File 6f2a7b7e88319229_unicorn-19926.exe

Size 468.1KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 b29a8948ec458794cb5d2d76c982f059
SHA1 601e95a75420cc52c4b5ef2053d40a7756c1a08b
SHA256 6f2a7b7e88319229067ad0107d29e344722273555cc09dcea9f0dfc31aa67628
SHA512
785568dc5b37c420e74f1da6dd6d2c9390cec1a92fa1a7f2fd5707118b338c6de5798a3a7c0f988a688ebad404cd888b063c7b0c4f79400641c9fb4d68a5d8f5
CRC32 0DABF015
ssdeep None
Yara
  • SEH__vba - (no description)

Score

This file is very suspicious, with a score of 10 out of 10!

Please notice: The scoring system is currently still in development and should be considered an alpha feature.


Autosubmit

Parent_Task_ID:6585883

Feedback

Expecting different results? Send us this analysis and we will inspect it. Click here

Information on Execution

Analysis
Category Started Completed Duration Routing Logs
FILE July 2, 2025, 12:20 p.m. July 2, 2025, 12:29 p.m. 521 seconds internet Show Analyzer Log
Show Cuckoo Log

Analyzer Log

2025-06-24 21:38:12,030 [analyzer] DEBUG: Starting analyzer from: C:\tmp2pjrvv
2025-06-24 21:38:12,030 [analyzer] DEBUG: Pipe server name: \??\PIPE\dKJBAVwngLnBoVpSvGsxhU
2025-06-24 21:38:12,030 [analyzer] DEBUG: Log pipe server name: \??\PIPE\PJICirNPFePYZSYFNhIb
2025-06-24 21:38:12,030 [analyzer] DEBUG: No analysis package specified, trying to detect it automagically.
2025-06-24 21:38:12,030 [analyzer] INFO: Automatically selected analysis package "exe"
2025-06-24 21:38:12,312 [analyzer] DEBUG: Started auxiliary module Curtain
2025-06-24 21:38:12,312 [analyzer] DEBUG: Started auxiliary module DbgView
2025-06-24 21:38:12,687 [analyzer] DEBUG: Started auxiliary module Disguise
2025-06-24 21:38:12,905 [analyzer] DEBUG: Loaded monitor into process with pid 504
2025-06-24 21:38:12,953 [analyzer] DEBUG: Started auxiliary module DumpTLSMasterSecrets
2025-06-24 21:38:12,953 [analyzer] DEBUG: Started auxiliary module Human
2025-06-24 21:38:12,953 [analyzer] DEBUG: Started auxiliary module InstallCertificate
2025-06-24 21:38:12,953 [analyzer] DEBUG: Started auxiliary module Reboot
2025-06-24 21:38:13,015 [analyzer] DEBUG: Started auxiliary module RecentFiles
2025-06-24 21:38:13,015 [analyzer] DEBUG: Started auxiliary module Screenshots
2025-06-24 21:38:13,030 [analyzer] DEBUG: Started auxiliary module Sysmon
2025-06-24 21:38:13,030 [analyzer] DEBUG: Started auxiliary module LoadZer0m0n
2025-06-24 21:38:13,171 [lib.api.process] INFO: Successfully executed process from path u'C:\\Users\\ADMINI~1\\AppData\\Local\\Temp\\6f2a7b7e88319229_unicorn-19926.exe' with arguments '' and pid 1784
2025-06-24 21:38:13,358 [analyzer] DEBUG: Loaded monitor into process with pid 1784
2025-06-24 21:38:16,421 [analyzer] INFO: Added new file to list with pid 1784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38106.exe
2025-06-24 21:38:16,515 [analyzer] INFO: Injected into process with pid 172 and name u'Unicorn-38106.exe'
2025-06-24 21:38:16,687 [analyzer] DEBUG: Loaded monitor into process with pid 172
2025-06-24 21:38:19,750 [analyzer] INFO: Added new file to list with pid 172 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49372.exe
2025-06-24 21:38:19,812 [analyzer] INFO: Added new file to list with pid 1784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-37674.exe
2025-06-24 21:38:19,812 [analyzer] INFO: Injected into process with pid 1160 and name u'Unicorn-49372.exe'
2025-06-24 21:38:19,890 [analyzer] INFO: Injected into process with pid 328 and name u'Unicorn-37674.exe'
2025-06-24 21:38:19,983 [analyzer] DEBUG: Loaded monitor into process with pid 1160
2025-06-24 21:38:20,030 [analyzer] DEBUG: Loaded monitor into process with pid 328
2025-06-24 21:38:23,062 [analyzer] INFO: Added new file to list with pid 1160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26404.exe
2025-06-24 21:38:23,125 [analyzer] INFO: Added new file to list with pid 172 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14706.exe
2025-06-24 21:38:23,140 [analyzer] INFO: Added new file to list with pid 328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3845.exe
2025-06-24 21:38:23,171 [analyzer] INFO: Injected into process with pid 1356 and name u'Unicorn-26404.exe'
2025-06-24 21:38:23,187 [analyzer] INFO: Added new file to list with pid 1784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36610.exe
2025-06-24 21:38:23,217 [analyzer] INFO: Injected into process with pid 1972 and name u'Unicorn-3845.exe'
2025-06-24 21:38:23,217 [analyzer] INFO: Injected into process with pid 2804 and name u'Unicorn-14706.exe'
2025-06-24 21:38:23,265 [analyzer] INFO: Injected into process with pid 1932 and name u'Unicorn-36610.exe'
2025-06-24 21:38:23,342 [analyzer] DEBUG: Loaded monitor into process with pid 1356
2025-06-24 21:38:23,390 [analyzer] DEBUG: Loaded monitor into process with pid 2804
2025-06-24 21:38:23,390 [analyzer] DEBUG: Loaded monitor into process with pid 1972
2025-06-24 21:38:23,437 [analyzer] DEBUG: Loaded monitor into process with pid 1932
2025-06-24 21:38:26,405 [analyzer] INFO: Added new file to list with pid 1356 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60384.exe
2025-06-24 21:38:26,515 [analyzer] INFO: Added new file to list with pid 1160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21852.exe
2025-06-24 21:38:26,546 [analyzer] INFO: Injected into process with pid 1944 and name u'Unicorn-60384.exe'
2025-06-24 21:38:26,578 [analyzer] INFO: Injected into process with pid 2496 and name u'Unicorn-21852.exe'
2025-06-24 21:38:26,592 [analyzer] INFO: Added new file to list with pid 2804 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19160.exe
2025-06-24 21:38:26,655 [analyzer] INFO: Added new file to list with pid 1972 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27328.exe
2025-06-24 21:38:26,655 [analyzer] INFO: Injected into process with pid 1740 and name u'Unicorn-19160.exe'
2025-06-24 21:38:26,717 [analyzer] DEBUG: Loaded monitor into process with pid 1944
2025-06-24 21:38:26,717 [analyzer] INFO: Injected into process with pid 2220 and name u'Unicorn-27328.exe'
2025-06-24 21:38:26,733 [analyzer] DEBUG: Loaded monitor into process with pid 2496
2025-06-24 21:38:26,733 [analyzer] INFO: Added new file to list with pid 172 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64176.exe
2025-06-24 21:38:26,750 [analyzer] INFO: Added new file to list with pid 1932 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39772.exe
2025-06-24 21:38:26,842 [analyzer] DEBUG: Loaded monitor into process with pid 1740
2025-06-24 21:38:26,858 [analyzer] INFO: Added new file to list with pid 328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1432.exe
2025-06-24 21:38:26,875 [analyzer] INFO: Added new file to list with pid 1784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55843.exe
2025-06-24 21:38:26,890 [analyzer] DEBUG: Loaded monitor into process with pid 2220
2025-06-24 21:38:26,937 [analyzer] INFO: Injected into process with pid 2488 and name u'Unicorn-64176.exe'
2025-06-24 21:38:26,937 [analyzer] INFO: Injected into process with pid 2480 and name u'Unicorn-39772.exe'
2025-06-24 21:38:26,983 [analyzer] INFO: Injected into process with pid 3052 and name u'Unicorn-1432.exe'
2025-06-24 21:38:27,062 [analyzer] INFO: Injected into process with pid 2728 and name u'Unicorn-55843.exe'
2025-06-24 21:38:27,092 [analyzer] DEBUG: Loaded monitor into process with pid 2488
2025-06-24 21:38:27,125 [analyzer] DEBUG: Loaded monitor into process with pid 2480
2025-06-24 21:38:27,171 [analyzer] DEBUG: Loaded monitor into process with pid 3052
2025-06-24 21:38:27,265 [analyzer] DEBUG: Loaded monitor into process with pid 2728
2025-06-24 21:38:29,812 [analyzer] INFO: Added new file to list with pid 1944 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49092.exe
2025-06-24 21:38:29,890 [analyzer] INFO: Injected into process with pid 3144 and name u'Unicorn-49092.exe'
2025-06-24 21:38:29,937 [analyzer] INFO: Added new file to list with pid 1356 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45563.exe
2025-06-24 21:38:29,983 [analyzer] INFO: Added new file to list with pid 2496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38786.exe
2025-06-24 21:38:30,015 [analyzer] INFO: Injected into process with pid 3184 and name u'Unicorn-45563.exe'
2025-06-24 21:38:30,046 [analyzer] DEBUG: Loaded monitor into process with pid 3144
2025-06-24 21:38:30,046 [analyzer] INFO: Injected into process with pid 3220 and name u'Unicorn-38786.exe'
2025-06-24 21:38:30,171 [analyzer] DEBUG: Loaded monitor into process with pid 3184
2025-06-24 21:38:30,187 [analyzer] INFO: Added new file to list with pid 1160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57736.exe
2025-06-24 21:38:30,187 [analyzer] INFO: Added new file to list with pid 2220 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33140.exe
2025-06-24 21:38:30,233 [analyzer] DEBUG: Loaded monitor into process with pid 3220
2025-06-24 21:38:30,328 [analyzer] INFO: Injected into process with pid 3284 and name u'Unicorn-33140.exe'
2025-06-24 21:38:30,342 [analyzer] INFO: Injected into process with pid 3276 and name u'Unicorn-57736.exe'
2025-06-24 21:38:30,342 [analyzer] INFO: Added new file to list with pid 1972 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33886.exe
2025-06-24 21:38:30,483 [analyzer] INFO: Added new file to list with pid 1740 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39362.exe
2025-06-24 21:38:30,578 [analyzer] DEBUG: Loaded monitor into process with pid 3276
2025-06-24 21:38:30,578 [analyzer] INFO: Injected into process with pid 3352 and name u'Unicorn-33886.exe'
2025-06-24 21:38:30,608 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55506.exe
2025-06-24 21:38:30,655 [analyzer] DEBUG: Loaded monitor into process with pid 3284
2025-06-24 21:38:30,703 [analyzer] INFO: Added new file to list with pid 2804 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13082.exe
2025-06-24 21:38:30,703 [analyzer] INFO: Injected into process with pid 3388 and name u'Unicorn-39362.exe'
2025-06-24 21:38:30,828 [analyzer] DEBUG: Loaded monitor into process with pid 3352
2025-06-24 21:38:30,858 [analyzer] INFO: Added new file to list with pid 1932 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33694.exe
2025-06-24 21:38:30,858 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53560.exe
2025-06-24 21:38:30,875 [analyzer] INFO: Injected into process with pid 3436 and name u'Unicorn-55506.exe'
2025-06-24 21:38:30,905 [analyzer] DEBUG: Loaded monitor into process with pid 3388
2025-06-24 21:38:30,937 [analyzer] INFO: Injected into process with pid 3468 and name u'Unicorn-13082.exe'
2025-06-24 21:38:30,937 [analyzer] INFO: Added new file to list with pid 3052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-275.exe
2025-06-24 21:38:31,000 [analyzer] INFO: Injected into process with pid 3516 and name u'Unicorn-33694.exe'
2025-06-24 21:38:31,000 [analyzer] INFO: Injected into process with pid 3524 and name u'Unicorn-53560.exe'
2025-06-24 21:38:31,015 [analyzer] INFO: Added new file to list with pid 2728 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43830.exe
2025-06-24 21:38:31,078 [analyzer] INFO: Added new file to list with pid 172 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51733.exe
2025-06-24 21:38:31,092 [analyzer] DEBUG: Loaded monitor into process with pid 3436
2025-06-24 21:38:31,092 [analyzer] INFO: Injected into process with pid 3588 and name u'Unicorn-275.exe'
2025-06-24 21:38:31,125 [analyzer] DEBUG: Loaded monitor into process with pid 3468
2025-06-24 21:38:31,187 [analyzer] DEBUG: Loaded monitor into process with pid 3524
2025-06-24 21:38:31,187 [analyzer] INFO: Injected into process with pid 3636 and name u'Unicorn-43830.exe'
2025-06-24 21:38:31,203 [analyzer] DEBUG: Loaded monitor into process with pid 3516
2025-06-24 21:38:31,328 [analyzer] INFO: Added new file to list with pid 328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43922.exe
2025-06-24 21:38:31,342 [analyzer] DEBUG: Loaded monitor into process with pid 3588
2025-06-24 21:38:31,342 [analyzer] INFO: Injected into process with pid 3692 and name u'Unicorn-51733.exe'
2025-06-24 21:38:31,358 [analyzer] DEBUG: Loaded monitor into process with pid 3636
2025-06-24 21:38:31,358 [analyzer] INFO: Added new file to list with pid 1784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45206.exe
2025-06-24 21:38:31,483 [analyzer] INFO: Injected into process with pid 3784 and name u'Unicorn-45206.exe'
2025-06-24 21:38:31,483 [analyzer] INFO: Injected into process with pid 3756 and name u'Unicorn-43922.exe'
2025-06-24 21:38:31,546 [analyzer] DEBUG: Loaded monitor into process with pid 3692
2025-06-24 21:38:31,717 [analyzer] DEBUG: Loaded monitor into process with pid 3784
2025-06-24 21:38:31,733 [analyzer] DEBUG: Loaded monitor into process with pid 3756
2025-06-24 21:38:33,108 [analyzer] INFO: Added new file to list with pid 3144 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22040.exe
2025-06-24 21:38:33,375 [analyzer] INFO: Added new file to list with pid 1944 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4312.exe
2025-06-24 21:38:33,375 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24178.exe
2025-06-24 21:38:33,546 [analyzer] INFO: Injected into process with pid 3860 and name u'Unicorn-22040.exe'
2025-06-24 21:38:33,578 [analyzer] INFO: Added new file to list with pid 1356 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11633.exe
2025-06-24 21:38:33,717 [analyzer] DEBUG: Loaded monitor into process with pid 3860
2025-06-24 21:38:33,733 [analyzer] INFO: Added new file to list with pid 3220 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21848.exe
2025-06-24 21:38:33,733 [analyzer] INFO: Injected into process with pid 3900 and name u'Unicorn-24178.exe'
2025-06-24 21:38:33,750 [analyzer] INFO: Injected into process with pid 3892 and name u'Unicorn-4312.exe'
2025-06-24 21:38:33,905 [analyzer] DEBUG: Loaded monitor into process with pid 3892
2025-06-24 21:38:33,921 [analyzer] INFO: Added new file to list with pid 2496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43014.exe
2025-06-24 21:38:33,953 [analyzer] INFO: Injected into process with pid 3964 and name u'Unicorn-11633.exe'
2025-06-24 21:38:34,015 [analyzer] INFO: Injected into process with pid 4004 and name u'Unicorn-21848.exe'
2025-06-24 21:38:34,030 [analyzer] DEBUG: Loaded monitor into process with pid 3900
2025-06-24 21:38:34,140 [analyzer] DEBUG: Loaded monitor into process with pid 3964
2025-06-24 21:38:34,171 [analyzer] DEBUG: Loaded monitor into process with pid 4004
2025-06-24 21:38:34,171 [analyzer] INFO: Injected into process with pid 4052 and name u'Unicorn-43014.exe'
2025-06-24 21:38:34,171 [analyzer] INFO: Added new file to list with pid 3352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61318.exe
2025-06-24 21:38:34,342 [analyzer] INFO: Added new file to list with pid 1972 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49158.exe
2025-06-24 21:38:34,405 [analyzer] INFO: Injected into process with pid 1536 and name u'Unicorn-61318.exe'
2025-06-24 21:38:34,483 [analyzer] DEBUG: Loaded monitor into process with pid 4052
2025-06-24 21:38:34,671 [analyzer] INFO: Added new file to list with pid 3276 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61126.exe
2025-06-24 21:38:34,687 [analyzer] DEBUG: Loaded monitor into process with pid 1536
2025-06-24 21:38:34,687 [analyzer] INFO: Injected into process with pid 3140 and name u'Unicorn-49158.exe'
2025-06-24 21:38:34,750 [analyzer] INFO: Added new file to list with pid 1160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7576.exe
2025-06-24 21:38:34,875 [analyzer] DEBUG: Loaded monitor into process with pid 3140
2025-06-24 21:38:34,921 [analyzer] INFO: Injected into process with pid 3232 and name u'Unicorn-61126.exe'
2025-06-24 21:38:35,092 [analyzer] INFO: Injected into process with pid 3296 and name u'Unicorn-7576.exe'
2025-06-24 21:38:35,217 [analyzer] DEBUG: Loaded monitor into process with pid 3232
2025-06-24 21:38:35,265 [analyzer] DEBUG: Loaded monitor into process with pid 3296
2025-06-24 21:38:35,280 [analyzer] INFO: Added new file to list with pid 3388 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12693.exe
2025-06-24 21:38:35,640 [analyzer] INFO: Added new file to list with pid 1740 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6834.exe
2025-06-24 21:38:35,655 [analyzer] INFO: Injected into process with pid 3448 and name u'Unicorn-12693.exe'
2025-06-24 21:38:35,828 [analyzer] INFO: Added new file to list with pid 3588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16586.exe
2025-06-24 21:38:35,905 [analyzer] INFO: Injected into process with pid 3544 and name u'Unicorn-6834.exe'
2025-06-24 21:38:35,967 [analyzer] DEBUG: Loaded monitor into process with pid 3448
2025-06-24 21:38:36,062 [analyzer] INFO: Injected into process with pid 3632 and name u'Unicorn-16586.exe'
2025-06-24 21:38:36,078 [analyzer] INFO: Added new file to list with pid 3636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19108.exe
2025-06-24 21:38:36,078 [analyzer] INFO: Injected into process with pid 3628 and name u'Unicorn-16586.exe'
2025-06-24 21:38:36,171 [analyzer] INFO: Injected into process with pid 3796 and name u'Unicorn-19108.exe'
2025-06-24 21:38:36,187 [analyzer] DEBUG: Loaded monitor into process with pid 3544
2025-06-24 21:38:36,250 [analyzer] DEBUG: Loaded monitor into process with pid 3632
2025-06-24 21:38:36,250 [analyzer] DEBUG: Loaded monitor into process with pid 3628
2025-06-24 21:38:36,671 [analyzer] DEBUG: Loaded monitor into process with pid 3796
2025-06-24 21:38:36,671 [analyzer] INFO: Added new file to list with pid 1784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24176.exe
2025-06-24 21:38:36,717 [analyzer] INFO: Added new file to list with pid 3052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50197.exe
2025-06-24 21:38:36,717 [analyzer] INFO: Added new file to list with pid 3284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4525.exe
2025-06-24 21:38:36,765 [analyzer] INFO: Added new file to list with pid 2728 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58557.exe
2025-06-24 21:38:38,375 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36958.exe
2025-06-24 21:38:38,453 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6232.exe
2025-06-24 21:38:38,453 [analyzer] INFO: Added new file to list with pid 3524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26098.exe
2025-06-24 21:38:38,453 [analyzer] INFO: Added new file to list with pid 3756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26098.exe
2025-06-24 21:38:38,453 [analyzer] INFO: Added new file to list with pid 3436 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26098.exe
2025-06-24 21:38:38,453 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6232.exe
2025-06-24 21:38:38,453 [analyzer] INFO: Added new file to list with pid 3468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26098.exe
2025-06-24 21:38:38,453 [analyzer] INFO: Added new file to list with pid 3516 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26098.exe
2025-06-24 21:38:38,453 [analyzer] INFO: Injected into process with pid 3984 and name u'Unicorn-24176.exe'
2025-06-24 21:38:40,375 [analyzer] INFO: Added new file to list with pid 1932 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8447.exe
2025-06-24 21:38:40,375 [analyzer] INFO: Added new file to list with pid 328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14312.exe
2025-06-24 21:38:40,375 [analyzer] INFO: Added new file to list with pid 2804 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8447.exe
2025-06-24 21:38:40,671 [analyzer] INFO: Injected into process with pid 4072 and name u'Unicorn-50197.exe'
2025-06-24 21:38:40,687 [analyzer] INFO: Injected into process with pid 4084 and name u'Unicorn-4525.exe'
2025-06-24 21:38:40,703 [analyzer] INFO: Injected into process with pid 3176 and name u'Unicorn-58557.exe'
2025-06-24 21:38:40,765 [analyzer] DEBUG: Loaded monitor into process with pid 3984
2025-06-24 21:38:41,092 [analyzer] INFO: Injected into process with pid 3488 and name u'Unicorn-36958.exe'
2025-06-24 21:38:41,092 [analyzer] INFO: Injected into process with pid 3104 and name u'Unicorn-8447.exe'
2025-06-24 21:38:41,092 [analyzer] INFO: Injected into process with pid 3712 and name u'Unicorn-26098.exe'
2025-06-24 21:38:41,108 [analyzer] INFO: Injected into process with pid 3676 and name u'Unicorn-6232.exe'
2025-06-24 21:38:41,171 [analyzer] DEBUG: Loaded monitor into process with pid 4072
2025-06-24 21:38:41,203 [analyzer] DEBUG: Loaded monitor into process with pid 4084
2025-06-24 21:38:41,203 [analyzer] DEBUG: Loaded monitor into process with pid 3176
2025-06-24 21:38:41,217 [analyzer] INFO: Injected into process with pid 3236 and name u'Unicorn-14312.exe'
2025-06-24 21:38:41,280 [analyzer] INFO: Added new file to list with pid 3692 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2709.exe
2025-06-24 21:38:41,625 [analyzer] DEBUG: Loaded monitor into process with pid 3676
2025-06-24 21:38:41,625 [analyzer] DEBUG: Loaded monitor into process with pid 3236
2025-06-24 21:38:41,703 [analyzer] DEBUG: Loaded monitor into process with pid 3488
2025-06-24 21:38:41,796 [analyzer] DEBUG: Loaded monitor into process with pid 3712
2025-06-24 21:38:41,812 [analyzer] DEBUG: Loaded monitor into process with pid 3104
2025-06-24 21:38:43,312 [analyzer] INFO: Injected into process with pid 4248 and name u'Unicorn-2709.exe'
2025-06-24 21:38:43,328 [analyzer] INFO: Added new file to list with pid 3436 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22506.exe
2025-06-24 21:38:43,328 [analyzer] INFO: Added new file to list with pid 3468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22506.exe
2025-06-24 21:38:43,328 [analyzer] INFO: Added new file to list with pid 3524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22506.exe
2025-06-24 21:38:43,358 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40326.exe
2025-06-24 21:38:43,358 [analyzer] INFO: Added new file to list with pid 3756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26590.exe
2025-06-24 21:38:43,546 [analyzer] DEBUG: Loaded monitor into process with pid 4248
2025-06-24 21:38:43,592 [analyzer] INFO: Added new file to list with pid 1932 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43861.exe
2025-06-24 21:38:43,608 [analyzer] INFO: Injected into process with pid 4328 and name u'Unicorn-22506.exe'
2025-06-24 21:38:43,625 [analyzer] INFO: Injected into process with pid 4352 and name u'Unicorn-26590.exe'
2025-06-24 21:38:43,625 [analyzer] INFO: Injected into process with pid 4344 and name u'Unicorn-40326.exe'
2025-06-24 21:38:43,750 [analyzer] INFO: Injected into process with pid 4444 and name u'Unicorn-43861.exe'
2025-06-24 21:38:43,796 [analyzer] DEBUG: Loaded monitor into process with pid 4328
2025-06-24 21:38:43,812 [analyzer] DEBUG: Loaded monitor into process with pid 4352
2025-06-24 21:38:43,875 [analyzer] DEBUG: Loaded monitor into process with pid 4344
2025-06-24 21:38:43,921 [analyzer] DEBUG: Loaded monitor into process with pid 4444
2025-06-24 21:38:44,312 [analyzer] INFO: Added new file to list with pid 172 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60468.exe
2025-06-24 21:38:44,592 [analyzer] INFO: Injected into process with pid 4512 and name u'Unicorn-60468.exe'
2025-06-24 21:38:44,765 [analyzer] DEBUG: Loaded monitor into process with pid 4512
2025-06-24 21:38:46,342 [analyzer] INFO: Added new file to list with pid 3468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6667.exe
2025-06-24 21:38:46,342 [analyzer] INFO: Added new file to list with pid 3436 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6667.exe
2025-06-24 21:38:46,546 [analyzer] INFO: Injected into process with pid 4556 and name u'Unicorn-6667.exe'
2025-06-24 21:38:46,765 [analyzer] DEBUG: Loaded monitor into process with pid 4556
2025-06-24 21:38:47,062 [analyzer] INFO: Added new file to list with pid 3144 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21904.exe
2025-06-24 21:38:47,155 [analyzer] INFO: Injected into process with pid 4600 and name u'Unicorn-21904.exe'
2025-06-24 21:38:47,250 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46409.exe
2025-06-24 21:38:47,265 [analyzer] INFO: Added new file to list with pid 1944 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29609.exe
2025-06-24 21:38:47,342 [analyzer] DEBUG: Loaded monitor into process with pid 4600
2025-06-24 21:38:47,390 [analyzer] INFO: Injected into process with pid 4640 and name u'Unicorn-46409.exe'
2025-06-24 21:38:47,405 [analyzer] INFO: Injected into process with pid 4648 and name u'Unicorn-29609.exe'
2025-06-24 21:38:47,530 [analyzer] INFO: Added new file to list with pid 1356 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-37229.exe
2025-06-24 21:38:47,562 [analyzer] DEBUG: Loaded monitor into process with pid 4640
2025-06-24 21:38:47,562 [analyzer] INFO: Added new file to list with pid 3220 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21712.exe
2025-06-24 21:38:47,671 [analyzer] DEBUG: Loaded monitor into process with pid 4648
2025-06-24 21:38:47,671 [analyzer] INFO: Added new file to list with pid 2496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51784.exe
2025-06-24 21:38:47,812 [analyzer] INFO: Injected into process with pid 4732 and name u'Unicorn-37229.exe'
2025-06-24 21:38:47,842 [analyzer] INFO: Injected into process with pid 4756 and name u'Unicorn-21712.exe'
2025-06-24 21:38:47,858 [analyzer] INFO: Injected into process with pid 4792 and name u'Unicorn-51784.exe'
2025-06-24 21:38:47,921 [analyzer] INFO: Added new file to list with pid 3352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5376.exe
2025-06-24 21:38:47,983 [analyzer] DEBUG: Loaded monitor into process with pid 4732
2025-06-24 21:38:48,015 [analyzer] DEBUG: Loaded monitor into process with pid 4756
2025-06-24 21:38:48,092 [analyzer] DEBUG: Loaded monitor into process with pid 4792
2025-06-24 21:38:48,187 [analyzer] INFO: Injected into process with pid 4868 and name u'Unicorn-5376.exe'
2025-06-24 21:38:48,203 [analyzer] INFO: Added new file to list with pid 1972 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27499.exe
2025-06-24 21:38:48,375 [analyzer] DEBUG: Loaded monitor into process with pid 4868
2025-06-24 21:38:48,515 [analyzer] INFO: Added new file to list with pid 3276 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48739.exe
2025-06-24 21:38:48,608 [analyzer] INFO: Injected into process with pid 4936 and name u'Unicorn-27499.exe'
2025-06-24 21:38:48,640 [analyzer] INFO: Added new file to list with pid 1160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10473.exe
2025-06-24 21:38:49,030 [analyzer] INFO: Injected into process with pid 4968 and name u'Unicorn-48739.exe'
2025-06-24 21:38:49,078 [analyzer] DEBUG: Loaded monitor into process with pid 4936
2025-06-24 21:38:49,171 [analyzer] INFO: Injected into process with pid 5012 and name u'Unicorn-10473.exe'
2025-06-24 21:38:49,187 [analyzer] INFO: Added new file to list with pid 3388 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39008.exe
2025-06-24 21:38:49,296 [analyzer] DEBUG: Loaded monitor into process with pid 4968
2025-06-24 21:38:49,358 [analyzer] DEBUG: Loaded monitor into process with pid 5012
2025-06-24 21:38:49,562 [analyzer] INFO: Added new file to list with pid 3468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7270.exe
2025-06-24 21:38:49,578 [analyzer] INFO: Added new file to list with pid 1740 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5489.exe
2025-06-24 21:38:49,592 [analyzer] INFO: Added new file to list with pid 3588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26564.exe
2025-06-24 21:38:49,592 [analyzer] INFO: Added new file to list with pid 3784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26564.exe
2025-06-24 21:38:49,608 [analyzer] INFO: Injected into process with pid 5068 and name u'Unicorn-39008.exe'
2025-06-24 21:38:49,703 [analyzer] INFO: Added new file to list with pid 3636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8090.exe
2025-06-24 21:38:49,750 [analyzer] INFO: Injected into process with pid 4120 and name u'Unicorn-7270.exe'
2025-06-24 21:38:49,750 [analyzer] INFO: Injected into process with pid 2656 and name u'Unicorn-26564.exe'
2025-06-24 21:38:49,765 [analyzer] INFO: Injected into process with pid 3616 and name u'Unicorn-5489.exe'
2025-06-24 21:38:49,812 [analyzer] DEBUG: Loaded monitor into process with pid 5068
2025-06-24 21:38:49,842 [analyzer] INFO: Injected into process with pid 4216 and name u'Unicorn-8090.exe'
2025-06-24 21:38:49,937 [analyzer] DEBUG: Loaded monitor into process with pid 4120
2025-06-24 21:38:49,937 [analyzer] DEBUG: Loaded monitor into process with pid 3616
2025-06-24 21:38:49,953 [analyzer] DEBUG: Loaded monitor into process with pid 2656
2025-06-24 21:38:50,030 [analyzer] DEBUG: Loaded monitor into process with pid 4216
2025-06-24 21:38:50,717 [analyzer] INFO: Added new file to list with pid 3892 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28340.exe
2025-06-24 21:38:50,905 [analyzer] INFO: Injected into process with pid 4372 and name u'Unicorn-28340.exe'
2025-06-24 21:38:50,937 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26394.exe
2025-06-24 21:38:51,000 [analyzer] INFO: Added new file to list with pid 3900 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34562.exe
2025-06-24 21:38:51,092 [analyzer] DEBUG: Loaded monitor into process with pid 4372
2025-06-24 21:38:51,140 [analyzer] INFO: Injected into process with pid 4568 and name u'Unicorn-26394.exe'
2025-06-24 21:38:51,296 [analyzer] INFO: Added new file to list with pid 3860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6549.exe
2025-06-24 21:38:51,312 [analyzer] INFO: Injected into process with pid 4620 and name u'Unicorn-34562.exe'
2025-06-24 21:38:51,405 [analyzer] DEBUG: Loaded monitor into process with pid 4568
2025-06-24 21:38:51,483 [analyzer] INFO: Injected into process with pid 4748 and name u'Unicorn-6549.exe'
2025-06-24 21:38:51,500 [analyzer] DEBUG: Loaded monitor into process with pid 4620
2025-06-24 21:38:51,671 [analyzer] DEBUG: Loaded monitor into process with pid 4748
2025-06-24 21:38:52,515 [analyzer] INFO: Added new file to list with pid 4004 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4603.exe
2025-06-24 21:38:52,608 [analyzer] INFO: Added new file to list with pid 3784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45536.exe
2025-06-24 21:38:52,875 [analyzer] INFO: Added new file to list with pid 3232 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18994.exe
2025-06-24 21:38:52,890 [analyzer] INFO: Injected into process with pid 4884 and name u'Unicorn-4603.exe'
2025-06-24 21:38:52,905 [analyzer] INFO: Injected into process with pid 4948 and name u'Unicorn-45536.exe'
2025-06-24 21:38:53,155 [analyzer] DEBUG: Loaded monitor into process with pid 4884
2025-06-24 21:38:53,171 [analyzer] DEBUG: Loaded monitor into process with pid 4948
2025-06-24 21:38:53,265 [analyzer] INFO: Injected into process with pid 5100 and name u'Unicorn-18994.exe'
