[pull] master from kevoreilly:master

changelog.md

@@ -1,3 +1,10 @@
+### [07.07.2026]
+* Monitor updates:
+    * New hooks for SystemFunction036, SystemFunction040, SystemFunction041 (RtlGenRandom, RtlEncryptMemory, RtlDecryptMemory), Thread32First, Thread32Next, clipboard functions
+    * Enable hooks: MapFileAndCheckSumA, GetVolumeInformationA, GetVolumeInformationW & NtQueryVolumeInformationFile
+    * Crypto hook overhaul
+    * Misc fixes
+
 ### [08.06.2026]
 * Threat Discovery & Hunting Workstation Dashboard:
     * Integrated centralized dynamic multi-faceted database clustering across 12 categories (Domains, IPs, Mutexes, Dropped Files, Commands, Registry Keys, Hashes, ImpHashes, and Signatures).

lib/cuckoo/core/resultserver.py

@@ -695,7 +695,19 @@ def cancel_task(self, task_id):
             task_log_stop_force(task_id)
 
 
-class ResultServerWorkerProcess(multiprocessing.Process):
+# Use a SPAWN context (not the default fork) for the per-VM ResultServer worker
+# processes. cape monkey-patches threading with gevent, and gevent's Thread lacks
+# CPython's _reset_internal_locks; forking a running gevent-patched process makes
+# threading._after_fork raise AttributeError on every live aux Thread (Mitmdump,
+# QEMUScreenshots, ...) in the child, leaving locks unreset -> intermittent
+# deadlocks (e.g. a later sniffer subprocess fork wedging an analysis). spawn
+# starts a fresh interpreter with NO inherited threads, so _after_fork never runs
+# on them. (2026-07-02: a 12-job multiworker load test wedged a task and logged
+# _after_fork AttributeErrors for Mitmdump + QEMUScreenshots.)
+_rs_spawn_ctx = multiprocessing.get_context("spawn")
+
+
+class ResultServerWorkerProcess(_rs_spawn_ctx.Process):
     """Dedicated ResultServer process for a single VM.
 
     Each worker runs its own gevent event loop and StreamServer,
@@ -709,8 +721,10 @@ def __init__(self, ip, port, listen_ip):
         self.ip = ip
         self.port = port
         self.listen_ip = listen_ip
-        self._task_id = multiprocessing.Value("i", 0)
-        self._ready = multiprocessing.Event()
+        # Value/Event must come from the same spawn context as the Process so they
+        # are shared correctly across the spawn boundary (pickled into the child).
+        self._task_id = _rs_spawn_ctx.Value("i", 0)
+        self._ready = _rs_spawn_ctx.Event()
 
     def run(self):
         """Entry point for the worker process. Sets up a standalone