{"action":"created","issue":{"url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/1931","repository_url":"https://api.github.com/repos/cuckoosandbox/cuckoo","labels_url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/1931/labels{/name}","comments_url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/1931/comments","events_url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/1931/events","html_url":"https://github.com/cuckoosandbox/cuckoo/issues/1931","id":270427981,"number":1931,"title":"Cuckoo issue","user":{"login":"Iforar","id":29467407,"avatar_url":"https://avatars0.githubusercontent.com/u/29467407?v=4","gravatar_id":"","url":"https://api.github.com/users/Iforar","html_url":"https://github.com/Iforar","followers_url":"https://api.github.com/users/Iforar/followers","following_url":"https://api.github.com/users/Iforar/following{/other_user}","gists_url":"https://api.github.com/users/Iforar/gists{/gist_id}","starred_url":"https://api.github.com/users/Iforar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Iforar/subscriptions","organizations_url":"https://api.github.com/users/Iforar/orgs","repos_url":"https://api.github.com/users/Iforar/repos","events_url":"https://api.github.com/users/Iforar/events{/privacy}","received_events_url":"https://api.github.com/users/Iforar/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":23,"created_at":"2017-11-01T19:44:57Z","updated_at":"2018-02-04T12:57:58Z","closed_at":null,"author_association":"NONE","body":"I install cuckoo sandbox and configuration it. But when cuckoo start i have error.\r\n.-----------------.\r\n  | Cuckoo Sandbox? |\r\n  |     OH NOES!    |\\  '-.__.-'\r\n  '-----------------' \\  /oo |--.--,--,--.\r\n                         \\_.-'._i__i__i_.'\r\n                               \"\"\"\"\"\"\"\"\"\r\n\r\n Cuckoo Sandbox 2.0.4\r\n www.cuckoosandbox.org\r\n Copyright (c) 2010-2017\r\n\r\n Checking for updates...\r\n You're good to go!\r\n2017-11-01 21:34:09,723 [cuckoo.core.startup] DEBUG: Imported modules...\r\n2017-11-01 21:34:09,728 [cuckoo.core.startup] DEBUG: Imported \"auxiliary\" modules:\r\n2017-11-01 21:34:09,729 [cuckoo.core.startup] DEBUG: \t |-- MITM\r\n2017-11-01 21:34:09,729 [cuckoo.core.startup] DEBUG: \t |-- Reboot\r\n2017-11-01 21:34:09,729 [cuckoo.core.startup] DEBUG: \t |-- Services\r\n2017-11-01 21:34:09,729 [cuckoo.core.startup] DEBUG: \t `-- Sniffer\r\n2017-11-01 21:34:09,729 [cuckoo.core.startup] DEBUG: Imported \"machinery\" modules:\r\n2017-11-01 21:34:09,729 [cuckoo.core.startup] DEBUG: \t |-- vSphere\r\n2017-11-01 21:34:09,729 [cuckoo.core.startup] DEBUG: \t |-- KVM\r\n2017-11-01 21:34:09,729 [cuckoo.core.startup] DEBUG: \t |-- ESX\r\n2017-11-01 21:34:09,729 [cuckoo.core.startup] DEBUG: \t |-- XenServer\r\n2017-11-01 21:34:09,730 [cuckoo.core.startup] DEBUG: \t |-- VMware\r\n2017-11-01 21:34:09,730 [cuckoo.core.startup] DEBUG: \t |-- Avd\r\n2017-11-01 21:34:09,730 [cuckoo.core.startup] DEBUG: \t |-- QEMU\r\n2017-11-01 21:34:09,730 [cuckoo.core.startup] DEBUG: \t |-- VirtualBox\r\n2017-11-01 21:34:09,730 [cuckoo.core.startup] DEBUG: \t `-- Physical\r\n2017-11-01 21:34:09,730 [cuckoo.core.startup] DEBUG: Imported \"processing\" modules:\r\n2017-11-01 21:34:09,730 [cuckoo.core.startup] DEBUG: \t |-- AnalysisInfo\r\n2017-11-01 21:34:09,730 [cuckoo.core.startup] DEBUG: \t |-- ApkInfo\r\n2017-11-01 21:34:09,730 [cuckoo.core.startup] DEBUG: \t |-- Baseline\r\n2017-11-01 21:34:09,730 [cuckoo.core.startup] DEBUG: \t |-- BehaviorAnalysis\r\n2017-11-01 21:34:09,731 [cuckoo.core.startup] DEBUG: \t |-- Debug\r\n2017-11-01 21:34:09,731 [cuckoo.core.startup] DEBUG: \t |-- Droidmon\r\n2017-11-01 21:34:09,731 [cuckoo.core.startup] DEBUG: \t |-- Dropped\r\n2017-11-01 21:34:09,731 [cuckoo.core.startup] DEBUG: \t |-- DroppedBuffer\r\n2017-11-01 21:34:09,731 [cuckoo.core.startup] DEBUG: \t |-- Extracted\r\n2017-11-01 21:34:09,731 [cuckoo.core.startup] DEBUG: \t |-- GooglePlay\r\n2017-11-01 21:34:09,731 [cuckoo.core.startup] DEBUG: \t |-- Irma\r\n2017-11-01 21:34:09,731 [cuckoo.core.startup] DEBUG: \t |-- Memory\r\n2017-11-01 21:34:09,731 [cuckoo.core.startup] DEBUG: \t |-- MetaInfo\r\n2017-11-01 21:34:09,731 [cuckoo.core.startup] DEBUG: \t |-- MISP\r\n2017-11-01 21:34:09,732 [cuckoo.core.startup] DEBUG: \t |-- NetworkAnalysis\r\n2017-11-01 21:34:09,732 [cuckoo.core.startup] DEBUG: \t |-- ProcessMemory\r\n2017-11-01 21:34:09,732 [cuckoo.core.startup] DEBUG: \t |-- Procmon\r\n2017-11-01 21:34:09,732 [cuckoo.core.startup] DEBUG: \t |-- Screenshots\r\n2017-11-01 21:34:09,732 [cuckoo.core.startup] DEBUG: \t |-- Snort\r\n2017-11-01 21:34:09,732 [cuckoo.core.startup] DEBUG: \t |-- Static\r\n2017-11-01 21:34:09,732 [cuckoo.core.startup] DEBUG: \t |-- Strings\r\n2017-11-01 21:34:09,732 [cuckoo.core.startup] DEBUG: \t |-- Suricata\r\n2017-11-01 21:34:09,732 [cuckoo.core.startup] DEBUG: \t |-- TargetInfo\r\n2017-11-01 21:34:09,732 [cuckoo.core.startup] DEBUG: \t |-- TLSMasterSecrets\r\n2017-11-01 21:34:09,732 [cuckoo.core.startup] DEBUG: \t `-- VirusTotal\r\n2017-11-01 21:34:09,733 [cuckoo.core.startup] DEBUG: Imported \"signatures\" modules:\r\n2017-11-01 21:34:09,733 [cuckoo.core.startup] DEBUG: \t |-- AndroidAbortBroadcast\r\n2017-11-01 21:34:09,733 [cuckoo.core.startup] DEBUG: \t |-- AndroidAccountInfo\r\n2017-11-01 21:34:09,733 [cuckoo.core.startup] DEBUG: \t |-- AndroidAppInfo\r\n2017-11-01 21:34:09,733 [cuckoo.core.startup] DEBUG: \t |-- AndroidAudio\r\n2017-11-01 21:34:09,733 [cuckoo.core.startup] DEBUG: \t |-- AndroidCamera\r\n2017-11-01 21:34:09,733 [cuckoo.core.startup] DEBUG: \t |-- AndroidDangerousPermissions\r\n2017-11-01 21:34:09,733 [cuckoo.core.startup] DEBUG: \t |-- AndroidDeletedApp\r\n2017-11-01 21:34:09,733 [cuckoo.core.startup] DEBUG: \t |-- AndroidDynamicCode\r\n2017-11-01 21:34:09,733 [cuckoo.core.startup] DEBUG: \t |-- AndroidEmbeddedApk\r\n2017-11-01 21:34:09,734 [cuckoo.core.startup] DEBUG: \t |-- AndroidGooglePlayDiff\r\n2017-11-01 21:34:09,734 [cuckoo.core.startup] DEBUG: \t |-- AndroidInstalledApps\r\n2017-11-01 21:34:09,734 [cuckoo.core.startup] DEBUG: \t |-- AndroidNativeCode\r\n2017-11-01 21:34:09,734 [cuckoo.core.startup] DEBUG: \t |-- AndroidPhoneNumber\r\n2017-11-01 21:34:09,734 [cuckoo.core.startup] DEBUG: \t |-- AndroidPrivateInfoQuery\r\n2017-11-01 21:34:09,734 [cuckoo.core.startup] DEBUG: \t |-- AndroidReflectionCode\r\n2017-11-01 21:34:09,734 [cuckoo.core.startup] DEBUG: \t |-- AndroidRegisteredReceiver\r\n2017-11-01 21:34:09,734 [cuckoo.core.startup] DEBUG: \t |-- AndroidShellCommands\r\n2017-11-01 21:34:09,735 [cuckoo.core.startup] DEBUG: \t |-- AndroidSMS\r\n2017-11-01 21:34:09,735 [cuckoo.core.startup] DEBUG: \t |-- AndroidStopProcess\r\n2017-11-01 21:34:09,735 [cuckoo.core.startup] DEBUG: \t |-- ApplicationUsesLocation\r\n2017-11-01 21:34:09,735 [cuckoo.core.startup] DEBUG: \t |-- KnownVirustotal\r\n2017-11-01 21:34:09,735 [cuckoo.core.startup] DEBUG: \t |-- AntiAnalysisJavascript\r\n2017-11-01 21:34:09,735 [cuckoo.core.startup] DEBUG: \t |-- DumpedBuffer\r\n2017-11-01 21:34:09,736 [cuckoo.core.startup] DEBUG: \t |-- DumpedBuffer2\r\n2017-11-01 21:34:09,736 [cuckoo.core.startup] DEBUG: \t |-- EncryptionKeys\r\n2017-11-01 21:34:09,736 [cuckoo.core.startup] DEBUG: \t |-- EvalJS\r\n2017-11-01 21:34:09,736 [cuckoo.core.startup] DEBUG: \t |-- Exploit_zteF460F660\r\n2017-11-01 21:34:09,736 [cuckoo.core.startup] DEBUG: \t |-- HtmlFlash\r\n2017-11-01 21:34:09,736 [cuckoo.core.startup] DEBUG: \t |-- JsIframe\r\n2017-11-01 21:34:09,736 [cuckoo.core.startup] DEBUG: \t |-- PDFAttachments\r\n2017-11-01 21:34:09,736 [cuckoo.core.startup] DEBUG: \t |-- PDFJavaScript\r\n2017-11-01 21:34:09,737 [cuckoo.core.startup] DEBUG: \t |-- PDFOpenAction\r\n2017-11-01 21:34:09,737 [cuckoo.core.startup] DEBUG: \t |-- PDFOpenActionJS\r\n2017-11-01 21:34:09,737 [cuckoo.core.startup] DEBUG: \t |-- SuspiciousJavascript\r\n2017-11-01 21:34:09,737 [cuckoo.core.startup] DEBUG: \t |-- DarwinCodeInjection\r\n2017-11-01 21:34:09,738 [cuckoo.core.startup] DEBUG: \t |-- TaskForPid\r\n2017-11-01 21:34:09,738 [cuckoo.core.startup] DEBUG: \t |-- DeadHost\r\n2017-11-01 21:34:09,738 [cuckoo.core.startup] DEBUG: \t |-- NetworkBIND\r\n2017-11-01 21:34:09,738 [cuckoo.core.startup] DEBUG: \t |-- NetworkDynDNS\r\n2017-11-01 21:34:09,739 [cuckoo.core.startup] DEBUG: \t |-- NetworkHTTP\r\n2017-11-01 21:34:09,739 [cuckoo.core.startup] DEBUG: \t |-- NetworkICMP\r\n2017-11-01 21:34:09,739 [cuckoo.core.startup] DEBUG: \t |-- NetworkIRC\r\n2017-11-01 21:34:09,739 [cuckoo.core.startup] DEBUG: \t |-- NetworkSMTP\r\n2017-11-01 21:34:09,739 [cuckoo.core.startup] DEBUG: \t |-- SnortAlert\r\n2017-11-01 21:34:09,739 [cuckoo.core.startup] DEBUG: \t |-- SuricataAlert\r\n2017-11-01 21:34:09,739 [cuckoo.core.startup] DEBUG: \t |-- Suspicious_TLD\r\n2017-11-01 21:34:09,739 [cuckoo.core.startup] DEBUG: \t |-- TorGateway\r\n2017-11-01 21:34:09,739 [cuckoo.core.startup] DEBUG: \t |-- WscriptDownloader\r\n2017-11-01 21:34:09,739 [cuckoo.core.startup] DEBUG: \t |-- ADS\r\n2017-11-01 21:34:09,740 [cuckoo.core.startup] DEBUG: \t |-- Adzok\r\n2017-11-01 21:34:09,740 [cuckoo.core.startup] DEBUG: \t |-- AlinaFile\r\n2017-11-01 21:34:09,740 [cuckoo.core.startup] DEBUG: \t |-- AlineURL\r\n2017-11-01 21:34:09,740 [cuckoo.core.startup] DEBUG: \t |-- AllocatesRWX\r\n2017-11-01 21:34:09,740 [cuckoo.core.startup] DEBUG: \t |-- AmsiBypass\r\n2017-11-01 21:34:09,740 [cuckoo.core.startup] DEBUG: \t |-- Andromeda\r\n2017-11-01 21:34:09,740 [cuckoo.core.startup] DEBUG: \t |-- AntiAnalysisDetectFile\r\n2017-11-01 21:34:09,740 [cuckoo.core.startup] DEBUG: \t |-- AntiAVDetectFile\r\n2017-11-01 21:34:09,740 [cuckoo.core.startup] DEBUG: \t |-- AntiAVDetectReg\r\n2017-11-01 21:34:09,740 [cuckoo.core.startup] DEBUG: \t |-- AntiAVSRP\r\n2017-11-01 21:34:09,740 [cuckoo.core.startup] DEBUG: \t |-- AntiDBGDevices\r\n2017-11-01 21:34:09,741 [cuckoo.core.startup] DEBUG: \t |-- AntiDBGWindows\r\n2017-11-01 21:34:09,741 [cuckoo.core.startup] DEBUG: \t |-- AntiSandboxFile\r\n2017-11-01 21:34:09,741 [cuckoo.core.startup] DEBUG: \t |-- AntiSandboxForegroundWindow\r\n2017-11-01 21:34:09,741 [cuckoo.core.startup] DEBUG: \t |-- AntiSandboxIdleTime\r\n2017-11-01 21:34:09,741 [cuckoo.core.startup] DEBUG: \t |-- AntiSandboxRestart\r\n2017-11-01 21:34:09,741 [cuckoo.core.startup] DEBUG: \t |-- AntiSandboxSleep\r\n2017-11-01 21:34:09,741 [cuckoo.core.startup] DEBUG: \t |-- AntiVMBios\r\n2017-11-01 21:34:09,741 [cuckoo.core.startup] DEBUG: \t |-- AntiVMComputernameQuery\r\n2017-11-01 21:34:09,741 [cuckoo.core.startup] DEBUG: \t |-- AntiVMCPU\r\n2017-11-01 21:34:09,741 [cuckoo.core.startup] DEBUG: \t |-- AntiVMDiskSize\r\n2017-11-01 21:34:09,742 [cuckoo.core.startup] DEBUG: \t |-- AntiVMIDE\r\n2017-11-01 21:34:09,742 [cuckoo.core.startup] DEBUG: \t |-- AntiVMSCSI\r\n2017-11-01 21:34:09,742 [cuckoo.core.startup] DEBUG: \t |-- AntiVMServices\r\n2017-11-01 21:34:09,742 [cuckoo.core.startup] DEBUG: \t |-- AntiVMSharedDevice\r\n2017-11-01 21:34:09,742 [cuckoo.core.startup] DEBUG: \t |-- AppLockerBypass\r\n2017-11-01 21:34:09,742 [cuckoo.core.startup] DEBUG: \t |-- APT_Carbunak\r\n2017-11-01 21:34:09,742 [cuckoo.core.startup] DEBUG: \t |-- APT_CloudAtlas\r\n2017-11-01 21:34:09,742 [cuckoo.core.startup] DEBUG: \t |-- apt_sandworm_ip\r\n2017-11-01 21:34:09,742 [cuckoo.core.startup] DEBUG: \t |-- apt_sandworm_url\r\n2017-11-01 21:34:09,742 [cuckoo.core.startup] DEBUG: \t |-- ArdamaxMutexes\r\n2017-11-01 21:34:09,742 [cuckoo.core.startup] DEBUG: \t |-- AthenaHttp\r\n2017-11-01 21:34:09,743 [cuckoo.core.startup] DEBUG: \t |-- AthenaURL\r\n2017-11-01 21:34:09,743 [cuckoo.core.startup] DEBUG: \t |-- Autorun\r\n2017-11-01 21:34:09,743 [cuckoo.core.startup] DEBUG: \t |-- AvastDetectLibs\r\n2017-11-01 21:34:09,743 [cuckoo.core.startup] DEBUG: \t |-- AVDetectionChinaKey\r\n2017-11-01 