO: Added new file to list with pid 3292 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56156.exe
2025-06-24 21:29:09,828 [analyzer] INFO: Added new file to list with pid 3088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15881.exe
2025-06-24 21:29:09,828 [analyzer] INFO: Added new file to list with pid 580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6081.exe
2025-06-24 21:29:09,858 [analyzer] INFO: Added new file to list with pid 3412 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11416.exe
2025-06-24 21:29:09,858 [analyzer] INFO: Added new file to list with pid 3524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-41082.exe
2025-06-24 21:29:09,875 [analyzer] INFO: Added new file to list with pid 3656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32947.exe
2025-06-24 21:29:09,890 [analyzer] INFO: Added new file to list with pid 3740 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32416.exe
2025-06-24 21:29:09,890 [analyzer] INFO: Added new file to list with pid 1940 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48082.exe
2025-06-24 21:29:09,953 [analyzer] INFO: Added new file to list with pid 4272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35217.exe
2025-06-24 21:29:09,953 [analyzer] INFO: Added new file to list with pid 4280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35217.exe
2025-06-24 21:29:10,125 [analyzer] INFO: Injected into process with pid 10348 and name u'Unicorn-38924.exe'
2025-06-24 21:29:10,125 [analyzer] INFO: Injected into process with pid 10364 and name u'Unicorn-48724.exe'
2025-06-24 21:29:10,140 [analyzer] INFO: Injected into process with pid 10356 and name u'Unicorn-38924.exe'
2025-06-24 21:29:10,250 [analyzer] INFO: Added new file to list with pid 3472 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55443.exe
2025-06-24 21:29:10,250 [analyzer] INFO: Injected into process with pid 10372 and name u'Unicorn-44259.exe'
2025-06-24 21:29:10,546 [analyzer] INFO: Added new file to list with pid 2368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10897.exe
2025-06-24 21:29:10,625 [analyzer] INFO: Added new file to list with pid 1748 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62426.exe
2025-06-24 21:29:10,625 [analyzer] INFO: Added new file to list with pid 2884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32760.exe
2025-06-24 21:29:10,625 [analyzer] INFO: Added new file to list with pid 4424 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56561.exe
2025-06-24 21:29:10,625 [analyzer] INFO: Added new file to list with pid 2800 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32760.exe
2025-06-24 21:29:10,625 [analyzer] INFO: Added new file to list with pid 3828 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-37225.exe
2025-06-24 21:29:10,655 [analyzer] INFO: Added new file to list with pid 2368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54868.exe
2025-06-24 21:29:10,655 [analyzer] INFO: Added new file to list with pid 3196 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7586.exe
2025-06-24 21:29:10,671 [analyzer] INFO: Added new file to list with pid 4292 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59249.exe
2025-06-24 21:29:10,703 [analyzer] INFO: Added new file to list with pid 4032 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39913.exe
2025-06-24 21:29:10,703 [analyzer] INFO: Added new file to list with pid 3024 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62877.exe
2025-06-24 21:29:10,703 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20876.exe
2025-06-24 21:29:10,780 [analyzer] INFO: Added new file to list with pid 3796 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40067.exe
2025-06-24 21:29:10,812 [analyzer] INFO: Added new file to list with pid 2444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40836.exe
2025-06-24 21:29:10,842 [analyzer] DEBUG: Loaded monitor into process with pid 10364
2025-06-24 21:29:10,875 [analyzer] DEBUG: Loaded monitor into process with pid 10356
2025-06-24 21:29:10,937 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '4228,4236,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 713, in _communicate
stderr_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:10,967 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50824.exe
2025-06-24 21:29:10,967 [analyzer] DEBUG: Loaded monitor into process with pid 10348
2025-06-24 21:29:10,967 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '2732,876,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:10,983 [analyzer] INFO: Added new file to list with pid 3696 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13387.exe
2025-06-24 21:29:11,000 [analyzer] INFO: Injected into process with pid 10448 and name u'Unicorn-56179.exe'
2025-06-24 21:29:11,015 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10392,10440,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:11,015 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '3004,10468,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:11,015 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10416,10428,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:11,046 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10460,10464,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:11,062 [analyzer] DEBUG: Loaded monitor into process with pid 10372
2025-06-24 21:29:11,062 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10484,10500,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:11,078 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10628,10632,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:11,092 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10636,10492,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:11,092 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10640,10476,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:11,328 [analyzer] INFO: Injected into process with pid 10504 and name u'Unicorn-61234.exe'
2025-06-24 21:29:11,328 [analyzer] INFO: Injected into process with pid 10540 and name u'Unicorn-1857.exe'
2025-06-24 21:29:11,358 [analyzer] INFO: Injected into process with pid 10512 and name u'Unicorn-22562.exe'
2025-06-24 21:29:11,405 [analyzer] INFO: Added new file to list with pid 3720 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5116.exe
2025-06-24 21:29:11,405 [analyzer] INFO: Added new file to list with pid 3584 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31982.exe
2025-06-24 21:29:11,421 [analyzer] INFO: Added new file to list with pid 3916 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5116.exe
2025-06-24 21:29:11,421 [analyzer] INFO: Added new file to list with pid 3248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9316.exe
2025-06-24 21:29:11,421 [analyzer] INFO: Added new file to list with pid 3248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5116.exe
2025-06-24 21:29:11,421 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9316.exe
2025-06-24 21:29:11,421 [analyzer] INFO: Added new file to list with pid 3304 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10451.exe
2025-06-24 21:29:11,421 [analyzer] INFO: Added new file to list with pid 3228 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31982.exe
2025-06-24 21:29:11,500 [analyzer] INFO: Added new file to list with pid 3112 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30881.exe
2025-06-24 21:29:11,640 [analyzer] INFO: Injected into process with pid 10572 and name u'Unicorn-1275.exe'
2025-06-24 21:29:11,717 [analyzer] INFO: Injected into process with pid 10588 and name u'Unicorn-56156.exe'
2025-06-24 21:29:11,733 [analyzer] DEBUG: Loaded monitor into process with pid 10448
2025-06-24 21:29:12,203 [analyzer] DEBUG: Loaded monitor into process with pid 10504
2025-06-24 21:29:12,203 [analyzer] INFO: Added new file to list with pid 4468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5524.exe
2025-06-24 21:29:12,280 [analyzer] DEBUG: Loaded monitor into process with pid 10512
2025-06-24 21:29:12,296 [analyzer] DEBUG: Loaded monitor into process with pid 10540
2025-06-24 21:29:12,312 [analyzer] INFO: Injected into process with pid 10644 and name u'Unicorn-15881.exe'
2025-06-24 21:29:12,312 [analyzer] INFO: Injected into process with pid 10692 and name u'Unicorn-15881.exe'
2025-06-24 21:29:12,312 [analyzer] INFO: Injected into process with pid 10836 and name u'Unicorn-6081.exe'
2025-06-24 21:29:12,312 [analyzer] INFO: Injected into process with pid 10660 and name u'Unicorn-15881.exe'
2025-06-24 21:29:12,328 [analyzer] INFO: Injected into process with pid 10756 and name u'Unicorn-6081.exe'
2025-06-24 21:29:12,328 [analyzer] INFO: Injected into process with pid 10676 and name u'Unicorn-6081.exe'
2025-06-24 21:29:12,328 [analyzer] INFO: Injected into process with pid 10652 and name u'Unicorn-6081.exe'
2025-06-24 21:29:12,328 [analyzer] INFO: Injected into process with pid 10820 and name u'Unicorn-6081.exe'
2025-06-24 21:29:12,342 [analyzer] INFO: Injected into process with pid 10700 and name u'Unicorn-15881.exe'
2025-06-24 21:29:12,375 [analyzer] INFO: Injected into process with pid 10684 and name u'Unicorn-41082.exe'