2025-06-24 21:38:53,515 [analyzer] DEBUG: Loaded monitor into process with pid 5100
2025-06-24 21:38:53,578 [analyzer] INFO: Added new file to list with pid 3140 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43882.exe
2025-06-24 21:38:53,592 [analyzer] INFO: Added new file to list with pid 1536 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13155.exe
2025-06-24 21:38:53,608 [analyzer] INFO: Added new file to list with pid 4052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47966.exe
2025-06-24 21:38:53,828 [analyzer] INFO: Added new file to list with pid 3984 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11209.exe
2025-06-24 21:38:53,937 [analyzer] INFO: Added new file to list with pid 1784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19145.exe
2025-06-24 21:38:53,967 [analyzer] INFO: Injected into process with pid 4100 and name u'Unicorn-43882.exe'
2025-06-24 21:38:53,983 [analyzer] INFO: Injected into process with pid 3412 and name u'Unicorn-13155.exe'
2025-06-24 21:38:54,000 [analyzer] INFO: Injected into process with pid 1928 and name u'Unicorn-47966.exe'
2025-06-24 21:38:54,125 [analyzer] INFO: Added new file to list with pid 3632 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52626.exe
2025-06-24 21:38:54,125 [analyzer] INFO: Injected into process with pid 4544 and name u'Unicorn-11209.exe'
2025-06-24 21:38:54,155 [analyzer] DEBUG: Loaded monitor into process with pid 4100
2025-06-24 21:38:54,155 [analyzer] INFO: Added new file to list with pid 4248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21900.exe
2025-06-24 21:38:54,171 [analyzer] INFO: Injected into process with pid 4616 and name u'Unicorn-19145.exe'
2025-06-24 21:38:54,217 [analyzer] DEBUG: Loaded monitor into process with pid 3412
2025-06-24 21:38:54,265 [analyzer] DEBUG: Loaded monitor into process with pid 1928
2025-06-24 21:38:56,500 [analyzer] INFO: Added new file to list with pid 3052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45282.exe
2025-06-24 21:38:56,500 [analyzer] INFO: Added new file to list with pid 328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15839.exe
2025-06-24 21:38:56,515 [analyzer] INFO: Added new file to list with pid 2220 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18639.exe
2025-06-24 21:38:56,530 [analyzer] INFO: Added new file to list with pid 3104 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55496.exe
2025-06-24 21:38:56,546 [analyzer] INFO: Added new file to list with pid 3516 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4904.exe
2025-06-24 21:38:56,515 [analyzer] INFO: Added new file to list with pid 3692 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4904.exe
2025-06-24 21:38:56,562 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18639.exe
2025-06-24 21:38:56,546 [analyzer] INFO: Added new file to list with pid 2728 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18639.exe
2025-06-24 21:38:56,562 [analyzer] INFO: Added new file to list with pid 3284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4904.exe
2025-06-24 21:38:56,530 [analyzer] INFO: Added new file to list with pid 2804 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24505.exe
2025-06-24 21:38:56,562 [analyzer] INFO: Added new file to list with pid 3796 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24770.exe
2025-06-24 21:38:56,562 [analyzer] INFO: Added new file to list with pid 4084 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24770.exe
2025-06-24 21:38:56,562 [analyzer] INFO: Added new file to list with pid 3176 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24770.exe
2025-06-24 21:38:56,562 [analyzer] INFO: Added new file to list with pid 3448 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24770.exe
2025-06-24 21:38:56,562 [analyzer] INFO: Added new file to list with pid 3628 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24770.exe
2025-06-24 21:38:56,562 [analyzer] INFO: Added new file to list with pid 3676 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24770.exe
2025-06-24 21:38:56,562 [analyzer] INFO: Added new file to list with pid 3236 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24770.exe
2025-06-24 21:38:56,562 [analyzer] INFO: Added new file to list with pid 3488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24770.exe
2025-06-24 21:38:56,562 [analyzer] INFO: Added new file to list with pid 4072 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24770.exe
2025-06-24 21:38:56,562 [analyzer] INFO: Added new file to list with pid 3712 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24770.exe
2025-06-24 21:38:56,562 [analyzer] INFO: Added new file to list with pid 3296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24770.exe
2025-06-24 21:38:56,562 [analyzer] INFO: Added new file to list with pid 3544 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24770.exe
2025-06-24 21:38:56,608 [analyzer] DEBUG: Loaded monitor into process with pid 4544
2025-06-24 21:38:56,687 [analyzer] DEBUG: Loaded monitor into process with pid 4616
2025-06-24 21:39:01,030 [analyzer] INFO: Injected into process with pid 4988 and name u'Unicorn-52626.exe'
2025-06-24 21:39:06,062 [analyzer] INFO: Injected into process with pid 4816 and name u'Unicorn-21900.exe'
2025-06-24 21:39:06,092 [analyzer] INFO: Added new file to list with pid 3488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20996.exe
2025-06-24 21:39:06,092 [analyzer] INFO: Added new file to list with pid 3176 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20996.exe
2025-06-24 21:39:06,108 [analyzer] INFO: Added new file to list with pid 3516 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34731.exe
2025-06-24 21:39:06,108 [analyzer] INFO: Added new file to list with pid 2220 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40597.exe
2025-06-24 21:39:06,140 [analyzer] INFO: Added new file to list with pid 3692 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4005.exe
2025-06-24 21:39:06,155 [analyzer] INFO: Added new file to list with pid 3236 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55807.exe
2025-06-24 21:39:06,203 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9870.exe
2025-06-24 21:39:06,217 [analyzer] INFO: Injected into process with pid 4220 and name u'Unicorn-55496.exe'
2025-06-24 21:39:06,233 [analyzer] INFO: Injected into process with pid 4776 and name u'Unicorn-18639.exe'
2025-06-24 21:39:06,250 [analyzer] INFO: Injected into process with pid 4416 and name u'Unicorn-15839.exe'
2025-06-24 21:39:06,328 [analyzer] INFO: Added new file to list with pid 3296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-37332.exe
2025-06-24 21:39:06,342 [analyzer] DEBUG: Loaded monitor into process with pid 4988
2025-06-24 21:39:06,342 [analyzer] INFO: Added new file to list with pid 3628 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-41416.exe
2025-06-24 21:39:06,483 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2059.exe
2025-06-24 21:39:06,483 [analyzer] INFO: Added new file to list with pid 3524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2059.exe
2025-06-24 21:39:06,483 [analyzer] INFO: Injected into process with pid 4156 and name u'Unicorn-45282.exe'
2025-06-24 21:39:06,483 [analyzer] INFO: Injected into process with pid 4464 and name u'Unicorn-24505.exe'
2025-06-24 21:39:06,483 [analyzer] INFO: Injected into process with pid 4772 and name u'Unicorn-24770.exe'
2025-06-24 21:39:06,500 [analyzer] INFO: Added new file to list with pid 3436 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42735.exe
2025-06-24 21:39:06,500 [analyzer] INFO: Added new file to list with pid 1944 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24261.exe
2025-06-24 21:39:06,500 [analyzer] INFO: Added new file to list with pid 3144 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18395.exe
2025-06-24 21:39:06,546 [analyzer] INFO: Added new file to list with pid 1356 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54298.exe
2025-06-24 21:39:06,515 [analyzer] INFO: Injected into process with pid 4676 and name u'Unicorn-4904.exe'
2025-06-24 21:39:06,578 [analyzer] DEBUG: Loaded monitor into process with pid 4816
2025-06-24 21:39:06,578 [analyzer] INFO: Added new file to list with pid 3352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57098.exe
2025-06-24 21:39:06,625 [analyzer] INFO: Added new file to list with pid 3220 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26371.exe
2025-06-24 21:39:06,655 [analyzer] INFO: Added new file to list with pid 3756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61182.exe
2025-06-24 21:39:06,655 [analyzer] INFO: Added new file to list with pid 2496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36321.exe
2025-06-24 21:39:06,733 [analyzer] INFO: Added new file to list with pid 3276 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7897.exe
2025-06-24 21:39:06,765 [analyzer] DEBUG: Loaded monitor into process with pid 4416
2025-06-24 21:39:06,796 [analyzer] INFO: Added new file to list with pid 3636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54960.exe
2025-06-24 21:39:06,796 [analyzer] INFO: Added new file to list with pid 3588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54960.exe
2025-06-24 21:39:06,796 [analyzer] INFO: Added new file to list with pid 1160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-814.exe
2025-06-24 21:39:06,828 [analyzer] DEBUG: Loaded monitor into process with pid 4776
2025-06-24 21:39:06,828 [analyzer] INFO: Added new file to list with pid 3468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21625.exe
2025-06-24 21:39:06,842 [analyzer] INFO: Added new file to list with pid 1932 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56436.exe
2025-06-24 21:39:06,858 [analyzer] DEBUG: Loaded monitor into process with pid 4220
2025-06-24 21:39:06,890 [analyzer] INFO: Added new file to list with pid 3388 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28509.exe
2025-06-24 21:39:06,921 [analyzer] INFO: Added new file to list with pid 1740 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3648.exe
2025-06-24 21:39:07,046 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50711.exe
2025-06-24 21:39:07,078 [analyzer] DEBUG: Loaded monitor into process with pid 4464
2025-06-24 21:39:07,078 [analyzer] DEBUG: Loaded monitor into process with pid 4156
2025-06-24 21:39:07,171 [analyzer] DEBUG: Loaded monitor into process with pid 4772
2025-06-24 21:39:07,250 [analyzer] DEBUG: Loaded monitor into process with pid 4676
2025-06-24 21:39:07,390 [analyzer] INFO: Injected into process with pid 5352 and name u'Unicorn-20996.exe'
2025-06-24 21:39:07,390 [analyzer] INFO: Injected into process with pid 5360 and name u'Unicorn-34731.exe'
2025-06-24 21:39:07,405 [analyzer] INFO: Added new file to list with pid 172 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23948.exe
2025-06-24 21:39:07,421 [analyzer] INFO: Injected into process with pid 5344 and name u'Unicorn-20996.exe'
2025-06-24 21:39:07,437 [analyzer] INFO: Injected into process with pid 5420 and name u'Unicorn-9870.exe'
2025-06-24 21:39:07,437 [analyzer] INFO: Injected into process with pid 5376 and name u'Unicorn-40597.exe'
2025-06-24 21:39:07,483 [analyzer] INFO: Injected into process with pid 5368 and name u'Unicorn-4005.exe'
2025-06-24 21:39:07,578 [analyzer] INFO: Injected into process with pid 5392 and name u'Unicorn-55807.exe'
2025-06-24 21:39:07,592 [analyzer] INFO: Injected into process with pid 5384 and name u'Unicorn-55807.exe'
2025-06-24 21:39:07,608 [analyzer] INFO: Injected into process with pid 5400 and name u'Unicorn-55807.exe'
2025-06-24 21:39:07,640 [analyzer] INFO: Injected into process with pid 5636 and name u'Unicorn-37332.exe'
2025-06-24 21:39:07,640 [analyzer] INFO: Injected into process with pid 5784 and name u'Unicorn-24261.exe'
2025-06-24 21:39:07,655 [analyzer] INFO: Injected into process with pid 5792 and name u'Unicorn-54298.exe'
2025-06-24 21:39:07,671 [analyzer] INFO: Injected into process with pid 5840 and name u'Unicorn-26371.exe'
2025-06-24 21:39:07,671 [analyzer] INFO: Injected into process with pid 5912 and name u'Unicorn-61182.exe'
2025-06-24 21:39:07,671 [analyzer] INFO: Injected into process with pid 5768 and name u'Unicorn-42735.exe'
2025-06-24 21:39:07,703 [analyzer] INFO: Injected into process with pid 5444 and name u'Unicorn-55807.exe'
2025-06-24 21:39:07,733 [analyzer] INFO: Injected into process with pid 5816 and name u'Unicorn-54298.exe'
2025-06-24 21:39:07,765 [analyzer] INFO: Injected into process with pid 5428 and name u'Unicorn-55807.exe'
2025-06-24 21:39:07,765 [analyzer] DEBUG: Loaded monitor into process with pid 5352
2025-06-24 21:39:07,765 [analyzer] INFO: Injected into process with pid 5924 and name u'Unicorn-36321.exe'
2025-06-24 21:39:07,765 [analyzer] INFO: Injected into process with pid 5648 and name u'Unicorn-41416.exe'
2025-06-24 21:39:07,765 [analyzer] INFO: Injected into process with pid 5776 and name u'Unicorn-18395.exe'
2025-06-24 21:39:07,796 [analyzer] INFO: Injected into process with pid 6040 and name u'Unicorn-54960.exe'
2025-06-24 21:39:07,796 [analyzer] DEBUG: Loaded monitor into process with pid 5420
2025-06-24 21:39:07,812 [analyzer] INFO: Injected into process with pid 5468 and name u'Unicorn-55807.exe'
2025-06-24 21:39:07,812 [analyzer] INFO: Injected into process with pid 6112 and name u'Unicorn-28509.exe'
2025-06-24 21:39:07,812 [analyzer] INFO: Injected into process with pid 6056 and name u'Unicorn-814.exe'
2025-06-24 21:39:07,812 [analyzer] INFO: Injected into process with pid 5800 and name u'Unicorn-57098.exe'
2025-06-24 21:39:07,828 [analyzer] INFO: Injected into process with pid 6088 and name u'Unicorn-56436.exe'
2025-06-24 21:39:07,828 [analyzer] INFO: Injected into process with pid 5744 and name u'Unicorn-2059.exe'
2025-06-24 21:39:07,828 [analyzer] DEBUG: Loaded monitor into process with pid 5376
2025-06-24 21:39:07,842 [analyzer] DEBUG: Loaded monitor into process with pid 5368
2025-06-24 21:39:07,858 [analyzer] INFO: Injected into process with pid 6064 and name u'Unicorn-21625.exe'
2025-06-24 21:39:07,875 [analyzer] DEBUG: Loaded monitor into process with pid 5344
2025-06-24 21:39:07,875 [analyzer] INFO: Injected into process with pid 5976 and name u'Unicorn-7897.exe'
2025-06-24 21:39:07,890 [analyzer] DEBUG: Loaded monitor into process with pid 5360
2025-06-24 21:39:08,030 [analyzer] DEBUG: Loaded monitor into process with pid 5384
2025-06-24 21:39:08,092 [analyzer] DEBUG: Loaded monitor into process with pid 5768
2025-06-24 21:39:08,092 [analyzer] INFO: Injected into process with pid 5184 and name u'Unicorn-3648.exe'
2025-06-24 21:39:08,140 [analyzer] DEBUG: Loaded monitor into process with pid 5792
2025-06-24 21:39:08,140 [analyzer] DEBUG: Loaded monitor into process with pid 5400
2025-06-24 21:39:08,140 [analyzer] DEBUG: Loaded monitor into process with pid 5636
2025-06-24 21:39:08,328 [analyzer] DEBUG: Loaded monitor into process with pid 5912
2025-06-24 21:39:08,328 [analyzer] DEBUG: Loaded monitor into process with pid 5392
2025-06-24 21:39:08,342 [analyzer] DEBUG: Loaded monitor into process with pid 5428
2025-06-24 21:39:08,358 [analyzer] INFO: Injected into process with pid 5188 and name u'Unicorn-50711.exe'
2025-06-24 21:39:08,358 [analyzer] INFO: Injected into process with pid 5524 and name u'Unicorn-23948.exe'
2025-06-24 21:39:08,421 [analyzer] DEBUG: Loaded monitor into process with pid 5840
2025-06-24 21:39:08,453 [analyzer] DEBUG: Loaded monitor into process with pid 5648
2025-06-24 21:39:08,453 [analyzer] DEBUG: Loaded monitor into process with pid 5444
2025-06-24 21:39:08,467 [analyzer] DEBUG: Loaded monitor into process with pid 5816
2025-06-24 21:39:08,500 [analyzer] DEBUG: Loaded monitor into process with pid 6040
2025-06-24 21:39:08,530 [analyzer] DEBUG: Loaded monitor into process with pid 5776
2025-06-24 21:39:08,530 [analyzer] DEBUG: Loaded monitor into process with pid 5468
2025-06-24 21:39:08,546 [analyzer] DEBUG: Loaded monitor into process with pid 6056
2025-06-24 21:39:08,578 [analyzer] DEBUG: Loaded monitor into process with pid 5924
2025-06-24 21:39:08,592 [analyzer] DEBUG: Loaded monitor into process with pid 5800
2025-06-24 21:39:08,608 [analyzer] DEBUG: Loaded monitor into process with pid 6064
2025-06-24 21:39:08,625 [analyzer] DEBUG: Loaded monitor into process with pid 6088
2025-06-24 21:39:08,640 [analyzer] DEBUG: Loaded monitor into process with pid 5184
2025-06-24 21:39:08,655 [analyzer] DEBUG: Loaded monitor into process with pid 5976
2025-06-24 21:39:08,655 [analyzer] DEBUG: Loaded monitor into process with pid 5188
2025-06-24 21:39:08,687 [analyzer] DEBUG: Loaded monitor into process with pid 5744
2025-06-24 21:39:08,703 [analyzer] DEBUG: Loaded monitor into process with pid 5784
2025-06-24 21:39:08,703 [analyzer] DEBUG: Loaded monitor into process with pid 5524
2025-06-24 21:39:08,717 [analyzer] DEBUG: Loaded monitor into process with pid 6112
2025-06-24 21:39:08,750 [analyzer] INFO: Added new file to list with pid 4352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57774.exe
2025-06-24 21:39:09,062 [analyzer] INFO: Added new file to list with pid 4328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33846.exe
2025-06-24 21:39:09,140 [analyzer] INFO: Added new file to list with pid 3892 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26232.exe
2025-06-24 21:39:09,233 [analyzer] INFO: Injected into process with pid 5564 and name u'Unicorn-57774.exe'
2025-06-24 21:39:09,280 [analyzer] INFO: Added new file to list with pid 3488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56304.exe
2025-06-24 21:39:09,342 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16118.exe
2025-06-24 21:39:09,515 [analyzer] INFO: Added new file to list with pid 3900 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9896.exe
2025-06-24 21:39:09,530 [analyzer] DEBUG: Loaded monitor into process with pid 5564
2025-06-24 21:39:09,562 [analyzer] INFO: Added new file to list with pid 4052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48599.exe
2025-06-24 21:39:09,578 [analyzer] INFO: Added new file to list with pid 1784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38533.exe
2025-06-24 21:39:09,592 [analyzer] INFO: Added new file to list with pid 3784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2662.exe
2025-06-24 21:39:09,655 [analyzer] INFO: Injected into process with pid 5300 and name u'Unicorn-33846.exe'
2025-06-24 21:39:09,671 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10830.exe
2025-06-24 21:39:09,733 [analyzer] INFO: Injected into process with pid 5596 and name u'Unicorn-26232.exe'
2025-06-24 21:39:09,828 [analyzer] INFO: Injected into process with pid 5032 and name u'Unicorn-56304.exe'
2025-06-24 21:39:09,875 [analyzer] INFO: Injected into process with pid 5236 and name u'Unicorn-16118.exe'
2025-06-24 21:39:09,983 [analyzer] DEBUG: Loaded monitor into process with pid 5300
2025-06-24 21:39:09,983 [analyzer] INFO: Added new file to list with pid 3636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25221.exe
2025-06-24 21:39:10,030 [analyzer] DEBUG: Loaded monitor into process with pid 5596
2025-06-24 21:39:10,125 [analyzer] DEBUG: Loaded monitor into process with pid 5032
2025-06-24 21:39:10,140 [analyzer] INFO: Injected into process with pid 6000 and name u'Unicorn-9896.exe'
2025-06-24 21:39:10,203 [analyzer] INFO: Injected into process with pid 6160 and name u'Unicorn-38533.exe'
2025-06-24 21:39:10,217 [analyzer] INFO: Injected into process with pid 5276 and name u'Unicorn-48599.exe'
2025-06-24 21:39:10,217 [analyzer] INFO: Injected into process with pid 6168 and name u'Unicorn-2662.exe'
2025-06-24 21:39:10,233 [analyzer] INFO: Injected into process with pid 6216 and name u'Unicorn-10830.exe'
2025-06-24 21:39:10,250 [analyzer] DEBUG: Loaded monitor into process with pid 5236
2025-06-24 21:39:10,500 [analyzer] DEBUG: Loaded monitor into process with pid 6000
2025-06-24 21:39:10,530 [analyzer] INFO: Injected into process with pid 6324 and name u'Unicorn-25221.exe'
2025-06-24 21:39:10,592 [analyzer] DEBUG: Loaded monitor into process with pid 6168
2025-06-24 21:39:10,608 [analyzer] DEBUG: Loaded monitor into process with pid 6216
2025-06-24 21:39:10,671 [analyzer] DEBUG: Loaded monitor into process with pid 5276
2025-06-24 21:39:10,733 [analyzer] DEBUG: Loaded monitor into process with pid 6160
2025-06-24 21:39:10,750 [analyzer] DEBUG: Loaded monitor into process with pid 6324
2025-06-24 21:39:10,842 [analyzer] INFO: Added new file to list with pid 4444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9533.exe
2025-06-24 21:39:11,092 [analyzer] INFO: Injected into process with pid 6440 and name u'Unicorn-9533.exe'
2025-06-24 21:39:11,296 [analyzer] DEBUG: Loaded monitor into process with pid 6440
2025-06-24 21:39:12,625 [analyzer] INFO: Added new file to list with pid 4052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28639.exe
2025-06-24 21:39:12,625 [analyzer] INFO: Added new file to list with pid 3140 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28639.exe
2025-06-24 21:39:12,625 [analyzer] INFO: Added new file to list with pid 1536 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28639.exe
2025-06-24 21:39:12,625 [analyzer] INFO: Added new file to list with pid 3984 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28639.exe
2025-06-24 21:39:12,625 [analyzer] INFO: Added new file to list with pid 3232 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28639.exe
2025-06-24 21:39:12,625 [analyzer] INFO: Added new file to list with pid 4004 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28639.exe
2025-06-24 21:39:12,812 [analyzer] INFO: Injected into process with pid 6500 and name u'Unicorn-28639.exe'
2025-06-24 21:39:13,000 [analyzer] DEBUG: Loaded monitor into process with pid 6500
2025-06-24 21:39:13,390 [analyzer] INFO: Added new file to list with pid 4344 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2673.exe
2025-06-24 21:39:13,562 [analyzer] INFO: Injected into process with pid 6544 and name u'Unicorn-2673.exe'
2025-06-24 21:39:13,750 [analyzer] DEBUG: Loaded monitor into process with pid 6544
2025-06-24 21:39:14,592 [analyzer] INFO: Added new file to list with pid 4512 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62180.exe
2025-06-24 21:39:14,796 [analyzer] INFO: Injected into process with pid 6608 and name u'Unicorn-62180.exe'
2025-06-24 21:39:15,000 [analyzer] DEBUG: Loaded monitor into process with pid 6608
2025-06-24 21:39:15,687 [analyzer] INFO: Added new file to list with pid 3232 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9014.exe
2025-06-24 21:39:15,687 [analyzer] INFO: Added new file to list with pid 4052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9014.exe
2025-06-24 21:39:15,687 [analyzer] INFO: Added new file to list with pid 1536 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9014.exe
2025-06-24 21:39:15,687 [analyzer] INFO: Added new file to list with pid 3984 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9014.exe
2025-06-24 21:39:15,687 [analyzer] INFO: Added new file to list with pid 3140 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9014.exe
2025-06-24 21:39:15,921 [analyzer] INFO: Injected into process with pid 6668 and name u'Unicorn-9014.exe'
2025-06-24 21:39:16,140 [analyzer] DEBUG: Loaded monitor into process with pid 6668
2025-06-24 21:39:17,796 [analyzer] INFO: Added new file to list with pid 4556 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57302.exe
2025-06-24 21:39:17,875 [analyzer] INFO: Added new file to list with pid 4600 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4017.exe
2025-06-24 21:39:18,030 [analyzer] INFO: Injected into process with pid 6712 and name u'Unicorn-57302.exe'
2025-06-24 21:39:18,062 [analyzer] INFO: Injected into process with pid 6720 and name u'Unicorn-4017.exe'
2025-06-24 21:39:18,203 [analyzer] DEBUG: Loaded monitor into process with pid 6712
2025-06-24 21:39:18,312 [analyzer] DEBUG: Loaded monitor into process with pid 6720
2025-06-24 21:39:18,733 [analyzer] INFO: Added new file to list with pid 3984 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40396.exe
2025-06-24 21:39:18,733 [analyzer] INFO: Added new file to list with pid 4052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40396.exe
2025-06-24 21:39:18,733 [analyzer] INFO: Added new file to list with pid 3232 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40396.exe
2025-06-24 21:39:18,733 [analyzer] INFO: Added new file to list with pid 1536 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40396.exe
2025-06-24 21:39:19,015 [analyzer] INFO: Injected into process with pid 6812 and name u'Unicorn-40396.exe'
2025-06-24 21:39:19,250 [analyzer] DEBUG: Loaded monitor into process with pid 6812
2025-06-24 21:39:19,405 [analyzer] INFO: Added new file to list with pid 3632 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54733.exe
2025-06-24 21:39:19,546 [analyzer] INFO: Added new file to list with pid 4640 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60016.exe
2025-06-24 21:39:19,671 [analyzer] INFO: Added new file to list with pid 4248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56487.exe
2025-06-24 21:39:19,780 [analyzer] INFO: Added new file to list with pid 3104 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3394.exe
2025-06-24 21:39:19,828 [analyzer] INFO: Injected into process with pid 6864 and name u'Unicorn-54733.exe'
2025-06-24 21:39:19,905 [analyzer] INFO: Added new file to list with pid 328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44856.exe
2025-06-24 21:39:19,905 [analyzer] INFO: Added new file to list with pid 2728 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4520.exe
2025-06-24 21:39:20,046 [analyzer] INFO: Injected into process with pid 6888 and name u'Unicorn-60016.exe'
2025-06-24 21:39:20,108 [analyzer] INFO: Injected into process with pid 6920 and name u'Unicorn-56487.exe'
2025-06-24 21:39:20,125 [analyzer] INFO: Added new file to list with pid 3052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2958.exe
2025-06-24 21:39:20,155 [analyzer] DEBUG: Loaded monitor into process with pid 6864
2025-06-24 21:39:20,171 [analyzer] INFO: Added new file to list with pid 2804 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33187.exe
2025-06-24 21:39:20,280 [analyzer] INFO: Added new file to list with pid 3284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40072.exe
2025-06-24 21:39:20,280 [analyzer] INFO: Injected into process with pid 6948 and name u'Unicorn-3394.exe'
2025-06-24 21:39:20,280 [analyzer] INFO: Added new file to list with pid 3544 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26336.exe
2025-06-24 21:39:20,328 [analyzer] DEBUG: Loaded monitor into process with pid 6888
2025-06-24 21:39:20,437 [analyzer] INFO: Injected into process with pid 6980 and name u'Unicorn-44856.exe'
2025-06-24 21:39:20,467 [analyzer] INFO: Injected into process with pid 6988 and name u'Unicorn-4520.exe'
2025-06-24 21:39:20,483 [analyzer] DEBUG: Loaded monitor into process with pid 6920
2025-06-24 21:39:20,671 [analyzer] DEBUG: Loaded monitor into process with pid 6948
2025-06-24 21:39:20,687 [analyzer] INFO: Injected into process with pid 7080 and name u'Unicorn-2958.exe'
2025-06-24 21:39:20,733 [analyzer] DEBUG: Loaded monitor into process with pid 6980
2025-06-24 21:39:20,733 [analyzer] INFO: Injected into process with pid 7112 and name u'Unicorn-33187.exe'
2025-06-24 21:39:20,750 [analyzer] DEBUG: Loaded monitor into process with pid 6988
2025-06-24 21:39:20,750 [analyzer] INFO: Injected into process with pid 7152 and name u'Unicorn-40072.exe'
2025-06-24 21:39:20,750 [analyzer] INFO: Injected into process with pid 7164 and name u'Unicorn-26336.exe'
2025-06-24 21:39:20,905 [analyzer] DEBUG: Loaded monitor into process with pid 7080
2025-06-24 21:39:20,983 [analyzer] DEBUG: Loaded monitor into process with pid 7112
2025-06-24 21:39:21,000 [analyzer] DEBUG: Loaded monitor into process with pid 7164
2025-06-24 21:39:21,000 [analyzer] DEBUG: Loaded monitor into process with pid 7152
2025-06-24 21:39:21,078 [analyzer] INFO: Added new file to list with pid 2220 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21319.exe
2025-06-24 21:39:21,078 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21319.exe
2025-06-24 21:39:21,078 [analyzer] INFO: Added new file to list with pid 3516 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29985.exe
2025-06-24 21:39:21,078 [analyzer] INFO: Added new file to list with pid 3676 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24119.exe
2025-06-24 21:39:21,078 [analyzer] INFO: Added new file to list with pid 3676 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24119.exe
2025-06-24 21:39:21,078 [analyzer] INFO: Added new file to list with pid 3692 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29985.exe
2025-06-24 21:39:21,358 [analyzer] INFO: Added new file to list with pid 4072 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52900.exe
2025-06-24 21:39:21,375 [analyzer] INFO: Added new file to list with pid 3236 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52900.exe
2025-06-24 21:39:21,358 [analyzer] INFO: Added new file to list with pid 4084 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52900.exe
2025-06-24 21:39:21,405 [analyzer] INFO: Added new file to list with pid 1944 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58268.exe
2025-06-24 21:39:21,405 [analyzer] INFO: Added new file to list with pid 3296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61068.exe
2025-06-24 21:39:21,546 [analyzer] INFO: Added new file to list with pid 4648 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5745.exe
2025-06-24 21:39:21,592 [analyzer] INFO: Added new file to list with pid 3712 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7783.exe
2025-06-24 21:39:21,592 [analyzer] INFO: Added new file to list with pid 3436 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4983.exe
2025-06-24 21:39:21,592 [analyzer] INFO: Added new file to list with pid 1972 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53985.exe
2025-06-24 21:39:21,608 [analyzer] INFO: Added new file to list with pid 3220 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13648.exe
2025-06-24 21:39:22,000 [analyzer] INFO: Added new file to list with pid 3524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-37961.exe
2025-06-24 21:39:22,000 [analyzer] INFO: Added new file to list with pid 3144 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7234.exe
2025-06-24 21:39:22,030 [analyzer] INFO: Added new file to list with pid 3628 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32095.exe
2025-06-24 21:39:22,046 [analyzer] INFO: Added new file to list with pid 1932 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12760.exe
2025-06-24 21:39:22,046 [analyzer] INFO: Added new file to list with pid 1932 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29826.exe