21:34:09,743 [cuckoo.core.startup] DEBUG: \t |-- BadCerts\r\n2017-11-01 21:34:09,743 [cuckoo.core.startup] DEBUG: \t |-- Bagle\r\n2017-11-01 21:34:09,743 [cuckoo.core.startup] DEBUG: \t |-- Bandook\r\n2017-11-01 21:34:09,743 [cuckoo.core.startup] DEBUG: \t |-- banker_bancos\r\n2017-11-01 21:34:09,743 [cuckoo.core.startup] DEBUG: \t |-- BankingMutexes\r\n2017-11-01 21:34:09,743 [cuckoo.core.startup] DEBUG: \t |-- Banload\r\n2017-11-01 21:34:09,743 [cuckoo.core.startup] DEBUG: \t |-- Beastdoor\r\n2017-11-01 21:34:09,744 [cuckoo.core.startup] DEBUG: \t |-- BeebusMutexes\r\n2017-11-01 21:34:09,744 [cuckoo.core.startup] DEBUG: \t |-- BegseabugTDMutexes\r\n2017-11-01 21:34:09,744 [cuckoo.core.startup] DEBUG: \t |-- BetabotURL\r\n2017-11-01 21:34:09,744 [cuckoo.core.startup] DEBUG: \t |-- Bifrose\r\n2017-11-01 21:34:09,744 [cuckoo.core.startup] DEBUG: \t |-- BitcoinOpenCL\r\n2017-11-01 21:34:09,744 [cuckoo.core.startup] DEBUG: \t |-- BitcoinWallet\r\n2017-11-01 21:34:09,744 [cuckoo.core.startup] DEBUG: \t |-- BitdefenderDetectLibs\r\n2017-11-01 21:34:09,744 [cuckoo.core.startup] DEBUG: \t |-- BlackEnergyMutexes\r\n2017-11-01 21:34:09,744 [cuckoo.core.startup] DEBUG: \t |-- Blackhole\r\n2017-11-01 21:34:09,744 [cuckoo.core.startup] DEBUG: \t |-- BlackholeURL\r\n2017-11-01 21:34:09,745 [cuckoo.core.startup] DEBUG: \t |-- Blackice\r\n2017-11-01 21:34:09,745 [cuckoo.core.startup] DEBUG: \t |-- BlackposURL\r\n2017-11-01 21:34:09,745 [cuckoo.core.startup] DEBUG: \t |-- BlackRevMutexes\r\n2017-11-01 21:34:09,745 [cuckoo.core.startup] DEBUG: \t |-- Blackshades\r\n2017-11-01 21:34:09,745 [cuckoo.core.startup] DEBUG: \t |-- BladabindiMutexes\r\n2017-11-01 21:34:09,745 [cuckoo.core.startup] DEBUG: \t |-- BochsDetectKeys\r\n2017-11-01 21:34:09,745 [cuckoo.core.startup] DEBUG: \t |-- Bootkit\r\n2017-11-01 21:34:09,745 [cuckoo.core.startup] DEBUG: \t |-- Bottilda\r\n2017-11-01 21:34:09,745 [cuckoo.core.startup] DEBUG: \t |-- BozokKey\r\n2017-11-01 21:34:09,745 [cuckoo.core.startup] DEBUG: \t |-- browser_startpage\r\n2017-11-01 21:34:09,745 [cuckoo.core.startup] DEBUG: \t |-- BrowserSecurity\r\n2017-11-01 21:34:09,746 [cuckoo.core.startup] DEBUG: \t |-- BrowserStealer\r\n2017-11-01 21:34:09,746 [cuckoo.core.startup] DEBUG: \t |-- Btcbotnet\r\n2017-11-01 21:34:09,746 [cuckoo.core.startup] DEBUG: \t |-- Bublik\r\n2017-11-01 21:34:09,746 [cuckoo.core.startup] DEBUG: \t |-- BuildLangID\r\n2017-11-01 21:34:09,746 [cuckoo.core.startup] DEBUG: \t |-- BuzusMutexes\r\n2017-11-01 21:34:09,746 [cuckoo.core.startup] DEBUG: \t |-- BypassFirewall\r\n2017-11-01 21:34:09,746 [cuckoo.core.startup] DEBUG: \t |-- c24URL\r\n2017-11-01 21:34:09,746 [cuckoo.core.startup] DEBUG: \t |-- CarberpMutexes\r\n2017-11-01 21:34:09,746 [cuckoo.core.startup] DEBUG: \t |-- Ceatrg\r\n2017-11-01 21:34:09,746 [cuckoo.core.startup] DEBUG: \t |-- ChanitorMutexes\r\n2017-11-01 21:34:09,747 [cuckoo.core.startup] DEBUG: \t |-- CheckIP\r\n2017-11-01 21:34:09,747 [cuckoo.core.startup] DEBUG: \t |-- cloud_mediafire\r\n2017-11-01 21:34:09,747 [cuckoo.core.startup] DEBUG: \t |-- cloud_wetransfer\r\n2017-11-01 21:34:09,747 [cuckoo.core.startup] DEBUG: \t |-- CloudFlare\r\n2017-11-01 21:34:09,747 [cuckoo.core.startup] DEBUG: \t |-- CloudGoogle\r\n2017-11-01 21:34:09,747 [cuckoo.core.startup] DEBUG: \t |-- CoinminerMutexes\r\n2017-11-01 21:34:09,747 [cuckoo.core.startup] DEBUG: \t |-- ComRAT\r\n2017-11-01 21:34:09,747 [cuckoo.core.startup] DEBUG: \t |-- Crash\r\n2017-11-01 21:34:09,747 [cuckoo.core.startup] DEBUG: \t |-- CreatesAutorunInf\r\n2017-11-01 21:34:09,747 [cuckoo.core.startup] DEBUG: \t |-- CreatesDocument\r\n2017-11-01 21:34:09,748 [cuckoo.core.startup] DEBUG: \t |-- CreatesExe\r\n2017-11-01 21:34:09,748 [cuckoo.core.startup] DEBUG: \t |-- CreatesLargeKey\r\n2017-11-01 21:34:09,748 [cuckoo.core.startup] DEBUG: \t |-- CreatesService\r\n2017-11-01 21:34:09,748 [cuckoo.core.startup] DEBUG: \t |-- CreatesShortcut\r\n2017-11-01 21:34:09,748 [cuckoo.core.startup] DEBUG: \t |-- CreatesSuspiciousProcess\r\n2017-11-01 21:34:09,748 [cuckoo.core.startup] DEBUG: \t |-- Cridex\r\n2017-11-01 21:34:09,748 [cuckoo.core.startup] DEBUG: \t |-- CryptGenKey\r\n2017-11-01 21:34:09,748 [cuckoo.core.startup] DEBUG: \t |-- Cryptolocker\r\n2017-11-01 21:34:09,748 [cuckoo.core.startup] DEBUG: \t |-- CuckooDetectFiles\r\n2017-11-01 21:34:09,748 [cuckoo.core.startup] DEBUG: \t |-- Cybergate\r\n2017-11-01 21:34:09,749 [cuckoo.core.startup] DEBUG: \t |-- Dapato\r\n2017-11-01 21:34:09,749 [cuckoo.core.startup] DEBUG: \t |-- Darkcloud\r\n2017-11-01 21:34:09,749 [cuckoo.core.startup] DEBUG: \t |-- DarkddosMutexes\r\n2017-11-01 21:34:09,749 [cuckoo.core.startup] DEBUG: \t |-- Darkshell\r\n2017-11-01 21:34:09,749 [cuckoo.core.startup] DEBUG: \t |-- Ddos556\r\n2017-11-01 21:34:09,749 [cuckoo.core.startup] DEBUG: \t |-- Decay\r\n2017-11-01 21:34:09,749 [cuckoo.core.startup] DEBUG: \t |-- DecebalMutexes\r\n2017-11-01 21:34:09,749 [cuckoo.core.startup] DEBUG: \t |-- DeletesSelf\r\n2017-11-01 21:34:09,749 [cuckoo.core.startup] DEBUG: \t |-- DelfTrojan\r\n2017-11-01 21:34:09,749 [cuckoo.core.startup] DEBUG: \t |-- DEPHeapBypass\r\n2017-11-01 21:34:09,749 [cuckoo.core.startup] DEBUG: \t |-- DEPStackBypass\r\n2017-11-01 21:34:09,750 [cuckoo.core.startup] DEBUG: \t |-- DerusbiMutexes\r\n2017-11-01 21:34:09,750 [cuckoo.core.startup] DEBUG: \t |-- Dexter\r\n2017-11-01 21:34:09,750 [cuckoo.core.startup] DEBUG: \t |-- Dibik\r\n2017-11-01 21:34:09,750 [cuckoo.core.startup] DEBUG: \t |-- DirtJumper\r\n2017-11-01 21:34:09,750 [cuckoo.core.startup] DEBUG: \t |-- DisableCmd\r\n2017-11-01 21:34:09,750 [cuckoo.core.startup] DEBUG: \t |-- DisableRegedit\r\n2017-11-01 21:34:09,750 [cuckoo.core.startup] DEBUG: \t |-- DisablesAppLaunch\r\n2017-11-01 21:34:09,750 [cuckoo.core.startup] DEBUG: \t |-- DisablesBrowserWarn\r\n2017-11-01 21:34:09,750 [cuckoo.core.startup] DEBUG: \t |-- DisablesSecurity\r\n2017-11-01 