2025-06-24 21:29:12,390 [analyzer] INFO: Injected into process with pid 10668 and name u'Unicorn-11416.exe'
2025-06-24 21:29:12,390 [analyzer] INFO: Injected into process with pid 10716 and name u'Unicorn-11416.exe'
2025-06-24 21:29:12,390 [analyzer] INFO: Injected into process with pid 10844 and name u'Unicorn-15881.exe'
2025-06-24 21:29:12,405 [analyzer] INFO: Injected into process with pid 10708 and name u'Unicorn-32947.exe'
2025-06-24 21:29:12,437 [analyzer] INFO: Injected into process with pid 10748 and name u'Unicorn-11416.exe'
2025-06-24 21:29:12,453 [analyzer] INFO: Injected into process with pid 10740 and name u'Unicorn-48082.exe'
2025-06-24 21:29:12,467 [analyzer] INFO: Injected into process with pid 10780 and name u'Unicorn-32947.exe'
2025-06-24 21:29:12,467 [analyzer] INFO: Injected into process with pid 10772 and name u'Unicorn-32947.exe'
2025-06-24 21:29:12,467 [analyzer] INFO: Injected into process with pid 10732 and name u'Unicorn-15881.exe'
2025-06-24 21:29:12,467 [analyzer] INFO: Injected into process with pid 10764 and name u'Unicorn-11416.exe'
2025-06-24 21:29:12,483 [analyzer] INFO: Injected into process with pid 10828 and name u'Unicorn-15881.exe'
2025-06-24 21:29:12,530 [analyzer] INFO: Injected into process with pid 10788 and name u'Unicorn-32416.exe'
2025-06-24 21:29:12,530 [analyzer] INFO: Injected into process with pid 10724 and name u'Unicorn-32416.exe'
2025-06-24 21:29:12,530 [analyzer] INFO: Injected into process with pid 10792 and name u'Unicorn-41082.exe'
2025-06-24 21:29:12,530 [analyzer] INFO: Injected into process with pid 10812 and name u'Unicorn-35217.exe'
2025-06-24 21:29:12,562 [analyzer] INFO: Injected into process with pid 11120 and name u'Unicorn-55443.exe'
2025-06-24 21:29:12,625 [analyzer] DEBUG: Loaded monitor into process with pid 10572
2025-06-24 21:29:12,717 [analyzer] DEBUG: Loaded monitor into process with pid 10588
2025-06-24 21:29:12,812 [analyzer] INFO: Injected into process with pid 2180 and name u'Unicorn-10897.exe'
2025-06-24 21:29:12,842 [analyzer] INFO: Injected into process with pid 9504 and name u'Unicorn-62426.exe'
2025-06-24 21:29:12,842 [analyzer] INFO: Injected into process with pid 10308 and name u'Unicorn-56561.exe'
2025-06-24 21:29:12,953 [analyzer] DEBUG: Loaded monitor into process with pid 10820
2025-06-24 21:29:12,967 [analyzer] DEBUG: Loaded monitor into process with pid 10716
2025-06-24 21:29:12,967 [analyzer] DEBUG: Loaded monitor into process with pid 10668
2025-06-24 21:29:13,000 [analyzer] DEBUG: Loaded monitor into process with pid 10708
2025-06-24 21:29:13,000 [analyzer] DEBUG: Loaded monitor into process with pid 10676
2025-06-24 21:29:13,015 [analyzer] INFO: Injected into process with pid 11328 and name u'Unicorn-50824.exe'
2025-06-24 21:29:13,030 [analyzer] DEBUG: Loaded monitor into process with pid 10844
2025-06-24 21:29:13,030 [analyzer] INFO: Injected into process with pid 11336 and name u'Unicorn-13387.exe'
2025-06-24 21:29:13,046 [analyzer] DEBUG: Loaded monitor into process with pid 10740
2025-06-24 21:29:13,046 [analyzer] DEBUG: Loaded monitor into process with pid 10772
2025-06-24 21:29:13,062 [analyzer] DEBUG: Loaded monitor into process with pid 10748
2025-06-24 21:29:13,078 [analyzer] DEBUG: Loaded monitor into process with pid 10652
2025-06-24 21:29:13,092 [analyzer] DEBUG: Loaded monitor into process with pid 10692
2025-06-24 21:29:13,092 [analyzer] DEBUG: Loaded monitor into process with pid 10660
2025-06-24 21:29:13,108 [analyzer] DEBUG: Loaded monitor into process with pid 10764
2025-06-24 21:29:13,125 [analyzer] DEBUG: Loaded monitor into process with pid 10780
2025-06-24 21:29:13,140 [analyzer] DEBUG: Loaded monitor into process with pid 10788
2025-06-24 21:29:13,171 [analyzer] DEBUG: Loaded monitor into process with pid 10828
2025-06-24 21:29:13,187 [analyzer] DEBUG: Loaded monitor into process with pid 10732
2025-06-24 21:29:13,250 [analyzer] INFO: Added new file to list with pid 4272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17828.exe
2025-06-24 21:29:13,280 [analyzer] INFO: Injected into process with pid 11648 and name u'Unicorn-31982.exe'
2025-06-24 21:29:13,280 [analyzer] INFO: Injected into process with pid 11640 and name u'Unicorn-5116.exe'
2025-06-24 21:29:13,280 [analyzer] INFO: Injected into process with pid 11656 and name u'Unicorn-9316.exe'
2025-06-24 21:29:13,296 [analyzer] INFO: Injected into process with pid 11668 and name u'Unicorn-30881.exe'
2025-06-24 21:29:13,296 [analyzer] INFO: Injected into process with pid 11632 and name u'Unicorn-10451.exe'
2025-06-24 21:29:13,483 [analyzer] INFO: Injected into process with pid 11888 and name u'Unicorn-5524.exe'
2025-06-24 21:29:13,937 [analyzer] INFO: Added new file to list with pid 2884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-124.exe
2025-06-24 21:29:14,015 [analyzer] INFO: Injected into process with pid 12236 and name u'Unicorn-17828.exe'
2025-06-24 21:29:14,717 [analyzer] INFO: Added new file to list with pid 3584 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13923.exe
2025-06-24 21:29:14,717 [analyzer] INFO: Added new file to list with pid 3248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50589.exe
2025-06-24 21:29:14,717 [analyzer] INFO: Added new file to list with pid 3720 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54697.exe
2025-06-24 21:29:14,733 [analyzer] INFO: Added new file to list with pid 3272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12788.exe
2025-06-24 21:29:14,875 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10872,10928,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 713, in _communicate
stderr_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:14,875 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10920,11384,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:14,890 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10912,11380,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:14,890 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11376,10896,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 713, in _communicate
stderr_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:14,937 [analyzer] INFO: Injected into process with pid 12276 and name u'Unicorn-124.exe'
2025-06-24 21:29:18,062 [analyzer] INFO: Injected into process with pid 11372 and name u'Unicorn-54697.exe'
2025-06-24 21:29:33,765 [analyzer] INFO: Added new file to list with pid 2976 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9092.exe
2025-06-24 21:29:34,108 [analyzer] INFO: Added new file to list with pid 4424 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56229.exe
2025-06-24 21:29:34,125 [analyzer] INFO: Added new file to list with pid 2368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2185.exe
2025-06-24 21:29:34,140 [analyzer] INFO: Added new file to list with pid 3740 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7785.exe
2025-06-24 21:29:34,155 [analyzer] INFO: Added new file to list with pid 4044 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24851.exe
2025-06-24 21:29:34,155 [analyzer] INFO: Added new file to list with pid 3292 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32986.exe
2025-06-24 21:29:34,155 [analyzer] INFO: Added new file to list with pid 2520 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63522.exe
2025-06-24 21:29:34,171 [analyzer] INFO: Added new file to list with pid 3592 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39986.exe
2025-06-24 21:29:34,217 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58485.exe
2025-06-24 21:29:34,233 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59619.exe
2025-06-24 21:29:34,233 [analyzer] INFO: Added new file to list with pid 2816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58485.exe
2025-06-24 21:29:34,233 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58485.exe
2025-06-24 21:29:34,233 [analyzer] INFO: Added new file to list with pid 3152 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58485.exe
2025-06-24 21:29:34,250 [analyzer] INFO: Added new file to list with pid 3656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59619.exe
2025-06-24 21:29:34,265 [analyzer] INFO: Added new file to list with pid 3480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54284.exe
2025-06-24 21:29:34,296 [analyzer] INFO: Added new file to list with pid 4088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15613.exe
2025-06-24 21:29:34,296 [analyzer] INFO: Added new file to list with pid 1748 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15083.exe
2025-06-24 21:29:34,342 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11084,11200,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,342 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11092,11128,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 713, in _communicate
stderr_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,358 [analyzer] INFO: Added new file to list with pid 3688 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64085.exe
2025-06-24 21:29:34,358 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11160,11108,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 713, in _communicate