2025-06-24 21:39:22,046 [analyzer] INFO: Added new file to list with pid 3468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12760.exe
2025-06-24 21:39:22,046 [analyzer] INFO: Added new file to list with pid 3796 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32095.exe
2025-06-24 21:39:22,046 [analyzer] INFO: Added new file to list with pid 2496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29295.exe
2025-06-24 21:39:22,062 [analyzer] INFO: Added new file to list with pid 3448 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32095.exe
2025-06-24 21:39:22,108 [analyzer] INFO: Added new file to list with pid 3352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54297.exe
2025-06-24 21:39:22,125 [analyzer] INFO: Added new file to list with pid 3276 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23763.exe
2025-06-24 21:39:22,250 [analyzer] INFO: Added new file to list with pid 1740 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29871.exe
2025-06-24 21:39:22,312 [analyzer] INFO: Added new file to list with pid 4732 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3991.exe
2025-06-24 21:39:22,375 [analyzer] INFO: Added new file to list with pid 3232 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25588.exe
2025-06-24 21:39:22,390 [analyzer] INFO: Added new file to list with pid 172 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16203.exe
2025-06-24 21:39:22,390 [analyzer] INFO: Added new file to list with pid 4052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64675.exe
2025-06-24 21:39:22,390 [analyzer] INFO: Added new file to list with pid 3984 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25588.exe
2025-06-24 21:39:22,453 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15673.exe
2025-06-24 21:39:22,467 [analyzer] INFO: Added new file to list with pid 4756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24604.exe
2025-06-24 21:39:32,140 [analyzer] INFO: Added new file to list with pid 3236 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56731.exe
2025-06-24 21:39:32,390 [analyzer] INFO: Added new file to list with pid 2220 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-804.exe
2025-06-24 21:39:32,405 [analyzer] INFO: Added new file to list with pid 3676 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26005.exe
2025-06-24 21:39:32,437 [analyzer] INFO: Added new file to list with pid 3516 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17339.exe
2025-06-24 21:39:32,515 [analyzer] INFO: Injected into process with pid 6340 and name u'Unicorn-24119.exe'
2025-06-24 21:39:32,515 [analyzer] INFO: Injected into process with pid 6412 and name u'Unicorn-29985.exe'
2025-06-24 21:39:32,546 [analyzer] INFO: Injected into process with pid 6312 and name u'Unicorn-21319.exe'
2025-06-24 21:39:32,578 [analyzer] INFO: Added new file to list with pid 1784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9478.exe
2025-06-24 21:39:32,592 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38614.exe
2025-06-24 21:39:32,592 [analyzer] INFO: Added new file to list with pid 3900 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38614.exe
2025-06-24 21:39:32,592 [analyzer] INFO: Added new file to list with pid 1972 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36344.exe
2025-06-24 21:39:32,625 [analyzer] INFO: Added new file to list with pid 4352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24878.exe
2025-06-24 21:39:32,625 [analyzer] INFO: Added new file to list with pid 3488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44479.exe
2025-06-24 21:39:32,780 [analyzer] INFO: Injected into process with pid 6556 and name u'Unicorn-58268.exe'
2025-06-24 21:39:32,796 [analyzer] INFO: Added new file to list with pid 3524 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33483.exe
2025-06-24 21:39:32,812 [analyzer] INFO: Injected into process with pid 6560 and name u'Unicorn-52900.exe'
2025-06-24 21:39:32,812 [analyzer] INFO: Added new file to list with pid 3628 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11422.exe
2025-06-24 21:39:32,828 [analyzer] INFO: Injected into process with pid 6572 and name u'Unicorn-61068.exe'
2025-06-24 21:39:32,858 [analyzer] INFO: Added new file to list with pid 1932 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42374.exe
2025-06-24 21:39:33,671 [analyzer] INFO: Added new file to list with pid 1932 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27951.exe
2025-06-24 21:39:33,671 [analyzer] INFO: Injected into process with pid 2532 and name u'Unicorn-7783.exe'
2025-06-24 21:39:33,671 [analyzer] INFO: Injected into process with pid 5500 and name u'Unicorn-5745.exe'
2025-06-24 21:39:33,671 [analyzer] INFO: Injected into process with pid 6628 and name u'Unicorn-13648.exe'
2025-06-24 21:39:33,671 [analyzer] INFO: Injected into process with pid 6700 and name u'Unicorn-4983.exe'
2025-06-24 21:39:33,671 [analyzer] INFO: Injected into process with pid 6640 and name u'Unicorn-13648.exe'
2025-06-24 21:39:33,687 [analyzer] INFO: Added new file to list with pid 4868 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28216.exe
2025-06-24 21:39:33,703 [analyzer] INFO: Injected into process with pid 1068 and name u'Unicorn-53985.exe'
2025-06-24 21:39:33,703 [analyzer] INFO: Injected into process with pid 2208 and name u'Unicorn-7234.exe'
2025-06-24 21:39:33,780 [analyzer] INFO: Injected into process with pid 1420 and name u'Unicorn-37961.exe'
2025-06-24 21:39:33,812 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31537.exe
2025-06-24 21:39:33,828 [analyzer] DEBUG: Loaded monitor into process with pid 6412
2025-06-24 21:39:33,828 [analyzer] INFO: Added new file to list with pid 3860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34337.exe
2025-06-24 21:39:33,842 [analyzer] INFO: Injected into process with pid 3068 and name u'Unicorn-37961.exe'
2025-06-24 21:39:33,858 [analyzer] INFO: Added new file to list with pid 3232 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61040.exe
2025-06-24 21:39:33,858 [analyzer] INFO: Added new file to list with pid 3784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60510.exe
2025-06-24 21:39:33,890 [analyzer] DEBUG: Loaded monitor into process with pid 6340
2025-06-24 21:39:33,890 [analyzer] INFO: Injected into process with pid 6788 and name u'Unicorn-29826.exe'
2025-06-24 21:39:33,983 [analyzer] DEBUG: Loaded monitor into process with pid 6312
2025-06-24 21:39:34,125 [analyzer] INFO: Injected into process with pid 784 and name u'Unicorn-29295.exe'
2025-06-24 21:39:34,125 [analyzer] INFO: Injected into process with pid 6852 and name u'Unicorn-32095.exe'
2025-06-24 21:39:34,155 [analyzer] INFO: Injected into process with pid 2824 and name u'Unicorn-54297.exe'
2025-06-24 21:39:34,187 [analyzer] INFO: Added new file to list with pid 3636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50396.exe
2025-06-24 21:39:34,203 [analyzer] INFO: Injected into process with pid 6836 and name u'Unicorn-12760.exe'
2025-06-24 21:39:34,217 [analyzer] INFO: Injected into process with pid 2404 and name u'Unicorn-23763.exe'
2025-06-24 21:39:34,233 [analyzer] INFO: Injected into process with pid 616 and name u'Unicorn-29871.exe'
2025-06-24 21:39:34,342 [analyzer] DEBUG: Loaded monitor into process with pid 6560
2025-06-24 21:39:34,608 [analyzer] DEBUG: Loaded monitor into process with pid 6556
2025-06-24 21:39:34,640 [analyzer] DEBUG: Loaded monitor into process with pid 6572
2025-06-24 21:39:34,890 [analyzer] INFO: Injected into process with pid 7036 and name u'Unicorn-16203.exe'
2025-06-24 21:39:34,890 [analyzer] INFO: Injected into process with pid 1272 and name u'Unicorn-3991.exe'
2025-06-24 21:39:34,890 [analyzer] INFO: Injected into process with pid 7136 and name u'Unicorn-64675.exe'
2025-06-24 21:39:34,890 [analyzer] INFO: Injected into process with pid 5336 and name u'Unicorn-25588.exe'
2025-06-24 21:39:34,890 [analyzer] INFO: Injected into process with pid 5580 and name u'Unicorn-15673.exe'
2025-06-24 21:39:34,953 [analyzer] INFO: Injected into process with pid 1416 and name u'Unicorn-24604.exe'
2025-06-24 21:39:35,046 [analyzer] DEBUG: Loaded monitor into process with pid 6628
2025-06-24 21:39:35,092 [analyzer] DEBUG: Loaded monitor into process with pid 6700
2025-06-24 21:39:35,155 [analyzer] DEBUG: Loaded monitor into process with pid 6852
2025-06-24 21:39:35,171 [analyzer] DEBUG: Loaded monitor into process with pid 6836
2025-06-24 21:39:35,171 [analyzer] DEBUG: Loaded monitor into process with pid 2532
2025-06-24 21:39:35,203 [analyzer] DEBUG: Loaded monitor into process with pid 1420
2025-06-24 21:39:35,233 [analyzer] DEBUG: Loaded monitor into process with pid 6788
2025-06-24 21:39:35,250 [analyzer] DEBUG: Loaded monitor into process with pid 2404
2025-06-24 21:39:35,280 [analyzer] DEBUG: Loaded monitor into process with pid 3068
2025-06-24 21:39:35,296 [analyzer] DEBUG: Loaded monitor into process with pid 616
2025-06-24 21:39:35,312 [analyzer] DEBUG: Loaded monitor into process with pid 784
2025-06-24 21:39:35,312 [analyzer] DEBUG: Loaded monitor into process with pid 2208
2025-06-24 21:39:35,328 [analyzer] INFO: Injected into process with pid 7488 and name u'Unicorn-26005.exe'
2025-06-24 21:39:35,328 [analyzer] INFO: Injected into process with pid 7472 and name u'Unicorn-804.exe'
2025-06-24 21:39:35,328 [analyzer] INFO: Injected into process with pid 7480 and name u'Unicorn-26005.exe'
2025-06-24 21:39:35,328 [analyzer] INFO: Injected into process with pid 7496 and name u'Unicorn-17339.exe'
2025-06-24 21:39:35,328 [analyzer] INFO: Injected into process with pid 7448 and name u'Unicorn-56731.exe'
2025-06-24 21:39:35,342 [analyzer] DEBUG: Loaded monitor into process with pid 2824
2025-06-24 21:39:35,358 [analyzer] DEBUG: Loaded monitor into process with pid 1068
2025-06-24 21:39:35,358 [analyzer] DEBUG: Loaded monitor into process with pid 5500
2025-06-24 21:39:35,375 [analyzer] DEBUG: Loaded monitor into process with pid 6640
2025-06-24 21:39:35,405 [analyzer] DEBUG: Loaded monitor into process with pid 1272
2025-06-24 21:39:35,421 [analyzer] DEBUG: Loaded monitor into process with pid 5580
2025-06-24 21:39:35,421 [analyzer] DEBUG: Loaded monitor into process with pid 7036
2025-06-24 21:39:35,437 [analyzer] INFO: Injected into process with pid 7740 and name u'Unicorn-24878.exe'
2025-06-24 21:39:35,453 [analyzer] INFO: Injected into process with pid 7724 and name u'Unicorn-36344.exe'
2025-06-24 21:39:35,453 [analyzer] INFO: Injected into process with pid 7700 and name u'Unicorn-9478.exe'
2025-06-24 21:39:35,453 [analyzer] INFO: Injected into process with pid 7716 and name u'Unicorn-38614.exe'
2025-06-24 21:39:35,453 [analyzer] INFO: Injected into process with pid 7920 and name u'Unicorn-11422.exe'
2025-06-24 21:39:35,453 [analyzer] INFO: Added new file to list with pid 4936 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-37728.exe
2025-06-24 21:39:35,453 [analyzer] INFO: Injected into process with pid 7912 and name u'Unicorn-33483.exe'
2025-06-24 21:39:35,453 [analyzer] INFO: Injected into process with pid 7732 and name u'Unicorn-44479.exe'
2025-06-24 21:39:35,467 [analyzer] DEBUG: Loaded monitor into process with pid 1416
2025-06-24 21:39:35,467 [analyzer] INFO: Injected into process with pid 7708 and name u'Unicorn-38614.exe'
2025-06-24 21:39:35,515 [analyzer] DEBUG: Loaded monitor into process with pid 7136
2025-06-24 21:39:35,515 [analyzer] DEBUG: Loaded monitor into process with pid 5336
2025-06-24 21:39:35,546 [analyzer] INFO: Injected into process with pid 7956 and name u'Unicorn-42374.exe'
2025-06-24 21:39:35,562 [analyzer] INFO: Added new file to list with pid 4792 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11085.exe
2025-06-24 21:39:35,608 [analyzer] INFO: Added new file to list with pid 4444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3280.exe
2025-06-24 21:39:35,703 [analyzer] DEBUG: Loaded monitor into process with pid 7488
2025-06-24 21:39:35,703 [analyzer] INFO: Injected into process with pid 8020 and name u'Unicorn-27951.exe'
2025-06-24 21:39:35,717 [analyzer] DEBUG: Loaded monitor into process with pid 7480
2025-06-24 21:39:35,717 [analyzer] DEBUG: Loaded monitor into process with pid 7448
2025-06-24 21:39:35,717 [analyzer] INFO: Injected into process with pid 8028 and name u'Unicorn-28216.exe'
2025-06-24 21:39:35,750 [analyzer] INFO: Injected into process with pid 8108 and name u'Unicorn-60510.exe'
2025-06-24 21:39:35,750 [analyzer] INFO: Injected into process with pid 8056 and name u'Unicorn-34337.exe'
2025-06-24 21:39:35,750 [analyzer] INFO: Injected into process with pid 8044 and name u'Unicorn-31537.exe'
2025-06-24 21:39:35,765 [analyzer] INFO: Injected into process with pid 8092 and name u'Unicorn-61040.exe'
2025-06-24 21:39:35,780 [analyzer] DEBUG: Loaded monitor into process with pid 7472
2025-06-24 21:39:35,796 [analyzer] DEBUG: Loaded monitor into process with pid 7496
2025-06-24 21:39:35,812 [analyzer] INFO: Added new file to list with pid 3632 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10985.exe
2025-06-24 21:39:35,812 [analyzer] INFO: Added new file to list with pid 4640 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27784.exe
2025-06-24 21:39:35,812 [analyzer] INFO: Added new file to list with pid 2728 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8185.exe
2025-06-24 21:39:35,828 [analyzer] INFO: Added new file to list with pid 4512 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62787.exe
2025-06-24 21:39:35,828 [analyzer] INFO: Added new file to list with pid 4004 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16850.exe
2025-06-24 21:39:35,858 [analyzer] INFO: Added new file to list with pid 1536 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57187.exe
2025-06-24 21:39:35,890 [analyzer] INFO: Added new file to list with pid 328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8715.exe
2025-06-24 21:39:35,953 [analyzer] DEBUG: Loaded monitor into process with pid 7716
2025-06-24 21:39:35,953 [analyzer] INFO: Injected into process with pid 6604 and name u'Unicorn-50396.exe'
2025-06-24 21:39:36,000 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20934.exe
2025-06-24 21:39:36,015 [analyzer] INFO: Added new file to list with pid 4352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4763.exe
2025-06-24 21:39:36,140 [analyzer] DEBUG: Loaded monitor into process with pid 7740
2025-06-24 21:39:36,140 [analyzer] DEBUG: Loaded monitor into process with pid 7732
2025-06-24 21:39:36,140 [analyzer] DEBUG: Loaded monitor into process with pid 7700
2025-06-24 21:39:36,171 [analyzer] DEBUG: Loaded monitor into process with pid 7724
2025-06-24 21:39:36,250 [analyzer] DEBUG: Loaded monitor into process with pid 8028
2025-06-24 21:39:36,296 [analyzer] DEBUG: Loaded monitor into process with pid 7912
2025-06-24 21:39:36,328 [analyzer] DEBUG: Loaded monitor into process with pid 7920
2025-06-24 21:39:36,342 [analyzer] DEBUG: Loaded monitor into process with pid 8056
2025-06-24 21:39:36,358 [analyzer] DEBUG: Loaded monitor into process with pid 8044
2025-06-24 21:39:36,375 [analyzer] DEBUG: Loaded monitor into process with pid 7708
2025-06-24 21:39:36,390 [analyzer] DEBUG: Loaded monitor into process with pid 8020
2025-06-24 21:39:36,405 [analyzer] DEBUG: Loaded monitor into process with pid 8092
2025-06-24 21:39:36,437 [analyzer] DEBUG: Loaded monitor into process with pid 8108
2025-06-24 21:39:36,437 [analyzer] DEBUG: Loaded monitor into process with pid 7956
2025-06-24 21:39:36,467 [analyzer] DEBUG: Loaded monitor into process with pid 6604
2025-06-24 21:39:36,592 [analyzer] INFO: Injected into process with pid 7776 and name u'Unicorn-37728.exe'
2025-06-24 21:39:36,967 [analyzer] INFO: Injected into process with pid 7896 and name u'Unicorn-11085.exe'
2025-06-24 21:39:36,983 [analyzer] INFO: Injected into process with pid 7944 and name u'Unicorn-3280.exe'
2025-06-24 21:39:37,078 [analyzer] INFO: Injected into process with pid 2060 and name u'Unicorn-8185.exe'
2025-06-24 21:39:37,078 [analyzer] INFO: Injected into process with pid 6820 and name u'Unicorn-62787.exe'
2025-06-24 21:39:37,092 [analyzer] INFO: Injected into process with pid 588 and name u'Unicorn-10985.exe'
2025-06-24 21:39:37,092 [analyzer] INFO: Injected into process with pid 8188 and name u'Unicorn-27784.exe'
2025-06-24 21:39:37,125 [analyzer] INFO: Injected into process with pid 6832 and name u'Unicorn-10985.exe'
2025-06-24 21:39:37,140 [analyzer] INFO: Injected into process with pid 7056 and name u'Unicorn-8185.exe'
2025-06-24 21:39:37,421 [analyzer] INFO: Injected into process with pid 7928 and name u'Unicorn-62787.exe'
2025-06-24 21:39:37,421 [analyzer] INFO: Injected into process with pid 124 and name u'Unicorn-62787.exe'
2025-06-24 21:39:37,421 [analyzer] INFO: Injected into process with pid 7068 and name u'Unicorn-10985.exe'
2025-06-24 21:39:37,421 [analyzer] INFO: Injected into process with pid 7392 and name u'Unicorn-10985.exe'
2025-06-24 21:39:37,453 [analyzer] DEBUG: Loaded monitor into process with pid 7776
2025-06-24 21:39:37,453 [analyzer] INFO: Injected into process with pid 7640 and name u'Unicorn-8185.exe'
2025-06-24 21:39:37,453 [analyzer] INFO: Injected into process with pid 7144 and name u'Unicorn-57187.exe'
2025-06-24 21:39:37,453 [analyzer] INFO: Injected into process with pid 7652 and name u'Unicorn-8715.exe'
2025-06-24 21:39:37,453 [analyzer] INFO: Injected into process with pid 8132 and name u'Unicorn-57187.exe'
2025-06-24 21:39:37,453 [analyzer] INFO: Injected into process with pid 7768 and name u'Unicorn-16850.exe'
2025-06-24 21:39:37,530 [analyzer] INFO: Injected into process with pid 8232 and name u'Unicorn-20934.exe'
2025-06-24 21:39:37,530 [analyzer] INFO: Injected into process with pid 8268 and name u'Unicorn-4763.exe'
2025-06-24 21:39:37,530 [analyzer] INFO: Injected into process with pid 8144 and name u'Unicorn-16850.exe'
2025-06-24 21:39:37,562 [analyzer] DEBUG: Loaded monitor into process with pid 7896
2025-06-24 21:39:37,655 [analyzer] DEBUG: Loaded monitor into process with pid 7944
2025-06-24 21:39:37,687 [analyzer] DEBUG: Loaded monitor into process with pid 8188
2025-06-24 21:39:37,717 [analyzer] DEBUG: Loaded monitor into process with pid 6820
2025-06-24 21:39:37,733 [analyzer] DEBUG: Loaded monitor into process with pid 6832
2025-06-24 21:39:37,780 [analyzer] DEBUG: Loaded monitor into process with pid 588
2025-06-24 21:39:37,828 [analyzer] DEBUG: Loaded monitor into process with pid 2060
2025-06-24 21:39:37,828 [analyzer] DEBUG: Loaded monitor into process with pid 7928
2025-06-24 21:39:37,842 [analyzer] DEBUG: Loaded monitor into process with pid 124
2025-06-24 21:39:37,890 [analyzer] DEBUG: Loaded monitor into process with pid 7068
2025-06-24 21:39:37,890 [analyzer] INFO: Added new file to list with pid 5012 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56778.exe
2025-06-24 21:39:37,905 [analyzer] DEBUG: Loaded monitor into process with pid 7056
2025-06-24 21:39:37,921 [analyzer] DEBUG: Loaded monitor into process with pid 7640
2025-06-24 21:39:37,937 [analyzer] DEBUG: Loaded monitor into process with pid 7652
2025-06-24 21:39:37,937 [analyzer] DEBUG: Loaded monitor into process with pid 7144
2025-06-24 21:39:37,983 [analyzer] DEBUG: Loaded monitor into process with pid 8132
2025-06-24 21:39:38,046 [analyzer] DEBUG: Loaded monitor into process with pid 8232
2025-06-24 21:39:38,062 [analyzer] DEBUG: Loaded monitor into process with pid 7768
2025-06-24 21:39:38,062 [analyzer] DEBUG: Loaded monitor into process with pid 8268
2025-06-24 21:39:38,108 [analyzer] DEBUG: Loaded monitor into process with pid 7392
2025-06-24 21:39:38,125 [analyzer] DEBUG: Loaded monitor into process with pid 8144
2025-06-24 21:39:38,858 [analyzer] INFO: Added new file to list with pid 4968 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53078.exe
2025-06-24 21:39:38,905 [analyzer] INFO: Injected into process with pid 8928 and name u'Unicorn-56778.exe'
2025-06-24 21:39:39,078 [analyzer] INFO: Added new file to list with pid 4512 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49470.exe
2025-06-24 21:39:39,265 [analyzer] DEBUG: Loaded monitor into process with pid 8928
2025-06-24 21:39:39,687 [analyzer] INFO: Injected into process with pid 8988 and name u'Unicorn-53078.exe'
2025-06-24 21:39:39,890 [analyzer] INFO: Injected into process with pid 9012 and name u'Unicorn-49470.exe'
2025-06-24 21:39:40,015 [analyzer] INFO: Added new file to list with pid 5068 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16514.exe
2025-06-24 21:39:40,030 [analyzer] DEBUG: Loaded monitor into process with pid 8988
2025-06-24 21:39:40,217 [analyzer] DEBUG: Loaded monitor into process with pid 9012
2025-06-24 21:39:48,562 [analyzer] INFO: Injected into process with pid 9076 and name u'Unicorn-16514.exe'
2025-06-24 21:39:48,905 [analyzer] DEBUG: Loaded monitor into process with pid 9076
2025-06-24 21:40:01,078 [analyzer] INFO: Added new file to list with pid 4120 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12253.exe
2025-06-24 21:40:02,390 [analyzer] INFO: Added new file to list with pid 4248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15086.exe
2025-06-24 21:40:02,405 [analyzer] INFO: Added new file to list with pid 3692 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6421.exe
2025-06-24 21:40:02,405 [analyzer] INFO: Added new file to list with pid 3516 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55423.exe
2025-06-24 21:40:02,437 [analyzer] INFO: Added new file to list with pid 3676 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-41232.exe
2025-06-24 21:40:02,437 [analyzer] INFO: Added new file to list with pid 3468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-41762.exe
2025-06-24 21:40:02,562 [analyzer] INFO: Added new file to list with pid 2728 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24696.exe
2025-06-24 21:40:02,562 [analyzer] INFO: Added new file to list with pid 1356 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-11035.exe
2025-06-24 21:40:02,562 [analyzer] INFO: Added new file to list with pid 3860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19170.exe
2025-06-24 21:40:02,592 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-59507.exe
2025-06-24 21:40:02,608 [analyzer] INFO: Added new file to list with pid 3796 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10505.exe
2025-06-24 21:40:02,625 [analyzer] INFO: Added new file to list with pid 4444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13305.exe
2025-06-24 21:40:02,687 [analyzer] INFO: Added new file to list with pid 4556 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44032.exe
2025-06-24 21:40:02,717 [analyzer] INFO: Added new file to list with pid 3232 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55041.exe
2025-06-24 21:40:02,750 [analyzer] INFO: Added new file to list with pid 4792 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-65107.exe
2025-06-24 21:40:02,750 [analyzer] INFO: Added new file to list with pid 4216 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50162.exe
2025-06-24 21:40:02,780 [analyzer] INFO: Added new file to list with pid 4640 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53906.exe
2025-06-24 21:40:02,828 [analyzer] INFO: Added new file to list with pid 3488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22757.exe
2025-06-24 21:40:03,592 [analyzer] INFO: Added new file to list with pid 3236 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51730.exe
2025-06-24 21:40:05,171 [analyzer] INFO: Injected into process with pid 9176 and name u'Unicorn-12253.exe'
2025-06-24 21:40:05,296 [analyzer] INFO: Added new file to list with pid 5068 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45647.exe
2025-06-24 21:40:05,296 [analyzer] INFO: Added new file to list with pid 4512 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-65247.exe
2025-06-24 21:40:05,796 [analyzer] INFO: Added new file to list with pid 3692 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35770.exe
2025-06-24 21:40:05,812 [analyzer] INFO: Added new file to list with pid 3176 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21579.exe
2025-06-24 21:40:05,858 [analyzer] INFO: Added new file to list with pid 3860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60666.exe
2025-06-24 21:40:05,875 [analyzer] INFO: Added new file to list with pid 2728 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61196.exe
2025-06-24 21:40:05,858 [analyzer] INFO: Added new file to list with pid 1356 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39665.exe
2025-06-24 21:40:05,921 [analyzer] DEBUG: Loaded monitor into process with pid 9176
2025-06-24 21:40:06,015 [analyzer] INFO: Injected into process with pid 9200 and name u'Unicorn-15086.exe'
2025-06-24 21:40:06,046 [analyzer] INFO: Injected into process with pid 9208 and name u'Unicorn-55423.exe'
2025-06-24 21:40:06,062 [analyzer] INFO: Injected into process with pid 7824 and name u'Unicorn-6421.exe'
2025-06-24 21:40:06,140 [analyzer] INFO: Injected into process with pid 7468 and name u'Unicorn-41232.exe'
2025-06-24 21:40:06,155 [analyzer] INFO: Added new file to list with pid 3284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54821.exe
2025-06-24 21:40:06,155 [analyzer] INFO: Added new file to list with pid 4084 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5819.exe
2025-06-24 21:40:06,155 [analyzer] INFO: Added new file to list with pid 3296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5819.exe
2025-06-24 21:40:06,155 [analyzer] INFO: Added new file to list with pid 3276 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54821.exe
2025-06-24 21:40:06,171 [analyzer] INFO: Added new file to list with pid 1972 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45020.exe
2025-06-24 21:40:06,250 [analyzer] INFO: Added new file to list with pid 4792 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8619.exe
2025-06-24 21:40:06,233 [analyzer] INFO: Added new file to list with pid 1160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45020.exe
2025-06-24 21:40:06,250 [analyzer] INFO: Added new file to list with pid 3544 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14484.exe
2025-06-24 21:40:06,233 [analyzer] INFO: Added new file to list with pid 328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45020.exe
2025-06-24 21:40:06,233 [analyzer] INFO: Added new file to list with pid 3232 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-45020.exe
2025-06-24 21:40:06,250 [analyzer] INFO: Added new file to list with pid 3544 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5819.exe
2025-06-24 21:40:06,250 [analyzer] INFO: Added new file to list with pid 3900 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5819.exe
2025-06-24 21:40:06,250 [analyzer] INFO: Added new file to list with pid 4640 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14484.exe
2025-06-24 21:40:06,250 [analyzer] INFO: Added new file to list with pid 4868 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8619.exe
2025-06-24 21:40:06,250 [analyzer] INFO: Added new file to list with pid 3632 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5819.exe
2025-06-24 21:40:06,280 [analyzer] INFO: Added new file to list with pid 3628 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58905.exe
2025-06-24 21:40:06,280 [analyzer] INFO: Added new file to list with pid 3104 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9903.exe
2025-06-24 21:40:06,280 [analyzer] INFO: Added new file to list with pid 3588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58905.exe
2025-06-24 21:40:06,265 [analyzer] INFO: Added new file to list with pid 4600 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14484.exe
2025-06-24 21:40:06,280 [analyzer] INFO: Added new file to list with pid 4648 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43430.exe
2025-06-24 21:40:06,265 [analyzer] INFO: Added new file to list with pid 3448 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5819.exe
2025-06-24 21:40:06,265 [analyzer] INFO: Injected into process with pid 7892 and name u'Unicorn-41232.exe'
2025-06-24 21:40:06,265 [analyzer] INFO: Added new file to list with pid 4072 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58905.exe
2025-06-24 21:40:06,280 [analyzer] INFO: Added new file to list with pid 3984 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54439.exe
2025-06-24 21:40:06,250 [analyzer] INFO: Injected into process with pid 8100 and name u'Unicorn-41762.exe'
2025-06-24 21:40:06,280 [analyzer] INFO: Added new file to list with pid 4732 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12703.exe
2025-06-24 21:40:06,280 [analyzer] INFO: Added new file to list with pid 3892 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9903.exe
2025-06-24 21:40:06,280 [analyzer] INFO: Added new file to list with pid 1932 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49104.exe
2025-06-24 21:40:06,280 [analyzer] INFO: Added new file to list with pid 4444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18568.exe
2025-06-24 21:40:06,280 [analyzer] INFO: Added new file to list with pid 3796 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9903.exe
2025-06-24 21:40:06,280 [analyzer] INFO: Injected into process with pid 8356 and name u'Unicorn-50162.exe'
2025-06-24 21:40:06,280 [analyzer] INFO: Added new file to list with pid 4936 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12703.exe
2025-06-24 21:40:06,280 [analyzer] INFO: Added new file to list with pid 3352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58905.exe
2025-06-24 21:40:06,280 [analyzer] INFO: Added new file to list with pid 3796 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58905.exe
2025-06-24 21:40:06,296 [analyzer] INFO: Injected into process with pid 8332 and name u'Unicorn-11035.exe'
2025-06-24 21:40:06,296 [analyzer] INFO: Injected into process with pid 8472 and name u'Unicorn-65107.exe'
2025-06-24 21:40:06,296 [analyzer] INFO: Injected into process with pid 8400 and name u'Unicorn-11035.exe'
2025-06-24 21:40:06,296 [analyzer] INFO: Injected into process with pid 8420 and name u'Unicorn-11035.exe'
2025-06-24 21:40:06,296 [analyzer] INFO: Injected into process with pid 8252 and name u'Unicorn-44032.exe'
2025-06-24 21:40:06,296 [analyzer] INFO: Injected into process with pid 8388 and name u'Unicorn-11035.exe'
2025-06-24 21:40:06,296 [analyzer] INFO: Injected into process with pid 8520 and name u'Unicorn-55041.exe'
2025-06-24 21:40:06,296 [analyzer] INFO: Injected into process with pid 8276 and name u'Unicorn-24696.exe'
2025-06-24 21:40:06,296 [analyzer] INFO: Injected into process with pid 8196 and name u'Unicorn-59507.exe'
2025-06-24 21:40:06,342 [analyzer] INFO: Injected into process with pid 8652 and name u'Unicorn-59507.exe'
2025-06-24 21:40:06,358 [analyzer] INFO: Injected into process with pid 7848 and name u'Unicorn-59507.exe'
2025-06-24 21:40:06,358 [analyzer] INFO: Injected into process with pid 8456 and name u'Unicorn-59507.exe'
2025-06-24 21:40:06,358 [analyzer] INFO: Injected into process with pid 8368 and name u'Unicorn-59507.exe'