21:34:09,750 [cuckoo.core.startup] DEBUG: \t |-- DisablesSPDY\r\n2017-11-01 21:34:09,751 [cuckoo.core.startup] DEBUG: \t |-- DisablesSystemRestore\r\n2017-11-01 21:34:09,751 [cuckoo.core.startup] DEBUG: \t |-- DisablesWER\r\n2017-11-01 21:34:09,751 [cuckoo.core.startup] DEBUG: \t |-- DisablesWindowsUpdate\r\n2017-11-01 21:34:09,751 [cuckoo.core.startup] DEBUG: \t |-- DisableTaskMgr\r\n2017-11-01 21:34:09,752 [cuckoo.core.startup] DEBUG: \t |-- DiskInformation\r\n2017-11-01 21:34:09,752 [cuckoo.core.startup] DEBUG: \t |-- DisplaysHTA\r\n2017-11-01 21:34:09,752 [cuckoo.core.startup] DEBUG: \t |-- Dns_Freehosting_Domain\r\n2017-11-01 21:34:09,752 [cuckoo.core.startup] DEBUG: \t |-- dnsserver_dynamic\r\n2017-11-01 21:34:09,752 [cuckoo.core.startup] DEBUG: \t |-- DocumentClose\r\n2017-11-01 21:34:09,752 [cuckoo.core.startup] DEBUG: \t |-- DocumentOpen\r\n2017-11-01 21:34:09,753 [cuckoo.core.startup] DEBUG: \t |-- DoFoil\r\n2017-11-01 21:34:09,753 [cuckoo.core.startup] DEBUG: \t |-- DownloaderCabby\r\n2017-11-01 21:34:09,753 [cuckoo.core.startup] DEBUG: \t |-- Dridex_APIs\r\n2017-11-01 21:34:09,753 [cuckoo.core.startup] DEBUG: \t |-- Drive\r\n2017-11-01 21:34:09,753 [cuckoo.core.startup] DEBUG: \t |-- Drive2\r\n2017-11-01 21:34:09,753 [cuckoo.core.startup] DEBUG: \t |-- DriverLoad\r\n2017-11-01 21:34:09,753 [cuckoo.core.startup] DEBUG: \t |-- DropBox\r\n2017-11-01 21:34:09,754 [cuckoo.core.startup] DEBUG: \t |-- Dropper\r\n2017-11-01 21:34:09,754 [cuckoo.core.startup] DEBUG: \t |-- Dyreza\r\n2017-11-01 21:34:09,754 [cuckoo.core.startup] DEBUG: \t |-- EclipseMutexes\r\n2017-11-01 21:34:09,754 [cuckoo.core.startup] DEBUG: \t |-- Emotet\r\n2017-11-01 21:34:09,754 [cuckoo.core.startup] DEBUG: \t |-- Emotet_APIs\r\n2017-11-01 21:34:09,755 [cuckoo.core.startup] DEBUG: \t |-- Evilbot\r\n2017-11-01 21:34:09,755 [cuckoo.core.startup] DEBUG: \t |-- ExecBitsAdmin\r\n2017-11-01 21:34:09,755 [cuckoo.core.startup] DEBUG: \t |-- ExecWaitFor\r\n2017-11-01 21:34:09,756 [cuckoo.core.startup] DEBUG: \t |-- exp_3322_dom\r\n2017-11-01 21:34:09,756 [cuckoo.core.startup] DEBUG: \t |-- Expiro\r\n2017-11-01 21:34:09,756 [cuckoo.core.startup] DEBUG: \t |-- ExploitHeapspray\r\n2017-11-01 21:34:09,756 [cuckoo.core.startup] DEBUG: \t |-- ExploitKitMutexes\r\n2017-11-01 21:34:09,756 [cuckoo.core.startup] DEBUG: \t |-- FakeAVMutexes\r\n2017-11-01 21:34:09,756 [cuckoo.core.startup] DEBUG: \t |-- FakeAVMutexes\r\n2017-11-01 21:34:09,756 [cuckoo.core.startup] DEBUG: \t |-- FakeRean\r\n2017-11-01 21:34:09,757 [cuckoo.core.startup] DEBUG: \t |-- FarFli\r\n2017-11-01 21:34:09,757 [cuckoo.core.startup] DEBUG: \t |-- FesberMutexes\r\n2017-11-01 21:34:09,757 [cuckoo.core.startup] DEBUG: \t |-- Fingerprint\r\n2017-11-01 21:34:09,757 [cuckoo.core.startup] DEBUG: \t |-- Flame\r\n2017-11-01 21:34:09,757 [cuckoo.core.startup] DEBUG: \t |-- Flystudio\r\n2017-11-01 21:34:09,757 [cuckoo.core.startup] DEBUG: \t |-- FortinetDetectFiles\r\n2017-11-01 21:34:09,757 [cuckoo.core.startup] DEBUG: \t |-- FTPStealer\r\n2017-11-01 21:34:09,757 [cuckoo.core.startup] DEBUG: \t |-- Fynloski\r\n2017-11-01 21:34:09,758 [cuckoo.core.startup] DEBUG: \t |-- Gaelicum\r\n2017-11-01 21:34:09,758 [cuckoo.core.startup] DEBUG: \t |-- Ghostbot\r\n2017-11-01 21:34:09,758 [cuckoo.core.startup] DEBUG: \t |-- HasAuthenticode\r\n2017-11-01 21:34:09,758 [cuckoo.core.startup] DEBUG: \t |-- HasOfficeEps\r\n2017-11-01 21:34:09,758 [cuckoo.core.startup] DEBUG: \t |-- HasPdb\r\n2017-11-01 21:34:09,758 [cuckoo.core.startup] DEBUG: \t |-- HasWMI\r\n2017-11-01 21:34:09,758 [cuckoo.core.startup] DEBUG: \t |-- Hesperbot\r\n2017-11-01 21:34:09,758 [cuckoo.core.startup] DEBUG: \t |-- Hidden_Window\r\n2017-11-01 21:34:09,758 [cuckoo.core.startup] DEBUG: \t |-- Hikit\r\n2017-11-01 21:34:09,759 [cuckoo.core.startup] DEBUG: \t |-- HookMouse\r\n2017-11-01 21:34:09,759 [cuckoo.core.startup] DEBUG: \t |-- Hupigon\r\n2017-11-01 21:34:09,759 [cuckoo.core.startup] DEBUG: \t |-- HyperVDetectKeys\r\n2017-11-01 21:34:09,759 [cuckoo.core.startup] DEBUG: \t |-- IcePoint\r\n2017-11-01 21:34:09,759 [cuckoo.core.startup] DEBUG: \t |-- im_btb\r\n2017-11-01 21:34:09,759 [cuckoo.core.startup] DEBUG: \t |-- im_qq\r\n2017-11-01 21:34:09,759 [cuckoo.core.startup] DEBUG: \t |-- IMStealer\r\n2017-11-01 21:34:09,759 [cuckoo.core.startup] DEBUG: \t |-- InceptionAPT\r\n2017-11-01 21:34:09,759 [cuckoo.core.startup] DEBUG: \t |-- Infinity\r\n2017-11-01 21:34:09,759 [cuckoo.core.startup] DEBUG: \t |-- InjectionRunPE\r\n2017-11-01 21:34:09,760 [cuckoo.core.startup] DEBUG: \t |-- InjectionThread\r\n2017-11-01 21:34:09,760 [cuckoo.core.startup] DEBUG: \t |-- InstalledApps\r\n2017-11-01 21:34:09,760 [cuckoo.core.startup] DEBUG: \t |-- InstallsAppInit\r\n2017-11-01 21:34:09,760 [cuckoo.core.startup] DEBUG: \t |-- InstallsBHO\r\n2017-11-01 21:34:09,760 [cuckoo.core.startup] DEBUG: \t |-- InstallsWinpcap\r\n2017-11-01 21:34:09,760 [cuckoo.core.startup] DEBUG: \t |-- IPKillerMutexes\r\n2017-11-01 21:34:09,760 [cuckoo.core.startup] DEBUG: \t |-- Ircbrute\r\n2017-11-01 21:34:09,760 [cuckoo.core.startup] DEBUG: \t |-- ISRstealerURL\r\n2017-11-01 21:34:09,761 [cuckoo.core.startup] DEBUG: \t |-- iStealerURL\r\n2017-11-01 21:34:09,761 [cuckoo.core.startup] DEBUG: \t |-- JackPOSFile\r\n2017-11-01 21:34:09,761 [cuckoo.core.startup] DEBUG: \t |-- JackposURL\r\n2017-11-01 21:34:09,761 [cuckoo.core.startup] DEBUG: \t |-- JeefoMutexes\r\n2017-11-01 21:34:09,761 [cuckoo.core.startup] DEBUG: \t |-- Jewdo\r\n2017-11-01 21:34:09,761 [cuckoo.core.startup] DEBUG: \t |-- JintorMutexes\r\n2017-11-01 21:34:09,761 [cuckoo.core.startup] DEBUG: \t |-- JorikTrojan\r\n2017-11-01 21:34:09,761 [cuckoo.core.startup] DEBUG: \t |-- Karagany\r\n2017-11-01 21:34:09,761 [cuckoo.core.startup] DEBUG: \t |-- Karakum\r\n2017-11-01 21:34:09,762 [cuckoo.core.startup] DEBUG: \t |-- Katusha\r\n2017-11-01 21:34:09,762 [cuckoo.core.startup] DEBUG: \t |-- KelihosBot\r\n2017-11-01 21:34:09,762 [cuckoo.core.startup] DEBUG: \t |-- Keylogger\r\n2017-11-01 21:34:09,762 [cuckoo.core.startup] DEBUG: \t |-- Kilim\r\n2017-11-01 21:34:09,762 [cuckoo.core.startup] DEBUG: \t |-- Killdisk\r\n2017-11-01 21:34:09,762 [cuckoo.core.startup] DEBUG: \t |-- KnownVirustotal\r\n2017-11-01 21:34:09,762 [cuckoo.core.startup] DEBUG: \t |-- Koobface\r\n2017-11-01 21:34:09,762 [cuckoo.core.startup] DEBUG: \t |-- Koutodoor\r\n2017-11-01 21:34:09,762 [cuckoo.core.startup] DEBUG: \t |-- KovterBot\r\n2017-11-01 21:34:09,763 [cuckoo.core.startup] DEBUG: \t |-- KrepperMutexes\r\n2017-11-01 21:34:09,763 [cuckoo.core.startup] DEBUG: \t |-- KuluozMutexes\r\n2017-11-01 21:34:09,763 [cuckoo.core.startup] DEBUG: \t |-- Likseput\r\n2017-11-01 21:34:09,763 [cuckoo.core.startup] DEBUG: \t |-- LocatesBrowser\r\n2017-11-01 21:34:09,763 [cuckoo.core.startup] DEBUG: \t |-- LocatesSniffer\r\n2017-11-01 21:34:09,763 [cuckoo.core.startup] DEBUG: \t |-- Lockscreen\r\n2017-11-01 21:34:09,763 [cuckoo.core.startup] DEBUG: \t |-- LolBot\r\n2017-11-01 21:34:09,763 [cuckoo.core.startup] DEBUG: \t |-- Luder\r\n2017-11-01 21:34:09,763 [cuckoo.core.startup] DEBUG: \t |-- Madness\r\n2017-11-01 21:34:09,763 [cuckoo.core.startup] DEBUG: \t |-- Madness\r\n2017-11-01 21:34:09,764 [cuckoo.core.startup] DEBUG: \t |-- MadnessURL\r\n2017-11-01 21:34:09,764 [cuckoo.core.startup] DEBUG: \t |-- MaganiaMutexes\r\n2017-11-01 21:34:09,764 [cuckoo.core.startup] DEBUG: \t |-- MailStealer\r\n2017-11-01 21:34:09,764 [cuckoo.core.startup] DEBUG: \t |-- MaliciousDocumentURLs\r\n2017-11-01 21:34:09,764 [cuckoo.core.startup] DEBUG: \t |-- MegaUpload\r\n2017-11-01 21:34:09,764 [cuckoo.core.startup] DEBUG: \t |-- MemoryAvailable\r\n2017-11-01 21:34:09,764 [cuckoo.core.startup] DEBUG: \t |-- MetasploitShellcode\r\n2017-11-01 21:34:09,764 [cuckoo.core.startup] DEBUG: \t |-- Minerbot\r\n2017-11-01 21:34:09,764 [cuckoo.core.startup] DEBUG: \t |-- miningpool\r\n2017-11-01 21:34:09,765 [cuckoo.core.startup] DEBUG: \t |-- MircFile\r\n2017-11-01 21:34:09,765 [cuckoo.core.startup] DEBUG: \t |-- ModifiesBootConfig\r\n2017-11-01 21:34:09,765 [cuckoo.core.startup] DEBUG: \t |-- ModifiesCertificates\r\n2017-11-01 21:34:09,765 [cuckoo.core.startup] DEBUG: \t |-- ModifiesDesktopWallpaper\r\n2017-11-01 21:34:09,765 [cuckoo.core.startup] DEBUG: \t |-- ModifiesUACNotify\r\n2017-11-01 21:34:09,765 [cuckoo.core.startup] DEBUG: \t |-- ModifySecurityCenterWarnings\r\n2017-11-01 21:34:09,765 [cuckoo.core.startup] DEBUG: \t |-- Multiple_UA\r\n2017-11-01 21:34:09,765 [cuckoo.core.startup] DEBUG: \t |-- MyBot\r\n2017-11-01 21:34:09,765 [cuckoo.core.startup] DEBUG: \t |-- Nakbot\r\n2017-11-01 21:34:09,766 [cuckoo.core.startup] DEBUG: \t |-- Napolar\r\n2017-11-01 21:34:09,766 [cuckoo.core.startup] DEBUG: \t |-- Nebuler\r\n2017-11-01 21:34:09,766 [cuckoo.core.startup] DEBUG: \t |-- Netobserve\r\n2017-11-01 21:34:09,766 [cuckoo.core.startup] DEBUG: \t |-- Netshadow\r\n2017-11-01 21:34:09,766 [cuckoo.core.startup] DEBUG: \t |-- Netwire\r\n2017-11-01 21:34:09,766 [cuckoo.core.startup] DEBUG: \t |-- NetworkAdapters\r\n2017-11-01 21:34:09,766 [cuckoo.core.startup] DEBUG: \t |-- NetworkC2Details\r\n2017-11-01 21:34:09,766 [cuckoo.core.startup] DEBUG: \t |-- NetworkDocumentFile\r\n2017-11-01 21:34:09,766 [cuckoo.core.startup] DEBUG: \t |-- NetworkEXE\r\n2017-11-01 21:34:09,767 [cuckoo.core.startup] DEBUG: \t |-- Nitol\r\n2017-11-01 21:34:09,767 [cuckoo.core.startup] DEBUG: \t |-- NjRat\r\n2017-11-01 21:34:09,767 [cuckoo.core.startup] DEBUG: \t |-- ObfusMutexes\r\n2017-11-01 21:34:09,767 [cuckoo.core.startup] DEBUG: \t |-- OfficeCheckName\r\n2017-11-01 21:34:09,767 [cuckoo.core.startup] DEBUG: \t |-- OfficeCheckProjectName\r\n2017-11-01 21:34:09,767 [cuckoo.core.startup] DEBUG: \t |-- OfficeCheckVersion\r\n2017-11-01 21:34:09,767 [cuckoo.core.startup] DEBUG: \t |-- OfficeCheckWindow\r\n2017-11-01 21:34:09,767 [cuckoo.core.startup] DEBUG: \t |-- OfficeCountDirectories\r\n2017-11-01 21:34:09,768 [cuckoo.core.startup] DEBUG: \t |-- OfficeCreateObject\r\n2017-11-01 21:34:09,768 [cuckoo.core.startup] DEBUG: \t |-- OfficeEpsStrings\r\n2017-11-01 21:34:09,768 [cuckoo.core.startup] DEBUG: \t |-- OfficeHttpRequest\r\n2017-11-01 21:34:09,768 [cuckoo.core.startup] DEBUG: \t |-- OfficeIndirectCall\r\n2017-11-01 21:34:09,768 [cuckoo.core.startup] DEBUG: \t |-- OfficePackager\r\n2017-11-01 21:34:09,768 [cuckoo.core.startup] DEBUG: \t |-- OfficePlatformDetect\r\n2017-11-01 21:34:09,768 [cuckoo.core.startup] DEBUG: \t |-- OfficeRecentFiles\r\n2017-11-01 21:34:09,768 [cuckoo.core.startup] DEBUG: \t |-- OfficeVulnerableGuid\r\n2017-11-01 21:34:09,768 [cuckoo.core.startup] DEBUG: \t |-- OfficeVulnModules\r\n2017-11-01 21:34:09,768 [cuckoo.core.startup] DEBUG: \t |-- Oldrea\r\n2017-11-01 21:34:09,769 [cuckoo.core.startup] DEBUG: \t |-- OverwritesFiles\r\n2017-11-01 21:34:09,769 [cuckoo.core.startup] DEBUG: \t |-- PackerEntropy\r\n2017-11-01 21:34:09,769 [cuckoo.core.startup] DEBUG: \t |-- Palevo\r\n2017-11-01 21:34:09,769 [cuckoo.core.startup] DEBUG: \t |-- ParallelsDetectKeys\r\n2017-11-01 21:34:09,769 [cuckoo.core.startup] DEBUG: \t |-- Pasta\r\n2017-11-01 21:34:09,769 [cuckoo.core.startup] DEBUG: \t |-- PcClientMutexes\r\n2017-11-01 21:34:09,769 [cuckoo.core.startup] DEBUG: \t |-- PEFeatures\r\n2017-11-01 21:34:09,769 [cuckoo.core.startup] DEBUG: \t |-- PEIDPacker\r\n2017-11-01 21:34:09,769 [cuckoo.core.startup] DEBUG: \t |-- PerfLogger\r\n2017-11-01 21:34:09,770 [cuckoo.core.startup] DEBUG: \t |-- PersistanceRegJavaScript\r\n2017-11-01 21:34:09,770 [cuckoo.core.startup] DEBUG: \t |-- PersistenceBootexecute\r\n2017-11-01 21:34:09,770 [cuckoo.core.startup] DEBUG: \t |-- Phorpiex\r\n2017-11-01 21:34:09,770 [cuckoo.core.startup] DEBUG: \t |-- Pidief\r\n2017-11-01 21:34:09,770 [cuckoo.core.startup] DEBUG: \t |-- Plugx\r\n2017-11-01 21:34:09,770 [cuckoo.core.startup] DEBUG: \t |-- Poebot\r\n2017-11-01 21:34:09,770 [cuckoo.core.startup] DEBUG: \t |-- PoisonIvy\r\n2017-11-01 21:34:09,770 [cuckoo.core.startup] DEBUG: \t |-- Polymorphic\r\n2017-11-01 21:34:09,770 [cuckoo.core.startup] DEBUG: \t |-- Ponfoy\r\n2017-11-01 21:34:09,771 [cuckoo.core.startup] DEBUG: \t |-- PonyURL\r\n2017-11-01 21:34:09,771 [cuckoo.core.startup] DEBUG: \t |-- PosCardStealerURL\r\n2017-11-01 21:34:09,771 [cuckoo.core.startup] DEBUG: \t |-- Powerfun\r\n2017-11-01 21:34:09,771 [cuckoo.core.startup] DEBUG: \t |-- PowershellBitsTransfer\r\n2017-11-01 21:34:09,771 [cuckoo.core.startup] DEBUG: \t |-- PowershellCcDns\r\n2017-11-01 21:34:09,771 [cuckoo.core.startup] DEBUG: \t |-- PowershellDdiRc4\r\n2017-11-01 21:34:09,771 [cuckoo.core.startup] DEBUG: \t |-- PowershellDFSP\r\n2017-11-01 21:34:09,771 [cuckoo.core.startup] DEBUG: \t |-- PowershellDI\r\n2017-11-01 21:34:09,771 [cuckoo.core.startup] DEBUG: \t |-- PowershellDownload\r\n2017-11-01 21:34:09,772 [cuckoo.core.startup] DEBUG: \t |-- PowershellEmpire\r\n2017-11-01 21:34:09,772 [cuckoo.core.startup] DEBUG: \t |-- PowershellMeterpreter\r\n2017-11-01 21:34:09,772 [cuckoo.core.startup] DEBUG: \t |-- PowershellRegAdd\r\n2017-11-01 21:34:09,772 [cuckoo.core.startup] DEBUG: \t |-- PowershellRequest\r\n2017-11-01 21:34:09,772 [cuckoo.core.startup] DEBUG: \t |-- PowershellUnicorn\r\n2017-11-01 21:34:09,772 [cuckoo.core.startup] DEBUG: \t |-- Powerworm\r\n2017-11-01 21:34:09,772 [cuckoo.core.startup] DEBUG: \t |-- Prinimalka\r\n2017-11-01 21:34:09,772 [cuckoo.core.startup] DEBUG: \t |-- ProcessInterest\r\n2017-11-01 21:34:09,772 [cuckoo.core.startup] DEBUG: \t |-- ProcessMartian\r\n2017-11-01 21:34:09,773 [cuckoo.core.startup] DEBUG: \t |-- ProcessNeeded\r\n2017-11-01 21:34:09,773 [cuckoo.core.startup] DEBUG: \t |-- ProcMemDumpIPURLs\r\n2017-11-01 21:34:09,773 [cuckoo.core.startup] DEBUG: \t |-- ProcMemDumpTORURLs\r\n2017-11-01 21:34:09,773 [cuckoo.core.startup] DEBUG: \t |-- ProcMemDumpURLs\r\n2017-11-01 21:34:09,773 [cuckoo.core.startup] DEBUG: \t |-- ProcMemDumpYara\r\n2017-11-01 21:34:09,773 [cuckoo.core.startup] DEBUG: \t |-- Psyokym\r\n2017-11-01 21:34:09,773 [cuckoo.core.startup] DEBUG: \t |-- PuceMutexes\r\n2017-11-01 21:34:09,773 [cuckoo.core.startup] DEBUG: \t |-- PutterpandaMutexes\r\n2017-11-01 21:34:09,773 [cuckoo.core.startup] DEBUG: \t |-- Putty\r\n2017-11-01 21:34:09,774 [cuckoo.core.startup] DEBUG: \t |-- PWDumpFile\r\n2017-11-01 21:34:09,774 [cuckoo.core.startup] DEBUG: \t |-- Pykse\r\n2017-11-01 21:34:09,774 [cuckoo.core.startup] DEBUG: \t |-- Qakbot\r\n2017-11-01 21:34:09,774 [cuckoo.core.startup] DEBUG: \t |-- Ragebot\r\n2017-11-01 21:34:09,774 [cuckoo.core.startup] DEBUG: \t |-- RaisesException\r\n2017-11-01 21:34:09,774 [cuckoo.core.startup] DEBUG: \t |-- Ramnit\r\n2017-11-01 21:34:09,774 [cuckoo.core.startup] DEBUG: \t |-- RamsomwareFileMoves\r\n2017-11-01 21:34:09,774 [cuckoo.core.startup] DEBUG: \t |-- ransomware_viruscoder\r\n2017-11-01 21:34:09,774 [cuckoo.core.startup] DEBUG: \t |-- RansomwareAppendsExtension\r\n2017-11-01 21:34:09,774 [cuckoo.core.startup] DEBUG: \t |-- RansomwareBcdedit\r\n2017-11-01 21:34:09,775 [cuckoo.core.startup] DEBUG: \t |-- RansomwareDroppedFiles\r\n2017-11-01 21:34:09,775 [cuckoo.core.startup] DEBUG: \t |-- RansomwareExtensions\r\n2017-11-01 21:34:09,775 [cuckoo.core.startup] DEBUG: \t |-- RansomwareFiles\r\n2017-11-01 21:34:09,775 [cuckoo.core.startup] DEBUG: \t |-- RansomwareMessage\r\n2017-11-01 21:34:09,775 [cuckoo.core.startup] DEBUG: \t |-- RansomwareRecyclebin\r\n2017-11-01 21:34:09,775 [cuckoo.core.startup] DEBUG: \t |-- RansomwareShadowcopy\r\n2017-11-01 21:34:09,775 [cuckoo.core.startup] DEBUG: \t |-- RapidShare\r\n2017-11-01 21:34:09,775 [cuckoo.core.startup] DEBUG: \t |-- rat_fexel_ip\r\n2017-11-01 21:34:09,775 [cuckoo.core.startup] DEBUG: \t |-- rat_naid_ip\r\n2017-11-01 21:34:09,776 [cuckoo.core.startup] DEBUG: \t |-- RatSiggen\r\n2017-11-01 21:34:09,776 [cuckoo.core.startup] DEBUG: \t |-- RBot\r\n2017-11-01 21:34:09,776 [cuckoo.core.startup] DEBUG: \t |-- RdpMutexes\r\n2017-11-01 21:34:09,776 [cuckoo.core.startup] DEBUG: \t |-- Recon_Beacon\r\n2017-11-01 21:34:09,776 [cuckoo.core.startup] DEBUG: \t |-- RemovesZoneIdADS\r\n2017-11-01 21:34:09,776 [cuckoo.core.startup] DEBUG: \t |-- Renocide\r\n2017-11-01 21:34:09,776 [cuckoo.core.startup] DEBUG: \t |-- RenosTrojan\r\n2017-11-01 21:34:09,776 [cuckoo.core.startup] DEBUG: \t |-- Rovnix\r\n2017-11-01 21:34:09,776 [cuckoo.core.startup] DEBUG: \t |-- Runbu\r\n2017-11-01 21:34:09,777 [cuckoo.core.startup] DEBUG: \t |-- RunouceMutexes\r\n2017-11-01 21:34:09,777 [cuckoo.core.startup] DEBUG: \t |-- Ruskill\r\n2017-11-01 21:34:09,777 [cuckoo.core.startup] DEBUG: \t |-- Sadbot\r\n2017-11-01 21:34:09,777 [cuckoo.core.startup] DEBUG: \t |-- SandboxieDetect\r\n2017-11-01 21:34:09,777 [cuckoo.core.startup] DEBUG: \t |-- SandboxJoeAnubisDetectFiles\r\n2017-11-01 21:34:09,777 [cuckoo.core.startup] DEBUG: \t |-- SDBot\r\n2017-11-01 21:34:09,777 [cuckoo.core.startup] DEBUG: \t |-- SelfDeleteBat\r\n2017-11-01 21:34:09,777 [cuckoo.core.startup] DEBUG: \t |-- Senna\r\n2017-11-01 21:34:09,777 [cuckoo.core.startup] DEBUG: \t |-- Shadowbot\r\n2017-11-01 21:34:09,777 [cuckoo.core.startup] DEBUG: \t |-- SharingRGhost\r\n2017-11-01 21:34:09,778 [cuckoo.core.startup] DEBUG: \t |-- SharpStealerURL\r\n2017-11-01 21:34:09,778 [cuckoo.core.startup] DEBUG: \t |-- ShellcodeWriteProcessMemory\r\n2017-11-01 21:34:09,778 [cuckoo.core.startup] DEBUG: \t |-- Shiz\r\n2017-11-01 21:34:09,778 [cuckoo.core.startup] DEBUG: \t |-- Shylock\r\n2017-11-01 21:34:09,778 [cuckoo.core.startup] DEBUG: \t |-- SipStun\r\n2017-11-01 21:34:09,778 [cuckoo.core.startup] DEBUG: \t |-- Smtp_GMail\r\n2017-11-01 21:34:09,778 [cuckoo.core.startup] DEBUG: \t |-- Smtp_Live\r\n2017-11-01 21:34:09,778 [cuckoo.core.startup] DEBUG: \t |-- Smtp_Mail_Ru\r\n2017-11-01 21:34:09,778 [cuckoo.core.startup] DEBUG: \t |-- Smtp_Yahoo\r\n2017-11-01 21:34:09,779 [cuckoo.core.startup] DEBUG: \t |-- SolarURL\r\n2017-11-01 21:34:09,779 [cuckoo.core.startup] DEBUG: \t |-- SpyEyeMutexes\r\n2017-11-01 21:34:09,779 [cuckoo.core.startup] DEBUG: \t |-- SpyeyeURL\r\n2017-11-01 21:34:09,779 [cuckoo.core.startup] DEBUG: \t |-- SpynetRat\r\n2017-11-01 21:34:09,779 [cuckoo.core.startup] DEBUG: \t |-- Spyrecorder\r\n2017-11-01 21:34:09,779 [cuckoo.core.startup] DEBUG: \t |-- StackPivot\r\n2017-11-01 21:34:09,779 [cuckoo.core.startup] DEBUG: \t |-- StackPivotDllLoad\r\n2017-11-01 21:34:09,779 [cuckoo.core.startup] DEBUG: \t |-- Staser\r\n2017-11-01 21:34:09,779 [cuckoo.core.startup] DEBUG: \t |-- StealthChildProc\r\n2017-11-01 21:34:09,780 [cuckoo.core.startup] DEBUG: \t |-- StealthHiddenExtension\r\n2017-11-01 21:34:09,780 [cuckoo.core.startup] DEBUG: \t |-- StealthHiddenFile\r\n2017-11-01 21:34:09,780 [cuckoo.core.startup] DEBUG: \t |-- StealthHiddenIcons\r\n2017-11-01 21:34:09,780 [cuckoo.core.startup] DEBUG: \t |-- StopsService\r\n2017-11-01 21:34:09,780 [cuckoo.core.startup] DEBUG: \t |-- SunbeltDetectFiles\r\n2017-11-01 21:34:09,780 [cuckoo.core.startup] DEBUG: \t |-- SunBeltSandboxDetect\r\n2017-11-01 21:34:09,780 [cuckoo.core.startup] DEBUG: \t |-- SuspiciousCommandTools\r\n2017-11-01 21:34:09,780 [cuckoo.core.startup] DEBUG: \t |-- SuspiciousPowershell\r\n2017-11-01 21:34:09,780 [cuckoo.core.startup] DEBUG: \t |-- SuspiciousWriteEXE\r\n2017-11-01 21:34:09,780 [cuckoo.core.startup] DEBUG: \t |-- SweetorangeMutexes\r\n2017-11-01 21:34:09,781 [cuckoo.core.startup] DEBUG: \t |-- Swrort\r\n2017-11-01 21:34:09,781 [cuckoo.core.startup] DEBUG: \t |-- SystemInfo\r\n2017-11-01 21:34:09,781 [cuckoo.core.startup] DEBUG: \t |-- SystemMetrics\r\n2017-11-01 21:34:09,781 [cuckoo.core.startup] DEBUG: \t |-- TapiDpMutexes\r\n2017-11-01 21:34:09,781 [cuckoo.core.startup] DEBUG: \t |-- TDSSBackdoor\r\n2017-11-01 21:34:09,781 [cuckoo.core.startup] DEBUG: \t |-- TeamviewerRat\r\n2017-11-01 21:34:09,781 [cuckoo.core.startup] DEBUG: \t |-- ThreatTrackDetectFiles\r\n2017-11-01 21:34:09,781 [cuckoo.core.startup] DEBUG: \t |-- TinbaMutexes\r\n2017-11-01 21:34:09,782 [cuckoo.core.startup] DEBUG: \t |-- TnegaMutexes\r\n2017-11-01 21:34:09,782 [cuckoo.core.startup] DEBUG: \t |-- Tor\r\n2017-11-01 21:34:09,782 [cuckoo.core.startup] DEBUG: \t |-- TorHiddenService\r\n2017-11-01 21:34:09,782 [cuckoo.core.startup] DEBUG: \t |-- Travnet\r\n2017-11-01 21:34:09,782 [cuckoo.core.startup] DEBUG: \t |-- Trogbot\r\n2017-11-01 21:34:09,782 [cuckoo.core.startup] DEBUG: \t |-- TrojanJorik\r\n2017-11-01 21:34:09,783 [cuckoo.core.startup] DEBUG: \t |-- TrojanLethic\r\n2017-11-01 21:34:09,783 [cuckoo.core.startup] DEBUG: \t |-- TrojanLethic\r\n2017-11-01 21:34:09,783 [cuckoo.core.startup] DEBUG: \t |-- trojanmrblack\r\n2017-11-01 21:34:09,783 [cuckoo.core.startup] DEBUG: \t |-- TrojanRedosru\r\n2017-11-01 21:34:09,783 [cuckoo.core.startup] DEBUG: \t |-- TrojanSysn\r\n2017-11-01 21:34:09,783 [cuckoo.core.startup] DEBUG: \t |-- trojanyoddos\r\n2017-11-01 21:34:09,783 [cuckoo.core.startup] DEBUG: \t |-- TufikMutexes\r\n2017-11-01 21:34:09,784 [cuckoo.core.startup] DEBUG: \t |-- Turkojan\r\n2017-11-01 21:34:09,784 [cuckoo.core.startup] DEBUG: \t |-- TurlaCarbon\r\n2017-11-01 21:34:09,784 [cuckoo.core.startup] DEBUG: \t |-- UFRStealer\r\n2017-11-01 21:34:09,784 [cuckoo.core.startup] DEBUG: \t |-- Unhook\r\n2017-11-01 21:34:09,784 [cuckoo.core.startup] DEBUG: \t |-- Upatre\r\n2017-11-01 21:34:09,784 [cuckoo.core.startup] DEBUG: \t |-- UpatreTDMutexes\r\n2017-11-01 21:34:09,784 [cuckoo.core.startup] DEBUG: \t |-- UPXCompressed\r\n2017-11-01 21:34:09,785 [cuckoo.core.startup] DEBUG: \t |-- UrkShortCN\r\n2017-11-01 21:34:09,785 [cuckoo.core.startup] DEBUG: \t |-- URLSpy\r\n2017-11-01 21:34:09,785 [cuckoo.core.startup] DEBUG: \t |-- UroburosFile\r\n2017-11-01 21:34:09,785 [cuckoo.core.startup] DEBUG: \t |-- UroburosMutexes\r\n2017-11-01 21:34:09,785 [cuckoo.core.startup] DEBUG: \t |-- Urxbot\r\n2017-11-01 21:34:09,785 [cuckoo.core.startup] DEBUG: \t |-- UsesWindowsUtilities\r\n2017-11-01 21:34:09,786 [cuckoo.core.startup] DEBUG: \t |-- Vanbot\r\n2017-11-01 21:34:09,786 [cuckoo.core.startup] DEBUG: \t |-- VBInject\r\n2017-11-01 21:34:09,786 [cuckoo.core.startup] DEBUG: \t |-- VBoxDetectACPI\r\n2017-11-01 21:34:09,786 [cuckoo.core.startup] DEBUG: \t |-- VBoxDetectDevices\r\n2017-11-01 21:34:09,786 [cuckoo.core.startup] DEBUG: \t |-- VBoxDetectFiles\r\n2017-11-01 21:34:09,786 [cuckoo.core.startup] DEBUG: \t |-- VBoxDetectKeys\r\n2017-11-01 21:34:09,787 [cuckoo.core.startup] DEBUG: \t |-- VBoxDetectProvname\r\n2017-11-01 21:34:09,787 [cuckoo.core.startup] DEBUG: \t |-- VBoxDetectWindow\r\n2017-11-01 21:34:09,787 [cuckoo.core.startup] DEBUG: \t |-- Vertex\r\n2017-11-01 21:34:09,787 [cuckoo.core.startup] DEBUG: \t |-- VertexSolarURL\r\n2017-11-01 21:34:09,787 [cuckoo.core.startup] DEBUG: \t |-- VirtualPCDetect\r\n2017-11-01 21:34:09,787 [cuckoo.core.startup] DEBUG: \t |-- VirtualPCIllegalInstruction\r\n2017-11-01 21:34:09,787 [cuckoo.core.startup] DEBUG: \t |-- Virut\r\n2017-11-01 21:34:09,787 [cuckoo.core.startup] DEBUG: \t |-- VMFirmware\r\n2017-11-01 21:34:09,787 [cuckoo.core.startup] DEBUG: \t |-- VMPPacked\r\n2017-11-01 21:34:09,788 [cuckoo.core.startup] DEBUG: \t |-- VMWareDetectFiles\r\n2017-11-01 21:34:09,788 [cuckoo.core.startup] DEBUG: \t |-- VMWareDetectKeys\r\n2017-11-01 21:34:09,788 [cuckoo.core.startup] DEBUG: \t |-- VMWareInInstruction\r\n2017-11-01 21:34:09,788 [cuckoo.core.startup] DEBUG: \t |-- VncMutexes\r\n2017-11-01 21:34:09,788 [cuckoo.core.startup] DEBUG: \t |-- VNLoaderURL\r\n2017-11-01 21:34:09,788 [cuckoo.core.startup] DEBUG: \t |-- VolDevicetree1\r\n2017-11-01 21:34:09,788 [cuckoo.core.startup] DEBUG: \t |-- VolHandles1\r\n2017-11-01 21:34:09,788 [cuckoo.core.startup] DEBUG: \t |-- VolLdrModules1\r\n2017-11-01 21:34:09,789 [cuckoo.core.startup] DEBUG: \t |-- VolLdrModules2\r\n2017-11-01 21:34:09,789 [cuckoo.core.startup] DEBUG: \t |-- VolMalfind1\r\n2017-11-01 21:34:09,789 [cuckoo.core.startup] DEBUG: \t |-- VolModscan1\r\n2017-11-01 21:34:09,789 [cuckoo.core.startup] DEBUG: \t |-- VolSvcscan1\r\n2017-11-01 21:34:09,789 [cuckoo.core.startup] DEBUG: \t |-- VolSvcscan2\r\n2017-11-01 21:34:09,789 [cuckoo.core.startup] DEBUG: \t |-- VolSvcscan3\r\n2017-11-01 21:34:09,790 [cuckoo.core.startup] DEBUG: \t |-- VPCDetectKeys\r\n2017-11-01 21:34:09,790 [cuckoo.core.startup] DEBUG: \t |-- Wakbot\r\n2017-11-01 21:34:09,790 [cuckoo.core.startup] DEBUG: \t |-- WarbotURL\r\n2017-11-01 21:34:09,790 [cuckoo.core.startup] DEBUG: \t |-- Whimoo\r\n2017-11-01 21:34:09,790 [cuckoo.core.startup] DEBUG: \t |-- Win32ProcessCreate\r\n2017-11-01 21:34:09,791 [cuckoo.core.startup] DEBUG: \t |-- WineDetect\r\n2017-11-01 21:34:09,791 [cuckoo.core.startup] DEBUG: \t |-- WinSCP\r\n2017-11-01 21:34:09,791 [cuckoo.core.startup] DEBUG: \t |-- WinSxsBot\r\n2017-11-01 21:34:09,791 [cuckoo.core.startup] DEBUG: \t |-- WMIAntiVM\r\n2017-11-01 21:34:09,791 [cuckoo.core.startup] DEBUG: \t |-- WormAllaple\r\n2017-11-01 21:34:09,791 [cuckoo.core.startup] DEBUG: \t |-- WormKolabc\r\n2017-11-01 21:34:09,791 [cuckoo.core.startup] DEBUG: \t |-- XenDetectKeys\r\n2017-11-01 21:34:09,791 [cuckoo.core.startup] DEBUG: \t |-- XtremeRAT\r\n2017-11-01 21:34:09,791 [cuckoo.core.startup] DEBUG: \t |-- Xworm\r\n2017-11-01 21:34:09,792 [cuckoo.core.startup] DEBUG: \t |-- Zegost\r\n2017-11-01 21:34:09,792 [cuckoo.core.startup] DEBUG: \t |-- ZeusMutexes\r\n2017-11-01 21:34:09,792 [cuckoo.core.startup] DEBUG: \t |-- ZeusP2P\r\n2017-11-01 21:34:09,792 [cuckoo.core.startup] DEBUG: \t |-- ZeusURL\r\n2017-11-01 21:34:09,792 [cuckoo.core.startup] DEBUG: \t `-- ZoneID\r\n2017-11-01 21:34:09,792 [cuckoo.core.startup] DEBUG: Imported \"reporting\" modules:\r\n2017-11-01 21:34:09,792 [cuckoo.core.startup] DEBUG: \t |-- ElasticSearch\r\n2017-11-01 21:34:09,792 [cuckoo.core.startup] DEBUG: \t |-- Feedback\r\n2017-11-01 21:34:09,792 [cuckoo.core.startup] DEBUG: \t |-- JsonDump\r\n2017-11-01 21:34:09,793 [cuckoo.core.startup] DEBUG: \t |-- Mattermost\r\n2017-11-01 21:34:09,793 [cuckoo.core.startup] DEBUG: \t |-- MISP\r\n2017-11-01 21:34:09,793 [cuckoo.core.startup] DEBUG: \t |-- Moloch\r\n2017-11-01 21:34:09,793 [cuckoo.core.startup] DEBUG: \t |-- MongoDB\r\n2017-11-01 21:34:09,793 [cuckoo.core.startup] DEBUG: \t |-- Notification\r\n2017-11-01 21:34:09,793 [cuckoo.core.startup] DEBUG: \t `-- SingleFile\r\n2017-11-01 21:34:09,799 [cuckoo.core.startup] DEBUG: Checking for locked tasks..\r\n2017-11-01 21:34:09,895 [cuckoo.core.startup] DEBUG: Checking for pending service tasks..\r\n2017-11-01 21:34:09,905 [cuckoo.core.startup] DEBUG: Initializing Yara...\r\n2017-11-01 21:34:09,907 [cuckoo.core.startup] DEBUG: \t |-- binaries embedded.yar\r\n2017-11-01 21:34:09,908 [cuckoo.core.startup] DEBUG: \t |-- binaries shellcodes.yar\r\n2017-11-01 21:34:09,908 [cuckoo.core.startup] DEBUG: \t |-- binaries vmdetect.yar\r\n2017-11-01 21:34:09,911 [cuckoo.core.startup] DEBUG: \t |-- scripts applocker_bypass.yar\r\n2017-11-01 21:34:09,912 [cuckoo.core.startup] DEBUG: \t |-- scripts powerfun.yar\r\n2017-11-01 21:34:09,912 [cuckoo.core.startup] DEBUG: \t |-- scripts powershell_AMSI.yar\r\n2017-11-01 21:34:09,912 [cuckoo.core.startup] DEBUG: \t |-- scripts powershell_BITS_transfer.yar\r\n2017-11-01 21:34:09,912 [cuckoo.core.startup] DEBUG: \t |-- scripts powershell_ddi_rc4.yar\r\n2017-11-01 21:34:09,912 [cuckoo.core.startup] DEBUG: \t |-- scripts powershell_dfsp.yar\r\n2017-11-01 21:34:09,912 [cuckoo.core.startup] DEBUG: \t |-- scripts powershell_di.yar\r\n2017-11-01 21:34:09,912 [cuckoo.core.startup] DEBUG: \t |-- scripts powershell_empire.yar\r\n2017-11-01 21:34:09,912 [cuckoo.core.startup] DEBUG: \t |-- scripts powershell_meterpreter.yar\r\n2017-11-01 21:34:09,913 [cuckoo.core.startup] DEBUG: \t |-- scripts powershell_txt_c2.yar\r\n2017-11-01 21:34:09,913 [cuckoo.core.startup] DEBUG: \t |-- scripts powershell_unicorn.yar\r\n2017-11-01 21:34:09,913 [cuckoo.core.startup] DEBUG: \t |-- scripts powerworm.yar\r\n2017-11-01 21:34:09,913 [cuckoo.core.startup] DEBUG: \t |-- shellcode metasploit.yar\r\n2017-11-01 21:34:09,914 [cuckoo.core.resultserver] DEBUG: ResultServer running on 192.168.56.1:2042.\r\n2017-11-01 21:34:09,915 [cuckoo.core.scheduler] INFO: Using \"virtualbox\" as machine manager\r\n2017-11-01 21:34:10,169 [cuckoo] CRITICAL: CuckooConfigurationError: Option Cuckoo is not found in configuration\r\n"},"comment":{"url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/comments/362904929","html_url":"https://github.com/cuckoosandbox/cuckoo/issues/1931#issuecomment-362904929","issue_url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/1931","id":362904929,"user":{"login":"jbremer","id":1148773,"avatar_url":"https://avatars2.githubusercontent.com/u/1148773?v=4","gravatar_id":"","url":"https://api.github.com/users/jbremer","html_url":"https://github.com/jbremer","followers_url":"https://api.github.com/users/jbremer/followers","following_url":"https://api.github.com/users/jbremer/following{/other_user}","gists_url":"https://api.github.com/users/jbremer/gists{/gist_id}","starred_url":"https://api.github.com/users/jbremer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jbremer/subscriptions","organizations_url":"https://api.github.com/users/jbremer/orgs","repos_url":"https://api.github.com/users/jbremer/repos","events_url":"https://api.github.com/users/jbremer/events{/privacy}","received_events_url":"https://api.github.com/users/jbremer/received_events","type":"User","site_admin":false},"created_at":"2018-02-04T12:57:58Z","updated_at":"2018-02-04T12:57:58Z","author_association":"MEMBER","body":"Any more questions here? Otherwise I'll be closing this issue."}}
{"actor":{"display_login":"jbremer"}}