stderr_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,375 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11216,11192,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,375 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11188,11112,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,437 [analyzer] INFO: Added new file to list with pid 4280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23749.exe
2025-06-24 21:29:34,437 [analyzer] INFO: Added new file to list with pid 3796 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3320.exe
2025-06-24 21:29:34,437 [analyzer] INFO: Added new file to list with pid 4064 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64238.exe
2025-06-24 21:29:34,437 [analyzer] INFO: Added new file to list with pid 3496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51944.exe
2025-06-24 21:29:34,437 [analyzer] INFO: Added new file to list with pid 4004 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64085.exe
2025-06-24 21:29:34,437 [analyzer] INFO: Added new file to list with pid 3352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64238.exe
2025-06-24 21:29:34,437 [analyzer] INFO: Added new file to list with pid 3024 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12548.exe
2025-06-24 21:29:34,437 [analyzer] INFO: Added new file to list with pid 1940 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12548.exe
2025-06-24 21:29:34,483 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2993.exe
2025-06-24 21:29:34,483 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11204,11088,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,500 [analyzer] INFO: Added new file to list with pid 3696 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19892.exe
2025-06-24 21:29:34,515 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11352,11240,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,515 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11196,11228,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,515 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11080,11152,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,530 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11140,11168,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,546 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '1984,10272,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,562 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11144,11148,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,655 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11072,11176,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,655 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11220,11224,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,671 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11232,11104,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,875 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10624,11280,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,983 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11400,11508,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:34,983 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '2660,2796,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:35,000 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11492,11496,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:35,000 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11296,11308,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:35,000 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10616,10600,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:35,015 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10580,10568,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:35,421 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11536,11852,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:35,437 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11584,11868,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:35,437 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11860,11856,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:35,437 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11568,11560,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:35,592 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11576,11600,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:35,592 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11544,11864,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:35,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11592,11920,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:35,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11912,11924,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:35,842 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50804.exe
2025-06-24 21:29:35,842 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23069.exe
2025-06-24 21:29:36,092 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12220,12216,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:36,092 [analyzer] INFO: Added new file to list with pid 3304 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14316.exe
2025-06-24 21:29:36,092 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '3008,1744,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:36,092 [analyzer] INFO: Added new file to list with pid 3112 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60810.exe
2025-06-24 21:29:36,328 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12232,11992,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:36,358 [analyzer] INFO: Added new file to list with pid 808 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29617.exe
2025-06-24 21:29:36,390 [analyzer] INFO: Added new file to list with pid 4468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49516.exe
2025-06-24 21:29:36,530 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11096,11032,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 713, in _communicate
stderr_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:36,703 [analyzer] INFO: Added new file to list with pid 3272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48541.exe
2025-06-24 21:29:36,703 [analyzer] INFO: Added new file to list with pid 3248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30340.exe
2025-06-24 21:29:36,733 [analyzer] INFO: Added new file to list with pid 3584 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6540.exe
2025-06-24 21:29:36,750 [analyzer] INFO: Added new file to list with pid 4272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9248.exe
2025-06-24 21:29:36,765 [analyzer] INFO: Added new file to list with pid 2884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52649.exe
2025-06-24 21:29:36,796 [analyzer] INFO: Added new file to list with pid 3720 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24914.exe
2025-06-24 21:29:36,875 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10968,11012,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:36,875 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11000,10992,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:36,905 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11052,12244,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:36,905 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11076,11048,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:36,921 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11064,11184,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,000 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11156,3996,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,187 [analyzer] INFO: Injected into process with pid 11056 and name u'Unicorn-9092.exe'
2025-06-24 21:29:37,375 [analyzer] INFO: Added new file to list with pid 3228 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13027.exe
2025-06-24 21:29:37,500 [analyzer] INFO: Added new file to list with pid 3480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27268.exe
2025-06-24 21:29:37,515 [analyzer] INFO: Added new file to list with pid 2816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58162.exe
2025-06-24 21:29:37,515 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-65069.exe
2025-06-24 21:29:37,515 [analyzer] INFO: Added new file to list with pid 3196 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39404.exe
2025-06-24 21:29:37,530 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15869.exe
2025-06-24 21:29:37,530 [analyzer] INFO: Added new file to list with pid 3656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16161.exe
2025-06-24 21:29:37,592 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12028,11908,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 713, in _communicate
stderr_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11948,12208,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,608 [analyzer] INFO: Added new file to list with pid 3308 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6521.exe
2025-06-24 21:29:37,608 [analyzer] INFO: Added new file to list with pid 4088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7656.exe