2025-06-24 21:40:06,375 [analyzer] INFO: Injected into process with pid 8340 and name u'Unicorn-59507.exe'
2025-06-24 21:40:06,390 [analyzer] INFO: Injected into process with pid 8444 and name u'Unicorn-19170.exe'
2025-06-24 21:40:06,390 [analyzer] INFO: Injected into process with pid 8700 and name u'Unicorn-59507.exe'
2025-06-24 21:40:06,405 [analyzer] INFO: Injected into process with pid 8408 and name u'Unicorn-59507.exe'
2025-06-24 21:40:06,437 [analyzer] DEBUG: Loaded monitor into process with pid 9200
2025-06-24 21:40:06,500 [analyzer] DEBUG: Loaded monitor into process with pid 9208
2025-06-24 21:40:06,515 [analyzer] DEBUG: Loaded monitor into process with pid 7468
2025-06-24 21:40:06,530 [analyzer] INFO: Injected into process with pid 8688 and name u'Unicorn-59507.exe'
2025-06-24 21:40:06,530 [analyzer] DEBUG: Loaded monitor into process with pid 7824
2025-06-24 21:40:06,546 [analyzer] INFO: Injected into process with pid 8488 and name u'Unicorn-59507.exe'
2025-06-24 21:40:06,655 [analyzer] INFO: Injected into process with pid 8372 and name u'Unicorn-53906.exe'
2025-06-24 21:40:06,655 [analyzer] INFO: Injected into process with pid 8412 and name u'Unicorn-59507.exe'
2025-06-24 21:40:06,655 [analyzer] INFO: Injected into process with pid 8480 and name u'Unicorn-10505.exe'
2025-06-24 21:40:06,717 [analyzer] INFO: Injected into process with pid 8452 and name u'Unicorn-13305.exe'
2025-06-24 21:40:06,765 [analyzer] INFO: Injected into process with pid 8508 and name u'Unicorn-22757.exe'
2025-06-24 21:40:06,796 [analyzer] INFO: Injected into process with pid 9260 and name u'Unicorn-51730.exe'
2025-06-24 21:40:08,328 [analyzer] DEBUG: Loaded monitor into process with pid 7892
2025-06-24 21:40:08,342 [analyzer] DEBUG: Loaded monitor into process with pid 8276
2025-06-24 21:40:08,358 [analyzer] DEBUG: Loaded monitor into process with pid 8332
2025-06-24 21:40:08,421 [analyzer] DEBUG: Loaded monitor into process with pid 8472
2025-06-24 21:40:08,592 [analyzer] INFO: Injected into process with pid 9456 and name u'Unicorn-45647.exe'
2025-06-24 21:40:08,640 [analyzer] DEBUG: Loaded monitor into process with pid 8356
2025-06-24 21:40:08,655 [analyzer] DEBUG: Loaded monitor into process with pid 8368
2025-06-24 21:40:08,687 [analyzer] DEBUG: Loaded monitor into process with pid 8520
2025-06-24 21:40:08,687 [analyzer] INFO: Injected into process with pid 9464 and name u'Unicorn-45647.exe'
2025-06-24 21:40:08,687 [analyzer] INFO: Injected into process with pid 9440 and name u'Unicorn-65247.exe'
2025-06-24 21:40:08,703 [analyzer] INFO: Injected into process with pid 9448 and name u'Unicorn-45647.exe'
2025-06-24 21:40:08,733 [analyzer] DEBUG: Loaded monitor into process with pid 8340
2025-06-24 21:40:08,765 [analyzer] DEBUG: Loaded monitor into process with pid 8372
2025-06-24 21:40:08,765 [analyzer] DEBUG: Loaded monitor into process with pid 8196
2025-06-24 21:40:08,780 [analyzer] DEBUG: Loaded monitor into process with pid 8444
2025-06-24 21:40:08,796 [analyzer] DEBUG: Loaded monitor into process with pid 8700
2025-06-24 21:40:08,796 [analyzer] DEBUG: Loaded monitor into process with pid 9260
2025-06-24 21:40:08,812 [analyzer] DEBUG: Loaded monitor into process with pid 8480
2025-06-24 21:40:08,828 [analyzer] DEBUG: Loaded monitor into process with pid 8688
2025-06-24 21:40:08,842 [analyzer] DEBUG: Loaded monitor into process with pid 8452
2025-06-24 21:40:08,858 [analyzer] DEBUG: Loaded monitor into process with pid 8388
2025-06-24 21:40:08,875 [analyzer] DEBUG: Loaded monitor into process with pid 8652
2025-06-24 21:40:08,890 [analyzer] DEBUG: Loaded monitor into process with pid 8420
2025-06-24 21:40:08,890 [analyzer] DEBUG: Loaded monitor into process with pid 7848
2025-06-24 21:40:08,890 [analyzer] INFO: Injected into process with pid 9700 and name u'Unicorn-21579.exe'
2025-06-24 21:40:08,905 [analyzer] DEBUG: Loaded monitor into process with pid 8252
2025-06-24 21:40:08,921 [analyzer] DEBUG: Loaded monitor into process with pid 8100
2025-06-24 21:40:08,937 [analyzer] DEBUG: Loaded monitor into process with pid 8508
2025-06-24 21:40:08,953 [analyzer] DEBUG: Loaded monitor into process with pid 8408
2025-06-24 21:40:08,967 [analyzer] INFO: Injected into process with pid 9776 and name u'Unicorn-39665.exe'
2025-06-24 21:40:08,967 [analyzer] INFO: Injected into process with pid 9724 and name u'Unicorn-60666.exe'
2025-06-24 21:40:08,967 [analyzer] DEBUG: Loaded monitor into process with pid 8488
2025-06-24 21:40:08,967 [analyzer] INFO: Injected into process with pid 9760 and name u'Unicorn-61196.exe'
2025-06-24 21:40:08,983 [analyzer] INFO: Injected into process with pid 9672 and name u'Unicorn-35770.exe'
2025-06-24 21:40:09,015 [analyzer] DEBUG: Loaded monitor into process with pid 8412
2025-06-24 21:40:09,030 [analyzer] INFO: Added new file to list with pid 3616 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25632.exe
2025-06-24 21:40:09,046 [analyzer] DEBUG: Loaded monitor into process with pid 8400
2025-06-24 21:40:09,125 [analyzer] DEBUG: Loaded monitor into process with pid 8456
2025-06-24 21:40:09,203 [analyzer] DEBUG: Loaded monitor into process with pid 9456
2025-06-24 21:40:09,250 [analyzer] INFO: Added new file to list with pid 2656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28154.exe
2025-06-24 21:40:09,280 [analyzer] DEBUG: Loaded monitor into process with pid 9440
2025-06-24 21:40:09,280 [analyzer] INFO: Injected into process with pid 10004 and name u'Unicorn-54821.exe'
2025-06-24 21:40:09,342 [analyzer] DEBUG: Loaded monitor into process with pid 9448
2025-06-24 21:40:09,342 [analyzer] INFO: Injected into process with pid 10092 and name u'Unicorn-14484.exe'
2025-06-24 21:40:09,342 [analyzer] INFO: Injected into process with pid 10072 and name u'Unicorn-45020.exe'
2025-06-24 21:40:09,390 [analyzer] DEBUG: Loaded monitor into process with pid 9776
2025-06-24 21:40:09,390 [analyzer] DEBUG: Loaded monitor into process with pid 9700
2025-06-24 21:40:09,390 [analyzer] INFO: Injected into process with pid 10104 and name u'Unicorn-43430.exe'
2025-06-24 21:40:09,390 [analyzer] INFO: Injected into process with pid 10136 and name u'Unicorn-18568.exe'
2025-06-24 21:40:09,405 [analyzer] DEBUG: Loaded monitor into process with pid 9464
2025-06-24 21:40:09,405 [analyzer] INFO: Injected into process with pid 10128 and name u'Unicorn-49104.exe'
2025-06-24 21:40:09,405 [analyzer] INFO: Injected into process with pid 10120 and name u'Unicorn-54439.exe'
2025-06-24 21:40:09,405 [analyzer] INFO: Injected into process with pid 10084 and name u'Unicorn-8619.exe'
2025-06-24 21:40:09,437 [analyzer] DEBUG: Loaded monitor into process with pid 9672
2025-06-24 21:40:09,437 [analyzer] INFO: Added new file to list with pid 3284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9639.exe
2025-06-24 21:40:09,437 [analyzer] INFO: Injected into process with pid 10112 and name u'Unicorn-5819.exe'
2025-06-24 21:40:09,437 [analyzer] INFO: Injected into process with pid 10144 and name u'Unicorn-9903.exe'
2025-06-24 21:40:09,453 [analyzer] DEBUG: Loaded monitor into process with pid 9760
2025-06-24 21:40:09,453 [analyzer] INFO: Injected into process with pid 10160 and name u'Unicorn-58905.exe'
2025-06-24 21:40:09,453 [analyzer] INFO: Injected into process with pid 10152 and name u'Unicorn-12703.exe'
2025-06-24 21:40:09,483 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48534.exe
2025-06-24 21:40:09,483 [analyzer] INFO: Added new file to list with pid 3144 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48534.exe
2025-06-24 21:40:09,483 [analyzer] INFO: Added new file to list with pid 3220 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48534.exe
2025-06-24 21:40:09,500 [analyzer] DEBUG: Loaded monitor into process with pid 9724
2025-06-24 21:40:09,546 [analyzer] INFO: Added new file to list with pid 4084 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35552.exe
2025-06-24 21:40:09,608 [analyzer] INFO: Added new file to list with pid 3296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16886.exe
2025-06-24 21:40:09,625 [analyzer] INFO: Added new file to list with pid 1972 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50180.exe
2025-06-24 21:40:09,655 [analyzer] INFO: Added new file to list with pid 4792 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50255.exe
2025-06-24 21:40:09,750 [analyzer] DEBUG: Loaded monitor into process with pid 10004
2025-06-24 21:40:09,796 [analyzer] DEBUG: Loaded monitor into process with pid 10092
2025-06-24 21:40:09,842 [analyzer] DEBUG: Loaded monitor into process with pid 10128
2025-06-24 21:40:09,875 [analyzer] DEBUG: Loaded monitor into process with pid 10072
2025-06-24 21:40:09,905 [analyzer] DEBUG: Loaded monitor into process with pid 10120
2025-06-24 21:40:09,921 [analyzer] DEBUG: Loaded monitor into process with pid 10104
2025-06-24 21:40:09,937 [analyzer] INFO: Added new file to list with pid 4640 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47812.exe
2025-06-24 21:40:09,953 [analyzer] INFO: Added new file to list with pid 3104 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31276.exe
2025-06-24 21:40:09,967 [analyzer] INFO: Added new file to list with pid 3588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48342.exe
2025-06-24 21:40:09,967 [analyzer] INFO: Added new file to list with pid 3632 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31276.exe
2025-06-24 21:40:09,967 [analyzer] INFO: Added new file to list with pid 4328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47812.exe
2025-06-24 21:40:09,967 [analyzer] INFO: Added new file to list with pid 3900 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31276.exe
2025-06-24 21:40:09,967 [analyzer] INFO: Added new file to list with pid 328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25676.exe
2025-06-24 21:40:09,967 [analyzer] INFO: Added new file to list with pid 4072 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48342.exe
2025-06-24 21:40:09,967 [analyzer] INFO: Added new file to list with pid 3628 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48342.exe
2025-06-24 21:40:09,967 [analyzer] DEBUG: Loaded monitor into process with pid 10152
2025-06-24 21:40:09,983 [analyzer] INFO: Added new file to list with pid 1160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25676.exe
2025-06-24 21:40:09,983 [analyzer] INFO: Added new file to list with pid 3544 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31276.exe
2025-06-24 21:40:09,983 [analyzer] DEBUG: Loaded monitor into process with pid 10084
2025-06-24 21:40:10,000 [analyzer] DEBUG: Loaded monitor into process with pid 10112
2025-06-24 21:40:10,030 [analyzer] DEBUG: Loaded monitor into process with pid 10144
2025-06-24 21:40:10,046 [analyzer] INFO: Added new file to list with pid 4732 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60561.exe
2025-06-24 21:40:10,046 [analyzer] INFO: Added new file to list with pid 3892 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35360.exe
2025-06-24 21:40:10,046 [analyzer] INFO: Added new file to list with pid 3352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52426.exe
2025-06-24 21:40:10,062 [analyzer] DEBUG: Loaded monitor into process with pid 10136
2025-06-24 21:40:10,092 [analyzer] DEBUG: Loaded monitor into process with pid 10160
2025-06-24 21:40:10,187 [analyzer] INFO: Injected into process with pid 9588 and name u'Unicorn-25632.exe'
2025-06-24 21:40:10,717 [analyzer] INFO: Injected into process with pid 9964 and name u'Unicorn-28154.exe'
2025-06-24 21:40:10,905 [analyzer] DEBUG: Loaded monitor into process with pid 9588
2025-06-24 21:40:10,983 [analyzer] INFO: Injected into process with pid 9876 and name u'Unicorn-35552.exe'
2025-06-24 21:40:10,983 [analyzer] INFO: Injected into process with pid 9796 and name u'Unicorn-9639.exe'
2025-06-24 21:40:10,983 [analyzer] INFO: Injected into process with pid 9844 and name u'Unicorn-48534.exe'
2025-06-24 21:40:11,125 [analyzer] INFO: Injected into process with pid 1836 and name u'Unicorn-16886.exe'
2025-06-24 21:40:11,125 [analyzer] INFO: Injected into process with pid 10064 and name u'Unicorn-50255.exe'
2025-06-24 21:40:11,125 [analyzer] INFO: Injected into process with pid 10020 and name u'Unicorn-50180.exe'
2025-06-24 21:40:11,187 [analyzer] DEBUG: Loaded monitor into process with pid 9964
2025-06-24 21:40:11,342 [analyzer] INFO: Injected into process with pid 8748 and name u'Unicorn-47812.exe'
2025-06-24 21:40:11,342 [analyzer] INFO: Injected into process with pid 9544 and name u'Unicorn-60561.exe'
2025-06-24 21:40:11,358 [analyzer] INFO: Injected into process with pid 9088 and name u'Unicorn-25676.exe'
2025-06-24 21:40:11,358 [analyzer] INFO: Injected into process with pid 9936 and name u'Unicorn-52426.exe'
2025-06-24 21:40:11,358 [analyzer] INFO: Injected into process with pid 9116 and name u'Unicorn-31276.exe'
2025-06-24 21:40:11,375 [analyzer] INFO: Injected into process with pid 9028 and name u'Unicorn-48342.exe'
2025-06-24 21:40:11,375 [analyzer] INFO: Injected into process with pid 9644 and name u'Unicorn-35360.exe'
2025-06-24 21:40:11,405 [analyzer] DEBUG: Loaded monitor into process with pid 9796
2025-06-24 21:40:11,421 [analyzer] DEBUG: Loaded monitor into process with pid 9844
2025-06-24 21:40:11,467 [analyzer] DEBUG: Loaded monitor into process with pid 9876
2025-06-24 21:40:11,562 [analyzer] DEBUG: Loaded monitor into process with pid 1836
2025-06-24 21:40:11,578 [analyzer] DEBUG: Loaded monitor into process with pid 10020
2025-06-24 21:40:11,640 [analyzer] DEBUG: Loaded monitor into process with pid 10064
2025-06-24 21:40:11,765 [analyzer] DEBUG: Loaded monitor into process with pid 9936
2025-06-24 21:40:11,842 [analyzer] DEBUG: Loaded monitor into process with pid 8748
2025-06-24 21:40:11,875 [analyzer] DEBUG: Loaded monitor into process with pid 9116
2025-06-24 21:40:11,905 [analyzer] DEBUG: Loaded monitor into process with pid 9088
2025-06-24 21:40:11,967 [analyzer] DEBUG: Loaded monitor into process with pid 9544
2025-06-24 21:40:11,967 [analyzer] DEBUG: Loaded monitor into process with pid 9644
2025-06-24 21:40:12,030 [analyzer] DEBUG: Loaded monitor into process with pid 9028
2025-06-24 21:40:12,703 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60635.exe
2025-06-24 21:40:12,703 [analyzer] INFO: Added new file to list with pid 3144 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60635.exe
2025-06-24 21:40:13,217 [analyzer] INFO: Added new file to list with pid 328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1614.exe
2025-06-24 21:40:13,233 [analyzer] INFO: Added new file to list with pid 3588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30485.exe
2025-06-24 21:40:13,233 [analyzer] INFO: Added new file to list with pid 4072 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30485.exe
2025-06-24 21:40:13,233 [analyzer] INFO: Added new file to list with pid 3632 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52016.exe
2025-06-24 21:40:13,233 [analyzer] INFO: Added new file to list with pid 3900 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52016.exe
2025-06-24 21:40:13,233 [analyzer] INFO: Added new file to list with pid 3104 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52016.exe
2025-06-24 21:40:13,233 [analyzer] INFO: Added new file to list with pid 4640 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34950.exe
2025-06-24 21:40:13,717 [analyzer] INFO: Injected into process with pid 10548 and name u'Unicorn-60635.exe'
2025-06-24 21:40:14,030 [analyzer] INFO: Injected into process with pid 10580 and name u'Unicorn-1614.exe'
2025-06-24 21:40:14,030 [analyzer] INFO: Injected into process with pid 10604 and name u'Unicorn-52016.exe'
2025-06-24 21:40:14,046 [analyzer] DEBUG: Loaded monitor into process with pid 10548
2025-06-24 21:40:14,046 [analyzer] INFO: Injected into process with pid 10596 and name u'Unicorn-34950.exe'
2025-06-24 21:40:14,046 [analyzer] INFO: Injected into process with pid 10588 and name u'Unicorn-30485.exe'
2025-06-24 21:40:14,342 [analyzer] DEBUG: Loaded monitor into process with pid 10580
2025-06-24 21:40:14,375 [analyzer] DEBUG: Loaded monitor into process with pid 10596
2025-06-24 21:40:14,405 [analyzer] DEBUG: Loaded monitor into process with pid 10604
2025-06-24 21:40:14,421 [analyzer] DEBUG: Loaded monitor into process with pid 10588
2025-06-24 21:40:15,842 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46338.exe
2025-06-24 21:40:16,250 [analyzer] INFO: Injected into process with pid 10796 and name u'Unicorn-46338.exe'
2025-06-24 21:40:16,342 [analyzer] INFO: Added new file to list with pid 3588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1858.exe
2025-06-24 21:40:16,342 [analyzer] INFO: Added new file to list with pid 3632 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7193.exe
2025-06-24 21:40:16,342 [analyzer] INFO: Added new file to list with pid 3900 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7193.exe
2025-06-24 21:40:16,421 [analyzer] INFO: Added new file to list with pid 4372 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14565.exe
2025-06-24 21:40:16,453 [analyzer] DEBUG: Loaded monitor into process with pid 10796
2025-06-24 21:40:17,217 [analyzer] INFO: Injected into process with pid 10856 and name u'Unicorn-7193.exe'
2025-06-24 21:40:17,217 [analyzer] INFO: Injected into process with pid 10848 and name u'Unicorn-7193.exe'
2025-06-24 21:40:17,217 [analyzer] INFO: Injected into process with pid 10840 and name u'Unicorn-1858.exe'
2025-06-24 21:40:17,312 [analyzer] INFO: Injected into process with pid 10916 and name u'Unicorn-14565.exe'
2025-06-24 21:40:17,467 [analyzer] DEBUG: Loaded monitor into process with pid 10840
2025-06-24 21:40:17,530 [analyzer] DEBUG: Loaded monitor into process with pid 10848
2025-06-24 21:40:17,546 [analyzer] DEBUG: Loaded monitor into process with pid 10916
2025-06-24 21:40:17,578 [analyzer] DEBUG: Loaded monitor into process with pid 10856
2025-06-24 21:40:19,312 [analyzer] INFO: Added new file to list with pid 4120 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14326.exe
2025-06-24 21:40:20,375 [analyzer] INFO: Added new file to list with pid 4004 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2312.exe
2025-06-24 21:40:20,375 [analyzer] INFO: Added new file to list with pid 3516 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19377.exe
2025-06-24 21:40:20,375 [analyzer] INFO: Added new file to list with pid 3388 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2312.exe
2025-06-24 21:40:20,375 [analyzer] INFO: Added new file to list with pid 4248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18847.exe
2025-06-24 21:40:20,921 [analyzer] INFO: Added new file to list with pid 3468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29149.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 1740 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54572.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 1536 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8537.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 3436 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54572.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 4352 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54042.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 3676 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2888.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 4556 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62707.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 4052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33041.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 3756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-13002.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 3636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30068.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 2480 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54572.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 4756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56842.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 1944 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54572.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54572.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 3140 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54572.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 2220 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33041.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 3052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54572.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 2496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30068.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 4052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54572.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 2804 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33041.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 172 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3202.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30068.exe
2025-06-24 21:40:21,546 [analyzer] INFO: Added new file to list with pid 4216 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43106.exe
2025-06-24 21:40:22,015 [analyzer] INFO: Added new file to list with pid 4344 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5722.exe
2025-06-24 21:40:22,015 [analyzer] INFO: Added new file to list with pid 1784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-20891.exe
2025-06-24 21:40:22,015 [analyzer] INFO: Added new file to list with pid 4344 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63124.exe
2025-06-24 21:40:22,342 [analyzer] INFO: Injected into process with pid 11024 and name u'Unicorn-14326.exe'
2025-06-24 21:40:23,750 [analyzer] INFO: Added new file to list with pid 3236 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53241.exe
2025-06-24 21:40:23,812 [analyzer] INFO: Added new file to list with pid 4512 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53056.exe
2025-06-24 21:40:23,828 [analyzer] INFO: Added new file to list with pid 5012 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55856.exe
2025-06-24 21:40:23,828 [analyzer] INFO: Added new file to list with pid 5068 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55856.exe
2025-06-24 21:40:23,828 [analyzer] INFO: Added new file to list with pid 1356 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26720.exe
2025-06-24 21:40:23,828 [analyzer] INFO: Added new file to list with pid 2728 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32055.exe
2025-06-24 21:40:23,828 [analyzer] INFO: Added new file to list with pid 3860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36520.exe
2025-06-24 21:40:23,842 [analyzer] INFO: Added new file to list with pid 3692 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53586.exe
2025-06-24 21:40:23,875 [analyzer] INFO: Added new file to list with pid 4968 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25321.exe
2025-06-24 21:40:23,875 [analyzer] INFO: Added new file to list with pid 3176 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5986.exe
2025-06-24 21:40:24,078 [analyzer] DEBUG: Loaded monitor into process with pid 11024
2025-06-24 21:40:24,187 [analyzer] INFO: Added new file to list with pid 3984 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-37602.exe
2025-06-24 21:40:24,171 [analyzer] INFO: Added new file to list with pid 3232 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33634.exe
2025-06-24 21:40:24,187 [analyzer] INFO: Added new file to list with pid 4600 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-29127.exe
2025-06-24 21:40:24,187 [analyzer] INFO: Added new file to list with pid 3448 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47402.exe
2025-06-24 21:40:24,187 [analyzer] INFO: Added new file to list with pid 3276 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64468.exe
2025-06-24 21:40:24,187 [analyzer] INFO: Added new file to list with pid 4568 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-25230.exe
2025-06-24 21:40:24,187 [analyzer] INFO: Added new file to list with pid 4648 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7066.exe
2025-06-24 21:40:24,187 [analyzer] INFO: Added new file to list with pid 4868 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7066.exe
2025-06-24 21:40:24,187 [analyzer] INFO: Added new file to list with pid 4444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63938.exe
2025-06-24 21:40:24,203 [analyzer] INFO: Added new file to list with pid 4004 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64468.exe
2025-06-24 21:40:24,312 [analyzer] INFO: Added new file to list with pid 4936 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50045.exe
2025-06-24 21:40:24,312 [analyzer] INFO: Added new file to list with pid 3796 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-41910.exe
2025-06-24 21:40:24,328 [analyzer] INFO: Added new file to list with pid 1932 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19244.exe
2025-06-24 21:40:24,342 [analyzer] INFO: Added new file to list with pid 3712 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24844.exe
2025-06-24 21:40:24,500 [analyzer] INFO: Injected into process with pid 11060 and name u'Unicorn-2312.exe'
2025-06-24 21:40:24,500 [analyzer] INFO: Injected into process with pid 11052 and name u'Unicorn-19377.exe'
2025-06-24 21:40:24,500 [analyzer] INFO: Injected into process with pid 11068 and name u'Unicorn-18847.exe'
2025-06-24 21:40:24,562 [analyzer] INFO: Added new file to list with pid 4620 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40196.exe
2025-06-24 21:40:24,655 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11348,11352,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:40:24,780 [analyzer] INFO: Injected into process with pid 11132 and name u'Unicorn-29149.exe'
2025-06-24 21:40:24,780 [analyzer] INFO: Added new file to list with pid 3616 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60979.exe
2025-06-24 21:40:24,842 [analyzer] INFO: Added new file to list with pid 2656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16054.exe
2025-06-24 21:40:24,905 [analyzer] INFO: Injected into process with pid 11148 and name u'Unicorn-8537.exe'
2025-06-24 21:40:24,905 [analyzer] INFO: Injected into process with pid 11180 and name u'Unicorn-13002.exe'
2025-06-24 21:40:24,905 [analyzer] INFO: Injected into process with pid 11188 and name u'Unicorn-56842.exe'
2025-06-24 21:40:24,905 [analyzer] INFO: Injected into process with pid 11164 and name u'Unicorn-2888.exe'
2025-06-24 21:40:24,921 [analyzer] INFO: Injected into process with pid 11172 and name u'Unicorn-62707.exe'
2025-06-24 21:40:24,921 [analyzer] INFO: Injected into process with pid 11156 and name u'Unicorn-54042.exe'
2025-06-24 21:40:24,937 [analyzer] INFO: Added new file to list with pid 3220 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10073.exe
2025-06-24 21:40:25,000 [analyzer] INFO: Added new file to list with pid 3284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44883.exe
2025-06-24 21:40:25,000 [analyzer] INFO: Added new file to list with pid 4084 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-35688.exe
2025-06-24 21:40:25,000 [analyzer] INFO: Injected into process with pid 11228 and name u'Unicorn-43106.exe'
2025-06-24 21:40:25,000 [analyzer] INFO: Injected into process with pid 11196 and name u'Unicorn-33041.exe'
2025-06-24 21:40:25,062 [analyzer] INFO: Injected into process with pid 11220 and name u'Unicorn-30068.exe'
2025-06-24 21:40:25,062 [analyzer] INFO: Injected into process with pid 11212 and name u'Unicorn-3202.exe'
2025-06-24 21:40:25,078 [analyzer] INFO: Injected into process with pid 11204 and name u'Unicorn-54572.exe'
2025-06-24 21:40:25,092 [analyzer] INFO: Injected into process with pid 9860 and name u'Unicorn-63124.exe'
2025-06-24 21:40:25,092 [analyzer] INFO: Injected into process with pid 9748 and name u'Unicorn-5722.exe'
2025-06-24 21:40:25,092 [analyzer] INFO: Injected into process with pid 9804 and name u'Unicorn-20891.exe'
2025-06-24 21:40:25,108 [analyzer] DEBUG: Loaded monitor into process with pid 11068
2025-06-24 21:40:25,125 [analyzer] DEBUG: Loaded monitor into process with pid 11060
2025-06-24 21:40:25,155 [analyzer] DEBUG: Loaded monitor into process with pid 11052
2025-06-24 21:40:25,467 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18817.exe
2025-06-24 21:40:25,483 [analyzer] INFO: Added new file to list with pid 1944 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18817.exe
2025-06-24 21:40:25,483 [analyzer] INFO: Added new file to list with pid 2496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53627.exe
2025-06-24 21:40:25,483 [analyzer] INFO: Added new file to list with pid 3140 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14733.exe
2025-06-24 21:40:25,483 [analyzer] INFO: Added new file to list with pid 3636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14733.exe
2025-06-24 21:40:25,483 [analyzer] INFO: Added new file to list with pid 2220 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9398.exe
2025-06-24 21:40:25,483 [analyzer] INFO: Added new file to list with pid 3436 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14733.exe
2025-06-24 21:40:25,500 [analyzer] INFO: Added new file to list with pid 4052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48292.exe
2025-06-24 21:40:25,562 [analyzer] DEBUG: Loaded monitor into process with pid 11132
2025-06-24 21:40:25,608 [analyzer] INFO: Added new file to list with pid 3628 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26985.exe
2025-06-24 21:40:25,640 [analyzer] INFO: Added new file to list with pid 3892 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48516.exe
2025-06-24 21:40:25,640 [analyzer] INFO: Added new file to list with pid 4328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-724.exe
2025-06-24 21:40:25,640 [analyzer] INFO: Added new file to list with pid 3296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17789.exe
2025-06-24 21:40:25,640 [analyzer] INFO: Added new file to list with pid 4792 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47986.exe
2025-06-24 21:40:25,640 [analyzer] INFO: Added new file to list with pid 1972 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63651.exe
2025-06-24 21:40:25,640 [analyzer] INFO: Added new file to list with pid 1160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32925.exe
2025-06-24 21:40:25,655 [analyzer] INFO: Added new file to list with pid 4732 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47986.exe
2025-06-24 21:40:25,655 [analyzer] INFO: Added new file to list with pid 3544 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17789.exe
2025-06-24 21:40:25,733 [analyzer] DEBUG: Loaded monitor into process with pid 11188
2025-06-24 21:40:25,765 [analyzer] DEBUG: Loaded monitor into process with pid 11180