2025-06-24 21:29:37,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12212,1568,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 713, in _communicate
stderr_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,625 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11944,11952,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 713, in _communicate
stderr_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,625 [analyzer] INFO: Added new file to list with pid 860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44322.exe
2025-06-24 21:29:37,625 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '1356,10268,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,687 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12012,12004,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,717 [analyzer] INFO: Added new file to list with pid 3524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19412.exe
2025-06-24 21:29:37,717 [analyzer] INFO: Added new file to list with pid 3088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14947.exe
2025-06-24 21:29:37,733 [analyzer] INFO: Added new file to list with pid 1748 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61322.exe
2025-06-24 21:29:37,750 [analyzer] INFO: Added new file to list with pid 3868 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56856.exe
2025-06-24 21:29:37,750 [analyzer] INFO: Added new file to list with pid 3636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1937.exe
2025-06-24 21:29:37,780 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11432,11828,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,780 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11836,11832,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,796 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11504,11556,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,842 [analyzer] INFO: Injected into process with pid 10520 and name u'Unicorn-60810.exe'
2025-06-24 21:29:37,875 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11800,11472,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,875 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11848,11616,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,890 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12260,12272,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,890 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11996,11928,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,890 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11416,12228,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:37,921 [analyzer] INFO: Injected into process with pid 11024 and name u'Unicorn-29617.exe'
2025-06-24 21:29:38,030 [analyzer] INFO: Added new file to list with pid 3688 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11698.exe
2025-06-24 21:29:38,108 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11748,10808,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 713, in _communicate
stderr_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:38,203 [analyzer] INFO: Added new file to list with pid 3024 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21149.exe
2025-06-24 21:29:38,203 [analyzer] INFO: Added new file to list with pid 4064 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52819.exe
2025-06-24 21:29:38,312 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11488,10944,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:38,405 [analyzer] INFO: Injected into process with pid 11696 and name u'Unicorn-13027.exe'
2025-06-24 21:29:39,280 [analyzer] INFO: Injected into process with pid 10560 and name u'Unicorn-21149.exe'
2025-06-24 21:29:40,000 [analyzer] INFO: Added new file to list with pid 3720 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58597.exe
2025-06-24 21:29:40,780 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26905.exe
2025-06-24 21:29:41,046 [analyzer] INFO: Added new file to list with pid 3636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62837.exe
2025-06-24 21:29:41,078 [analyzer] INFO: Injected into process with pid 10584 and name u'Unicorn-58597.exe'
2025-06-24 21:29:44,092 [analyzer] INFO: Injected into process with pid 10936 and name u'Unicorn-26905.exe'
2025-06-24 21:29:44,515 [analyzer] INFO: Injected into process with pid 12252 and name u'Unicorn-62837.exe'
2025-06-24 21:29:51,358 [analyzer] INFO: Added new file to list with pid 1384 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9372.exe
2025-06-24 21:29:51,390 [analyzer] INFO: Added new file to list with pid 3740 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52099.exe
2025-06-24 21:29:51,483 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22061.exe
2025-06-24 21:29:51,515 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3860.exe
2025-06-24 21:29:51,530 [analyzer] INFO: Added new file to list with pid 3696 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18.exe
2025-06-24 21:29:51,546 [analyzer] INFO: Added new file to list with pid 1940 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12353.exe
2025-06-24 21:29:51,562 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42889.exe
2025-06-24 21:29:51,562 [analyzer] INFO: Added new file to list with pid 3352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44024.exe
2025-06-24 21:29:51,592 [analyzer] INFO: Added new file to list with pid 3472 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38689.exe
2025-06-24 21:29:51,592 [analyzer] INFO: Added new file to list with pid 4280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-65025.exe
2025-06-24 21:29:51,608 [analyzer] INFO: Added new file to list with pid 2368 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15154.exe
2025-06-24 21:29:51,640 [analyzer] INFO: Added new file to list with pid 2444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62490.exe
2025-06-24 21:29:51,655 [analyzer] INFO: Added new file to list with pid 3540 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62490.exe
2025-06-24 21:29:51,655 [analyzer] INFO: Added new file to list with pid 3540 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48489.exe
2025-06-24 21:29:51,703 [analyzer] INFO: Added new file to list with pid 3304 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10025.exe
2025-06-24 21:29:51,750 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12372,12376,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:51,750 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12340,12344,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:51,750 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12300,12304,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 713, in _communicate
stderr_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:51,842 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12348,12352,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,296 [analyzer] INFO: Added new file to list with pid 4468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10457.exe
2025-06-24 21:29:52,312 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11260,3032,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,358 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12428,12432,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,358 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12332,12336,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,342 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12388,12392,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,375 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12380,12384,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,375 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12316,12320,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,375 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12412,12416,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,375 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12420,12424,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,375 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12468,12472,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,375 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12404,12408,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,375 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12364,12368,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,375 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12308,12312,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,546 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12356,12360,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,546 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12396,12400,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,546 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12324,12328,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,578 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12444,12448,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,578 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12436,12440,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,592 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12460,12464,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12452,12456,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,625 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12476,12480,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,687 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12484,12488,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:52,750 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12744,12748,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:53,467 [analyzer] INFO: Added new file to list with pid 3248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5345.exe