2025-06-24 21:40:25,765 [analyzer] INFO: Injected into process with pid 10356 and name u'Unicorn-53241.exe'
2025-06-24 21:40:25,796 [analyzer] DEBUG: Loaded monitor into process with pid 11164
2025-06-24 21:40:25,842 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11932,11936,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:40:25,842 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11964,11968,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:40:25,858 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12028,12032,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:40:25,875 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12040,12044,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:40:25,875 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12016,12020,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:40:25,875 [analyzer] INFO: Injected into process with pid 10564 and name u'Unicorn-55856.exe'
2025-06-24 21:40:25,875 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12048,12052,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:40:25,875 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12056,12060,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:40:25,890 [analyzer] INFO: Injected into process with pid 1396 and name u'Unicorn-36520.exe'
2025-06-24 21:40:25,890 [analyzer] INFO: Injected into process with pid 10560 and name u'Unicorn-26720.exe'
2025-06-24 21:40:25,905 [analyzer] INFO: Injected into process with pid 10676 and name u'Unicorn-32055.exe'
2025-06-24 21:40:25,905 [analyzer] INFO: Injected into process with pid 5328 and name u'Unicorn-53056.exe'
2025-06-24 21:40:25,905 [analyzer] INFO: Injected into process with pid 2644 and name u'Unicorn-53586.exe'
2025-06-24 21:40:25,953 [analyzer] INFO: Injected into process with pid 3856 and name u'Unicorn-25321.exe'
2025-06-24 21:40:26,000 [analyzer] INFO: Injected into process with pid 2556 and name u'Unicorn-5986.exe'
2025-06-24 21:40:26,405 [analyzer] INFO: Injected into process with pid 9152 and name u'Unicorn-33634.exe'
2025-06-24 21:40:26,453 [analyzer] INFO: Injected into process with pid 11124 and name u'Unicorn-63938.exe'
2025-06-24 21:40:26,453 [analyzer] INFO: Injected into process with pid 11240 and name u'Unicorn-64468.exe'
2025-06-24 21:40:26,453 [analyzer] INFO: Injected into process with pid 10320 and name u'Unicorn-19244.exe'
2025-06-24 21:40:26,453 [analyzer] INFO: Injected into process with pid 11260 and name u'Unicorn-37602.exe'
2025-06-24 21:40:26,453 [analyzer] INFO: Injected into process with pid 10316 and name u'Unicorn-24844.exe'
2025-06-24 21:40:26,453 [analyzer] INFO: Injected into process with pid 11120 and name u'Unicorn-7066.exe'
2025-06-24 21:40:26,453 [analyzer] INFO: Injected into process with pid 11088 and name u'Unicorn-47402.exe'
2025-06-24 21:40:26,453 [analyzer] INFO: Injected into process with pid 11080 and name u'Unicorn-29127.exe'
2025-06-24 21:40:26,453 [analyzer] INFO: Injected into process with pid 11116 and name u'Unicorn-25230.exe'
2025-06-24 21:40:26,467 [analyzer] INFO: Injected into process with pid 10252 and name u'Unicorn-50045.exe'
2025-06-24 21:40:26,467 [analyzer] INFO: Injected into process with pid 9560 and name u'Unicorn-41910.exe'
2025-06-24 21:40:27,000 [analyzer] INFO: Added new file to list with pid 3236 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44624.exe
2025-06-24 21:40:27,030 [analyzer] INFO: Injected into process with pid 11412 and name u'Unicorn-60979.exe'
2025-06-24 21:40:27,062 [analyzer] INFO: Injected into process with pid 11448 and name u'Unicorn-16054.exe'
2025-06-24 21:40:27,108 [analyzer] INFO: Injected into process with pid 11544 and name u'Unicorn-10073.exe'
2025-06-24 21:40:27,140 [analyzer] INFO: Injected into process with pid 11576 and name u'Unicorn-44883.exe'
2025-06-24 21:40:27,155 [analyzer] INFO: Injected into process with pid 11584 and name u'Unicorn-35688.exe'
2025-06-24 21:40:27,187 [analyzer] INFO: Added new file to list with pid 5012 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12302.exe
2025-06-24 21:40:27,296 [analyzer] INFO: Injected into process with pid 11768 and name u'Unicorn-53627.exe'
2025-06-24 21:40:27,342 [analyzer] INFO: Injected into process with pid 11800 and name u'Unicorn-48292.exe'
2025-06-24 21:40:27,342 [analyzer] INFO: Injected into process with pid 11784 and name u'Unicorn-53627.exe'
2025-06-24 21:40:27,342 [analyzer] INFO: Injected into process with pid 11756 and name u'Unicorn-18817.exe'
2025-06-24 21:40:27,358 [analyzer] INFO: Injected into process with pid 11808 and name u'Unicorn-14733.exe'
2025-06-24 21:40:27,358 [analyzer] INFO: Injected into process with pid 11776 and name u'Unicorn-53627.exe'
2025-06-24 21:40:27,375 [analyzer] INFO: Injected into process with pid 11792 and name u'Unicorn-9398.exe'
2025-06-24 21:40:27,375 [analyzer] INFO: Added new file to list with pid 4748 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33180.exe
2025-06-24 21:40:27,390 [analyzer] INFO: Injected into process with pid 11748 and name u'Unicorn-53627.exe'
2025-06-24 21:40:27,515 [analyzer] INFO: Added new file to list with pid 3276 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27753.exe
2025-06-24 21:40:27,515 [analyzer] INFO: Added new file to list with pid 4648 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48754.exe
2025-06-24 21:40:27,608 [analyzer] INFO: Added new file to list with pid 3144 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7836.exe
2025-06-24 21:40:27,703 [analyzer] INFO: Injected into process with pid 10624 and name u'Unicorn-44624.exe'
2025-06-24 21:40:28,092 [analyzer] INFO: Injected into process with pid 10704 and name u'Unicorn-12302.exe'
2025-06-24 21:40:28,217 [analyzer] INFO: Added new file to list with pid 4640 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43446.exe
2025-06-24 21:40:28,217 [analyzer] INFO: Added new file to list with pid 328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-40381.exe
2025-06-24 21:40:28,217 [analyzer] INFO: Added new file to list with pid 3104 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21915.exe
2025-06-24 21:40:28,250 [analyzer] INFO: Injected into process with pid 10812 and name u'Unicorn-33180.exe'
2025-06-24 21:40:28,265 [analyzer] INFO: Added new file to list with pid 4072 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-51390.exe
2025-06-24 21:40:28,625 [analyzer] INFO: Injected into process with pid 10936 and name u'Unicorn-48754.exe'
2025-06-24 21:40:28,625 [analyzer] INFO: Injected into process with pid 11368 and name u'Unicorn-27753.exe'
2025-06-24 21:40:28,655 [analyzer] INFO: Added new file to list with pid 1944 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12304.exe
2025-06-24 21:40:28,765 [analyzer] INFO: Injected into process with pid 11428 and name u'Unicorn-7836.exe'
2025-06-24 21:40:28,842 [analyzer] INFO: Added new file to list with pid 3628 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-2190.exe
2025-06-24 21:40:29,015 [analyzer] INFO: Added new file to list with pid 3296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1303.exe
2025-06-24 21:40:29,030 [analyzer] INFO: Added new file to list with pid 4792 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5768.exe
2025-06-24 21:40:29,187 [analyzer] INFO: Injected into process with pid 10380 and name u'Unicorn-51390.exe'
2025-06-24 21:40:29,203 [analyzer] INFO: Injected into process with pid 10268 and name u'Unicorn-40381.exe'
2025-06-24 21:40:29,217 [analyzer] INFO: Injected into process with pid 10288 and name u'Unicorn-43446.exe'
2025-06-24 21:40:29,217 [analyzer] INFO: Injected into process with pid 10384 and name u'Unicorn-21915.exe'
2025-06-24 21:40:29,405 [analyzer] INFO: Injected into process with pid 2124 and name u'Unicorn-12304.exe'
2025-06-24 21:40:29,467 [analyzer] INFO: Injected into process with pid 11848 and name u'Unicorn-2190.exe'
2025-06-24 21:40:29,515 [analyzer] INFO: Injected into process with pid 11860 and name u'Unicorn-5768.exe'
2025-06-24 21:40:29,530 [analyzer] INFO: Injected into process with pid 11476 and name u'Unicorn-1303.exe'
2025-06-24 21:40:30,812 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-37884.exe
2025-06-24 21:40:30,967 [analyzer] INFO: Added new file to list with pid 4884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23834.exe
2025-06-24 21:40:31,171 [analyzer] INFO: Injected into process with pid 11640 and name u'Unicorn-37884.exe'
2025-06-24 21:40:31,217 [analyzer] INFO: Added new file to list with pid 3588 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26016.exe
2025-06-24 21:40:31,217 [analyzer] INFO: Added new file to list with pid 4372 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-37216.exe
2025-06-24 21:40:31,217 [analyzer] INFO: Added new file to list with pid 3900 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21816.exe
2025-06-24 21:40:31,217 [analyzer] INFO: Added new file to list with pid 3632 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21816.exe
2025-06-24 21:40:31,453 [analyzer] INFO: Injected into process with pid 12204 and name u'Unicorn-23834.exe'
2025-06-24 21:40:32,328 [analyzer] INFO: Added new file to list with pid 3140 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30640.exe
2025-06-24 21:40:32,405 [analyzer] INFO: Injected into process with pid 12232 and name u'Unicorn-21816.exe'
2025-06-24 21:40:32,405 [analyzer] INFO: Injected into process with pid 12228 and name u'Unicorn-26016.exe'
2025-06-24 21:40:32,421 [analyzer] INFO: Injected into process with pid 11740 and name u'Unicorn-37216.exe'
2025-06-24 21:40:32,640 [analyzer] INFO: Added new file to list with pid 4948 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32734.exe
2025-06-24 21:40:33,312 [analyzer] INFO: Injected into process with pid 12084 and name u'Unicorn-30640.exe'
2025-06-24 21:40:33,312 [analyzer] INFO: Injected into process with pid 12000 and name u'Unicorn-30640.exe'
2025-06-24 21:40:44,280 [analyzer] INFO: Added new file to list with pid 5100 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-49786.exe
2025-06-24 21:40:44,328 [analyzer] INFO: Added new file to list with pid 3900 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31164.exe
2025-06-24 21:40:44,358 [analyzer] INFO: Injected into process with pid 12240 and name u'Unicorn-32734.exe'
2025-06-24 21:41:04,515 [analyzer] INFO: Added new file to list with pid 4120 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4455.exe
2025-06-24 21:41:04,625 [analyzer] INFO: Injected into process with pid 10412 and name u'Unicorn-31164.exe'
2025-06-24 21:41:04,625 [analyzer] INFO: Injected into process with pid 12268 and name u'Unicorn-49786.exe'
2025-06-24 21:41:06,905 [analyzer] INFO: Added new file to list with pid 1356 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47516.exe
2025-06-24 21:41:06,905 [analyzer] INFO: Added new file to list with pid 3712 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4645.exe
2025-06-24 21:41:06,905 [analyzer] INFO: Added new file to list with pid 3616 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6915.exe
2025-06-24 21:41:06,921 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-48651.exe
2025-06-24 21:41:06,937 [analyzer] INFO: Added new file to list with pid 3232 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19781.exe
2025-06-24 21:41:06,953 [analyzer] INFO: Added new file to list with pid 4512 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53117.exe
2025-06-24 21:41:07,030 [analyzer] INFO: Added new file to list with pid 2488 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43316.exe
2025-06-24 21:41:07,030 [analyzer] INFO: Added new file to list with pid 3636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16790.exe
2025-06-24 21:41:07,046 [analyzer] INFO: Added new file to list with pid 5068 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-12780.exe
2025-06-24 21:41:07,062 [analyzer] INFO: Added new file to list with pid 4732 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22390.exe
2025-06-24 21:41:07,078 [analyzer] INFO: Added new file to list with pid 4936 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4115.exe
2025-06-24 21:41:07,092 [analyzer] INFO: Added new file to list with pid 4556 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38926.exe
2025-06-24 21:41:07,108 [analyzer] INFO: Added new file to list with pid 3176 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39456.exe
2025-06-24 21:41:07,217 [analyzer] INFO: Added new file to list with pid 4968 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57897.exe
2025-06-24 21:41:07,530 [analyzer] INFO: Added new file to list with pid 3544 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28231.exe
2025-06-24 21:41:07,546 [analyzer] INFO: Added new file to list with pid 3860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19035.exe
2025-06-24 21:41:07,562 [analyzer] INFO: Added new file to list with pid 4052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61907.exe
2025-06-24 21:41:07,578 [analyzer] INFO: Added new file to list with pid 4084 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63042.exe
2025-06-24 21:41:07,592 [analyzer] INFO: Added new file to list with pid 3052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57706.exe
2025-06-24 21:41:07,608 [analyzer] INFO: Added new file to list with pid 3140 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34171.exe
2025-06-24 21:41:07,608 [analyzer] INFO: Added new file to list with pid 1972 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-15970.exe
2025-06-24 21:41:07,625 [analyzer] INFO: Added new file to list with pid 5012 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18505.exe
2025-06-24 21:41:07,625 [analyzer] INFO: Added new file to list with pid 328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31371.exe
2025-06-24 21:41:07,625 [analyzer] INFO: Added new file to list with pid 4248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1970.exe
2025-06-24 21:41:07,640 [analyzer] INFO: Added new file to list with pid 1536 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26980.exe
2025-06-24 21:41:07,640 [analyzer] INFO: Added new file to list with pid 2656 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-21305.exe
2025-06-24 21:41:07,655 [analyzer] INFO: Added new file to list with pid 1784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-50781.exe
2025-06-24 21:41:07,671 [analyzer] INFO: Added new file to list with pid 1944 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3444.exe
2025-06-24 21:41:07,687 [analyzer] INFO: Added new file to list with pid 4568 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-7570.exe
2025-06-24 21:41:07,733 [analyzer] INFO: Added new file to list with pid 3796 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32315.exe
2025-06-24 21:41:07,765 [analyzer] INFO: Added new file to list with pid 4868 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53316.exe
2025-06-24 21:41:07,780 [analyzer] INFO: Added new file to list with pid 2220 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31180.exe
2025-06-24 21:41:07,780 [analyzer] INFO: Added new file to list with pid 3388 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53846.exe
2025-06-24 21:41:07,780 [analyzer] INFO: Added new file to list with pid 4344 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53316.exe
2025-06-24 21:41:07,780 [analyzer] INFO: Added new file to list with pid 4600 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36780.exe
2025-06-24 21:41:07,780 [analyzer] INFO: Added new file to list with pid 4756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61981.exe
2025-06-24 21:41:07,780 [analyzer] INFO: Added new file to list with pid 4444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36780.exe
2025-06-24 21:41:07,780 [analyzer] INFO: Added new file to list with pid 3756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53846.exe
2025-06-24 21:41:07,780 [analyzer] INFO: Added new file to list with pid 3984 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31180.exe
2025-06-24 21:41:07,828 [analyzer] INFO: Added new file to list with pid 1160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-46697.exe
2025-06-24 21:41:08,078 [analyzer] INFO: Added new file to list with pid 4884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-54633.exe
2025-06-24 21:41:08,078 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64897.exe
2025-06-24 21:41:08,078 [analyzer] INFO: Added new file to list with pid 4748 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-36542.exe
2025-06-24 21:41:08,217 [analyzer] INFO: Added new file to list with pid 4616 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62630.exe
2025-06-24 21:41:08,342 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11940,11904,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,342 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11980,11564,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,342 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11484,12152,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,342 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11508,11528,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,592 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10392,11340,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,592 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11716,11856,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,592 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11308,11336,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,592 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12132,12140,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,592 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11300,11284,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11600,11644,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11512,11572,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11680,11656,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12068,12064,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11292,11332,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11344,3064,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11536,12144,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12216,11976,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11664,11672,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11944,12008,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,608 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11520,11624,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,765 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11632,12168,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,875 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12284,10740,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,921 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12156,11500,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,967 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11996,12100,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,983 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12004,11972,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:08,983 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11908,11992,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,000 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '6480,10884,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,015 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '3888,2996,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,015 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '1004,2284,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,046 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11896,11888,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,062 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '11880,11872,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,062 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '7620,776,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,062 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '1828,2472,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,062 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '2412,12276,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,125 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12388,12392,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,155 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '548,6660,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,171 [analyzer] INFO: Added new file to list with pid 4948 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28758.exe
2025-06-24 21:41:09,171 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12308,12312,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,171 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '1916,3932,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,171 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10632,11392,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,171 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12316,12320,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,233 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '2456,2340,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,328 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10968,2164,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,312 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10828,344,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,390 [analyzer] INFO: Injected into process with pid 11396 and name u'Unicorn-4455.exe'
2025-06-24 21:41:09,405 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '3536,3824,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,405 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '4900,2800,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,405 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12396,12400,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,405 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12324,12328,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,405 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12364,12368,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,421 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '1776,396,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,467 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12380,12384,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,467 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '10808,10888,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,467 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12700,12704,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,467 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12332,12336,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,467 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12564,12568,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,467 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '3420,1268,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,467 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12628,12632,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,483 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12404,12408,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,562 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12372,12376,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,578 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12756,12760,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,578 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '12300,12304,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 713, in _communicate
    stderr_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:09,687 [analyzer] ERROR: Pipe command handler exception occurred (command PROCESS2 args '13116,13120,0').
Traceback (most recent call last):
  File "C:/tmp2pjrvv/analyzer.py", line 412, in dispatch
    response = fn(arguments)
  File "C:/tmp2pjrvv/analyzer.py", line 314, in _handle_process2
    return self._inject_process(int(pid), int(tid), int(mode))
  File "C:/tmp2pjrvv/analyzer.py", line 282, in _inject_process
    proc.inject(dll, apc=True, mode="%s" % mode)
  File "C:\tmp2pjrvv\lib\api\process.py", line 440, in inject
    is32bit = self.is32bit(pid=self.pid)
  File "C:\tmp2pjrvv\lib\api\process.py", line 272, in is32bit
    bitsize = int(subprocess_checkoutput(args))
  File "C:\tmp2pjrvv\lib\api\process.py", line 105, in subprocess_checkoutput
    args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env,
  File "C:\Python27\lib\subprocess.py", line 213, in check_output
    output, unused_err = process.communicate()
  File "C:\Python27\lib\subprocess.py", line 479, in communicate
    return self._communicate(input)
  File "C:\Python27\lib\subprocess.py", line 707, in _communicate
    stdout_thread.start()
  File "C:\Python27\lib\threading.py", line 736, in start
    _start_new_thread(self.__bootstrap, ())
error: can't start new thread
2025-06-24 21:41:10,015 [analyzer] INFO: Added new file to list with pid 4620 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-43532.exe
2025-06-24 21:41:11,562 [analyzer] INFO: Added new file to list with pid 172 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-58265.exe
2025-06-24 21:41:11,608 [analyzer] INFO: Added new file to list with pid 4732 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61988.exe
2025-06-24 21:41:11,733 [analyzer] INFO: Injected into process with pid 11324 and name u'Unicorn-48651.exe'
2025-06-24 21:41:11,750 [analyzer] INFO: Injected into process with pid 10260 and name u'Unicorn-19781.exe'
2025-06-24 21:41:11,750 [analyzer] INFO: Injected into process with pid 10340 and name u'Unicorn-48651.exe'
2025-06-24 21:41:11,765 [analyzer] INFO: Injected into process with pid 11688 and name u'Unicorn-6915.exe'
2025-06-24 21:41:11,765 [analyzer] INFO: Injected into process with pid 8776 and name u'Unicorn-47516.exe'
2025-06-24 21:41:11,765 [analyzer] INFO: Injected into process with pid 11440 and name u'Unicorn-48651.exe'
2025-06-24 21:41:11,796 [analyzer] INFO: Injected into process with pid 11648 and name u'Unicorn-4645.exe'
2025-06-24 21:41:11,812 [analyzer] INFO: Added new file to list with pid 4600 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53628.exe
2025-06-24 21:41:11,812 [analyzer] INFO: Added new file to list with pid 3052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-30962.exe
2025-06-24 21:41:11,812 [analyzer] INFO: Added new file to list with pid 2220 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38037.exe
2025-06-24 21:41:11,828 [analyzer] INFO: Added new file to list with pid 3140 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-19836.exe
2025-06-24 21:41:11,890 [analyzer] INFO: Added new file to list with pid 3388 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9539.exe
2025-06-24 21:41:11,890 [analyzer] INFO: Added new file to list with pid 4248 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-31070.exe
2025-06-24 21:41:11,890 [analyzer] INFO: Added new file to list with pid 1740 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-8404.exe
2025-06-24 21:41:11,905 [analyzer] INFO: Added new file to list with pid 1944 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28004.exe
2025-06-24 21:41:11,937 [analyzer] INFO: Added new file to list with pid 4868 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-14004.exe
2025-06-24 21:41:11,953 [analyzer] INFO: Added new file to list with pid 4084 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4204.exe
2025-06-24 21:41:12,780 [analyzer] INFO: Added new file to list with pid 4988 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17680.exe
2025-06-24 21:41:13,546 [analyzer] INFO: Added new file to list with pid 3412 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17488.exe
2025-06-24 21:41:13,562 [analyzer] INFO: Added new file to list with pid 4776 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-32262.exe
2025-06-24 21:41:14,655 [analyzer] INFO: Added new file to list with pid 4156 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-55012.exe
2025-06-24 21:41:14,671 [analyzer] INFO: Added new file to list with pid 5184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24286.exe
2025-06-24 21:41:14,796 [analyzer] INFO: Added new file to list with pid 5636 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1727.exe
2025-06-24 21:41:14,890 [analyzer] INFO: Added new file to list with pid 4100 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9895.exe
2025-06-24 21:41:15,108 [analyzer] INFO: Added new file to list with pid 1928 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3865.exe
2025-06-24 21:41:27,812 [analyzer] INFO: Added new file to list with pid 5100 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-56631.exe
2025-06-24 21:41:27,828 [analyzer] INFO: Added new file to list with pid 3900 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17695.exe
2025-06-24 21:41:47,437 [analyzer] INFO: Added new file to list with pid 4372 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-53341.exe
2025-06-24 21:41:47,437 [analyzer] INFO: Added new file to list with pid 4616 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-33740.exe
2025-06-24 21:41:47,453 [analyzer] INFO: Added new file to list with pid 3712 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23675.exe
2025-06-24 21:41:47,467 [analyzer] INFO: Added new file to list with pid 5068 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44676.exe
2025-06-24 21:41:47,467 [analyzer] INFO: Added new file to list with pid 4756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44676.exe
2025-06-24 21:41:47,467 [analyzer] INFO: Added new file to list with pid 3276 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-22540.exe
2025-06-24 21:41:47,483 [analyzer] INFO: Added new file to list with pid 3628 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60341.exe
2025-06-24 21:41:47,483 [analyzer] INFO: Added new file to list with pid 3184 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-18340.exe
2025-06-24 21:41:47,483 [analyzer] INFO: Added new file to list with pid 4052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-60341.exe
2025-06-24 21:41:47,500 [analyzer] INFO: Added new file to list with pid 4884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-47476.exe
2025-06-24 21:41:47,515 [analyzer] INFO: Added new file to list with pid 3964 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42141.exe
2025-06-24 21:41:47,546 [analyzer] INFO: Added new file to list with pid 4936 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-28140.exe
2025-06-24 21:41:47,578 [analyzer] INFO: Added new file to list with pid 1784 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57541.exe
2025-06-24 21:41:47,640 [analyzer] INFO: Added new file to list with pid 4344 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-62951.exe
2025-06-24 21:41:47,687 [analyzer] INFO: Added new file to list with pid 3104 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-3874.exe
2025-06-24 21:41:47,703 [analyzer] INFO: Added new file to list with pid 328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63811.exe
2025-06-24 21:41:47,733 [analyzer] INFO: Added new file to list with pid 4216 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34675.exe
2025-06-24 21:41:47,750 [analyzer] INFO: Added new file to list with pid 4556 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-9474.exe
2025-06-24 21:41:47,750 [analyzer] INFO: Added new file to list with pid 3756 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5009.exe
2025-06-24 21:41:47,750 [analyzer] INFO: Added new file to list with pid 1160 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38875.exe
2025-06-24 21:41:47,796 [analyzer] INFO: Added new file to list with pid 5012 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44284.exe
2025-06-24 21:41:47,796 [analyzer] INFO: Added new file to list with pid 4512 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-26540.exe
2025-06-24 21:41:47,796 [analyzer] INFO: Added new file to list with pid 3984 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-10948.exe
2025-06-24 21:41:47,796 [analyzer] INFO: Added new file to list with pid 3144 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-41675.exe
2025-06-24 21:41:47,796 [analyzer] INFO: Added new file to list with pid 4328 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39819.exe
2025-06-24 21:41:47,796 [analyzer] INFO: Added new file to list with pid 1932 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-23474.exe
2025-06-24 21:41:47,812 [analyzer] INFO: Added new file to list with pid 3236 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-34484.exe
2025-06-24 21:41:47,812 [analyzer] INFO: Added new file to list with pid 3860 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-39819.exe
2025-06-24 21:41:47,812 [analyzer] INFO: Added new file to list with pid 3436 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-38684.exe
2025-06-24 21:41:47,812 [analyzer] INFO: Added new file to list with pid 4444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61350.exe
2025-06-24 21:41:47,875 [analyzer] INFO: Added new file to list with pid 4544 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-4768.exe
2025-06-24 21:41:48,875 [analyzer] INFO: Added new file to list with pid 3544 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-63457.exe
2025-06-24 21:41:48,875 [analyzer] INFO: Added new file to list with pid 4948 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-27055.exe
2025-06-24 21:41:51,030 [analyzer] INFO: Added new file to list with pid 5068 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-57689.exe
2025-06-24 21:41:51,030 [analyzer] INFO: Added new file to list with pid 3276 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-24353.exe
2025-06-24 21:41:51,030 [analyzer] INFO: Added new file to list with pid 4052 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-6152.exe
2025-06-24 21:41:51,062 [analyzer] INFO: Added new file to list with pid 4884 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-5676.exe
2025-06-24 21:41:51,092 [analyzer] INFO: Added new file to list with pid 3236 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-44496.exe
2025-06-24 21:41:51,092 [analyzer] INFO: Added new file to list with pid 2496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16761.exe
2025-06-24 21:41:51,092 [analyzer] INFO: Added new file to list with pid 3468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-16761.exe
2025-06-24 21:41:51,092 [analyzer] INFO: Added new file to list with pid 3276 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64097.exe
2025-06-24 21:41:51,125 [analyzer] INFO: Added new file to list with pid 4216 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1095.exe
2025-06-24 21:41:51,171 [analyzer] INFO: Added new file to list with pid 4444 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-61968.exe
2025-06-24 21:42:04,530 [analyzer] INFO: Added new file to list with pid 3468 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-17714.exe
2025-06-24 21:42:04,546 [analyzer] INFO: Added new file to list with pid 2496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52525.exe
2025-06-24 21:42:04,546 [analyzer] INFO: Added new file to list with pid 3284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52525.exe
2025-06-24 21:42:04,546 [analyzer] INFO: Added new file to list with pid 3296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52525.exe
2025-06-24 21:42:04,546 [analyzer] INFO: Added new file to list with pid 2804 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-52525.exe
2025-06-24 21:42:07,578 [analyzer] INFO: Added new file to list with pid 2496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42435.exe
2025-06-24 21:42:07,578 [analyzer] INFO: Added new file to list with pid 3296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42435.exe
2025-06-24 21:42:07,578 [analyzer] INFO: Added new file to list with pid 3284 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-42435.exe
2025-06-24 21:42:10,640 [analyzer] INFO: Added new file to list with pid 2496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64403.exe
2025-06-24 21:42:10,640 [analyzer] INFO: Added new file to list with pid 2496 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-64403.exe
2025-06-24 21:42:13,717 [analyzer] INFO: Added new file to list with pid 3296 and path C:\Users\Administrator\AppData\Local\Temp\Unicorn-1185.exe
2025-06-24 21:42:40,000 [analyzer] INFO: Analysis timeout hit, terminating analysis.
2025-06-24 21:42:58,187 [analyzer] INFO: Terminating remaining processes before shutdown.
2025-06-24 21:42:58,187 [lib.api.process] INFO: Successfully terminated process with pid 1784.
2025-06-24 21:42:58,187 [lib.api.process] INFO: Successfully terminated process with pid 172.
2025-06-24 21:42:58,187 [lib.api.process] INFO: Successfully terminated process with pid 1160.
2025-06-24 21:42:58,187 [lib.api.process] INFO: Successfully terminated process with pid 328.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 1356.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 2804.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 1972.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 1932.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 1944.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 2496.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 1740.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 2220.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 2488.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 2480.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3052.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 2728.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3144.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3184.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3220.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3276.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3284.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3352.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3388.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3436.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3468.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3524.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3516.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3588.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3636.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3692.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3756.
2025-06-24 21:42:58,203 [lib.api.process] INFO: Successfully terminated process with pid 3784.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3860.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3892.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3900.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3964.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 4004.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 4052.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 1536.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3140.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3232.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3296.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3448.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3544.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3632.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3628.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3796.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3984.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 4072.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 4084.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3176.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3488.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3676.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3712.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3236.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 3104.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 4248.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 4328.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 4344.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 4352.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 4444.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 4512.
2025-06-24 21:42:58,217 [lib.api.process] INFO: Successfully terminated process with pid 4556.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4600.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4640.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4648.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4732.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4756.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4792.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4868.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4936.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4968.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 5012.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 5068.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4120.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 3616.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 2656.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4216.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4372.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4568.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4620.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4748.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4884.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4948.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 5100.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4100.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 3412.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 1928.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4544.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4616.
2025-06-24 21:42:58,233 [lib.api.process] INFO: Successfully terminated process with pid 4988.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 4816.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 4156.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 4416.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 4220.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 4776.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 4464.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 4676.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 4772.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5360.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5352.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5344.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5376.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5368.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5392.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5400.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5384.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5444.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5420.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5468.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5636.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5648.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5428.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5744.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5784.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5768.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5800.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5792.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5776.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5816.
2025-06-24 21:42:58,250 [lib.api.process] INFO: Successfully terminated process with pid 5840.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 5924.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 5912.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 5976.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6040.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6056.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6064.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6088.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6112.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 5184.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 5188.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 5524.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 5564.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 5300.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 5596.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 5032.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 5236.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6000.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 5276.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6160.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6168.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6216.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6324.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6440.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6500.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6544.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6608.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6668.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6712.
2025-06-24 21:42:58,265 [lib.api.process] INFO: Successfully terminated process with pid 6720.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6812.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6864.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6888.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6920.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6948.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6988.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6980.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 7080.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 7112.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 7152.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 7164.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6312.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6340.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6412.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6560.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6556.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6572.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 5500.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 2532.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6628.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 1068.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6700.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6640.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 3068.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 1420.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 2208.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6788.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6836.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 784.
2025-06-24 21:42:58,280 [lib.api.process] INFO: Successfully terminated process with pid 6852.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 2824.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 2404.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 616.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 1272.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7036.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7136.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 5580.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 5336.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 1416.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7448.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7472.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7480.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7488.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7496.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7700.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7732.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7724.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7708.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7716.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7740.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7912.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7920.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 7956.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 8020.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 8028.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 8044.
2025-06-24 21:42:58,296 [lib.api.process] INFO: Successfully terminated process with pid 8056.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 8092.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 8108.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 6604.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 7776.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 7896.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 7944.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 2060.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 6820.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 588.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 8188.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 6832.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 7056.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 7928.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 7392.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 7068.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 124.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 7768.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 7640.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 7144.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 8132.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 7652.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 8144.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 8232.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 8268.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 8928.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 8988.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 9012.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 9076.
2025-06-24 21:42:58,312 [lib.api.process] INFO: Successfully terminated process with pid 9176.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 9200.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 7824.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 9208.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8100.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 7892.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 7468.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8388.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8400.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8276.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8332.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8252.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8420.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8472.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8196.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8520.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8356.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8508.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8452.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8372.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8480.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8408.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8412.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8688.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8444.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8340.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8488.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8368.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8700.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8456.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 8652.
2025-06-24 21:42:58,328 [lib.api.process] INFO: Successfully terminated process with pid 7848.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 9260.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 9440.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 9448.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 9464.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 9456.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 9672.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 9700.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 9724.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 9760.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 9776.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 10004.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 10104.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 10092.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 10072.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 10084.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 10120.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 10144.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 10112.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 10136.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 10128.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 10152.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 10160.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 9588.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 9964.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 9796.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 9844.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 9876.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 1836.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 10020.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 10064.
2025-06-24 21:42:58,342 [lib.api.process] INFO: Successfully terminated process with pid 8748.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 9116.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 9028.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 9088.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 9644.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 9544.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 9936.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 10548.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 10580.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 10588.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 10596.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 10604.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 10796.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 10856.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 10848.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 10840.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 10916.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 11024.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 11052.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 11060.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 11068.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 11132.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 11156.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 11164.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 11148.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 11172.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 11180.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 11188.
2025-06-24 21:42:58,358 [lib.api.process] INFO: Successfully terminated process with pid 11204.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 11196.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 11212.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 11228.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 11220.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 9860.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 9804.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 9748.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 10356.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 5328.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 10564.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 10560.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 2644.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 10676.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 1396.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 3856.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 2556.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 9152.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 11260.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 11088.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 11124.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 11120.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 11240.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 11116.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 11080.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 10252.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 10316.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 9560.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 10320.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 11348.
2025-06-24 21:42:58,375 [lib.api.process] INFO: Successfully terminated process with pid 11412.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11448.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11544.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11576.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11584.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11756.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11748.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11792.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11776.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11768.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11808.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11800.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11784.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11932.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11964.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 12016.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 12040.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 12048.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 12028.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 12056.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 10624.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 10704.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 10812.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11368.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 10936.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11428.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 10288.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 10268.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 10384.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 10380.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 2124.
2025-06-24 21:42:58,390 [lib.api.process] INFO: Successfully terminated process with pid 11848.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11860.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11476.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11640.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 12204.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11740.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 12228.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 12232.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 12000.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 12084.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 12240.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 12268.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 10412.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11396.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 10260.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11688.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11536.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11512.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11508.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11324.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11308.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 10340.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 10392.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 12068.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11300.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11344.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11680.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11440.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 8776.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11648.