2025-06-24 21:29:53,515 [analyzer] INFO: Added new file to list with pid 4272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16868.exe
2025-06-24 21:29:53,562 [analyzer] INFO: Added new file to list with pid 3272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7049.exe
2025-06-24 21:29:53,717 [analyzer] INFO: Added new file to list with pid 2884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-65021.exe
2025-06-24 21:29:53,796 [analyzer] INFO: Added new file to list with pid 3584 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46436.exe
2025-06-24 21:29:53,812 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12832,12836,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:53,812 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12840,12844,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:53,842 [analyzer] INFO: Added new file to list with pid 3916 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49509.exe
2025-06-24 21:29:53,875 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12872,12876,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 713, in _communicate
stderr_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:53,905 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12896,12900,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:53,983 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12928,12932,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:54,750 [analyzer] INFO: Injected into process with pid 11712 and name u'Unicorn-9372.exe'
2025-06-24 21:29:54,812 [analyzer] INFO: Injected into process with pid 3016 and name u'Unicorn-52099.exe'
2025-06-24 21:29:54,842 [analyzer] INFO: Added new file to list with pid 3112 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17954.exe
2025-06-24 21:29:54,858 [analyzer] INFO: Added new file to list with pid 3152 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-65290.exe
2025-06-24 21:29:54,858 [analyzer] INFO: Added new file to list with pid 2816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-65290.exe
2025-06-24 21:29:54,875 [analyzer] INFO: Added new file to list with pid 3088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8625.exe
2025-06-24 21:29:54,875 [analyzer] INFO: Added new file to list with pid 2400 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12825.exe
2025-06-24 21:29:54,905 [analyzer] INFO: Added new file to list with pid 860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23188.exe
2025-06-24 21:29:54,905 [analyzer] INFO: Added new file to list with pid 808 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3588.exe
2025-06-24 21:29:54,937 [analyzer] INFO: Added new file to list with pid 3308 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-41389.exe
2025-06-24 21:29:54,953 [analyzer] INFO: Added new file to list with pid 4088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64925.exe
2025-06-24 21:29:54,967 [analyzer] INFO: Added new file to list with pid 1748 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42590.exe
2025-06-24 21:29:54,967 [analyzer] INFO: Added new file to list with pid 3868 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15724.exe
2025-06-24 21:29:54,983 [analyzer] INFO: Added new file to list with pid 3856 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39525.exe
2025-06-24 21:29:55,000 [analyzer] INFO: Added new file to list with pid 3480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57725.exe
2025-06-24 21:29:55,030 [analyzer] INFO: Added new file to list with pid 3656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19924.exe
2025-06-24 21:29:55,062 [analyzer] INFO: Added new file to list with pid 3688 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54115.exe
2025-06-24 21:29:55,062 [analyzer] INFO: Added new file to list with pid 3796 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29353.exe
2025-06-24 21:29:55,078 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17570.exe
2025-06-24 21:29:55,108 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '13028,13032,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 713, in _communicate
stderr_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:55,108 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '13036,13040,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 713, in _communicate
stderr_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:55,108 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '13020,13024,0').
Traceback (most recent call last):
File "C:/tmp4hzt0l/analyzer.py", line 412, in dispatch
response = fn(arguments)
File "C:/tmp4hzt0l/analyzer.py", line 314, in _handle_process2
return self._inject_process(int(pid), int(tid), int(mode))
File "C:/tmp4hzt0l/analyzer.py", line 282, in _inject_process
proc.inject(dll, apc=True, mode="%s" % mode)
File "C:\tmp4hzt0l\lib\api\process.py", line 440, in inject
is32bit = self.is32bit(pid=self.pid)
File "C:\tmp4hzt0l\lib\api\process.py", line 272, in is32bit
bitsize = int(subprocess_checkoutput(args))
File "C:\tmp4hzt0l\lib\api\process.py", line 105, in subprocess_checkoutput
args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
File "C:\Python27\lib\subprocess.py", line 213, in check_output
output, unused_err = process.communicate()
File "C:\Python27\lib\subprocess.py", line 479, in communicate
return self._communicate(input)
File "C:\Python27\lib\subprocess.py", line 707, in _communicate
stdout_thread.start()
File "C:\Python27\lib\threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:29:55,155 [analyzer] INFO: Added new file to list with pid 3472 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15129.exe
2025-06-24 21:29:55,171 [analyzer] INFO: Added new file to list with pid 1884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58357.exe
2025-06-24 21:29:55,171 [analyzer] INFO: Added new file to list with pid 2444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8220.exe
2025-06-24 21:29:55,233 [analyzer] INFO: Added new file to list with pid 2976 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10636.exe
2025-06-24 21:29:55,500 [analyzer] INFO: Added new file to list with pid 4516 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29283.exe
2025-06-24 21:29:55,500 [analyzer] INFO: Injected into process with pid 12824 and name u'Unicorn-5345.exe'
2025-06-24 21:29:55,640 [analyzer] INFO: Added new file to list with pid 4064 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28993.exe
2025-06-24 21:29:56,108 [analyzer] INFO: Added new file to list with pid 3720 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31677.exe
2025-06-24 21:29:56,108 [analyzer] INFO: Added new file to list with pid 3228 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58012.exe
2025-06-24 21:29:56,108 [analyzer] INFO: Added new file to list with pid 3024 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56612.exe
2025-06-24 21:29:56,296 [analyzer] INFO: Injected into process with pid 13004 and name u'Unicorn-17954.exe'
2025-06-24 21:29:56,296 [analyzer] INFO: Injected into process with pid 13012 and name u'Unicorn-65290.exe'
2025-06-24 21:29:56,483 [analyzer] INFO: Added new file to list with pid 4532 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35827.exe
2025-06-24 21:29:58,328 [analyzer] INFO: Added new file to list with pid 3152 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9004.exe
2025-06-24 21:29:58,437 [analyzer] INFO: Added new file to list with pid 4016 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-945.exe
2025-06-24 21:29:58,437 [analyzer] INFO: Added new file to list with pid 3636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3745.exe
2025-06-24 21:30:16,717 [analyzer] INFO: Added new file to list with pid 3916 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28495.exe
2025-06-24 21:30:16,780 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13094.exe
2025-06-24 21:30:16,796 [analyzer] INFO: Added new file to list with pid 3740 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60165.exe
2025-06-24 21:30:16,812 [analyzer] INFO: Added new file to list with pid 3952 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13087.exe
2025-06-24 21:30:16,812 [analyzer] INFO: Added new file to list with pid 4424 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22887.exe
2025-06-24 21:30:16,858 [analyzer] INFO: Added new file to list with pid 3452 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20743.exe
2025-06-24 21:30:16,858 [analyzer] INFO: Added new file to list with pid 4280 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50791.exe
2025-06-24 21:30:16,858 [analyzer] INFO: Added new file to list with pid 3112 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20743.exe
2025-06-24 21:30:16,858 [analyzer] INFO: Added new file to list with pid 4004 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2278.exe
2025-06-24 21:30:16,858 [analyzer] INFO: Added new file to list with pid 3292 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6743.exe
2025-06-24 21:30:16,858 [analyzer] INFO: Added new file to list with pid 3540 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23808.exe
2025-06-24 21:30:16,875 [analyzer] INFO: Added new file to list with pid 4072 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62480.exe
2025-06-24 21:30:16,875 [analyzer] INFO: Added new file to list with pid 3828 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62480.exe
2025-06-24 21:30:16,890 [analyzer] INFO: Added new file to list with pid 4468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6366.exe
2025-06-24 21:30:16,905 [analyzer] INFO: Added new file to list with pid 3412 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22032.exe
2025-06-24 21:30:16,953 [analyzer] INFO: Added new file to list with pid 3248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44167.exe
2025-06-24 21:30:16,953 [analyzer] INFO: Added new file to list with pid 3592 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30415.exe
2025-06-24 21:30:16,953 [analyzer] INFO: Added new file to list with pid 2816 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19232.exe
2025-06-24 21:30:16,953 [analyzer] INFO: Added new file to list with pid 580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44167.exe
2025-06-24 21:30:16,953 [analyzer] INFO: Added new file to list with pid 580 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3831.exe
2025-06-24 21:30:16,953 [analyzer] INFO: Added new file to list with pid 3524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50902.exe
2025-06-24 21:30:16,953 [analyzer] INFO: Added new file to list with pid 3696 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50902.exe
2025-06-24 21:30:16,953 [analyzer] INFO: Added new file to list with pid 4044 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45567.exe
2025-06-24 21:30:16,953 [analyzer] INFO: Added new file to list with pid 3352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45567.exe
2025-06-24 21:30:16,953 [analyzer] INFO: Added new file to list with pid 3496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49767.exe
2025-06-24 21:30:16,953 [analyzer] INFO: Added new file to list with pid 2800 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33215.exe
2025-06-24 21:30:16,967 [analyzer] INFO: Added new file to list with pid 4032 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12703.exe
2025-06-24 21:30:17,078 [analyzer] INFO: Added new file to list with pid 3584 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17071.exe
2025-06-24 21:30:17,078 [analyzer] INFO: Added new file to list with pid 2884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64407.exe
2025-06-24 21:30:17,078 [analyzer] INFO: Added new file to list with pid 2568 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54704.exe
2025-06-24 21:30:17,078 [analyzer] INFO: Added new file to list with pid 3088 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44806.exe
2025-06-24 21:30:17,092 [analyzer] INFO: Added new file to list with pid 1384 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52840.exe
2025-06-24 21:30:17,108 [analyzer] INFO: Added new file to list with pid 3304 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38560.exe
2025-06-24 21:30:17,108 [analyzer] INFO: Added new file to list with pid 3316 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46943.exe
2025-06-24 21:30:17,155 [analyzer] INFO: Added new file to list with pid 3272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30031.exe
2025-06-24 21:30:17,625 [analyzer] INFO: Added new file to list with pid 4272 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27265.exe
2025-06-24 21:30:20,092 [analyzer] INFO: Added new file to list with pid 3248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56783.exe
2025-06-24 21:30:20,092 [analyzer] INFO: Added new file to list with pid 3452 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38848.exe
2025-06-24 21:30:20,108 [analyzer] INFO: Added new file to list with pid 4044 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47894.exe
2025-06-24 21:30:20,108 [analyzer] INFO: Added new file to list with pid 3412 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23447.exe
2025-06-24 21:31:01,937 [analyzer] INFO: Analysis timeout hit, terminating analysis.
2025-06-24 21:31:14,967 [analyzer] INFO: Terminating remaining processes before shutdown.
2025-06-24 21:31:14,967 [lib.api.process] INFO: Successfully terminated process with pid 1940.
2025-06-24 21:31:14,967 [lib.api.process] INFO: Successfully terminated process with pid 3024.
2025-06-24 21:31:14,967 [lib.api.process] INFO: Successfully terminated process with pid 2816.
2025-06-24 21:31:14,967 [lib.api.process] INFO: Successfully terminated process with pid 2444.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 1884.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 860.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 2368.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 2568.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 2800.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 808.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 2480.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 2976.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 1384.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 2520.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 2884.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 580.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 2400.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 3112.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 3152.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 3196.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 3248.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 3272.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 3308.
2025-06-24 21:31:14,983 [lib.api.process] INFO: Successfully terminated process with pid 3316.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3412.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3452.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3480.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3496.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3592.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3636.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3656.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3720.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3796.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3828.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3856.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3916.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3952.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 4004.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 4016.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 4088.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3184.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3304.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3352.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3472.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3584.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3688.
2025-06-24 21:31:15,000 [lib.api.process] INFO: Successfully terminated process with pid 3696.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 3868.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4032.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4072.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4064.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 3088.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 3228.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4044.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 3540.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 3740.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 1748.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 3524.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 3292.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4280.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4272.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4292.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4424.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4468.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4516.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4532.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4616.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4648.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4696.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4720.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4748.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4764.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4808.