2025-06-24 21:42:58,405 [lib.api.process] INFO: Successfully terminated process with pid 11484.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 11600.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 11940.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 11716.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 11292.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 12132.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 11980.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 11520.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 12216.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 11664.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 11944.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 11908.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 11996.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 12004.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 11632.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 11896.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 11880.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 2412.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 1828.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 7620.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 12284.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 12156.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 6480.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 3888.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 1004.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 12388.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 548.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 12308.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 1916.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 12316.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 10632.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 2456.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 10828.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 4900.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 3536.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 10968.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 12396.
2025-06-24 21:42:58,421 [lib.api.process] INFO: Successfully terminated process with pid 12364.
2025-06-24 21:42:58,437 [lib.api.process] INFO: Successfully terminated process with pid 1776.
2025-06-24 21:42:58,437 [lib.api.process] INFO: Successfully terminated process with pid 10808.
2025-06-24 21:42:58,437 [lib.api.process] INFO: Successfully terminated process with pid 12332.
2025-06-24 21:42:58,437 [lib.api.process] INFO: Successfully terminated process with pid 12324.
2025-06-24 21:42:58,437 [lib.api.process] INFO: Successfully terminated process with pid 12300.
2025-06-24 21:42:58,437 [lib.api.process] INFO: Successfully terminated process with pid 3420.
2025-06-24 21:42:58,437 [lib.api.process] INFO: Successfully terminated process with pid 12380.
2025-06-24 21:42:58,437 [lib.api.process] INFO: Successfully terminated process with pid 12404.
2025-06-24 21:42:58,437 [lib.api.process] INFO: Successfully terminated process with pid 12372.
2025-06-24 21:42:58,437 [lib.api.process] INFO: Successfully terminated process with pid 12628.
2025-06-24 21:42:58,437 [lib.api.process] INFO: Successfully terminated process with pid 12564.
2025-06-24 21:42:58,437 [lib.api.process] INFO: Successfully terminated process with pid 12756.
2025-06-24 21:42:58,437 [lib.api.process] INFO: Successfully terminated process with pid 12700.
2025-06-24 21:42:58,437 [lib.api.process] INFO: Successfully terminated process with pid 13116.
2025-06-24 21:42:58,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8537.exe
2025-06-24 21:42:58,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24286.exe
2025-06-24 21:42:58,655 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26371.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22390.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36344.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33483.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9903.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56731.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39665.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-37674.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35360.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52626.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43106.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-46409.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-12302.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31164.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26404.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33886.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17789.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53117.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53341.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55012.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4525.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47402.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50045.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19160.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10985.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28639.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15086.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14312.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53628.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60510.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47986.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35552.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44624.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61318.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19836.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-12304.exe
2025-06-24 21:42:58,671 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23834.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50255.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60666.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4312.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53846.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3280.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60979.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16203.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49092.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26016.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49372.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36610.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57098.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30962.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44479.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27499.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18395.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39362.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15673.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36542.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60635.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40396.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21579.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56487.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35688.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26098.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64675.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39008.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64097.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32734.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39819.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57689.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19145.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22757.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-724.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33187.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-41910.exe
2025-06-24 21:42:58,687 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52016.exe
2025-06-24 21:42:58,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-45282.exe
2025-06-24 21:42:58,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38037.exe
2025-06-24 21:42:58,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11422.exe
2025-06-24 21:42:58,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6834.exe
2025-06-24 21:42:58,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62951.exe
2025-06-24 21:42:58,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55423.exe
2025-06-24 21:42:58,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21904.exe
2025-06-24 21:42:58,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28140.exe
2025-06-24 21:42:58,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2888.exe
2025-06-24 21:42:58,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30485.exe
2025-06-24 21:42:58,703 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48516.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40072.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26590.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63938.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28509.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17714.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-42735.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8090.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25632.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57187.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54821.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43014.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22506.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28154.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28004.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9639.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32055.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9539.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31276.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31070.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-22540.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34675.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2673.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-45206.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14326.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-41762.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5676.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11085.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53906.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55506.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61981.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36321.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36780.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61068.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34731.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4520.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10948.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8185.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27328.exe
2025-06-24 21:42:58,717 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28340.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43446.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18568.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17695.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24119.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2312.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54298.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4603.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4763.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-37216.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58268.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24696.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49470.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1858.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60468.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53241.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33694.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2059.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11035.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48739.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28758.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24604.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26232.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55496.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48292.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16054.exe
2025-06-24 21:42:58,733 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34171.exe
2025-06-24 21:42:58,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-46697.exe
2025-06-24 21:42:58,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51390.exe
2025-06-24 21:42:58,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9533.exe
2025-06-24 21:42:58,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21816.exe
2025-06-24 21:42:58,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63124.exe
2025-06-24 21:42:58,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27753.exe
2025-06-24 21:42:58,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16118.exe
2025-06-24 21:42:58,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57774.exe
2025-06-24 21:42:58,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58905.exe
2025-06-24 21:42:58,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19377.exe
2025-06-24 21:42:58,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36520.exe
2025-06-24 21:42:58,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16790.exe
2025-06-24 21:42:58,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21915.exe
2025-06-24 21:42:58,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1185.exe
2025-06-24 21:42:58,750 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47476.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44883.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-35770.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-37332.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5819.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4768.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56842.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7836.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2662.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15970.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5489.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13155.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-275.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-37229.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50162.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61182.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24770.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-65247.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14004.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23474.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7066.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56304.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38786.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52900.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-45536.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49158.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1303.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55843.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24178.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26980.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55041.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58557.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24878.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11633.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-37728.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31180.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9895.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-12693.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49104.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25321.exe
2025-06-24 21:42:58,765 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32095.exe
2025-06-24 21:42:58,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21625.exe
2025-06-24 21:42:58,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61126.exe
2025-06-24 21:42:58,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61968.exe
2025-06-24 21:42:58,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21319.exe
2025-06-24 21:42:58,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48651.exe
2025-06-24 21:42:58,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53560.exe
2025-06-24 21:42:58,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61988.exe
2025-06-24 21:42:58,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-37884.exe
2025-06-24 21:42:58,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51730.exe
2025-06-24 21:42:58,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32262.exe
2025-06-24 21:42:58,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14706.exe
2025-06-24 21:42:58,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1727.exe
2025-06-24 21:42:58,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5986.exe
2025-06-24 21:42:58,780 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-30068.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17339.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4455.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19781.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7570.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51733.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10830.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53078.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47516.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50180.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48599.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20891.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63811.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48342.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52525.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43316.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-45563.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-37602.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8619.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38926.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62787.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-39772.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54572.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23675.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34950.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53316.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43532.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29985.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17680.exe
2025-06-24 21:42:58,796 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10505.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43430.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21848.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38614.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3991.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34562.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6152.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9398.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57706.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13648.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4017.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1432.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38684.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55856.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34337.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5722.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2709.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5768.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2190.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54042.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-42435.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53627.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61350.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24844.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40196.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4204.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7783.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50197.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-41416.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47812.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-34484.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19244.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24261.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26985.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28216.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54439.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64176.exe
2025-06-24 21:42:58,812 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61040.exe
2025-06-24 21:42:58,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43861.exe
2025-06-24 21:42:58,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19108.exe
2025-06-24 21:42:58,828 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54960.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27951.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4005.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9474.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50711.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26005.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31371.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13305.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63651.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7193.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29871.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19035.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26394.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3874.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3648.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43882.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-42374.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64468.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9478.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-28231.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10073.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16514.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-53056.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8404.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26336.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33846.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44496.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23948.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24505.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64403.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63042.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7576.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44284.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33041.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50396.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56778.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-48754.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4983.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-23763.exe
2025-06-24 21:42:58,842 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-19170.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43830.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40381.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-51784.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-15839.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3202.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24176.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18847.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5376.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-65107.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38533.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25676.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-52426.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-47966.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25230.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29609.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-46338.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33180.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-58265.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29149.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-41232.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-31537.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5009.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6421.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13002.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-11209.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40597.exe
2025-06-24 21:42:58,858 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6232.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14565.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62180.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-24353.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1970.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21712.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-32925.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29295.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56631.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6915.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-21305.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-804.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-63457.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25221.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4115.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38106.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-36958.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3865.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-59507.exe
2025-06-24 21:42:58,875 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33140.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20934.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44032.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62630.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26720.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16586.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-12253.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16761.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54733.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1095.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-45020.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-25588.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33740.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-55807.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-42141.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-3845.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14484.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16850.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-45647.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-40326.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8715.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18994.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7270.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-1614.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-16886.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-64897.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-17488.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-10473.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9014.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29127.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57897.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-7234.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-6549.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-33634.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-54633.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-814.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60561.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-62707.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-50781.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-29826.exe
2025-06-24 21:42:58,890 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-61907.exe
2025-06-24 21:42:58,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-27784.exe
2025-06-24 21:42:58,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18817.exe
2025-06-24 21:42:58,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-56436.exe
2025-06-24 21:42:58,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-9870.exe
2025-06-24 21:42:58,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4904.exe
2025-06-24 21:42:58,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-8447.exe
2025-06-24 21:42:58,905 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-5745.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-38875.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-2958.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-49786.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57541.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18340.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-44856.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-4645.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-26540.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-14733.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-41675.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-20996.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-57302.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-60341.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-43922.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-12780.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-18505.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-12760.exe
2025-06-24 21:42:58,921 [analyzer] WARNING: Too many files: c:\users\administrator\appdata\local\temp\unicorn-13082.exe
2025-06-24 21:42:58,921 [analyzer] INFO: Analysis completed.