2025-06-24 21:31:15,015 [lib.api.process] INFO: Successfully terminated process with pid 4852.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4904.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 5004.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4988.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4996.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 5112.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4188.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 2464.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4320.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4380.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4384.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4420.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 2060.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4712.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4744.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4864.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4880.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 2168.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4512.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 2120.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4636.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 2688.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4788.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4540.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 2656.
2025-06-24 21:31:15,030 [lib.api.process] INFO: Successfully terminated process with pid 4780.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 4936.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5124.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5248.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5236.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5228.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5256.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5264.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5296.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5372.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5496.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5604.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5680.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5704.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5712.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5792.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5816.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5828.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5836.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5844.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 6032.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5156.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5208.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5212.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 2028.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5220.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5244.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5284.
2025-06-24 21:31:15,046 [lib.api.process] INFO: Successfully terminated process with pid 5356.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 5344.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 5360.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 5384.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 5468.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 5400.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 5320.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 5492.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 5276.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 5672.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 5892.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 2772.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 592.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 6516.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 6604.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 6616.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 6632.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 6624.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 6640.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 6736.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 6664.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 6680.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 6672.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 6648.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 6756.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 6688.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 6860.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 7056.
2025-06-24 21:31:15,062 [lib.api.process] INFO: Successfully terminated process with pid 7144.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 5536.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 7152.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 7160.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 5856.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 5976.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 5916.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 5908.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 5932.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 5924.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 6284.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 6428.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 6280.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 6348.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 2516.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 6432.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 1824.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 6800.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 2756.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 5956.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 5692.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 5880.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 5964.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 5980.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 6360.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 6372.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 6228.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 6080.
2025-06-24 21:31:15,078 [lib.api.process] INFO: Successfully terminated process with pid 6308.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 6468.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 2956.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 2692.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 6164.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 7032.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 7604.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 7656.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 7712.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 7704.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 7696.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 7768.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 7776.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 7864.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 7984.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 8008.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 8016.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 8056.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 8124.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 8132.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 8140.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 6340.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 6964.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 6480.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 956.
2025-06-24 21:31:15,092 [lib.api.process] INFO: Successfully terminated process with pid 7260.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 6100.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 2044.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7208.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7324.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7444.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7340.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7752.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7756.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7744.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7876.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7924.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7624.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7428.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7692.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 8108.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 8076.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7936.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7388.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7396.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 7900.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 8204.
2025-06-24 21:31:15,108 [lib.api.process] INFO: Successfully terminated process with pid 8280.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8296.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8328.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8312.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8320.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8336.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8384.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8392.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8424.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8416.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8408.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8484.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8456.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8516.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8552.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8604.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8616.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8660.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8676.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8272.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8268.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8276.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8372.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8364.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8292.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8596.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8880.
2025-06-24 21:31:15,125 [lib.api.process] INFO: Successfully terminated process with pid 8816.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8832.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8892.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8912.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8940.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8936.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8888.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8984.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 9044.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8988.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8996.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 9000.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 9156.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 9012.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 9112.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8756.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 9148.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8444.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8432.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8448.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 7796.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8512.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8592.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8540.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 8692.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 9520.
2025-06-24 21:31:15,140 [lib.api.process] INFO: Successfully terminated process with pid 9604.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 9612.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 9620.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 9912.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 9976.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 9992.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 10008.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 10040.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 10016.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 10032.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 10024.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 10044.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 10064.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 10080.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 10056.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 10072.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 10096.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 10088.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 8876.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 9280.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 8652.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 9240.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 8820.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 9288.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 9300.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 9948.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 10364.
2025-06-24 21:31:15,155 [lib.api.process] INFO: Successfully terminated process with pid 10348.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10372.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10356.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10448.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10512.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10504.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10540.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10572.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10588.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10644.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10660.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10692.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10668.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10708.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10684.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10652.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10700.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10756.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10676.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10716.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10836.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10820.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10828.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10844.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10740.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10732.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10748.
2025-06-24 21:31:15,171 [lib.api.process] INFO: Successfully terminated process with pid 10780.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 10772.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 10764.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 10724.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 10792.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 10788.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 10812.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 11120.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 2180.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 9504.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 10308.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 4228.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 2732.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 10392.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 10416.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 3004.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 10460.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 10628.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 10484.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 10636.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 10640.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 11336.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 11328.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 11640.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 11632.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 11648.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 11656.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 11668.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 11888.
2025-06-24 21:31:15,187 [lib.api.process] INFO: Successfully terminated process with pid 12236.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 12276.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11372.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11376.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 10912.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 10920.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 10872.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11056.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11160.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11092.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11084.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11216.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11188.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11204.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11080.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11196.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11352.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11140.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 1984.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11144.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11220.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11232.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11072.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 10624.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11492.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 2660.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11400.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11296.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 10616.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 10580.
2025-06-24 21:31:15,203 [lib.api.process] INFO: Successfully terminated process with pid 11536.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11584.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11568.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11860.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11544.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11576.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11912.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11592.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 12220.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 3008.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 10520.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 12232.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11024.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11096.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 10968.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11000.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11052.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11076.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11064.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11156.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11696.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 12028.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 12212.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11944.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11948.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 1356.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 12012.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11432.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11504.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11836.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11800.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 11848.
2025-06-24 21:31:15,217 [lib.api.process] INFO: Successfully terminated process with pid 12260.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 11996.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 11416.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 11748.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 10560.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 11488.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 10584.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 10936.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12252.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 11712.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 3016.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12300.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12372.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12340.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12348.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12380.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12388.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 11260.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12364.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12308.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12324.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12316.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12396.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12356.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12404.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12332.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12420.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12412.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12468.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12428.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12444.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12436.
2025-06-24 21:31:15,233 [lib.api.process] INFO: Successfully terminated process with pid 12460.
2025-06-24 21:31:15,250 [lib.api.process] INFO: Successfully terminated process with pid 12452.
2025-06-24 21:31:15,250 [lib.api.process] INFO: Successfully terminated process with pid 12476.
2025-06-24 21:31:15,250 [lib.api.process] INFO: Successfully terminated process with pid 12484.
2025-06-24 21:31:15,250 [lib.api.process] INFO: Successfully terminated process with pid 12744.
2025-06-24 21:31:15,250 [lib.api.process] INFO: Successfully terminated process with pid 12824.
2025-06-24 21:31:15,250 [lib.api.process] INFO: Successfully terminated process with pid 12832.
2025-06-24 21:31:15,250 [lib.api.process] INFO: Successfully terminated process with pid 12840.
2025-06-24 21:31:15,250 [lib.api.process] INFO: Successfully terminated process with pid 12872.
2025-06-24 21:31:15,250 [lib.api.process] INFO: Successfully terminated process with pid 12896.
2025-06-24 21:31:15,250 [lib.api.process] INFO: Successfully terminated process with pid 12928.
2025-06-24 21:31:15,250 [lib.api.process] INFO: Successfully terminated process with pid 13004.
2025-06-24 21:31:15,250 [lib.api.process] INFO: Successfully terminated process with pid 13012.
2025-06-24 21:31:15,250 [lib.api.process] INFO: Successfully terminated process with pid 13028.
2025-06-24 21:31:15,250 [lib.api.process] INFO: Successfully terminated process with pid 13020.
2025-06-24 21:31:15,250 [lib.api.process] INFO: Successfully terminated process with pid 13036.
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61449.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61190.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6021.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6743.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53218.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3679.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51165.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27265.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51944.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31595.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13387.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23069.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26905.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9793.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-41344.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14561.exe
2025-06-24 21:31:15,500 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-46943.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22562.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50791.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30415.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22887.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40774.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44167.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10636.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48082.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52011.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48633.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62837.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43841.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52143.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52264.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24851.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40067.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58485.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50118.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56856.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28993.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60377.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-65290.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30323.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61686.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63597.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44322.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47288.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44806.exe
2025-06-24 21:31:15,515 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29617.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56888.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2912.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3505.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11416.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17073.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27115.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14156.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26351.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5319.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8995.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3320.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62877.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54452.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40852.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27747.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20545.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44259.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17828.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50824.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60165.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47494.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4739.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44564.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29353.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7377.exe
2025-06-24 21:31:15,530 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9525.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14947.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-41508.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54115.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35263.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31979.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6741.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50804.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24947.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31677.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-12650.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-588.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38689.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51833.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62480.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54868.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2888.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15881.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63114.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1937.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23188.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64649.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61234.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4755.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-46436.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10448.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53225.exe
2025-06-24 21:31:15,546 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19892.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26048.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28511.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1275.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63522.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13299.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24776.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35928.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-41355.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38848.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-59360.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43550.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63193.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10952.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5116.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-42081.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44308.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5345.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6081.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2163.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8412.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55990.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32097.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27698.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17366.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23749.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23503.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17569.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31453.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15599.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52799.exe
2025-06-24 21:31:15,562 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19824.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-59619.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-65480.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-945.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32416.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31973.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18393.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30857.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30031.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7656.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28974.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54284.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16161.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28131.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-37432.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33215.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38560.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32760.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35217.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10897.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52099.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19924.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57460.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20876.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48123.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11698.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30783.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15320.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47579.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53531.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58597.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22061.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64407.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58357.exe
2025-06-24 21:31:15,578 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35160.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47433.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24914.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9799.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48541.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-37278.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23279.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10011.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26592.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47919.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21149.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49163.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55719.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19562.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16790.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57062.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-59924.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33950.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27947.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57528.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49490.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18186.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64726.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10046.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9248.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50344.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1014.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6862.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34550.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-124.exe
2025-06-24 21:31:15,592 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26254.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15484.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17570.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-59787.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52840.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56783.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15154.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27251.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24280.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-41389.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39525.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-45094.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-12120.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13094.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3831.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7816.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7555.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40807.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17093.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64384.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-42038.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56612.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29805.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39986.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55714.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6521.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30533.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2993.exe
2025-06-24 21:31:15,608 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11201.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3860.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28632.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1857.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7950.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-87.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57824.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57725.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47963.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56902.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5875.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5231.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38926.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14316.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61913.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-37239.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14655.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32947.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-42590.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49767.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6540.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19412.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28028.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64925.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8220.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10457.exe
2025-06-24 21:31:15,625 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49442.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-65025.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35465.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39376.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58050.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64064.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15083.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32986.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8054.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27268.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28495.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51553.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50173.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7519.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53026.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62490.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17660.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26432.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19590.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34248.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-59264.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18885.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-12788.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36110.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49516.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31627.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7751.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52649.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11553.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2185.exe
2025-06-24 21:31:15,640 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40980.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30572.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22032.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39279.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51890.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13087.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8625.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39404.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57184.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39148.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21304.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58162.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63010.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5285.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17071.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-65021.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39759.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2278.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62927.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40825.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30881.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27497.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5524.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-65069.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31448.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36855.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9004.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7049.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53757.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58519.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15613.exe
2025-06-24 21:31:15,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43501.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60093.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19232.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14913.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62426.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50902.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-12353.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7414.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15724.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21516.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40836.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20743.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52544.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18777.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30536.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8005.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49509.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19982.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57410.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15869.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10968.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55897.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40816.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43326.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14489.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13420.exe
2025-06-24 21:31:15,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47894.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3588.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54704.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53495.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23404.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50589.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38924.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33880.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7631.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48489.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3534.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14012.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63416.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44928.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14687.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25721.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21675.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8796.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15129.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5113.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56541.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27736.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4568.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23808.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9578.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29295.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35055.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9712.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-12548.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23253.exe
2025-06-24 21:31:15,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60260.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17429.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15172.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-59357.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31982.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3814.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9092.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16063.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49645.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29283.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56229.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-46694.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24289.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16868.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34438.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56156.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63177.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55443.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7916.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60810.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30712.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23447.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29765.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26233.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40114.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-37225.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3745.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-41082.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52944.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10455.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64238.exe
2025-06-24 21:31:15,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-12648.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56179.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57997.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56561.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13923.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54697.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62264.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28597.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13027.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39183.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54877.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7007.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14581.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6774.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35827.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8938.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33147.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50695.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61322.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21258.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9316.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-46904.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24256.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30340.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23158.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21211.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48724.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6504.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48646.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7586.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40924.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7127.exe
2025-06-24 21:31:15,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58012.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9278.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13721.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7785.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54916.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20568.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31580.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4604.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10025.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39913.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-45567.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52895.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64253.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3879.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61400.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56249.exe
2025-06-24 21:31:15,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64085.exe
2025-06-24 21:31:15,733 [analyzer] INFO: Analysis completed.