Cuckoo Log

2025-07-02 12:20:23,737 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:24,762 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:25,802 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:26,829 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:27,964 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:29,041 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:30,073 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:31,472 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:32,521 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:33,547 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:34,577 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:35,615 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:36,650 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:37,678 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:38,709 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:39,745 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:40,786 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:41,820 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:42,876 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:44,023 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:45,132 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:46,206 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:47,279 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:48,334 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:49,395 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:50,450 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:51,507 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:52,562 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:53,614 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:54,655 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:55,707 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:56,750 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:57,791 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:58,890 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:20:59,945 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:01,002 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:02,446 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:03,501 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:04,567 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:05,628 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:06,706 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:07,767 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:08,805 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:09,822 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:10,839 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:11,859 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:12,892 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:13,932 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:14,970 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:16,003 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:17,042 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:18,094 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:19,136 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:20,181 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:21,260 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:22,304 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:23,371 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:24,431 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:25,475 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:26,706 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:27,808 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:28,881 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:29,935 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:31,002 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:32,059 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:33,131 [cuckoo.core.scheduler] DEBUG: Task #6631182: no machine available yet
2025-07-02 12:21:34,170 [cuckoo.core.scheduler] INFO: Task #6631182: acquired machine win7x648 (label=win7x648)
2025-07-02 12:21:34,171 [cuckoo.core.resultserver] DEBUG: Now tracking machine 192.168.168.208 for task #6631182
2025-07-02 12:21:34,605 [cuckoo.auxiliary.sniffer] INFO: Started sniffer with PID 2760798 (interface=vboxnet0, host=192.168.168.208)
2025-07-02 12:21:35,017 [cuckoo.machinery.virtualbox] DEBUG: Starting vm win7x648
2025-07-02 12:21:42,320 [cuckoo.machinery.virtualbox] DEBUG: Restoring virtual machine win7x648 to vmcloak
2025-07-02 12:22:34,734 [cuckoo.core.guest] INFO: Starting analysis #6631182 on guest (id=win7x648, ip=192.168.168.208)
2025-07-02 12:22:35,739 [cuckoo.core.guest] DEBUG: win7x648: not ready yet
2025-07-02 12:22:40,788 [cuckoo.core.guest] INFO: Guest is running Cuckoo Agent 0.10 (id=win7x648, ip=192.168.168.208)
2025-07-02 12:22:40,895 [cuckoo.core.guest] DEBUG: Uploading analyzer to guest (id=win7x648, ip=192.168.168.208, monitor=latest, size=6660546)
2025-07-02 12:22:42,005 [cuckoo.core.resultserver] DEBUG: Task #6631182: live log analysis.log initialized.
2025-07-02 12:22:42,858 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:43,294 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:44,130 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'shots/0001.jpg'
2025-07-02 12:22:44,159 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 133480
2025-07-02 12:22:46,624 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:49,920 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:49,995 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:53,291 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:53,326 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:53,328 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:53,373 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:56,654 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:56,669 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:56,771 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:56,824 [cuckoo.core.guest] DEBUG: win7x648: analysis #6631182 still processing
2025-07-02 12:22:56,826 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:57,043 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:57,059 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:57,123 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:57,206 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:22:59,982 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:00,107 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:00,154 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:00,529 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:00,591 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:00,765 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:00,841 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:01,014 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:01,046 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:01,155 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:01,157 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:01,281 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:01,311 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:01,500 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:02,005 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:02,006 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:04,015 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:04,063 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:04,067 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:04,075 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:04,123 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:04,419 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:04,681 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:04,811 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:05,386 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:05,408 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:05,930 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:06,123 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:06,449 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:06,450 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:06,622 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:08,499 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'shots/0002.jpg'
2025-07-02 12:23:08,521 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 63920
2025-07-02 12:23:10,690 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:11,274 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:11,293 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:11,294 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:11,311 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:11,369 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:11,663 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:11,665 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:11,671 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:11,727 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'shots/0003.jpg'
2025-07-02 12:23:11,742 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 113170
2025-07-02 12:23:11,992 [cuckoo.core.guest] DEBUG: win7x648: analysis #6631182 still processing
2025-07-02 12:23:13,486 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:13,731 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:13,756 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:13,810 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:13,856 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:14,343 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'shots/0004.jpg'
2025-07-02 12:23:14,356 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 64430
2025-07-02 12:23:14,735 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:16,711 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:17,279 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:17,607 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:17,612 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:17,724 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'shots/0005.jpg'
2025-07-02 12:23:17,736 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 114669
2025-07-02 12:23:18,028 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:18,031 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:18,042 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:18,377 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:19,215 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:19,217 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'shots/0006.jpg'
2025-07-02 12:23:19,233 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 65476
2025-07-02 12:23:19,276 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:19,333 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:19,751 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:19,901 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:19,920 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:19,941 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:20,151 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:21,320 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:23,436 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:23,438 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:23,478 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:23,523 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:23,524 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:23,530 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:24,617 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:24,622 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:24,834 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:26,590 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:26,604 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:27,173 [cuckoo.core.guest] DEBUG: win7x648: analysis #6631182 still processing
2025-07-02 12:23:37,417 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,431 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,434 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,438 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,440 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,465 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,479 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,509 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,514 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,669 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,688 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,724 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,726 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,745 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,749 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,908 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,955 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,987 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:37,999 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,038 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,070 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,332 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,513 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,526 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,535 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,569 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,573 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,578 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,580 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,588 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,590 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,591 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,597 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,613 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,618 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,621 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,625 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,644 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,687 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,696 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,710 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:38,863 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:39,610 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:40,035 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:40,037 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:40,047 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:40,168 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:40,609 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:40,615 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:40,618 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:40,625 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:40,627 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:40,684 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:41,234 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:42,934 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:43,197 [cuckoo.core.guest] DEBUG: win7x648: analysis #6631182 still processing
2025-07-02 12:23:43,685 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:44,818 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'shots/0007.jpg'
2025-07-02 12:23:44,833 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 114669
2025-07-02 12:23:44,934 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:46,827 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'shots/0008.jpg'
2025-07-02 12:23:46,830 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 65476
2025-07-02 12:23:46,832 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:48,155 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:48,210 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:48,212 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'shots/0009.jpg'
2025-07-02 12:23:48,223 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 65476
2025-07-02 12:23:49,184 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:50,091 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:50,301 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:50,393 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:50,624 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:50,654 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:50,688 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:50,889 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:50,934 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:50,950 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:50,992 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:23:58,726 [cuckoo.core.guest] DEBUG: win7x648: analysis #6631182 still processing
2025-07-02 12:24:03,945 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:03,947 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:03,982 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:04,340 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:04,606 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:04,639 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,051 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,117 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,132 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,145 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,146 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,170 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,180 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,182 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,186 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,201 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,232 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,239 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,296 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,311 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,360 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,374 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,420 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,421 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,434 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,444 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,465 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,499 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,714 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,715 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,721 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,723 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,797 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,953 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:05,975 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:06,046 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:06,082 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:06,083 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:06,085 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:06,111 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:06,210 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:06,256 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:06,303 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:06,305 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:06,312 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:06,331 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:06,403 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:06,440 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:06,469 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:07,525 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:07,615 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:07,636 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'shots/0010.jpg'
2025-07-02 12:24:07,641 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:07,711 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:07,744 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:07,745 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:07,769 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 135026
2025-07-02 12:24:07,778 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:07,825 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:07,840 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:07,845 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:07,848 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:07,904 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:07,922 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:07,924 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:08,089 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:08,431 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:08,434 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:08,436 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:08,437 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:08,438 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:08,441 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:09,262 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:10,030 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:10,217 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:14,427 [cuckoo.core.guest] DEBUG: win7x648: analysis #6631182 still processing
2025-07-02 12:24:18,919 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:29,549 [cuckoo.core.guest] DEBUG: win7x648: analysis #6631182 still processing
2025-07-02 12:24:30,643 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'shots/0011.jpg'
2025-07-02 12:24:30,658 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 65476
2025-07-02 12:24:33,425 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'shots/0012.jpg'
2025-07-02 12:24:33,439 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 74835
2025-07-02 12:24:35,929 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:36,447 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:36,475 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:36,498 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:36,532 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,325 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,341 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,371 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,434 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,653 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,675 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,676 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,701 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,703 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,704 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,705 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,706 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,708 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,716 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,723 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,764 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,765 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,769 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,770 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,772 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,796 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,797 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,801 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,826 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,876 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,892 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:38,936 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,008 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,200 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,279 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,280 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,371 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,397 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,412 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,435 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,437 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,444 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,762 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,797 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,843 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,861 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,864 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,906 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,923 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,930 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,984 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:39,986 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:40,049 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:40,099 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:40,904 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:41,174 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:41,460 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:41,462 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:41,494 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:41,576 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:41,578 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:41,643 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:41,845 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:41,846 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:41,851 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:41,855 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:41,857 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:42,045 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:42,048 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:44,050 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:44,499 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:44,500 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:44,529 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:44,531 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:44,994 [cuckoo.core.guest] DEBUG: win7x648: analysis #6631182 still processing
2025-07-02 12:24:45,263 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'shots/0013.jpg'
2025-07-02 12:24:45,291 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 135026
2025-07-02 12:24:46,467 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:47,468 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:47,528 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:47,545 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:47,592 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:54,527 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:55,737 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:55,750 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:55,758 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:56,782 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:56,795 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:56,807 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:56,816 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:56,996 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:24:57,012 [cuckoo.core.resultserver] DEBUG: Task #6631182 is sending a BSON stream
2025-07-02 12:25:00,518 [cuckoo.core.guest] DEBUG: win7x648: analysis #6631182 still processing
2025-07-02 12:25:15,600 [cuckoo.core.guest] DEBUG: win7x648: analysis #6631182 still processing
2025-07-02 12:25:29,485 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'shots/0014.jpg'
2025-07-02 12:25:29,493 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 65476
2025-07-02 12:25:30,696 [cuckoo.core.guest] DEBUG: win7x648: analysis #6631182 still processing
2025-07-02 12:25:45,970 [cuckoo.core.guest] DEBUG: win7x648: analysis #6631182 still processing
2025-07-02 12:26:01,744 [cuckoo.core.guest] DEBUG: win7x648: analysis #6631182 still processing
2025-07-02 12:26:17,250 [cuckoo.core.guest] DEBUG: win7x648: analysis #6631182 still processing
2025-07-02 12:26:32,725 [cuckoo.core.guest] INFO: win7x648: end of analysis reached!
2025-07-02 12:26:32,904 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Redsocks
2025-07-02 12:26:33,085 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Sniffer
2025-07-02 12:26:34,072 [cuckoo.machinery.virtualbox] INFO: Successfully generated memory dump for virtual machine with label win7x648 to path /srv/cuckoo/cwd/storage/analyses/6631182/memory.dmp
2025-07-02 12:26:34,074 [cuckoo.machinery.virtualbox] DEBUG: Stopping vm win7x648
2025-07-02 12:27:21,297 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'curtain/1750794171.22.curtain.log'
2025-07-02 12:27:21,300 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 36
2025-07-02 12:27:27,568 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'sysmon/1750794177.08.sysmon.xml'
2025-07-02 12:27:28,357 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 21709282
2025-07-02 12:27:32,682 [cuckoo.core.resultserver] DEBUG: Task #6631182 had connection reset for <Context for LOG>
2025-07-02 12:27:32,803 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/44c50b2bee9df96c_unicorn-57736.exe'
2025-07-02 12:27:32,837 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479333
2025-07-02 12:27:32,848 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/c85accbbef330aeb_unicorn-60384.exe'
2025-07-02 12:27:32,887 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479334
2025-07-02 12:27:32,891 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/5d8db63e5949206c_unicorn-61196.exe'
2025-07-02 12:27:33,070 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479332
2025-07-02 12:27:33,081 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/a32e4631cec95e51_unicorn-30640.exe'
2025-07-02 12:27:33,266 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479335
2025-07-02 12:27:33,278 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/fc5fb8882c9f98bc_unicorn-21852.exe'
2025-07-02 12:27:33,332 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479333
2025-07-02 12:27:33,335 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/d711b5000d7f1246_unicorn-9896.exe'
2025-07-02 12:27:33,357 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479336
2025-07-02 12:27:33,365 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/1287bf48b71f8807_unicorn-21900.exe'
2025-07-02 12:27:33,371 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479334
2025-07-02 12:27:33,521 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/8ff85d4f75d3b76c_unicorn-39456.exe'
2025-07-02 12:27:33,541 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479333
2025-07-02 12:27:33,544 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/30346147c5d588d0_unicorn-44676.exe'
2025-07-02 12:27:33,549 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479336
2025-07-02 12:27:33,552 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/78d20da22853f037_unicorn-3444.exe'
2025-07-02 12:27:33,576 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479335
2025-07-02 12:27:33,580 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/19809c26f2778b2d_unicorn-54297.exe'
2025-07-02 12:27:33,583 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479334
2025-07-02 12:27:33,586 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/a5c87b7bcceffeb0_unicorn-12703.exe'
2025-07-02 12:27:33,589 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479335
2025-07-02 12:27:33,592 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/189828a639d4e2b1_unicorn-22040.exe'
2025-07-02 12:27:33,595 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479336
2025-07-02 12:27:33,600 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/1ef806bfa791ecd7_unicorn-7897.exe'
2025-07-02 12:27:33,602 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479334
2025-07-02 12:27:33,605 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/339190732b8257c3_unicorn-37961.exe'
2025-07-02 12:27:33,608 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479334
2025-07-02 12:27:33,611 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/23d4b9b0ed7d6875_unicorn-53985.exe'
2025-07-02 12:27:33,614 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479334
2025-07-02 12:27:33,617 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/1faeb66212acf9d8_unicorn-27055.exe'
2025-07-02 12:27:33,620 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479333
2025-07-02 12:27:33,627 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/f913128412bb5d66_unicorn-3394.exe'
2025-07-02 12:27:33,641 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479334
2025-07-02 12:27:33,652 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/ebe292b13826bec8_unicorn-60016.exe'
2025-07-02 12:27:33,656 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479336
2025-07-02 12:27:33,659 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/53f80190d10a902a_unicorn-32315.exe'
2025-07-02 12:27:33,662 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479334
2025-07-02 12:27:33,667 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/214b482e7cdb0b18_unicorn-26564.exe'
2025-07-02 12:27:33,670 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479334
2025-07-02 12:27:33,673 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/f347d2ed3910893f_unicorn-48534.exe'
2025-07-02 12:27:33,677 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/18583d8b3093eadb_unicorn-6667.exe'
2025-07-02 12:27:33,680 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479334
2025-07-02 12:27:33,684 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/87956a94361dc5ec_unicorn-53586.exe'
2025-07-02 12:27:33,687 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479333
2025-07-02 12:27:33,689 [cuckoo.core.resultserver] DEBUG: Task #6631182: File upload for 'files/5d5ac79117902cdd_unicorn-18639.exe'
2025-07-02 12:27:33,692 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479334
2025-07-02 12:27:33,854 [cuckoo.core.resultserver] DEBUG: Task #6631182 uploaded file length: 479336
2025-07-02 12:28:57,382 [cuckoo.core.resultserver] DEBUG: Stopped tracking machine 192.168.168.208 for task #6631182
2025-07-02 12:28:57,842 [cuckoo.core.scheduler] DEBUG: Released database task #6631182
2025-07-02 12:29:04,495 [cuckoo.core.scheduler] INFO: Task #6631182: analysis procedure completed

Signatures

Yara rule detected for file (1 event)
description (no description) rule SEH__vba
One or more processes crashed (50 out of 2233 events)
Time & API Arguments Status Return Repeated

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 00 00 75 fb 68 f8 c2 42 00 68 e4 9a 42 00 ff 15
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2ae48
exception.instruction: add byte ptr [eax], al
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 175688
exception.address: 0x42ae48
registers.esp: 1636952
registers.edi: 1637180
registers.eax: 0
registers.ebp: 1637168
registers.edx: 37552501
registers.ebx: 1
registers.esi: 1637388
registers.ecx: 2003318954
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 18 10 40 00 c7 45 f0 00 00 00 00 9b 68 7e b0 42
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2b01e
exception.instruction: sbb byte ptr [eax], dl
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 176158
exception.address: 0x42b01e
registers.esp: 1636952
registers.edi: 1637135
registers.eax: 4095
registers.ebp: 1637168
registers.edx: 20
registers.ebx: 4370453
registers.esi: 4198912
registers.ecx: 0
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 00 00 75 fb 68 f8 c2 42 00 68 e4 9a 42 00 ff 15
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2ae48
exception.instruction: add byte ptr [eax], al
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 175688
exception.address: 0x42ae48
registers.esp: 1636952
registers.edi: 1637180
registers.eax: 0
registers.ebp: 1637168
registers.edx: 37580277
registers.ebx: 1
registers.esi: 1637388
registers.ecx: 2003318954
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 18 10 40 00 c7 45 f0 00 00 00 00 9b 68 7e b0 42
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2b01e
exception.instruction: sbb byte ptr [eax], dl
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 176158
exception.address: 0x42b01e
registers.esp: 1636952
registers.edi: 1637135
registers.eax: 4095
registers.ebp: 1637168
registers.edx: 20
registers.ebx: 4370453
registers.esi: 4198912
registers.ecx: 0
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 00 00 75 fb 68 f8 c2 42 00 68 e4 9a 42 00 ff 15
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2ae48
exception.instruction: add byte ptr [eax], al
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 175688
exception.address: 0x42ae48
registers.esp: 1636952
registers.edi: 1637180
registers.eax: 0
registers.ebp: 1637168
registers.edx: 37552501
registers.ebx: 1
registers.esi: 1637388
registers.ecx: 2003318954
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 18 10 40 00 c7 45 f0 00 00 00 00 9b 68 7e b0 42
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2b01e
exception.instruction: sbb byte ptr [eax], dl
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 176158
exception.address: 0x42b01e
registers.esp: 1636952
registers.edi: 1637135
registers.eax: 4095
registers.ebp: 1637168
registers.edx: 20
registers.ebx: 4370453
registers.esi: 4198912
registers.ecx: 0
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 00 00 75 fb 68 f8 c2 42 00 68 e4 9a 42 00 ff 15
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2ae48
exception.instruction: add byte ptr [eax], al
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 175688
exception.address: 0x42ae48
registers.esp: 1636952
registers.edi: 1637180
registers.eax: 0
registers.ebp: 1637168
registers.edx: 37580277
registers.ebx: 1
registers.esi: 1637388
registers.ecx: 2003318954
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 18 10 40 00 c7 45 f0 00 00 00 00 9b 68 7e b0 42
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2b01e
exception.instruction: sbb byte ptr [eax], dl
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 176158
exception.address: 0x42b01e
registers.esp: 1636952
registers.edi: 1637135
registers.eax: 4095
registers.ebp: 1637168
registers.edx: 20
registers.ebx: 4370453
registers.esi: 4198912
registers.ecx: 0
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 00 00 75 fb 68 f8 c2 42 00 68 e4 9a 42 00 ff 15
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2ae48
exception.instruction: add byte ptr [eax], al
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 175688
exception.address: 0x42ae48
registers.esp: 1636952
registers.edi: 1637180
registers.eax: 0
registers.ebp: 1637168
registers.edx: 37552501
registers.ebx: 1
registers.esi: 1637388
registers.ecx: 2003318954
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 18 10 40 00 c7 45 f0 00 00 00 00 9b 68 7e b0 42
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2b01e
exception.instruction: sbb byte ptr [eax], dl
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 176158
exception.address: 0x42b01e
registers.esp: 1636952
registers.edi: 1637135
registers.eax: 4095
registers.ebp: 1637168
registers.edx: 20
registers.ebx: 4370453
registers.esi: 4198912
registers.ecx: 0
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 00 00 75 fb 68 f8 c2 42 00 68 e4 9a 42 00 ff 15
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2ae48
exception.instruction: add byte ptr [eax], al
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 175688
exception.address: 0x42ae48
registers.esp: 1636952
registers.edi: 1637180
registers.eax: 0
registers.ebp: 1637168
registers.edx: 37552501
registers.ebx: 1
registers.esi: 1637388
registers.ecx: 2003318954
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 18 10 40 00 c7 45 f0 00 00 00 00 9b 68 7e b0 42
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2b01e
exception.instruction: sbb byte ptr [eax], dl
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 176158
exception.address: 0x42b01e
registers.esp: 1636952
registers.edi: 1637135
registers.eax: 4095
registers.ebp: 1637168
registers.edx: 20
registers.ebx: 4370453
registers.esi: 4198912
registers.ecx: 0
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 00 00 75 fb 68 f8 c2 42 00 68 e4 9a 42 00 ff 15
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2ae48
exception.instruction: add byte ptr [eax], al
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 175688
exception.address: 0x42ae48
registers.esp: 1636952
registers.edi: 1637180
registers.eax: 0
registers.ebp: 1637168
registers.edx: 37580277
registers.ebx: 1
registers.esi: 1637388
registers.ecx: 2003318954
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 18 10 40 00 c7 45 f0 00 00 00 00 9b 68 7e b0 42
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2b01e
exception.instruction: sbb byte ptr [eax], dl
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 176158
exception.address: 0x42b01e
registers.esp: 1636952
registers.edi: 1637135
registers.eax: 4095
registers.ebp: 1637168
registers.edx: 20
registers.ebx: 4370453
registers.esi: 4198912
registers.ecx: 0
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 00 00 75 fb 68 f8 c2 42 00 68 e4 9a 42 00 ff 15
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2ae48
exception.instruction: add byte ptr [eax], al
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 175688
exception.address: 0x42ae48
registers.esp: 1636952
registers.edi: 1637180
registers.eax: 0
registers.ebp: 1637168
registers.edx: 37552501
registers.ebx: 1
registers.esi: 1637388
registers.ecx: 2003318954
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 18 10 40 00 c7 45 f0 00 00 00 00 9b 68 7e b0 42
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2b01e
exception.instruction: sbb byte ptr [eax], dl
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 176158
exception.address: 0x42b01e
registers.esp: 1636952
registers.edi: 1637135
registers.eax: 4095
registers.ebp: 1637168
registers.edx: 20
registers.ebx: 4370453
registers.esi: 4198912
registers.ecx: 0
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 00 00 75 fb 68 f8 c2 42 00 68 e4 9a 42 00 ff 15
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2ae48
exception.instruction: add byte ptr [eax], al
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 175688
exception.address: 0x42ae48
registers.esp: 1636952
registers.edi: 1637180
registers.eax: 0
registers.ebp: 1637168
registers.edx: 37580277
registers.ebx: 1
registers.esi: 1637388
registers.ecx: 2003318954
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 18 10 40 00 c7 45 f0 00 00 00 00 9b 68 7e b0 42
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2b01e
exception.instruction: sbb byte ptr [eax], dl
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 176158
exception.address: 0x42b01e
registers.esp: 1636952
registers.edi: 1637135
registers.eax: 4095
registers.ebp: 1637168
registers.edx: 20
registers.ebx: 4370453
registers.esi: 4198912
registers.ecx: 0
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 00 00 75 fb 68 f8 c2 42 00 68 e4 9a 42 00 ff 15
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2ae48
exception.instruction: add byte ptr [eax], al
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 175688
exception.address: 0x42ae48
registers.esp: 1636952
registers.edi: 1637180
registers.eax: 0
registers.ebp: 1637168
registers.edx: 37552501
registers.ebx: 1
registers.esi: 1637388
registers.ecx: 2003318954
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
6f2a7b7e88319229_unicorn-19926+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 18 10 40 00 c7 45 f0 00 00 00 00 9b 68 7e b0 42
exception.symbol: 6f2a7b7e88319229_unicorn-19926+0x2b01e
exception.instruction: sbb byte ptr [eax], dl
exception.module: 6f2a7b7e88319229_unicorn-19926.exe
exception.exception_code: 0xc0000005
exception.offset: 176158
exception.address: 0x42b01e
registers.esp: 1636952
registers.edi: 1637135
registers.eax: 4095
registers.ebp: 1637168
registers.edx: 20
registers.ebx: 4370453
registers.esi: 4198912
registers.ecx: 0
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 6557616
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 6557616
registers.esi: 6557616
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
unicorn-38106+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 00 00 75 fb 68 f8 c2 42 00 68 e4 9a 42 00 ff 15
exception.symbol: unicorn-38106+0x2ae48
exception.instruction: add byte ptr [eax], al
exception.module: Unicorn-38106.exe
exception.exception_code: 0xc0000005
exception.offset: 175688
exception.address: 0x42ae48
registers.esp: 1636952
registers.edi: 1637180
registers.eax: 0
registers.ebp: 1637168
registers.edx: 4
registers.ebx: 1
registers.esi: 1637388
registers.ecx: 4
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 9248320
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 9248320
registers.esi: 9248320
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
unicorn-38106+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 18 10 40 00 c7 45 f0 00 00 00 00 9b 68 7e b0 42
exception.symbol: unicorn-38106+0x2b01e
exception.instruction: sbb byte ptr [eax], dl
exception.module: Unicorn-38106.exe
exception.exception_code: 0xc0000005
exception.offset: 176158
exception.address: 0x42b01e
registers.esp: 1636952
registers.edi: 1637135
registers.eax: 4095
registers.ebp: 1637168
registers.edx: 20
registers.ebx: 4370453
registers.esi: 4198912
registers.ecx: 0
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 9248320
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 9248320
registers.esi: 9248320
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
unicorn-38106+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 00 00 75 fb 68 f8 c2 42 00 68 e4 9a 42 00 ff 15
exception.symbol: unicorn-38106+0x2ae48
exception.instruction: add byte ptr [eax], al
exception.module: Unicorn-38106.exe
exception.exception_code: 0xc0000005
exception.offset: 175688
exception.address: 0x42ae48
registers.esp: 1636952
registers.edi: 1637180
registers.eax: 0
registers.ebp: 1637168
registers.edx: 7
registers.ebx: 1
registers.esi: 1637388
registers.ecx: 7
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 9248320
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 9248320
registers.esi: 9248320
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
unicorn-38106+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 18 10 40 00 c7 45 f0 00 00 00 00 9b 68 7e b0 42
exception.symbol: unicorn-38106+0x2b01e
exception.instruction: sbb byte ptr [eax], dl
exception.module: Unicorn-38106.exe
exception.exception_code: 0xc0000005
exception.offset: 176158
exception.address: 0x42b01e
registers.esp: 1636952
registers.edi: 1637135
registers.eax: 4095
registers.ebp: 1637168
registers.edx: 20
registers.ebx: 4370453
registers.esi: 4198912
registers.ecx: 0
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 9248320
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 9248320
registers.esi: 9248320
registers.ecx: 2
1 0 0

__exception__

stacktrace:
IID_IVbaHost+0x236f3 UserDllMain-0x41bc4 msvbvm60+0x51d33 @ 0x72991d33
unicorn-38106+0x297eb @ 0x4297eb
IID_IVbaHost+0x239f4 UserDllMain-0x418c3 msvbvm60+0x52034 @ 0x72992034
IID_IVbaHost+0x23e5b UserDllMain-0x4145c msvbvm60+0x5249b @ 0x7299249b
IID_IVbaHost+0x24027 UserDllMain-0x41290 msvbvm60+0x52667 @ 0x72992667
DllCanUnloadNow+0x1c1d9 DllRegisterServer-0xa1b8 msvbvm60+0xbbe8b @ 0x729fbe8b
IID_IVbaHost+0x2e809 UserDllMain-0x36aae msvbvm60+0x5ce49 @ 0x7299ce49
IID_IVbaHost+0x3133d UserDllMain-0x33f7a msvbvm60+0x5f97d @ 0x7299f97d
gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x767f62fa
GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x767f6d3a
CharPrevW+0x138 TranslateMessage-0x45 user32+0x177c4 @ 0x767f77c4
DispatchMessageA+0xf GetMessageA-0x9 user32+0x17bca @ 0x767f7bca
__vbaStrToAnsi+0x2f1 EbGetObjConnectionCounts-0x479 msvbvm60+0xa6c8 @ 0x7294a6c8
__vbaStrToAnsi+0x268 EbGetObjConnectionCounts-0x502 msvbvm60+0xa63f @ 0x7294a63f
__vbaStrToAnsi+0x146 EbGetObjConnectionCounts-0x624 msvbvm60+0xa51d @ 0x7294a51d

exception.instruction_r: 00 00 75 fb 68 f8 c2 42 00 68 e4 9a 42 00 ff 15
exception.symbol: unicorn-38106+0x2ae48
exception.instruction: add byte ptr [eax], al
exception.module: Unicorn-38106.exe
exception.exception_code: 0xc0000005
exception.offset: 175688
exception.address: 0x42ae48
registers.esp: 1636952
registers.edi: 1637180
registers.eax: 0
registers.ebp: 1637168
registers.edx: 9
registers.ebx: 1
registers.esi: 1637388
registers.ecx: 9
1 0 0

__exception__

stacktrace:
EbGetHandleOfExecutingProject+0x22b3 rtcPackDate-0xba9 msvbvm60+0xd0dcf @ 0x72a10dcf
rtcDoEvents+0x131 __vbaError-0x626 msvbvm60+0xce228 @ 0x72a0e228

exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xc41f
exception.instruction: leave
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008f
exception.offset: 50207
exception.address: 0x751bc41f
registers.esp: 1634992
registers.edi: 9248320
registers.eax: 1634992
registers.ebp: 1635072
registers.edx: 0
registers.ebx: 9248320
registers.esi: 9248320
registers.ecx: 2
1 0 0
Foreign language identified in PE resource (1 event)
name RT_VERSION language LANG_CHINESE filetype data sublanguage SUBLANG_CHINESE_SIMPLIFIED offset 0x000747c4 size 0x00000234
Creates executable files on the filesystem (50 out of 465 events)
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-34675.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-2709.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-5768.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-18340.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-45206.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-26336.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-38786.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-49372.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-51733.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-36610.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-53906.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-57897.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-15673.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-4204.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-49092.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-56487.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-26098.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-27499.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-1727.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-31164.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-4455.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-19145.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-26540.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-33886.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-53341.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-64403.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-20934.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-56842.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-44032.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-37216.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-55423.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-39456.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-48516.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-60341.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-26590.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-43922.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-3444.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-12780.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-9478.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-9903.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-48739.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-37961.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-51784.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-60666.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-40326.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-6915.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-48292.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-6152.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-19035.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-4017.exe
Drops an executable to the user AppData folder (2 events)
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-57736.exe
file C:\Users\Administrator\AppData\Local\Temp\Unicorn-60384.exe
Changes read-write memory protection to read-execute (probably to avoid detection when setting all RWX flags at the same time) (1 event)
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

process_identifier: 1784
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 24576
protection: 32 (PAGE_EXECUTE_READ)
base_address: 0x00340000
process_handle: 0xffffffff
1 0 0
The binary likely contains encrypted or compressed data indicative of a packer (2 events)
section {u'size_of_data': u'0x0002b000', u'virtual_address': u'0x00001000', u'entropy': 7.571270265616865, u'name': u'.text', u'virtual_size': u'0x0002a5c4'} entropy 7.57127026562 description A section with a high entropy has been found
entropy 0.370689655172 description Overall entropy of this PE file is high
File has been identified by 14 AntiVirus engine on IRMA as malicious (14 events)
G Data Antivirus (Windows) Virus: Generic.Dacic.94CCEEA9.A.3F016658 (Engine A), Win32.Trojan.PSE.1FY1FUT (Engine B)
Avast Core Security (Linux) Win32:MalwareX-gen [Wrm]
C4S ClamAV (Linux) Win.Packed.Generic-9967832-0
Trend Micro SProtect (Linux) Trojan.Win32.FAREIT.SME
Trellix (Linux) GenericRXTC-TT
WithSecure (Linux) Trojan.TR/Crypt.XPACK.Gen
eScan Antivirus (Linux) Generic.Dacic.94CCEEA9.A.3F016658(DB)
ESET Security (Windows) a variant of Win32/VBClone.E trojan
Sophos Anti-Virus (Linux) Troj/VB-KCP
DrWeb Antivirus (Linux) Trojan.Siggen31.13685
ClamAV (Linux) Win.Packed.Generic-9967832-0
Bitdefender Antivirus (Linux) Generic.Dacic.94CCEEA9.A.3F016658
Kaspersky Standard (Windows) Trojan.Win32.VB.dosq
Emsisoft Commandline Scanner (Windows) Generic.Dacic.94CCEEA9.A.3F016658 (B)
Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action VT Location
No hosts contacted.
Cuckoo

We're processing your submission... This could take a few seconds.